last executing test programs:

1.784024744s ago: executing program 1 (id=5516):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r3, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/26, 0x1a}, {&(0x7f00000028c0)=""/152, 0x98}], 0x7, 0x0, 0x0, 0x10000}, 0x38, 0x40)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc)
shutdown(r4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x2)

1.28152269s ago: executing program 1 (id=5524):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="4b1b020000000000140012800b0001006d616373656300003b00028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000080)={0x0}, 0x9}, 0x0)

1.185568961s ago: executing program 1 (id=5525):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r10)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x81}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r13 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
r15 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r15], 0x3c}}, 0x0)
r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r16, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

1.093539838s ago: executing program 1 (id=5527):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="7402000010000200000000000000000001000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000002000000000000000000000000000000020001060000000000000000790108007501080001086d019d093e60a8140e242c526669ca01a08e907b54be59467f2b40b43f175684fac9a44fbfaeb2969f19e482d8b58014ddae8ab29ad0586a7eb28a6f2623f5bb58f24d215b030c1ea6cf2a8b7593032b2009440f994a0159e3228b2a3dab0be61f9debd7ade1ddfdb395627bad6187f3e53a8795a9ff1655333ae4b1da2950eae8c3a9b8403cef7f1938c2472cd12bdda1948e9d17e9b61766c2eb5a53c8f46cbd376f450420464d753bedd87a9660bff97ae3da118352accd75758601d172b16350b05e87678eac5b6cc1edfb2ed9853e39213eb149ab0b87a2a34d716e63f8cf0e00221bef42229a9fd696e8bb5d5d661059480f753c1056a09a19562e18f49de29ed11e222a63f36a87e50190bb5733f16d453067f50c504272e81a368fe7fe7de35febeb36e5d8f845ac5f9123b2f130a28d56be27921792d542db997d0ff70800f93f0d3026eaa6fc962267706881f629b4bf8dbc06954196c7e33e5e67edc0a1d954"], 0x274}}, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000440)=@assoc_value={<r3=>0x0}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x1}, 0x8) (async)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a4", 0x1b}], 0x1}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x33, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x20, 0x9, 0xb}, 0x2c) (async)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
ioctl$SIOCAX25NOUID(r5, 0x89e3, &(0x7f0000000000)=0x1) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

1.090821636s ago: executing program 2 (id=5528):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x200, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xa, 0x9}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x20004055)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x20}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r6, 0x3ed9c000)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x48, 0x25, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0x1}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xde8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

1.030562629s ago: executing program 1 (id=5529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x24000840)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x4, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

962.052015ms ago: executing program 1 (id=5531):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x37, 0x3, '\\^]!${{%@:\x00\x1ac\xf9_\xcf\x9f<\n\x9b\xb8\xa4\x1c%\xdcA\xaf\x95\xabb\xf4\xdf\x9c\xe2\xc3\xec\x14\x91\xdd\x99\xd7c&\x9aTgc\xa5\xd7/\xb0'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000280)={0x2})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x37, 0x3, '\\^]!${{%@:\x00\x1ac\xf9_\xcf\x9f<\n\x9b\xb8\xa4\x1c%\xdcA\xaf\x95\xabb\xf4\xdf\x9c\xe2\xc3\xec\x14\x91\xdd\x99\xd7c&\x9aTgc\xa5\xd7/\xb0'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) (async)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000280)={0x2}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_NL_LINK_GET(r8, 0x0, 0x0) (async)

783.650936ms ago: executing program 2 (id=5533):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
unshare(0x66000080)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x100)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", '\x00', "bb00"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
ppoll(&(0x7f0000000180)=[{r7, 0x8400}, {r8, 0x80}, {r1, 0x8000}, {r9, 0x1050}, {r3, 0x260}, {r4, 0x1}, {r0, 0x100}], 0x7, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000011000000630a04ff000000004400000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000400000500c094060000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYRESDEC], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
getsockopt$SO_TIMESTAMP(r10, 0x1, 0x22, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)

663.06383ms ago: executing program 0 (id=5535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="02100705050000002cbd7000fcdbdf2502000b00070004000000000000000000010006"], 0x28}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100021040000f6fffcdbdf2500000000", @ANYRESOCT=r0, @ANYBLOB="c289060000000000240012800b00010067656e657665000014000280060005004e2200000500080001000000"], 0x44}}, 0x8044811)

603.464423ms ago: executing program 0 (id=5536):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc04c065}, 0x40000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESHEX=r0], 0x70}, 0x1, 0x0, 0x0, 0x4048053}, 0x240480c5)

602.721373ms ago: executing program 0 (id=5537):
socket$alg(0x26, 0x5, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0xac36da40a0f533b9) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r2, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81", 0x1a}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"})

502.938089ms ago: executing program 2 (id=5538):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0", 0x4a, 0x840, 0x0, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r4, 0x2) (async, rerun: 64)
ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000100)={0xc807, 0x8001, 0x3, 0x6, 0xf5, 0x23, 0x7, "0d7ee50cd22a7b1752d9334123b637c3dd70f984", "556a48faada9fd6970811a3c3dc70d88d365e934"}) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

424.615355ms ago: executing program 0 (id=5539):
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @private=0xa010102}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xce, 0xc5, "a7d7d6eba638a259b136cafcc60203ec42b5824c2594eea93793c890f60010adc72a89d17f1b9ab1484ecb40d092e6b56c8f4c6664fff4e85935e75358792e6e814d7160aa0c3a8a5e6217b86ea9a5c48cbbe0195709f942894e41f5e8135d0768b2acdbfcf2081d20b1b21992a6089804306d13e9a74c48814d523e958ff48f383c903540de445f824735dbfefd5d8fcceacbfd2238af53af64e97f7d2fef7e26054d80741e76d74dcbad5070b4d4a4993073f44f040474c5e84c85920a23d0b60b5ed26552b3f2585b"}]}, 0x104}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000400)={0x6, 0x20000000000, 0x1})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x88080000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008815}, 0x4)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000580)={0x9, <r5=>0xffffffffffffffff, 0x1})
writev(r5, &(0x7f0000000880)=[{&(0x7f00000005c0)="979019a57323b9e41e2cbffa36ecacf23f11c263eb013acef636188e46f33a002624610a65a94b5492bc26c23156cb1495ab4e5412e1cc0cea643ac271e0ea37fc87338582ec93bd008c6a70850d8680c1fe6846b8e5d01038aa70f9908f4dc416dfdaa9e13ecb7ff1e2b8172b245a9ef5da925e3f6ad495ca2ff13e1f1123ad9dc8fc708eca952d2f66e1a92df364815bcac240770a7c5098ee551b88898ae04e94049375dc1e11e588528843727272831734cf99739960194182e65d178b3144b5c13888a8f1958b8b5cc4b1e427836735e3d8a5c88f", 0xd7}, {&(0x7f00000006c0)="ab68f1bb6d2400bbd70c53f0b3cfb64745d43c126e4c03c5059c9a42ab7c3a9629970f8433d6815428f5ac3ecabe87a9e80b20444086d594eea8715eeeb60657dc13a99ad52c6f6e00418af1", 0x4c}, {&(0x7f0000000740)="14acf0db12a18a71dbf805a3951c3fa497c09b8719a351a79fce1f0b1d3f9e723d182c1acd5d5dc5104c0efab343df7bbd0c868727bc7e1564a950abc8e1dba48825a6", 0x43}, {&(0x7f00000007c0)="ff9b065cf6004bcad846c8918e88b2e549e4ecccbc72162f4be02123301955629d2fc963aa07f2aecb4582feec283547ef6dad36682636005bd0d62657cc188e8aedf1f9c8f3cd0a97db0868e0ef24a3e6c1d4d657d8a0a5f17f4a7de200328aa045ea9bb5f7ca311fd3db061a5e3779f042ba6a38d2aa3be9dade9da12a40140118e66989a1945620878d426a7b6dc4f39b1df2e9e894f7ed0a", 0x9a}], 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000009c0)={<r6=>r0, &(0x7f00000008c0)='devlink\x00', 0x80, &(0x7f0000000900)={@_ha_fsid={[0xfffffffa, 0x5]}, {0x0, 0x6, 0xd4, 0x1}}, 0x6, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x3})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x24040800)
r7 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000b00)=0xfffffffe, 0x4)
ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, 0xfffffffffffffffe)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', <r8=>0x0})
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000bc0)={0x12b8, 0x12, 0x10, 0x70bd28, 0x25dfdbfc, {0x15, 0x7, 0x9f, 0x3, {0x4e22, 0x4e23, [0x3, 0x7, 0x8, 0x2], [0x9c, 0x4, 0x7fff, 0x9], r8, [0x1, 0x1a1]}, 0x4, 0x10001}, [@INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "ae02bf0e2552ecb32c2afc5a784b7a89dc88271e1f6a9db9e84e62dd485f896a90195286a0a0daecbdacf27e3b78919c1c02b458bc8c44f3550712dc88a56d1ac3524cfddedd9457c847fe626d61526f7171499ada7a2b6d643679abb62dcb6d97269eb72fd1eac12ae783d5801979abc6be9b25d09793c40b22a846ea92a7858d10a52cf0f8169044a0a1f256c20ff1cced611c2f573de385a1ac6955b22782f16d211843aacbabff86c73eb93f0e548fe46dad7058824511ba04a980"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "fab491e850b93fc5b385f339ce38d8453126b8d74a283b67661042d950de9150bca5d8a0f9709e99f6998c95ba46373db3a5f0aa6a06bcb943ac61fdae1b40b2e57551263b61bd05b848c31976773ed086175bebecf06062951b58f71e719865558bc153f7f01dc87bb2e400c1e6"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "0d257da57ae50adc4d5ea480d244b28af9877152efb6a57bb188b9571973278abc5a51d68e95d9cf0ddd2d3e5248ba180fbf1ff0acbd118134048007a56fc4759107e961716d8af0309acb14e5dcdbee66b0f35325df24495080f912b0df2cd2335bea957e2d1944b18849429986a37d2cd1c4d0ab78775c"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "dacc68cbcc6a12a3f3ac497c048bd5d78f46e7f90bc81c5a6ddfcb3dcc9fb634eb0090270ad38413e55132a13c479976d4e8a083d3a4cc7c28b534ee790b225f49238adc1b295a585e1b4d3aaa9a928bdffd605b72532ac1127868dcd753c1bcf7f70ffac19b820ffaced5d36bce766b0c0cca0d8bfdfc0130b21df10d14d01d5b234993a3305d0a63b96f1e557b5f5b572689fd609cf5fa62352ce69790332c2706a2382026d5a08664ce"}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000)
setsockopt$sock_int(r6, 0x1, 0x1e, &(0x7f0000001f00)=0x18, 0x4)
ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f80), r3)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0xc004c8}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x4c, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000050)
socket$inet(0x2, 0x6, 0x2)
accept$netrom(r6, 0x0, &(0x7f00000020c0))
connect$inet6(r6, &(0x7f0000002100)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c6}, 0x1c)
socket(0x1d, 0x1, 0x8)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r6, 0xc008af7b, &(0x7f0000002140)={0x3, 0x88b})
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000021c0), r3)
sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x64, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, ')*\':'}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, '/\x1c-&()^}#)*'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'netdevsim\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'NLBL_UNLBL\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24044801)

423.456984ms ago: executing program 2 (id=5540):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r1, &(0x7f0000000140)={0x2a, 0x3, 0x1}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="81b6968bef7ecbcd00618ffce9b63df67331f06e592273af42c74a6114636b891ba10a01c9ac96a74c8f39388bd81ebe6533046d1a26b151b45fe5567a8b013c1f649203d421cf3a41bc45cc281c0bb596b9e79f2d4e74639ef717a0ea03d4e3c62d240f3621c8f8fe9327bcf373c38f807a5205a1198210f3b99ad3f952182b765490", 0x83}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94)

313.944717ms ago: executing program 2 (id=5541):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x5c}}, 0x4004040)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
r4 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bind$802154_raw(r5, &(0x7f00000000c0)={0x24, @none={0x0, 0x2}}, 0x14)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @broadcast}}]}, 0x28}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRESDEC=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:', @ANYRES16=r7], 0x74}}, 0x0)

203.44382ms ago: executing program 0 (id=5542):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x6, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {0x0, 0x0, 0x0, 0xe3}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2000}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

103.49116ms ago: executing program 0 (id=5543):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c)
bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xf)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r10, &(0x7f00000001c0), 0x0}, 0x20)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

0s ago: executing program 2 (id=5544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000100)=@raw=[@tail_call, @jmp={0x5, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffec9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x8}, @jmp={0x5, 0x1, 0x8, 0x5, 0x3, 0x50, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x11, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="1d0000003c000000b06a0189d53e655ba81bbd8eda0600000000", @ANYRES32=r6, @ANYRES64=r4], 0x20)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006ca231a800671100fc00000000000000000000000000790bff0200000000000000000000000000012a000006002d"], 0x9d)

kernel console output (not intermixed with test programs):

