last executing test programs:

3.442418616s ago: executing program 2 (id=8661):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

3.372570354s ago: executing program 2 (id=8662):
listen(0xffffffffffffffff, 0xfffffffc) (async, rerun: 32)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x3f0, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) (async, rerun: 32)
r9 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x1, {0x0, 0xf0, 0xd}, {0x2, 0x1}, 0xfe, 0x1}], 0x20)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20048081) (async)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50000000e000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001, 0x200000}}}}}, 0x0) (async)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.290912584s ago: executing program 2 (id=8665):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', <r2=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
close(0x4)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r3)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f00000002c0)=0x5, 0x4)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000080)=0x40000cd, 0x4)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r7, 0x5760, 0x0)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000140)=0x401)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/15, 0xf}, {0x0}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/112, 0x70}], 0x6}, 0x0)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="060000000706010800000000000000000a00008ef2538938bfab0405"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

1.102636769s ago: executing program 0 (id=8691):
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x600e, 0x0}}], 0x300, 0x48, 0x0)

1.05063161s ago: executing program 1 (id=8695):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$tun(r0, 0x0, 0xfdef)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r5, r5, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffe01}}]}]}]}, 0xb4}}, 0x20084084)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
r7 = socket(0x15, 0x5, 0x0)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r9=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e22, 0x5, 0x4e22, 0x3, 0xa, 0x40, 0x80, 0x33, r9, r10}, {0x1, 0x3800000000000000, 0x0, 0x6c0, 0x0, 0x101, 0x4, 0xb3}, {0x2, 0x7, 0x6, 0xb3d}, 0x4, 0x6e6bbb, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d2, 0x32}, 0xa, @in=@broadcast, 0x3504, 0x2, 0x2, 0xd, 0x9, 0x6, 0x2}}, 0xe8)
getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmmsg$sock(r2, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000), 0x18}}], 0x2, 0x8854)

992.529092ms ago: executing program 0 (id=8696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040840}, 0xc800)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x0, @broadcast}})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080))
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8)
r7 = getpid()
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x119c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x118b, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @nested={0x109c, 0x17, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xd7, 0x0, 0x0, @uid=r5}, @nested={0x1088, 0xa9, 0x0, 0x1, [@generic="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", @generic, @typed={0x8, 0x6d, 0x0, 0x0, @uid=r6}, @typed={0x71, 0xbc, 0x0, 0x0, @binary="2a9afa86e1b61ac537ccd3c96b1ac175e3ae3bc8d3eddf2f11d11bc7f4d450ac266aaf980cbc50f75c75ef196d59ed4810f73e5b0ee5f8db88c45b5f5e6622c7c59f0d8fbb7fac024908fd57fda4a3c68eee3db06300fcf94519391594d570056052adea80b432b855352119d2"}, @typed={0x8, 0x9e, 0x0, 0x0, @pid=r7}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x119c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0)

991.334442ms ago: executing program 1 (id=8697):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_MAP={0x24, 0xe, {0x2, 0x1, 0xc, 0x3, 0x32, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0)

932.832015ms ago: executing program 0 (id=8698):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

931.755332ms ago: executing program 1 (id=8699):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/180, 0xb4}, &(0x7f0000000180), 0x14}, 0x20)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001580)={{<r3=>r0, &(0x7f0000000200)='\xb6\x00', 0xc100, &(0x7f0000000240)={@align=0x2, {0x139, 0x24, 0x0, 0x205}}, 0xe17700, &(0x7f0000000280), &(0x7f00000002c0)=0x10001}, 0x3, &(0x7f0000001500)=[{0x2, 0x5, &(0x7f0000000300)='&\'\x00', &(0x7f0000000340)="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", 0x1000, 0x38}, {0x1, 0x3, &(0x7f0000001340)=',:&\x00', &(0x7f0000001380)="b16c617043a13bd3b79df1127132583c5e17baa6c28d181a57c4e621da95b27a118dfcecd960baf4ef1868cf01d61b944e9aacb5056f488f323e5a7ca8067c5f1ccd4777e16bd2f81637020d01918870545262f88ec82a7fc09e5b7c1c1f052b997284330d6f660da931581e9b7093b12354dbc44ee937836c1b5f131d08cb1f2a6c12bb4dc1789c980da7c8260cf1a33a48effb7811430d534eed87d7ad4f5e00dbe805b01e8e8b9d7729ba43468c923f063716436e4622706b917a5d6c8d6c8254eab2", 0xc4, 0x8}, {0x2, 0x400, &(0x7f0000001480)='\\\x00', &(0x7f00000014c0)}]})
mkdirat$cgroup(r3, &(0x7f0000001600)='syz1\x00', 0x1ff)
r4 = socket$inet(0x2, 0x5, 0xfffffffb)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000001640))
r5 = openat$cgroup_ro(r3, &(0x7f0000001680)='pids.events\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001700)={<r7=>0x0, @loopback, @initdev}, &(0x7f0000001740)=0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xc00d, '\x00', r7, r5, 0x1, 0x0, 0x2}, 0x50)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
r9 = accept(r8, &(0x7f0000001800)=@pppol2tpv3={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001880)=0x80)
recvmsg(r1, &(0x7f0000001c80)={&(0x7f00000018c0)=@l2, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/28, 0x1c}, {&(0x7f0000001980)=""/23, 0x17}, {&(0x7f00000019c0)=""/43, 0x2b}, {&(0x7f0000001a00)=""/164, 0xa4}, {&(0x7f0000001ac0)=""/146, 0x92}, {&(0x7f0000001b80)=""/118, 0x76}], 0x6}, 0x4000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001cc0))
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@broadcast, @in6=@remote, 0x4e21, 0x8, 0x4e23, 0xa, 0xa, 0x40, 0x80, 0x16, r7, 0xee00}, {0x6, 0x3, 0xffffffffffffffff, 0x7f, 0x10, 0x6, 0x6, 0x9}, {0x7fff, 0x8, 0xc8, 0xc000000000000000}, 0xcc, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0xff}, 0x2, @in6=@mcast2, 0x34ff, 0x1, 0x3, 0x0, 0x9, 0xf9b7}}, 0xe8)
ioctl$int_out(r5, 0x5460, &(0x7f0000001e00))
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000001f40)={<r11=>r4, &(0x7f0000001e40)='+[&!}#\x00', 0x1a580, &(0x7f0000001e80)={@_ha_fsid={[0x99d5, 0xbf7]}, {0x6, 0x2ff, 0xffffffff, 0x6}}, 0x5e4, &(0x7f0000001ec0), &(0x7f0000001f00)=0x25d})
ioctl$SIOCX25GCALLUSERDATA(r11, 0x89e4, &(0x7f0000001f80)={0x32, "f38116ee8e54ba2bdb259a639d706e7a939b63d3424d2773dab1131524a8dccc8d1f9fc8d7af95955818664dc557534732d5ffcecc7692eb804236051c9594235fe6adfe7c391e636b3c9ff6847d9af8d9719054a54f7a71570a28ecdf37deac4b6ba05f27486041e6ca8ee37563de21c45dabce59d46ec7b421e11faf4ba14c"})
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000002040)={r2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002080)={'vxcan1\x00'})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x140c, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x5)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000021c0)={<r12=>0x0, 0x4}, &(0x7f0000002200)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000002240)={r12, 0x3}, 0x8)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000002280)={0x0, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8})
getsockname$packet(r9, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002340)=0x14)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

929.836089ms ago: executing program 0 (id=8700):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async)
readv(r3, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) (async)
r5 = socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) (async)
recvmsg$qrtr(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f0000002a80)={&(0x7f0000002a00)=[{&(0x7f00000001c0)="21f0adb6f3ab8bf56705b39173225995a50de0328d12e5f887857ff03c1a1ee335e99ba4128e4cf8ae0815408b5e7dd5eae82fdab6875caf44178794d4ad462f7043eecf5872b62d477db80dd1563c8ad1ad588f584b69dd9a4cdf2934a35b8d1457523b8cbac2778b4b5d730f4d8b7997b9c6c1dac6e64a93227c87632df1e8f3374c4b891eb6030d847bcc4f664a05ef8599699ce8b658e95680cb750ef7e1afcb5b395fa8", 0xa6}, {&(0x7f0000000280)="e22575d9fae65004c26f2aed9823186f8e35b6e174539cb86609a6708d11648a87fc939eeac32b1b9251d034cdd6", 0x2e}, {&(0x7f00000002c0)="5f6c650e5e2b4886128bface6234c8f4deb6b7a58141cc1a55840f42c7090c510ad3deb9ebc67d6b9ee92222844c57f0fb67e2a1f6", 0x35}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="b24eb71ebdc659e737a4a7c122205eab4e5a1aa39b31e8006846834cc09a1cefca10009fbe12e1442d3269e1ae03", 0x2e}, {&(0x7f00000029c0)="61faed04ff6ee2610aeb65dc5adb48f1220a33b63bae2cfef08decdda478b53d9abb50faf609b2", 0x27}], 0x6, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8}) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002600010324bd7002ffdbdf2501000004840352bf92bc8cab1a70bd0e47e41bd459a80a5a392e93488dda5a3d8f80b3b6e74c77ab1dab4aa7c2db67948200b1d9760478"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40000001}]}}]}, 0x48}}, 0x40000)

871.726889ms ago: executing program 0 (id=8701):
r0 = socket$kcm(0x15, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800dd8d000000fd17956904d020000000000002100004fe00ac050000000006001500080000000c0016800800020064010100"], 0x30}}, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'caif0\x00'})
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
setsockopt$sock_attach_bpf(r0, 0x114, 0x3, 0x0, 0x10)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

252.403271ms ago: executing program 2 (id=8702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0x12, "74b000561de584b703c87214d42243b6"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed54fe6655490000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0xc, "c8bf6909a79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

201.175036ms ago: executing program 2 (id=8703):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async)
ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x77, "4603243608148a3e1005345b85dfa790a589cfd639cd6d682dc8b2a7abfa7d22572a2c1a93a567fb181d40f1e235ca61abdd31bf9abae0a3656ae2873439a617ea7a2e51ca5eeb41d896d846061834fd43a35f61007251ff86b371829687905cf35bcf887716ccf97cc47a3d9a7b606910a7e20d5bec56a49a96dd92f6ae7e3f"}) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001200)={{<r1=>r0, &(0x7f0000000100)='$.\x7f^&^\x00', 0x80, &(0x7f0000000140)={@align=0x7, {0x40, 0x400, 0x4, 0x8000}}, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2}, {[0x7ff, 0x8, 0xbe4, 0x6]}, 0x6, 0x1000, &(0x7f0000000200)=""/4096})
bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private1, 0xe9}}, 0x24)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x84, r2, 0x34, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x84}}, 0x0) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000014c0))
connect$pppl2tp(r1, &(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote}, 0x0, 0x3, 0x0, 0x4}}, 0x26) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001580)={@loopback, @remote, <r5=>0x0}, &(0x7f00000015c0)=0xc)
sendmsg$nl_route(r4, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@can_delroute={0x3c, 0x19, 0x10, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "2dc7100b0776aca6"}, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r1) (rerun: 32)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x80, r6, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a8a0c3e1c3"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2185582320"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "f10f2ab40f1d50bc"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x55933f17042e353b}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001840)=0x1) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x10, r0, 0xd6fa7000) (async, rerun: 64)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x0, r1}, 0x18) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x8, &(0x7f0000001880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0xa, 0x2, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000018c0)='syzkaller\x00', 0x4, 0xb, &(0x7f0000001900)=""/11, 0x40f00, 0x51, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000001940)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001a00)=[r7], &(0x7f0000001a40)=[{0x0, 0x2, 0xe, 0x9}, {0x1, 0x2, 0x10, 0x7}, {0x2, 0x4, 0x10, 0x6}, {0x2, 0x3, 0x3, 0x3}, {0x4, 0x4, 0xb, 0x2}], 0x10, 0x3}, 0x94) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000001b80)) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001bc0))
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x4000, r3}, 0x18) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d80)={@map=r7, 0x7, 0x0, 0x5, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001cc0)=[0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001dc0)={@fallback, r8, 0x1c, 0x8, 0x0, @void, @value=r1, @void, @void, r9}, 0x20)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000001e00)={@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "16a01e5b7d0253cab5f78082ae85481cbcb7934be63c28eed914be2413eddeba", 0x3, 0x14000, 0x2f5, 0x7}, 0x3c) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x28a021c8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc439f90a5badfe39}}, [@NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async, rerun: 64)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001fc0), 0x4)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000002040), r1)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000091)

120.769349ms ago: executing program 2 (id=8704):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
unshare(0xe040400)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = socket(0x2b, 0x1, 0x0)
listen(r8, 0x0)
ppoll(&(0x7f0000000280)=[{r8, 0x3060}], 0x1, &(0x7f0000000400), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x3)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r10, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="db7926bd7000ffdbdf2509000000080006000600000018000180090006006e6f6e6580000000080005000000000008000400ff7fffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x100000c0)
ioctl$XFS_IOC_SWAPEXT(r11, 0xc0c0586d, &(0x7f00000005c0)={0x0, r0, r0, 0xb, 0xff, '\x00', {0x5, 0x9, 0x10, 0x3e, 0xffff5bf6, 0x3ff, 0x9, 0x1, {0x388, 0x6}, {0x0, 0x4}, {0x6, 0x744}, 0x7, 0x9, 0x0, 0x2, 0x3, 0x2, 0x3, 0x3, 0x8, 0xd, '\x00', 0x6, 0x8, 0x2, 0x3ff}})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000)

64.071394ms ago: executing program 1 (id=8705):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
close(r0) (async)
r1 = socket(0x10, 0x800, 0xfffffffd)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000000803000000000000000000030000020900010073797a3100000000060002408809000014000480060007400000000600090500030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x800) (async)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="23da003608f93e18", @ANYRES16=0x0, @ANYRES32=0x0], 0x20}, 0x1, 0x200000000000000}, 0x4000880)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
getpid()
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)

63.906649ms ago: executing program 1 (id=8706):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

63.305606ms ago: executing program 0 (id=8707):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xd14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

0s ago: executing program 1 (id=8708):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r4, &(0x7f0000000c40)={&(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000500)="78b98db6907892bc99927bd84fa35423c246fe928af03fd89e6a2ad128e2c1cf180809c9b9753da1bbe55576baab41dc36fe02946459e440c5138cd9ba2f0d40f29b9bb54621aa3da4e971d3068a77817663e823f2cc46ce5d5d9583db4153365e28c1c930371ad6a393b717d238996214e000e2c19ef3def427ebcd34eb0781c6ff46735cd180df6fd52c596bc10e7544650ed7", 0x94}, {&(0x7f00000005c0)="da1949e95b0daf3c3909627754636d03be5c69b5dc1ba2966c18b2e934f05745b6275ea6c6e6ed64d01a06f565de4e7aae4bd1fda3509046d009f4f76628cde32d4b5fa9baa073d83c7ccab8cc49e645f0505772e6a6", 0x56}, {&(0x7f0000000640)}, {&(0x7f0000000680)="3fbb891dd07b692afdfb817309e42f6a452d73b1b3c4fb3179f9f13885f68cf1dd6db768aa00a526c1a94e8242fbd04ba781e370f64e88ff10c81e3d031409b329fb883bee081e48f9c748bc62acc8a2026880880018ec22daee1d5ef69ec7b4b5c281a50fff783f19f820e7242ea00048106e760c82907e6cf22bd9b0ec3047691aa1445485ab675382d65d192a929d822e75ecddb72de6c94259a35f51e0bd6eb6bba6a1", 0xa5}, {&(0x7f0000000740)="dfef28e50c529784561e92986bedc82fecb6e3732d5f7a653c1c5bccecf9bab45114b0afb92d59ca99271cf56d2fadb68b1b1a08ee8dcf03aa0057c14e343c4c2be42d6b9a5285f7856a2a19f480ffa742e3841e4cf7da606b3a1c408ef812fdacbc6a49cf6f4997485780108595c45fbd23202979fab06532ae9a4bc9cc35cb334dd2c7e98083a9b7f0560e1d", 0x8d}, {&(0x7f0000000800)="9515c5a70a3d9bbfd5fc29c892645ae2c7ad5cece6c2b5be2036208d9898aef900d50fc6fa9a6e3e59540647e6a9685de81065b1d7af2b7e442e553d3ea27a508ebd4d43aa6b2c328b3950461576ad62a64fb3faf1b8f5f901de57420039da2222ffc4b393172d2601dc13b6b1f14306a0f84f9995fbec95048f60f84a8b9ca6946966aa5c6f3bba77226460f6c8834b0b2d0a1ad2562144957336327080b1d2868aad13c4992d3b8b", 0xa9}, {&(0x7f00000008c0)="ea951a7bea77239bceedd343607b803730236196b7ecf2a3afff615c9b0cc004333e695ab5f120be27ae6e2fc4d93eda9df7aeef184e52d76282597e879f9d3738e43c8b45aa87f0447fef1544812948969bc9d81cc394a3d1dd77ead185d4845a7cf0de4909ed0224d5f66709bb411a18e9d6408969a1246be067f579a954f00802c2abf4814919aa2905b36ccd05b90ce1dbe157d949eaa764a108ebfc97ff3ee4c83bfadd40903f7bb6d3b46faa47949d76be2ac58cb70ffa6c1ff48919464b1e81d3e96abc275f5cb92f8f826514cf9e131ef5be5745385db0a258853470f7c3cab69fb4518bd9fc7084cae59970e38646f03d3707ba06029d", 0xfb}, {&(0x7f00000009c0)="b88ab71ce705555de7c73d5637b06a0124f8b2187be4be441a82ecafab42f91b22226204b04086e0d2fff54684b87b2ea52bf2fb6d5611", 0x37}, {&(0x7f0000000a00)="1da114aa4b20a62bd458ab0003c9fd0c05bb4df2a5a3950a67e59ac7a65fb3767d14839a159b43777cd3e7f5bd4a2e2ef556d5fd54fc9ec904592433c1ce273af9fe3562a225fbd0122ae682fc", 0x4d}, {&(0x7f0000000b00)="94b577b04dfabad985cd6180cf15abc2135b8e37620619cf8641ad0e2f29a1336b2b0d58f9420bb446628e5e51c0854acedb3a8bd0de373cabee803e6b87b17279c5b98c561417b2def91781a9f930b6c1cd9a128395c94bbe37fbfb2f5a6f2ef563dbf4d1adc3731272135973ecf8fbf6", 0x71}], 0xa}, 0x40800)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
accept4$unix(r8, 0x0, &(0x7f0000000140), 0x800)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4040000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

kernel console output (not intermixed with test programs):

_parse+0x1c9/0x2a0
[  620.551924][  T613]  genl_family_rcv_msg_doit+0x22a/0x330
[  620.551937][  T613]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  620.551952][  T613]  ? bpf_lsm_capable+0x9/0x20
[  620.551963][  T613]  ? security_capable+0x7e/0x2c0
[  620.551976][  T613]  genl_rcv_msg+0x61c/0x7a0
[  620.551989][  T613]  ? __pfx_genl_rcv_msg+0x10/0x10
[  620.551999][  T613]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  620.552010][  T613]  ? __lock_acquire+0x6b5/0x2cf0
[  620.552024][  T613]  netlink_rcv_skb+0x232/0x4b0
[  620.552033][  T613]  ? __pfx_genl_rcv_msg+0x10/0x10
[  620.552043][  T613]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  620.552058][  T613]  ? down_read+0x272/0x2e0
[  620.552069][  T613]  ? genl_rcv+0xd/0x40
[  620.552079][  T613]  genl_rcv+0x28/0x40
[  620.552089][  T613]  netlink_unicast+0x80f/0x9b0
[  620.552104][  T613]  ? __pfx_netlink_unicast+0x10/0x10
[  620.552117][  T613]  ? netlink_sendmsg+0x650/0xb40
[  620.552124][  T613]  ? skb_put+0x11b/0x210
[  620.552135][  T613]  netlink_sendmsg+0x813/0xb40
[  620.552147][  T613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  620.552157][  T613]  ? aa_sock_msg_perm+0xf1/0x1b0
[  620.552170][  T613]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  620.552180][  T613]  ____sys_sendmsg+0x972/0x9f0
[  620.552194][  T613]  ? __pfx_____sys_sendmsg+0x10/0x10
[  620.552207][  T613]  ? import_iovec+0x73/0xa0
[  620.552218][  T613]  ___sys_sendmsg+0x2a5/0x360
[  620.552231][  T613]  ? __pfx____sys_sendmsg+0x10/0x10
[  620.552243][  T613]  ? futex_wake+0x4ac/0x580
[  620.552265][  T613]  ? __fget_files+0x2a/0x420
[  620.552271][  T613]  ? __fget_files+0x3a0/0x420
[  620.552282][  T613]  __x64_sys_sendmsg+0x1bd/0x2a0
[  620.552293][  T613]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  620.552307][  T613]  ? rcu_is_watching+0x15/0xb0
[  620.552322][  T613]  do_syscall_64+0x14d/0xf80
[  620.552332][  T613]  ? trace_irq_disable+0x3b/0x150
[  620.552338][  T613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.552348][  T613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.552356][  T613] RIP: 0033:0x7f3728f9cdd9
[  620.552365][  T613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.552372][  T613] RSP: 002b:00007f3729dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  620.552380][  T613] RAX: ffffffffffffffda RBX: 00007f3729215fa0 RCX: 00007f3728f9cdd9
[  620.552386][  T613] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  620.552408][  T613] RBP: 00007f3729032d69 R08: 0000000000000000 R09: 0000000000000000
[  620.552412][  T613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.552417][  T613] R13: 00007f3729216038 R14: 00007f3729215fa0 R15: 00007ffd19e09fd8
[  620.552430][  T613]  </TASK>
[  620.788781][  T625] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[  620.829268][  T632] dvmrp6: entered allmulticast mode
[  621.027690][  T648] bond159: entered promiscuous mode
[  621.034175][  T648] bond159: entered allmulticast mode
[  621.036348][  T648] 8021q: adding VLAN 0 to HW filter on device bond159
[  621.074268][  T648] macvlan9: entered promiscuous mode
[  621.080036][  T648] macvlan9: entered allmulticast mode
[  621.150506][  T654] lo speed is unknown, defaulting to 1000
[  621.271583][  T654] ip6_vti0 speed is unknown, defaulting to 1000
[  621.546699][  T700] lo speed is unknown, defaulting to 1000
[  621.691575][  T700] ip6_vti0 speed is unknown, defaulting to 1000
[  621.710424][  T709] vlan18: entered promiscuous mode
[  622.214352][  T718] vlan18: entered allmulticast mode
[  622.219383][  T718] veth0_to_bond: entered allmulticast mode
[  622.271082][  T720] IPVS: set_ctl: invalid protocol: 44 172.20.20.32:20000
[  622.369261][  T728] vlan6: entered promiscuous mode
[  622.644543][  T742] sctp: [Deprecated]: syz.1.7363 (pid 742) Use of int in max_burst socket option deprecated.
[  622.644543][  T742] Use struct sctp_assoc_value instead
[  623.214721][  T730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.245235][  T746] x_tables: duplicate underflow at hook 1
[  623.287016][  T750] validate_nla: 6 callbacks suppressed
[  623.287027][  T750] netlink: 'syz.0.7366': attribute type 1 has an invalid length.
[  623.292367][  T750] netlink: 'syz.0.7366': attribute type 2 has an invalid length.
[  623.296283][  T750] netlink: 'syz.0.7366': attribute type 1 has an invalid length.
[  623.305103][  T748] tap0: tun_chr_ioctl cmd 1074025676
[  623.306942][  T748] tap0: owner set to 0
[  623.336106][  T758] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode
[  623.338393][  T758] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode
[  623.344124][  T758] tipc: Resetting bearer <eth:syzkaller0>
[  623.351008][  T760] netlink: 'syz.1.7369': attribute type 1 has an invalid length.
[  623.354307][  T760] netlink: 'syz.1.7369': attribute type 1 has an invalid length.
[  623.463857][  T765] netlink: 'syz.1.7371': attribute type 13 has an invalid length.
[  623.466254][  T765] netlink: 'syz.1.7371': attribute type 17 has an invalid length.
[  623.480805][  T765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  623.708500][  T781] netlink: 'syz.1.7374': attribute type 11 has an invalid length.
[  623.710931][  T781] __nla_validate_parse: 19 callbacks suppressed
[  623.710939][  T781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7374'.
[  624.177530][  T787] pim6reg: mtu less than device minimum
[  624.270335][  T795] sctp: [Deprecated]: syz.2.7377 (pid 795) Use of struct sctp_assoc_value in delayed_ack socket option.
[  624.270335][  T795] Use struct sctp_sack_info instead
[  624.277261][  T796] sctp: [Deprecated]: syz.2.7377 (pid 796) Use of struct sctp_assoc_value in delayed_ack socket option.
[  624.277261][  T796] Use struct sctp_sack_info instead
[  624.283847][  T796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7377'.
[  624.416391][  T800] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000
[  624.487026][  T804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'.
[  624.489936][  T804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'.
[  624.493584][  T804] netlink: 'syz.1.7380': attribute type 12 has an invalid length.
[  624.496614][  T804] netlink: 'syz.1.7380': attribute type 11 has an invalid length.
[  624.587627][  T816] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  624.590163][  T816] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  624.596272][  T816] tipc: Resetting bearer <eth:syzkaller0>
[  624.831282][  T825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7387'.
[  624.878426][  T832] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[  624.880936][  T832] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[  624.883894][  T832] tipc: Resetting bearer <eth:syzkaller0>
[  624.953769][  T834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7390'.
[  624.957848][  T834] openvswitch: : Dropping previously announced user features
[  624.964081][  T834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7390'.
[  624.968084][  T834] openvswitch: : Dropping previously announced user features
[  625.058524][  T839] openvswitch: netlink: Message has 173 unknown bytes.
[  625.178886][  T847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7395'.
[  625.183170][  T847] netem: change failed
[  625.206954][  T849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7396'.
[  625.226019][  T849] bond152: option fail_over_mac: invalid value (127)
[  625.228921][  T849] bond152 (unregistering): Released all slaves
[  625.313000][  T853] tipc: Resetting bearer <eth:syzkaller0>
[  625.315856][  T853] bond115: (slave veth51): Releasing backup interface
[  625.319448][  T853] bond118: (slave bridge55): Releasing backup interface
[  625.321711][  T853] bridge55: left promiscuous mode
[  625.323843][  T853] bridge55: left allmulticast mode
[  625.327046][  T853] bond120: (slave veth53): Releasing active interface
[  625.329275][  T853] bond120: (slave veth53): the permanent HWaddr of slave - 52:12:ab:fe:8a:d8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  625.335585][  T853] bond120: (slave veth55): Releasing active interface
[  625.339301][  T853] bond122: (slave bridge56): Releasing backup interface
[  625.341507][  T853] bridge56: left promiscuous mode
[  625.346730][  T853] bond126: (slave bond127): Releasing backup interface
[  625.348999][  T853] bond127: left promiscuous mode
[  625.352054][  T853] bond130: (slave wireguard2): Releasing backup interface
[  625.355818][  T853] wireguard2: left promiscuous mode
[  625.357572][  T853] bond130: (slave wireguard3): making interface the new active one
[  625.360147][  T853] wireguard3: entered promiscuous mode
[  625.364433][  T853] bond130: (slave wireguard3): Releasing backup interface
[  625.366772][  T853] wireguard3: left promiscuous mode
[  625.373218][  T853] bond141: (slave wireguard4): Releasing backup interface
[  625.375383][  T853] wireguard4: left promiscuous mode
[  625.378510][  T853] bond146: (slave bridge65): Releasing backup interface
[  625.380788][  T853] bridge65: left promiscuous mode
[  625.384278][  T853] bond149: (slave gretap9): Releasing active interface
[  625.388607][  T853] bond151: (slave gretap10): Releasing active interface
[  625.430090][  T858] ip6gretap0: entered promiscuous mode
[  625.439432][  T858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7398'.
[  625.538148][  T870] xt_nfacct: accounting object `syz0' does not exist
[  625.607062][  T873] hsr_slave_0: left promiscuous mode
[  625.673752][  T879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  626.518803][  T922] lo speed is unknown, defaulting to 1000
[  626.657817][  T922] ip6_vti0 speed is unknown, defaulting to 1000
[  628.781989][  T895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  628.893170][  T948] bond128: option arp_interval: invalid value (18446744073709551615)
[  628.896472][  T948] bond128: option arp_interval: allowed values 0 - 2147483647
[  628.901551][  T948] bond128 (unregistering): Released all slaves
[  628.938336][  T951] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  628.948234][  T953] lo speed is unknown, defaulting to 1000
[  629.002140][  T962] netlink: set zone limit has 4 unknown bytes
[  629.034427][  T962] netlink: set zone limit has 4 unknown bytes
[  629.081848][  T953] ip6_vti0 speed is unknown, defaulting to 1000
[  629.128730][  T973] lo speed is unknown, defaulting to 1000
[  629.277025][  T973] ip6_vti0 speed is unknown, defaulting to 1000
[  630.029489][ T1020] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  630.217948][ T1032] __nla_validate_parse: 8 callbacks suppressed
[  630.217958][ T1032] netlink: 181256 bytes leftover after parsing attributes in process `syz.2.7433'.
[  630.275321][ T1046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7439'.
[  630.331461][ T1048] validate_nla: 3 callbacks suppressed
[  630.331470][ T1048] netlink: 'syz.1.7440': attribute type 1 has an invalid length.
[  630.372023][ T1051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7441'.
[  630.391338][ T1051] netlink: 'syz.1.7441': attribute type 6 has an invalid length.
[  630.394794][ T1051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.599547][ T1063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7444'.
[  630.603144][ T1063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7444'.
[  630.706866][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7446'.
[  630.751143][ T7377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.753981][ T7377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.783021][ T1081] lo speed is unknown, defaulting to 1000
[  630.871871][ T1081] ip6_vti0 speed is unknown, defaulting to 1000
[  631.048307][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7449'.
[  631.051176][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7449'.
[  631.077200][ T1093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7450'.
[  631.080075][ T1093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7450'.
[  631.084368][ T1093] netlink: 'syz.0.7450': attribute type 11 has an invalid length.
[  631.226470][ T1111] workqueue: Failed to create a rescuer kthread for wq "bond152": -EINTR
[  631.278708][ T1124] netlink: 'syz.1.7455': attribute type 15 has an invalid length.
[  631.458149][ T1134] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode
[  631.460983][ T1134] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode
[  631.473033][ T1134] tipc: Resetting bearer <eth:syzkaller0>
[  631.480296][ T1134] tipc: New replicast peer: 255.255.255.255
[  631.482281][ T1134] tipc: Enabled bearer <udp:syz1>, priority 10
[  631.617230][ T1149] x_tables: duplicate underflow at hook 2
[  631.622848][ T1149] netlink: 'syz.2.7462': attribute type 29 has an invalid length.
[  632.209368][ T1175] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  632.218958][ T1174] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  632.229770][ T1174] ip6gre4: entered allmulticast mode
[  632.234805][ T1174] team0: Device ip6gre4 is of different type
[  632.627140][ T1197] netlink: 'syz.2.7473': attribute type 1 has an invalid length.
[  632.649759][ T1197] bond128: (slave vxcan1): The slave device specified does not support setting the MAC address
[  632.655670][ T1197] bond128: (slave vxcan1): Error -95 calling set_mac_address
[  632.777140][ T1212] netlink: 'syz.2.7476': attribute type 1 has an invalid length.
[  633.059862][ T1228] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[  633.062287][ T1228] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[  633.065274][ T1228] tipc: Resetting bearer <eth:syzkaller0>
[  633.165519][ T1230] bridge70: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  633.216200][ T1232] netlink: 'syz.0.7482': attribute type 1 has an invalid length.
[  633.229945][ T1232] 8021q: adding VLAN 0 to HW filter on device bond152
[  633.650359][ T1266] lo speed is unknown, defaulting to 1000
[  633.686774][ T1268] netlink: 'syz.1.7493': attribute type 29 has an invalid length.
[  633.691389][ T1268] netlink: 'syz.1.7493': attribute type 29 has an invalid length.
[  633.741325][ T1266] ip6_vti0 speed is unknown, defaulting to 1000
[  633.752960][ T1271] syzkaller1: entered allmulticast mode
[  633.755707][ T1271] syzkaller1: left allmulticast mode
[  634.033259][ T1280] netlink: 'syz.1.7496': attribute type 33 has an invalid length.
[  634.116287][ T1285] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000
[  634.344107][ T1288] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  634.346683][ T1288] tipc: Resetting bearer <eth:syzkaller0>
[  634.440609][ T1293] lo speed is unknown, defaulting to 1000
[  634.481345][ T1294] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  634.576193][ T1293] ip6_vti0 speed is unknown, defaulting to 1000
[  635.030137][ T1309] 8021q: adding VLAN 0 to HW filter on device bond129
[  635.068487][ T1306] vlan6: entered allmulticast mode
[  635.173111][ T1306] bond129: entered allmulticast mode
[  635.531782][ T1327] __nla_validate_parse: 23 callbacks suppressed
[  635.531794][ T1327] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.7507'.
[  635.536992][ T1327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7507'.
[  635.539967][ T1327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7507'.
[  635.543580][ T1327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7507'.
[  635.594839][ T1331] tipc: Resetting bearer <eth:syzkaller0>
[  635.597221][ T1331] debugfs: 'netdev:syzkaller0' already exists in 'phy4'
[  635.617528][ T1331] tipc: Resetting bearer <eth:syzkaller0>
[  635.881449][ T1341] validate_nla: 3 callbacks suppressed
[  635.881461][ T1341] netlink: 'syz.0.7512': attribute type 58 has an invalid length.
[  635.886317][ T1341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7512'.
[  636.111147][ T1361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7516'.
[  636.160908][ T1367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7518'.
[  636.164451][ T1367] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7518'.
[  636.168795][ T1367] team_slave_1: Caught tx_queue_len zero misconfig
[  636.305456][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7519'.
[  636.473609][ T1379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7521'.
[  636.478700][ T1382] openvswitch: netlink: Unknown key attributes 2
[  636.597280][   T34] audit: type=1107 audit(1778577109.440:23): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.603420][   T34] audit: type=1107 audit(1778577109.440:24): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.608292][   T34] audit: type=1107 audit(1778577109.440:25): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.615125][   T34] audit: type=1107 audit(1778577109.440:26): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.619339][   T34] audit: type=1107 audit(1778577109.440:27): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.623641][ T1399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.626536][   T34] audit: type=1107 audit(1778577109.440:28): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.630578][   T34] audit: type=1107 audit(1778577109.440:29): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.637035][   T34] audit: type=1107 audit(1778577109.440:30): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.644259][   T34] audit: type=1107 audit(1778577109.440:31): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.649487][   T34] audit: type=1107 audit(1778577109.440:32): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  636.851244][ T1414] lo speed is unknown, defaulting to 1000
[  636.901058][ T1416] netlink: 'syz.2.7529': attribute type 29 has an invalid length.
[  636.906502][ T1416] netlink: 'syz.2.7529': attribute type 29 has an invalid length.
[  636.943531][ T1414] ip6_vti0 speed is unknown, defaulting to 1000
[  637.494827][ T1449] netlink: 'syz.0.7539': attribute type 21 has an invalid length.
[  637.509330][ T1449] netlink: 'syz.0.7539': attribute type 21 has an invalid length.
[  637.721652][ T7377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.729724][ T7377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.814765][ T1481] netlink: 'syz.2.7545': attribute type 29 has an invalid length.
[  638.064646][ T7193] block nbd0: Receive control failed (result -32)
[  638.268665][ T1501] netlink: 'syz.1.7550': attribute type 16 has an invalid length.
[  638.273451][ T1501] netlink: 'syz.1.7550': attribute type 17 has an invalid length.
[  638.282731][ T1501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  638.496422][ T1535] batadv1: entered promiscuous mode
[  638.498035][ T1535] batadv1: entered allmulticast mode
[  638.546172][ T1534] smc: removing ib device sqz0
[  638.772675][ T1560] syzkaller1: entered promiscuous mode
[  638.775500][ T1560] syzkaller1: entered allmulticast mode
[  639.455686][ T1592] veth0_to_bond: left allmulticast mode
[  639.458886][ T1592] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  639.465592][ T1592] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  639.468121][ T1592] gretap4: left allmulticast mode