963][T21968] netlink: 'syz.0.4156': attribute type 30 has an invalid length.
[  447.751924][T21968] bond85: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  447.756416][T21968] bond85 (unregistering): Released all slaves
[  447.782335][T21972] 8021q: VLANs not supported on ip6_vti0
[  448.509346][T22017] bond105: entered promiscuous mode
[  448.512014][T22017] 8021q: adding VLAN 0 to HW filter on device bond105
[  448.518060][T22017] bridge0: Device is already in use.
[  448.522796][T22020] netlink: 'syz.0.4173': attribute type 11 has an invalid length.
[  448.695506][T22027] 8021q: adding VLAN 0 to HW filter on device bond106
[  448.721422][T22027] bond106: (slave veth51): Enslaving as an active interface with a down link
[  448.738721][T22027] 8021q: adding VLAN 0 to HW filter on device batadv2
[  448.747618][T22027] bond106: (slave batadv2): making interface the new active one
[  448.755304][T22027] batadv2: entered promiscuous mode
[  448.760022][T22027] bond106: (slave batadv2): Enslaving as an active interface with an up link
[  448.881432][T22048] bond75: (slave veth39): Releasing backup interface
[  448.887118][T22048] bond76: (slave veth41): Releasing active interface
[  448.893584][T22048] bond76: (slave veth41): the permanent HWaddr of slave - ea:ee:53:42:60:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  448.901830][T22048] bond76: (slave veth43): Releasing active interface
[  448.906750][T22048] bond76: (slave bridge85): Releasing active interface
[  448.913914][T22048] bond77: (slave geneve9): Releasing active interface
[  448.924256][T22048] bond78: (slave bridge86): Releasing active interface
[  448.931724][T22048] bond80: (slave gretap4): Releasing active interface
[  448.942350][T22048] bond83: (slave bridge88): Releasing backup interface
[  448.946060][T22048] bond84: (slave wireguard5): Releasing backup interface
[  448.949127][T22048] wireguard5: left promiscuous mode
[  448.951103][T22048] bond84: (slave wireguard6): making interface the new active one
[  448.953471][T22048] wireguard6: entered promiscuous mode
[  448.957058][T22048] bond84: (slave wireguard6): Releasing backup interface
[  448.961329][T22048] wireguard6: left promiscuous mode
[  448.967339][T22048] bond87: (slave veth45): Releasing backup interface
[  448.969862][T22048] bond87: (slave veth45): the permanent HWaddr of slave - fe:0d:00:9f:fd:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  448.980983][T22048] bond87: (slave bridge90): Releasing backup interface
[  448.986408][T22048] bond89: (slave gretap5): Releasing active interface
[  448.991654][T22048] bond93: (slave bridge96): Releasing active interface
[  448.996189][T22048] bond95: (slave veth47): Releasing backup interface
[  448.998546][T22048] bond95: (slave veth47): the permanent HWaddr of slave - ee:e3:ae:dd:5e:b1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  449.005234][T22048] bond95: (slave batadv0): Releasing backup interface
[  449.010585][T22048] bond97: (slave bridge99): Releasing backup interface
[  449.012829][T22048] bridge99: left promiscuous mode
[  449.016269][T22048] bond99: (slave bridge100): Releasing active interface
[  449.023687][T22048] bond104: (slave bridge101): Releasing backup interface
[  449.026051][T22048] bridge101: left promiscuous mode
[  449.031672][T22048] bond106: (slave veth51): Releasing active interface
[  449.034307][T22048] bond106: (slave veth51): the permanent HWaddr of slave - f2:e7:08:89:18:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  449.050380][T22048] bond106: (slave batadv2): Releasing active interface
[  449.052997][T22048] batadv2: left promiscuous mode
[  449.085694][T22059] bridge0: port 1(dummy0) entered disabled state
[  449.093596][T22059] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  449.415078][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.448584][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.451249][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.454632][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.461006][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.464607][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.467565][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.470665][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.473364][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.476309][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.479770][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.482658][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.485314][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.488087][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.493322][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.498525][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.501949][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.505212][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.508430][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.511397][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.514199][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.517558][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.520751][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.523436][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.526105][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.530022][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.532659][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.535297][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.538153][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.540769][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.543326][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.547769][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.551834][T22079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.691072][T22098] m1Ie5n: entered promiscuous mode
[  449.830490][T22112] bond107: entered allmulticast mode
[  449.832372][T22112] 8021q: adding VLAN 0 to HW filter on device bond107
[  449.902394][T21287] block nbd1: NBD_DISCONNECT
[  449.911359][T21287] block nbd1: Disconnected due to user request.
[  449.926806][T21287] block nbd1: shutting down sockets
[  450.028730][T22128] 8021q: adding VLAN 0 to HW filter on device bond85
[  450.043905][T22131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.047108][T22131] syzkaller0: entered promiscuous mode
[  450.049850][T22131] syzkaller0: entered allmulticast mode
[  450.102762][T22131] tipc: Resetting bearer <eth:syzkaller0>
[  450.106820][T22130] tipc: Resetting bearer <eth:syzkaller0>
[  450.124283][T22130] tipc: Disabling bearer <eth:syzkaller0>
[  450.434768][T22169] 8021q: adding VLAN 0 to HW filter on device bond45
[  450.727552][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.731103][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.961148][T22210] __nla_validate_parse: 92 callbacks suppressed
[  450.961159][T22210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4222'.
[  450.966051][T22210] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4222'.
[  450.972878][T22205] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4221'.
[  451.019905][T22214] validate_nla: 11 callbacks suppressed
[  451.019917][T22214] netlink: 'syz.0.4224': attribute type 1 has an invalid length.
[  451.060563][T22214] bond86: (slave vxcan1): The slave device specified does not support setting the MAC address
[  451.064239][T22214] bond86: (slave vxcan1): Error -95 calling set_mac_address
[  451.109510][T22226] bridge0: entered allmulticast mode
[  451.112570][T22226] pim6reg: left allmulticast mode
[  451.115263][T22226] bridge0: left allmulticast mode
[  451.272151][T22239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  451.406839][T22244] netlink: 'syz.1.4229': attribute type 1 has an invalid length.
[  451.431850][T22247] netlink: 9044 bytes leftover after parsing attributes in process `syz.0.4230'.
[  451.443502][T22244] bond95: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  451.480429][T22244] veth53: entered promiscuous mode
[  451.485759][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4229'.
[  451.503180][ T6713] bond95: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  451.513762][T22244] 8021q: adding VLAN 0 to HW filter on device bond95
[  451.643614][T22254] wg1: left allmulticast mode
[  451.648186][   T12] bond95: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  451.658024][T22254] macvtap3: left allmulticast mode
[  451.660038][T22254] vlan0: left allmulticast mode
[  451.661641][T22254] macvtap0: left allmulticast mode
[  451.663470][T22254] ip6tnl12: left allmulticast mode
[  451.665609][T22254] macvlan2: left promiscuous mode
[  451.667099][T22254] macvlan2: left allmulticast mode
[  451.670187][T22254] bond93: left promiscuous mode
[  451.671807][T22254] wireguard0: left promiscuous mode
[  451.673660][T22254] geneve7: left promiscuous mode
[  451.675178][T22254] geneve7: left allmulticast mode
[  451.677254][T22254] bond94: left promiscuous mode
[  451.683160][T22254] ipvlan4: left allmulticast mode
[  451.686368][T22254] bond94: left allmulticast mode
[  451.702785][T22254] veth53: left promiscuous mode
[  451.706230][ T5867] lo speed is unknown, defaulting to 1000
[  451.709075][ T5867] sqz0: Port: 1 Link DOWN
[  451.710845][ T5867] lo speed is unknown, defaulting to 1000
[  452.004796][T22277] netlink: 'syz.1.4237': attribute type 13 has an invalid length.
[  452.102026][T22286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4238'.
[  452.109985][T22280] xt_hashlimit: size too large, truncated to 1048576
[  452.126440][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4239'.
[  452.162317][T22286] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4238'.
[  452.269184][T22297] netlink: 'syz.2.4241': attribute type 30 has an invalid length.
[  452.272122][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4241'.
[  452.275919][T22297] netlink: 'syz.2.4241': attribute type 30 has an invalid length.
[  452.279818][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4241'.
[  452.516908][T22312] pim6reg: entered allmulticast mode
[  452.520062][T22314] pim6reg: left allmulticast mode
[  452.737790][T22328] netlink: 'syz.2.4252': attribute type 1 has an invalid length.
[  452.781657][T22328] bond108: (slave bridge102): Enslaving as a backup interface with an up link
[  452.786342][T22331] netlink: 'syz.1.4253': attribute type 1 has an invalid length.
[  452.793280][T22328] macvlan4: entered promiscuous mode
[  452.795478][T22328] macvlan4: entered allmulticast mode
[  452.799435][T22328] bond108: entered promiscuous mode
[  452.801234][T22328] bridge102: entered promiscuous mode
[  452.803340][T22328] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  452.807161][T22328] bond108: left promiscuous mode
[  452.809958][T22328] bridge102: left promiscuous mode
[  452.972100][T22340] netlink: 'syz.0.4255': attribute type 4 has an invalid length.
[  453.211913][T22357] netlink: 'syz.2.4260': attribute type 1 has an invalid length.
[  453.257304][T22357] 8021q: adding VLAN 0 to HW filter on device bond110
[  453.265008][T22357] bond109: (slave bond110): making interface the new active one
[  453.268555][T22357] bond109: (slave bond110): Enslaving as an active interface with an up link
[  453.304656][T22362] Cannot find del_set index 3 as target
[  453.527727][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.059918][T22384] syzkaller0: entered promiscuous mode
[  454.063507][T22384] syzkaller0: entered allmulticast mode
[  454.205938][T22396] bridge84: entered promiscuous mode
[  454.293148][T22398] vlan8: entered allmulticast mode
[  454.345671][T22404] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  454.396344][T22404] 8021q: adding VLAN 0 to HW filter on device bond87
[  454.414010][T22404] macvlan1: entered promiscuous mode
[  454.416081][T22404] macvlan1: entered allmulticast mode
[  454.419352][T22404] bond87: entered promiscuous mode
[  454.421777][T22404] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  454.427290][T22404] bond87: left promiscuous mode
[  454.650494][T22417] bridge52: entered promiscuous mode
[  454.661134][T22417] bridge52: entered allmulticast mode
[  454.726737][T22419] bond88: (slave geneve0): making interface the new active one
[  454.731578][T22419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.736309][T22419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.740085][T22419] bond88: (slave geneve0): Enslaving as an active interface with an up link
[  454.745800][ T6713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  454.751127][ T6713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  454.759108][ T6713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  454.768977][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  454.862883][T22425] bond111: invalid ARP target 0.0.0.0 specified for addition
[  454.869063][T22425] bond111: option arp_ip_target: invalid value (0)
[  454.884199][T22425] bond111 (unregistering): Released all slaves
[  455.354791][T22460] bond111 (unregistering): Released all slaves
[  455.627131][T22474] xt_hashlimit: size too large, truncated to 1048576
[  456.204786][T22508] __nla_validate_parse: 15 callbacks suppressed
[  456.204805][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'.
[  456.224660][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4292'.
[  456.232890][T22508] validate_nla: 2 callbacks suppressed
[  456.232901][T22508] netlink: 'syz.0.4292': attribute type 18 has an invalid length.
[  456.437648][T22517] netlink: 'syz.1.4293': attribute type 1 has an invalid length.
[  456.557052][T22521] lo speed is unknown, defaulting to 1000
[  456.721798][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4298'.
[  456.935062][T22543] netlink: 'syz.1.4301': attribute type 1 has an invalid length.
[  457.026586][T22543] bond99: (slave bridge53): making interface the new active one
[  457.032961][T22543] bond99: (slave bridge53): Enslaving as an active interface with an up link
[  457.053683][T22543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4301'.
[  457.070257][T22543] bond99: entered promiscuous mode
[  457.072332][T22543] bridge53: entered promiscuous mode
[  457.074571][T22543] bond99: entered allmulticast mode
[  457.076612][T22543] bridge53: entered allmulticast mode
[  457.081279][T22543] 8021q: adding VLAN 0 to HW filter on device bond99
[  457.424361][T22562] netlink: 'syz.2.4305': attribute type 1 has an invalid length.
[  457.473105][T22562] workqueue: Failed to create a rescuer kthread for wq "bond111": -EINTR
[  457.475481][T22565] syzkaller1: entered promiscuous mode
[  457.481942][T22565] syzkaller1: entered allmulticast mode
[  457.490672][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'.
[  457.592936][T22568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.595600][T22568] syzkaller0: entered promiscuous mode
[  457.597274][T22568] syzkaller0: entered allmulticast mode
[  457.602653][T22568] tipc: Resetting bearer <eth:syzkaller0>
[  457.624843][T22568] tipc: Disabling bearer <eth:syzkaller0>
[  457.877254][T22580] netlink: 'syz.0.4309': attribute type 8 has an invalid length.
[  458.073821][T22598] x_tables: duplicate underflow at hook 2
[  458.161267][T22602] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4316'.
[  458.302871][T22604] lo speed is unknown, defaulting to 1000
[  458.433783][T22614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4317'.
[  458.491762][T22617] netlink: 'syz.1.4319': attribute type 4 has an invalid length.
[  458.495932][ T5472] lo speed is unknown, defaulting to 1000
[  458.499879][ T5472] sqz0: Port: 1 Link ACTIVE
[  458.502230][ T5472] lo speed is unknown, defaulting to 1000
[  458.529186][T22619] netlink: 'syz.2.4320': attribute type 9 has an invalid length.
[  458.543056][ T5472] lo speed is unknown, defaulting to 1000
[  458.545252][ T5472] sqz0: Port: 1 Link DOWN
[  458.563355][ T5472] lo speed is unknown, defaulting to 1000
[  458.568322][T22617] netlink: 'syz.1.4319': attribute type 4 has an invalid length.
[  458.585374][ T5472] lo speed is unknown, defaulting to 1000
[  458.586266][T22619] syzkaller1: entered promiscuous mode
[  458.589109][ T5472] sqz0: Port: 1 Link ACTIVE
[  458.589547][T22619] syzkaller1: entered allmulticast mode
[  458.599359][T11385] lo speed is unknown, defaulting to 1000
[  458.718915][T22634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4323'.
[  458.750779][T22637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  459.110252][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'.
[  459.114148][T22647] netlink: 'syz.1.4326': attribute type 13 has an invalid length.
[  459.116989][T22647] netlink: 'syz.1.4326': attribute type 17 has an invalid length.
[  459.147241][T22647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  459.236615][T22668] 8021q: adding VLAN 0 to HW filter on device team0
[  459.243284][T22668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  459.446160][T22673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'.
[  459.539085][T22675] bond112: (slave vxcan1): The slave device specified does not support setting the MAC address
[  459.543789][T22675] bond112: (slave vxcan1): Error -95 calling set_mac_address
[  459.592347][T22677] bond112: (slave bridge105): Enslaving as an active interface with a down link
[  459.650480][T22679] 8021q: adding VLAN 0 to HW filter on device bond113
[  459.925715][T22700] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  459.982672][T22702] bond114: option broadcast_neighbor: invalid value (30)
[  459.985782][T22702] bond114 (unregistering): Released all slaves
[  460.007621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.660545][T22751] bond100 (unregistering): Released all slaves
[  460.784031][T22757] bond100 (unregistering): Released all slaves
[  460.908388][T22765] erspan0: left promiscuous mode
[  460.913113][T22765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  460.984846][T22771] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  460.992420][T22771] nftables ruleset with unbound set
[  461.129916][T22779] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  461.135541][T22779] syzkaller0: entered promiscuous mode
[  461.138351][T22779] syzkaller0: entered allmulticast mode
[  476.772477][T22792] validate_nla: 4 callbacks suppressed