[  639.469907][ T1592] geneve6: left allmulticast mode
[  639.471705][ T1592] macvlan4: left allmulticast mode
[  639.474291][ T1592] macvlan5: left allmulticast mode
[  639.476295][ T1592] ipvlan1: left allmulticast mode
[  639.477921][ T1592] ipvlan2: left allmulticast mode
[  639.479551][ T1592] ipvlan3: left allmulticast mode
[  639.481141][ T1592] ipvlan4: left allmulticast mode
[  639.483645][ T1592] bond111: left allmulticast mode
[  639.485209][ T1592] bridge48: left allmulticast mode
[  639.486907][ T1592] bond113: left allmulticast mode
[  639.488428][ T1592] bridge50: left allmulticast mode
[  639.490177][ T1592] ip6gre2: left allmulticast mode
[  639.491773][ T1592] bond117: left allmulticast mode
[  639.494136][ T1592] erspan2: left allmulticast mode
[  639.495870][ T1592] ip6tnl11: left allmulticast mode
[  639.497669][ T1592] macvlan6: left allmulticast mode
[  639.499601][ T1592] bridge55: left allmulticast mode
[  639.501282][ T1592] gtp5: left allmulticast mode
[  639.503474][ T1592] bond124: left allmulticast mode
[  639.505236][ T1592] bond125: left allmulticast mode
[  639.507372][ T1592] bond131: left allmulticast mode
[  639.509387][ T1592] bridge59: left allmulticast mode
[  639.511421][ T1592] bridge60: left allmulticast mode
[  639.514276][ T1592] bond132: left allmulticast mode
[  639.516001][ T1592] macvlan7: left allmulticast mode
[  639.517578][ T1592] bridge61: left allmulticast mode
[  639.519161][ T1592] bridge63: left allmulticast mode
[  639.521152][ T1592] sit8: left allmulticast mode
[  639.536551][ T1592] ip6tnl13: left allmulticast mode
[  639.559089][ T1592] vlan10: left allmulticast mode
[  639.561008][ T1592] bond152: left allmulticast mode
[  639.567467][ T1592] bond153: left allmulticast mode
[  639.569089][ T1592] bridge71: left allmulticast mode
[  639.595171][ T1592] bond156: left promiscuous mode
[  639.604239][ T1592] bond159: left promiscuous mode
[  639.605800][ T1592] bond159: left allmulticast mode
[  639.611566][ T1597] netlink: 'syz.0.7568': attribute type 4 has an invalid length.
[  640.607056][ T1656] tipc: Trying to set illegal importance in message
[  640.766479][ T1663] netlink: 'syz.2.7589': attribute type 3 has an invalid length.
[  640.770484][ T1663] __nla_validate_parse: 29 callbacks suppressed
[  640.770497][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7589'.
[  640.790838][ T1663] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  640.941780][ T1673] netlink: 'syz.2.7593': attribute type 12 has an invalid length.
[  641.087328][ T1682] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.7594'.
[  641.091064][ T1682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7594'.
[  641.095030][ T1682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7594'.
[  641.098760][ T1682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7594'.
[  641.222348][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7597'.
[  641.231628][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7597'.
[  641.349870][ T1695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7599'.
[  641.383576][ T1697] netlink: 'syz.1.7600': attribute type 1 has an invalid length.
[  641.395735][ T1697] bond160: entered promiscuous mode
[  641.397565][ T1697] 8021q: adding VLAN 0 to HW filter on device bond160
[  641.416021][ T1697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7600'.
[  641.475161][ T1702] netlink: 'syz.1.7602': attribute type 13 has an invalid length.
[  641.477679][ T1702] netlink: 'syz.1.7602': attribute type 17 has an invalid length.
[  641.498964][ T1702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  641.576979][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7603'.
[  642.021315][ T1718] SET target dimension over the limit!
[  642.290843][ T1730] netlink: 'syz.0.7611': attribute type 13 has an invalid length.
[  642.293581][ T1730] netlink: 'syz.0.7611': attribute type 17 has an invalid length.
[  642.297654][ T1730] ip_vti0: left allmulticast mode
[  642.301564][ T1730] bridge0: left allmulticast mode
[  642.318765][ T1730] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  642.537568][ T1745] netlink: 'syz.1.7615': attribute type 10 has an invalid length.
[  642.546454][ T1745] netlink: 'syz.1.7615': attribute type 10 has an invalid length.
[  642.698530][ T1749] bond161: option broadcast_neighbor: invalid value (30)
[  642.701837][ T1749] bond161 (unregistering): Released all slaves
[  643.149701][ T1770] netlink: 'syz.2.7622': attribute type 5 has an invalid length.
[  643.427252][ T1795] tap0: tun_chr_ioctl cmd 1074025677
[  643.429834][ T1795] tap0: linktype set to 778
[  643.693005][ T1807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.695611][ T1807] IPv6: NLM_F_CREATE should be set when creating new route
[  643.698670][ T1807] IPv6: NLM_F_CREATE should be set when creating new route
[  643.701258][ T1807] IPv6: NLM_F_CREATE should be set when creating new route
[  643.716082][ T1807] netlink: 'syz.2.7635': attribute type 10 has an invalid length.
[  643.730555][ T1810] xt_l2tp: invalid flags combination: 8
[  643.851285][ T1823] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  644.182190][ T1840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  644.729412][ T1865] tipc: Resetting bearer <eth:syzkaller0>
[  644.750999][ T1862] syzkaller1: entered promiscuous mode
[  644.756006][ T1862] syzkaller1: entered allmulticast mode
[  645.026301][ T1878] syzkaller1: entered allmulticast mode
[  645.166805][ T1887] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  645.647910][ T1918] : left promiscuous mode
[  645.651865][ T1918] : left allmulticast mode
[  645.653806][ T1918] bridge_slave_1: left allmulticast mode
[  645.655711][ T1918] veth0_to_team: left promiscuous mode
[  645.657396][ T1918] veth0_to_team: left allmulticast mode
[  645.661961][ T1918] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  645.665146][ T1918] d: left promiscuous mode
[  645.666660][ T1918] d: left allmulticast mode
[  645.668154][ T1918] ip6erspan0: left promiscuous mode
[  645.669810][ T1918] ip6erspan0: left allmulticast mode
[  645.671619][ T1918] macvtap1: left allmulticast mode
[  645.673604][ T1918] bond36: left allmulticast mode
[  645.675508][ T1918] bond40: left allmulticast mode
[  645.677132][ T1918] vlan5: left allmulticast mode
[  645.678633][ T1918] bond41: left allmulticast mode
[  645.680174][ T1918] gretap4: left allmulticast mode
[  645.681737][ T1918] veth27: left allmulticast mode
[  645.683827][ T1918] bond45: left promiscuous mode
[  645.685426][ T1918] bond45: left allmulticast mode
[  645.687520][ T1918] vlan6: left allmulticast mode
[  645.689107][ T1918] bond46: left allmulticast mode
[  645.690689][ T1918] ip6gre4: left allmulticast mode
[  645.692792][ T1918] bond54: left promiscuous mode
[  645.694527][ T1918] bond54: left allmulticast mode
[  645.696348][ T1918] xfrm1: left allmulticast mode
[  645.698259][ T1918] ipip5: left promiscuous mode
[  645.699793][ T1918] bond57: left promiscuous mode
[  645.701310][ T1918] bond60: left promiscuous mode
[  645.704293][ T1918] bond61: left allmulticast mode
[  645.706224][ T1918] ip6tnl3: left promiscuous mode
[  645.707998][ T1918] bond63: left promiscuous mode
[  645.709644][ T1918] bond63: left allmulticast mode
[  645.711443][ T1918] veth33: left allmulticast mode
[  645.713667][ T1918] bond67: left allmulticast mode
[  645.715558][ T1918] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode
[  645.718073][ T1918] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode
[  645.720925][ T1918] bond70: left promiscuous mode
[  645.723132][ T1918] bond70: left allmulticast mode
[  645.724718][ T1918] macvlan0: left promiscuous mode
[  645.726205][ T1918] macvlan0: left allmulticast mode
[  645.727823][ T1918] ip6tnl4: left allmulticast mode
[  645.729407][ T1918] bond73: left promiscuous mode
[  645.731039][ T1918] ip6gre5: left promiscuous mode
[  645.732680][ T1918] ip6gre5: left allmulticast mode
[  645.734616][ T1918] bond76: left promiscuous mode
[  645.736405][ T1918] bond77: left promiscuous mode
[  645.738303][ T1918] bond78: left promiscuous mode
[  645.740166][ T1918] bridge36: left allmulticast mode
[  645.742270][ T1918] bond79: left promiscuous mode
[  645.744665][ T1918] bond79: left allmulticast mode
[  645.746606][ T1918] bond80: left promiscuous mode
[  645.748480][ T1918] bond80: left allmulticast mode
[  645.750311][ T1918] ipip6: left promiscuous mode
[  645.752033][ T1918] gretap5: left promiscuous mode
[  645.754079][ T1918] gretap5: left allmulticast mode
[  645.759541][ T1918] bond81: left promiscuous mode
[  645.761082][ T1918] bond81: left allmulticast mode
[  645.762877][ T1918] bond83: left promiscuous mode
[  645.764556][ T1918] bond83: left allmulticast mode
[  645.766184][ T1918] gre2: left promiscuous mode
[  645.767746][ T1918] bond92: left promiscuous mode
[  645.769431][ T1918] macvlan1: left promiscuous mode
[  645.771141][ T1918] macvlan1: left allmulticast mode
[  645.773987][ T1918] vlan8: left allmulticast mode
[  645.776049][ T1918] bond94: left allmulticast mode
[  645.778205][ T1918] bond98: left promiscuous mode
[  645.780249][ T1918] vlan9: left promiscuous mode
[  645.782191][ T1918] bond99: left promiscuous mode
[  645.784422][ T1918] vlan9: left allmulticast mode
[  645.786039][ T1918] bond99: left allmulticast mode
[  645.787832][ T1918] vlan10: left allmulticast mode
[  645.789471][ T1918] bond100: left allmulticast mode
[  645.791260][ T1918] bond101: left promiscuous mode
[  645.793299][ T1918] bond102: left promiscuous mode
[  645.795265][ T1918] bond104: left promiscuous mode
[  645.797251][ T1918] macvlan5: left allmulticast mode
[  645.799516][ T1918] vlan11: left promiscuous mode
[  645.801395][ T1918] geneve1: left promiscuous mode
[  645.803269][ T1918] vlan11: left allmulticast mode
[  645.805056][ T1918] geneve1: left allmulticast mode
[  645.806857][ T1918] bridge52: left allmulticast mode
[  645.808649][ T1918] bond111: left promiscuous mode
[  645.810620][ T1918] macsec3: left promiscuous mode
[  645.812266][ T1918] veth51: left allmulticast mode
[  645.814808][ T1918] bond118: left promiscuous mode
[  645.816778][ T1918] vlan12: left allmulticast mode
[  645.818663][ T1918] bond118: left allmulticast mode
[  645.820558][ T1918] vlan13: left promiscuous mode
[  645.822866][ T1918] bond122: left promiscuous mode
[  645.824839][ T1918] bond123: left promiscuous mode
[  645.826901][ T1918] bond126: left promiscuous mode
[  645.828889][ T1918] bond130: left promiscuous mode
[  645.830855][ T1918] bond131: left promiscuous mode
[  645.836172][ T1918] veth63: left promiscuous mode
[  645.838261][ T1918] vlan16: left allmulticast mode
[  645.840171][ T1918] bond139: left allmulticast mode
[  645.842199][ T1918] macvlan6: left allmulticast mode
[  645.844683][ T1918] bond141: left promiscuous mode
[  645.846816][ T1918] ip6tnl10: left allmulticast mode
[  645.848836][ T1918] bond146: left promiscuous mode
[  645.850770][ T1918] macvtap2: left allmulticast mode
[  645.853238][ T1918] gretap9: left allmulticast mode
[  645.860183][ T1918] veth69: left promiscuous mode
[  645.880697][ T1918] vlan18: left allmulticast mode
[  645.887796][ T1918] veth0_to_bond: left allmulticast mode
[  645.891769][ T1918] ip6gretap0: left promiscuous mode
[  645.982698][ T1928] __nla_validate_parse: 27 callbacks suppressed
[  645.982708][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7672'.
[  645.987764][ T1928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7672'.
[  645.990617][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7672'.
[  645.995426][ T1928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7672'.
[  646.075441][ T1938] ip6_vti0 speed is unknown, defaulting to 1000
[  646.125735][ T1944] bond124: entered allmulticast mode
[  646.139917][ T1944] dvmrp8: entered allmulticast mode
[  646.143128][ T1943] bond124: left allmulticast mode
[  646.186998][ T1947] bond131: Unable to set down delay as MII monitoring is disabled
[  646.191042][ T1947] bond131 (unregistering): Released all slaves
[  646.243847][ T1948] bond131: Unable to set down delay as MII monitoring is disabled
[  646.253832][ T1948] bond131 (unregistering): Released all slaves
[  646.469150][ T1960] ip6_vti0 speed is unknown, defaulting to 1000
[  646.876689][ T1966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7680'.
[  646.894625][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  646.897802][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  646.900886][ T1966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7680'.
[  646.904742][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  646.908032][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  647.133155][ T1979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7684'.
[  647.206048][ T1978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7683'.
[  647.414528][ T1998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7689'.
[  647.649457][ T2000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7690'.
[  647.986898][ T2019] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  648.066175][ T2031] validate_nla: 3 callbacks suppressed
[  648.066186][ T2031] netlink: 'syz.0.7700': attribute type 2 has an invalid length.
[  648.257905][ T2050] netlink: 'syz.2.7706': attribute type 12 has an invalid length.
[  648.356683][ T2059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  648.414993][ T2068] netlink: 'syz.2.7713': attribute type 7 has an invalid length.
[  648.417945][ T2068] netlink: 'syz.2.7713': attribute type 7 has an invalid length.
[  648.539941][ T2083] 8021q: adding VLAN 0 to HW filter on device bond154
[  648.605334][ T2081] netlink: 'syz.2.7717': attribute type 2 has an invalid length.
[  648.607769][ T2081] netlink: 'syz.2.7717': attribute type 2 has an invalid length.
[  648.776866][ T2105] netlink: 'syz.0.7724': attribute type 5 has an invalid length.
[  648.796639][ T2105] bond155: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  648.801378][ T2105] bond155 (unregistering): Released all slaves
[  649.016372][ T2110] syzkaller1: entered allmulticast mode
[  649.244252][ T2128] netlink: 'syz.2.7731': attribute type 1 has an invalid length.
[  649.247366][ T2128] workqueue: Failed to create a rescuer kthread for wq "bond131": -EINTR
[  649.272100][ T2134] tipc: Resetting bearer <eth:syzkaller0>
[  649.409972][ T2142] bond131: entered promiscuous mode
[  649.691192][ T2161] bond132: (slave vxcan1): The slave device specified does not support setting the MAC address
[  649.696516][ T2161] bond132: (slave vxcan1): Error -95 calling set_mac_address
[  649.740694][ T2162] macvlan4: entered promiscuous mode
[  649.744907][ T2162] macvlan4: entered allmulticast mode
[  649.748864][ T2162] bond132: (slave macvlan4): Error -98 calling set_mac_address
[  650.033667][ T2184] bond155: (slave bond_slave_1): Device is not bonding slave
[  650.036741][ T2184] bond155: option active_slave: invalid value (bond_slave_1)
[  650.041395][ T2184] bond155 (unregistering): Released all slaves
[  650.229747][ T2198] tap0: tun_chr_ioctl cmd 1074025677
[  650.232115][ T2198] tap0: linktype set to 768
[  650.534317][ T2219] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.592381][ T2219] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.665767][ T2235] tipc: Resetting bearer <eth:syzkaller0>
[  650.667883][ T2235] tipc: Resetting bearer <eth:syzkaller0>
[  650.699361][ T2219] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.705008][ T2236] tipc: Resetting bearer <eth:syzkaller0>
[  650.711307][ T2235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  650.747017][ T2219] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.866901][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  650.874707][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  650.881904][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  650.895050][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  650.924987][ T2244] tipc: Resetting bearer <eth:syzkaller0>
[  651.060385][ T2249] xt_CT: No such helper "syz1"
[  651.699451][ T2256] __nla_validate_parse: 30 callbacks suppressed
[  651.699463][ T2256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7765'.
[  652.008883][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7767'.
[  652.014094][ T2263] netlink: 'syz.0.7767': attribute type 1 has an invalid length.
[  652.033264][ T2263] 8021q: adding VLAN 0 to HW filter on device bond155
[  652.063302][ T2263] bond155: (slave veth71): Enslaving as an active interface with a down link
[  652.921051][ T2281] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  653.005629][ T2287] netlink: 'syz.2.7774': attribute type 5 has an invalid length.
[  653.214620][ T2302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7778'.
[  653.218456][ T2302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7778'.
[  653.310244][ T2309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7780'.
[  653.393037][ T2324] netlink: 'syz.2.7784': attribute type 10 has an invalid length.
[  653.415027][ T2329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7785'.
[  653.418543][ T2329] netlink: 'syz.0.7785': attribute type 12 has an invalid length.
[  653.421629][ T2329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7785'.
[  653.425822][ T2329] netlink: 'syz.0.7785': attribute type 12 has an invalid length.
[  653.511009][ T2341] netlink: 'syz.0.7789': attribute type 32 has an invalid length.
[  653.590145][ T2346] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  653.626759][ T2339] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.7788'.
[  653.635330][ T2339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7788'.
[  653.638894][ T2339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7788'.
[  653.687943][ T2354] netlink: 'syz.0.7791': attribute type 1 has an invalid length.
[  653.721757][ T2354] bond156: (slave vxcan1): The slave device specified does not support setting the MAC address
[  653.730778][ T2354] bond156: (slave vxcan1): Error -95 calling set_mac_address
[  653.772058][ T2360] 8021q: VLANs not supported on lo
[  653.791828][ T2354] 8021q: adding VLAN 0 to HW filter on device bond156
[  654.068104][ T2369] netlink: 'syz.0.7794': attribute type 4 has an invalid length.
[  654.087097][ T2369] netlink: 'syz.0.7794': attribute type 4 has an invalid length.
[  654.157145][ T2376] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  654.318930][ T2390] sctp: [Deprecated]: syz.1.7800 (pid 2390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  654.318930][ T2390] Use struct sctp_sack_info instead
[  654.325687][ T2391] sctp: [Deprecated]: syz.1.7800 (pid 2391) Use of struct sctp_assoc_value in delayed_ack socket option.
[  654.325687][ T2391] Use struct sctp_sack_info instead
[  654.381274][ T2393] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  654.394134][ T2393] bond133: option miimon: invalid value (18446744073709551607)
[  654.396656][ T2393] bond133: option miimon: allowed values 0 - 2147483647
[  654.400296][ T2393] bond133 (unregistering): Released all slaves
[  654.415253][ T2396] netlink: 'syz.1.7802': attribute type 1 has an invalid length.
[  654.428574][ T2396] bond161: entered promiscuous mode
[  654.430309][ T2396] 8021q: adding VLAN 0 to HW filter on device bond161
[  654.451744][ T2396] veth83: entered promiscuous mode
[  654.454264][ T2396] veth83: entered allmulticast mode
[  654.461969][ T2396] bond161: (slave veth83): Enslaving as a backup interface with a down link
[  654.517721][ T2400] pim6reg1: entered promiscuous mode
[  654.519871][ T2400] pim6reg1: entered allmulticast mode
[  654.755033][ T7377] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  654.979994][ T2438] netlink: 'syz.2.7814': attribute type 1 has an invalid length.
[  655.076471][ T2445] netlink: 'syz.0.7815': attribute type 10 has an invalid length.
[  655.386279][ T2453] ip6_vti0 speed is unknown, defaulting to 1000
[  655.872799][ T2460] dvmrp6: left allmulticast mode
[  655.899426][ T2476] ip6_vti0 speed is unknown, defaulting to 1000
[  656.180044][ T2491] bond109: (slave veth43): Releasing active interface
[  656.182767][ T2491] bond109: (slave veth43): the permanent HWaddr of slave - e2:32:c2:cc:c7:81 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  656.189570][ T2491] bond109: (slave veth45): Releasing active interface
[  656.196054][ T2491] bond110: (slave bridge78): Releasing active interface
[  656.198369][ T2491] bond110: (slave bridge78): the permanent HWaddr of slave - ca:6a:e8:87:f2:54 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  656.205507][ T2491] bond110: (slave bridge79): Releasing active interface
[  656.264393][ T2492] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  656.267459][ T2492] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  656.270713][ T2492] tipc: Resetting bearer <eth:syzkaller0>
[  656.452498][ T2504] 8021q: adding VLAN 0 to HW filter on device bond133
[  656.695029][ T2536] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  656.721427][ T2534] __nla_validate_parse: 25 callbacks suppressed
[  656.721444][ T2534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7831'.
[  656.861576][ T2534] bridge73: port 1(veth73) entered blocking state
[  656.868208][ T2534] bridge73: port 1(veth73) entered disabled state
[  656.871280][ T2534] veth73: entered allmulticast mode
[  656.875962][ T2534] veth73: entered promiscuous mode
[  656.880210][ T2537] bridge73: port 2(veth0_to_bond) entered blocking state
[  656.894515][ T2537] bridge73: port 2(veth0_to_bond) entered disabled state
[  656.897506][ T2537] veth0_to_bond: entered allmulticast mode
[  656.902916][ T2537] veth0_to_bond: entered promiscuous mode
[  656.955050][ T2539] pim6reg1: entered promiscuous mode
[  656.957156][ T2539] pim6reg1: entered allmulticast mode
[  657.177869][ T2551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7837'.
[  657.183923][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7837'.
[  657.203738][ T2553] syzkaller1: tun_chr_ioctl cmd 1074025677
[  657.206394][ T2553] syzkaller1: linktype set to 270
[  657.209035][ T2553] syzkaller1: tun_chr_ioctl cmd 2147767521
[  657.328226][ T2563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7840'.
[  657.506718][ T2589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'.
[  657.534796][ T2595] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  657.537722][ T2591] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  657.546833][ T2595] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  657.588804][ T2600] x_tables: ip_tables: ah match: only valid for protocol 51
[  657.873846][ T2620] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  657.876866][ T2620] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  657.880607][ T2620] tipc: Resetting bearer <eth:syzkaller0>
[  657.937581][ T2620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7853'.
[  658.180110][ T2636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7855'.
[  658.326492][ T2638] v: entered promiscuous mode
[  658.328771][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7856'.
[  658.408861][ T2652] validate_nla: 4 callbacks suppressed
[  658.408876][ T2652] netlink: 'syz.2.7858': attribute type 21 has an invalid length.
[  658.415506][ T2652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7858'.
[  660.870640][ T2620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  660.922594][ T2662] netlink: 'syz.1.7860': attribute type 1 has an invalid length.
[  660.942364][ T2662] bond162: entered promiscuous mode
[  660.953841][ T2662] bond162: entered allmulticast mode
[  660.957078][ T2662] 8021q: adding VLAN 0 to HW filter on device bond162
[  661.015684][ T2669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7864'.
[  661.056588][ T2676] xt_socket: unknown flags 0x8
[  661.129435][ T2682] bond134: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  661.139629][ T2682] bond134 (unregistering): Released all slaves
[  661.261587][ T2694] xt_l2tp: v2 doesn't support IP mode
[  661.264859][ T2695] xt_l2tp: v2 doesn't support IP mode
[  661.464302][ T2714] ip6_vti0 speed is unknown, defaulting to 1000
[  662.185391][ T2732] __nla_validate_parse: 9 callbacks suppressed
[  662.185406][ T2732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7877'.
[  662.194869][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  662.198181][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  662.201525][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  662.205598][ T2732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7877'.
[  662.220949][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  662.301057][ T2741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7879'.
[  662.306464][ T2742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7879'.
[  662.354974][ T2744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7880'.
[  662.567860][ T2759] netlink: 'syz.1.7883': attribute type 1 has an invalid length.
[  662.973853][ T2799] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7893'.
[  662.983405][ T2799] pim6reg1: entered promiscuous mode
[  662.985567][ T2799] pim6reg1: entered allmulticast mode
[  663.040920][ T2805] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7893'.
[  663.251117][ T2813] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  663.340850][ T2831] xt_nfacct: accounting object `syz0' does not exist
[  663.425289][ T2835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7900'.
[  663.429336][ T2835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7900'.
[  663.432852][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  663.477725][ T2845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7902'.
[  663.496627][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.501013][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.505294][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.508951][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.513000][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.516012][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.518939][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.522099][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.530751][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.534799][ T2847] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  663.904660][ T2877] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  664.088207][ T2913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  664.289068][ T2920] bridge74: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  665.146284][ T2950] tipc: New replicast peer: 172.20.20.170
[  665.148280][ T2950] tipc: Enabled bearer <udp:syz2>, priority 10
[  665.201789][ T2957] bond163: entered promiscuous mode
[  665.203980][ T2957] bond163: entered allmulticast mode
[  665.206624][ T2957] 8021q: adding VLAN 0 to HW filter on device bond163
[  665.336037][ T2970] 8021q: adding VLAN 0 to HW filter on device bond164
[  665.422014][ T2975] bond165: (slave bridge75): making interface the new active one
[  665.427646][ T2975] bond165: (slave bridge75): Enslaving as an active interface with an up link
[  665.525322][ T2980] ip6_vti0 speed is unknown, defaulting to 1000
[  665.688009][   T34] kauditd_printk_skb: 23 callbacks suppressed
[  665.688020][   T34] audit: type=1800 audit(1778577138.530:56): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7939" name="memory.events" dev="tmpfs" ino=12973 res=0 errno=0
[  666.538992][ T3059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  667.098468][ T3090] v: left promiscuous mode
[  667.104520][ T3090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  667.260753][ T3103] ip6_vti0 speed is unknown, defaulting to 1000
[  667.596318][ T3107] sctp: [Deprecated]: syz.0.7971 (pid 3107) Use of int in max_burst socket option deprecated.
[  667.596318][ T3107] Use struct sctp_assoc_value instead
[  667.728123][ T3117] __nla_validate_parse: 32 callbacks suppressed
[  667.728134][ T3117] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.7973'.
[  667.734862][ T3116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7973'.
[  667.737780][ T3116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7973'.
[  667.824982][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7975'.
[  667.828667][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'.
[  667.838092][ T3121] bond166: entered promiscuous mode
[  667.840140][ T3121] bond166: entered allmulticast mode
[  667.845661][ T3121] 8021q: adding VLAN 0 to HW filter on device bond166
[  667.858170][ T3121] bridge76: entered promiscuous mode
[  667.860015][ T3121] bridge76: entered allmulticast mode
[  667.862296][ T3121] bond166: (slave bridge76): Enslaving as a backup interface with an up link
[  667.871882][ T3121] bridge77: entered promiscuous mode
[  667.873952][ T3121] bridge77: entered allmulticast mode
[  667.876532][ T3121] bond166: (slave bridge77): Enslaving as a backup interface with a down link
[  667.879901][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7976'.
[  667.885474][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7976'.
[  667.919052][ T3129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7977'.
[  667.925767][ T3129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7977'.
[  667.954282][   T12] bond166: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  667.976691][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7980'.
[  667.996352][ T3131] ip6_vti0 speed is unknown, defaulting to 1000
[  668.082925][ T5915] bond166: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  668.389109][ T3168] 8021q: adding VLAN 0 to HW filter on device bond167
[  668.408769][ T3168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  668.426901][ T3168] bond167: (slave veth85): Enslaving as an active interface with a down link
[  668.441959][ T3168] bond167: (slave veth87): Enslaving as an active interface with a down link
[  669.569867][ T3228] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  669.573537][ T3228] CPU: 0 UID: 0 PID: 3228 Comm: syz.1.7999 Not tainted syzkaller #0 PREEMPT(full) 
[  669.573551][ T3228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  669.573556][ T3228] Call Trace:
[  669.573560][ T3228]  <TASK>
[  669.573565][ T3228]  dump_stack_lvl+0xe8/0x150
[  669.573581][ T3228]  sysfs_warn_dup+0x8e/0xa0
[  669.573594][ T3228]  sysfs_do_create_link_sd+0xc0/0x110
[  669.573606][ T3228]  device_add_class_symlinks+0x1cf/0x240
[  669.573621][ T3228]  device_add+0x475/0xb70
[  669.573634][ T3228]  wiphy_register+0x1d73/0x2d50
[  669.573649][ T3228]  ? __pfx_wiphy_register+0x10/0x10
[  669.573659][ T3228]  ? __pfx_netdev_run_todo+0x10/0x10
[  669.573670][ T3228]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  669.573686][ T3228]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  669.573698][ T3228]  ieee80211_register_hw+0x3562/0x4200
[  669.573715][ T3228]  ? ieee80211_register_hw+0x14f1/0x4200
[  669.573730][ T3228]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  669.573748][ T3228]  ? __hrtimer_setup+0x181/0x200
[  669.573759][ T3228]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  669.573773][ T3228]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  669.573795][ T3228]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  669.573825][ T3228]  ? kstrndup+0xbf/0x160
[  669.573841][ T3228]  hwsim_new_radio_nl+0xf35/0x1bd0
[  669.573861][ T3228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  669.573877][ T3228]  ? rcu_is_watching+0x15/0xb0
[  669.573905][ T3228]  ? trace_kmalloc+0x2a/0x110
[  669.573918][ T3228]  ? __nla_parse+0x40/0x60
[  669.573929][ T3228]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  669.573943][ T3228]  genl_family_rcv_msg_doit+0x22a/0x330
[  669.573957][ T3228]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  669.573973][ T3228]  ? bpf_lsm_capable+0x9/0x20
[  669.573985][ T3228]  ? security_capable+0x7e/0x2c0
[  669.574000][ T3228]  genl_rcv_msg+0x61c/0x7a0
[  669.574013][ T3228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  669.574022][ T3228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  669.574034][ T3228]  ? __lock_acquire+0x6b5/0x2cf0
[  669.574048][ T3228]  netlink_rcv_skb+0x232/0x4b0
[  669.574067][ T3228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  669.574078][ T3228]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  669.574095][ T3228]  ? down_read+0x272/0x2e0
[  669.574106][ T3228]  ? genl_rcv+0xd/0x40
[  669.574117][ T3228]  genl_rcv+0x28/0x40
[  669.574127][ T3228]  netlink_unicast+0x80f/0x9b0
[  669.574143][ T3228]  ? __pfx_netlink_unicast+0x10/0x10
[  669.574157][ T3228]  ? netlink_sendmsg+0x650/0xb40
[  669.574166][ T3228]  ? skb_put+0x11b/0x210
[  669.574178][ T3228]  netlink_sendmsg+0x813/0xb40
[  669.574214][ T3228]  ? __pfx_netlink_sendmsg+0x10/0x10
[  669.574232][ T3228]  ? aa_sock_msg_perm+0xf1/0x1b0
[  669.574252][ T3228]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  669.574263][ T3228]  ____sys_sendmsg+0x972/0x9f0
[  669.574273][ T3228]  ? futex_unqueue+0x211/0x240
[  669.574287][ T3228]  ? __pfx_____sys_sendmsg+0x10/0x10
[  669.574302][ T3228]  ? import_iovec+0x73/0xa0
[  669.574313][ T3228]  ___sys_sendmsg+0x2a5/0x360
[  669.574326][ T3228]  ? __pfx____sys_sendmsg+0x10/0x10
[  669.574340][ T3228]  ? futex_wait+0x29a/0x380
[  669.574362][ T3228]  ? __fget_files+0x2a/0x420
[  669.574369][ T3228]  ? __fget_files+0x3a0/0x420
[  669.574380][ T3228]  __x64_sys_sendmsg+0x1bd/0x2a0
[  669.574392][ T3228]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  669.574412][ T3228]  do_syscall_64+0x14d/0xf80
[  669.574422][ T3228]  ? trace_irq_disable+0x3b/0x150
[  669.574429][ T3228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.574439][ T3228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.574447][ T3228] RIP: 0033:0x7fcbfeb9cdd9
[  669.574456][ T3228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.574462][ T3228] RSP: 002b:00007fcbffa71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  669.574471][ T3228] RAX: ffffffffffffffda RBX: 00007fcbfee15fa0 RCX: 00007fcbfeb9cdd9
[  669.574477][ T3228] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  669.574482][ T3228] RBP: 00007fcbfec32d69 R08: 0000000000000000 R09: 0000000000000000
[  669.574486][ T3228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  669.574491][ T3228] R13: 00007fcbfee16038 R14: 00007fcbfee15fa0 R15: 00007ffe5d42e198
[  669.574504][ T3228]  </TASK>
[  669.748236][ T3230] validate_nla: 26 callbacks suppressed
[  669.748252][ T3230] netlink: 'syz.1.8000': attribute type 1 has an invalid length.
[  669.779376][ T3230] bond168: (slave vxcan9): The slave device specified does not support setting the MAC address
[  669.784147][ T3230] bond168: (slave vxcan9): Error -95 calling set_mac_address
[  669.834235][ T3232] bond168: (slave bridge78): Enslaving as an active interface with a down link
[  669.841667][ T3232] 8021q: adding VLAN 0 to HW filter on device bond168
[  669.873922][ T3237] netlink: 'syz.1.8001': attribute type 33 has an invalid length.
[  671.952582][ T3277] netlink: 'syz.2.8009': attribute type 89 has an invalid length.
[  672.035478][ T3281] netlink: 'syz.2.8011': attribute type 32 has an invalid length.
[  673.029296][ T3251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  673.069279][ T3288] __nla_validate_parse: 16 callbacks suppressed
[  673.069294][ T3288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8012'.
[  673.256635][ T3292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8014'.
[  673.388422][ T3320] bond169 (unregistering): Released all slaves
[  673.454480][ T3320] bond169 (unregistering): Released all slaves
[  673.552140][ T3320] bond169 (unregistering): Released all slaves
[  673.608106][ T3320] bond169 (unregistering): Released all slaves
[  673.662016][ T3320] bond169 (unregistering): Released all slaves
[  673.736009][ T3320] bond169 (unregistering): Released all slaves
[  673.782965][ T3320] bond169 (unregistering): Released all slaves
[  673.860730][ T3320] bond169 (unregistering): Released all slaves
[  673.929550][ T3320] bond169 (unregistering): Released all slaves
[  673.991042][ T3320] bond169 (unregistering): Released all slaves
[  674.051086][ T3320] bond169 (unregistering): Released all slaves
[  674.103459][ T3308] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  674.118911][ T3320] bond169 (unregistering): Released all slaves
[  674.146267][ T3338] IPVS: Unknown mcast interface: vxcan1
[  674.195375][ T3320] bond169 (unregistering): Released all slaves
[  674.237231][ T3343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8024'.
[  674.243874][ T3343] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  674.246170][ T3343] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  674.248650][ T3343] tipc: Resetting bearer <eth:syzkaller0>
[  674.346176][ T3353] netlink: 'syz.2.8028': attribute type 1 has an invalid length.
[  674.459978][ T3362] netlink: 'syz.0.8030': attribute type 1 has an invalid length.
[  674.464363][ T3363] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  674.495647][ T3365] netlink: 'syz.0.8031': attribute type 1 has an invalid length.
[  674.513061][ T3365] 8021q: adding VLAN 0 to HW filter on device bond157
[  674.542308][ T3365] bond157: (slave veth75): Enslaving as an active interface with a down link
[  674.557834][ T3365] bond157 (unregistering): (slave veth75): Releasing active interface
[  674.564526][ T3365] bond157 (unregistering): Released all slaves
[  674.601980][ T3371] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.8032'.
[  674.605210][ T3371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8032'.
[  674.608131][ T3371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8032'.
[  674.611280][ T3371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8032'.
[  674.712578][ T3373] netlink: 'syz.0.8033': attribute type 13 has an invalid length.
[  674.715100][ T3373] netlink: 'syz.0.8033': attribute type 17 has an invalid length.