[  476.772488][T22792] netlink: 'syz.2.4368': attribute type 13 has an invalid length.
[  476.791894][T22792] netlink: 'syz.2.4368': attribute type 17 has an invalid length.
[  476.801097][T22792] __nla_validate_parse: 11 callbacks suppressed
[  476.801109][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'.
[  476.917977][T22790] gretap0: left allmulticast mode
[  477.004281][T22801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  477.083749][T22813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4370'.
[  477.984185][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4376'.
[  478.045850][T22834] netlink: 'syz.1.4378': attribute type 30 has an invalid length.
[  478.049049][T22834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4378'.
[  478.073078][T22835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4376'.
[  478.076412][T22834] bond100: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  478.080524][T22835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4376'.
[  478.084906][T22834] bond100 (unregistering): Released all slaves
[  478.134908][T22838] netlink: 'syz.2.4379': attribute type 1 has an invalid length.
[  478.152986][T22838] bond116: entered promiscuous mode
[  478.155678][T22838] 8021q: adding VLAN 0 to HW filter on device bond116
[  478.198403][T22838] 8021q: adding VLAN 0 to HW filter on device bond116
[  478.202243][T22838] bond116: (slave wireguard7): The slave device specified does not support setting the MAC address
[  478.205397][T22838] bond116: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  478.215133][T22838] bond116: (slave wireguard7): making interface the new active one
[  478.220207][T22838] wireguard7: entered promiscuous mode
[  478.222747][T22838] bond116: (slave wireguard7): Enslaving as an active interface with an up link
[  478.232890][T22842] dvmrp0: entered allmulticast mode
[  478.240680][T22838] bond116: (slave wireguard8): The slave device specified does not support setting the MAC address
[  478.251310][T22838] bond116: (slave wireguard8): Enslaving as a backup interface with an up link
[  478.255258][T22844] netlink: 'syz.2.4379': attribute type 1 has an invalid length.
[  478.256724][T22842] macsec0: entered allmulticast mode
[  478.261821][T22842] veth1_macvtap: entered allmulticast mode
[  478.267629][T22842] macsec0: left allmulticast mode
[  478.269376][T22842] veth1_macvtap: left allmulticast mode
[  478.303825][T22848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4382'.
[  478.306546][T22848] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4382'.
[  478.309724][T22848] netlink: 'syz.1.4382': attribute type 5 has an invalid length.
[  478.312672][T22848] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4382'.
[  478.418641][T22856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.421211][T22856] syzkaller0: entered promiscuous mode
[  478.422866][T22856] syzkaller0: entered allmulticast mode
[  478.432017][T22856] tipc: Resetting bearer <eth:syzkaller0>
[  478.438881][T22857] tipc: Resetting bearer <eth:syzkaller0>
[  478.459504][T22857] tipc: Disabling bearer <eth:syzkaller0>
[  478.589981][T22863] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4386'.
[  478.843594][T22865] netlink: 'syz.1.4387': attribute type 39 has an invalid length.
[  479.005176][T22882] batman_adv: batadv0: Removing interface: gretap1
[  479.008451][T22882] batman_adv: batadv0: Removing interface: macvtap2
[  479.650653][T22891] macvlan0: left promiscuous mode
[  479.652386][T22891] macvlan0: left allmulticast mode
[  479.654129][T22891] ip6gretap8: left promiscuous mode
[  479.655935][T22891] ip6tnl11: left allmulticast mode
[  479.657986][T22891] bond73: left promiscuous mode
[  479.659585][T22891] bond74: left promiscuous mode
[  479.661466][T22891] xfrm3: left allmulticast mode
[  479.663213][T22891] dvmrp1: left promiscuous mode
[  479.664916][T22891] bridge87: left promiscuous mode
[  479.666559][T22891] bond84: left promiscuous mode
[  479.668674][T22891] ip6tnl12: left promiscuous mode
[  479.670467][T22891] gretap5: left allmulticast mode
[  479.672037][T22891] geneve10: left allmulticast mode
[  479.673758][T22891] vlan10: left promiscuous mode
[  479.675334][T22891] bond90: left promiscuous mode
[  479.676817][T22891] vlan10: left allmulticast mode
[  479.679066][T22891] bond90: left allmulticast mode
[  479.680927][T22891] bond92: left promiscuous mode
[  479.682385][T22891] bond92: left allmulticast mode
[  479.684123][T22891] vlan11: left promiscuous mode
[  479.685656][T22891] geneve1: left promiscuous mode
[  479.687792][T22891] vlan11: left allmulticast mode
[  479.689488][T22891] geneve1: left allmulticast mode
[  479.691373][T22891] macsec6: left promiscuous mode
[  479.693107][T22891] ip6gre6: left promiscuous mode
[  479.694744][T22891] ip6gre6: left allmulticast mode
[  479.696349][T22891] bond96: left promiscuous mode
[  479.698090][T22891] veth49: left promiscuous mode
[  479.699893][T22891] bond97: left promiscuous mode
[  479.701803][T22891] bond100: left promiscuous mode
[  479.703687][T22891] bond104: left promiscuous mode
[  479.705898][T22891] bond105: left promiscuous mode
[  479.708789][T22891] bond107: left allmulticast mode
[  479.712403][T22891] bond116: left promiscuous mode
[  479.714252][T22891] wireguard7: left promiscuous mode
[  480.096031][T22896] syzkaller1: tun_chr_ioctl cmd 2147767506
[  480.189712][T22899] syzkaller0: entered promiscuous mode
[  480.192919][T22899] syzkaller0: entered allmulticast mode
[  480.622110][T22920] 8021q: adding VLAN 0 to HW filter on device bond23
[  480.685884][T22924] lo speed is unknown, defaulting to 1000
[  481.015024][T22932] netlink: 'syz.0.4403': attribute type 1 has an invalid length.
[  481.050501][T22932] veth25: entered allmulticast mode
[  481.229247][T22942] netlink: 'syz.0.4406': attribute type 1 has an invalid length.
[  481.460553][T22956] netlink: 'syz.1.4410': attribute type 1 has an invalid length.
[  481.500785][T22956] bond100: (slave bridge55): making interface the new active one
[  481.504934][T22956] bond100: (slave bridge55): Enslaving as an active interface with an up link
[  481.519541][T22956] bond100: entered promiscuous mode
[  481.521481][T22956] bridge55: entered promiscuous mode
[  481.523682][T22956] bond100: entered allmulticast mode
[  481.525692][T22956] bridge55: entered allmulticast mode
[  481.529554][T22956] 8021q: adding VLAN 0 to HW filter on device bond100
[  483.671994][T22924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  483.801152][T22966] __nla_validate_parse: 7 callbacks suppressed
[  483.801172][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'.
[  483.846305][T22966] team1: entered promiscuous mode
[  483.857624][T22966] team1: entered allmulticast mode
[  483.860710][T22966] 8021q: adding VLAN 0 to HW filter on device team1
[  484.063676][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4419'.
[  484.175658][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4418'.
[  484.397235][T23000] syzkaller0: entered promiscuous mode
[  484.402131][T23000] syzkaller0: entered allmulticast mode
[  484.467934][T23007] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  484.527101][T23007] netlink: 'syz.0.4426': attribute type 4 has an invalid length.
[  484.593436][T23013] netlink: 'syz.0.4427': attribute type 1 has an invalid length.
[  484.630811][T23018] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4429'.
[  484.644227][T23013] bond92: entered promiscuous mode
[  484.646881][T23013] 8021q: adding VLAN 0 to HW filter on device bond92
[  484.667564][T23013] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4427'.
[  484.677625][T23013] netlink: 'syz.0.4427': attribute type 9 has an invalid length.
[  484.679990][T23013] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4427'.
[  484.683224][T23013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4427'.
[  484.711894][T23013] vlan9: entered allmulticast mode
[  484.713443][T23013] bond92: entered allmulticast mode
[  484.715453][T23021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  484.721347][T23018] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4429'.
[  484.723638][T23021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  484.734911][T23013] bond92: (slave bridge87): making interface the new active one
[  484.741536][T23013] bridge87: entered promiscuous mode
[  484.743676][T23013] bridge87: entered allmulticast mode
[  484.746565][T23013] bond92: (slave bridge87): Enslaving as an active interface with an up link
[  484.835073][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4432'.
[  484.838388][T23032] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.875308][T23034] bond117: Removing last arp target with arp_interval on
[  484.923914][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4435'.
[  484.999237][T23048] bond93: entered promiscuous mode
[  485.001383][T23048] 8021q: adding VLAN 0 to HW filter on device bond93
[  485.164283][T23069] netlink: 'syz.0.4442': attribute type 1 has an invalid length.
[  485.164770][T23067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.184140][T23069] bond94: entered promiscuous mode
[  485.185989][T23069] 8021q: adding VLAN 0 to HW filter on device bond94
[  485.188665][T23067] syzkaller0: entered promiscuous mode
[  485.190783][T23067] syzkaller0: entered allmulticast mode
[  485.199883][T23069] vlan0: entered allmulticast mode
[  485.201627][T23069] bond94: entered allmulticast mode
[  485.230171][T23069] bond94: (slave bridge88): making interface the new active one
[  485.233124][T23069] bridge88: entered promiscuous mode
[  485.235045][T23069] bridge88: entered allmulticast mode
[  485.238611][T23069] bond94: (slave bridge88): Enslaving as an active interface with an up link
[  485.247093][T23067] tipc: Resetting bearer <eth:syzkaller0>
[  485.270839][T23071] tipc: Resetting bearer <eth:syzkaller0>
[  485.291775][T23071] tipc: Disabling bearer <eth:syzkaller0>
[  485.299389][T23075] netlink: 'syz.0.4443': attribute type 1 has an invalid length.
[  485.317274][T23075] 8021q: adding VLAN 0 to HW filter on device bond95
[  485.333724][T23075] vlan10: entered promiscuous mode
[  485.335746][T23075] bond95: entered promiscuous mode
[  485.338162][T23075] vlan10: entered allmulticast mode
[  485.340155][T23075] bond95: entered allmulticast mode
[  485.359615][T23075] bond95: (slave bridge89): making interface the new active one
[  485.362758][T23075] bridge89: entered promiscuous mode
[  485.364956][T23075] bridge89: entered allmulticast mode
[  485.369314][T23075] bond95: (slave bridge89): Enslaving as an active interface with an up link
[  485.549705][T23086] bond118: option packets_per_slave: invalid value (809004142)
[  485.552516][T23086] bond118: option packets_per_slave: allowed values 0 - 65535
[  485.557128][T23086] bond118 (unregistering): Released all slaves
[  485.581559][T23090] macsec0: entered promiscuous mode
[  485.591156][T23090] macsec0: left promiscuous mode
[  485.594094][T23090] netlink: 'syz.1.4447': attribute type 1 has an invalid length.
[  485.895028][T23119] lo speed is unknown, defaulting to 1000
[  486.051323][T23126] dvmrp1: entered allmulticast mode
[  486.355078][ T5840] lo speed is unknown, defaulting to 1000
[  486.359634][ T5840] sqz0: Port: 1 Link DOWN
[  486.377063][ T5840] lo speed is unknown, defaulting to 1000
[  486.437003][T23129] lo speed is unknown, defaulting to 1000
[  486.766426][T23147] netlink: 'syz.2.4463': attribute type 13 has an invalid length.
[  487.184013][T23171] netlink: 'syz.2.4470': attribute type 1 has an invalid length.
[  487.238466][T23171] bond119: entered promiscuous mode
[  487.240825][T23171] 8021q: adding VLAN 0 to HW filter on device bond119
[  487.269445][T23171] 8021q: adding VLAN 0 to HW filter on device bond119
[  487.275413][T23171] bond119: (slave wireguard9): The slave device specified does not support setting the MAC address
[  487.279321][T23171] bond119: (slave wireguard9): Setting fail_over_mac to active for active-backup mode
[  487.294037][T23171] bond119: (slave wireguard9): making interface the new active one
[  487.296333][T23171] wireguard9: entered promiscuous mode
[  487.300267][T23171] bond119: (slave wireguard9): Enslaving as an active interface with an up link
[  487.436843][T23187] dummy0 (unregistering): left allmulticast mode
[  487.441173][T23187] dummy0 (unregistering): left promiscuous mode
[  487.443721][T23187] bridge0: port 1(dummy0) entered disabled state
[  487.464424][T23190] netlink: 'syz.2.4476': attribute type 1 has an invalid length.
[  487.552780][ T5699] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  487.556714][ T5699] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  487.564104][T23195] bridge_slave_1: entered allmulticast mode
[  487.566542][ T5699] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  487.572357][ T5699] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  487.658737][T23199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.720900][T23202] bond96: entered promiscuous mode
[  487.722775][T23202] 8021q: adding VLAN 0 to HW filter on device bond96
[  487.824376][T23214] lo speed is unknown, defaulting to 1000
[  487.889302][T23223] sit0: entered promiscuous mode
[  487.891159][T23223] netlink: 'syz.1.4484': attribute type 1 has an invalid length.
[  487.986578][T23217] lo speed is unknown, defaulting to 1000
[  488.349339][T23241] bond101: entered promiscuous mode
[  488.351242][T23241] 8021q: adding VLAN 0 to HW filter on device bond101
[  488.387598][T23241] macsec0: entered promiscuous mode
[  488.389311][T23241] macsec0: entered allmulticast mode
[  488.480601][T23241] 8021q: adding VLAN 0 to HW filter on device bond102
[  488.512199][T23241] bond102: entered promiscuous mode
[  488.517219][T23241] bond101: (slave bond102): Enslaving as an active interface with an up link
[  488.878719][T23284] __nla_validate_parse: 27 callbacks suppressed
[  488.878731][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'.
[  488.915137][T23282] bond121: entered allmulticast mode
[  489.264501][T23320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4505'.
[  489.517287][T23333] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4505'.
[  489.647948][T23348] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4505'.
[  489.652422][T23348] 0{X: renamed from gretap0
[  489.689578][T23348] 0{X: entered allmulticast mode
[  489.693703][T23348] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  492.263656][T23320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  492.434531][T23365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4513'.
[  492.446735][T23365] dvmrp6: entered allmulticast mode
[  492.580230][T23374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4516'.
[  492.599820][T23375] bridge56: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  492.617627][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'.
[  492.690497][T23382] 8021q: VLANs not supported on ip_vti0
[  492.752483][T23392] netlink: 9976 bytes leftover after parsing attributes in process `syz.1.4521'.
[  492.755854][T23392] openvswitch: netlink: Flow key attr not present in new flow.
[  492.777017][T23395] validate_nla: 4 callbacks suppressed
[  492.777059][T23395] netlink: 'syz.0.4520': attribute type 2 has an invalid length.
[  492.797769][T23395] netlink: 'syz.0.4520': attribute type 1 has an invalid length.
[  492.825407][T23400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.849331][T23398] bond122: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  492.856836][T23398] bond122 (unregistering): Released all slaves
[  492.878718][T23405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4522'.
[  492.914096][T23405] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  492.928010][T23398] netlink: 'syz.2.4522': attribute type 30 has an invalid length.
[  493.000783][T23412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.003274][T23412] syzkaller0: entered promiscuous mode
[  493.004977][T23412] syzkaller0: entered allmulticast mode
[  493.026540][T23411] tipc: Resetting bearer <eth:syzkaller0>
[  493.058379][T23411] tipc: Disabling bearer <eth:syzkaller0>
[  493.073898][T23416] syzkaller1: entered promiscuous mode
[  493.075332][T23418] netlink: 'syz.1.4526': attribute type 10 has an invalid length.
[  493.075945][T23416] syzkaller1: entered allmulticast mode
[  493.148640][T23422] veth0: entered promiscuous mode
[  493.177892][T23416] bond97: option miimon: invalid value (18446744073709551607)
[  493.180595][T23416] bond97: option miimon: allowed values 0 - 2147483647
[  493.184880][T23416] bond97 (unregistering): Released all slaves
[  493.411418][T23417] veth0: left promiscuous mode
[  493.474410][T23435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4529'.
[  493.501045][T23437] syzkaller0: entered promiscuous mode
[  493.504298][T23437] syzkaller0: entered allmulticast mode
[  494.025951][T23478] syzkaller0: entered promiscuous mode
[  494.028303][T23478] syzkaller0: entered allmulticast mode
[  494.387500][T23480] netlink: 'syz.0.4541': attribute type 11 has an invalid length.
[  494.759376][T23487] netlink: 'syz.2.4543': attribute type 1 has an invalid length.
[  496.964151][T23487] 8021q: adding VLAN 0 to HW filter on device bond123
[  496.985708][T23489] bond123: (slave bridge108): making interface the new active one
[  496.990322][T23489] bond123: (slave bridge108): Enslaving as an active interface with an up link
[  497.051238][T23492] __nla_validate_parse: 4 callbacks suppressed
[  497.051256][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'.
[  497.084998][T23496] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  497.113641][T23492] bond97: entered allmulticast mode
[  497.120528][T23494] bond119: entered allmulticast mode
[  497.139342][T23494] wireguard9: entered allmulticast mode
[  497.146389][T23494] ip6gre0: entered allmulticast mode
[  497.174601][T23496] lo speed is unknown, defaulting to 1000
[  497.592987][T23522] veth0_macvtap: Caught tx_queue_len zero misconfig
[  497.696718][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'.
[  497.745796][T23527] syzkaller0: entered promiscuous mode
[  497.747948][T23527] syzkaller0: entered allmulticast mode
[  498.129646][T23543] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4556'.
[  498.132652][T23544] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4556'.