[  674.721780][ T3373] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  675.280470][ T3385] netlink: 'syz.2.8035': attribute type 1 has an invalid length.
[  675.368522][ T3389] ip6_vti0 speed is unknown, defaulting to 1000
[  675.476458][ T3393] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8037'.
[  675.484115][ T3391] vlan0: entered promiscuous mode
[  675.531327][ T3395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8037'.
[  675.536211][ T3396] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8038'.
[  675.619182][ T3398] xt_hashlimit: size too large, truncated to 1048576
[  675.743825][ T3408] netlink: 'syz.2.8041': attribute type 1 has an invalid length.
[  675.760257][ T3408] 8021q: adding VLAN 0 to HW filter on device bond135
[  675.865300][ T3412] xt_nfacct: accounting object `syz0' does not exist
[  678.743659][ T3413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  678.923117][ T3454] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  678.990453][ T3454] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  679.000406][ T3462] __nla_validate_parse: 1 callbacks suppressed
[  679.000421][ T3462] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8049'.
[  679.021863][ T3463] bond157: entered promiscuous mode
[  679.023973][ T3463] 8021q: adding VLAN 0 to HW filter on device bond157
[  679.031187][ T3454] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  679.057233][ T3466] netlink: 'syz.0.8053': attribute type 1 has an invalid length.
[  679.081459][ T3466] veth77: entered promiscuous mode
[  679.086774][ T3466] bond158: (slave veth77): Enslaving as a backup interface with a down link
[  679.091592][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8053'.
[  679.093524][ T3454] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  679.102120][ T3466] 8021q: adding VLAN 0 to HW filter on device bond158
[  679.171205][ T7207] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  679.190297][ T7207] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  679.200175][ T7207] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  679.216996][T10085] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  679.294163][ T3483] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8057'.
[  679.296975][ T3484] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8057'.
[  679.380584][ T3478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  679.478964][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8059'.
[  679.481865][ T3492] netlink: 94 bytes leftover after parsing attributes in process `syz.0.8059'.
[  679.484935][ T3492] netlink: 'syz.0.8059': attribute type 1 has an invalid length.
[  679.487413][ T3492] netlink: 568 bytes leftover after parsing attributes in process `syz.0.8059'.
[  679.607760][ T3504] netlink: 'syz.0.8062': attribute type 10 has an invalid length.
[  679.610665][ T3504] netlink: 'syz.0.8062': attribute type 10 has an invalid length.
[  679.636024][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8063'.
[  679.638889][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8063'.
[  679.694784][ T3510] veth0_macvtap: entered allmulticast mode
[  679.723076][ T3512] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001
[  679.746529][ T3514] netlink: 'syz.2.8066': attribute type 1 has an invalid length.
[  679.767399][ T3514] bond136: (slave vxcan1): The slave device specified does not support setting the MAC address
[  679.771161][ T3514] bond136: (slave vxcan1): Error -95 calling set_mac_address
[  679.862315][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8068'.
[  680.185282][ T3539] netlink: 'syz.2.8073': attribute type 1 has an invalid length.
[  680.201219][ T3539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  680.267066][ T3544] bond169: entered allmulticast mode
[  680.277214][ T3544] ip6_vti0 speed is unknown, defaulting to 1000
[  680.463969][ T3559] netlink: 'syz.2.8079': attribute type 1 has an invalid length.
[  680.896346][ T3591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  680.931771][ T3591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  681.038794][ T3601] bond138 (unregistering): Released all slaves
[  681.055014][ T3605] bridge75: entered promiscuous mode
[  681.063373][ T3609] netlink: 'syz.1.8090': attribute type 10 has an invalid length.
[  681.066108][ T3607] netlink: 'syz.1.8090': attribute type 10 has an invalid length.
[  681.153558][ T3612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  681.158557][ T3612] syzkaller0: mtu less than device minimum
[  681.244742][ T3627] xt_CT: You must specify a L4 protocol and not use inversions on it
[  684.256128][ T3631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.345205][ T3655] bridge0: port 1(erspan0) entered blocking state
[  684.347923][ T3655] bridge0: port 1(erspan0) entered disabled state
[  684.351248][ T3655] erspan0: entered allmulticast mode
[  684.362321][ T3655] erspan0: left allmulticast mode
[  684.423664][ T3672] __nla_validate_parse: 18 callbacks suppressed
[  684.423682][ T3672] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8104'.
[  684.430005][ T3672] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8104'.
[  684.469771][ T3660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8103'.
[  684.576867][ T3686] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  684.910192][ T3707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8114'.
[  684.959876][ T3707] IPVS: ip_vs_add_dest(): server weight less than zero
[  684.966962][ T3707] IPVS: rr: FWM 3 0x00000003 - no destination available
[  685.385606][ T3710] netlink: 'syz.1.8115': attribute type 1 has an invalid length.
[  685.416948][ T3710] bond170: (slave vxcan11): The slave device specified does not support setting the MAC address
[  685.421971][ T3710] bond170: (slave vxcan11): Error -95 calling set_mac_address
[  685.462052][ T3712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8115'.
[  685.476015][ T3712] bond170: (slave bridge79): Enslaving as an active interface with a down link
[  685.481548][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8116'.
[  685.484688][ T3712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8115'.
[  685.490125][ T3712] 8021q: adding VLAN 0 to HW filter on device bond170
[  685.507295][ T3710] macvlan11: entered promiscuous mode
[  685.511287][ T3710] macvlan11: entered allmulticast mode
[  685.514691][ T3710] bond170: entered promiscuous mode
[  685.517483][ T3710] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  685.521669][ T3710] bond170: left promiscuous mode
[  685.632359][ T3723] batadv0: entered promiscuous mode
[  685.634967][ T3723] batadv0: entered allmulticast mode
[  685.732123][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8121'.
[  685.769679][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8122'.
[  685.774544][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8122'.
[  685.876302][ T3753] pimreg: entered allmulticast mode
[  685.898932][ T3753] dvmrp8: left allmulticast mode
[  685.929138][ T3758] bridge_slave_1: entered promiscuous mode
[  685.931039][ T3758] bridge_slave_1: entered allmulticast mode
[  685.937531][ T3760] openvswitch: netlink: EtherType 0 is less than min 600
[  685.955416][ T3752] pimreg: left allmulticast mode
[  686.040326][ T3766] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  686.060674][ T3772] netlink: 'syz.2.8133': attribute type 13 has an invalid length.
[  686.079897][ T3772] netlink: 'syz.2.8133': attribute type 13 has an invalid length.
[  686.273943][ T3794] 8021q: adding VLAN 0 to HW filter on device bond138
[  686.301763][ T3794] bond138: entered promiscuous mode
[  686.304345][ T3794] bond138: entered allmulticast mode
[  686.313794][ T3794] team_slave_1: entered promiscuous mode
[  686.320183][ T3794] team_slave_1: entered allmulticast mode
[  686.323777][ T3794] bond138: (slave team_slave_1): Enslaving as an active interface with an up link
[  686.399009][ T3808] bond139: entered allmulticast mode
[  686.401000][ T3808] 8021q: adding VLAN 0 to HW filter on device bond139
[  686.523903][ T3816] bond140: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  686.556085][ T3819] netlink: 'syz.2.8148': attribute type 4 has an invalid length.
[  686.561400][ T3819] netlink: 'syz.2.8148': attribute type 4 has an invalid length.
[  686.623266][ T3819] netlink: 'syz.2.8148': attribute type 4 has an invalid length.
[  686.696498][ T3828] ip6t_srh: unknown srh match flags  4000
[  686.842002][ T3836] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  687.073797][ T3858] netlink: 'syz.2.8157': attribute type 1 has an invalid length.
[  687.149242][ T3863] bond141: (slave vxcan1): The slave device specified does not support setting the MAC address
[  687.154710][ T3863] bond141: (slave vxcan1): Error -95 calling set_mac_address
[  687.197600][ T3858] macvlan5: entered promiscuous mode
[  687.201201][ T3858] macvlan5: entered allmulticast mode
[  687.210226][ T3858] bond141: entered promiscuous mode
[  687.213044][ T3858] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  687.218365][ T3858] bond141: left promiscuous mode
[  687.218573][ T3869] openvswitch: netlink: IP tunnel dst address not specified
[  696.551949][ T3879] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  696.558780][ T3880] __nla_validate_parse: 17 callbacks suppressed
[  696.558793][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8161'.
[  696.562303][ T3879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8162'.
[  696.565320][ T3880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8161'.
[  696.569144][ T3879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8162'.
[  696.661434][ T3889] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  696.665434][ T3889] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  696.668231][ T3889] tipc: Resetting bearer <eth:syzkaller0>
[  696.732154][ T3888] netlink: 'syz.0.8166': attribute type 4 has an invalid length.
[  696.741256][ T3888] netlink: 'syz.0.8166': attribute type 4 has an invalid length.
[  696.745671][ T3888] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  696.808865][ T3896] block nbd1: reconnected socket
[  696.814028][T30117] block nbd1: Receive control failed (result -32)
[  696.950172][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8173'.
[  697.211551][ T3936] openvswitch: netlink: Flow key attr not present in new flow.
[  697.457294][ T3944] netlink: 'syz.2.8182': attribute type 1 has an invalid length.
[  697.460572][ T3944] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8182'.
[  697.506674][ T3946] netlink: 'syz.2.8183': attribute type 1 has an invalid length.
[  697.510052][ T3946] netlink: 'syz.2.8183': attribute type 2 has an invalid length.
[  697.569833][ T3947] : renamed from bond0
[  697.574387][ T3947] netlink: 'syz.2.8183': attribute type 10 has an invalid length.
[  698.086959][ T3951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8184'.
[  700.255592][ T3938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  700.346487][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8188'.
[  700.419081][ T3964] 8021q: adding VLAN 0 to HW filter on device bond160
[  700.438912][ T3964] bond160 (unregistering): Released all slaves
[  700.539505][ T3974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8192'.
[  700.613140][ T3982] bond138: (slave team_slave_1): Releasing backup interface
[  700.616138][ T3982] team_slave_1: left allmulticast mode
[  700.620672][ T3982] tipc: Resetting bearer <eth:syzkaller0>
[  700.768580][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8194'.
[  701.052692][ T4007] bond19: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  701.058741][ T4007] bond19: (slave 26): Enslaving as an active interface with an up link
[  701.065052][ T4007] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  701.121543][ T4014] ip6_vti0 speed is unknown, defaulting to 1000
[  701.342291][ T4018] bond0: option fail_over_mac: invalid value (127)
[  701.347229][ T4018] bond0 (unregistering): Released all slaves
[  701.375724][   T34] audit: type=1804 audit(1778577174.220:57): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8200" name="/newroot/2829/cgroup.controllers" dev="tmpfs" ino=14452 res=1 errno=0
[  701.394893][   T34] audit: type=1800 audit(1778577174.220:58): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8200" name="cgroup.controllers" dev="tmpfs" ino=14452 res=0 errno=0
[  701.409940][ T4022] netlink: 'syz.2.8202': attribute type 1 has an invalid length.
[  701.465691][ T4025] netlink: 'syz.0.8203': attribute type 1 has an invalid length.
[  701.468272][ T4025] netlink: 'syz.0.8203': attribute type 11 has an invalid length.
[  701.524741][ T4027] netlink: 'syz.0.8203': attribute type 13 has an invalid length.
[  701.620652][ T4027] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  701.634529][ T3870] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  701.643215][ T3870] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  701.652953][ T3870] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  701.656413][ T3870] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  701.759717][ T4035] validate_nla: 1 callbacks suppressed
[  701.759730][ T4035] netlink: 'syz.1.8206': attribute type 1 has an invalid length.
[  701.838326][ T4035] bond171: entered promiscuous mode
[  701.840140][ T4035] bond171: entered allmulticast mode
[  701.842161][ T4035] 8021q: adding VLAN 0 to HW filter on device bond171
[  701.926795][ T4042] __nla_validate_parse: 9 callbacks suppressed
[  701.926805][ T4042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8207'.
[  701.932341][ T4042] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8207'.
[  702.343892][ T4051] syzkaller1: entered promiscuous mode
[  702.345682][ T4051] syzkaller1: entered allmulticast mode
[  702.361408][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8210'.
[  702.365616][ T4051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8210'.
[  702.368456][ T4051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8210'.
[  702.506108][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8213'.
[  702.509000][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8213'.
[  702.541032][ T4064] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.8212'.
[  702.545135][ T4064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8212'.
[  702.548743][ T4064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8212'.
[  702.585343][ T4066] netlink: 'syz.0.8214': attribute type 1 has an invalid length.
[  702.598157][ T4066] 8021q: adding VLAN 0 to HW filter on device bond160
[  702.615449][ T4066] bond160: (slave veth79): Enslaving as an active interface with a down link
[  702.630194][ T4066] bond160: (slave veth81): Enslaving as an active interface with a down link
[  702.724629][ T4072] netlink: 'syz.1.8216': attribute type 1 has an invalid length.
[  702.727292][ T4072] netlink: 'syz.1.8216': attribute type 2 has an invalid length.
[  702.736959][ T4071] IPv6: sit9: Disabled Multicast RS
[  702.831594][ T4075] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.888382][ T4075] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.938695][ T4075] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.998477][ T4075] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.075973][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  703.087911][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  703.101659][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  703.114688][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  703.252946][ T4082] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  703.256220][ T4082] CPU: 0 UID: 0 PID: 4082 Comm: syz.1.8218 Not tainted syzkaller #0 PREEMPT(full) 
[  703.256232][ T4082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  703.256238][ T4082] Call Trace:
[  703.256243][ T4082]  <TASK>
[  703.256246][ T4082]  dump_stack_lvl+0xe8/0x150
[  703.256263][ T4082]  sysfs_warn_dup+0x8e/0xa0
[  703.256276][ T4082]  sysfs_do_create_link_sd+0xc0/0x110
[  703.256290][ T4082]  device_add_class_symlinks+0x1cf/0x240
[  703.256304][ T4082]  device_add+0x475/0xb70
[  703.256316][ T4082]  wiphy_register+0x1d73/0x2d50
[  703.256331][ T4082]  ? __pfx_wiphy_register+0x10/0x10
[  703.256340][ T4082]  ? __pfx_netdev_run_todo+0x10/0x10
[  703.256352][ T4082]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  703.256366][ T4082]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  703.256379][ T4082]  ieee80211_register_hw+0x3562/0x4200
[  703.256396][ T4082]  ? ieee80211_register_hw+0x14f1/0x4200
[  703.256411][ T4082]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  703.256429][ T4082]  ? __hrtimer_setup+0x181/0x200
[  703.256442][ T4082]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  703.256475][ T4082]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  703.256499][ T4082]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  703.256509][ T4082]  ? kstrndup+0xbf/0x160
[  703.256524][ T4082]  hwsim_new_radio_nl+0xf35/0x1bd0
[  703.256545][ T4082]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  703.256561][ T4082]  ? rcu_is_watching+0x15/0xb0
[  703.256573][ T4082]  ? trace_kmalloc+0x2a/0x110
[  703.256585][ T4082]  ? __nla_parse+0x40/0x60
[  703.256597][ T4082]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  703.256611][ T4082]  genl_family_rcv_msg_doit+0x22a/0x330
[  703.256625][ T4082]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  703.256640][ T4082]  ? bpf_lsm_capable+0x9/0x20
[  703.256651][ T4082]  ? security_capable+0x7e/0x2c0
[  703.256666][ T4082]  genl_rcv_msg+0x61c/0x7a0
[  703.256679][ T4082]  ? __pfx_genl_rcv_msg+0x10/0x10
[  703.256689][ T4082]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  703.256700][ T4082]  ? __lock_acquire+0x6b5/0x2cf0
[  703.256714][ T4082]  netlink_rcv_skb+0x232/0x4b0
[  703.256723][ T4082]  ? __pfx_genl_rcv_msg+0x10/0x10
[  703.256734][ T4082]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  703.256749][ T4082]  ? down_read+0x272/0x2e0
[  703.256760][ T4082]  ? genl_rcv+0xd/0x40
[  703.256771][ T4082]  genl_rcv+0x28/0x40
[  703.256780][ T4082]  netlink_unicast+0x80f/0x9b0
[  703.256795][ T4082]  ? __pfx_netlink_unicast+0x10/0x10
[  703.256808][ T4082]  ? netlink_sendmsg+0x650/0xb40
[  703.256815][ T4082]  ? skb_put+0x11b/0x210
[  703.256826][ T4082]  netlink_sendmsg+0x813/0xb40
[  703.256863][ T4082]  ? __pfx_netlink_sendmsg+0x10/0x10
[  703.256874][ T4082]  ? aa_sock_msg_perm+0xf1/0x1b0
[  703.256887][ T4082]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  703.256898][ T4082]  ____sys_sendmsg+0x972/0x9f0
[  703.256914][ T4082]  ? __pfx_____sys_sendmsg+0x10/0x10
[  703.256929][ T4082]  ? import_iovec+0x73/0xa0
[  703.256940][ T4082]  ___sys_sendmsg+0x2a5/0x360
[  703.256959][ T4082]  ? __pfx____sys_sendmsg+0x10/0x10
[  703.256973][ T4082]  ? futex_wake+0x4ac/0x580
[  703.256996][ T4082]  ? __fget_files+0x2a/0x420
[  703.257004][ T4082]  ? __fget_files+0x3a0/0x420
[  703.257016][ T4082]  __x64_sys_sendmsg+0x1bd/0x2a0
[  703.257028][ T4082]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  703.257042][ T4082]  ? rcu_is_watching+0x15/0xb0
[  703.257076][ T4082]  do_syscall_64+0x14d/0xf80
[  703.257087][ T4082]  ? trace_irq_disable+0x3b/0x150
[  703.257094][ T4082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.257104][ T4082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.257112][ T4082] RIP: 0033:0x7fcbfeb9cdd9
[  703.257120][ T4082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.257127][ T4082] RSP: 002b:00007fcbffa71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  703.257136][ T4082] RAX: ffffffffffffffda RBX: 00007fcbfee15fa0 RCX: 00007fcbfeb9cdd9
[  703.257142][ T4082] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  703.257148][ T4082] RBP: 00007fcbfec32d69 R08: 0000000000000000 R09: 0000000000000000
[  703.257153][ T4082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.257158][ T4082] R13: 00007fcbfee16038 R14: 00007fcbfee15fa0 R15: 00007ffe5d42e198
[  703.257172][ T4082]  </TASK>
[  703.420073][ T4091] syzkaller1: entered promiscuous mode
[  703.421997][ T4091] syzkaller1: entered allmulticast mode
[  703.730963][ T4108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  703.734947][ T4110] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[  703.737381][ T4110] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[  703.799756][ T4123] netlink: 'syz.0.8230': attribute type 10 has an invalid length.
[  703.804220][ T4123] netlink: 'syz.0.8230': attribute type 10 has an invalid length.
[  704.198571][ T4135] netlink: 'syz.0.8233': attribute type 1 has an invalid length.
[  712.567444][ T4157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  712.574017][ T4157] __nla_validate_parse: 10 callbacks suppressed
[  712.574027][ T4157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8237'.
[  712.638643][ T4167] netlink: 'syz.0.8239': attribute type 1 has an invalid length.
[  712.679406][ T4167] bond161: (slave bridge76): Enslaving as a backup interface with an up link
[  712.698169][ T4167] macvlan2: entered promiscuous mode
[  712.699866][ T4167] macvlan2: entered allmulticast mode
[  712.702027][ T4167] bond161: entered promiscuous mode
[  712.704876][ T4167] bridge76: entered promiscuous mode
[  712.706914][ T4167] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  712.709903][ T4167] bond161: left promiscuous mode
[  712.711451][ T4167] bridge76: left promiscuous mode
[  712.831510][ T4187] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.8241'.
[  712.834502][ T4187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8241'.
[  712.837225][ T4187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8241'.
[  712.839991][ T4187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8241'.
[  713.374781][ T4195] veth88: entered allmulticast mode
[  713.428966][ T4197] netlink: 'syz.1.8246': attribute type 1 has an invalid length.
[  713.441433][ T4197] 8021q: adding VLAN 0 to HW filter on device bond172
[  713.451433][ T4197] vlan0: entered allmulticast mode
[  713.454456][ T4197] bond172: entered allmulticast mode
[  713.635155][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8248'.
[  713.705902][ T4213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8250'.
[  713.731500][ T4216] ip6_vti0 speed is unknown, defaulting to 1000
[  713.809175][ T4230] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  713.811605][ T4230] CPU: 1 UID: 0 PID: 4230 Comm: syz.2.8253 Not tainted syzkaller #0 PREEMPT(full) 
[  713.811617][ T4230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  713.811621][ T4230] Call Trace:
[  713.811626][ T4230]  <TASK>
[  713.811629][ T4230]  dump_stack_lvl+0xe8/0x150
[  713.811645][ T4230]  sysfs_warn_dup+0x8e/0xa0
[  713.811658][ T4230]  sysfs_do_create_link_sd+0xc0/0x110
[  713.811670][ T4230]  device_add_class_symlinks+0x1cf/0x240
[  713.811682][ T4230]  device_add+0x475/0xb70
[  713.811695][ T4230]  wiphy_register+0x1d73/0x2d50
[  713.811710][ T4230]  ? __pfx_wiphy_register+0x10/0x10
[  713.811739][ T4230]  ? __pfx_netdev_run_todo+0x10/0x10
[  713.811752][ T4230]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  713.811766][ T4230]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  713.811779][ T4230]  ieee80211_register_hw+0x3562/0x4200
[  713.811796][ T4230]  ? ieee80211_register_hw+0x14f1/0x4200
[  713.811811][ T4230]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  713.811828][ T4230]  ? __hrtimer_setup+0x181/0x200
[  713.811839][ T4230]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  713.811852][ T4230]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  713.811879][ T4230]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  713.811889][ T4230]  ? kstrndup+0xbf/0x160
[  713.811903][ T4230]  hwsim_new_radio_nl+0xf35/0x1bd0
[  713.811921][ T4230]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  713.811936][ T4230]  ? rcu_is_watching+0x15/0xb0
[  713.811947][ T4230]  ? trace_kmalloc+0x2a/0x110
[  713.811958][ T4230]  ? __nla_parse+0x40/0x60
[  713.811971][ T4230]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  713.811985][ T4230]  genl_family_rcv_msg_doit+0x22a/0x330
[  713.811998][ T4230]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  713.812013][ T4230]  ? bpf_lsm_capable+0x9/0x20
[  713.812024][ T4230]  ? security_capable+0x7e/0x2c0
[  713.812038][ T4230]  genl_rcv_msg+0x61c/0x7a0
[  713.812051][ T4230]  ? __pfx_genl_rcv_msg+0x10/0x10
[  713.812061][ T4230]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  713.812072][ T4230]  ? __lock_acquire+0x6b5/0x2cf0
[  713.812086][ T4230]  netlink_rcv_skb+0x232/0x4b0
[  713.812094][ T4230]  ? __pfx_genl_rcv_msg+0x10/0x10
[  713.812105][ T4230]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  713.812120][ T4230]  ? down_read+0x272/0x2e0
[  713.812131][ T4230]  ? genl_rcv+0xd/0x40
[  713.812141][ T4230]  genl_rcv+0x28/0x40
[  713.812151][ T4230]  netlink_unicast+0x80f/0x9b0
[  713.812166][ T4230]  ? __pfx_netlink_unicast+0x10/0x10
[  713.812178][ T4230]  ? netlink_sendmsg+0x650/0xb40
[  713.812186][ T4230]  ? skb_put+0x11b/0x210
[  713.812196][ T4230]  netlink_sendmsg+0x813/0xb40
[  713.812208][ T4230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  713.812218][ T4230]  ? aa_sock_msg_perm+0xf1/0x1b0
[  713.812230][ T4230]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  713.812240][ T4230]  ____sys_sendmsg+0x972/0x9f0
[  713.812254][ T4230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  713.812268][ T4230]  ? import_iovec+0x73/0xa0
[  713.812278][ T4230]  ___sys_sendmsg+0x2a5/0x360
[  713.812290][ T4230]  ? __pfx____sys_sendmsg+0x10/0x10
[  713.812313][ T4230]  ? __fget_files+0x2a/0x420
[  713.812320][ T4230]  ? __fget_files+0x3a0/0x420
[  713.812331][ T4230]  __x64_sys_sendmsg+0x1bd/0x2a0
[  713.812342][ T4230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  713.812351][ T4230]  ? __se_sys_rt_sigprocmask+0x22f/0x2a0
[  713.812366][ T4230]  ? do_user_addr_fault+0xc6f/0x1340
[  713.812380][ T4230]  do_syscall_64+0x14d/0xf80
[  713.812407][ T4230]  ? trace_irq_disable+0x3b/0x150
[  713.812414][ T4230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.812424][ T4230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.812432][ T4230] RIP: 0033:0x7f3a87f9cdd9
[  713.812440][ T4230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.812446][ T4230] RSP: 002b:00007f3a861b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  713.812455][ T4230] RAX: ffffffffffffffda RBX: 00007f3a88216180 RCX: 00007f3a87f9cdd9
[  713.812460][ T4230] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  713.812465][ T4230] RBP: 00007f3a88032d69 R08: 0000000000000000 R09: 0000000000000000
[  713.812469][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  713.812474][ T4230] R13: 00007f3a88216218 R14: 00007f3a88216180 R15: 00007ffc86f6afe8
[  713.812486][ T4230]  </TASK>
[  713.947812][ T4217] ip6_vti0 speed is unknown, defaulting to 1000
[  713.975773][ T4232] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8254'.
[  714.018781][ T4236] tipc: Resetting bearer <eth:syzkaller0>
[  714.031091][ T4239] netlink: 'syz.1.8255': attribute type 1 has an invalid length.
[  714.034907][ T4236] debugfs: 'netdev:syzkaller0' already exists in 'phy4'
[  714.088022][ T4236] tipc: Resetting bearer <eth:syzkaller0>
[  714.123635][ T4239] 8021q: adding VLAN 0 to HW filter on device bond173
[  714.126990][ T4243] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8256'.
[  714.160983][ T4239] bond173: (slave bridge80): making interface the new active one
[  714.165007][ T4239] bond173: (slave bridge80): Enslaving as an active interface with an up link
[  714.334682][ T4257] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8259'.
[  714.337475][ T4257] netlink: 'syz.1.8259': attribute type 1 has an invalid length.
[  714.512526][ T4268] netlink: 'syz.1.8261': attribute type 13 has an invalid length.
[  714.525845][ T4268] netlink: 'syz.1.8261': attribute type 17 has an invalid length.
[  714.745552][ T4268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  714.755596][ T3870] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  714.758753][ T3870] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  714.769331][ T3870] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  714.771901][ T3870] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  715.155422][ T4294] netlink: 'syz.0.8269': attribute type 1 has an invalid length.
[  715.208256][ T4302] netlink: 'syz.0.8271': attribute type 5 has an invalid length.
[  715.217540][ T4302] geneve6: entered promiscuous mode
[  715.219195][ T4302] geneve6: entered allmulticast mode
[  715.222169][ T3870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  715.225949][ T3870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  715.228876][ T3870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  715.231919][ T4302] netlink: 'syz.0.8271': attribute type 1 has an invalid length.
[  715.233808][ T3870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  715.260617][ T4309] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  715.263374][ T4309] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  715.265764][ T4311] netlink: 'syz.0.8274': attribute type 1 has an invalid length.
[  715.289349][ T4309] veth59: entered allmulticast mode
[  715.392347][ T4323] bond175 (unregistering): Released all slaves
[  715.436115][ T4331] bond162: entered promiscuous mode
[  715.438125][ T4331] 8021q: adding VLAN 0 to HW filter on device bond162
[  715.480013][ T4329] ip6gre9: entered allmulticast mode
[  715.519971][ T4345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  715.554195][ T4345] ip6tnl8: entered allmulticast mode
[  715.557572][ T4345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  715.569266][ T5840] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  715.645223][ T4356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  715.683834][ T4362] 8021q: adding VLAN 0 to HW filter on device bond142
[  715.806086][ T4367] ip6_vti0 speed is unknown, defaulting to 1000
[  715.996822][ T4374] bond163: option miimon: invalid value (18446744073709551607)
[  715.999570][ T4374] bond163: option miimon: allowed values 0 - 2147483647
[  716.002752][ T4374] bond163 (unregistering): Released all slaves
[  716.249020][ T4377] bridge_slave_1: left promiscuous mode
[  716.251331][ T4377] bridge_slave_1: left allmulticast mode
[  716.259423][ T4377] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode
[  716.262141][ T4377] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode
[  716.267362][ T4377] bond157: left promiscuous mode
[  716.269238][ T4377] veth77: left promiscuous mode
[  716.270847][ T4377] bridge75: left promiscuous mode
[  716.311164][ T4377] geneve6: left promiscuous mode
[  716.313306][ T4377] geneve6: left allmulticast mode
[  716.319029][ T4377] bond162: left promiscuous mode
[  716.343663][ T5915] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  716.346844][ T5915] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  716.350442][ T5915] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  716.353181][ T5915] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  716.374637][ T4388] ip6_vti0 speed is unknown, defaulting to 1000
[  716.611633][ T4408] syzkaller1: entered promiscuous mode
[  716.613730][ T4408] syzkaller1: entered allmulticast mode
[  717.010901][ T4449] xt_hashlimit: size too large, truncated to 1048576
[  719.602644][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  720.066999][ T4453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  720.124479][ T4498] __nla_validate_parse: 19 callbacks suppressed
[  720.124495][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8313'.
[  720.156935][ T4500] validate_nla: 10 callbacks suppressed
[  720.156945][ T4500] netlink: 'syz.1.8315': attribute type 8 has an invalid length.
[  720.165405][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8315'.
[  720.184202][ T4500] veth1_to_team: entered promiscuous mode
[  720.192706][ T4500] veth1_to_team: left promiscuous mode
[  720.286808][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8318'.
[  720.302573][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8319'.
[  720.308280][ T4510] SET target dimension over the limit!
[  720.324033][ T4515] bond143: (slave vcan0): refused to change device type
[  720.346170][ T4510] bond143: (slave vcan0): refused to change device type
[  720.410136][ T4520] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.8320'.
[  720.419159][ T4528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  720.421980][ T4528] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[  720.424958][ T4528] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[  720.465366][ T4534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8324'.
[  720.500859][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8323'.
[  720.503981][ T4539] netlink: 'syz.1.8326': attribute type 4 has an invalid length.
[  720.506838][ T4540] netlink: 'syz.1.8326': attribute type 4 has an invalid length.
[  720.514356][ T4539] netlink: 'syz.1.8326': attribute type 1 has an invalid length.
[  720.517927][ T4539] netlink: 'syz.1.8326': attribute type 2 has an invalid length.
[  720.573469][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8329'.
[  720.593405][ T4543] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.8325'.
[  720.596927][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8325'.
[  721.386828][ T4547] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  721.756026][ T4598] netlink: 'syz.1.8343': attribute type 13 has an invalid length.
[  722.083432][ T4606] netlink: 'syz.1.8345': attribute type 1 has an invalid length.
[  722.096081][ T4606] bond175: entered promiscuous mode
[  722.097794][ T4606] bond175: entered allmulticast mode
[  722.099736][ T4606] 8021q: adding VLAN 0 to HW filter on device bond175
[  722.160469][ T4617] netlink: 'syz.1.8347': attribute type 1 has an invalid length.
[  722.185552][ T4619] netlink: 'syz.1.8348': attribute type 1 has an invalid length.
[  722.206112][ T4619] 8021q: adding VLAN 0 to HW filter on device bond176
[  722.307306][ T4637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  722.405124][ T4652] netlink: 'syz.0.8358': attribute type 1 has an invalid length.
[  722.434456][ T4652] 8021q: adding VLAN 0 to HW filter on device bond163
[  722.482716][ T4652] syzkaller1: entered promiscuous mode
[  722.487303][ T4652] syzkaller1: entered allmulticast mode
[  722.564285][ T4660] ip6_vti0 speed is unknown, defaulting to 1000
[  722.661418][ T4663] 8021q: adding VLAN 0 to HW filter on device bond164
[  722.693541][ T4663] bond164: (slave veth83): Enslaving as an active interface with a down link
[  722.872659][ T4668] bond165: Unable to set down delay as MII monitoring is disabled
[  722.877657][ T4668] bond165 (unregistering): Released all slaves
[  723.374491][ T4697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  723.496413][ T4716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  723.885973][ T4748] bond144: entered promiscuous mode
[  723.891005][ T4748] 8021q: adding VLAN 0 to HW filter on device bond144
[  723.908756][ T4748] bond144: entered allmulticast mode
[  723.914376][ T4753] syzkaller1: entered promiscuous mode
[  723.916821][ T4753] syzkaller1: entered allmulticast mode
[  724.217569][ T4781] bond165: option ad_actor_sys_prio: invalid value (0)
[  724.219758][ T4781] bond165: option ad_actor_sys_prio: allowed values 1 - 65535
[  724.223925][ T4781] bond165 (unregistering): Released all slaves
[  724.235080][ T4782] bond145: entered promiscuous mode
[  724.236777][ T4782] bond145: entered allmulticast mode
[  724.322383][ T4790] openvswitch: netlink: Message has 2 unknown bytes.
[  724.325749][ T4786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.570123][ T4815] bridge89: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  724.640955][ T4820] bond177: option miimon: invalid value (18446744073709551607)
[  724.644635][ T4820] bond177: option miimon: allowed values 0 - 2147483647
[  724.648555][ T4820] bond177 (unregistering): Released all slaves
[  724.753466][ T4833] bond146: (slave vxcan1): The slave device specified does not support setting the MAC address
[  724.758544][ T4833] bond146: (slave vxcan1): Error -95 calling set_mac_address
[  724.825134][ T4833] bond146: (slave bridge90): Enslaving as an active interface with a down link
[  724.834119][ T4833] 8021q: adding VLAN 0 to HW filter on device bond146
[  724.900172][ T4842] 8021q: adding VLAN 0 to HW filter on device bond166
[  725.076397][ T4854] bond147: (slave bond_slave_1): Device is not bonding slave
[  725.078862][ T4854] bond147: option active_slave: invalid value (bond_slave_1)
[  725.166586][ T4869] __nla_validate_parse: 49 callbacks suppressed
[  725.166618][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8420'.
[  725.173763][ T4854] bond147 (unregistering): Released all slaves
[  725.307944][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8424'.
[  725.313650][ T4893] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  725.315959][ T4893] CPU: 1 UID: 0 PID: 4893 Comm: syz.0.8424 Not tainted syzkaller #0 PREEMPT(full) 
[  725.315970][ T4893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  725.315975][ T4893] Call Trace:
[  725.315979][ T4893]  <TASK>
[  725.315983][ T4893]  dump_stack_lvl+0xe8/0x150
[  725.315999][ T4893]  sysfs_warn_dup+0x8e/0xa0
[  725.316011][ T4893]  sysfs_do_create_link_sd+0xc0/0x110
[  725.316024][ T4893]  device_add_class_symlinks+0x1cf/0x240
[  725.316038][ T4893]  device_add+0x475/0xb70
[  725.316050][ T4893]  wiphy_register+0x1d73/0x2d50
[  725.316065][ T4893]  ? __pfx_wiphy_register+0x10/0x10
[  725.316074][ T4893]  ? __pfx_netdev_run_todo+0x10/0x10
[  725.316085][ T4893]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  725.316099][ T4893]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  725.316112][ T4893]  ieee80211_register_hw+0x3562/0x4200
[  725.316130][ T4893]  ? ieee80211_register_hw+0x14f1/0x4200