[  498.135331][T23543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4556'.
[  498.162771][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'.
[  498.175510][T23536] netlink: 'syz.2.4554': attribute type 10 has an invalid length.
[  498.236319][T23549] netlink: 'syz.1.4558': attribute type 1 has an invalid length.
[  498.236927][T23550] netlink: 'syz.1.4558': attribute type 1 has an invalid length.
[  498.265825][T23549] 8021q: adding VLAN 0 to HW filter on device bond103
[  498.283117][T23550] vlan3: entered allmulticast mode
[  498.284799][T23550] bond103: entered allmulticast mode
[  498.298455][T23549] bond103: (slave geneve8): making interface the new active one
[  498.300987][T23549] geneve8: entered allmulticast mode
[  498.305645][T23549] bond103: (slave geneve8): Enslaving as an active interface with an up link
[  498.308797][ T5699] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.311989][ T5699] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.318033][ T5699] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.323437][ T5699] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.401238][T23556] team0: Caught tx_queue_len zero misconfig
[  498.480264][T23561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4561'.
[  498.566439][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'.
[  498.735392][T23571] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  498.852938][T23581] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  498.904634][T23590] lo speed is unknown, defaulting to 1000
[  498.963922][T23595] x_tables: ip_tables: icmp match: only valid for protocol 1
[  499.104154][T23604] 8021q: adding VLAN 0 to HW filter on device bond124
[  499.136167][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'.
[  499.291397][T23607] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y
[  499.291397][T23607] 3UH5rBn\'
[  499.300220][T23607] CPU: 1 UID: 0 PID: 23607 Comm: syz.2.4571 Not tainted syzkaller #0 PREEMPT(full) 
[  499.300249][T23607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  499.300256][T23607] Call Trace:
[  499.300261][T23607]  <TASK>
[  499.300265][T23607]  dump_stack_lvl+0xe8/0x150
[  499.300284][T23607]  sysfs_warn_dup+0x8e/0xa0
[  499.300297][T23607]  sysfs_do_create_link_sd+0xc0/0x110
[  499.300311][T23607]  device_add_class_symlinks+0x1cf/0x240
[  499.300324][T23607]  device_add+0x475/0xb70
[  499.300336][T23607]  wiphy_register+0x1dc5/0x2dc0
[  499.300355][T23607]  ? __pfx_wiphy_register+0x10/0x10
[  499.300366][T23607]  ? __pfx_netdev_run_todo+0x10/0x10
[  499.300377][T23607]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  499.300394][T23607]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  499.300406][T23607]  ieee80211_register_hw+0x3d82/0x4a70
[  499.300424][T23607]  ? ieee80211_register_hw+0x1911/0x4a70
[  499.300446][T23607]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  499.300459][T23607]  ? __asan_memset+0x22/0x50
[  499.300471][T23607]  ? __hrtimer_setup+0x1b7/0x260
[  499.300506][T23607]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  499.300524][T23607]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  499.300550][T23607]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  499.300563][T23607]  ? kstrndup+0xbf/0x160
[  499.300577][T23607]  hwsim_new_radio_nl+0xf6a/0x1c00
[  499.300600][T23607]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  499.300616][T23607]  ? rcu_is_watching+0x15/0xb0
[  499.300629][T23607]  ? trace_kmalloc+0x2a/0xf0
[  499.300644][T23607]  ? __nla_parse+0x40/0x60
[  499.300655][T23607]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  499.300665][T23607]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  499.300679][T23607]  genl_family_rcv_msg_doit+0x22a/0x330
[  499.300692][T23607]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  499.300708][T23607]  ? bpf_lsm_capable+0x9/0x20
[  499.300717][T23607]  ? security_capable+0x7e/0x2c0
[  499.300732][T23607]  genl_rcv_msg+0x61c/0x7a0
[  499.300744][T23607]  ? __pfx_genl_rcv_msg+0x10/0x10
[  499.300753][T23607]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  499.300772][T23607]  netlink_rcv_skb+0x232/0x4b0
[  499.300785][T23607]  ? __pfx_genl_rcv_msg+0x10/0x10
[  499.300795][T23607]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  499.300814][T23607]  ? down_read+0x270/0x2e0
[  499.300826][T23607]  ? genl_rcv+0xd/0x40
[  499.300836][T23607]  genl_rcv+0x28/0x40
[  499.300844][T23607]  netlink_unicast+0x75c/0x8e0
[  499.300860][T23607]  netlink_sendmsg+0x813/0xb40
[  499.300877][T23607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  499.300891][T23607]  ? aa_sock_msg_perm+0xf1/0x1b0
[  499.300904][T23607]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  499.300918][T23607]  ____sys_sendmsg+0x972/0x9f0
[  499.300932][T23607]  ? __might_fault+0xaf/0x130
[  499.300946][T23607]  ? __pfx_____sys_sendmsg+0x10/0x10
[  499.300963][T23607]  ? import_iovec+0x73/0xa0
[  499.300974][T23607]  ___sys_sendmsg+0x2a5/0x360
[  499.300987][T23607]  ? __lock_acquire+0x6b5/0x2cf0
[  499.301001][T23607]  ? __pfx____sys_sendmsg+0x10/0x10
[  499.301017][T23607]  ? futex_wake+0x4ac/0x580
[  499.301038][T23607]  ? __fget_files+0x2a/0x420
[  499.301048][T23607]  ? __fget_files+0x3a0/0x420
[  499.301064][T23607]  __x64_sys_sendmsg+0x1bd/0x2a0
[  499.301078][T23607]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  499.301095][T23607]  ? rcu_is_watching+0x15/0xb0
[  499.301112][T23607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.301122][T23607]  do_syscall_64+0x15f/0xf80
[  499.301132][T23607]  ? trace_irq_disable+0x3b/0x140
[  499.301141][T23607]  ? clear_bhb_loop+0x40/0x90
[  499.301152][T23607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.301161][T23607] RIP: 0033:0x7f1d94d9cdd9
[  499.301171][T23607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.301186][T23607] RSP: 002b:00007f1d95be1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.301197][T23607] RAX: ffffffffffffffda RBX: 00007f1d95015fa0 RCX: 00007f1d94d9cdd9
[  499.301203][T23607] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  499.301209][T23607] RBP: 00007f1d94e32d69 R08: 0000000000000000 R09: 0000000000000000
[  499.301215][T23607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  499.301221][T23607] R13: 00007f1d95016038 R14: 00007f1d95015fa0 R15: 00007fff877180e8
[  499.301236][T23607]  </TASK>
[  499.505330][T23621] netlink: 'syz.0.4574': attribute type 1 has an invalid length.
[  499.528816][T23621] 8021q: adding VLAN 0 to HW filter on device bond98
[  499.639590][T23630] syzkaller0: entered promiscuous mode
[  499.641667][T23630] syzkaller0: entered allmulticast mode
[  499.735259][T23635] sctp: [Deprecated]: syz.1.4579 (pid 23635) Use of struct sctp_assoc_value in delayed_ack socket option.
[  499.735259][T23635] Use struct sctp_sack_info instead
[  499.867948][ T8477] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.871096][ T8477] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.875359][ T8477] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.914540][ T8477] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.043927][T23656] netlink: 'syz.2.4583': attribute type 10 has an invalid length.
[  500.106314][T23659] veth0: entered promiscuous mode
[  500.111716][T23659] bond0: entered promiscuous mode
[  500.189953][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4587'.
[  500.279989][T23665] lo speed is unknown, defaulting to 1000
[  500.302721][T23655] bond0: left promiscuous mode
[  500.305063][T23655] veth0: left promiscuous mode
[  500.419358][T23674] can: request_module (can-proto-0) failed.
[  500.562256][T23682] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  500.682173][T23686] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  500.747707][T23686] bond125: (slave vxcan1): The slave device specified does not support setting the MAC address
[  500.751225][T23686] bond125: (slave vxcan1): Error -95 calling set_mac_address
[  500.865810][T23686] bond125: (slave bridge109): Enslaving as an active interface with a down link
[  500.993842][T23704] syzkaller1: entered promiscuous mode
[  500.995564][T23704] syzkaller1: entered allmulticast mode
[  501.114208][T23710] netlink: 'syz.2.4598': attribute type 10 has an invalid length.
[  501.160409][T23712] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  501.172701][T23716] veth0: entered promiscuous mode
[  501.181017][T23716] bond0: entered promiscuous mode
[  501.341350][T23709] bond0: left promiscuous mode
[  501.343100][T23709] veth0: left promiscuous mode
[  501.488923][T23740] x_tables: duplicate underflow at hook 1
[  501.736815][T23742] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  504.010214][T23748] syzkaller0: entered promiscuous mode
[  504.016645][T23748] syzkaller0: entered allmulticast mode
[  504.028683][T23748] __nla_validate_parse: 21 callbacks suppressed
[  504.028698][T23748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4607'.
[  504.106740][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'.
[  504.197875][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'.
[  504.272189][T23763] netlink: 'syz.1.4610': attribute type 58 has an invalid length.
[  504.275108][T23763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4610'.
[  504.346581][T23766] netlink: 'syz.0.4612': attribute type 16 has an invalid length.
[  504.350103][T23766] netlink: 'syz.0.4612': attribute type 17 has an invalid length.
[  504.395079][T23766] 8021q: adding VLAN 0 to HW filter on device `
[  504.402469][T23766] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  504.421082][T23772] bond108: (slave bridge102): Releasing backup interface
[  504.429021][T23772] bond109: (slave bond110): Releasing backup interface
[  504.433862][T23772] bond112: (slave bridge105): Releasing active interface
[  504.443287][T23772] bond116: (slave wireguard7): Releasing backup interface
[  504.445827][T23772] bond116: (slave wireguard8): making interface the new active one
[  504.455312][T23772] bond116: (slave wireguard8): Releasing backup interface
[  504.464142][T23772] bond119: (slave wireguard9): Releasing backup interface
[  504.467290][T23772] wireguard9: left promiscuous mode
[  504.469983][T23772] wireguard9: left allmulticast mode
[  504.485125][T23772] bond123: (slave bridge108): Releasing active interface
[  504.497170][T23772] bond125: (slave bridge109): Releasing active interface
[  504.591862][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4617'.
[  504.621224][T23781] 8021q: adding VLAN 0 to HW filter on device bond126
[  504.628118][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4617'.
[  504.638951][T23781] bond126 (unregistering): Released all slaves
[  504.676489][T23788] @0: renamed from bond_slave_1
[  504.745614][T23791] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  504.840867][T23801] bond126: Unable to set peer notification delay as MII monitoring is disabled
[  504.849154][T23801] bond126 (unregistering): Released all slaves
[  504.960038][T23815] bond4: (slave geneve0): Releasing active interface
[  504.973444][T23815] bond4: Destroying bond
[  504.984163][T23815] bond4 (unregistering): Released all slaves
[  505.136783][T23821] netlink: 'syz.2.4628': attribute type 3 has an invalid length.
[  505.145095][T23821] netlink: 'syz.2.4628': attribute type 1 has an invalid length.
[  505.150074][T23821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4628'.
[  505.509848][T23842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.553084][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4635'.
[  505.559046][T23851] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  505.572734][T23851] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  505.589161][T23851] bond0: Caught tx_queue_len zero misconfig
[  505.614919][T23855] netlink: 'syz.1.4637': attribute type 5 has an invalid length.
[  505.680096][T23857] syzkaller0: entered promiscuous mode
[  505.686204][T23857] syzkaller0: entered allmulticast mode
[  505.856089][T23865] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  505.951700][T23877] macvtap3: entered promiscuous mode
[  505.953654][T23877] macvtap3: entered allmulticast mode
[  505.955348][T23877] 1{X: entered allmulticast mode
[  505.966053][T23877] macvtap4: entered promiscuous mode
[  505.972887][T23877] macvtap4: entered allmulticast mode
[  506.009994][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.012803][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.131554][T23883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4645'.
[  506.199028][T23905] netlink: 'syz.2.4650': attribute type 1 has an invalid length.
[  506.235103][T23910] netlink: 'syz.2.4651': attribute type 39 has an invalid length.
[  506.245415][T23902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4649'.
[  506.315037][T23912] syzkaller0: entered promiscuous mode
[  506.316692][T23912] syzkaller0: entered allmulticast mode
[  506.331998][T23914] bond_slave_0: entered promiscuous mode
[  506.334373][T23914] bond_slave_0: entered allmulticast mode
[  506.338025][T23914] bond0: (slave bond_slave_0): Enslaving as an active interface with a down link
[  506.372313][T23914] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved
[  506.483652][T23922] netlink: 'syz.0.4655': attribute type 3 has an invalid length.
[  506.500197][T23922] nbd: nbd0 already in use
[  506.507993][T23922] block nbd0: NBD_DISCONNECT
[  506.510715][T23922] block nbd0: Send disconnect failed -110
[  506.515140][T23922] block nbd0: shutting down sockets
[  506.612801][T23929] netlink: 'syz.2.4658': attribute type 13 has an invalid length.
[  506.635884][T23926] netlink: zone id is out of range
[  506.639401][T23926] netlink: zone id is out of range
[  506.641629][T23929] gretap0: refused to change device tx_queue_len
[  506.644319][T23929] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  506.869481][T23953] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  506.963751][T23957] 8021q: adding VLAN 0 to HW filter on device bond100
[  506.969556][T23957] bond99: (slave bond100): making interface the new active one
[  506.972425][T23957] bond99: (slave bond100): Enslaving as an active interface with an up link
[  507.078256][T23962] 8021q: adding VLAN 0 to HW filter on device bond4
[  507.125008][T23964] tipc: Resetting bearer <eth:syzkaller0>
[  507.164419][T23964] 8021q: adding VLAN 0 to HW filter on device bond101
[  507.193325][T23964] bond101: (slave gretap7): making interface the new active one
[  507.202069][T23964] bond101: (slave gretap7): Enslaving as an active interface with an up link
[  507.564111][T24000] 0{X: left allmulticast mode
[  507.712231][T24014] bond104: (slave bond_slave_1): Device is not bonding slave
[  507.716043][T24014] bond104: option active_slave: invalid value (bond_slave_1)
[  507.719955][T24014] bond104 (unregistering): Released all slaves
[  507.913031][T24025] veth0: entered promiscuous mode
[  508.104194][T24023] veth0: left promiscuous mode
[  508.444875][T24051] lo speed is unknown, defaulting to 1000
[  508.495189][T24060] tipc: Resetting bearer <eth:syzkaller0>
[  509.112982][T24086] lo speed is unknown, defaulting to 1000
[  509.282696][T24097] tipc: Invalid UDP bearer configuration
[  509.282726][T24097] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  509.450000][T24108] validate_nla: 9 callbacks suppressed
[  509.450012][T24108] netlink: 'syz.2.4701': attribute type 1 has an invalid length.
[  509.471903][T24108] 8021q: adding VLAN 0 to HW filter on device bond126
[  509.629067][T24117] netlink: 'syz.1.4703': attribute type 1 has an invalid length.
[  509.690885][T24117] bond104: entered promiscuous mode
[  509.693209][T24117] 8021q: adding VLAN 0 to HW filter on device bond104
[  509.699551][T24120] netlink: 'syz.0.4704': attribute type 4 has an invalid length.
[  509.703107][T24120] __nla_validate_parse: 11 callbacks suppressed
[  509.703118][T24120] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4704'.
[  509.728202][T24123] bond104: (slave veth57): making interface the new active one
[  509.730986][T24123] veth57: entered promiscuous mode
[  509.733484][T24123] bond104: (slave veth57): Enslaving as an active interface with an up link
[  509.906254][T24129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4708'.
[  509.911176][T24130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4708'.
[  510.049790][T24142] lo speed is unknown, defaulting to 1000
[  510.052784][ T5867] lo speed is unknown, defaulting to 1000
[  510.055072][ T5867] sqz0: Port: 1 Link ACTIVE
[  510.056495][ T5867] lo speed is unknown, defaulting to 1000
[  510.141260][T24151] syzkaller1: entered promiscuous mode
[  510.143656][T24151] syzkaller1: entered allmulticast mode
[  510.286043][T24157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  510.309826][T24157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  510.321645][T24159] netlink: 'syz.1.4715': attribute type 1 has an invalid length.
[  510.366217][T24159] 8021q: adding VLAN 0 to HW filter on device bond105
[  510.436127][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'.
[  510.563249][T24176] netlink: 'syz.1.4718': attribute type 1 has an invalid length.
[  510.666201][T24173] syzkaller1: entered promiscuous mode
[  510.668281][T24173] syzkaller1: entered allmulticast mode
[  510.671504][T24178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4718'.
[  510.719197][T24178] 8021q: adding VLAN 0 to HW filter on device bond106
[  510.813951][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4720'.
[  510.848467][T24181] 8021q: adding VLAN 0 to HW filter on device bond107
[  510.858929][T24181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4719'.
[  510.903574][T24185] lo speed is unknown, defaulting to 1000
[  510.946758][T24192] netlink: 211776 bytes leftover after parsing attributes in process `syz.1.4721'.
[  511.073331][T24195] netlink: 'syz.1.4722': attribute type 1 has an invalid length.
[  511.375035][T24204] lo speed is unknown, defaulting to 1000
[  511.381024][ T5867] lo speed is unknown, defaulting to 1000
[  511.383152][ T5867] sqz0: Port: 1 Link DOWN
[  511.385307][ T5867] lo speed is unknown, defaulting to 1000
[  511.572381][T24220] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4729'.
[  511.575196][T24220] netlink: 'syz.2.4729': attribute type 2 has an invalid length.
[  511.609633][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'.
[  511.637940][T24225] dvmrp0: left allmulticast mode
[  511.768964][T24229] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  512.632971][T24282] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  512.673820][T24282] lo speed is unknown, defaulting to 1000
[  512.708147][T24287] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  512.719953][T24287] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  512.781026][T24289] netlink: 'syz.1.4745': attribute type 1 has an invalid length.
[  512.851906][T24289] 8021q: adding VLAN 0 to HW filter on device bond110
[  513.011636][T24286] 8021q: adding VLAN 0 to HW filter on device team0
[  513.023449][T24286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  513.125615][T24303] netlink: 'syz.0.4749': attribute type 1 has an invalid length.
[  513.236148][T24307] : renamed from bond_slave_0 (while UP)
[  513.346801][T24316] netlink: 'syz.1.4754': attribute type 1 has an invalid length.
[  513.383373][T24316] 8021q: adding VLAN 0 to HW filter on device bond111
[  513.398817][T24316] 8021q: adding VLAN 0 to HW filter on device bond111
[  513.414101][T24316] bond111: (slave geneve0): making interface the new active one
[  513.419652][T24316] bond111: (slave geneve0): Enslaving as an active interface with an up link
[  513.423686][ T6713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  513.426524][ T6713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  513.436603][ T6713] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  513.440021][ T6713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  513.859017][T24324] workqueue: Failed to create a rescuer kthread for wq "bond127": -EINTR
[  513.963296][T24330] veth53: entered promiscuous mode
[  514.080985][T24332] `: renamed from team0 (while UP)
[  514.459370][T24351] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  514.468008][T24351] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  514.651897][T24360] validate_nla: 4 callbacks suppressed
[  514.651916][T24360] netlink: 'syz.0.4765': attribute type 1 has an invalid length.
[  514.826328][T24363] netlink: 'syz.0.4766': attribute type 16 has an invalid length.
[  514.832326][T24363] netlink: 'syz.0.4766': attribute type 17 has an invalid length.
[  514.934355][T24368] __nla_validate_parse: 10 callbacks suppressed
[  514.934373][T24368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4768'.
[  514.941246][T24368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4768'.
[  514.986323][T24370] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4769'.
[  515.005441][T24370] syzkaller1: entered promiscuous mode
[  515.008062][T24370] syzkaller1: entered allmulticast mode
[  515.162516][T24372] netlink: 'syz.0.4770': attribute type 1 has an invalid length.
[  515.478314][T24393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4778'.
[  515.509343][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4777'.
[  515.564996][T24402] xt_hashlimit: size too large, truncated to 1048576
[  515.565079][T24401] xt_hashlimit: size too large, truncated to 1048576
[  515.570331][T24395] lo speed is unknown, defaulting to 1000
[  515.577024][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4777'.
[  515.780688][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4781'.
[  515.808681][T24409] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4781'.
[  515.985999][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4782'.
[  516.142758][T24427] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4784'.
[  516.160704][T24427] netlink: 'syz.1.4784': attribute type 1 has an invalid length.
[  516.174430][T24427] 8021q: adding VLAN 0 to HW filter on device bond113
[  516.549900][T24435] lo speed is unknown, defaulting to 1000
[  516.958874][T24473] ip6gretap8: default qdisc (pfifo_fast) fail, fallback to noqueue
[  517.014085][T24457] lo speed is unknown, defaulting to 1000
[  517.341504][T24478] lo speed is unknown, defaulting to 1000
[  518.553664][T24517] netlink: 'syz.1.4805': attribute type 1 has an invalid length.
[  518.558728][T24517] workqueue: Failed to create a rescuer kthread for wq "bond114": -EINTR
[  518.654018][T24530] veth55: entered promiscuous mode
[  518.690873][T24534] netlink: 'syz.2.4809': attribute type 1 has an invalid length.
[  518.741768][ T6713] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  518.745498][ T6713] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  518.750522][ T6713] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  518.753803][ T6713] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  518.760660][T24534] 8021q: adding VLAN 0 to HW filter on device bond127
[  518.961449][T24539] lo speed is unknown, defaulting to 1000
[  519.223116][T24553] netlink: 'syz.0.4813': attribute type 4 has an invalid length.
[  519.236756][T24553] netlink: 'syz.0.4813': attribute type 4 has an invalid length.
[  519.294675][T24558] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  519.297156][T24558] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  519.597811][T24576] ipvlan5: entered allmulticast mode
[  519.599496][T24576] syz_tun: entered allmulticast mode
[  519.603063][T24576] syz_tun: port 1(ipvlan5) entered blocking state
[  519.605900][T24576] syz_tun: port 1(ipvlan5) entered disabled state
[  519.628811][T24578] netlink: 'syz.0.4820': attribute type 1 has an invalid length.
[  519.642123][T24578] bond103: entered promiscuous mode
[  519.643979][T24578] 8021q: adding VLAN 0 to HW filter on device bond103
[  519.654090][T24578] 8021q: adding VLAN 0 to HW filter on device bond103
[  519.656374][T24578] bond103: (slave ip6gre5): The slave device specified does not support setting the MAC address
[  519.660687][T24578] bond103: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode
[  519.668943][T24578] bond103: (slave ip6gre5): making interface the new active one
[  519.671679][T24578] ip6gre5: entered promiscuous mode
[  519.675677][T24578] bond103: (slave ip6gre5): Enslaving as an active interface with an up link
[  520.076409][T24607] __nla_validate_parse: 13 callbacks suppressed
[  520.076426][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4828'.
[  520.096476][T24607] team0: entered promiscuous mode
[  520.098218][T24607] team0: entered allmulticast mode
[  520.100034][T24607] 8021q: adding VLAN 0 to HW filter on device team0
[  520.142666][T24610] netlink: 'syz.2.4829': attribute type 5 has an invalid length.
[  520.146630][T24610] syzkaller0: entered promiscuous mode
[  520.148526][T24610] syzkaller0: entered allmulticast mode
[  520.195339][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4830'.
[  520.198473][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4830'.
[  520.199346][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4830'.
[  520.313613][T24619] netlink: 'syz.1.4831': attribute type 1 has an invalid length.
[  520.466492][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4834'.
[  520.566148][T24637] netlink: 'syz.1.4835': attribute type 1 has an invalid length.
[  520.642715][T24635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4835'.
[  520.722040][T24648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4837'.
[  520.722362][T24647] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4837'.
[  520.732356][T24648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4837'.
[  520.733615][T24647] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4837'.
[  521.019857][T24667] syzkaller0: entered promiscuous mode
[  521.021648][T24667] syzkaller0: entered allmulticast mode
[  521.255500][T24678] netlink: 'syz.0.4844': attribute type 39 has an invalid length.
[  521.297338][T24683] dvmrp0: entered allmulticast mode
[  521.324168][T24688] netlink: 'syz.2.4846': attribute type 1 has an invalid length.
[  521.381344][T24688] bond128: entered promiscuous mode
[  521.383916][T24688] 8021q: adding VLAN 0 to HW filter on device bond128
[  521.406083][T24690] lo speed is unknown, defaulting to 1000
[  521.447175][T24688] ipvlan0: entered allmulticast mode
[  521.455793][T24688] bond128: entered allmulticast mode
[  521.542318][T24688] bond128: (slave bridge110): making interface the new active one
[  521.564883][T24688] bridge110: entered promiscuous mode
[  521.567191][T24688] bridge110: entered allmulticast mode
[  521.584431][T24688] bond128: (slave bridge110): Enslaving as an active interface with an up link
[  522.089509][T24750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.092378][T24750] syzkaller0: entered promiscuous mode
[  522.094402][T24750] syzkaller0: entered allmulticast mode
[  522.120096][T24750] tipc: Resetting bearer <eth:syzkaller0>
[  522.183846][T24752] syzkaller0: entered promiscuous mode
[  522.185715][T24752] syzkaller0: entered allmulticast mode
[  522.191896][T24752] syzkaller0: left promiscuous mode
[  522.193900][T24752] syzkaller0: left allmulticast mode
[  522.433856][T24749] tipc: Resetting bearer <eth:syzkaller0>
[  522.457971][T24749] tipc: Disabling bearer <eth:syzkaller0>
[  522.711411][T24780] xt_hashlimit: size too large, truncated to 1048576
[  523.425649][T24836] netlink: 'syz.0.4880': attribute type 11 has an invalid length.
[  523.752371][T24863] netlink: 'syz.0.4886': attribute type 11 has an invalid length.
[  523.918166][T24883] netlink: 'syz.0.4891': attribute type 10 has an invalid length.
[  524.052276][T24891] netlink: 'syz.2.4895': attribute type 29 has an invalid length.
[  524.285672][T24914] netlink: 'syz.0.4899': attribute type 20 has an invalid length.
[  524.483729][T24924] bond114: option all_slaves_active: invalid value (5)
[  524.487151][T24924] bond114 (unregistering): Released all slaves
[  524.522322][T24927] veth31: entered promiscuous mode
[  524.602975][T24932] IPv6: NLM_F_CREATE should be specified when creating new route
[  524.608348][T24932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  524.610970][T24932] IPv6: NLM_F_CREATE should be set when creating new route
[  524.613583][T24932] IPv6: NLM_F_CREATE should be set when creating new route
[  524.617245][T24932] IPv6: NLM_F_CREATE should be set when creating new route
[  524.691770][T24939] netlink: 'syz.0.4911': attribute type 1 has an invalid length.
[  524.722201][T24939] 8021q: adding VLAN 0 to HW filter on device bond104
[  524.743850][T24939] vlan11: entered allmulticast mode
[  524.745927][T24939] bond104: entered allmulticast mode
[  524.900393][T24951] xfrm0: entered promiscuous mode
[  524.901967][T24951] xfrm0: entered allmulticast mode
[  524.910283][T24948] lo speed is unknown, defaulting to 1000
[  525.295600][T24962] __nla_validate_parse: 143 callbacks suppressed
[  525.295613][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4916'.
[  525.404179][T24972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4918'.
[  525.539094][T24974] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4919'.
[  525.552481][T24974] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4919'.
[  525.557045][T24974] 0{X: renamed from 31{X
[  525.566409][T24974] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  525.651367][T24976] netlink: 'syz.0.4920': attribute type 1 has an invalid length.
[  525.657915][T24976] netlink: 'syz.0.4920': attribute type 10 has an invalid length.
[  525.669491][T24976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4920'.
[  526.014748][T24988] lo speed is unknown, defaulting to 1000
[  526.239898][T25006] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4927'.
[  526.329114][T25011] netlink: 'syz.1.4929': attribute type 1 has an invalid length.
[  526.468852][T25026] block nbd2: not configured, cannot reconfigure
[  526.718826][T25036] syzkaller1: tun_chr_ioctl cmd 3223345190
[  526.723542][T25036] syzkaller1: tun_chr_ioctl cmd 1074025677
[  526.725305][T25036] syzkaller1: Linktype set failed because interface is up
[  526.763813][T25038] netlink: 'syz.0.4934': attribute type 1 has an invalid length.
[  526.785424][T25038] 8021q: adding VLAN 0 to HW filter on device bond105
[  526.894847][T25045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4936'.
[  526.900169][T25041] lo speed is unknown, defaulting to 1000
[  526.902279][T25045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4936'.
[  527.092840][T25053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4938'.
[  527.163562][T25055] netlink: 'syz.2.4939': attribute type 1 has an invalid length.
[  527.218743][T25055] bond129: (slave vxcan1): The slave device specified does not support setting the MAC address
[  527.222695][T25055] bond129: (slave vxcan1): Error -95 calling set_mac_address
[  527.278143][T25057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4939'.
[  527.572442][T25060] macvtap0: entered promiscuous mode
[  527.574739][T25060] macvtap0: entered allmulticast mode
[  527.691651][T25065] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  527.696663][ T5840] lo speed is unknown, defaulting to 1000
[  527.699798][ T5840] sqz0: Port: 1 Link ACTIVE
[  527.701271][ T5840] lo speed is unknown, defaulting to 1000
[  527.773216][T25070] netlink: 'syz.1.4942': attribute type 1 has an invalid length.
[  527.815408][T25070] bond114: entered promiscuous mode
[  527.818302][T25070] 8021q: adding VLAN 0 to HW filter on device bond114
[  527.836090][T25073] IPv6: sit9: Disabled Multicast RS
[  527.853161][T25070] ipvlan5: entered allmulticast mode
[  527.855168][T25070] bond114: entered allmulticast mode
[  527.866976][T25070] ipvlan6: entered allmulticast mode
[  527.885836][T25070] bond114: (slave bridge58): making interface the new active one
[  527.888839][T25070] bridge58: entered promiscuous mode
[  527.890856][T25070] bridge58: entered allmulticast mode
[  527.894009][T25070] bond114: (slave bridge58): Enslaving as an active interface with an up link
[  528.300702][T25105] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  528.335140][T25109] bridge0: port 1(team0) entered blocking state
[  528.337706][T25109] bridge0: port 1(team0) entered disabled state
[  528.995629][T25132] 8021q: VLANs not supported on ip_vti0
[  529.036777][T25134] syzkaller1: entered promiscuous mode
[  529.038555][T25134] syzkaller1: entered allmulticast mode
[  529.044189][T25134] netlink: 'syz.2.4958': attribute type 21 has an invalid length.
[  529.554300][T25156] syzkaller1: entered promiscuous mode
[  529.558108][T25156] syzkaller1: entered allmulticast mode
[  529.884346][T25170] vlan13: entered promiscuous mode
[  529.886000][T25170] bridge0: entered promiscuous mode
[  530.141323][T25183] x_tables: ip6_tables: mh match: only valid for protocol 135
[  530.152885][T25182] bridge94: port 1(veth33) entered blocking state
[  530.155408][T25182] bridge94: port 1(veth33) entered disabled state
[  530.159108][T25182] veth33: entered allmulticast mode
[  530.162206][T25182] veth33: entered promiscuous mode
[  530.185071][T25182] bridge94: port 2(veth0_to_bond) entered blocking state
[  530.188337][T25182] bridge94: port 2(veth0_to_bond) entered disabled state
[  530.191251][T25182] veth0_to_bond: entered allmulticast mode
[  530.195115][T25182] veth0_to_bond: entered promiscuous mode
[  530.441758][T25194] __nla_validate_parse: 46 callbacks suppressed
[  530.441776][T25194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4978'.
[  530.448766][T25194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4978'.
[  530.523444][T25203] bond130: option packets_per_slave: invalid value (1048582)
[  530.525688][T25203] bond130: option packets_per_slave: allowed values 0 - 65535
[  530.530621][T25203] bond130 (unregistering): Released all slaves
[  530.648682][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'.
[  530.738720][T25226] team0: entered promiscuous mode
[  530.759785][T25228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4985'.
[  530.786959][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'.
[  530.790782][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4986'.
[  530.838464][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4985'.
[  530.873380][T25233] bond128: (slave bridge110): Releasing backup interface
[  530.875626][T25233] bridge110: left promiscuous mode
[  530.878273][T25233] bridge110: left allmulticast mode
[  530.993324][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4988'.
[  530.996631][T25238] netlink: 'syz.2.4988': attribute type 1 has an invalid length.
[  531.003500][T25238] netlink: 'syz.2.4988': attribute type 2 has an invalid length.
[  531.013322][T25238] macvtap1: entered promiscuous mode
[  531.015255][T25238] macvtap1: entered allmulticast mode
[  531.086326][T25240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4989'.
[  531.185209][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4990'.
[  531.336484][T25256] netlink: 'syz.1.4994': attribute type 4 has an invalid length.
[  531.337066][T25259] netlink: 'syz.2.4995': attribute type 5 has an invalid length.
[  531.366961][ T5867] lo speed is unknown, defaulting to 1000
[  531.372327][ T5867] sqz0: Port: 1 Link DOWN
[  531.379025][ T5867] lo speed is unknown, defaulting to 1000
[  531.492528][T25263] lo speed is unknown, defaulting to 1000
[  531.516387][T25273] ip6gre4: entered promiscuous mode
[  531.518593][T25275] netlink: 'syz.2.5000': attribute type 1 has an invalid length.
[  531.526639][T25273] ip6gre4: entered allmulticast mode
[  531.581408][T25275] 8021q: adding VLAN 0 to HW filter on device bond130
[  531.591783][   T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  531.597800][   T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  531.618784][ T8868] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  531.668453][T25278] bond130: (slave veth57): Enslaving as an active interface with an up link
[  531.714635][T25275] netlink: 'syz.2.5000': attribute type 1 has an invalid length.
[  531.856673][T25290] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  531.868531][T25290] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  532.082769][T25298] netlink: 'syz.2.5005': attribute type 1 has an invalid length.
[  532.288996][T25312] block nbd2: not configured, cannot reconfigure
[  532.371397][T25320] netlink: 'syz.0.5010': attribute type 1 has an invalid length.
[  532.428426][T25323] netlink: 'syz.1.5011': attribute type 1 has an invalid length.
[  532.498260][ T8868] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  532.500835][ T8868] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  532.764319][T25327] bond107 (unregistering): Released all slaves
[  532.839946][T25327] bond107 (unregistering): Released all slaves
[  532.932242][T25327] bond107 (unregistering): Released all slaves
[  533.024110][T25327] bond107 (unregistering): Released all slaves
[  533.089896][T25327] bond107 (unregistering): Released all slaves
[  533.161315][T25327] bond107 (unregistering): Released all slaves
[  533.244288][T25327] bond107 (unregistering): Released all slaves
[  533.342481][T25327] bond107 (unregistering): Released all slaves
[  533.419019][T25327] bond107 (unregistering): Released all slaves
[  533.494146][T25327] bond107 (unregistering): Released all slaves
[  533.509220][T25346] syzkaller0: entered promiscuous mode
[  533.510910][T25346] syzkaller0: entered allmulticast mode
[  533.548207][T25346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.553287][T25345] tipc: Resetting bearer <eth:syzkaller0>
[  533.588687][T25345] tipc: Disabling bearer <eth:syzkaller0>
[  533.595996][T25327] workqueue: Failed to create a rescuer kthread for wq "bond107": -EINTR
[  533.724410][T25366] nbd: socks must be embedded in a SOCK_ITEM attr
[  533.738100][T25365] nbd: socks must be embedded in a SOCK_ITEM attr
[  533.793646][T25372] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  533.886904][T25378] lo speed is unknown, defaulting to 1000
[  533.927192][T25380] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  533.927192][T25380] Please contact the netfilter-devel mailing list or update your nftables rules.
[  534.244964][T25401] : renamed from veth0_to_bond
[  534.352953][T25405] lo speed is unknown, defaulting to 1000
[  534.460386][T25413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap7
[  534.532705][T25417] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  534.542897][T25417] openvswitch: netlink: EtherType 0 is less than min 600
[  534.643826][T25422] sit0: left promiscuous mode
[  534.652936][T25422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  534.683096][ T8868] lo speed is unknown, defaulting to 1000
[  534.684939][ T8868] sqz0: Port: 1 Link ACTIVE
[  534.693630][T25419] syzkaller0: entered promiscuous mode
[  534.698874][T25419] syzkaller0: entered allmulticast mode
[  534.702392][ T8868] lo speed is unknown, defaulting to 1000
[  534.709124][T25419] netlink: 'syz.2.5037': attribute type 3 has an invalid length.
[  534.965946][ T5840] lo speed is unknown, defaulting to 1000
[  534.970274][ T8868] lo speed is unknown, defaulting to 1000
[  534.972192][ T5840] lo speed is unknown, defaulting to 1000
[  535.059973][ T8868] lo speed is unknown, defaulting to 1000
[  535.062811][ T8868] sqz0: Port: 1 Link DOWN
[  535.074933][ T8868] lo speed is unknown, defaulting to 1000
[  535.147223][T25453] : entered promiscuous mode
[  535.150814][T25453] : entered allmulticast mode
[  535.152818][T25453] tunl0: entered promiscuous mode
[  535.154291][T25453] tunl0: entered allmulticast mode
[  535.156288][T25453] gre0: entered promiscuous mode
[  535.160142][T25453] gre0: entered allmulticast mode
[  535.162476][T25453] erspan0: entered promiscuous mode
[  535.163963][T25453] erspan0: entered allmulticast mode
[  535.166706][T25453] ip_vti0: entered promiscuous mode
[  535.171372][T25453] ip_vti0: entered allmulticast mode
[  535.178710][T25453] ip6_vti0: entered promiscuous mode
[  535.183867][T25453] ip6_vti0: entered allmulticast mode
[  535.190594][T25453] sit0: entered promiscuous mode
[  535.195484][T25453] sit0: entered allmulticast mode
[  535.201754][T25453] ip6tnl0: entered promiscuous mode
[  535.203555][T25453] ip6tnl0: entered allmulticast mode
[  535.206316][T25453] ip6gre0: entered promiscuous mode
[  535.211184][T25453] ip6gre0: entered allmulticast mode
[  535.213708][T25453] `: entered promiscuous mode
[  535.215025][T25453] `: entered allmulticast mode
[  535.216800][T25453] nlmon0: entered promiscuous mode
[  535.219962][T25453] nlmon0: entered allmulticast mode
[  535.225641][T25453] 0X: entered promiscuous mode
[  535.227978][T25453] 0X: entered allmulticast mode
[  535.230254][T25453] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  535.246709][T25458] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  535.291335][T25453] bond0: Caught tx_queue_len zero misconfig
[  535.697796][T25473] __nla_validate_parse: 28 callbacks suppressed
[  535.697808][T25473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5051'.
[  535.706066][T25472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5051'.
[  535.788078][T25477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5052'.
[  535.944632][T25480] syzkaller1: tun_chr_ioctl cmd 1074025677
[  535.948112][T25480] syzkaller1: linktype set to 780
[  535.950753][T25480] syzkaller1: tun_chr_ioctl cmd 1074025673
[  535.958134][T25480] syzkaller0: entered promiscuous mode
[  535.959919][T25480] syzkaller0: entered allmulticast mode
[  535.972440][T25482] nbd: must specify an index to disconnect
[  535.975510][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5054'.
[  536.218263][T25492] validate_nla: 6 callbacks suppressed
[  536.218278][T25492] netlink: 'syz.1.5056': attribute type 1 has an invalid length.
[  536.228808][T25492] workqueue: Failed to create a rescuer kthread for wq "bond116": -EINTR
[  536.242297][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5057'.
[  536.275164][T25501] netlink: 'syz.1.5058': attribute type 13 has an invalid length.
[  536.277654][T25501] netlink: 'syz.1.5058': attribute type 17 has an invalid length.
[  536.290511][T25498] bond131: entered promiscuous mode
[  536.292310][T25498] 8021q: adding VLAN 0 to HW filter on device bond131
[  536.314101][T25501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  536.320927][ T5815] lo speed is unknown, defaulting to 1000
[  536.323024][ T5815] sqz0: Port: 1 Link ACTIVE
[  536.326129][ T5815] lo speed is unknown, defaulting to 1000
[  536.424518][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5059'.
[  536.526345][T25527] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  536.573393][T25531] netlink: 'syz.1.5064': attribute type 1 has an invalid length.
[  536.618183][T25531] bond116: entered promiscuous mode
[  536.620117][T25531] 8021q: adding VLAN 0 to HW filter on device bond116
[  536.625059][T25538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5066'.
[  536.630966][T25531] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5064'.
[  536.635225][T25531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5064'.
[  536.638486][T25531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5064'.
[  536.661945][T25527] ip6gretap9: entered allmulticast mode
[  536.736818][T25546] bridge97: entered promiscuous mode
[  536.741604][T25546] bridge97: entered allmulticast mode
[  536.831226][T25551] bond132 (unregistering): Released all slaves
[  536.894567][T25557] bond132: entered promiscuous mode
[  536.945168][T25559] bond117 (unregistering): Released all slaves
[  536.966110][T25557] vcan0: entered promiscuous mode
[  536.968583][T25557] vcan0: entered allmulticast mode
[  536.970618][T25557] bond132: (slave vcan0): The slave device specified does not support setting the MAC address
[  536.974889][T25557] bond132: (slave vcan0): Error -95 calling set_mac_address
[  537.172285][T25578] netlink: 'syz.1.5077': attribute type 4 has an invalid length.
[  537.296109][T25586] 8021q: adding VLAN 0 to HW filter on device bond133
[  537.299589][T25588] netlink: 'syz.1.5077': attribute type 4 has an invalid length.
[  537.512930][T25600] netlink: 'syz.2.5083': attribute type 1 has an invalid length.
[  537.537080][T25600] 8021q: adding VLAN 0 to HW filter on device bond134
[  537.748550][T25613] netlink: 'syz.2.5086': attribute type 1 has an invalid length.
[  537.751505][T25613] netlink: 'syz.2.5086': attribute type 1 has an invalid length.
[  537.754414][T25613] netlink: 'syz.2.5086': attribute type 8 has an invalid length.
[  537.990507][T25629] 0{X: renamed from gretap0
[  537.995211][T25629] 0{X: entered allmulticast mode
[  538.003898][T25629] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  538.116060][T25640] bridge0: port 1(vlan12) entered blocking state
[  538.118229][T25640] bridge0: port 1(vlan12) entered disabled state
[  538.120351][T25640] vlan12: entered allmulticast mode
[  538.121901][T25640] bridge0: entered allmulticast mode
[  538.124798][T25640] vlan12: left allmulticast mode
[  538.126282][T25640] bridge0: left allmulticast mode
[  538.231392][T25645] TC_ACT_REPEAT abuse ?
[  538.234514][T25646] TC_ACT_REPEAT abuse ?
[  538.421949][T25660] : left allmulticast mode
[  538.423297][T25660] : left promiscuous mode
[  538.424716][T25660] bridge94: port 2(10) entered disabled state
[  538.429690][T25660] bond0: (slave 07): Releasing backup interface
[  538.434014][T25660] : left promiscuous mode
[  538.435492][T25660] : left allmulticast mode
[  538.446424][T25660] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  538.476777][ T6713] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  538.495919][ T6713] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  538.503999][ T6713] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  538.517059][ T6713] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.581417][T25675] IPVS: Scheduler module ip_vs_sip not found
[  538.750408][T25690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  538.754044][T25690] ip6erspan0: entered allmulticast mode
[  538.784953][ T6713] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  538.791495][ T6713] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  538.797992][ T6713] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  538.800467][ T6713] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  538.981939][T25704] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  539.031667][T25704] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  539.090930][T25704] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  539.149028][T25704] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  539.220618][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  539.234721][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  539.249712][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  539.262981][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  539.590207][T25717] block nbd0: not configured, cannot reconfigure
[  540.732235][T25745] ip6tnl14: entered allmulticast mode
[  540.749007][   T12] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  540.753124][   T12] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  540.780891][ T5867] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  540.881868][T25755] __nla_validate_parse: 24 callbacks suppressed
[  540.881880][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5128'.
[  540.888566][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5128'.
[  540.899352][T25755] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.965265][T25755] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  540.978352][ T5867] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  541.022791][T25755] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  541.071176][T25755] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  541.121787][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5129'.
[  541.130386][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  541.140671][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  541.147104][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  541.164172][ T6713] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  541.190776][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'.
[  541.282510][T25767] tipc: Enabled bearer <ib:geneve0>, priority 10
[  541.340571][T25772] validate_nla: 5 callbacks suppressed
[  541.340587][T25772] netlink: 'syz.1.5132': attribute type 1 has an invalid length.
[  541.349178][T25772] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5132'.
[  541.609387][ T5815] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  543.371415][T25787] netlink: 'syz.1.5138': attribute type 1 has an invalid length.
[  543.400374][T25787] bond118: (slave vxcan1): The slave device specified does not support setting the MAC address
[  543.405673][T25787] bond118: (slave vxcan1): Error -95 calling set_mac_address
[  543.489039][T25798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5142'.
[  543.493870][T25798] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5142'.
[  543.547100][T25798] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5142'.
[  543.550745][T25798] 1{X: renamed from 30{X
[  543.554820][T25798] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  543.662979][T25805] lo speed is unknown, defaulting to 1000
[  543.727874][T25813] netlink: 'syz.0.5147': attribute type 1 has an invalid length.
[  543.743501][T25813] 8021q: adding VLAN 0 to HW filter on device bond107
[  543.781837][T25813] bond107: (slave veth35): Enslaving as an active interface with an up link
[  543.848255][T25813] netlink: 'syz.0.5147': attribute type 1 has an invalid length.
[  543.859177][T25813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.863472][T25813] bond107: (slave batadv0): Enslaving as an active interface with an up link
[  543.870632][T25813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5147'.
[  543.934815][T25819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5149'.
[  544.093920][T25830] block nbd2: not configured, cannot reconfigure
[  544.435736][T25851] bond108: option all_slaves_active: invalid value (9)
[  544.440780][T25851] bond108 (unregistering): Released all slaves
[  544.647549][    C0] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  544.714497][T25866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.813553][T25867] syzkaller0: entered promiscuous mode
[  544.815468][T25867] syzkaller0: entered allmulticast mode
[  544.827257][T25867] tipc: Resetting bearer <eth:syzkaller0>
[  545.314291][T25916] netlink: 'syz.2.5174': attribute type 1 has an invalid length.
[  545.423008][ T7079] tipc: Resetting bearer <eth:syzkaller0>
[  545.444318][T25922] sctp: [Deprecated]: syz.2.5177 (pid 25922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  545.444318][T25922] Use struct sctp_sack_info instead
[  545.547057][T25931] IPv6: sit10: Disabled Multicast RS
[  545.593896][T25864] tipc: Resetting bearer <eth:syzkaller0>
[  548.234371][T25864] tipc: Disabling bearer <eth:syzkaller0>
[  548.243931][T25935] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.261766][T25936] geneve0: entered promiscuous mode
[  548.265568][ T8477] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 58433 - 0
[  548.270983][ T8477] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 58433 - 0
[  548.279278][ T8477] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 58433 - 0
[  548.326795][T25935] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.332974][T25935] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58433 - 0
[  548.396463][T25935] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.407938][T25935] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58433 - 0
[  548.412340][T25948] __nla_validate_parse: 8 callbacks suppressed
[  548.412357][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5185'.
[  548.418660][T25948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.433362][T25950] netlink: 'syz.0.5186': attribute type 13 has an invalid length.
[  548.465945][T25948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5185'.
[  548.493421][T25953] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  548.502313][T25948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.513541][T25935] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.521787][T25935] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58433 - 0
[  548.663803][ T6713] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  548.666576][ T6713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 58433 - 0
[  548.675369][ T6713] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  548.681488][ T6713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 58433 - 0
[  548.699131][ T6713] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  548.701824][ T6713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 58433 - 0
[  548.712079][ T6713] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  548.715602][ T6713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 58433 - 0
[  548.749589][T25962] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  548.764345][T25962] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  548.768795][T25962] netlink: 'syz.1.5188': attribute type 15 has an invalid length.
[  548.771621][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'.
[  548.775708][T25962] netlink: 'syz.1.5188': attribute type 15 has an invalid length.
[  548.779916][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'.
[  548.802568][T25971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5191'.
[  548.834961][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'.
[  548.876859][T25978] netlink: 'syz.0.5193': attribute type 1 has an invalid length.
[  548.880616][T25978] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5193'.
[  549.010577][T25986] erspan0: entered promiscuous mode
[  549.012215][T25986] macvtap4: entered promiscuous mode
[  549.013987][T25986] macvtap4: entered allmulticast mode
[  549.015815][T25986] erspan0: entered allmulticast mode
[  549.023347][T25984] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  549.280056][T26003] netlink: 'syz.1.5199': attribute type 1 has an invalid length.
[  549.284256][T26003] workqueue: Failed to create a rescuer kthread for wq "bond119": -EINTR
[  549.314895][T26009] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5200'.
[  549.446923][T26021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5202'.
[  549.587115][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'.
[  549.648815][T26023] erspan0: left allmulticast mode
[  549.652264][ T5867] lo speed is unknown, defaulting to 1000
[  549.655462][ T5867] sqz0: Port: 1 Link DOWN
[  549.670136][ T5867] lo speed is unknown, defaulting to 1000
[  549.879816][T26038] x_tables: ip_tables: icmp match: only valid for protocol 1
[  550.370075][T26054] netlink: 'syz.1.5211': attribute type 1 has an invalid length.
[  550.464158][T26062] bond120: (slave bridge60): making interface the new active one
[  550.468008][T26062] bond120: (slave bridge60): Enslaving as an active interface with an up link
[  550.493818][T26054] bond120: entered promiscuous mode
[  550.496964][T26054] bridge60: entered promiscuous mode
[  550.499032][T26054] bond120: entered allmulticast mode
[  550.500616][T26054] bridge60: entered allmulticast mode
[  550.502985][T26054] 8021q: adding VLAN 0 to HW filter on device bond120
[  550.667968][T26079] xt_CT: No such helper "snmp_trap"
[  550.801792][T26094] netlink: 'syz.2.5219': attribute type 1 has an invalid length.
[  550.856911][T26094] 8021q: adding VLAN 0 to HW filter on device bond135
[  551.143348][T26120] bond109: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  551.151725][T26120] bond109 (unregistering): Released all slaves
[  551.589076][T26147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.591589][T26147] syzkaller0: entered promiscuous mode
[  551.593618][T26147] syzkaller0: entered allmulticast mode
[  551.614397][T26153] netlink: 'syz.0.5229': attribute type 13 has an invalid length.
[  551.625585][T26147] tipc: Resetting bearer <eth:syzkaller0>
[  551.639463][T26147] tipc: Resetting bearer <eth:syzkaller0>
[  551.658672][T26147] tipc: Disabling bearer <eth:syzkaller0>
[  551.663042][T26153] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  551.721685][T26155] IPv6: NLM_F_CREATE should be specified when creating new route
[  551.727120][T26155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  551.729771][T26155] IPv6: NLM_F_CREATE should be set when creating new route
[  551.732261][T26155] IPv6: NLM_F_CREATE should be set when creating new route
[  551.734778][T26155] IPv6: NLM_F_CREATE should be set when creating new route
[  551.926253][T26169] netlink: 'syz.1.5233': attribute type 6 has an invalid length.
[  551.941831][T26169] netlink: 'syz.1.5233': attribute type 6 has an invalid length.
[  552.027941][T26177] ip6gre0: entered promiscuous mode
[  552.031870][T26177] ip6gre0: left allmulticast mode
[  552.161399][T26188] syzkaller1: entered promiscuous mode
[  552.163413][T26188] syzkaller1: entered allmulticast mode
[  552.334691][T26193] lo speed is unknown, defaulting to 1000
[  552.668403][T26211] m1Ie5n: entered promiscuous mode
[  553.344641][T26241] bond122: entered promiscuous mode
[  553.350621][T26241] bond122: entered allmulticast mode
[  553.354397][T26241] 8021q: adding VLAN 0 to HW filter on device bond122
[  553.540760][T26250] __nla_validate_parse: 24 callbacks suppressed
[  553.540777][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'.
[  553.802210][T26258] validate_nla: 2 callbacks suppressed
[  553.802224][T26258] netlink: 'syz.1.5260': attribute type 1 has an invalid length.
[  553.854707][T26258] bond123: entered promiscuous mode
[  553.865688][T26258] 8021q: adding VLAN 0 to HW filter on device bond123
[  554.552991][T26289] netlink: 296 bytes leftover after parsing attributes in process `syz.1.5268'.
[  554.555917][T26289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5268'.
[  554.573941][T26289] netlink: 'syz.1.5268': attribute type 1 has an invalid length.
[  554.661460][T26294] Unsupported ieee802154 address type: 0
[  554.699150][T26298] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  554.699359][T26297] netlink: 'syz.1.5271': attribute type 8 has an invalid length.
[  554.742690][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5272'.
[  554.912260][T26309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5276'.
[  554.915829][T26309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5276'.
[  555.067283][T26337] netlink: 'syz.0.5283': attribute type 8 has an invalid length.
[  555.120093][T26340] debugfs: '1^!Y
[  555.120093][T26340] 3UH5rBn\' already exists in 'ieee80211'
[  555.171400][T26346] sqz0: rxe_newlink: already configured on lo
[  555.200425][T26348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.203866][T26349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.285171][T26349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.288635][T26348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.299933][T26360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5286'.
[  555.505859][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5290'.
[  555.508956][T26368] netlink: 'syz.0.5290': attribute type 1 has an invalid length.
[  555.538127][T26368] 8021q: adding VLAN 0 to HW filter on device bond109
[  555.542682][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5290'.
[  555.545545][T26368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5290'.
[  555.691148][T26370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  555.703418][T26366] tipc: Resetting bearer <eth:syzkaller0>
[  555.714547][T26365] tipc: Disabling bearer <eth:syzkaller0>
[  555.805618][T26378] syzkaller0: entered promiscuous mode
[  555.810337][T26381] netlink: 'syz.2.5293': attribute type 1 has an invalid length.
[  555.813319][T26378] syzkaller0: entered allmulticast mode
[  555.849082][T26381] bond136: entered promiscuous mode
[  555.851440][T26381] 8021q: adding VLAN 0 to HW filter on device bond136
[  555.874348][T26381] netlink: 'syz.2.5293': attribute type 1 has an invalid length.
[  555.928125][T26381] bond136: (slave bridge117): making interface the new active one
[  555.931227][T26381] bridge117: entered promiscuous mode
[  555.934634][T26381] bond136: (slave bridge117): Enslaving as an active interface with an up link
[  556.467967][T26430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  556.471419][T26430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  556.480124][T26437] netlink: 'syz.2.5301': attribute type 29 has an invalid length.
[  557.338491][T26512] netlink: 'syz.2.5320': attribute type 29 has an invalid length.
[  557.344009][T26512] netlink: 'syz.2.5320': attribute type 29 has an invalid length.
[  557.397755][T26517] 8021q: adding VLAN 0 to HW filter on device bond126
[  557.411639][T26517] bond125: (slave bond126): making interface the new active one
[  557.416720][T26517] bond125: (slave bond126): Enslaving as an active interface with an up link
[  557.481259][T26517] 8021q: adding VLAN 0 to HW filter on device bond125
[  557.566873][T26534] bond127: entered promiscuous mode
[  557.569226][T26534] 8021q: adding VLAN 0 to HW filter on device bond127
[  557.862754][T26555] veth0_macvtap: Caught tx_queue_len zero misconfig
[  557.895163][T26553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.899402][T26553] syzkaller0: entered promiscuous mode
[  557.905150][T26553] syzkaller0: entered allmulticast mode
[  557.939681][T26553] tipc: Resetting bearer <eth:syzkaller0>
[  557.941429][T26553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.950444][T26552] tipc: Resetting bearer <eth:syzkaller0>
[  557.973874][T26552] tipc: Disabling bearer <eth:syzkaller0>
[  558.045225][T26568] : left promiscuous mode
[  558.046838][T26568] : left allmulticast mode
[  558.051526][T26568] tunl0: left promiscuous mode
[  558.054408][T26568] tunl0: left allmulticast mode
[  558.057295][T26568] gre0: left promiscuous mode
[  558.059429][T26568] gre0: left allmulticast mode
[  558.069378][T26568] erspan0: left promiscuous mode
[  558.071369][T26568] erspan0: left allmulticast mode
[  558.078180][T26568] ip_vti0: left promiscuous mode
[  558.080136][T26568] ip_vti0: left allmulticast mode
[  558.083012][T26568] ip6_vti0: left promiscuous mode
[  558.085010][T26568] ip6_vti0: left allmulticast mode
[  558.088699][T26568] sit0: left promiscuous mode
[  558.090599][T26568] sit0: left allmulticast mode
[  558.093101][T26568] ip6tnl0: left promiscuous mode
[  558.095018][T26568] ip6tnl0: left allmulticast mode
[  558.099013][T26568] ip6gre0: left promiscuous mode
[  558.100567][T26568] ip6gre0: left allmulticast mode
[  558.103392][T26568] `: left promiscuous mode
[  558.105043][T26568] `: left allmulticast mode
[  558.107079][T26568] nlmon0: left promiscuous mode
[  558.108752][T26568] nlmon0: left allmulticast mode
[  558.111450][T26568] 0X: left promiscuous mode
[  558.113263][T26568] 0X: left allmulticast mode
[  558.114912][T26568] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  558.174038][T26571] syzkaller0: entered promiscuous mode
[  558.175665][T26571] syzkaller0: entered allmulticast mode
[  558.207690][    C0] tc action pedit offset must be on 32 bit boundaries
[  558.273498][T26581] 8021q: adding VLAN 0 to HW filter on device bond128
[  558.288391][T26580] vlan8: entered allmulticast mode
[  558.290492][T26580] bond128: entered allmulticast mode
[  558.487905][    C0] tc action pedit offset must be on 32 bit boundaries
[  558.650755][T26602] __nla_validate_parse: 17 callbacks suppressed
[  558.650767][T26602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5345'.
[  558.667698][T26602] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5345'.
[  558.932860][T26615] Cannot find set identified by id 3 to match
[  558.966186][T26615] bond110: entered allmulticast mode
[  558.973915][T26615] 8021q: adding VLAN 0 to HW filter on device bond110
[  559.002272][T26616] lo speed is unknown, defaulting to 1000
[  559.171681][T26620] lo speed is unknown, defaulting to 1000
[  559.330641][T26629] : renamed from veth0_to_bond
[  559.717981][T26643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5356'.
[  559.726746][T26643] hsr_slave_0: left promiscuous mode
[  559.735221][T26643] 0: left promiscuous mode
[  559.930553][T26660] validate_nla: 11 callbacks suppressed
[  559.930572][T26660] netlink: 'syz.2.5360': attribute type 1 has an invalid length.
[  560.069586][T26666] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5361'.
[  560.072683][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5362'.
[  560.075885][T26666] 1: renamed from c0
[  560.082211][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5362'.
[  560.094044][T26666] 1: entered allmulticast mode
[  560.101917][T26666] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  560.203563][T26660] veth59: entered allmulticast mode
[  560.222678][T26660] bond137: (slave veth59): Enslaving as a backup interface with a down link
[  560.225693][T26668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5362'.
[  560.234887][T26668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5362'.
[  560.261035][T26676] syzkaller1: entered promiscuous mode
[  560.263618][T26676] syzkaller1: entered allmulticast mode
[  560.266893][T26676] sctp: [Deprecated]: syz.0.5363 (pid 26676) Use of int in max_burst socket option deprecated.
[  560.266893][T26676] Use struct sctp_assoc_value instead
[  560.352669][T26681] netlink: 'syz.1.5365': attribute type 1 has an invalid length.
[  560.355815][T26681] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5365'.
[  560.437899][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'.
[  560.528154][T26694] syzkaller1: entered promiscuous mode
[  560.530080][T26694] syzkaller1: entered allmulticast mode
[  560.580782][T26698] netlink: 'syz.2.5371': attribute type 10 has an invalid length.
[  560.644383][T26699] veth0: entered promiscuous mode
[  560.653805][T26699] bond0: entered promiscuous mode
[  560.677277][T26699] geneve0: left promiscuous mode
[  560.685058][ T5699] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 58433 - 0
[  560.690304][ T5699] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 58433 - 0
[  560.699625][ T5699] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 58433 - 0
[  560.702800][ T5699] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 58433 - 0
[  560.763026][T26697] bond0: left promiscuous mode
[  560.764755][T26697] veth0: left promiscuous mode
[  560.994471][T26720] veth0: entered promiscuous mode
[  561.058272][T26714] veth0: left promiscuous mode
[  561.175920][T26732] netlink: 'syz.1.5380': attribute type 5 has an invalid length.
[  561.508688][T26762] bond129: entered allmulticast mode
[  561.518717][T26762] macvlan3: entered promiscuous mode
[  561.520766][T26762] macvlan3: entered allmulticast mode
[  561.523597][T26762] bond129: entered promiscuous mode
[  561.525840][T26762] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  561.533527][T26762] bond129: left promiscuous mode
[  561.595078][T26775] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  561.604850][T26775] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  561.713108][T26779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.742869][T26779] tipc: Resetting bearer <eth:syzkaller0>
[  561.748798][T26779] netlink: 'syz.1.5394': attribute type 1 has an invalid length.
[  561.751066][T26781] netlink: 'syz.2.5395': attribute type 1 has an invalid length.
[  561.772441][T26779] bridge0: Device is already in use.
[  561.776911][T26781] 8021q: adding VLAN 0 to HW filter on device bond138
[  561.845414][T26785] bridge118: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  561.933548][T26791] bond130: (slave veth57): Releasing backup interface
[  561.952212][T26791] bond136: (slave bridge117): Releasing backup interface
[  561.954874][T26791] bridge117: left promiscuous mode
[  561.965042][T26791] bond137: (slave veth59): Releasing backup interface
[  562.434053][T26802] netlink: 'syz.0.5402': attribute type 1 has an invalid length.
[  562.451703][T26802] bond111: entered promiscuous mode
[  562.453839][T26802] 8021q: adding VLAN 0 to HW filter on device bond111
[  562.481212][T26802] bond111: (slave bridge100): making interface the new active one
[  562.483714][T26802] bridge100: entered promiscuous mode
[  562.486475][T26802] bond111: (slave bridge100): Enslaving as an active interface with an up link
[  562.659621][T26813] syzkaller1: entered promiscuous mode
[  562.661246][T26813] syzkaller1: entered allmulticast mode
[  562.761370][T26817] netlink: 'syz.1.5407': attribute type 1 has an invalid length.
[  562.786327][T26821] syzkaller1: entered promiscuous mode
[  562.789095][T26821] syzkaller1: entered allmulticast mode
[  562.949644][T26825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.953006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.095280][T26841] netlink: 'syz.0.5416': attribute type 4 has an invalid length.
[  563.127653][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.131401][T26849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  563.150497][T26849] tipc: Resetting bearer <eth:syzkaller0>
[  563.153210][T26849] netlink: 'syz.1.5418': attribute type 1 has an invalid length.
[  563.190228][T26851] sctp: [Deprecated]: syz.2.5417 (pid 26851) Use of struct sctp_assoc_value in delayed_ack socket option.
[  563.190228][T26851] Use struct sctp_sack_info instead
[  563.827048][T26884] lo speed is unknown, defaulting to 1000
[  564.007617][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.039801][T26889] __nla_validate_parse: 21 callbacks suppressed
[  564.039820][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  564.040669][T26891] mac80211_hwsim hwsim19 wlan0: Caught tx_queue_len zero misconfig
[  564.081983][T26889] bond139: option ad_actor_sys_prio: invalid value (0)
[  564.084573][T26889] bond139: option ad_actor_sys_prio: allowed values 1 - 65535
[  564.092449][T26889] bond139 (unregistering): Released all slaves
[  564.127608][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.355529][T26905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5433'.
[  564.539390][T26919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5438'.
[  564.577055][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5439'.
[  564.618469][T26924] syzkaller1: tun_chr_ioctl cmd 35111
[  564.772331][T26928] gretap0: entered allmulticast mode
[  564.778554][T26928] bond130: (slave gretap0): making interface the new active one
[  564.784370][T26928] bond130: (slave gretap0): Enslaving as an active interface with an up link
[  564.814736][T26930] lo speed is unknown, defaulting to 1000
[  564.978472][T26939] lo speed is unknown, defaulting to 1000
[  565.065635][T26941] vlan9: entered promiscuous mode
[  565.184408][T26943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.431437][T26946] bond112: Removing last ns target with arp_interval on
[  565.812531][T26956] validate_nla: 3 callbacks suppressed
[  565.812552][T26956] netlink: 'syz.0.5451': attribute type 1 has an invalid length.
[  565.825627][T26956] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5451'.
[  565.832494][T26956] 1X: renamed from 60X
[  565.842450][T26956] 1X: entered allmulticast mode
[  565.848391][T26956] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  565.892861][T26955] syzkaller0: left allmulticast mode
[  565.895455][T26955] netlink: 384 bytes leftover after parsing attributes in process `syz.1.5448'.
[  565.909489][T26962] netlink: 'syz.0.5452': attribute type 1 has an invalid length.
[  565.913060][T26962] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5452'.
[  565.953439][T26959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5448'.
[  565.957296][T26965] netlink: 'syz.0.5453': attribute type 13 has an invalid length.
[  565.960601][T26965] netlink: 'syz.0.5453': attribute type 17 has an invalid length.
[  565.975073][T26965] 1X: left allmulticast mode
[  565.978019][T26965] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  566.036176][T26972] nbd: must specify at least one socket
[  566.274714][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'.
[  566.312538][T26990] bridge63: port 1(veth65) entered blocking state
[  566.315099][T26990] bridge63: port 1(veth65) entered disabled state
[  566.319186][T26990] veth65: entered allmulticast mode
[  566.324003][T26990] veth65: entered promiscuous mode
[  566.390599][T26994] bond131: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  566.395430][T26994] bond131 (unregistering): Released all slaves
[  566.542039][T26998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5462'.
[  566.884872][T27015] syzkaller1: entered promiscuous mode
[  566.887036][T27015] syzkaller1: entered allmulticast mode
[  566.896429][T27015] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  566.988520][T27025] netlink: 'syz.0.5468': attribute type 1 has an invalid length.
[  567.014749][T27025] bond113: entered promiscuous mode
[  567.016815][T27025] bond113: entered allmulticast mode
[  567.019981][T27025] 8021q: adding VLAN 0 to HW filter on device bond113
[  567.069306][T27029] workqueue: Failed to create a rescuer kthread for wq "bond114": -EINTR
[  567.146646][T27037] netlink: 'syz.0.5470': attribute type 10 has an invalid length.
[  567.166157][T27038] netlink: 'syz.2.5471': attribute type 4 has an invalid length.
[  567.231417][T27040] netlink: 'syz.2.5471': attribute type 4 has an invalid length.
[  567.421280][T27048] netlink: 'syz.0.5474': attribute type 7 has an invalid length.
[  567.424546][T27048] netlink: 'syz.0.5474': attribute type 7 has an invalid length.
[  567.785006][T27069] bridge0: port 2(erspan0) entered blocking state
[  567.788694][T27069] bridge0: port 2(erspan0) entered disabled state
[  567.790738][T27069] erspan0: entered allmulticast mode
[  567.793624][T27069] erspan0: left allmulticast mode
[  567.924461][T27072] bond131: entered promiscuous mode
[  567.930325][T27072] 8021q: adding VLAN 0 to HW filter on device bond131
[  567.949455][T27076] vlan9: entered allmulticast mode
[  567.951336][T27076] bond131: entered allmulticast mode
[  567.966258][T27072] bond131: (slave bridge64): making interface the new active one
[  567.970006][T27072] bridge64: entered promiscuous mode
[  567.971726][T27072] bridge64: entered allmulticast mode
[  567.974872][T27072] bond131: (slave bridge64): Enslaving as an active interface with an up link
[  568.063335][T27080] macsec0: left promiscuous mode
[  568.067037][T27080] bridge52: left promiscuous mode
[  568.071298][T27080] bond99: left promiscuous mode
[  568.072802][T27080] bridge53: left promiscuous mode
[  568.074387][T27080] bond100: left promiscuous mode
[  568.075813][T27080] bridge55: left promiscuous mode
[  568.078116][T27080] bond101: left promiscuous mode
[  568.079635][T27080] bond102: left promiscuous mode
[  568.081257][T27080] bond104: left promiscuous mode
[  568.082695][T27080] veth57: left promiscuous mode
[  568.084249][T27080] team0: left promiscuous mode
[  568.085708][T27080] xfrm0: left promiscuous mode
[  568.087143][T27080] bond114: left promiscuous mode
[  568.089186][T27080] bridge58: left promiscuous mode
[  568.090828][T27080] ip6gre4: left promiscuous mode
[  568.092289][T27080] bond116: left promiscuous mode
[  568.093714][T27080] macvtap4: left promiscuous mode
[  568.095223][T27080] bond120: left promiscuous mode
[  568.096636][T27080] bridge60: left promiscuous mode
[  568.100535][T27080] bond122: left promiscuous mode
[  568.102412][T27080] bond123: left promiscuous mode
[  568.105043][T27080] bond127: left promiscuous mode
[  568.106999][T27080] syzkaller0: left promiscuous mode
[  568.111425][T27080] tipc: Resetting bearer <eth:syzkaller0>
[  568.113342][T27080] tipc: Resetting bearer <eth:syzkaller0>
[  568.116177][T27080] bond131: left promiscuous mode
[  568.119021][T27080] bridge64: left promiscuous mode
[  568.148543][T27084] 8021q: adding VLAN 0 to HW filter on device bond139
[  568.155821][T27082] syzkaller1: entered promiscuous mode
[  568.157835][T27082] syzkaller1: entered allmulticast mode
[  568.165550][T27088] vlan13: entered promiscuous mode
[  568.167165][T27088] bond139: entered promiscuous mode
[  568.169269][T27088] vlan13: entered allmulticast mode
[  568.171255][T27088] bond139: entered allmulticast mode
[  568.539297][T27109] bridge101: entered promiscuous mode
[  568.545667][T27109] bridge101: entered allmulticast mode
[  568.555785][T27109] team0: Port device bridge101 added
[  568.561716][T27112] bridge0: port 1(team0) entered blocking state
[  568.567717][T27112] bridge0: port 1(team0) entered disabled state
[  568.572065][T27112] team0: entered allmulticast mode
[  568.580884][T27112] team0: left allmulticast mode
[  568.750338][T27126] lo speed is unknown, defaulting to 1000
[  568.870290][T27133] vlan13: entered promiscuous mode
[  569.129607][T27143] lo speed is unknown, defaulting to 1000
[  569.178749][T27145] A link change request failed with some changes committed already. Interface 264]j<I͎ may have been left with an inconsistent configuration, please check.
[  569.398908][T27151] lo speed is unknown, defaulting to 1000
[  569.667007][T27157] __nla_validate_parse: 11 callbacks suppressed
[  569.667023][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5504'.
[  569.695219][T27157] erspan0: left promiscuous mode
[  569.711043][T27157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  569.716748][   T31] lo speed is unknown, defaulting to 1000
[  569.719464][   T31] sqz0: Port: 1 Link ACTIVE
[  569.732383][   T31] lo speed is unknown, defaulting to 1000
[  570.001748][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'.
[  570.023257][T27174] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5508'.
[  570.395135][T27187] 8021q: adding VLAN 0 to HW filter on device bond115
[  570.403923][T27187] bond114: (slave bond115): making interface the new active one
[  570.407245][T27187] bond114: (slave bond115): Enslaving as an active interface with an up link
[  570.418257][T27187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5512'.
[  570.430274][T27186] 8021q: adding VLAN 0 to HW filter on device bond116
[  570.433963][T27186] bond114: (slave bond116): Enslaving as a backup interface with an up link
[  570.439304][T27187] 8021q: adding VLAN 0 to HW filter on device bond114
[  570.624302][T27199] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  570.930824][T27216] validate_nla: 6 callbacks suppressed
[  570.930835][T27216] netlink: 'syz.2.5518': attribute type 10 has an invalid length.
[  571.009274][T27217] veth0: entered promiscuous mode
[  571.100412][T27216] veth0: left promiscuous mode
[  571.143947][T27229] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5523'.
[  571.155898][T27229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5523'.
[  571.160490][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5523'.
[  571.164233][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'.
[  571.169594][T27227] netlink: 'syz.2.5522': attribute type 1 has an invalid length.
[  571.206765][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  571.211042][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'.
[  571.219018][T27227] bond140: entered promiscuous mode
[  571.220937][T27227] 8021q: adding VLAN 0 to HW filter on device bond140
[  571.230338][T27234] ipvlan1: entered allmulticast mode
[  571.232268][T27234] bond140: entered allmulticast mode
[  571.252973][T27227] bond140: (slave bridge119): making interface the new active one
[  571.255723][T27227] bridge119: entered promiscuous mode
[  571.257968][T27227] bridge119: entered allmulticast mode
[  571.260945][T27227] bond140: (slave bridge119): Enslaving as an active interface with an up link
[  571.314228][T27236] syzkaller0: entered promiscuous mode
[  571.316664][T27236] tipc: Resetting bearer <eth:syzkaller0>
[  571.416880][T27245] netlink: 'syz.0.5526': attribute type 11 has an invalid length.
[  571.426821][T27245] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  571.499612][T27248] bond141: Unable to set peer notification delay as MII monitoring is disabled
[  571.512409][T27248] bond141 (unregistering): Released all slaves
[  571.551353][T27249] bond141: Unable to set peer notification delay as MII monitoring is disabled
[  571.556914][T27249] bond141 (unregistering): Released all slaves
[  571.697552][T27266] lo speed is unknown, defaulting to 1000
[  572.374411][T27302] netlink: 'syz.0.5543': attribute type 1 has an invalid length.
[  572.481315][T27302] bond117: entered promiscuous mode
[  572.486458][T27302] bond117: entered allmulticast mode
[  572.493434][T27302] 8021q: adding VLAN 0 to HW filter on device bond117
[  572.551504][T27303] erspan2: entered allmulticast mode
[  572.558924][T27303] bond117: (slave erspan2): making interface the new active one
[  572.561190][T27303] erspan2: entered promiscuous mode
[  572.565061][T27303] 
[  572.565832][T27303] ============================================
[  572.567576][T27303] WARNING: possible recursive locking detected
[  572.569438][T27303] syzkaller #0 Not tainted
[  572.571179][T27303] --------------------------------------------
[  572.573100][T27303] syz.0.5543/27303 is trying to acquire lock:
[  572.574729][T27303] ffff88816b73dd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  572.577764][T27303] 
[  572.577764][T27303] but task is already holding lock:
[  572.579873][T27303] ffff8881afeb5d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  572.582642][T27303] 
[  572.582642][T27303] other info that might help us debug this:
[  572.584934][T27303]  Possible unsafe locking scenario:
[  572.584934][T27303] 
[  572.587009][T27303]        CPU0
[  572.587967][T27303]        ----
[  572.589099][T27303]   lock(&qdisc_xmit_lock_key#4);
[  572.590522][T27303]   lock(&qdisc_xmit_lock_key#4);
[  572.591934][T27303] 
[  572.591934][T27303]  *** DEADLOCK ***
[  572.591934][T27303] 
[  572.594535][T27303]  May be due to missing lock nesting notation
[  572.594535][T27303] 
[  572.596864][T27303] 9 locks held by syz.0.5543/27303:
[  572.598461][T27303]  #0: ffffffff9033bdc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  572.601304][T27303]  #1: ffffffff8fdceb00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  572.603874][T27303]  #2: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  572.606981][T27303]  #3: ffff888190221228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  572.610522][T27303]  #4: ffff8881afeb5d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  572.614064][T27303]  #5: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  572.616842][T27303]  #6: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  572.620517][T27303]  #7: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  572.624331][T27303]  #8: ffff88816c482228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  572.629140][T27303] 
[  572.629140][T27303] stack backtrace:
[  572.631467][T27303] CPU: 1 UID: 0 PID: 27303 Comm: syz.0.5543 Not tainted syzkaller #0 PREEMPT(full) 
[  572.631488][T27303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  572.631498][T27303] Call Trace:
[  572.631503][T27303]  <TASK>
[  572.631510][T27303]  dump_stack_lvl+0xe8/0x150
[  572.631527][T27303]  print_deadlock_bug+0x279/0x290
[  572.631542][T27303]  __lock_acquire+0x253f/0x2cf0
[  572.631554][T27303]  ? __kasan_check_byte+0x12/0x40
[  572.631564][T27303]  ? unwind_next_frame+0xa6/0x2550
[  572.631572][T27303]  ? rcu_is_watching+0x15/0xb0
[  572.631586][T27303]  ? sch_direct_xmit+0x15f/0x4c0
[  572.631597][T27303]  lock_acquire+0x106/0x350
[  572.631607][T27303]  ? sch_direct_xmit+0x15f/0x4c0
[  572.631620][T27303]  _raw_spin_lock+0x2e/0x40
[  572.631635][T27303]  ? sch_direct_xmit+0x15f/0x4c0
[  572.631646][T27303]  sch_direct_xmit+0x15f/0x4c0
[  572.631657][T27303]  ? __pfx_sch_direct_xmit+0x10/0x10
[  572.631670][T27303]  __dev_queue_xmit+0x180f/0x3950
[  572.631682][T27303]  ? __dev_queue_xmit+0x2b6/0x3950
[  572.631691][T27303]  ? lockdep_unlock+0x5d/0xd0
[  572.631700][T27303]  ? __lock_acquire+0x146e/0x2cf0
[  572.631711][T27303]  ? __pfx___dev_queue_xmit+0x10/0x10
[  572.631725][T27303]  ? ip_finish_output2+0xa1e/0x1070
[  572.631735][T27303]  ? ip_finish_output2+0x3c2/0x1070
[  572.631743][T27303]  ip_finish_output2+0xc68/0x1070
[  572.631751][T27303]  ? ip_finish_output2+0x3c2/0x1070
[  572.631762][T27303]  ip_output+0x29f/0x450
[  572.631774][T27303]  ? ip_output+0x5b/0x450
[  572.631786][T27303]  iptunnel_xmit+0x621/0xd10
[  572.631799][T27303]  ip_tunnel_xmit+0x193a/0x1f20
[  572.631815][T27303]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  572.631828][T27303]  ? __pfx_gre_build_header+0x10/0x10
[  572.631840][T27303]  ? kfree+0x1c1/0x620
[  572.631850][T27303]  ? pskb_expand_head+0x460/0x1270
[  572.631859][T27303]  __gre_xmit+0x19e/0x240
[  572.631871][T27303]  ? __pfx___gre_xmit+0x10/0x10
[  572.631886][T27303]  erspan_xmit+0xa41/0x14d0
[  572.631900][T27303]  ? __pfx_erspan_xmit+0x10/0x10
[  572.631914][T27303]  dev_hard_start_xmit+0x2cd/0x830
[  572.631925][T27303]  sch_direct_xmit+0x251/0x4c0
[  572.631936][T27303]  ? __pfx_sch_direct_xmit+0x10/0x10
[  572.631946][T27303]  ? bond_select_active_slave+0x810/0xd40
[  572.631958][T27303]  __dev_queue_xmit+0x180f/0x3950
[  572.631968][T27303]  ? __dev_queue_xmit+0x2b6/0x3950
[  572.631979][T27303]  ? __pfx___dev_queue_xmit+0x10/0x10
[  572.631987][T27303]  ? rcu_is_watching+0x15/0xb0
[  572.631999][T27303]  ? trace_kmem_cache_alloc+0x29/0xe0
[  572.632011][T27303]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  572.632026][T27303]  ? alb_send_lp_vid+0x14e/0x550
[  572.632038][T27303]  alb_send_lp_vid+0x348/0x550
[  572.632048][T27303]  ? dev_addr_mod+0x354/0x520
[  572.632061][T27303]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  572.632073][T27303]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  572.632084][T27303]  alb_send_learning_packets+0x12c/0x300
[  572.632096][T27303]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  572.632107][T27303]  ? alb_swap_mac_addr+0x230/0x340
[  572.632119][T27303]  alb_fasten_mac_swap+0x639/0xf60
[  572.632131][T27303]  bond_alb_handle_active_change+0xc6d/0xf30
[  572.632143][T27303]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  572.632158][T27303]  ? __local_bh_enable_ip+0xd0/0x130
[  572.632170][T27303]  bond_change_active_slave+0x106e/0x35f0
[  572.632180][T27303]  ? __pfx_do_sync_core+0x10/0x10
[  572.632190][T27303]  ? lockdep_hardirqs_on+0x7a/0x110
[  572.632200][T27303]  ? smp_call_function_many_cond+0xeb5/0x1210
[  572.632212][T27303]  ? __pfx_bond_change_active_slave+0x10/0x10
[  572.632221][T27303]  ? __pfx_do_sync_core+0x10/0x10
[  572.632272][T27303]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  572.632284][T27303]  ? bond_start_xmit+0x92/0x1900
[  572.632296][T27303]  ? __pfx___text_poke+0x10/0x10
[  572.632306][T27303]  ? static_key_slow_inc_cpuslocked+0xba/0xf0
[  572.632320][T27303]  bond_select_active_slave+0x909/0xd40
[  572.632333][T27303]  ? __pfx_bond_select_active_slave+0x10/0x10
[  572.632345][T27303]  bond_enslave+0x2299/0x3c10
[  572.632360][T27303]  ? __pfx_bond_enslave+0x10/0x10
[  572.632372][T27303]  ? __pfx___dev_notify_flags+0x10/0x10
[  572.632384][T27303]  ? __dev_change_flags+0x51e/0x690
[  572.632396][T27303]  ? mutex_is_locked+0x17/0x50
[  572.632409][T27303]  do_set_master+0x533/0x6d0
[  572.632423][T27303]  rtnl_newlink_create+0x6af/0xb70
[  572.632435][T27303]  ? __pfx___nla_validate_parse+0x10/0x10
[  572.632445][T27303]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  572.632457][T27303]  ? __pfx___mutex_lock+0x10/0x10
[  572.632470][T27303]  ? ns_capable+0x89/0xe0
[  572.632481][T27303]  rtnl_newlink+0x166a/0x1bb0
[  572.632495][T27303]  ? __pfx_rtnl_newlink+0x10/0x10
[  572.632505][T27303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.632521][T27303]  ? kasan_quarantine_put+0xbb/0x1f0
[  572.632533][T27303]  ? lockdep_hardirqs_on+0x7a/0x110
[  572.632543][T27303]  ? nlmon_xmit+0xb0/0x100
[  572.632553][T27303]  ? kmem_cache_free+0x180/0x630
[  572.632568][T27303]  ? __lock_acquire+0x6b5/0x2cf0
[  572.632579][T27303]  ? __dev_queue_xmit+0x2b6/0x3950
[  572.632588][T27303]  ? __local_bh_enable_ip+0xd0/0x130
[  572.632598][T27303]  ? lockdep_hardirqs_on+0x7a/0x110
[  572.632608][T27303]  ? __dev_queue_xmit+0x2b6/0x3950
[  572.632616][T27303]  ? __local_bh_enable_ip+0xd0/0x130
[  572.632626][T27303]  ? __dev_queue_xmit+0x2b6/0x3950
[  572.632643][T27303]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  572.632657][T27303]  ? __pfx_rtnl_newlink+0x10/0x10
[  572.632668][T27303]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  572.632681][T27303]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  572.632692][T27303]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  572.632703][T27303]  ? ref_tracker_free+0x693/0x840
[  572.632716][T27303]  ? __pfx_ref_tracker_free+0x10/0x10
[  572.632729][T27303]  netlink_rcv_skb+0x232/0x4b0
[  572.632742][T27303]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  572.632754][T27303]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  572.632767][T27303]  ? netlink_deliver_tap+0x2e/0x1b0
[  572.632778][T27303]  ? netlink_deliver_tap+0x2e/0x1b0
[  572.632790][T27303]  netlink_unicast+0x75c/0x8e0
[  572.632803][T27303]  netlink_sendmsg+0x813/0xb40
[  572.632816][T27303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  572.632829][T27303]  ? __se_sys_ioctl+0x47/0x170
[  572.632836][T27303]  ? do_syscall_64+0x15f/0xf80
[  572.632846][T27303]  ? aa_sock_msg_perm+0xf1/0x1b0
[  572.632857][T27303]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  572.632870][T27303]  ____sys_sendmsg+0x972/0x9f0
[  572.632886][T27303]  ? __might_fault+0xaf/0x130
[  572.632898][T27303]  ? __pfx_____sys_sendmsg+0x10/0x10
[  572.632912][T27303]  ? import_iovec+0x73/0xa0
[  572.632921][T27303]  ___sys_sendmsg+0x2a5/0x360
[  572.632933][T27303]  ? __lock_acquire+0x6b5/0x2cf0
[  572.632944][T27303]  ? __pfx____sys_sendmsg+0x10/0x10
[  572.632957][T27303]  ? tomoyo_path_number_perm+0x219/0x630
[  572.632972][T27303]  ? __fget_files+0x2a/0x420
[  572.632982][T27303]  ? __fget_files+0x3a0/0x420
[  572.632994][T27303]  __x64_sys_sendmsg+0x1bd/0x2a0
[  572.633007][T27303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  572.633018][T27303]  ? rcu_is_watching+0x15/0xb0
[  572.633032][T27303]  ? __pfx_kcov_ioctl+0x10/0x10
[  572.633042][T27303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.633051][T27303]  do_syscall_64+0x15f/0xf80
[  572.633061][T27303]  ? trace_irq_disable+0x3b/0x140
[  572.633070][T27303]  ? clear_bhb_loop+0x40/0x90
[  572.633079][T27303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.633088][T27303] RIP: 0033:0x7fde9b19cdd9
[  572.633098][T27303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.633107][T27303] RSP: 002b:00007fde9c0d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.633117][T27303] RAX: ffffffffffffffda RBX: 00007fde9b416090 RCX: 00007fde9b19cdd9
[  572.633124][T27303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  572.633130][T27303] RBP: 00007fde9b232d69 R08: 0000000000000000 R09: 0000000000000000
[  572.633136][T27303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  572.633142][T27303] R13: 00007fde9b416128 R14: 00007fde9b416090 R15: 00007ffccca44cb8
[  572.633152][T27303]  </TASK>
[  572.891106][T27303] bond117: (slave erspan2): Enslaving as an active interface with an up link