[  725.316145][ T4893]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  725.316164][ T4893]  ? __hrtimer_setup+0x181/0x200
[  725.316175][ T4893]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  725.316188][ T4893]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  725.316210][ T4893]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  725.316219][ T4893]  ? kstrndup+0xbf/0x160
[  725.316233][ T4893]  hwsim_new_radio_nl+0xf35/0x1bd0
[  725.316252][ T4893]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  725.316267][ T4893]  ? rcu_is_watching+0x15/0xb0
[  725.316277][ T4893]  ? trace_kmalloc+0x2a/0x110
[  725.316288][ T4893]  ? __nla_parse+0x40/0x60
[  725.316301][ T4893]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  725.316315][ T4893]  genl_family_rcv_msg_doit+0x22a/0x330
[  725.316328][ T4893]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  725.316343][ T4893]  ? bpf_lsm_capable+0x9/0x20
[  725.316354][ T4893]  ? security_capable+0x7e/0x2c0
[  725.316368][ T4893]  genl_rcv_msg+0x61c/0x7a0
[  725.316380][ T4893]  ? __pfx_genl_rcv_msg+0x10/0x10
[  725.316390][ T4893]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  725.316401][ T4893]  ? __lock_acquire+0x6b5/0x2cf0
[  725.316415][ T4893]  netlink_rcv_skb+0x232/0x4b0
[  725.316424][ T4893]  ? __pfx_genl_rcv_msg+0x10/0x10
[  725.316434][ T4893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  725.316455][ T4893]  ? down_read+0x272/0x2e0
[  725.316466][ T4893]  ? genl_rcv+0xd/0x40
[  725.316477][ T4893]  genl_rcv+0x28/0x40
[  725.316486][ T4893]  netlink_unicast+0x80f/0x9b0
[  725.316502][ T4893]  ? __pfx_netlink_unicast+0x10/0x10
[  725.316515][ T4893]  ? netlink_sendmsg+0x650/0xb40
[  725.316523][ T4893]  ? skb_put+0x11b/0x210
[  725.316534][ T4893]  netlink_sendmsg+0x813/0xb40
[  725.316546][ T4893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  725.316555][ T4893]  ? aa_sock_msg_perm+0xf1/0x1b0
[  725.316568][ T4893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  725.316580][ T4893]  ____sys_sendmsg+0x972/0x9f0
[  725.316614][ T4893]  ? futex_unqueue+0x211/0x240
[  725.316629][ T4893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  725.316643][ T4893]  ? import_iovec+0x73/0xa0
[  725.316654][ T4893]  ___sys_sendmsg+0x2a5/0x360
[  725.316667][ T4893]  ? __pfx____sys_sendmsg+0x10/0x10
[  725.316680][ T4893]  ? futex_wait+0x29a/0x380
[  725.316701][ T4893]  ? __fget_files+0x2a/0x420
[  725.316710][ T4893]  ? __fget_files+0x3a0/0x420
[  725.316721][ T4893]  __x64_sys_sendmsg+0x1bd/0x2a0
[  725.316733][ T4893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  725.316747][ T4893]  ? rcu_is_watching+0x15/0xb0
[  725.316763][ T4893]  do_syscall_64+0x14d/0xf80
[  725.316774][ T4893]  ? trace_irq_disable+0x3b/0x150
[  725.316781][ T4893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.316791][ T4893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.316799][ T4893] RIP: 0033:0x7f3728f9cdd9
[  725.316807][ T4893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.316814][ T4893] RSP: 002b:00007f3729dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  725.316823][ T4893] RAX: ffffffffffffffda RBX: 00007f3729215fa0 RCX: 00007f3728f9cdd9
[  725.316828][ T4893] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  725.316833][ T4893] RBP: 00007f3729032d69 R08: 0000000000000000 R09: 0000000000000000
[  725.316838][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.316842][ T4893] R13: 00007f3729216038 R14: 00007f3729215fa0 R15: 00007ffd19e09fd8
[  725.316854][ T4893]  </TASK>
[  725.319221][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8424'.
[  725.499753][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8426'.
[  725.545065][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8427'.
[  725.919236][ T4920] validate_nla: 14 callbacks suppressed
[  725.919247][ T4920] netlink: 'syz.0.8433': attribute type 10 has an invalid length.
[  725.924668][ T4920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8433'.
[  725.928424][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8433'.
[  725.931157][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8433'.
[  725.958910][ T4920] netlink: 'syz.0.8433': attribute type 11 has an invalid length.
[  725.963729][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8435'.
[  725.966880][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8433'.
[  725.970306][ T4920] netlink: 'syz.0.8433': attribute type 11 has an invalid length.
[  725.973779][ T4920] netlink: 'syz.0.8433': attribute type 11 has an invalid length.
[  726.045692][ T4930] SET target dimension over the limit!
[  726.066661][ T4927] netlink: 'syz.1.8436': attribute type 1 has an invalid length.
[  726.090932][ T4931] netlink: 'syz.0.8437': attribute type 4 has an invalid length.
[  726.297366][ T4946] ip6_vti0 speed is unknown, defaulting to 1000
[  726.376995][ T4953] netlink: 'syz.0.8442': attribute type 29 has an invalid length.
[  726.475966][ T4959] netlink: 'syz.0.8443': attribute type 10 has an invalid length.
[  727.544900][ T4966] xt_HMARK: proto mask must be zero with L3 mode
[  727.757711][ T4971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  727.800329][ T4973] bond177: entered promiscuous mode
[  728.157386][    C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[  728.277313][ T4979] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  728.341556][ T4984] syzkaller1: entered promiscuous mode
[  728.344469][ T4984] syzkaller1: entered allmulticast mode
[  730.670368][ T4997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  730.706849][ T4998] netlink: 'syz.2.8453': attribute type 1 has an invalid length.
[  730.732150][ T4998] bond147: entered promiscuous mode
[  730.735489][ T4998] bond147: entered allmulticast mode
[  730.737571][ T4998] 8021q: adding VLAN 0 to HW filter on device bond147
[  730.748803][ T4998] __nla_validate_parse: 6 callbacks suppressed
[  730.748812][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8453'.
[  730.756415][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8453'.
[  731.625480][ T5013] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8459'.
[  732.206977][ T5017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8460'.
[  732.278984][ T5020] bond148: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  732.289552][ T5020] bond148: (slave lo): Enslaving as an active interface with an up link
[  732.294650][ T5020] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  732.500184][ T5041] netlink: 'syz.0.8466': attribute type 17 has an invalid length.
[  732.502785][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8466'.
[  732.563341][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8470'.
[  732.566325][ T5045] bond178: invalid ARP target 0.0.0.0 specified for addition
[  732.575873][ T5045] bond178: option arp_ip_target: invalid value (0)
[  732.579852][ T5045] bond178 (unregistering): Released all slaves
[  732.670608][ T5070] netlink: 'syz.0.8473': attribute type 12 has an invalid length.
[  732.673270][ T5070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8473'.
[  732.677413][ T5071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8474'.
[  732.694941][ T5073] netlink: 'syz.2.8475': attribute type 1 has an invalid length.
[  732.710328][ T5070] netlink: 'syz.0.8473': attribute type 39 has an invalid length.
[  732.728956][ T5073] bond149: entered promiscuous mode
[  732.730958][ T5073] 8021q: adding VLAN 0 to HW filter on device bond149
[  732.918183][ T5077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8475'.
[  732.920980][ T5077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8475'.
[  732.937722][ T5073] vlan8: entered allmulticast mode
[  732.939810][ T5073] bond149: entered allmulticast mode
[  732.968448][ T5073] bond149: (slave bridge92): making interface the new active one
[  732.972797][ T5073] bridge92: entered promiscuous mode
[  732.975609][ T5073] bridge92: entered allmulticast mode
[  732.979143][ T5073] bond149: (slave bridge92): Enslaving as an active interface with an up link
[  733.107883][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.120973][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.124484][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.128718][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.131901][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.138379][ T5110] netlink: 'syz.2.8488': attribute type 29 has an invalid length.
[  733.355886][ T5129] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  733.931722][ T5164] bond178: entered promiscuous mode
[  733.935395][ T5164] 8021q: adding VLAN 0 to HW filter on device bond178
[  733.946781][ T5165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  734.059025][ T5181] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  734.084928][ T5181] bond179: (slave geneve9): making interface the new active one
[  734.087852][ T5181] bond179: (slave geneve9): Enslaving as an active interface with an up link
[  734.090553][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  734.093679][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  734.096854][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  734.099739][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  734.374215][ T5220] 8021q: adding VLAN 0 to HW filter on device bond180
[  734.389039][ T5220] veth89: entered allmulticast mode
[  734.394696][ T5220] bond180: (slave veth89): Enslaving as an active interface with an up link
[  734.419282][ T5220] bond180 (unregistering): (slave veth89): Releasing backup interface
[  734.420454][ T5223] openvswitch: netlink: Flow key attr not present in new flow.
[  734.429342][ T5220] bond180 (unregistering): Released all slaves
[  734.526445][ T5225] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20003
[  734.616890][ T5231] SET target dimension over the limit!
[  734.648167][ T5234] 8021q: adding VLAN 0 to HW filter on device bond150
[  734.956871][ T5269] bond180: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  734.969706][ T5269] bond180: (slave lo): Enslaving as an active interface with an up link
[  734.982338][ T5269] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  735.108168][ T5281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  735.120464][ T5281] veth1_to_team: entered promiscuous mode
[  735.123784][ T5281] veth1_to_team: left promiscuous mode
[  735.218599][ T5288] bond167: entered promiscuous mode
[  735.220482][ T5288] 8021q: adding VLAN 0 to HW filter on device bond167
[  735.231548][ T5288] bond167: (slave bridge0): making interface the new active one
[  735.234137][ T5288] bridge0: entered promiscuous mode
[  735.236281][ T5288] bond167: (slave bridge0): Enslaving as an active interface with an up link
[  735.241595][ T5288] veth1_macvtap: Device is already in use.
[  736.137745][ T5304] __nla_validate_parse: 330 callbacks suppressed
[  736.137761][ T5304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8541'.
[  736.174618][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8542'.
[  736.317189][ T5311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8544'.
[  738.222711][ T5294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  738.279504][ T5330] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  738.283215][ T5330] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  738.304845][ T5326] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.8546'.
[  738.312535][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8546'.
[  738.322840][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8546'.
[  738.326347][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8546'.
[  738.380370][ T5337] validate_nla: 322 callbacks suppressed
[  738.380382][ T5337] netlink: 'syz.1.8548': attribute type 1 has an invalid length.
[  738.420152][ T5339] bond181: (slave bridge82): making interface the new active one
[  738.423778][ T5339] bond181: (slave bridge82): Enslaving as an active interface with an up link
[  738.434150][ T5337] bond181: (slave bridge83): Enslaving as an active interface with a down link
[  738.443353][ T5337] macvlan11: entered promiscuous mode
[  738.445128][ T5337] macvlan11: entered allmulticast mode
[  738.447339][ T5337] bond181: entered promiscuous mode
[  738.449119][ T5337] bridge82: entered promiscuous mode
[  738.451158][ T5337] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  738.454644][ T5337] bond181: (slave macvlan11): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  738.460210][ T5337] bond181: left promiscuous mode
[  738.462153][ T5337] bridge82: left promiscuous mode
[  738.626588][ T5355] bond19: option mode: unable to set because the bond device has slaves
[  738.690017][ T5352] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8553'.
[  738.708773][ T5352] netlink: 'syz.1.8553': attribute type 13 has an invalid length.
[  738.711977][ T5352] netlink: 'syz.1.8553': attribute type 17 has an invalid length.
[  738.718703][ T5352] gretap0: refused to change device tx_queue_len
[  738.724476][ T5352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  738.775392][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.779136][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'.
[  738.784084][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.787000][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'.
[  738.790103][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.794521][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.797379][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.800503][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.804297][ T5363] netlink: 'syz.1.8557': attribute type 29 has an invalid length.
[  738.933252][ T5370] xt_CT: No such helper "snmp"
[  739.092675][ T5374] bond182: Unable to set down delay as MII monitoring is disabled
[  739.095777][ T5374] bond182 (unregistering): Released all slaves
[  739.126775][ T1524] smc: removing ib device syz2
[  739.194914][ T5386] 8021q: adding VLAN 0 to HW filter on device bond168
[  739.209489][ T5386] macvlan2: entered promiscuous mode
[  739.211174][ T5386] macvlan2: entered allmulticast mode
[  739.214268][ T5386] bond168: entered promiscuous mode
[  739.216625][ T5386] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  739.231437][ T5386] bond168: left promiscuous mode
[  739.534215][ T5419] veth87: entered allmulticast mode
[  739.549665][ T5419] bond169: (slave veth87): Enslaving as an active interface with an up link
[  739.563082][ T5426] bond169 (unregistering): (slave veth87): Releasing backup interface
[  739.569851][ T5426] bond169 (unregistering): Released all slaves
[  739.845657][ T5457] syzkaller1: entered promiscuous mode
[  739.847770][ T5457] syzkaller1: entered allmulticast mode
[  740.388002][ T5491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  740.741609][ T5512] bond151: (slave vxcan1): The slave device specified does not support setting the MAC address
[  740.746481][ T5512] bond151: (slave vxcan1): Error -95 calling set_mac_address
[  740.801372][ T5515] bond151: (slave bridge93): Enslaving as an active interface with a down link
[  740.820233][ T5512] ip6gretap3: entered promiscuous mode
[  740.823477][ T5512] ip6gretap3: entered allmulticast mode
[  740.829140][ T5512] bond151: (slave ip6gretap3): making interface the new active one
[  740.834349][ T5512] bond151: (slave ip6gretap3): Enslaving as an active interface with an up link
[  740.898537][ T5519] 8021q: adding VLAN 0 to HW filter on device bond152
[  741.145914][ T5538] __nla_validate_parse: 189 callbacks suppressed
[  741.145924][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8603'.
[  741.152596][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8603'.
[  741.179969][ T5542] vlan0: entered promiscuous mode
[  741.221328][ T5544] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  741.500165][ T5559] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8607'.
[  741.626411][ T5561] netlink: set zone limit has 4 unknown bytes
[  741.658183][ T5561] netlink: set zone limit has 4 unknown bytes
[  741.749107][ T5578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8613'.
[  741.859957][ T5584] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  741.863185][ T5584] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  742.030708][ T5587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8616'.
[  742.120717][ T5590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8617'.
[  742.199705][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8617'.
[  742.552902][ T5593] 8021q: adding VLAN 0 to HW filter on device bond169
[  742.680693][ T5597] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8619'.
[  743.400698][ T5605] validate_nla: 177 callbacks suppressed
[  743.400715][ T5605] netlink: 'syz.0.8621': attribute type 1 has an invalid length.
[  743.410202][ T5605] netlink: 'syz.0.8621': attribute type 2 has an invalid length.
[  743.416866][ T5605] netlink: 'syz.0.8621': attribute type 5 has an invalid length.
[  743.534170][ T5609] netlink: 'syz.1.8623': attribute type 1 has an invalid length.
[  743.557339][ T5609] bond182: (slave vxcan11): The slave device specified does not support setting the MAC address
[  743.561082][ T5609] bond182: (slave vxcan11): Error -95 calling set_mac_address
[  743.581846][ T5612] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8624'.
[  743.585342][ T5612] netlink: Unknown conntrack attr (0)
[  743.588460][ T5612] netlink: 'syz.0.8624': attribute type 1 has an invalid length.
[  743.608030][ T5614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8623'.
[  743.608654][ T5612] macvlan2: entered promiscuous mode
[  743.615142][ T5612] macvlan2: entered allmulticast mode
[  743.617585][ T5612] bond170: entered promiscuous mode
[  743.619573][ T5612] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  743.624375][ T5612] bond170: left promiscuous mode
[  743.636197][ T5614] 8021q: adding VLAN 0 to HW filter on device bond182
[  743.690631][ T5616] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  743.693360][ T5616] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  743.794921][ T5630] netlink: 'syz.0.8628': attribute type 15 has an invalid length.
[  743.808648][ T5632] netlink: 'syz.2.8629': attribute type 1 has an invalid length.
[  743.811283][ T5634] netlink: 'syz.2.8629': attribute type 1 has an invalid length.
[  743.845024][ T5639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.861600][ T5639] netlink: 'syz.1.8631': attribute type 29 has an invalid length.
[  743.884367][ T5639] netlink: 'syz.1.8631': attribute type 1 has an invalid length.
[  743.894111][ T5644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  744.099119][ T5657] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  747.050505][ T5666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  747.082791][ T5706] __nla_validate_parse: 187 callbacks suppressed
[  747.082801][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8650'.
[  747.132678][ T5708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8651'.
[  747.166883][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8651'.
[  747.170483][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8651'.
[  747.193932][ T5716] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  747.196863][ T5716] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  747.301495][ T5719] syzkaller1: entered promiscuous mode
[  747.304348][ T5719] syzkaller1: entered allmulticast mode
[  747.465345][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8654'.
[  747.526074][ T5724] bond183: entered promiscuous mode
[  747.528706][ T5724] 8021q: adding VLAN 0 to HW filter on device bond183
[  747.601942][ T5727] openvswitch: netlink: IP tunnel dst address not specified
[  747.605100][ T5727] netlink: 'syz.1.8655': attribute type 11 has an invalid length.
[  748.045759][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8661'.
[  748.087756][ T5742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8660'.
[  748.186370][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8666'.
[  748.195110][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8666'.
[  748.197974][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8666'.
[  748.373824][ T5772] workqueue: Failed to create a rescuer kthread for wq "bond171": -EINTR
[  748.374032][ T3870] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  748.400683][ T3870] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  748.405710][ T3870] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  748.409610][ T3870] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  749.786478][ T5837] validate_nla: 347 callbacks suppressed
[  749.786497][ T5837] netlink: 'syz.1.8680': attribute type 10 has an invalid length.
[  749.791404][ T5837] netlink: 'syz.1.8680': attribute type 10 has an invalid length.
[  749.959703][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.974540][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.977041][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.979554][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.982058][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.984885][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.987491][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  749.990306][ T5850] netlink: 'syz.1.8683': attribute type 29 has an invalid length.
[  750.478161][ T5882] team0: entered promiscuous mode
[  750.479809][ T5882] bridge43: entered promiscuous mode
[  750.481546][ T5882] macvlan4: entered promiscuous mode
[  750.484289][ T5882] macvlan5: entered promiscuous mode
[  750.486479][ T5882] bridge60: entered promiscuous mode
[  750.488548][ T5882] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  750.593714][ T5905] nft_compat: unsupported protocol 0
[  751.451408][ T5928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  751.499635][ T7387] smc: removing ib device syz0
[  751.509026][ T5938] bridge43: left promiscuous mode
[  751.512373][ T5938] team0 (unregistering): Port device bridge43 removed
[  751.516128][ T5938] macvlan4: left promiscuous mode
[  751.520968][ T5938] team0 (unregistering): Port device macvlan4 removed
[  751.525014][ T5938] macvlan5: left promiscuous mode
[  751.533722][ T5938] team0 (unregistering): Port device macvlan5 removed
[  751.536096][ T5938] bridge60: left promiscuous mode
[  751.547242][ T5938] team0 (unregistering): Port device bridge60 removed
[  751.575923][ T7387] 
[  751.576829][ T7387] ======================================================
[  751.579453][ T7387] WARNING: possible circular locking dependency detected
[  751.581801][ T7387] syzkaller #0 Not tainted
[  751.583249][ T7387] ------------------------------------------------------
[  751.585417][ T7387] kworker/u9:14/7387 is trying to acquire lock:
[  751.587330][ T7387] ffff8881012ad188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60
[  751.590397][ T7387] 
[  751.590397][ T7387] but task is already holding lock:
[  751.592603][ T7387] ffffffff8f17d428 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  751.595234][ T7387] 
[  751.595234][ T7387] which lock already depends on the new lock.
[  751.595234][ T7387] 
[  751.598440][ T7387] 
[  751.598440][ T7387] the existing dependency chain (in reverse order) is:
[  751.601557][ T7387] 
[  751.601557][ T7387] -> #9 (gdp_mutex){+.+.}-{4:4}:
[  751.603861][ T7387]        __mutex_lock+0x19f/0x1300
[  751.605810][ T7387]        get_device_parent+0x16f/0x3a0
[  751.607487][ T7387]        device_add+0x2e1/0xb70
[  751.609361][ T7387]        device_create+0x269/0x300
[  751.611413][ T7387]        msr_device_create+0x33/0x50
[  751.613470][ T7387]        cpuhp_invoke_callback+0x445/0x860
[  751.615735][ T7387]        cpuhp_thread_fun+0x36b/0x780
[  751.617631][ T7387]        smpboot_thread_fn+0x541/0xa50
[  751.619613][ T7387]        kthread+0x388/0x470
[  751.621134][ T7387]        ret_from_fork+0x51e/0xb90
[  751.622997][ T7387]        ret_from_fork_asm+0x1a/0x30
[  751.624978][ T7387] 
[  751.624978][ T7387] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  751.627520][ T7387]        cpuhp_thread_fun+0x127/0x780
[  751.629160][ T7387]        smpboot_thread_fn+0x541/0xa50
[  751.630844][ T7387]        kthread+0x388/0x470
[  751.632253][ T7387]        ret_from_fork+0x51e/0xb90
[  751.633903][ T7387]        ret_from_fork_asm+0x1a/0x30
[  751.635534][ T7387] 
[  751.635534][ T7387] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  751.637889][ T7387]        cpus_read_lock+0x42/0x160
[  751.639502][ T7387]        static_key_slow_inc+0x12/0x30
[  751.641179][ T7387]        nbd_genl_reconfigure+0x132f/0x1ea0
[  751.643001][ T7387]        genl_family_rcv_msg_doit+0x22a/0x330
[  751.644871][ T7387]        genl_rcv_msg+0x61c/0x7a0
[  751.646441][ T7387]        netlink_rcv_skb+0x232/0x4b0
[  751.648086][ T7387]        genl_rcv+0x28/0x40
[  751.649557][ T7387]        netlink_unicast+0x80f/0x9b0
[  751.651385][ T7387]        netlink_sendmsg+0x813/0xb40
[  751.653066][ T7387]        ____sys_sendmsg+0x972/0x9f0
[  751.655010][ T7387]        ___sys_sendmsg+0x2a5/0x360
[  751.657018][ T7387]        __x64_sys_sendmsg+0x1bd/0x2a0
[  751.658950][ T7387]        do_syscall_64+0x14d/0xf80
[  751.660508][ T7387]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.662531][ T7387] 
[  751.662531][ T7387] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  751.664927][ T7387]        __mutex_lock+0x19f/0x1300
[  751.666557][ T7387]        nbd_queue_rq+0x37b/0x1100
[  751.668229][ T7387]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  751.670187][ T7387]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  751.672750][ T7387]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  751.674792][ T7387]        blk_mq_run_hw_queue+0x348/0x4f0
[  751.676594][ T7387]        blk_mq_dispatch_list+0xd16/0xe10
[  751.678576][ T7387]        blk_mq_flush_plug_list+0x48d/0x570
[  751.680958][ T7387]        __blk_flush_plug+0x3ed/0x4d0
[  751.683139][ T7387]        __submit_bio+0x28d/0x580
[  751.685190][ T7387]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  751.687770][ T7387]        block_read_full_folio+0x599/0x830
[  751.689577][ T7387]        filemap_read_folio+0x137/0x3b0
[  751.691337][ T7387]        do_read_cache_folio+0x358/0x590
[  751.693114][ T7387]        read_part_sector+0xb6/0x2b0
[  751.694889][ T7387]        adfspart_check_ICS+0xa5/0xa40
[  751.696576][ T7387]        bdev_disk_changed+0x7ba/0x1550
[  751.698631][ T7387]        blkdev_get_whole+0x380/0x510
[  751.700706][ T7387]        bdev_open+0x31e/0xd30
[  751.702555][ T7387]        blkdev_open+0x470/0x610
[  751.704466][ T7387]        do_dentry_open+0x785/0x14e0
[  751.706498][ T7387]        vfs_open+0x3b/0x340
[  751.708273][ T7387]        path_openat+0x2e08/0x3860
[  751.710236][ T7387]        do_file_open+0x23e/0x4a0
[  751.712170][ T7387]        do_sys_openat2+0x113/0x200
[  751.714177][ T7387]        __x64_sys_openat+0x138/0x170
[  751.716247][ T7387]        do_syscall_64+0x14d/0xf80
[  751.718238][ T7387]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.720669][ T7387] 
[  751.720669][ T7387] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  751.723470][ T7387]        __mutex_lock+0x19f/0x1300
[  751.725494][ T7387]        nbd_queue_rq+0xc6/0x1100
[  751.727479][ T7387]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  751.729715][ T7387]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  751.731905][ T7387]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  751.733884][ T7387]        blk_mq_run_hw_queue+0x348/0x4f0
[  751.735599][ T7387]        blk_mq_dispatch_list+0xd16/0xe10
[  751.737342][ T7387]        blk_mq_flush_plug_list+0x48d/0x570
[  751.739173][ T7387]        __blk_flush_plug+0x3ed/0x4d0
[  751.740868][ T7387]        __submit_bio+0x28d/0x580
[  751.742432][ T7387]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  751.744292][ T7387]        block_read_full_folio+0x599/0x830
[  751.746091][ T7387]        filemap_read_folio+0x137/0x3b0
[  751.747833][ T7387]        do_read_cache_folio+0x358/0x590
[  751.749576][ T7387]        read_part_sector+0xb6/0x2b0
[  751.751185][ T7387]        adfspart_check_ICS+0xa5/0xa40
[  751.752863][ T7387]        bdev_disk_changed+0x7ba/0x1550
[  751.754551][ T7387]        blkdev_get_whole+0x380/0x510
[  751.756182][ T7387]        bdev_open+0x31e/0xd30
[  751.757747][ T7387]        blkdev_open+0x470/0x610
[  751.759269][ T7387]        do_dentry_open+0x785/0x14e0
[  751.760898][ T7387]        vfs_open+0x3b/0x340
[  751.762347][ T7387]        path_openat+0x2e08/0x3860
[  751.763905][ T7387]        do_file_open+0x23e/0x4a0
[  751.765463][ T7387]        do_sys_openat2+0x113/0x200
[  751.767048][ T7387]        __x64_sys_openat+0x138/0x170
[  751.768743][ T7387]        do_syscall_64+0x14d/0xf80
[  751.770325][ T7387]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.772264][ T7387] 
[  751.772264][ T7387] -> #4 (set->srcu){.+.+}-{0:0}:
[  751.774438][ T7387]        __synchronize_srcu+0xca/0x300
[  751.776091][ T7387]        elevator_switch+0x1e8/0x7a0
[  751.777727][ T7387]        elevator_change+0x2cc/0x450
[  751.779354][ T7387]        elevator_set_default+0x36c/0x430
[  751.781099][ T7387]        blk_register_queue+0x366/0x430
[  751.782791][ T7387]        __add_disk+0x677/0xd50
[  751.784292][ T7387]        add_disk_fwnode+0xfb/0x480
[  751.785886][ T7387]        nbd_dev_add+0x72c/0xb50
[  751.787404][ T7387]        nbd_init+0x168/0x1f0
[  751.788878][ T7387]        do_one_initcall+0x250/0x8d0
[  751.790513][ T7387]        do_initcall_level+0x104/0x190
[  751.792170][ T7387]        do_initcalls+0x59/0xa0
[  751.793669][ T7387]        kernel_init_freeable+0x2a6/0x3e0
[  751.795408][ T7387]        kernel_init+0x1d/0x1d0
[  751.796913][ T7387]        ret_from_fork+0x51e/0xb90
[  751.798651][ T7387]        ret_from_fork_asm+0x1a/0x30
[  751.800453][ T7387] 
[  751.800453][ T7387] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  751.802897][ T7387]        __mutex_lock+0x19f/0x1300
[  751.804820][ T7387]        elevator_change+0x1b3/0x450
[  751.806712][ T7387]        elevator_set_none+0xb5/0x140
[  751.808442][ T7387]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  751.810554][ T7387]        nbd_start_device+0x17f/0xb10
[  751.812261][ T7387]        nbd_genl_connect+0x165b/0x1cf0
[  751.814295][ T7387]        genl_family_rcv_msg_doit+0x22a/0x330
[  751.816259][ T7387]        genl_rcv_msg+0x61c/0x7a0
[  751.817807][ T7387]        netlink_rcv_skb+0x232/0x4b0
[  751.819497][ T7387]        genl_rcv+0x28/0x40
[  751.821016][ T7387]        netlink_unicast+0x80f/0x9b0
[  751.822681][ T7387]        netlink_sendmsg+0x813/0xb40
[  751.824464][ T7387]        ____sys_sendmsg+0x972/0x9f0
[  751.826149][ T7387]        ___sys_sendmsg+0x2a5/0x360
[  751.827826][ T7387]        __x64_sys_sendmsg+0x1bd/0x2a0
[  751.829530][ T7387]        do_syscall_64+0x14d/0xf80
[  751.831394][ T7387]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.833376][ T7387] 
[  751.833376][ T7387] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  751.836200][ T7387]        blk_alloc_queue+0x546/0x680
[  751.837844][ T7387]        __blk_mq_alloc_disk+0x197/0x390
[  751.839591][ T7387]        nbd_dev_add+0x499/0xb50
[  751.841325][ T7387]        nbd_init+0x168/0x1f0
[  751.842831][ T7387]        do_one_initcall+0x250/0x8d0
[  751.844656][ T7387]        do_initcall_level+0x104/0x190
[  751.846396][ T7387]        do_initcalls+0x59/0xa0
[  751.847923][ T7387]        kernel_init_freeable+0x2a6/0x3e0
[  751.849714][ T7387]        kernel_init+0x1d/0x1d0
[  751.851349][ T7387]        ret_from_fork+0x51e/0xb90
[  751.852941][ T7387]        ret_from_fork_asm+0x1a/0x30
[  751.854810][ T7387] 
[  751.854810][ T7387] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  751.857079][ T7387]        fs_reclaim_acquire+0x71/0x100
[  751.858797][ T7387]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  751.860909][ T7387]        alloc_inode+0xb8/0x1b0
[  751.862439][ T7387]        iget_locked+0x131/0x6a0
[  751.864111][ T7387]        kernfs_get_inode+0x4f/0x780
[  751.865804][ T7387]        kernfs_get_tree+0x5cd/0x980
[  751.867636][ T7387]        sysfs_get_tree+0x46/0x110
[  751.869241][ T7387]        vfs_get_tree+0x92/0x2a0
[  751.870833][ T7387]        do_new_mount+0x341/0xd30
[  751.872447][ T7387]        __se_sys_mount+0x31d/0x420
[  751.874224][ T7387]        do_syscall_64+0x14d/0xf80
[  751.875828][ T7387]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.877851][ T7387] 
[  751.877851][ T7387] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  751.880758][ T7387]        __lock_acquire+0x15a5/0x2cf0
[  751.882533][ T7387]        lock_acquire+0xf0/0x2e0
[  751.884331][ T7387]        down_write+0x96/0x200
[  751.886145][ T7387]        kernfs_remove+0x30/0x60
[  751.887980][ T7387]        __kobject_del+0xe1/0x330
[  751.889862][ T7387]        kobject_del+0x45/0x60
[  751.891404][ T7387]        cleanup_glue_dir+0x1a3/0x220
[  751.893106][ T7387]        device_del+0x780/0x8f0
[  751.894642][ T7387]        srp_remove_one+0x81/0x280
[  751.896249][ T7387]        remove_client_context+0xb9/0x1e0
[  751.898024][ T7387]        disable_device+0x137/0x330
[  751.899665][ T7387]        __ib_unregister_device+0x2cb/0x3f0
[  751.901548][ T7387]        ib_unregister_work+0x19/0x30
[  751.903217][ T7387]        process_scheduled_works+0xb6e/0x18c0
[  751.905122][ T7387]        worker_thread+0xa53/0xfc0
[  751.907009][ T7387]        kthread+0x388/0x470
[  751.908858][ T7387]        ret_from_fork+0x51e/0xb90
[  751.910631][ T7387]        ret_from_fork_asm+0x1a/0x30
[  751.912253][ T7387] 
[  751.912253][ T7387] other info that might help us debug this:
[  751.912253][ T7387] 
[  751.915335][ T7387] Chain exists of:
[  751.915335][ T7387]   &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex
[  751.915335][ T7387] 
[  751.919532][ T7387]  Possible unsafe locking scenario:
[  751.919532][ T7387] 
[  751.922003][ T7387]        CPU0                    CPU1
[  751.923855][ T7387]        ----                    ----
[  751.925599][ T7387]   lock(gdp_mutex);
[  751.926783][ T7387]                                lock(cpuhp_state-up);
[  751.928848][ T7387]                                lock(gdp_mutex);
[  751.930836][ T7387]   lock(&root->kernfs_rwsem);
[  751.932351][ T7387] 
[  751.932351][ T7387]  *** DEADLOCK ***
[  751.932351][ T7387] 
[  751.934862][ T7387] 4 locks held by kworker/u9:14/7387:
[  751.936535][ T7387]  #0: ffff8881066bd148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  751.940231][ T7387]  #1: ffffc90003cd7c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  751.944391][ T7387]  #2: ffff888169c18718 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  751.947913][ T7387]  #3: ffffffff8f17d428 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  751.950722][ T7387] 
[  751.950722][ T7387] stack backtrace:
[  751.952578][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: kworker/u9:14 Not tainted syzkaller #0 PREEMPT(full) 
[  751.952588][ T7387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  751.952594][ T7387] Workqueue: ib-unreg-wq ib_unregister_work
[  751.952603][ T7387] Call Trace:
[  751.952609][ T7387]  <TASK>
[  751.952614][ T7387]  dump_stack_lvl+0xe8/0x150
[  751.952625][ T7387]  print_circular_bug+0x2e1/0x300
[  751.952638][ T7387]  check_noncircular+0x12e/0x150
[  751.952650][ T7387]  __lock_acquire+0x15a5/0x2cf0
[  751.952660][ T7387]  ? __lock_acquire+0x6b5/0x2cf0
[  751.952670][ T7387]  ? rcu_is_watching+0x15/0xb0
[  751.952681][ T7387]  lock_acquire+0xf0/0x2e0
[  751.952690][ T7387]  ? kernfs_remove+0x30/0x60
[  751.952699][ T7387]  down_write+0x96/0x200
[  751.952712][ T7387]  ? kernfs_remove+0x30/0x60
[  751.952718][ T7387]  ? __pfx_down_write+0x10/0x10
[  751.952728][ T7387]  ? kernfs_root+0x1c/0x230
[  751.952738][ T7387]  ? kernfs_root+0x1c/0x230
[  751.952748][ T7387]  ? kernfs_root+0x1c/0x230
[  751.952758][ T7387]  ? kernfs_root+0x1ea/0x230
[  751.952768][ T7387]  kernfs_remove+0x30/0x60
[  751.952775][ T7387]  __kobject_del+0xe1/0x330
[  751.952787][ T7387]  kobject_del+0x45/0x60
[  751.952797][ T7387]  cleanup_glue_dir+0x1a3/0x220
[  751.952807][ T7387]  device_del+0x780/0x8f0
[  751.952819][ T7387]  ? __pfx_device_del+0x10/0x10
[  751.952829][ T7387]  ? remove_client_context+0x79/0x1e0
[  751.952836][ T7387]  ? __pfx_srp_remove_one+0x10/0x10
[  751.952846][ T7387]  srp_remove_one+0x81/0x280
[  751.952856][ T7387]  ? __pfx_srp_remove_one+0x10/0x10
[  751.952865][ T7387]  remove_client_context+0xb9/0x1e0
[  751.952873][ T7387]  disable_device+0x137/0x330
[  751.952882][ T7387]  ? __pfx_disable_device+0x10/0x10
[  751.952890][ T7387]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  751.952899][ T7387]  __ib_unregister_device+0x2cb/0x3f0
[  751.952908][ T7387]  ib_unregister_work+0x19/0x30
[  751.952915][ T7387]  ? process_scheduled_works+0xa8d/0x18c0
[  751.952924][ T7387]  process_scheduled_works+0xb6e/0x18c0
[  751.952938][ T7387]  ? __pfx_process_scheduled_works+0x10/0x10
[  751.952948][ T7387]  ? assign_work+0x3d5/0x5e0
[  751.952957][ T7387]  worker_thread+0xa53/0xfc0
[  751.952971][ T7387]  kthread+0x388/0x470
[  751.952978][ T7387]  ? __pfx_worker_thread+0x10/0x10
[  751.952987][ T7387]  ? __pfx_kthread+0x10/0x10
[  751.952994][ T7387]  ret_from_fork+0x51e/0xb90
[  751.953004][ T7387]  ? __pfx_ret_from_fork+0x10/0x10
[  751.953013][ T7387]  ? __switch_to+0xc7d/0x1450
[  751.953022][ T7387]  ? __pfx_kthread+0x10/0x10
[  751.953028][ T7387]  ret_from_fork_asm+0x1a/0x30
[  751.953041][ T7387]  </TASK>
[  752.086632][ T5945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  752.089709][ T5945] IPv6: NLM_F_CREATE should be set when creating new route
[  752.092823][ T5945] IPv6: NLM_F_CREATE should be set when creating new route
[  752.095764][ T5945] IPv6: NLM_F_CREATE should be set when creating new route
[  752.101386][ T5945] __nla_validate_parse: 525 callbacks suppressed
[  752.101399][ T5945] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8710'.
[  752.200296][ T5942] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8709'.
[  752.380014][ T5552] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue
