last executing test programs:

1.101825739s ago: executing program 2 (id=16278):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES16=<r5=>r4, @ANYBLOB="3ec94987aedbedfa8630eef9908865e37882a3c02bd94bba3ba194c675dca51970"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000600)={r9, 0x5}, 0x8)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010a00"/50, @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x2, 0x6, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x17, 0x20, [@multicast2, @empty, @broadcast, @empty, @private=0xa010102]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x1, 0x2}, {0x1, 0x2}, {0x4, 0x4, "a545"}]}, @generic={0x86, 0x3, 'j'}, @timestamp_prespec={0x44, 0x14, 0x62, 0x3, 0x0, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0x4}]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r10, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r10, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4)
recvmmsg(r10, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}, 0x9}], 0x1, 0x45833af92e4b38be, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

997.356029ms ago: executing program 2 (id=16279):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x3, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000040)="eb", 0x1}], 0x1}, 0xff0f}], 0x1, 0x200080fc)

988.424347ms ago: executing program 2 (id=16280):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="508804000300000000000000000000000a000200aaaaaaaaaabb0000"], 0x34}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r4, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x3b, @private=0xa0100fe, 0x4e21, 0x3, 'wlc\x00', 0x8, 0xa7e, 0x13f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) (async)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091110e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000800)={&(0x7f0000000280)="871a728309d52ab5488a4f94c51cccb807cda3e327598e3db94c080f75f4f682c2840e2571ed095654281e24ab7339058371bcfd4b4b0d5c9df1f662ff58577dcb7851e747620950ee7457abc11da0cb7c845225f06d8706271e27cdbb92b1e20255369297444d06ea121194c2fe0839afc5198fcc76b9db7ce7389e42e8f2f4f5f5ea00d250448d387b1acd4f0ee22a7fd92bd0d03a6b135146659707fb86074afb78abc100d3f0aad3", &(0x7f00000004c0)=""/132, &(0x7f0000000600)="d6fa7cb0ae11a759f1233618033d9e17a82b03e0af349183fc6c99db02d145e3d34dfce69ceabbf9b762f814e5b36169b844d93e3549af0ac8808c00a7723d3a1be21ff9919986358d41600139a2e6f6e49f79cf25aaed3c6f9e7a3760f582fbf398402357812c770beb0a13a2907bfb616ad847c6975930709f179dc1608b733aeec20a5e544d6f471317bcf23b5bdc165efe", &(0x7f0000000740)="d7e1ae4809bdc1104bad7d71f1453659f19b24ee23d1e712928cef29f6744e3c1e675155650673599972e0c762cc89cc210eaa976193c46bfc229ec93ebeac2f4c0f3672eea359bfb69629d1cb5e33ca75f483742908c5e81d17293c91d7b330e919f071814479e08f71241d7d86f21b793304bc8fa8ce6a35d1238d55bdcf0ec5b9b0df5aed1e74c5394759b5f3d6542012bf2d0c11271d09", 0x2, r5}, 0x38)
r7 = socket(0x1000000010, 0x80002, 0x0) (async)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="bb00000000000000000100080000060000000100"/29], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

911.43694ms ago: executing program 2 (id=16281):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r0 = socket(0x10, 0x803, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
connect$bt_rfcomm(r3, &(0x7f0000000140)={0x1f, @any, 0xf5}, 0xa)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x917ba7244aaaf568, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$kcm(0x2b, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(r8)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
pwritev(r6, 0x0, 0x0, 0x1, 0xffffffff)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

819.718354ms ago: executing program 2 (id=16284):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'dummy0\x00', @ifru_data=0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x305, 0x70bd27, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000000fb0000080001"], 0x20}}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000100e9080900fedbdf250a100000f7a3fb6d57e834b08e00150000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRES16=r8], 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04460200016004001400030064756d6d79300000000000000000000005002700260000000c001a"], 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000850)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r12, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x840}, 0x40041)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300, 0x0, 0x20008084}, 0x0)
ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000100)="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")

682.245777ms ago: executing program 0 (id=16287):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000000))
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb06c6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x240008a4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x2, 'pim6reg1\x00', {0x2}, 0x9})
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

602.146214ms ago: executing program 0 (id=16288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x31, 0x1ff, 0xfffff371, 0x8d, 0x1002, 0x804, 0x7ff, 0x6, 0x7, 0x6, 0x6, 0xa, 0x74, 0x7, 0x8, 0x4, 0x4, 0x3, 0x9, 0x401, 0x400, 0x4, 0x8, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x80, 0x5, 0x4, 0x8, 0xa, 0x74ad, 0x3, 0x4, 0x4, 0x8001, 0xffff, 0x2, 0x5, 0xfffff000, 0x0, 0x200, 0x41, 0x4, 0x7, 0x7, 0x0, 0x800, 0x4da, 0x5, 0x8e, 0x1, 0x1, 0x96, 0x800, 0x4, 0x8, 0x4, 0xdf69f4, 0x56, 0xef, 0x60, 0x4, 0x9, 0x800, 0x1ff, 0x3, 0x4, 0x5, 0x1a, 0x100, 0x8, 0x3, 0xa, 0x60, 0x7, 0xce, 0xa000, 0x1, 0x1, 0x34, 0x9, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x9, 0xf58, 0x5, 0x400, 0x9, 0xe, 0x3, 0x3, 0x279, 0x6, 0x9, 0x1, 0x2, 0x994, 0x2, 0x0, 0xe304, 0xc00000, 0x96, 0x8, 0xb, 0x1, 0x40000, 0x64f6, 0x3cb, 0x2, 0x3, 0xd5, 0x5, 0x1, 0x9, 0x10000, 0x401, 0x7, 0x7, 0xfffffff8, 0x3, 0x1, 0xaba8, 0xfffffff7, 0x9, 0xfffffffb, 0xffffff80, 0x1000, 0x1, 0xfff, 0x1, 0xd51, 0x5, 0x9, 0x1050c0, 0x10001, 0x8, 0x7, 0x7, 0xbf81, 0xc2b0, 0x1ff, 0x101, 0x5, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7fffffff, 0xffff, 0x5, 0x4, 0x7ff, 0x891, 0x401, 0x8, 0x6, 0x40, 0x5, 0x9, 0x0, 0x1000008, 0x5, 0xebc, 0x4, 0x3, 0x9, 0xb5, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0x200, 0x7, 0xc, 0x7f, 0x80009, 0x1, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x1eb0, 0x0, 0x1, 0x7, 0x1000, 0x2, 0xc4, 0x7, 0x1, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0xda0, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x4, 0x2, 0xff, 0x2, 0x100, 0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x81, 0xfffffffd, 0x6, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x3ff, 0x7f, 0x4, 0x80000001, 0x5, 0x6, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x100, 0x8, 0x9, 0x401, 0x1, 0x1, 0x7, 0x3, 0xb84d, 0x6, 0x2, 0x0, 0x8, 0x9, 0x3, 0x3, 0x2, 0xc, 0xb, 0x9a, 0x8, 0xfffffff7, 0x1, 0x74, 0x6, 0x6, 0x0, 0x401, 0x1, 0x83, 0xffff, 0x90000000, 0x3564, 0x0, 0x992, 0xd, 0x7, 0xf2, 0x2ba6, 0x8, 0x12, 0x1b5b, 0x5, 0x6, 0x800, 0x2, 0x1, 0x40, 0xfffffff8, 0x86, 0x3, 0x7, 0x3, 0x10, 0x90d4, 0x10000, 0x9, 0x5, 0x6, 0x5, 0x400, 0xa6, 0x6, 0x7, 0x7, 0x7fff, 0x81, 0x2, 0x5, 0x5, 0x40, 0xfffffff7, 0xb3, 0x2, 0x2, 0xa, 0x9, 0x10, 0x158, 0x5, 0x7fffffff, 0x7ff, 0x97, 0x8, 0x4, 0xd5, 0xffff, 0x2, 0x6, 0x9, 0x8, 0x6, 0x1, 0x401, 0x289, 0x5, 0x800, 0xf35, 0x7f, 0x9, 0x6, 0x1, 0x800, 0xd90, 0x9, 0x26b, 0x6217, 0x1009, 0x4, 0x7, 0x6, 0x2, 0x3, 0xf, 0x3, 0x4, 0x5, 0x4, 0x3, 0x7, 0x3, 0x7, 0x9, 0x400, 0x8, 0xffffff01, 0x9, 0x8, 0x7f1, 0x6, 0xc, 0x4, 0x5, 0x4, 0xb, 0x80000000, 0x7f, 0x3c, 0x5158, 0x3, 0x448, 0x9, 0x80, 0x4, 0x81, 0xf744, 0xd, 0x0, 0x3, 0x1, 0x9, 0xd3e, 0x4, 0x2, 0xd6d, 0x476cf286, 0x2, 0x105, 0xd6, 0x80000000, 0x6, 0x3, 0x6, 0x2, 0x5, 0x8, 0x0, 0x9, 0xf8, 0x0, 0x5, 0x800, 0x3, 0x3, 0xff, 0x6, 0x6, 0x6, 0x8b9d, 0x4104, 0x8000, 0x0, 0x6, 0x3, 0x56, 0x0, 0x2, 0x893e, 0x2, 0x3ff, 0x8, 0x1, 0x0, 0x80, 0x2, 0x8, 0x7f, 0x5, 0xa54, 0x2, 0x1, 0x2, 0x8, 0x97, 0x2e, 0x4023, 0x7, 0x9, 0x9, 0x20, 0x9, 0x2, 0x80000000, 0x100, 0x5, 0x1df, 0x9, 0x40e4, 0x7, 0x3, 0x609, 0x7, 0xd5c, 0xfffffffe, 0xfffffff9, 0x6, 0x19bd, 0x885, 0x7, 0x5, 0x9, 0xbe000000, 0xe9, 0x4, 0x61bf, 0x1, 0x100, 0x77, 0x81, 0x0, 0x0, 0x9, 0x8, 0x6, 0x4, 0x4, 0xfffffffc, 0x4, 0x5, 0x3, 0x0, 0x1, 0x7, 0x401, 0x69]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x5, 0x3, 0x2, {0x2, 0x1, 0x3e, 0x0, 0xffff, 0x800}, {0x4, 0x1, 0x10, 0x9, 0x2, 0x2}, 0x7, 0x7, 0x800}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async)
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080270b49c8ed32c7f0288ddb3fa5006d20f51cf9416f6078475def7bbedcc4530765e374be77d4ba43054ada08c40772f0498658f07e7955fb484016e1d8547293f872082e3d99c73145afee00a7083231edf2279b0521d", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)

601.325573ms ago: executing program 2 (id=16289):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r6 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030428bd7800fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c001280000c000280060001000200150000000000b1f1790cf650350a9adf1fb7b684bc93ce5f7913000000000000000000000484940fe59344012923d1246e65c2afd7dd60d026e737117d77c990b102c03329bd44b1168e27949103a6f9e47ce7c8ebd7d0fe6f4f49af21e6f2c3609f25838bda613f3856e472cf8cfcb28383362dd6a63065a77e61f6b7db2a500500000000000000e6800d41c666a2a8f340e7b4d69cff47a0bffcbaf875b215548ad855f1734100"/206, @ANYRES32=r9, @ANYBLOB="0800040005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

599.987484ms ago: executing program 1 (id=16290):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)='\tH', 0x2, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

512.003902ms ago: executing program 0 (id=16291):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 32)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) (rerun: 64)
socket(0x10, 0x3, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r1, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000100200000000000000dbd72500100206", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd28, 0x25dfdbfd, 0x1, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) (async)
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64)

511.310517ms ago: executing program 1 (id=16292):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

510.463119ms ago: executing program 1 (id=16293):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2)
write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x18, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c000300"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
close(r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff000000020010"], 0x50}}, 0x0)
sendmmsg(r11, &(0x7f0000000180), 0x40000000000007b, 0x4004)

311.596546ms ago: executing program 0 (id=16294):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r4, r2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x5, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000006c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x3}, 0x4, 0xe, 0x7, 0x200, 0x3, 'syz0\x00', "716a1bf48d5380999c0854bc413cf2b2f8dca55c840e2d8a42eaa2ad39e310c4", "3ea3fcd10fc0a691c4dcd066f65a30d105aa046a17a7e7394de41c20f6515e2a", [{0x10, 0x0, {0x2, 0x100}}, {0x9, 0x5b07, {0x1, 0x3}}, {0x3a9, 0x6, {0x2, 0x5}}, {0x0, 0x1, {0x1, 0xc8b0}}, {0xd85a, 0x113, {0x0, 0x5}}, {0x1, 0x101, {0x0, 0x4}}, {0xf42, 0x1, {0x3, 0x6}}, {0x400, 0x8, {0x1, 0x1}}, {0x8, 0x7f, {0x2, 0x2bf1}}, {0x5, 0x2, {0x1, 0x4}}, {0x7, 0x3, {0x1, 0x2}}, {0x8, 0x0, {0x1, 0x3}}, {0x4, 0x3, {0x0, 0x4}}, {0x9, 0x7fff, {0x0, 0x7}}, {0x81, 0x7, {0x0, 0x1}}, {0x8, 0x2, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x401}}, {0xc65, 0xd, {0x3, 0x2}}, {0xd, 0x62, {0x3, 0x8}}, {0x8, 0x0, {0x1, 0x2}}, {0x81, 0x2, {0x0, 0x80000000}}, {0x40, 0x101, {0x3, 0x2e}}, {0xf64, 0x4, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x6}}, {0xb6, 0x6, {0x3, 0xd}}, {0x769a, 0x2a52, {0x1, 0x8}}, {0x9961, 0x1, {0x0, 0x1}}, {0xd0e3, 0x4827, {0x2, 0x6}}, {0x4, 0xa8, {0x0, 0x101}}, {0x1, 0xe5, {0x2, 0xd}}, {0x9, 0xf, {0x1, 0xfffffff9}}, {0x100, 0x5, {0x2, 0x1a78}}, {0x6e6, 0x7, {0x3, 0x4}}, {0x9, 0x9, {0x1, 0x800}}, {0x4, 0xfffc, {0x1}}, {0x3, 0x7992, {0x3, 0xfffffffb}}, {0xe0f3, 0xf4, {0x2, 0x2}}, {0xffff, 0x9, {0x1, 0x80000000}}, {0x4, 0xa970, {0x1, 0x401}}, {0x1a00, 0xbec, {0x2, 0xc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5)
getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x4c}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x6, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdb000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r8, @ANYBLOB="08000300ac1e0001"], 0x44}}, 0x40848c0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000)

310.132698ms ago: executing program 1 (id=16295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe93b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8020}, 0x24008885) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r2=>0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r2)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="428e838671ea6dcbbc08eb0a99b16886143ae9bd6041f8cd71de08f074a8e054a8af62f9e0d4645dac6ac3f72aabfac32595b6352a2dbaa2027bacb874293ade2ae707ad03620605769aaa7e0f35ed608259a607d02b6630933cf474c1c899e3deda00607d1d93885d2b8779f05b6f7271c8b95b3351ec4de3b37e50f9e029f4d57672da4959639c31c615c86cb94a3189a9df474638eda3ba4d229a966d2cabaa261cd4a4297276a24d9aee8f548eed4f48497ca9442cb517631f65c2a0231aaabe9d00103bb42d5357a22f0bd67713677f252306fda1", 0xd7}, {&(0x7f00000003c0)="d1", 0x1}, {&(0x7f0000000400)="4d4a1b97b8ee249e90d8ee847de22de43951635fce0ecaa3658ea0bf4f0bc169886d5611f8b268c031e29099ac2bb5dc8df7e84343adf4155a4ab074d1c9956801", 0x41}, {&(0x7f0000000480)="466c709f59d2ed4c5d63263ad1b0dc39245b73bb24", 0x15}], 0x4, &(0x7f0000000500)=[@ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xa7, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @loopback, @rand_addr=0x64010100]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x50}, 0x40040) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}]]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000740)={@mcast1, <r8=>0x0}, &(0x7f0000000780)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f00000007c0)={'tunl0\x00', r8, 0x8, 0x7, 0x5, 0x1, {{0x44, 0x4, 0x3, 0x9, 0x110, 0x64, 0x0, 0x5, 0x7d, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0x2, [{@loopback, 0x5}, {@remote, 0x400}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0xc3, 0x1, 0x0, [{@loopback, 0x7}, {@remote, 0xff}, {@empty, 0xfff}, {@broadcast, 0x9}, {@multicast1, 0x8000}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xdc}, {@broadcast, 0x1}, {@multicast2, 0x780}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x60b0}]}, @cipso={0x86, 0x42, 0x2, [{0x5, 0xe, "0c75787b861ac4cddd90032c"}, {0x0, 0x7, "bc378c1b10"}, {0x2, 0x4, "f2f7"}, {0x1, 0xe, "25cbee23612583ea4b11bf29"}, {0x2, 0x6, "1a28c741"}, {0x0, 0xf, "b24689f12af51cd36dd580a169"}]}, @cipso={0x86, 0x21, 0x3, [{0x6, 0x10, "3c5dce61e9101a53328afc5408bc"}, {0x2, 0xb, "df9874fd4e1b61be6a"}]}, @ssrr={0x89, 0x17, 0x8, [@dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty, @empty]}, @lsrr={0x83, 0x17, 0xf2, [@multicast1, @remote, @local, @empty, @private=0xa010102]}]}}}}}) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r0) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$TUNSETOWNER(r9, 0x400454cc, 0xffffffffffffffff)
r10 = accept4(r4, &(0x7f00000009c0)=@nfc, &(0x7f0000000a40)=0x80, 0x80000)
listen(r10, 0x7) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@getchain={0x3c, 0x66, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x1, 0x7}, {0x10, 0xc}, {0x0, 0xfff3}}, [{0x8, 0xb, 0xffffff01}, {0x8, 0xb, 0xa4f1}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x48844)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r12, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0xc, 0x2, @l2={'eth', 0x3a, 'wg0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1014) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
accept$unix(r10, 0x0, &(0x7f0000000d00)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)=@delchain={0x84, 0x65, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff2, 0x5}, {0xc, 0x5}, {0x8013, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x30}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x41}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

211.904705ms ago: executing program 1 (id=16296):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=<r0=>0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x106)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@remote, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x4, 0x0, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2], 0xfc}}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="00000000000000000005000000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8], 0x50)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000d40)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf250200000014000b00ff0100000000000000003f74e0603c8a6765000000000000010c000300040017b5535d891e96635ab19fa503ffd31c54c3216859f32231f43a7fd67282ec1cec570673066e316564583548cf990ce71b8cb775b4daf9c471aa13d5f88caa52f001a9c469c439", @ANYRES32=r8, @ANYBLOB="0c07001e02008252fa6cb4505d2fe015ffd9f97a"], 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x4)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r12, 0x0, 0x0}, 0x10)
sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)

60.94514ms ago: executing program 0 (id=16297):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x80)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r3], 0xfdef) (async)
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r3], 0xfdef)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090400000000000000000a00800000000008020000000100000000000000"], 0x24}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r7, &(0x7f00000003c0)="22ca88836460a016003fd14d9017c1e82285a80ae6fd306b2c9c54b3ce3c0ac7448b2305403a6449f9173ba3e1d84566c85bd8749e35106524cd2ddb6f223eb6994918f14826ff5da613946648d254b2c63f2af1cddc84f4852cfa2a223d8f4f965da1", 0x63, 0x2000c880, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(r0, 0x0, 0x20048004)

2.177727ms ago: executing program 1 (id=16298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

0s ago: executing program 0 (id=16299):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084)
clock_gettime(0x0, &(0x7f0000000340)={<r7=>0x0, <r8=>0x0})
recvmmsg(r5, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r7, r8+60000000})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r11, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
unshare(0x0)

kernel console output (not intermixed with test programs):

multicast mode
[ 1313.792776][ T5267] team0: entered promiscuous mode
[ 1313.804699][ T5271] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3923448286/3923448288
[ 1313.808371][ T5271] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3923448286/3923448287
[ 1313.811860][ T5271] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3923448286/3923448288
[ 1313.815291][ T5271] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3923448286/3923448287
[ 1313.818732][ T5271] netlink: 'syz.2.15258': attribute type 1 has an invalid length.
[ 1313.900765][ T5281] macvtap18: entered promiscuous mode
[ 1313.902613][ T5281] vlan0: entered promiscuous mode
[ 1313.905885][ T5281] bond458: entered promiscuous mode
[ 1313.911782][ T5281] vlan0: left promiscuous mode
[ 1313.913816][ T5281] bond458: left promiscuous mode
[ 1313.922916][ T5279] __nla_validate_parse: 26 callbacks suppressed
[ 1313.922928][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15260'.
[ 1313.922940][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15260'.
[ 1313.960164][ T5284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15261'.
[ 1313.967900][ T5284] netlink: 'syz.1.15261': attribute type 1 has an invalid length.
[ 1313.996513][ T5284] bond539: entered promiscuous mode
[ 1313.999096][ T5284] 8021q: adding VLAN 0 to HW filter on device bond539
[ 1314.031704][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15261'.
[ 1314.039290][ T5284] bond539: entered allmulticast mode
[ 1314.094783][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15264'.
[ 1314.139565][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15266'.
[ 1314.143697][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15266'.
[ 1314.150916][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15266'.
[ 1314.152540][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15266'.
[ 1314.158441][ T5303] netlink: 'syz.0.15266': attribute type 12 has an invalid length.
[ 1314.161147][ T5302] netlink: 'syz.0.15266': attribute type 12 has an invalid length.
[ 1314.162016][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15266'.
[ 1314.167304][ T5303] netlink: 'syz.0.15266': attribute type 12 has an invalid length.
[ 1314.170622][ T5302] netlink: 'syz.0.15266': attribute type 12 has an invalid length.
[ 1314.276024][ T5305] bond366: entered allmulticast mode
[ 1314.282504][ T5304] bond366: left allmulticast mode
[ 1314.608080][ T5327] netlink: 'syz.2.15272': attribute type 1 has an invalid length.
[ 1314.645776][ T5327] bond488: (slave bridge200): making interface the new active one
[ 1314.650157][ T5327] bond488: (slave bridge200): Enslaving as an active interface with an up link
[ 1314.771289][ T5342] xt_TCPMSS: Only works on TCP SYN packets
[ 1314.865195][ T5361] netlink: 'syz.1.15279': attribute type 1 has an invalid length.
[ 1314.894298][ T5364] netlink: 'syz.2.15280': attribute type 1 has an invalid length.
[ 1314.919093][ T5361] 8021q: adding VLAN 0 to HW filter on device bond540
[ 1314.944091][ T5364] bond489: entered promiscuous mode
[ 1314.948829][ T5364] 8021q: adding VLAN 0 to HW filter on device bond489
[ 1314.952688][ T5367] bridge0: Device is already in use.
[ 1314.962260][ T5361] bond534: (slave veth0_to_bond): Releasing active interface
[ 1314.976880][ T5361] bond540: (slave veth0_to_bond): making interface the new active one
[ 1314.981988][ T5361] bond540: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1314.988465][ T5364] bridge0: Device is already in use.
[ 1314.993734][ T5361] veth0_to_bond: entered promiscuous mode
[ 1315.006273][ T5361] bond540: entered promiscuous mode
[ 1315.011832][ T5361] bond540: entered allmulticast mode
[ 1315.017582][ T5361] veth0_to_bond: entered allmulticast mode
[ 1315.099142][ T5369] xt_CT: No such helper "snmp_trap"
[ 1315.148414][ T5380] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1315.322187][ T5391] bond492 (unregistering): Released all slaves
[ 1315.870916][ T5438] bond0: (slave ip6tnl0): refused to change device type
[ 1315.889323][ T5438] ip6erspan4: entered allmulticast mode
[ 1316.030094][ T5440] 8021q: adding VLAN 0 to HW filter on device bond492
[ 1316.305512][ T5461] 8021q: adding VLAN 0 to HW filter on device bond490
[ 1316.326415][ T5461] bond490: (slave veth169): Enslaving as an active interface with a down link
[ 1316.345531][ T5462] bond490: (slave veth171): Enslaving as an active interface with a down link
[ 1316.465476][ T5474] syzkaller0: entered promiscuous mode
[ 1316.467271][ T5474] syzkaller0: entered allmulticast mode
[ 1316.707350][ T5489] syzkaller0: entered promiscuous mode
[ 1316.709660][ T5489] syzkaller0: entered allmulticast mode
[ 1316.716925][ T5489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1316.742662][ T5489] tipc: Resetting bearer <eth:syzkaller0>
[ 1316.746103][ T5489] tipc: Resetting bearer <eth:syzkaller0>
[ 1316.769881][ T5488] tipc: Resetting bearer <eth:syzkaller0>
[ 1316.802011][ T5488] tipc: Disabling bearer <eth:syzkaller0>
[ 1316.914646][ T5500] bond491 (unregistering): Released all slaves
[ 1317.030680][ T5520] pim6reg: entered allmulticast mode
[ 1317.044137][ T5520] pim6reg: left allmulticast mode
[ 1317.165239][ T5528] pim6reg1: entered promiscuous mode
[ 1317.169297][ T5528] pim6reg1: entered allmulticast mode
[ 1317.319801][ T5543] 8021q: adding VLAN 0 to HW filter on device bond491
[ 1317.336670][ T5543] ipvlan0: entered allmulticast mode
[ 1317.341753][ T5543] bond491: entered allmulticast mode
[ 1317.483139][T18522] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[ 1317.488350][T18522] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[ 1317.491980][T18522] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[ 1317.499898][T18522] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[ 1317.550464][ T5568] bond492: (slave bridge202): making interface the new active one
[ 1317.555887][ T5568] bond492: (slave bridge202): Enslaving as an active interface with an up link
[ 1317.590460][ T5571] bridge0: entered allmulticast mode
[ 1318.246884][ T5591] tipc: Resetting bearer <eth:syzkaller0>
[ 1318.351297][ T5593] syzkaller0: entered promiscuous mode
[ 1318.353470][ T5593] syzkaller0: entered allmulticast mode
[ 1318.364057][ T5593] 8021q: VLANs not supported on team0
[ 1322.181198][ T5608] __nla_validate_parse: 28 callbacks suppressed
[ 1322.181214][ T5608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15340'.
[ 1322.193230][ T5608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15340'.
[ 1322.199640][ T5608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15340'.
[ 1322.316822][   T13] batadv14: left promiscuous mode
[ 1322.413224][ T5636] bond493 (unregistering): Released all slaves
[ 1322.427405][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15344'.
[ 1322.444008][ T5639] team7: entered promiscuous mode
[ 1322.446572][ T5639] team7: entered allmulticast mode
[ 1322.448958][ T5639] 8021q: adding VLAN 0 to HW filter on device team7
[ 1322.452961][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15344'.
[ 1322.486298][ T5639] team8: entered promiscuous mode
[ 1322.488981][ T5639] team8: entered allmulticast mode
[ 1322.492190][ T5639] 8021q: adding VLAN 0 to HW filter on device team8
[ 1322.506885][ T5636] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1322.552041][ T5652] validate_nla: 9 callbacks suppressed
[ 1322.552057][ T5652] netlink: 'syz.1.15347': attribute type 2 has an invalid length.
[ 1322.603394][ T5666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15349'.
[ 1322.664464][ T5674] bridge212: the hash_elasticity option has been deprecated and is always 16
[ 1322.682667][ T5675] bridge213: the hash_elasticity option has been deprecated and is always 16
[ 1322.688047][ T5678] netlink: 'syz.2.15350': attribute type 2 has an invalid length.
[ 1322.725010][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15352'.
[ 1322.801271][ T5688] netlink: 'syz.2.15354': attribute type 10 has an invalid length.
[ 1322.809987][ T5687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15355'.
[ 1322.820968][ T5687] netlink: 47 bytes leftover after parsing attributes in process `syz.1.15355'.
[ 1322.831179][ T5687] netlink: 'syz.1.15355': attribute type 6 has an invalid length.
[ 1322.835197][ T5687] netlink: 'syz.1.15355': attribute type 6 has an invalid length.
[ 1322.840091][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15355'.
[ 1322.891512][ T5696] team0: entered allmulticast mode
[ 1322.898421][ T5696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1322.932373][ T5698] batman_adv: batadv0: Interface deactivated: macvlan32
[ 1322.940602][ T5698] batman_adv: batadv0: Removing interface: macvlan32
[ 1323.147930][ T5711] vlan0: entered promiscuous mode
[ 1323.150025][ T5711] bond458: entered promiscuous mode
[ 1323.196024][ T5716] bridge203: entered promiscuous mode
[ 1323.320666][ T5720] netlink: 'syz.2.15365': attribute type 1 has an invalid length.
[ 1323.333026][ T5720] netlink: 'syz.2.15365': attribute type 1 has an invalid length.
[ 1323.392914][ T5727] netlink: 'syz.1.15366': attribute type 12 has an invalid length.
[ 1323.421243][ T5729] netlink: 'syz.2.15367': attribute type 1 has an invalid length.
[ 1323.472611][ T5732] netlink: 'syz.1.15368': attribute type 18 has an invalid length.
[ 1323.518637][ T5735] 8021q: adding VLAN 0 to HW filter on device bond494
[ 1323.728533][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.728533][ T5753] Use struct sctp_assoc_value instead
[ 1323.733726][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.733726][ T5753] Use struct sctp_assoc_value instead
[ 1323.740317][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.740317][ T5753] Use struct sctp_assoc_value instead
[ 1323.745879][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.745879][ T5753] Use struct sctp_assoc_value instead
[ 1323.751288][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.751288][ T5753] Use struct sctp_assoc_value instead
[ 1323.757680][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.757680][ T5753] Use struct sctp_assoc_value instead
[ 1323.765358][ T5753] sctp: [Deprecated]: syz.2.15372 (pid 5753) Use of int in maxseg socket option.
[ 1323.765358][ T5753] Use struct sctp_assoc_value instead
[ 1323.956590][ T5772] geneve1: left promiscuous mode
[ 1323.962212][ T5772] mac80211_hwsim hwsim163 syzkaller0: left promiscuous mode
[ 1323.965721][ T5772] mac80211_hwsim hwsim163 syzkaller0: left allmulticast mode
[ 1323.972502][ T5772] vlan0: left promiscuous mode
[ 1323.980579][ T5772] bond458: left promiscuous mode
[ 1323.987496][ T5772] bond464: left promiscuous mode
[ 1323.990590][ T5772] bond471: left promiscuous mode
[ 1323.993027][ T5772] bond471: left allmulticast mode
[ 1323.997431][ T5772] vlan9: left allmulticast mode
[ 1323.999431][ T5772] bridge188: left allmulticast mode
[ 1324.001994][ T5772] bond474: left promiscuous mode
[ 1324.007862][ T5772] bond477: left promiscuous mode
[ 1324.010282][ T5772] bridge192: left promiscuous mode
[ 1324.016206][ T5772] bond478: left allmulticast mode
[ 1324.019578][ T5772] bond479: left promiscuous mode
[ 1324.028011][ T5772] bridge197: left allmulticast mode
[ 1324.032262][ T5772] bond483: left promiscuous mode
[ 1324.036634][ T5772] batadv_slave_1: left allmulticast mode
[ 1324.038829][ T5772] macvlan32: left allmulticast mode
[ 1324.041411][ T5774] netlink: 'syz.0.15376': attribute type 11 has an invalid length.
[ 1324.045207][ T5772] veth165: left allmulticast mode
[ 1324.045591][ T5772] gretap12: left promiscuous mode
[ 1324.052186][ T5772] bond489: left promiscuous mode
[ 1324.061303][ T5772] ipvlan0: left allmulticast mode
[ 1324.063436][ T5772] bond491: left allmulticast mode
[ 1324.070237][ T5772] bridge203: left promiscuous mode
[ 1324.078457][ T5472] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1324.082085][ T5472] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1324.085867][ T5472] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1324.088795][ T5472] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1324.092406][ T5472] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1324.099948][ T5472] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1324.107023][ T5472] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0
[ 1324.113177][ T5472] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 8472 - 0
[ 1324.123791][ T5772] wireguard: wg0: Could not create IPv4 socket
[ 1324.127047][ T5772] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1324.133698][ T6438] rB speed is unknown, defaulting to 1000
[ 1324.139449][   T13] batadv0: left promiscuous mode
[ 1324.148296][ T6438] sy2: Port: 1 Link ACTIVE
[ 1324.177853][ T5778] erspan0: left promiscuous mode
[ 1324.215671][ T5778] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1324.225200][ T5778] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1324.228994][ T5778] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1324.232729][ T5778] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1324.237021][ T5778] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1324.243535][ T5778] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1324.250642][ T5778] erspan0: entered promiscuous mode
[ 1324.253772][ T5778] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1324.260315][ T5778] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1324.265038][ T5778] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1324.268585][ T5778] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1324.272749][ T5778] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1324.291786][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1324.296522][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.299555][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1324.305267][ T6438] syz2: Port: 1 Link ACTIVE
[ 1324.313239][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1324.319326][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.327554][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1324.333690][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1324.338673][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.342323][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1324.358679][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1324.368047][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1324.373936][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1324.381549][ T5790] xt_TCPMSS: Only works on TCP SYN packets
[ 1324.681957][ T5827] veth237: entered allmulticast mode
[ 1324.688066][ T5827] bond542: (slave veth237): Enslaving as an active interface with an up link
[ 1324.693886][ T5831] syzkaller1: entered promiscuous mode
[ 1324.697403][ T5831] syzkaller1: entered allmulticast mode
[ 1325.465018][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1325.686555][ T5847] siw: device registration error -23
[ 1326.129983][ T5865] team0: left promiscuous mode
[ 1326.131581][ T5865] team0: left allmulticast mode
[ 1326.489524][ T5865] syzkaller1: left promiscuous mode
[ 1326.494046][ T5865] syzkaller1: left allmulticast mode
[ 1326.516344][ T5865] tipc: Resetting bearer <eth:syzkaller0>
[ 1326.521552][ T5865] syzkaller0: left promiscuous mode
[ 1326.524962][ T5865] syzkaller0: left allmulticast mode
[ 1326.535152][ T5865] bond486: left promiscuous mode
[ 1326.544264][ T5865] ipvlan11: left allmulticast mode
[ 1326.548642][ T5865] bond487: left allmulticast mode
[ 1326.551376][ T5865] vlan33: left allmulticast mode
[ 1326.553792][ T5865] bond0: left allmulticast mode
[ 1326.599143][ T5866] erspan0: left promiscuous mode
[ 1326.622050][ T5866] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1326.626915][ T5866] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1326.630499][ T5866] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1326.634491][ T5866] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1326.638566][ T5866] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1326.643126][ T5866] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1326.651868][ T5866] erspan0: entered promiscuous mode
[ 1326.656064][ T5866] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1326.660174][ T5866] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1326.663936][ T5866] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1326.670503][ T5866] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1326.676409][ T5866] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1326.980136][ T5882] x_tables: duplicate underflow at hook 2
[ 1327.320211][ T5876] 8021q: VLANs not supported on gre0
[ 1327.323514][ T5472] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.329314][ T5472] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1327.333207][ T5472] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1327.337895][ T5472] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.340995][ T5472] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1327.344903][ T5472] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1327.349282][   T10] syz2: Port: 1 Link DOWN
[ 1327.349342][ T5472] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.356116][ T5472] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1327.360264][ T5472] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1327.367695][ T5472] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.372054][ T5472] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1327.382465][ T5472] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1327.514851][ T5811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1327.682176][ T5896] validate_nla: 4 callbacks suppressed
[ 1327.682195][ T5896] netlink: 'syz.0.15399': attribute type 1 has an invalid length.
[ 1327.709871][ T5900] __nla_validate_parse: 17 callbacks suppressed
[ 1327.709888][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15401'.
[ 1327.733273][ T5896] bond493: entered promiscuous mode
[ 1327.738118][ T5896] 8021q: adding VLAN 0 to HW filter on device bond493
[ 1327.759651][ T5895] bond543: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1327.766044][ T5895] bond543 (unregistering): Released all slaves
[ 1327.796985][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15399'.
[ 1327.800756][ T5896] bond493: entered allmulticast mode
[ 1327.903694][ T5907] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 1327.948427][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15403'.
[ 1327.975274][ T5913] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1328.179437][ T5927] netlink: 'syz.2.15408': attribute type 1 has an invalid length.
[ 1328.197817][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15407'.
[ 1328.239057][ T5927] 8021q: adding VLAN 0 to HW filter on device bond496
[ 1328.245411][ T5927] bond495: (slave bond496): making interface the new active one
[ 1328.249945][ T5927] bond495: (slave bond496): Enslaving as an active interface with an up link
[ 1328.260211][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15408'.
[ 1328.267729][ T5927] 8021q: adding VLAN 0 to HW filter on device bond495
[ 1328.271424][ T5930] pim6reg1: entered promiscuous mode
[ 1328.273898][ T5930] pim6reg1: entered allmulticast mode
[ 1328.292237][ T5930] netlink: 'syz.1.15407': attribute type 1 has an invalid length.
[ 1328.298620][ T5930] netlink: 'syz.1.15407': attribute type 2 has an invalid length.
[ 1328.301963][ T5930] xfrm0: Caught tx_queue_len zero misconfig
[ 1328.431505][ T5941] x_tables: duplicate underflow at hook 3
[ 1328.836321][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15417'.
[ 1328.839782][ T5978] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1328.919801][ T5984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15420'.
[ 1328.983045][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15422'.
[ 1329.193960][ T6010] 8021q: VLANs not supported on gre0
[ 1329.236561][ T6019] netlink: 'syz.2.15429': attribute type 10 has an invalid length.
[ 1329.240322][ T6019] netlink: 'syz.2.15429': attribute type 10 has an invalid length.
[ 1329.260667][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15431'.
[ 1329.281510][ T6027] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1329.288433][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15431'.
[ 1329.293448][ T6027] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1329.304964][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.308071][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.310522][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.314497][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.316702][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.319155][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.321772][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.323971][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.326011][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.327991][ T6022] tc action pedit 'at' offset 20 out of bounds
[ 1329.329946][ T6022] 0: reclassify loop, rule prio 0, protocol 800
[ 1329.332469][    C0] tcf_pedit_act: 24 callbacks suppressed
[ 1329.332478][    C0] tc action pedit offset 146 out of bounds
[ 1329.339768][    C0] tc action pedit offset 146 out of bounds
[ 1329.341676][    C0] tc action pedit offset 146 out of bounds
[ 1329.343663][    C0] tc action pedit offset 146 out of bounds
[ 1329.345655][    C0] tc action pedit offset 146 out of bounds
[ 1329.347670][    C0] tc action pedit offset 146 out of bounds
[ 1329.349759][    C0] tc action pedit offset 146 out of bounds
[ 1329.351974][    C0] tc action pedit offset 146 out of bounds
[ 1329.354191][    C0] tc action pedit offset 146 out of bounds
[ 1329.356265][    C0] tc action pedit offset 146 out of bounds
[ 1329.358655][    C0] 0: reclassify loop, rule prio 0, protocol 800
[ 1329.456479][ T6051] netlink: 'syz.2.15437': attribute type 1 has an invalid length.
[ 1329.518115][ T6051] 8021q: adding VLAN 0 to HW filter on device bond498
[ 1329.529209][ T6051] bond497: (slave bond498): making interface the new active one
[ 1329.541298][ T6051] bond497: (slave bond498): Enslaving as an active interface with an up link
[ 1329.551273][ T6051] netlink: 'syz.2.15437': attribute type 5 has an invalid length.
[ 1329.556250][ T6051] 8021q: adding VLAN 0 to HW filter on device bond497
[ 1329.584746][    C0] 0: reclassify loop, rule prio 0, protocol 800
[ 1329.593175][ T6059] workqueue: Failed to create a rescuer kthread for wq "bond494": -EINTR
[ 1329.671159][ T6078] netlink: 'syz.0.15444': attribute type 4 has an invalid length.
[ 1329.781606][ T5472] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1329.790182][ T5472] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1329.797640][ T5472] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1329.807427][ T5472] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1330.016569][ T6104] erspan0: left promiscuous mode
[ 1330.031984][ T6104] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[ 1330.049230][T13536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.057500][T13536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.061207][T13536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.064337][T13536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.418431][ T6119] bridge0: entered promiscuous mode
[ 1330.567890][ T6131] syzkaller1: entered promiscuous mode
[ 1330.571438][ T6131] syzkaller1: entered allmulticast mode
[ 1330.631928][ T6135] netlink: 'syz.0.15460': attribute type 1 has an invalid length.
[ 1330.655300][ T6135] bond494: entered promiscuous mode
[ 1330.657624][ T6135] 8021q: adding VLAN 0 to HW filter on device bond494
[ 1330.754027][ T6142] bond495: Removing last ns target with arp_interval on
[ 1330.802034][ T6151] bond496: entered promiscuous mode
[ 1330.803876][ T6151] bond496: entered allmulticast mode
[ 1330.807971][ T6151] 8021q: adding VLAN 0 to HW filter on device bond496
[ 1330.872907][ T6155] 8021q: adding VLAN 0 to HW filter on device bond497
[ 1330.887895][ T6155] bond497: entered promiscuous mode
[ 1330.889705][ T6155] bond497: entered allmulticast mode
[ 1331.089941][ T6179] 8021q: VLANs not supported on gre0
[ 1331.145294][ T6179] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1331.151318][ T6179] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1331.182968][ T6187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1331.189682][ T6187] syzkaller0: entered promiscuous mode
[ 1331.191465][ T6187] syzkaller0: entered allmulticast mode
[ 1331.197434][ T6179] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1331.201896][ T6179] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1331.242849][ T6179] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1331.247921][ T6179] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1331.266228][ T6188] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1331.294859][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[ 1331.303669][ T6179] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1331.309382][ T6179] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1331.389190][ T5472] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1331.392654][ T5472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.410933][ T5779] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1331.415167][ T5779] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.432700][ T5779] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1331.437126][ T5779] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.452930][ T5779] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1331.457958][ T5779] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.101124][ T6193] tipc: Resetting bearer <eth:syzkaller0>
[ 1332.103237][ T6193] tipc: Resetting bearer <eth:syzkaller0>
[ 1332.164055][ T5779] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1332.169840][ T5779] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.176438][ T5779] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1332.184695][ T5779] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.189844][ T5779] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1332.203812][ T5779] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.207794][ T5779] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1332.217840][ T5779] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.297873][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[ 1332.328185][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[ 1332.400037][ T6207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1332.587176][ T6232] 8021q: adding VLAN 0 to HW filter on device bond498
[ 1332.601900][ T6232] bond482: (slave veth0_to_bond): Releasing active interface
[ 1332.618814][ T6232] bond498: (slave veth0_to_bond): making interface the new active one
[ 1332.623539][ T6232] bond498: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1332.633815][ T6232] veth0_to_bond: entered promiscuous mode
[ 1332.637869][ T6232] bond498: entered promiscuous mode
[ 1332.639795][ T6232] bond498: entered allmulticast mode
[ 1332.641707][ T6232] veth0_to_bond: entered allmulticast mode
[ 1332.665886][ T6232] macvlan27: entered promiscuous mode
[ 1332.668609][ T6232] macvlan27: entered allmulticast mode
[ 1332.672391][ T6232] 8021q: adding VLAN 0 to HW filter on device macvlan27
[ 1332.679042][ T6232] bond498: (slave macvlan27): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[ 1332.799524][ T6241] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20001
[ 1332.850193][ T6246] __nla_validate_parse: 23 callbacks suppressed
[ 1332.850210][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15489'.
[ 1332.935559][ T6259] geneve0: entered promiscuous mode
[ 1332.946389][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15490'.
[ 1332.955175][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15490'.
[ 1332.971148][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15492'.
[ 1332.978122][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15492'.
[ 1333.002561][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 1333.009031][ T6271] validate_nla: 6 callbacks suppressed
[ 1333.009041][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.020909][ T5472] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.023473][ T5472] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.026545][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 1333.029645][ T5472] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.032506][ T5472] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.035730][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.042648][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 1333.046704][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.054190][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 1333.054360][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'.
[ 1333.059026][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.062876][ T6272] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.074021][ T6276] netlink: 'syz.1.15495': attribute type 1 has an invalid length.
[ 1333.080378][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.100155][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.111182][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.117364][ T6276] vlan33: entered allmulticast mode
[ 1333.119195][ T6276] bond544: entered allmulticast mode
[ 1333.150935][ T6271] netlink: 'syz.0.15493': attribute type 30 has an invalid length.
[ 1333.320546][ T6283] 8021q: adding VLAN 0 to HW filter on device bond545
[ 1333.335040][ T6283] vlan33: entered allmulticast mode
[ 1333.336888][ T6283] bond545: entered allmulticast mode
[ 1333.489961][ T6292] bond499: (slave bridge182): making interface the new active one
[ 1333.496486][ T6292] bond499: (slave bridge182): Enslaving as an active interface with an up link
[ 1333.668050][ T6297] syzkaller0: entered promiscuous mode
[ 1333.669856][ T6297] syzkaller0: entered allmulticast mode
[ 1333.676052][ T6297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1333.680111][ T6296] tipc: Resetting bearer <eth:syzkaller0>
[ 1333.705659][ T6296] tipc: Disabling bearer <eth:syzkaller0>
[ 1334.067857][ T6330] rB speed is unknown, defaulting to 1000
[ 1334.075206][ T6330] sy2: Port: 1 Link DOWN
[ 1334.192205][ T6349] team0: left allmulticast mode
[ 1334.394810][ T6349] mac80211_hwsim hwsim168 wlan0: left promiscuous mode
[ 1334.400178][ T6349] mac80211_hwsim hwsim168 wlan0: left allmulticast mode
[ 1334.408529][ T6349] veth213: left allmulticast mode
[ 1334.413532][ T6349] bond494: left promiscuous mode
[ 1334.416685][ T6349] bond496: left promiscuous mode
[ 1334.418335][ T6349] bond496: left allmulticast mode
[ 1334.420209][ T6349] bridge194: left promiscuous mode
[ 1334.422417][ T6349] veth215: left allmulticast mode
[ 1334.425858][ T6349] bond505: left promiscuous mode
[ 1334.427717][ T6349] bond510: left promiscuous mode
[ 1334.429226][ T6349] bond510: left allmulticast mode
[ 1334.431230][ T6349] vlan36: left allmulticast mode
[ 1334.432897][ T6349] bridge201: left allmulticast mode
[ 1334.435656][ T6349] veth217: left allmulticast mode
[ 1334.437839][ T6349] veth221: left allmulticast mode
[ 1334.439692][ T6349] veth223: left allmulticast mode
[ 1334.441538][ T6349] veth225: left allmulticast mode
[ 1334.443525][ T6349] veth227: left allmulticast mode
[ 1334.446034][ T6349] bond517: left allmulticast mode
[ 1334.448163][ T6349] bond518: left promiscuous mode
[ 1334.450025][ T6349] bond519: left promiscuous mode
[ 1334.452123][ T6349] bond523: left promiscuous mode
[ 1334.462578][ T6349] veth229: left allmulticast mode
[ 1334.484075][ T6349] bond531: left promiscuous mode
[ 1334.506796][ T6349] bond535: left promiscuous mode
[ 1334.511505][ T6349] bond535: left allmulticast mode
[ 1334.550533][ T6349] bond539: left promiscuous mode
[ 1334.554801][ T6349] bond539: left allmulticast mode
[ 1334.559719][ T6349] bond540: left promiscuous mode
[ 1334.564936][ T6349] bond540: left allmulticast mode
[ 1334.569051][ T6349] veth0_to_bond: left allmulticast mode
[ 1334.571331][ T6349] bridge0: left promiscuous mode
[ 1334.572929][ T6349] bridge0: left allmulticast mode
[ 1334.578336][ T6349] team7: left promiscuous mode
[ 1334.581563][ T6349] team7: left allmulticast mode
[ 1334.588111][ T6349] team8: left promiscuous mode
[ 1334.592783][ T6349] team8: left allmulticast mode
[ 1334.602488][ T6349] veth237: left allmulticast mode
[ 1334.612631][ T6349] geneve0: left promiscuous mode
[ 1334.624183][ T6349] vlan33: left allmulticast mode
[ 1334.629075][ T6349] bond545: left allmulticast mode
[ 1334.648318][ T6355] 8021q: adding VLAN 0 to HW filter on device bond499
[ 1334.661422][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1334.672569][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.682746][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1334.696547][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.705240][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1334.708905][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.713887][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1334.717936][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.781367][ T6371] 8021q: adding VLAN 0 to HW filter on device bond500
[ 1335.001670][ T6398] bond501: Unable to set up delay as MII monitoring is disabled
[ 1335.019894][ T6398] bond501 (unregistering): Released all slaves
[ 1335.425249][ T6435] bond500: Setting coupled_control to off (0)
[ 1335.519738][ T6444] 8021q: adding VLAN 0 to HW filter on device bond501
[ 1335.588934][ T6449] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1335.628693][ T6449] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1335.680507][ T6449] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1335.729203][ T6449] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1335.794794][T18522] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1335.805746][T18522] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1335.815935][T18522] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1335.825696][T18522] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1336.708223][ T6494] veth0_to_bond: left promiscuous mode
[ 1336.717897][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1336.720897][ T6494] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1336.724835][ T6494] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[ 1336.733960][   T10] veth0_to_bond: entered promiscuous mode
[ 1336.747345][ T5779] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1336.750117][ T5779] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1336.753525][ T5779] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1336.757211][ T5779] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1336.762566][ T5779] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1336.766300][ T5779] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1336.769819][ T5779] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1336.773905][ T5779] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1336.895277][ T6500] ip_vti0: entered promiscuous mode
[ 1336.928595][ T6505] bond546: entered promiscuous mode
[ 1336.931008][ T6505] bond546: entered allmulticast mode
[ 1336.933621][ T6505] 8021q: adding VLAN 0 to HW filter on device bond546
[ 1337.037023][ T6512] team0: Caught tx_queue_len zero misconfig
[ 1337.268460][ T6531] 8021q: adding VLAN 0 to HW filter on device bond547
[ 1337.280378][ T6531] bond547: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[ 1337.286616][ T6531] bond547: entered allmulticast mode
[ 1337.455458][ T6551] bond0: entered promiscuous mode
[ 1337.457964][ T6551] bond0: left promiscuous mode
[ 1337.590979][ T6556] bond548: ARP target 9.0.0.0 is already present
[ 1337.596507][ T6556] bond548: option arp_ip_target: invalid value (9)
[ 1337.604765][ T6556] bond548 (unregistering): Released all slaves
[ 1337.656841][ T6562] 8021q: adding VLAN 0 to HW filter on device bond501
[ 1337.677789][ T6565] xt_TCPMSS: Only works on TCP SYN packets
[ 1337.693316][ T6562] bond501: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1337.720314][ T6562] macvlan33: entered promiscuous mode
[ 1337.730191][ T6562] macvlan33: entered allmulticast mode
[ 1337.732723][ T6562] bond501: entered promiscuous mode
[ 1337.735501][ T6562] 8021q: adding VLAN 0 to HW filter on device macvlan33
[ 1337.738981][ T6562] bond501: (slave macvlan33): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1337.748365][ T6562] bond501: left promiscuous mode
[ 1337.958191][ T6592] 8021q: adding VLAN 0 to HW filter on device bond548
[ 1337.964933][ T6596] __nla_validate_parse: 57 callbacks suppressed
[ 1337.964946][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15570'.
[ 1337.990250][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15573'.
[ 1337.995320][ T6597] 8021q: adding VLAN 0 to HW filter on device bond503
[ 1338.038168][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15572'.
[ 1338.045926][ T6597] bond503: entered promiscuous mode
[ 1338.051800][ T6597] bond503: entered allmulticast mode
[ 1338.100576][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15577'.
[ 1338.152129][ T6623] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1338.178521][ T6623] validate_nla: 49 callbacks suppressed
[ 1338.178531][ T6623] netlink: 'syz.1.15579': attribute type 1 has an invalid length.
[ 1338.183239][ T6623] netlink: 'syz.1.15579': attribute type 2 has an invalid length.
[ 1338.189260][ T6623] netlink: 'syz.1.15579': attribute type 1 has an invalid length.
[ 1338.193556][ T6627] netlink: 'syz.2.15580': attribute type 1 has an invalid length.
[ 1338.422361][ T6634] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15581'.
[ 1338.426068][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15581'.
[ 1338.514228][ T6653] netlink: 'syz.2.15586': attribute type 27 has an invalid length.
[ 1338.520638][ T6653] netlink: 'syz.2.15586': attribute type 4 has an invalid length.
[ 1338.523479][ T6653] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15586'.
[ 1338.531509][ T6653] bond483: entered allmulticast mode
[ 1338.542978][ T6657] netlink: 'syz.0.15587': attribute type 1 has an invalid length.
[ 1338.559101][ T6655] bond498: (slave veth0_to_bond): Releasing active interface
[ 1338.561803][ T6655] veth0_to_bond: left allmulticast mode
[ 1338.571738][ T6660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1338.610290][ T6657] 8021q: adding VLAN 0 to HW filter on device bond504
[ 1338.669286][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15590'.
[ 1338.673406][ T6671] netlink: 'syz.2.15590': attribute type 10 has an invalid length.
[ 1338.677382][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15590'.
[ 1338.912127][ T6708] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1338.920662][ T6698] netlink: 'syz.2.15597': attribute type 1 has an invalid length.
[ 1338.964051][ T6698] bond503: entered promiscuous mode
[ 1338.968397][ T6698] 8021q: adding VLAN 0 to HW filter on device bond503
[ 1338.975628][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15597'.
[ 1338.981896][ T6711] netlink: 'syz.0.15600': attribute type 4 has an invalid length.
[ 1339.115130][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1339.122067][ T6735] bond0: (slave wlan0): Opening slave failed
[ 1339.153343][ T6733] 8021q: adding VLAN 0 to HW filter on device bond504
[ 1339.191558][ T6733] bond504: (slave veth175): Enslaving as a backup interface with a down link
[ 1339.195154][ T6731] syzkaller0: entered promiscuous mode
[ 1339.198722][ T6731] syzkaller0: entered allmulticast mode
[ 1339.204249][ T6731] tipc: Resetting bearer <eth:syzkaller0>
[ 1339.465304][ T6764] veth177: entered allmulticast mode
[ 1339.486329][ T6760] 8021q: adding VLAN 0 to HW filter on device bond506
[ 1339.495015][ T6760] bond505: (slave bond506): making interface the new active one
[ 1339.499451][ T6760] bond505: (slave bond506): Enslaving as an active interface with an up link
[ 1339.533338][ T6760] 8021q: adding VLAN 0 to HW filter on device bond505
[ 1339.571896][ T6764] bond501: (slave veth0_to_bond): Releasing active interface
[ 1339.632630][ T6778] netlink: 'syz.1.15618': attribute type 11 has an invalid length.
[ 1339.643979][ T6778] netlink: 'syz.1.15618': attribute type 11 has an invalid length.
[ 1339.661870][ T6779] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[ 1339.738441][ T6787] macvlan0: entered promiscuous mode
[ 1339.819036][ T6793] bond507: entered promiscuous mode
[ 1339.821713][ T6793] 8021q: adding VLAN 0 to HW filter on device bond507
[ 1339.835049][ T6793] vlan34: entered allmulticast mode
[ 1339.836932][ T6793] bond507: entered allmulticast mode
[ 1339.857202][ T6793] bond507: (slave bridge184): making interface the new active one
[ 1339.861838][ T6793] bridge184: entered promiscuous mode
[ 1339.864164][ T6793] bridge184: entered allmulticast mode
[ 1339.868070][ T6793] bond507: (slave bridge184): Enslaving as an active interface with an up link
[ 1339.925843][ T6804] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[ 1339.930429][ T6804] Unsupported ieee802154 address type: 0
[ 1339.951530][ T6801] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1339.955497][ T6801] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.016962][ T6801] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1340.022338][ T6801] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.071035][ T6815] bond508: entered promiscuous mode
[ 1340.073286][ T6815] bond508: entered allmulticast mode
[ 1340.077031][ T6815] 8021q: adding VLAN 0 to HW filter on device bond508
[ 1340.083760][ T6801] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1340.090830][ T6801] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.160462][ T6801] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1340.166663][ T6801] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.251441][T13536] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.258312][T13536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.277817][T13536] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.281630][T13536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.299402][T13536] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.302521][T13536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.362516][T18522] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.365870][T18522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.413817][ T6823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1340.418851][ T6823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1340.475295][ T6829] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[ 1340.761554][ T6850] bridge0: entered allmulticast mode
[ 1341.110378][ T6882] bond549: entered promiscuous mode
[ 1341.112420][ T6882] 8021q: adding VLAN 0 to HW filter on device bond549
[ 1341.190896][ T6882] bond549 (unregistering): Released all slaves
[ 1341.448670][ T6908] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1341.465540][ T6910] gre0: entered promiscuous mode
[ 1341.469429][ T6910] gre0: entered allmulticast mode
[ 1341.472753][ T6910] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1341.509667][ T6908] bond505: entered promiscuous mode
[ 1341.511622][ T6908] 8021q: adding VLAN 0 to HW filter on device bond505
[ 1341.539857][ T6908] bond505: entered allmulticast mode
[ 1341.547611][ T6915] bond509: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1341.559872][ T6915] bond509: (slave team0): Enslaving as an active interface with an up link
[ 1341.564728][ T6915] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1341.595612][ T6908] bond505: (slave bridge208): making interface the new active one
[ 1341.598514][ T6908] bridge208: entered promiscuous mode
[ 1341.601735][ T6908] bridge208: entered allmulticast mode
[ 1341.606586][ T6908] bond505: (slave bridge208): Enslaving as an active interface with an up link
[ 1341.702375][ T6927] xt_TCPMSS: Only works on TCP SYN packets
[ 1341.884179][ T6948] xt_ipcomp: unknown flags 1D
[ 1342.052316][ T6959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1342.056887][ T6961] batadv_slave_1: entered promiscuous mode
[ 1342.056894][ T6959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1342.103712][ T6961] 8021q: adding VLAN 0 to HW filter on device bond507
[ 1342.110852][ T6961] bond506: (slave bond507): making interface the new active one
[ 1342.114767][ T6961] bond506: (slave bond507): Enslaving as an active interface with an up link
[ 1342.241217][ T6966] tipc: Resetting bearer <eth:syzkaller0>
[ 1342.243778][ T6966] tipc: Resetting bearer <eth:syzkaller0>
[ 1342.362673][ T6961] 8021q: adding VLAN 0 to HW filter on device bond506
[ 1342.396813][ T6961] batadv_slave_1: left promiscuous mode
[ 1342.462506][ T6977] xt_TCPMSS: Only works on TCP SYN packets
[ 1342.743561][ T6992] bond549: entered promiscuous mode
[ 1342.822497][ T6992] bond540: (slave veth0_to_bond): Releasing active interface
[ 1342.963422][ T6992] bond528: (slave veth229): Releasing backup interface
[ 1342.972239][ T6992] bond529: (slave bridge209): Releasing backup interface
[ 1342.978977][ T6992] bond536: (slave veth233): Releasing active interface
[ 1342.981199][ T6992] bond536: (slave veth233): the permanent HWaddr of slave - ca:3e:e7:69:df:72 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1342.986802][ T6992] batadv14: entered promiscuous mode
[ 1342.990156][ T6992] bond536: (slave batadv14): Releasing active interface
[ 1342.992340][ T6992] batadv14: left promiscuous mode
[ 1342.995727][ T6992] bond538: (slave veth235): Releasing active interface
[ 1342.998077][ T6992] bond538: (slave veth235): the permanent HWaddr of slave - da:83:a0:96:2e:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1343.003511][ T6992] batadv0: entered promiscuous mode
[ 1343.007429][ T6992] bond538: (slave batadv0): Releasing active interface
[ 1343.009769][ T6992] batadv0: left promiscuous mode
[ 1343.013535][ T6992] bond542: (slave veth237): Releasing backup interface
[ 1343.045836][ T6989] bridge209: entered promiscuous mode
[ 1343.048002][ T6989] bridge209: entered allmulticast mode
[ 1343.063333][T18522] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1343.067401][T18522] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.070963][T18522] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1343.075288][T18522] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.098623][ T7002] bond511: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1343.103265][ T7002] bond511 (unregistering): Released all slaves
[ 1343.125697][T18522] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1343.133302][T18522] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.142724][T18522] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1343.160419][T18522] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.179178][ T6990] bond549: left promiscuous mode
[ 1343.255307][ T7013] x_tables: duplicate underflow at hook 2
[ 1343.258078][ T7010] __nla_validate_parse: 34 callbacks suppressed
[ 1343.258088][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15674'.
[ 1343.270837][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15674'.
[ 1343.419203][ T7031] netlink: 196 bytes leftover after parsing attributes in process `syz.2.15680'.
[ 1343.421410][ T7029] veth0_to_bond: left promiscuous mode
[ 1343.437550][ T7029] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1343.441854][ T7029] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1343.449179][ T7029] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[ 1343.457742][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15679'.
[ 1343.471010][T18522] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.474310][T18522] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.477931][ T7033] xt_hashlimit: size too large, truncated to 1048576
[ 1343.481896][T18522] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.485437][T18522] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.508423][T18522] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.516102][T18522] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.527085][T18522] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.537249][T18522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.547235][ T7037] netlink: 'syz.2.15680': attribute type 11 has an invalid length.
[ 1343.554972][ T7037] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15680'.
[ 1343.572918][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15679'.
[ 1343.584184][ T7032] netlink: 19 bytes leftover after parsing attributes in process `syz.1.15679'.
[ 1343.587679][ T7032] netlink: 19 bytes leftover after parsing attributes in process `syz.1.15679'.
[ 1343.660780][ T7042] validate_nla: 17 callbacks suppressed
[ 1343.660792][ T7042] netlink: 'syz.1.15682': attribute type 10 has an invalid length.
[ 1343.665328][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15682'.
[ 1344.115846][ T5779] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1344.120440][ T5779] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1344.123202][ T5779] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1344.126428][ T5779] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1344.129734][ T5779] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1344.133003][ T5779] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1344.136574][ T5779] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1344.139130][ T5779] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1344.216687][ T7059] netlink: 'syz.0.15686': attribute type 12 has an invalid length.
[ 1344.323881][ T7065] netlink: 'syz.2.15687': attribute type 1 has an invalid length.
[ 1344.359036][ T7065] syzkaller1: entered promiscuous mode
[ 1344.361399][ T7065] syzkaller1: entered allmulticast mode
[ 1344.374313][ T7065] bond508: (slave bridge209): making interface the new active one
[ 1344.377777][ T7065] bond508: (slave bridge209): Enslaving as an active interface with an up link
[ 1344.568924][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15690'.
[ 1344.937729][ T7129] netlink: 'syz.0.15701': attribute type 1 has an invalid length.
[ 1344.940409][ T7129] netlink: 'syz.0.15701': attribute type 1 has an invalid length.
[ 1344.943222][ T7129] netlink: 'syz.0.15701': attribute type 1 has an invalid length.
[ 1344.946900][ T7129] netlink: 'syz.0.15701': attribute type 1 has an invalid length.
[ 1344.949731][ T7129] netlink: 'syz.0.15701': attribute type 1 has an invalid length.
[ 1345.133867][ T7148] bond511: entered promiscuous mode
[ 1345.186354][ T7153] netlink: 'syz.0.15709': attribute type 11 has an invalid length.
[ 1345.319343][ T7162] netlink: 'syz.0.15712': attribute type 1 has an invalid length.
[ 1345.349447][ T7162] 8021q: adding VLAN 0 to HW filter on device bond512
[ 1345.393279][ T7167] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1345.396926][ T7167] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1345.804975][ T7194] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1345.998425][ T7210] netlink: 'syz.0.15721': attribute type 4 has an invalid length.
[ 1346.010739][ T7202] 8021q: VLANs not supported on gre0
[ 1346.242170][ T7230] sysfs: cannot create duplicate filename '/class/ieee80211/1^!'
[ 1346.244968][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.0.15729 Not tainted syzkaller #0 PREEMPT(full) 
[ 1346.244979][ T7230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1346.244984][ T7230] Call Trace:
[ 1346.244989][ T7230]  <TASK>
[ 1346.244993][ T7230]  dump_stack_lvl+0xe8/0x150
[ 1346.245007][ T7230]  sysfs_warn_dup+0x8e/0xa0
[ 1346.245021][ T7230]  sysfs_do_create_link_sd+0xc0/0x110
[ 1346.245031][ T7230]  device_add_class_symlinks+0x1cf/0x240
[ 1346.245045][ T7230]  device_add+0x467/0xb80
[ 1346.245079][ T7230]  wiphy_register+0x1fc8/0x2ff0
[ 1346.245097][ T7230]  ? __pfx_wiphy_register+0x10/0x10
[ 1346.245106][ T7230]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1346.245118][ T7230]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1346.245132][ T7230]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1346.245144][ T7230]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1346.245160][ T7230]  ? ieee80211_register_hw+0x1a11/0x4a50
[ 1346.245184][ T7230]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1346.245195][ T7230]  ? __asan_memset+0x22/0x50
[ 1346.245206][ T7230]  ? __hrtimer_setup+0x1b7/0x260
[ 1346.245216][ T7230]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1346.245227][ T7230]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1346.245248][ T7230]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1346.245256][ T7230]  ? kstrndup+0xbd/0x160
[ 1346.245267][ T7230]  ? kstrndup+0xbd/0x160
[ 1346.245275][ T7230]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1346.245290][ T7230]  genl_family_rcv_msg_doit+0x233/0x340
[ 1346.245301][ T7230]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1346.245315][ T7230]  ? bpf_lsm_capable+0x9/0x20
[ 1346.245322][ T7230]  ? security_capable+0x7e/0x2c0
[ 1346.245335][ T7230]  genl_rcv_msg+0x614/0x7a0
[ 1346.245345][ T7230]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1346.245353][ T7230]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1346.245367][ T7230]  netlink_rcv_skb+0x226/0x4a0
[ 1346.245378][ T7230]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1346.245386][ T7230]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1346.245403][ T7230]  ? down_read+0x2be/0x330
[ 1346.245414][ T7230]  genl_rcv+0x28/0x40
[ 1346.245421][ T7230]  netlink_unicast+0x7bb/0x940
[ 1346.245435][ T7230]  netlink_sendmsg+0x813/0xb40
[ 1346.245449][ T7230]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1346.245461][ T7230]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1346.245474][ T7230]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1346.245483][ T7230]  sock_sendmsg_nosec+0x13a/0x180
[ 1346.245492][ T7230]  ____sys_sendmsg+0x54e/0x850
[ 1346.245504][ T7230]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1346.245518][ T7230]  ? import_iovec+0x73/0xa0
[ 1346.245529][ T7230]  ___sys_sendmsg+0x2a5/0x360
[ 1346.245538][ T7230]  ? __lock_acquire+0x683/0x2cf0
[ 1346.245548][ T7230]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1346.245559][ T7230]  ? futex_wake+0x51b/0x5f0
[ 1346.245582][ T7230]  ? __fget_files+0x2a/0x420
[ 1346.245589][ T7230]  ? __fget_files+0x3a2/0x420
[ 1346.245600][ T7230]  __x64_sys_sendmsg+0x1b1/0x290
[ 1346.245612][ T7230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1346.245629][ T7230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1346.245638][ T7230]  do_syscall_64+0x174/0x580
[ 1346.245646][ T7230]  ? trace_irq_disable+0x3b/0x140
[ 1346.245660][ T7230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1346.245667][ T7230] RIP: 0033:0x7fc2c3d9ce59
[ 1346.245682][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1346.245689][ T7230] RSP: 002b:00007fc2c4c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1346.245699][ T7230] RAX: ffffffffffffffda RBX: 00007fc2c4015fa0 RCX: 00007fc2c3d9ce59
[ 1346.245705][ T7230] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[ 1346.245711][ T7230] RBP: 00007fc2c3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1346.245715][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1346.245720][ T7230] R13: 00007fc2c4016038 R14: 00007fc2c4015fa0 R15: 00007ffd941d2ba8
[ 1346.245734][ T7230]  </TASK>
[ 1346.546597][ T7251] bond509: entered promiscuous mode
[ 1346.548600][ T7251] 8021q: adding VLAN 0 to HW filter on device bond509
[ 1346.935610][ T7283] bond513: Removing last arp target with arp_interval on
[ 1347.081631][ T7301] erspan0: entered promiscuous mode
[ 1347.083365][ T7301] erspan0: entered allmulticast mode
[ 1347.117638][ T7304] workqueue: Failed to create a rescuer kthread for wq "bond514": -EINTR
[ 1347.167133][ T7311] 8021q: adding VLAN 0 to HW filter on device bond514
[ 1347.182680][ T7311] veth0_to_bond: left promiscuous mode
[ 1347.185682][ T7311] bond514: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1347.213826][ T7311] macvlan27: entered promiscuous mode
[ 1347.215855][ T7311] macvlan27: entered allmulticast mode
[ 1347.218013][ T7311] bond514: entered promiscuous mode
[ 1347.219840][ T7311] veth0_to_bond: entered promiscuous mode
[ 1347.222409][ T7311] 8021q: adding VLAN 0 to HW filter on device macvlan27
[ 1347.226522][ T7311] bond514: left promiscuous mode
[ 1347.228222][ T7311] veth0_to_bond: left promiscuous mode
[ 1358.272070][ T7350] validate_nla: 7 callbacks suppressed
[ 1358.272080][ T7350] netlink: 'syz.0.15755': attribute type 1 has an invalid length.
[ 1358.313343][ T7350] bond515: (slave bridge187): making interface the new active one
[ 1358.317942][ T7350] bond515: (slave bridge187): Enslaving as an active interface with an up link
[ 1358.326629][ T7350] team0: entered promiscuous mode
[ 1358.328340][ T7350] team0: entered allmulticast mode
[ 1358.337648][ T7350] bond509: (slave team0): Releasing backup interface
[ 1358.341127][ T7350] bond509: (slave team0): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1358.346072][ T7350] bond515: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1358.420705][ T7359] wireguard: wg0: Could not create IPv4 socket
[ 1358.426898][ T7359] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1358.438330][   T24] rB speed is unknown, defaulting to 1000
[ 1358.446683][   T24] sy2: Port: 1 Link ACTIVE
[ 1358.481424][ T7369] netlink: 'syz.0.15760': attribute type 1 has an invalid length.
[ 1358.521231][ T7369] 8021q: adding VLAN 0 to HW filter on device bond516
[ 1358.552696][ T7369] bond516: (slave veth207): Enslaving as an active interface with a down link
[ 1358.590290][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv21
[ 1358.593802][ T7369] bond516: (slave batadv21): making interface the new active one
[ 1358.597624][ T7369] batadv21: entered promiscuous mode
[ 1358.599582][ T7369] bond516: (slave batadv21): Enslaving as an active interface with an up link
[ 1358.630039][ T7369] bond516: (slave veth209): Enslaving as an active interface with a down link
[ 1358.800348][ T7388] pim6reg: entered allmulticast mode
[ 1358.803268][ T7388] pim6reg: left allmulticast mode
[ 1358.860309][ T7390] __nla_validate_parse: 28 callbacks suppressed
[ 1358.860324][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15766'.
[ 1358.867238][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15766'.
[ 1358.870904][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15766'.
[ 1358.875760][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15766'.
[ 1358.880630][ T7390] netlink: 'syz.0.15766': attribute type 6 has an invalid length.
[ 1358.888816][ T7390] 8021q: VLANs not supported on ip6_vti0
[ 1358.926665][ T7396] netlink: 'syz.1.15768': attribute type 4 has an invalid length.
[ 1358.931184][ T7396] netlink: 'syz.1.15768': attribute type 4 has an invalid length.
[ 1359.046791][ T7404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15772'.
[ 1359.151489][ T7409] netlink: 'syz.1.15773': attribute type 11 has an invalid length.
[ 1359.167265][ T7409] netlink: 'syz.1.15773': attribute type 11 has an invalid length.
[ 1359.241109][ T7412] xfrm0 speed is unknown, defaulting to 1000
[ 1359.312859][ T7415] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1359.407377][ T7420] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15776'.
[ 1359.447241][ T7413] netlink: 'syz.1.15774': attribute type 4 has an invalid length.
[ 1359.500159][ T7412] rB speed is unknown, defaulting to 1000
[ 1359.572659][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15778'.
[ 1359.734193][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15782'.
[ 1359.814248][ T7448] netlink: 'syz.1.15784': attribute type 1 has an invalid length.
[ 1359.818110][ T7450] Cannot find del_set index 14804 as target
[ 1359.873217][ T7448] 8021q: adding VLAN 0 to HW filter on device bond550
[ 1359.938435][ T7459] veth243: entered allmulticast mode
[ 1359.961088][ T7459] bond550: (slave veth243): Enslaving as an active interface with an up link
[ 1359.994706][ T7448] bond550 (unregistering): (slave veth243): Releasing backup interface
[ 1360.003166][ T7448] bond550 (unregistering): Released all slaves
[ 1360.036495][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15788'.
[ 1360.046808][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15788'.
[ 1360.195943][ T7478] team0: left promiscuous mode
[ 1360.205086][ T7478] gre0: left promiscuous mode
[ 1360.210137][ T7478] ip_vti0: left promiscuous mode
[ 1360.233573][ T7478] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[ 1360.256334][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.260230][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.277086][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.280553][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1360.287441][ T7477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1360.318189][ T7480] netlink: 'syz.1.15793': attribute type 4 has an invalid length.
[ 1360.328676][ T7480] netlink: 'syz.1.15793': attribute type 4 has an invalid length.
[ 1360.422588][ T7489] netlink: 'syz.1.15795': attribute type 11 has an invalid length.
[ 1360.432065][ T7489] netlink: 'syz.1.15795': attribute type 4 has an invalid length.
[ 1360.920615][ T7536] 8021q: adding VLAN 0 to HW filter on device bond550
[ 1360.952196][ T7536] bond550: (slave veth245): Enslaving as an active interface with a down link
[ 1361.053971][ T7541] bond550: entered allmulticast mode
[ 1361.215069][ T7545] 8021q: adding VLAN 0 to HW filter on device bond511
[ 1361.244143][ T7545] bond511 (unregistering): Released all slaves
[ 1361.255722][ T7548] syzkaller0: left promiscuous mode
[ 1361.258035][ T7548] syzkaller0: left allmulticast mode
[ 1361.260489][ T7548] tipc: Resetting bearer <eth:syzkaller0>
[ 1361.265558][ T7548] tcf_pedit_act: 7 callbacks suppressed
[ 1361.265571][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.272978][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.275454][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.277896][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.280384][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.282818][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.285361][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.287822][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.290246][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.292825][ T7548] tc action pedit 'at' offset 20 out of bounds
[ 1361.295438][ T7548] 0: reclassify loop, rule prio 0, protocol 800
[ 1361.527885][ T7552] tipc: Resetting bearer <eth:syzkaller0>
[ 1361.586435][ T7554] syzkaller0: entered promiscuous mode
[ 1361.590011][ T7554] syzkaller0: entered allmulticast mode
[ 1361.592047][ T7554] tipc: Resetting bearer <eth:syzkaller0>
[ 1361.700821][ T7564] 8021q: adding VLAN 0 to HW filter on device bond517
[ 1361.726365][ T7564] macvlan27: entered promiscuous mode
[ 1361.733461][ T7564] macvlan27: entered allmulticast mode
[ 1361.736133][ T7564] bond517: entered promiscuous mode
[ 1361.738634][ T7564] 8021q: adding VLAN 0 to HW filter on device macvlan27
[ 1361.745917][ T7564] bond517: left promiscuous mode
[ 1361.923227][ T7575] 8021q: adding VLAN 0 to HW filter on device bond518
[ 1361.983263][ T7586] sctp: [Deprecated]: syz.2.15816 (pid 7586) Use of int in max_burst socket option.
[ 1361.983263][ T7586] Use struct sctp_assoc_value instead
[ 1362.008722][ T7588] sctp: [Deprecated]: syz.0.15817 (pid 7588) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1362.008722][ T7588] Use struct sctp_sack_info instead
[ 1362.172026][ T7584] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1362.175722][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1362.198136][ T7584] No such timeout policy "syz1"
[ 1362.200687][T18522] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.204562][T18522] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.210554][T18522] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.212693][ T7584] netlink: zone id is out of range
[ 1362.214025][T18522] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.217139][ T7584] netlink: zone id is out of range
[ 1362.221076][ T7584] netlink: zone id is out of range
[ 1362.222763][ T7584] netlink: zone id is out of range
[ 1362.224574][ T7584] netlink: zone id is out of range
[ 1362.226399][ T7584] netlink: zone id is out of range
[ 1362.228132][ T7584] netlink: zone id is out of range
[ 1362.230322][T18522] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.236884][T18522] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.265629][T18522] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1362.270000][T18522] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.291012][ T7599] pim6reg1: entered promiscuous mode
[ 1362.303475][ T7599] pim6reg1: entered allmulticast mode
[ 1362.646203][ T7632] bond0: (slave ip6tnl0): refused to change device type
[ 1362.684680][ T7636] syzkaller0: entered allmulticast mode
[ 1362.784076][ T7640] sysfs: cannot create duplicate filename '/class/ieee80211/1^!'
[ 1362.794608][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.1.15834 Not tainted syzkaller #0 PREEMPT(full) 
[ 1362.794629][ T7640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1362.794638][ T7640] Call Trace:
[ 1362.794646][ T7640]  <TASK>
[ 1362.794674][ T7640]  dump_stack_lvl+0xe8/0x150
[ 1362.794696][ T7640]  sysfs_warn_dup+0x8e/0xa0
[ 1362.794719][ T7640]  sysfs_do_create_link_sd+0xc0/0x110
[ 1362.794736][ T7640]  device_add_class_symlinks+0x1cf/0x240
[ 1362.794759][ T7640]  device_add+0x467/0xb80
[ 1362.794805][ T7640]  wiphy_register+0x1fc8/0x2ff0
[ 1362.794835][ T7640]  ? __pfx_wiphy_register+0x10/0x10
[ 1362.794852][ T7640]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1362.794871][ T7640]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1362.794897][ T7640]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1362.794917][ T7640]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1362.794945][ T7640]  ? ieee80211_register_hw+0x1a11/0x4a50
[ 1362.794982][ T7640]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1362.795002][ T7640]  ? __asan_memset+0x22/0x50
[ 1362.795021][ T7640]  ? __hrtimer_setup+0x1b7/0x260
[ 1362.795038][ T7640]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1362.795057][ T7640]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1362.795097][ T7640]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1362.795112][ T7640]  ? kstrndup+0xbd/0x160
[ 1362.795131][ T7640]  ? kstrndup+0xbd/0x160
[ 1362.795147][ T7640]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1362.795174][ T7640]  genl_family_rcv_msg_doit+0x233/0x340
[ 1362.795195][ T7640]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1362.795219][ T7640]  ? bpf_lsm_capable+0x9/0x20
[ 1362.795232][ T7640]  ? security_capable+0x7e/0x2c0
[ 1362.795255][ T7640]  genl_rcv_msg+0x614/0x7a0
[ 1362.795281][ T7640]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1362.795295][ T7640]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1362.795311][ T7640]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1362.795334][ T7640]  netlink_rcv_skb+0x226/0x4a0
[ 1362.795354][ T7640]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1362.795370][ T7640]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1362.795402][ T7640]  ? down_read+0x2be/0x330
[ 1362.795423][ T7640]  genl_rcv+0x28/0x40
[ 1362.795435][ T7640]  netlink_unicast+0x7bb/0x940
[ 1362.795480][ T7640]  netlink_sendmsg+0x813/0xb40
[ 1362.795509][ T7640]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1362.795531][ T7640]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1362.795555][ T7640]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1362.795572][ T7640]  sock_sendmsg_nosec+0x13a/0x180
[ 1362.795589][ T7640]  ____sys_sendmsg+0x54e/0x850
[ 1362.795612][ T7640]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1362.795637][ T7640]  ? import_iovec+0x73/0xa0
[ 1362.795657][ T7640]  ___sys_sendmsg+0x2a5/0x360
[ 1362.795674][ T7640]  ? __lock_acquire+0x683/0x2cf0
[ 1362.795691][ T7640]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1362.795712][ T7640]  ? futex_wait+0x2a2/0x390
[ 1362.795755][ T7640]  ? __fget_files+0x2a/0x420
[ 1362.795798][ T7640]  ? __fget_files+0x3a2/0x420
[ 1362.795818][ T7640]  __x64_sys_sendmsg+0x1b1/0x290
[ 1362.795835][ T7640]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1362.795865][ T7640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.795881][ T7640]  do_syscall_64+0x174/0x580
[ 1362.795897][ T7640]  ? trace_irq_disable+0x3b/0x140
[ 1362.795922][ T7640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1362.795935][ T7640] RIP: 0033:0x7f212a99ce59
[ 1362.795949][ T7640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1362.795961][ T7640] RSP: 002b:00007f2128bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1362.795976][ T7640] RAX: ffffffffffffffda RBX: 00007f212ac15fa0 RCX: 00007f212a99ce59
[ 1362.795985][ T7640] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[ 1362.795993][ T7640] RBP: 00007f212aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1362.796001][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1362.796009][ T7640] R13: 00007f212ac16038 R14: 00007f212ac15fa0 R15: 00007ffd3ebd2f78
[ 1362.796034][ T7640]  </TASK>
[ 1363.016144][ T7642] 8021q: adding VLAN 0 to HW filter on device bond511
[ 1363.247219][ T7658] macvtap18: entered allmulticast mode
[ 1363.268342][ T7658] macvtap19: entered allmulticast mode
[ 1363.295877][ T7658] bond512: (slave bridge213): making interface the new active one
[ 1363.304141][ T7658] bond512: (slave bridge213): Enslaving as an active interface with an up link
[ 1363.362919][ T7666] validate_nla: 9 callbacks suppressed
[ 1363.362933][ T7666] netlink: 'syz.1.15841': attribute type 1 has an invalid length.
[ 1363.407373][ T7666] 8021q: adding VLAN 0 to HW filter on device bond551
[ 1363.536589][ T7683] netlink: 'syz.0.15846': attribute type 1 has an invalid length.
[ 1363.562511][ T7683] 8021q: adding VLAN 0 to HW filter on device bond519
[ 1363.605060][ T7683] bond519: (slave veth211): Enslaving as an active interface with a down link
[ 1363.610431][ T7683] bond519: option ad_select: unable to set because the bond device is up
[ 1363.750674][ T7698] netlink: 'syz.2.15849': attribute type 1 has an invalid length.
[ 1363.768180][ T7698] 8021q: adding VLAN 0 to HW filter on device bond513
[ 1363.867716][ T7717] syzkaller1: left promiscuous mode
[ 1363.869813][ T7717] syzkaller1: left allmulticast mode
[ 1363.878358][ T7707] __nla_validate_parse: 36 callbacks suppressed
[ 1363.878370][ T7707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15850'.
[ 1364.001977][ T7725] netlink: 'syz.1.15855': attribute type 1 has an invalid length.
[ 1364.016417][ T7728] bond0: entered promiscuous mode
[ 1364.020026][ T7728] bond0: left promiscuous mode
[ 1364.069058][ T7727] bond0: entered promiscuous mode
[ 1364.079891][ T7727] bond0: left promiscuous mode
[ 1364.103419][ T7728] bond0: entered promiscuous mode
[ 1364.106575][ T7728] bond0: left promiscuous mode
[ 1364.130973][ T7725] bond8: (slave bridge218): Enslaving as an active interface with an up link
[ 1364.147406][ T7731] macvlan27: entered promiscuous mode
[ 1364.151301][ T7731] macvlan27: entered allmulticast mode
[ 1364.154941][ T7731] bond8: entered promiscuous mode
[ 1364.158575][ T7731] bridge218: entered promiscuous mode
[ 1364.161796][ T7731] 8021q: adding VLAN 0 to HW filter on device macvlan27
[ 1364.306918][ T7735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15857'.
[ 1364.982998][ T7731] bond8: left promiscuous mode
[ 1364.986127][ T7731] bridge218: left promiscuous mode
[ 1365.073067][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15858'.
[ 1365.083447][ T7738] netlink: 'syz.2.15858': attribute type 7 has an invalid length.
[ 1365.086513][ T7738] netlink: 'syz.2.15858': attribute type 8 has an invalid length.
[ 1365.089799][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15858'.
[ 1365.100065][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15860'.
[ 1365.105463][ T7744] net_ratelimit: 16 callbacks suppressed
[ 1365.105473][ T7744] openvswitch: netlink: IP tunnel dst address not specified
[ 1365.114311][ T7744] pim6reg1: entered promiscuous mode
[ 1365.120895][ T7744] pim6reg1: entered allmulticast mode
[ 1365.139023][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15862'.
[ 1365.160230][ T7752] ip_vti0: Master is either lo or non-ether device
[ 1365.198525][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15860'.
[ 1365.272348][ T7769] netlink: 'syz.2.15865': attribute type 10 has an invalid length.
[ 1365.312055][ T7773] netlink: 'syz.2.15867': attribute type 7 has an invalid length.
[ 1365.316027][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15867'.
[ 1365.321869][T18522] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.324616][T18522] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.327339][ T7773] netlink: 'syz.2.15867': attribute type 7 has an invalid length.
[ 1365.329900][T18522] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.332534][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15867'.
[ 1365.335388][ T7777] xt_hashlimit: size too large, truncated to 1048576
[ 1365.338307][T18522] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.548650][ T7797] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15872'.
[ 1365.675326][ T7805] 8021q: VLANs not supported on sit0
[ 1365.725033][ T7805] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[ 1365.774137][ T7805] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[ 1365.820388][ T7805] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[ 1365.881419][ T7805] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[ 1365.952946][T18522] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.966754][T18522] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.983570][T18522] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[ 1365.997926][T18522] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[ 1366.048585][ T7809] netlink: 'syz.2.15876': attribute type 1 has an invalid length.
[ 1366.072057][ T7809] 8021q: adding VLAN 0 to HW filter on device bond514
[ 1366.196399][ T7812] xt_time: unknown flags 0xf4
[ 1366.542579][ T7838] bond515 (unregistering): Released all slaves
[ 1366.562625][ T7841] bond0: (slave ip6tnl0): refused to change device type
[ 1366.601926][ T7842] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1366.649027][ T7844] vlan37: entered promiscuous mode
[ 1366.651398][ T7844] bridge0: entered promiscuous mode
[ 1366.718362][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.781963][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.858799][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.922666][ T7853] bridge214: entered allmulticast mode
[ 1366.945545][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.999222][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.025372][ T7861] bridge215: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1367.053489][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.106823][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.140417][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.181945][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.212492][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.258190][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.320997][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.374190][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.400085][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.442835][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.476908][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[ 1367.722586][ T7905] veth247: entered allmulticast mode
[ 1367.726499][ T7905] bond553: (slave veth247): Enslaving as an active interface with an up link
[ 1367.747273][ T7905] bond553 (unregistering): (slave veth247): Releasing backup interface
[ 1367.757770][ T7905] bond553 (unregistering): Released all slaves
[ 1367.878795][ T7927] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1367.883283][ T7925] bond483: left allmulticast mode
[ 1367.950922][ T7925] veth177: entered allmulticast mode
[ 1368.062510][ T7950] syzkaller0: Caught tx_queue_len zero misconfig
[ 1368.102532][ T7950] tipc: Resetting bearer <eth:syzkaller0>
[ 1368.146762][ T7955] rB: entered allmulticast mode
[ 1368.302778][ T7979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1368.386861][ T7983] bond553: (slave bridge220): making interface the new active one
[ 1368.391478][ T7983] bond553: (slave bridge220): Enslaving as an active interface with an up link
[ 1368.513641][ T8001] validate_nla: 13 callbacks suppressed
[ 1368.513651][ T8001] netlink: 'syz.1.15925': attribute type 1 has an invalid length.
[ 1368.538120][ T8001] 8021q: adding VLAN 0 to HW filter on device bond554
[ 1368.564062][ T8001] bond554: (slave veth249): Enslaving as an active interface with a down link
[ 1368.743043][ T8014] netlink: 'syz.1.15930': attribute type 13 has an invalid length.
[ 1368.940144][ T8029] __nla_validate_parse: 31 callbacks suppressed
[ 1368.940158][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15933'.
[ 1368.968267][ T8031] netlink: 'syz.2.15934': attribute type 1 has an invalid length.
[ 1368.972386][ T8033] netlink: 'syz.2.15934': attribute type 10 has an invalid length.
[ 1368.986734][ T8033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15934'.
[ 1369.018748][ T8031] 8021q: adding VLAN 0 to HW filter on device bond515
[ 1369.036888][ T8029] vlan36: entered promiscuous mode
[ 1369.084924][ T8043] xfrm0 speed is unknown, defaulting to 1000
[ 1369.219896][ T8043] rB speed is unknown, defaulting to 1000
[ 1369.336189][ T8058] rdma_rxe: rxe_newlink: failed to add xfrm0
[ 1369.341607][ T8064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1369.381873][ T8064] mac80211_hwsim hwsim163 syzkaller0: entered promiscuous mode
[ 1369.384235][ T8064] mac80211_hwsim hwsim163 syzkaller0: entered allmulticast mode
[ 1369.394812][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[ 1369.498127][ T8066] veth251: entered allmulticast mode
[ 1369.552914][ T8068] "syz.2.15940" (8068) uses obsolete ecb(arc4) skcipher
[ 1369.823227][ T8070] ipvlan15: entered promiscuous mode
[ 1369.903534][ T8080] netlink: 'syz.2.15944': attribute type 12 has an invalid length.
[ 1369.916353][ T4337] batadv21: left promiscuous mode
[ 1370.058378][ T8095] bond555: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1370.066717][ T8095] bond555 (unregistering): Released all slaves
[ 1370.202091][ T8109] sysfs: cannot create duplicate filename '/class/ieee80211/1^!'
[ 1370.220252][ T8109] CPU: 0 UID: 0 PID: 8109 Comm: syz.0.15950 Not tainted syzkaller #0 PREEMPT(full) 
[ 1370.220273][ T8109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1370.220282][ T8109] Call Trace:
[ 1370.220288][ T8109]  <TASK>
[ 1370.220295][ T8109]  dump_stack_lvl+0xe8/0x150
[ 1370.220319][ T8109]  sysfs_warn_dup+0x8e/0xa0
[ 1370.220343][ T8109]  sysfs_do_create_link_sd+0xc0/0x110
[ 1370.220359][ T8109]  device_add_class_symlinks+0x1cf/0x240
[ 1370.220383][ T8109]  device_add+0x467/0xb80
[ 1370.220406][ T8109]  wiphy_register+0x1fc8/0x2ff0
[ 1370.220436][ T8109]  ? __pfx_wiphy_register+0x10/0x10
[ 1370.220451][ T8109]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1370.220471][ T8109]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1370.220499][ T8109]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1370.220519][ T8109]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1370.220546][ T8109]  ? ieee80211_register_hw+0x1a11/0x4a50
[ 1370.220583][ T8109]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1370.220603][ T8109]  ? __asan_memset+0x22/0x50
[ 1370.220651][ T8109]  ? __hrtimer_setup+0x1b7/0x260
[ 1370.220670][ T8109]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1370.220692][ T8109]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1370.220733][ T8109]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1370.220747][ T8109]  ? kstrndup+0xbd/0x160
[ 1370.220765][ T8109]  ? kstrndup+0xbd/0x160
[ 1370.220781][ T8109]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1370.220810][ T8109]  genl_family_rcv_msg_doit+0x233/0x340
[ 1370.220831][ T8109]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1370.220856][ T8109]  ? bpf_lsm_capable+0x9/0x20
[ 1370.220868][ T8109]  ? security_capable+0x7e/0x2c0
[ 1370.220889][ T8109]  genl_rcv_msg+0x614/0x7a0
[ 1370.220909][ T8109]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1370.220921][ T8109]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1370.220935][ T8109]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1370.220956][ T8109]  netlink_rcv_skb+0x226/0x4a0
[ 1370.220973][ T8109]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1370.220987][ T8109]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1370.221015][ T8109]  ? down_read+0x2be/0x330
[ 1370.221034][ T8109]  genl_rcv+0x28/0x40
[ 1370.221046][ T8109]  netlink_unicast+0x7bb/0x940
[ 1370.221071][ T8109]  netlink_sendmsg+0x813/0xb40
[ 1370.221097][ T8109]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1370.221119][ T8109]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1370.221142][ T8109]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1370.221161][ T8109]  sock_sendmsg_nosec+0x13a/0x180
[ 1370.221178][ T8109]  ____sys_sendmsg+0x54e/0x850
[ 1370.221202][ T8109]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1370.221228][ T8109]  ? import_iovec+0x73/0xa0
[ 1370.221258][ T8109]  ___sys_sendmsg+0x2a5/0x360
[ 1370.221276][ T8109]  ? __lock_acquire+0x683/0x2cf0
[ 1370.221317][ T8109]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1370.221339][ T8109]  ? futex_wait+0x2a2/0x390
[ 1370.221382][ T8109]  ? __fget_files+0x2a/0x420
[ 1370.221395][ T8109]  ? __fget_files+0x3a2/0x420
[ 1370.221417][ T8109]  __x64_sys_sendmsg+0x1b1/0x290
[ 1370.221437][ T8109]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1370.221471][ T8109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.221486][ T8109]  do_syscall_64+0x174/0x580
[ 1370.221501][ T8109]  ? trace_irq_disable+0x3b/0x140
[ 1370.221525][ T8109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.221539][ T8109] RIP: 0033:0x7fc2c3d9ce59
[ 1370.221554][ T8109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1370.221565][ T8109] RSP: 002b:00007fc2c4c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1370.221581][ T8109] RAX: ffffffffffffffda RBX: 00007fc2c4015fa0 RCX: 00007fc2c3d9ce59
[ 1370.221590][ T8109] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[ 1370.221599][ T8109] RBP: 00007fc2c3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1370.221607][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1370.221615][ T8109] R13: 00007fc2c4016038 R14: 00007fc2c4015fa0 R15: 00007ffd941d2ba8
[ 1370.221667][ T8109]  </TASK>
[ 1370.237092][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15951'.
[ 1370.455974][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15953'.
[ 1370.459896][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15953'.
[ 1370.464019][ T8119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15953'.
[ 1370.474043][ T8120] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15953'.
[ 1370.502608][ T8126] netlink: 'syz.2.15955': attribute type 1 has an invalid length.
[ 1370.525596][ T8119] bond0: entered promiscuous mode
[ 1370.536086][ T8119] bond0: left promiscuous mode
[ 1370.551216][ T8120] bond0: entered promiscuous mode
[ 1370.555984][ T8120] bond0: left promiscuous mode
[ 1370.641920][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15957'.
[ 1370.674978][ T8140] netlink: 'syz.1.15959': attribute type 32 has an invalid length.
[ 1370.680484][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15959'.
[ 1370.697759][ T8140] bond555: option coupled_control: invalid value (64)
[ 1370.706159][ T8140] bond555 (unregistering): Released all slaves
[ 1370.733583][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15959'.
[ 1370.767009][ T8147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1370.803897][ T8147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[ 1370.856519][ T8153] netlink: 'syz.2.15963': attribute type 1 has an invalid length.
[ 1370.893909][ T8153] 8021q: adding VLAN 0 to HW filter on device bond516
[ 1371.081566][ T8153] tipc: Resetting bearer <eth:syzkaller0>
[ 1371.163032][T13822] rB speed is unknown, defaulting to 1000
[ 1371.241154][ T8175] bond521: Unable to set down delay as MII monitoring is disabled
[ 1371.245096][ T8175] bond521 (unregistering): Released all slaves
[ 1371.256310][ T8179] tc_dump_action: action bad kind
[ 1374.269397][ T8183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1374.272949][ T8201] __nla_validate_parse: 3 callbacks suppressed
[ 1374.272961][ T8201] netlink: 252 bytes leftover after parsing attributes in process `syz.1.15974'.
[ 1374.420249][ T8223] bond555: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1374.425712][ T8223] bond555 (unregistering): Released all slaves
[ 1374.778996][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15987'.
[ 1374.796405][ T8260] netlink: 'syz.2.15987': attribute type 1 has an invalid length.
[ 1374.806161][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15987'.
[ 1375.101354][ T8288] 8021q: VLANs not supported on gre0
[ 1375.123882][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15992'.
[ 1375.160150][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15994'.
[ 1375.166515][ T8294] 8021q: VLANs not supported on team0
[ 1375.341130][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15997'.
[ 1375.383674][ T8311] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15998'.
[ 1375.399893][ T8310] vlan36: entered allmulticast mode
[ 1375.404802][ T8310] bond0: entered allmulticast mode
[ 1375.407661][ T8303] netlink: 'syz.2.15997': attribute type 4 has an invalid length.
[ 1375.416920][T13822] rB speed is unknown, defaulting to 1000
[ 1375.418991][ T8303] netlink: 'syz.2.15997': attribute type 4 has an invalid length.
[ 1375.423959][T13822] sy2: Port: 1 Link DOWN
[ 1375.428741][T13822] rB speed is unknown, defaulting to 1000
[ 1375.432795][T13822] sy2: Port: 1 Link ACTIVE
[ 1375.439020][ T8313] mac80211_hwsim hwsim168 wlan0: entered promiscuous mode
[ 1375.442300][ T8313] mac80211_hwsim hwsim168 wlan0: entered allmulticast mode
[ 1375.513733][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16002'.
[ 1375.517975][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16002'.
[ 1375.522195][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16002'.
[ 1375.523093][ T8327] bond0: (slave wlan0): Opening slave failed
[ 1375.666788][ T8347] netlink: 'syz.0.16006': attribute type 1 has an invalid length.
[ 1375.707209][ T8347] 8021q: adding VLAN 0 to HW filter on device bond521
[ 1375.889375][ T8359] netlink: 'syz.2.16010': attribute type 1 has an invalid length.
[ 1375.903979][ T8359] bond517: entered promiscuous mode
[ 1375.908063][ T8359] bond517: entered allmulticast mode
[ 1375.910251][ T8359] 8021q: adding VLAN 0 to HW filter on device bond517
[ 1376.084163][ T8368] netlink: 'syz.2.16012': attribute type 9 has an invalid length.
[ 1376.151214][ T8368] netlink: 'syz.2.16012': attribute type 9 has an invalid length.
[ 1376.205079][ T8368] netlink: 'syz.2.16012': attribute type 9 has an invalid length.
[ 1376.265371][ T8368] netlink: 'syz.2.16012': attribute type 9 has an invalid length.
[ 1376.325456][ T8368] netlink: 'syz.2.16012': attribute type 9 has an invalid length.
[ 1376.368725][ T8370] xt_hashlimit: size too large, truncated to 1048576
[ 1376.617893][ T8379] vlan37: entered allmulticast mode
[ 1376.620237][ T8379] bond522: entered allmulticast mode
[ 1376.688464][ T8389] 8021q: adding VLAN 0 to HW filter on device bond555
[ 1376.806243][ T8389] tipc: Resetting bearer <eth:gre0>
[ 1376.932957][ T8397] bond523: entered promiscuous mode
[ 1377.017820][ T8398] bond514: (slave veth0_to_bond): Releasing backup interface
[ 1377.115237][ T8398] tipc: Resetting bearer <eth:syzkaller0>
[ 1377.128582][ T8398] bond466: (slave bridge173): Releasing backup interface
[ 1377.131702][ T8398] vlan30: left allmulticast mode
[ 1377.133287][ T8398] geneve0: left allmulticast mode
[ 1377.137632][ T8398] vlan30: left promiscuous mode
[ 1377.139467][ T8398] geneve0: left promiscuous mode
[ 1377.141493][ T8398] bridge0: port 1(vlan30) entered disabled state
[ 1377.144246][ T8398] bond489: left promiscuous mode
[ 1377.149056][ T8398] bond473: (slave veth199): Releasing active interface
[ 1377.151486][ T8398] bond473: (slave veth199): the permanent HWaddr of slave - 46:4c:84:f1:f2:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1377.157303][ T8398] batadv20: entered promiscuous mode
[ 1377.161583][ T8398] bond473: (slave batadv20): Releasing active interface
[ 1377.164785][ T8398] batadv20: left promiscuous mode
[ 1377.171889][ T8398] bond489: left allmulticast mode
[ 1377.177568][ T8398] bridge0: port 2(bond489) entered disabled state
[ 1377.182803][ T8398] bond490: (slave batadv0): Releasing active interface
[ 1377.448717][ T8398] bond499: (slave bridge182): Releasing active interface
[ 1377.473059][ T8398] bond505: (slave bond506): Releasing backup interface
[ 1377.490574][ T8398] bond507: (slave bridge184): Releasing backup interface
[ 1377.494852][ T8398] bridge184: left promiscuous mode
[ 1377.497236][ T8398] bridge184: left allmulticast mode
[ 1377.555818][ T8398] bond515: (slave bridge187): Releasing active interface
[ 1377.567134][ T8398] bond516: (slave veth207): Releasing active interface
[ 1377.569422][ T8398] bond516: (slave veth207): the permanent HWaddr of slave - ee:51:9c:ae:b5:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1377.576967][ T8398] batadv21: entered promiscuous mode
[ 1377.587272][ T8398] bond516: (slave batadv21): Releasing active interface
[ 1377.591719][ T8398] batadv21: left promiscuous mode
[ 1377.604187][ T8398] bond516: (slave veth209): Releasing active interface
[ 1377.645472][ T8398] bond519: (slave veth211): Releasing active interface
[ 1377.656682][ T8393] tunl0: Caught tx_queue_len zero misconfig
[ 1377.674307][ T8404] syzkaller1: entered promiscuous mode
[ 1377.676626][ T8404] syzkaller1: entered allmulticast mode
[ 1377.715856][ T4337] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.719231][ T4337] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.724136][ T4337] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.731470][ T4337] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.757130][ T8392] bond523: left promiscuous mode
[ 1377.800390][ T4337] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.803724][ T4337] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.811300][ T4337] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.815688][ T4337] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.970225][ T8426] xt_NFQUEUE: number of total queues is 0
[ 1378.026992][ T8427] bond524: option arp_all_targets: invalid value (3)
[ 1378.030605][ T8427] bond524 (unregistering): Released all slaves
[ 1378.060381][ T8426] workqueue: Failed to create a rescuer kthread for wq "bond524": -EINTR
[ 1378.194357][ T8453] bond0: mtu greater than device maximum
[ 1378.418594][ T8467] 8021q: adding VLAN 0 to HW filter on device bond524
[ 1378.446045][ T8467] bond524: (slave veth213): Enslaving as an active interface with a down link
[ 1378.482933][ T8471] bond556: entered promiscuous mode
[ 1378.486353][ T8471] 8021q: adding VLAN 0 to HW filter on device bond556
[ 1378.577642][ T8481] veth252: entered allmulticast mode
[ 1378.584857][ T8481] veth253: entered allmulticast mode
[ 1378.588884][ T8481] bond557: (slave veth253): Enslaving as an active interface with an up link
[ 1378.598938][ T8481] bond557 (unregistering): (slave veth253): Releasing backup interface
[ 1378.607396][ T8481] bond557 (unregistering): Released all slaves
[ 1378.680469][ T8488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1378.690758][ T8489] tipc: Resetting bearer <eth:syzkaller0>
[ 1378.839847][ T8511] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[ 1379.064240][ T8534] bond518 (unregistering): Released all slaves
[ 1379.085270][ T8543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1379.117451][ T8546] 8021q: adding VLAN 0 to HW filter on device bond518
[ 1379.124003][ T8546] vlan32: entered allmulticast mode
[ 1379.126166][ T8546] bond518: entered allmulticast mode
[ 1379.322709][ T8556] No such timeout policy "syz1"
[ 1379.326826][ T8556] netlink: zone id is out of range
[ 1379.328517][ T8556] netlink: zone id is out of range
[ 1379.330140][ T8556] netlink: zone id is out of range
[ 1379.331657][ T8556] netlink: zone id is out of range
[ 1379.333857][ T8556] netlink: zone id is out of range
[ 1379.337233][ T8556] netlink: zone id is out of range
[ 1379.339056][ T8556] netlink: zone id is out of range
[ 1379.340824][ T8556] netlink: zone id is out of range
[ 1379.342564][ T8556] netlink: zone id is out of range
[ 1379.344055][ T8565] syzkaller0: left promiscuous mode
[ 1379.347623][ T8565] syzkaller0: left allmulticast mode
[ 1379.353092][ T8565] tipc: Resetting bearer <eth:syzkaller0>
[ 1379.449341][ T8572] 8021q: adding VLAN 0 to HW filter on device bond526
[ 1379.474206][ T8572] bond526: entered promiscuous mode
[ 1379.478483][ T8572] bond526: entered allmulticast mode
[ 1379.655845][ T8600] macvlan0: entered promiscuous mode
[ 1379.657901][ T8600] macvlan0: entered allmulticast mode
[ 1379.659876][ T8600] __nla_validate_parse: 87 callbacks suppressed
[ 1379.659922][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16064'.
[ 1379.670007][ T8600] macvlan0 (unregistering): left promiscuous mode
[ 1379.672553][ T8600] macvlan0 (unregistering): left allmulticast mode
[ 1379.850017][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16070'.
[ 1379.911403][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16071'.
[ 1379.919752][ T8619] syzkaller0: entered promiscuous mode
[ 1379.921632][ T8619] syzkaller0: entered allmulticast mode
[ 1379.923591][ T8619] tipc: Resetting bearer <eth:syzkaller0>
[ 1380.047440][ T8632] validate_nla: 18 callbacks suppressed
[ 1380.047482][ T8632] netlink: 'syz.2.16073': attribute type 4 has an invalid length.
[ 1380.053076][ T8632] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16073'.
[ 1380.103845][ T8637] netlink: 'syz.2.16075': attribute type 1 has an invalid length.
[ 1380.149364][ T8637] bond520: (slave bridge217): making interface the new active one
[ 1380.155943][ T8637] bond520: (slave bridge217): Enslaving as an active interface with an up link
[ 1380.299684][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16079'.
[ 1380.301664][ T8657] syzkaller1: entered promiscuous mode
[ 1380.306183][ T8657] syzkaller1: entered allmulticast mode
[ 1380.325141][ T8652] block nbd15: server does not support multiple connections per device.
[ 1380.331290][ T8652] block nbd15: shutting down sockets
[ 1380.361846][ T8651] netlink: 'syz.2.16078': attribute type 9 has an invalid length.
[ 1380.411960][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16081'.
[ 1380.429536][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16081'.
[ 1380.462763][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16082'.
[ 1380.521399][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16084'.
[ 1380.536826][ T8678] netlink: 'syz.2.16084': attribute type 1 has an invalid length.
[ 1380.544910][ T8678] netlink: 756 bytes leftover after parsing attributes in process `syz.2.16084'.
[ 1380.571062][ T8684] netlink: 'syz.1.16087': attribute type 1 has an invalid length.
[ 1380.598519][ T8684] 8021q: adding VLAN 0 to HW filter on device bond557
[ 1380.609889][ T8684] bond557: entered allmulticast mode
[ 1380.676387][ T8699] mac80211_hwsim hwsim163 syzkaller0: left promiscuous mode
[ 1380.680296][ T8699] syzkaller1: left promiscuous mode
[ 1380.682754][ T8699] macvlan0: left promiscuous mode
[ 1380.687294][ T8699] bond503: left promiscuous mode
[ 1380.689950][ T8699] bond505: left promiscuous mode
[ 1380.691770][ T8699] bridge208: left promiscuous mode
[ 1380.695514][ T8699] bond509: left promiscuous mode
[ 1380.699023][ T8699] bond517: left promiscuous mode
[ 1380.889720][   T33] audit: type=1800 audit(1783438124.193:20): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16099" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=27184 res=0 errno=0
[ 1380.988921][ T8730] team9: entered promiscuous mode
[ 1380.991140][ T8741] netlink: 'syz.2.16106': attribute type 1 has an invalid length.
[ 1380.991799][ T8730] team9: entered allmulticast mode
[ 1380.996936][ T8730] 8021q: adding VLAN 0 to HW filter on device team9
[ 1381.013651][ T8741] 8021q: adding VLAN 0 to HW filter on device bond521
[ 1381.033969][ T8730] team10: entered promiscuous mode
[ 1381.035733][ T8730] team10: entered allmulticast mode
[ 1381.037515][ T8730] 8021q: adding VLAN 0 to HW filter on device team10
[ 1381.043854][ T8741] vlan33: entered allmulticast mode
[ 1381.046132][ T8741] bond521: entered allmulticast mode
[ 1381.378952][ T8778] bond527: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[ 1381.383995][ T8778] bond527: down delay (255) is not a multiple of miimon (100), value rounded to 200 ms
[ 1381.388486][ T8778] bond527: entered allmulticast mode
[ 1381.423026][ T8783] netlink: 'syz.0.16114': attribute type 1 has an invalid length.
[ 1381.461225][ T8783] 8021q: adding VLAN 0 to HW filter on device bond528
[ 1381.470973][ T8789] netlink: 'syz.2.16116': attribute type 1 has an invalid length.
[ 1381.484515][ T8783] bond528: (slave bridge191): making interface the new active one
[ 1381.487670][ T8783] bond528: (slave bridge191): Enslaving as an active interface with an up link
[ 1381.620687][ T8802] netlink: 'syz.0.16119': attribute type 1 has an invalid length.
[ 1381.652984][ T8802] bond529: entered promiscuous mode
[ 1381.656947][ T8802] 8021q: adding VLAN 0 to HW filter on device bond529
[ 1381.771255][ T8813] sysfs: cannot create duplicate filename '/class/ieee80211/1^!'
[ 1381.777493][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.16121 Not tainted syzkaller #0 PREEMPT(full) 
[ 1381.777514][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1381.777523][ T8813] Call Trace:
[ 1381.777529][ T8813]  <TASK>
[ 1381.777536][ T8813]  dump_stack_lvl+0xe8/0x150
[ 1381.777559][ T8813]  sysfs_warn_dup+0x8e/0xa0
[ 1381.777582][ T8813]  sysfs_do_create_link_sd+0xc0/0x110
[ 1381.777598][ T8813]  device_add_class_symlinks+0x1cf/0x240
[ 1381.777628][ T8813]  device_add+0x467/0xb80
[ 1381.777650][ T8813]  wiphy_register+0x1fc8/0x2ff0
[ 1381.777677][ T8813]  ? __pfx_wiphy_register+0x10/0x10
[ 1381.777692][ T8813]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1381.777711][ T8813]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1381.777736][ T8813]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1381.777755][ T8813]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1381.777784][ T8813]  ? ieee80211_register_hw+0x1a11/0x4a50
[ 1381.777821][ T8813]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1381.777841][ T8813]  ? __asan_memset+0x22/0x50
[ 1381.777861][ T8813]  ? __hrtimer_setup+0x1b7/0x260
[ 1381.777878][ T8813]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1381.777897][ T8813]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1381.777935][ T8813]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1381.777950][ T8813]  ? kstrndup+0xbd/0x160
[ 1381.777967][ T8813]  ? kstrndup+0xbd/0x160
[ 1381.777981][ T8813]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1381.778005][ T8813]  genl_family_rcv_msg_doit+0x233/0x340
[ 1381.778025][ T8813]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1381.778049][ T8813]  ? bpf_lsm_capable+0x9/0x20
[ 1381.778061][ T8813]  ? security_capable+0x7e/0x2c0
[ 1381.778085][ T8813]  genl_rcv_msg+0x614/0x7a0
[ 1381.778105][ T8813]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1381.778118][ T8813]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1381.778135][ T8813]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1381.778159][ T8813]  netlink_rcv_skb+0x226/0x4a0
[ 1381.778180][ T8813]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1381.778195][ T8813]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1381.778225][ T8813]  ? down_read+0x2be/0x330
[ 1381.778246][ T8813]  genl_rcv+0x28/0x40
[ 1381.778258][ T8813]  netlink_unicast+0x7bb/0x940
[ 1381.778284][ T8813]  netlink_sendmsg+0x813/0xb40
[ 1381.778310][ T8813]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1381.778332][ T8813]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1381.778356][ T8813]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1381.778373][ T8813]  sock_sendmsg_nosec+0x13a/0x180
[ 1381.778389][ T8813]  ____sys_sendmsg+0x54e/0x850
[ 1381.778412][ T8813]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1381.778466][ T8813]  ? import_iovec+0x73/0xa0
[ 1381.778488][ T8813]  ___sys_sendmsg+0x2a5/0x360
[ 1381.778505][ T8813]  ? __lock_acquire+0x683/0x2cf0
[ 1381.778523][ T8813]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1381.778543][ T8813]  ? futex_wait+0x2a2/0x390
[ 1381.778587][ T8813]  ? __fget_files+0x2a/0x420
[ 1381.778601][ T8813]  ? __fget_files+0x3a2/0x420
[ 1381.778629][ T8813]  __x64_sys_sendmsg+0x1b1/0x290
[ 1381.778650][ T8813]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1381.778684][ T8813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1381.778700][ T8813]  do_syscall_64+0x174/0x580
[ 1381.778715][ T8813]  ? trace_irq_disable+0x3b/0x140
[ 1381.778740][ T8813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1381.778753][ T8813] RIP: 0033:0x7f212a99ce59
[ 1381.778767][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1381.778778][ T8813] RSP: 002b:00007f2128bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1381.778793][ T8813] RAX: ffffffffffffffda RBX: 00007f212ac16090 RCX: 00007f212a99ce59
[ 1381.778803][ T8813] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[ 1381.778812][ T8813] RBP: 00007f212aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1381.778820][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1381.778828][ T8813] R13: 00007f212ac16128 R14: 00007f212ac16090 R15: 00007ffd3ebd2f78
[ 1381.778852][ T8813]  </TASK>
[ 1382.007211][ T8819] geneve13: entered promiscuous mode
[ 1382.009456][ T8819] geneve13: entered allmulticast mode
[ 1382.019138][ T5472] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.022712][ T5472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.025596][ T5472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.028754][ T5472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.170434][ T8840] tipc: Disabling bearer <eth:gre0>
[ 1382.179833][ T8842] netlink: 'syz.2.16125': attribute type 4 has an invalid length.
[ 1382.188070][   T10] rB speed is unknown, defaulting to 1000
[ 1382.190049][   T10] sy2: Port: 1 Link DOWN
[ 1382.273939][ T8843] can: request_module (can-proto-5) failed.
[ 1382.332187][ T8856] bond558: option fail_over_mac: invalid value (127)
[ 1382.335856][ T8856] bond558 (unregistering): Released all slaves
[ 1382.726899][ T8870] bond558: entered promiscuous mode
[ 1382.905500][ T8870] bond550: (slave veth245): Releasing active interface
[ 1382.916482][ T8870] bond8: (slave bridge218): Releasing backup interface
[ 1382.923024][ T8870] bond553: (slave bridge220): Releasing active interface
[ 1382.934570][ T8870] bond554: (slave veth249): Releasing active interface
[ 1382.981755][ T5472] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1382.985027][ T5472] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.989704][ T5472] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1382.992722][ T5472] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.996932][ T5472] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.001423][ T5472] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.004949][ T8871] bond558: left promiscuous mode
[ 1383.007350][ T5472] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.010734][ T5472] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.152661][ T8880] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1383.160123][ T8880] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1383.176746][ T5472] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1383.179948][ T5472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.182603][ T5472] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1383.185969][ T5472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.190487][ T5472] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1383.196287][ T5472] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.202791][ T5472] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1383.209311][ T5472] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.366656][ T8909] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1383.377964][ T8909] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1383.482321][ T8917] erspan0: left promiscuous mode
[ 1383.486302][ T8917] erspan0: left allmulticast mode
[ 1383.692824][ T8917] mac80211_hwsim hwsim168 wlan0: left promiscuous mode
[ 1383.695727][ T8917] mac80211_hwsim hwsim168 wlan0: left allmulticast mode
[ 1383.734287][ T8917] bridge0: left allmulticast mode
[ 1383.737699][ T8917] bond546: left promiscuous mode
[ 1383.739369][ T8917] bond546: left allmulticast mode
[ 1383.741095][ T8917] bond547: left allmulticast mode
[ 1383.743983][ T8917] veth243: left allmulticast mode
[ 1383.747571][ T8917] bond550: left allmulticast mode
[ 1383.750161][ T8917] veth247: left allmulticast mode
[ 1383.752683][ T8917] veth251: left allmulticast mode
[ 1383.755349][ T8917] ipvlan15: left promiscuous mode
[ 1383.757748][ T8917] bond556: left promiscuous mode
[ 1383.759829][ T8917] veth252: left allmulticast mode
[ 1383.761897][ T8917] veth253: left allmulticast mode
[ 1383.763905][ T8917] bond557: left allmulticast mode
[ 1383.766080][ T8917] team9: left promiscuous mode
[ 1383.767595][ T8917] team9: left allmulticast mode
[ 1383.769376][ T8917] team10: left promiscuous mode
[ 1383.771087][ T8917] team10: left allmulticast mode
[ 1383.775485][T18522] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.781264][T18522] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.785166][T18522] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.788782][T18522] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.791673][T18522] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.795459][T18522] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.798222][T18522] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1383.801968][T18522] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.986525][ T8940] xt_hashlimit: size too large, truncated to 1048576
[ 1384.005117][ T8939] gre0: entered promiscuous mode
[ 1384.008962][ T8939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1384.031031][ T8946] net_ratelimit: 13 callbacks suppressed
[ 1384.031074][ T8946] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1384.322191][ T8968] mac80211_hwsim hwsim163 syzkaller0: left allmulticast mode
[ 1384.384156][ T8970] 8021q: adding VLAN 0 to HW filter on device bond530
[ 1384.390201][ T8970] bond530: entered promiscuous mode
[ 1384.391935][ T8970] bond530: entered allmulticast mode
[ 1384.538408][ T8998] macvlan0: entered promiscuous mode
[ 1384.576646][ T8998] macvlan0: entered allmulticast mode
[ 1384.632405][ T8999] macvlan0 (unregistering): left promiscuous mode
[ 1384.638192][ T8999] macvlan0 (unregistering): left allmulticast mode
[ 1384.646469][ T9007] vlan0: entered promiscuous mode
[ 1384.649294][ T9007] bond458: entered promiscuous mode
[ 1384.700042][ T9010] __nla_validate_parse: 2647 callbacks suppressed
[ 1384.700054][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16163'.
[ 1384.707188][ T9010] workqueue: Failed to create a rescuer kthread for wq "bond522": -EINTR
[ 1384.750671][ T9019] ip6tnl22: entered promiscuous mode
[ 1384.830083][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16164'.
[ 1384.838898][ T9017] veth1: Caught tx_queue_len zero misconfig
[ 1384.847650][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16164'.
[ 1384.894982][ T9028] dvmrp8: entered allmulticast mode
[ 1384.989699][ T9034] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1385.005778][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16169'.
[ 1385.099029][ T9037] team0: entered promiscuous mode
[ 1385.104760][ T9037] team0: left allmulticast mode
[ 1385.115443][ T9037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1385.172394][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16174'.
[ 1385.176591][ T9058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1385.180409][ T9057] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1385.215042][ T9060] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1385.270302][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16177'.
[ 1385.323107][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16179'.
[ 1385.535497][ T9100] validate_nla: 10 callbacks suppressed
[ 1385.535508][ T9100] netlink: 'syz.1.16185': attribute type 1 has an invalid length.
[ 1385.541524][ T9100] workqueue: Failed to create a rescuer kthread for wq "bond559": -EINTR
[ 1385.551485][ T9098] can: request_module (can-proto-0) failed.
[ 1385.597255][ T9109] netlink: 'syz.2.16187': attribute type 13 has an invalid length.
[ 1385.732334][ T9112] geneve1: Caught tx_queue_len zero misconfig
[ 1388.326634][ T9089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1388.552728][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16193'.
[ 1388.630102][ T9143] netlink: 'syz.2.16194': attribute type 4 has an invalid length.
[ 1388.645359][ T9143] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16194'.
[ 1388.685025][ T9148] bond0: (slave ip6tnl0): refused to change device type
[ 1388.697011][ T9150] bond0: (slave ipvlan11): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1388.799429][ T9155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16196'.
[ 1388.808808][ T9153] veth215: entered allmulticast mode
[ 1388.999671][ T9177] netlink: 'syz.2.16203': attribute type 1 has an invalid length.
[ 1389.028569][ T9183] netlink: 'syz.0.16204': attribute type 1 has an invalid length.
[ 1389.032223][ T9177] 8021q: adding VLAN 0 to HW filter on device bond522
[ 1389.047755][ T9178] veth181: entered allmulticast mode
[ 1389.071455][ T9183] 8021q: adding VLAN 0 to HW filter on device bond532
[ 1389.078430][ T9177] bond522: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1389.187516][ T9198] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1389.283598][ T9210] netlink: 'syz.0.16209': attribute type 5 has an invalid length.
[ 1389.416716][ T9222] bond0: (slave wlan0): Opening slave failed
[ 1389.612022][ T9240] netlink: 'syz.2.16215': attribute type 1 has an invalid length.
[ 1389.633148][ T9240] 8021q: adding VLAN 0 to HW filter on device bond523
[ 1389.641209][ T9245] netlink: 'syz.0.16217': attribute type 3 has an invalid length.
[ 1389.646516][ T9240] bond522: (slave veth0_to_bond): Releasing active interface
[ 1389.657691][ T9240] bond523: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1389.670546][ T9240] bond523: entered promiscuous mode
[ 1389.673917][ T9240] bond523: entered allmulticast mode
[ 1389.709144][ T9247] __nla_validate_parse: 9 callbacks suppressed
[ 1389.709154][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16219'.
[ 1389.728130][ T9250] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1389.807602][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16223'.
[ 1389.936007][ T9275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1389.938904][ T9275] syzkaller0: entered promiscuous mode
[ 1389.942355][ T9275] syzkaller0: entered allmulticast mode
[ 1389.967046][ T9275] tipc: Resetting bearer <eth:syzkaller0>
[ 1389.973207][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16228'.
[ 1389.989431][ T9275] tipc: Resetting bearer <eth:syzkaller0>
[ 1390.006593][ T9275] tipc: Disabling bearer <eth:syzkaller0>
[ 1390.114259][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16231'.
[ 1390.299660][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16237'.
[ 1390.353036][ T9322] netlink: 'syz.0.16238': attribute type 1 has an invalid length.
[ 1390.357009][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16238'.
[ 1390.454234][ T9340] wireguard: wg0: Could not create IPv4 socket
[ 1390.456471][ T9340] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1390.461131][ T6330] rB speed is unknown, defaulting to 1000
[ 1390.463206][ T6330] sy2: Port: 1 Link ACTIVE
[ 1390.469142][ T9336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16241'.
[ 1390.542326][ T9343] syzkaller1: left allmulticast mode
[ 1390.548897][ T9343] ip6tnl22: entered allmulticast mode
[ 1391.155991][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16244'.
[ 1391.160546][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16244'.
[ 1391.312694][ T9353] netlink: 'syz.1.16247': attribute type 1 has an invalid length.
[ 1391.332674][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16247'.
[ 1391.392936][   T33] audit: type=1804 audit(1783438134.693:21): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16249" name="/newroot/5456/cgroup.controllers" dev="tmpfs" ino=27822 res=1 errno=0
[ 1391.407484][   T33] audit: type=1800 audit(1783438134.693:22): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16249" name="cgroup.controllers" dev="tmpfs" ino=27822 res=0 errno=0
[ 1391.423984][ T9364] netlink: 'syz.0.16246': attribute type 1 has an invalid length.
[ 1392.163482][ T9398] xt_hashlimit: size too large, truncated to 1048576
[ 1392.459967][ T9413] IPVS: Unknown mcast interface: vcan0
[ 1392.489379][ T9423] netlink: 'syz.1.16262': attribute type 1 has an invalid length.
[ 1392.513698][ T9423] bond560: entered promiscuous mode
[ 1392.518073][ T9423] 8021q: adding VLAN 0 to HW filter on device bond560
[ 1392.524926][ T9427] netlink: 'syz.2.16259': attribute type 3 has an invalid length.
[ 1392.536466][ T9423] bond560 (unregistering): Released all slaves
[ 1392.592309][ T9431] netlink: 'syz.2.16264': attribute type 3 has an invalid length.
[ 1392.601950][ T9431] netlink: 'syz.2.16264': attribute type 3 has an invalid length.
[ 1392.884752][ T9458] netlink: 'syz.0.16269': attribute type 4 has an invalid length.
[ 1392.889354][ T9458] netlink: 'syz.0.16269': attribute type 4 has an invalid length.
[ 1392.910467][ T9455] 8021q: VLANs not supported on gre0
[ 1392.995665][ T9468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1392.998745][ T9468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1393.405664][ T9484] pim6reg1: entered promiscuous mode
[ 1393.407988][ T9484] pim6reg1: entered allmulticast mode
[ 1393.501636][ T9486] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16)
[ 1393.505696][ T9486] openvswitch: netlink: Message has 512 unknown bytes.
[ 1393.574017][ T9488] netlink: 'syz.2.16275': attribute type 2 has an invalid length.
[ 1393.632326][ T9493] bond524: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[ 1393.642267][ T9493] bond524: entered promiscuous mode
[ 1393.648191][ T9493] 8021q: adding VLAN 0 to HW filter on device bond524
[ 1393.813309][ T9507] IPVS: set_ctl: invalid protocol: 59 10.1.0.254:20001
[ 1393.816279][ T9508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[ 1394.127444][ T9538] netlink: 'syz.1.16286': attribute type 1 has an invalid length.
[ 1394.218434][ T9549] bond526: entered promiscuous mode
[ 1394.222827][ T9549] 8021q: adding VLAN 0 to HW filter on device bond526
[ 1394.412372][ T9564] bridge220: entered promiscuous mode
[ 1394.417180][ T9564] bond526: (slave bridge220): Enslaving as an active interface with an up link
[ 1394.587852][ T9576] xt_hashlimit: size too large, truncated to 1048576
[ 1394.602221][ T9567] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1394.606001][ T9567] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1394.609306][ T9567] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1394.612918][ T9567] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1394.616305][ T9567] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1394.620020][ T9567] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1394.626286][ T9567] erspan0: entered promiscuous mode
[ 1394.629038][ T9567] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1394.632291][ T9567] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1394.635588][ T9567] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1394.640261][ T9567] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1394.645552][ T9567] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1394.657654][ T5662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1394.660321][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1394.663032][ T5662] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1394.666364][   T10] syz2: Port: 1 Link ACTIVE
[ 1394.669585][ T5662] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1394.676979][ T5662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1394.684762][ T5662] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1394.693486][ T5662] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1394.701497][ T5662] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1394.706722][ T5662] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1394.714208][ T5662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1394.726145][ T5662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1394.733393][ T5662] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1394.843063][ T9592] __nla_validate_parse: 63 callbacks suppressed
[ 1394.843074][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16300'.
[ 1394.844241][ T9589] smc: removing ib device syz0
[ 1394.869686][ T9589] 
[ 1394.870750][ T9589] ======================================================
[ 1394.873580][ T9589] WARNING: possible circular locking dependency detected
[ 1394.876353][ T9589] syzkaller #0 Not tainted
[ 1394.878237][ T9589] ------------------------------------------------------
[ 1394.880868][ T9589] syz.0.16299/9589 is trying to acquire lock:
[ 1394.883210][ T9589] ffff8881012bc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[ 1394.887116][ T9589] 
[ 1394.887116][ T9589] but task is already holding lock:
[ 1394.889559][ T9589] ffff8881012bcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[ 1394.892760][ T9589] 
[ 1394.892760][ T9589] which lock already depends on the new lock.
[ 1394.892760][ T9589] 
[ 1394.895796][ T9589] 
[ 1394.895796][ T9589] the existing dependency chain (in reverse order) is:
[ 1394.898385][ T9589] 
[ 1394.898385][ T9589] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[ 1394.901671][ T9589]        down_read+0x4a/0x330
[ 1394.903110][ T9589]        kernfs_remove_by_name_ns+0x3f/0x140
[ 1394.904851][ T9589]        internal_create_group+0x58e/0x1180
[ 1394.906713][ T9589]        sysfs_update_groups+0x60/0x130
[ 1394.908400][ T9589]        pmu_dev_alloc+0x29b/0x300
[ 1394.909960][ T9589]        perf_event_sysfs_init+0x76/0x100
[ 1394.911729][ T9589]        do_one_initcall+0x250/0x870
[ 1394.913327][ T9589]        do_initcall_level+0x10a/0x1a0
[ 1394.914944][ T9589]        do_initcalls+0x59/0xa0
[ 1394.916475][ T9589]        kernel_init_freeable+0x29d/0x3e0
[ 1394.918146][ T9589]        kernel_init+0x1d/0x1d0
[ 1394.919977][ T9589]        ret_from_fork+0x514/0xb70
[ 1394.921845][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1394.923486][ T9589] 
[ 1394.923486][ T9589] -> #9 (pmus_lock){+.+.}-{4:4}:
[ 1394.925690][ T9589]        __mutex_lock+0x19d/0x1550
[ 1394.927243][ T9589]        perf_event_init_cpu+0x1d1/0x7a0
[ 1394.929012][ T9589]        cpuhp_invoke_callback+0x434/0x810
[ 1394.930814][ T9589]        cpuhp_thread_fun+0x362/0x780
[ 1394.932541][ T9589]        smpboot_thread_fn+0x57c/0xa80
[ 1394.934219][ T9589]        kthread+0x388/0x470
[ 1394.935660][ T9589]        ret_from_fork+0x514/0xb70
[ 1394.937242][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1394.938930][ T9589] 
[ 1394.938930][ T9589] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[ 1394.941227][ T9589]        cpuhp_thread_fun+0x127/0x780
[ 1394.942920][ T9589]        smpboot_thread_fn+0x57c/0xa80
[ 1394.944589][ T9589]        kthread+0x388/0x470
[ 1394.946035][ T9589]        ret_from_fork+0x514/0xb70
[ 1394.947618][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1394.949441][ T9589] 
[ 1394.949441][ T9589] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 1394.951901][ T9589]        cpus_read_lock+0x42/0x160
[ 1394.953533][ T9589]        static_key_slow_inc+0x12/0x30
[ 1394.955200][ T9589]        nbd_genl_reconfigure+0x1301/0x1e80
[ 1394.957091][ T9589]        genl_family_rcv_msg_doit+0x233/0x340
[ 1394.959036][ T9589]        genl_rcv_msg+0x614/0x7a0
[ 1394.960633][ T9589]        netlink_rcv_skb+0x226/0x4a0
[ 1394.962241][ T9589]        genl_rcv+0x28/0x40
[ 1394.963727][ T9589]        netlink_unicast+0x7bb/0x940
[ 1394.965412][ T9589]        netlink_sendmsg+0x813/0xb40
[ 1394.967125][ T9589]        sock_sendmsg_nosec+0x13a/0x180
[ 1394.968874][ T9589]        ____sys_sendmsg+0x54e/0x850
[ 1394.970523][ T9589]        ___sys_sendmsg+0x2a5/0x360
[ 1394.972098][ T9589]        __x64_sys_sendmsg+0x1b1/0x290
[ 1394.973806][ T9589]        do_syscall_64+0x174/0x580
[ 1394.975417][ T9589]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.977486][ T9589] 
[ 1394.977486][ T9589] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1394.979878][ T9589]        __mutex_lock+0x19d/0x1550
[ 1394.981450][ T9589]        nbd_queue_rq+0x373/0x1150
[ 1394.983043][ T9589]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1394.984893][ T9589]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1394.986967][ T9589]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1394.989030][ T9589]        blk_mq_run_work_fn+0x16c/0x300
[ 1394.990651][ T9589]        process_scheduled_works+0xa8e/0x14e0
[ 1394.992516][ T9589]        worker_thread+0xa47/0xfb0
[ 1394.994143][ T9589]        kthread+0x388/0x470
[ 1394.995585][ T9589]        ret_from_fork+0x514/0xb70
[ 1394.997198][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1394.998885][ T9589] 
[ 1394.998885][ T9589] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1395.001124][ T9589]        __mutex_lock+0x19d/0x1550
[ 1395.002712][ T9589]        nbd_queue_rq+0xc1/0x1150
[ 1395.004298][ T9589]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1395.006210][ T9589]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1395.008283][ T9589]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1395.010411][ T9589]        blk_mq_run_work_fn+0x16c/0x300
[ 1395.012133][ T9589]        process_scheduled_works+0xa8e/0x14e0
[ 1395.014036][ T9589]        worker_thread+0xa47/0xfb0
[ 1395.015694][ T9589]        kthread+0x388/0x470
[ 1395.017167][ T9589]        ret_from_fork+0x514/0xb70
[ 1395.018890][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1395.020603][ T9589] 
[ 1395.020603][ T9589] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1395.022838][ T9589]        __synchronize_srcu+0xc9/0x2f0
[ 1395.024590][ T9589]        elevator_switch+0x1e8/0x7b0
[ 1395.026295][ T9589]        elevator_change+0x2fa/0x480
[ 1395.027910][ T9589]        elevator_set_default+0x375/0x440
[ 1395.029593][ T9589]        blk_register_queue+0x3f3/0x4e0
[ 1395.031306][ T9589]        __add_disk+0x6cb/0xe30
[ 1395.032786][ T9589]        add_disk_fwnode+0xfb/0x4b0
[ 1395.034371][ T9589]        nbd_dev_add+0x733/0xb60
[ 1395.035924][ T9589]        nbd_init+0x15f/0x1e0
[ 1395.037396][ T9589]        do_one_initcall+0x250/0x870
[ 1395.039011][ T9589]        do_initcall_level+0x10a/0x1a0
[ 1395.040674][ T9589]        do_initcalls+0x59/0xa0
[ 1395.042156][ T9589]        kernel_init_freeable+0x29d/0x3e0
[ 1395.043895][ T9589]        kernel_init+0x1d/0x1d0
[ 1395.045401][ T9589]        ret_from_fork+0x514/0xb70
[ 1395.046999][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1395.048661][ T9589] 
[ 1395.048661][ T9589] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1395.051205][ T9589]        __mutex_lock+0x19d/0x1550
[ 1395.052840][ T9589]        elevator_change+0x1af/0x480
[ 1395.054526][ T9589]        elevator_set_none+0xb5/0x140
[ 1395.056122][ T9589]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1395.058080][ T9589]        nbd_start_device+0x189/0xb30
[ 1395.059868][ T9589]        nbd_genl_connect+0x1597/0x1c10
[ 1395.061684][ T9589]        genl_family_rcv_msg_doit+0x233/0x340
[ 1395.063644][ T9589]        genl_rcv_msg+0x614/0x7a0
[ 1395.065310][ T9589]        netlink_rcv_skb+0x226/0x4a0
[ 1395.067016][ T9589]        genl_rcv+0x28/0x40
[ 1395.068544][ T9589]        netlink_unicast+0x7bb/0x940
[ 1395.070335][ T9589]        netlink_sendmsg+0x813/0xb40
[ 1395.072063][ T9589]        sock_sendmsg_nosec+0x13a/0x180
[ 1395.073906][ T9589]        ____sys_sendmsg+0x54e/0x850
[ 1395.075683][ T9589]        ___sys_sendmsg+0x2a5/0x360
[ 1395.077417][ T9589]        __x64_sys_sendmsg+0x1b1/0x290
[ 1395.079395][ T9589]        do_syscall_64+0x174/0x580
[ 1395.081122][ T9589]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.083245][ T9589] 
[ 1395.083245][ T9589] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[ 1395.086028][ T9589]        blk_alloc_queue+0x544/0x690
[ 1395.087750][ T9589]        __blk_mq_alloc_disk+0x194/0x390
[ 1395.089623][ T9589]        nbd_dev_add+0x494/0xb60
[ 1395.091170][ T9589]        nbd_init+0x15f/0x1e0
[ 1395.092690][ T9589]        do_one_initcall+0x250/0x870
[ 1395.094392][ T9589]        do_initcall_level+0x10a/0x1a0
[ 1395.096094][ T9589]        do_initcalls+0x59/0xa0
[ 1395.097697][ T9589]        kernel_init_freeable+0x29d/0x3e0
[ 1395.099542][ T9589]        kernel_init+0x1d/0x1d0
[ 1395.101056][ T9589]        ret_from_fork+0x514/0xb70
[ 1395.102625][ T9589]        ret_from_fork_asm+0x1a/0x30
[ 1395.104289][ T9589] 
[ 1395.104289][ T9589] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1395.106542][ T9589]        fs_reclaim_acquire+0x71/0x100
[ 1395.108238][ T9589]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[ 1395.110557][ T9589]        alloc_inode+0xb8/0x1b0
[ 1395.112040][ T9589]        iget_locked+0x131/0x6a0
[ 1395.113507][ T9589]        kernfs_get_inode+0x4f/0x770
[ 1395.115318][ T9589]        kernfs_get_tree+0x5cd/0x980
[ 1395.116880][ T9589]        vfs_get_tree+0x92/0x2a0
[ 1395.118396][ T9589]        do_new_mount+0x319/0xdc0
[ 1395.119969][ T9589]        __se_sys_mount+0x31d/0x420
[ 1395.121604][ T9589]        do_syscall_64+0x174/0x580
[ 1395.123113][ T9589]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.125515][ T9589] 
[ 1395.125515][ T9589] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1395.128491][ T9589]        __lock_acquire+0x1520/0x2cf0
[ 1395.130264][ T9589]        lock_acquire+0x106/0x350
[ 1395.131813][ T9589]        down_write+0x96/0x200
[ 1395.133280][ T9589]        kernfs_remove_by_name_ns+0x4e/0x140
[ 1395.135258][ T9589]        sysfs_unmerge_group+0xd3/0x140
[ 1395.137274][ T9589]        dpm_sysfs_remove+0x5f/0xd0
[ 1395.139257][ T9589]        device_del+0x250/0x8f0
[ 1395.141135][ T9589]        srp_remove_one+0x81/0x280
[ 1395.143133][ T9589]        remove_client_context+0xb9/0x1e0
[ 1395.145236][ T9589]        disable_device+0x137/0x330
[ 1395.146919][ T9589]        __ib_unregister_device+0x2c9/0x400
[ 1395.148698][ T9589]        ib_unregister_device_and_put+0xb8/0xf0
[ 1395.151016][ T9589]        nldev_dellink+0x39e/0x430
[ 1395.152823][ T9589]        rdma_nl_rcv+0x6ef/0xa40
[ 1395.154743][ T9589]        netlink_unicast+0x7bb/0x940
[ 1395.156675][ T9589]        netlink_sendmsg+0x813/0xb40
[ 1395.158791][ T9589]        sock_sendmsg_nosec+0x13a/0x180
[ 1395.160962][ T9589]        ____sys_sendmsg+0x54e/0x850
[ 1395.163024][ T9589]        ___sys_sendmsg+0x2a5/0x360
[ 1395.165101][ T9589]        __x64_sys_sendmsg+0x1b1/0x290
[ 1395.167283][ T9589]        do_syscall_64+0x174/0x580
[ 1395.169309][ T9589]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.171753][ T9589] 
[ 1395.171753][ T9589] other info that might help us debug this:
[ 1395.171753][ T9589] 
[ 1395.175099][ T9589] Chain exists of:
[ 1395.175099][ T9589]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[ 1395.175099][ T9589] 
[ 1395.179686][ T9589]  Possible unsafe locking scenario:
[ 1395.179686][ T9589] 
[ 1395.182136][ T9589]        CPU0                    CPU1
[ 1395.183837][ T9589]        ----                    ----
[ 1395.185554][ T9589]   rlock(&root->kernfs_supers_rwsem);
[ 1395.187593][ T9589]                                lock(pmus_lock);
[ 1395.190006][ T9589]                                lock(&root->kernfs_supers_rwsem);
[ 1395.192984][ T9589]   lock(&root->kernfs_rwsem);
[ 1395.194856][ T9589] 
[ 1395.194856][ T9589]  *** DEADLOCK ***
[ 1395.194856][ T9589] 
[ 1395.198070][ T9589] 3 locks held by syz.0.16299/9589:
[ 1395.199759][ T9589]  #0: ffffffff9a853f28 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[ 1395.202765][ T9589]  #1: ffff8881bcb606f8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400
[ 1395.206225][ T9589]  #2: ffff8881012bcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[ 1395.209737][ T9589] 
[ 1395.209737][ T9589] stack backtrace:
[ 1395.211568][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.0.16299 Not tainted syzkaller #0 PREEMPT(full) 
[ 1395.211579][ T9589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1395.211584][ T9589] Call Trace:
[ 1395.211589][ T9589]  <TASK>
[ 1395.211595][ T9589]  dump_stack_lvl+0xe8/0x150
[ 1395.211607][ T9589]  print_circular_bug+0x2e1/0x300
[ 1395.211619][ T9589]  check_noncircular+0x12e/0x150
[ 1395.211629][ T9589]  __lock_acquire+0x1520/0x2cf0
[ 1395.211639][ T9589]  ? __lock_acquire+0x13e8/0x2cf0
[ 1395.211650][ T9589]  ? kernfs_remove_by_name_ns+0x4e/0x140
[ 1395.211659][ T9589]  lock_acquire+0x106/0x350
[ 1395.211667][ T9589]  ? kernfs_remove_by_name_ns+0x4e/0x140
[ 1395.211681][ T9589]  down_write+0x96/0x200
[ 1395.211692][ T9589]  ? kernfs_remove_by_name_ns+0x4e/0x140
[ 1395.211700][ T9589]  ? __pfx_down_write+0x10/0x10
[ 1395.211710][ T9589]  kernfs_remove_by_name_ns+0x4e/0x140
[ 1395.211719][ T9589]  sysfs_unmerge_group+0xd3/0x140
[ 1395.211727][ T9589]  dpm_sysfs_remove+0x5f/0xd0
[ 1395.211736][ T9589]  device_del+0x250/0x8f0
[ 1395.211747][ T9589]  ? xa_load+0x60/0x210
[ 1395.211756][ T9589]  ? __pfx_device_del+0x10/0x10
[ 1395.211766][ T9589]  ? remove_client_context+0x79/0x1e0
[ 1395.211777][ T9589]  ? __pfx_srp_remove_one+0x10/0x10
[ 1395.211785][ T9589]  srp_remove_one+0x81/0x280
[ 1395.211794][ T9589]  ? __pfx_srp_remove_one+0x10/0x10
[ 1395.211802][ T9589]  remove_client_context+0xb9/0x1e0
[ 1395.211814][ T9589]  disable_device+0x137/0x330
[ 1395.211825][ T9589]  ? __pfx_disable_device+0x10/0x10
[ 1395.211836][ T9589]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1395.211845][ T9589]  __ib_unregister_device+0x2c9/0x400
[ 1395.211856][ T9589]  ib_unregister_device_and_put+0xb8/0xf0
[ 1395.211866][ T9589]  nldev_dellink+0x39e/0x430
[ 1395.211874][ T9589]  ? __pfx_nldev_dellink+0x10/0x10
[ 1395.211898][ T9589]  ? apparmor_capable+0x126/0x170
[ 1395.211906][ T9589]  ? bpf_lsm_capable+0x9/0x20
[ 1395.211913][ T9589]  ? security_capable+0x7e/0x2c0
[ 1395.211923][ T9589]  ? __pfx_nldev_dellink+0x10/0x10
[ 1395.211930][ T9589]  rdma_nl_rcv+0x6ef/0xa40
[ 1395.211941][ T9589]  ? __pfx_rdma_nl_rcv+0x10/0x10
[ 1395.211952][ T9589]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1395.211962][ T9589]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1395.211972][ T9589]  netlink_unicast+0x7bb/0x940
[ 1395.211982][ T9589]  netlink_sendmsg+0x813/0xb40
[ 1395.211995][ T9589]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1395.212005][ T9589]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1395.212016][ T9589]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1395.212025][ T9589]  sock_sendmsg_nosec+0x13a/0x180
[ 1395.212033][ T9589]  ____sys_sendmsg+0x54e/0x850
[ 1395.212043][ T9589]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1395.212053][ T9589]  ? import_iovec+0x73/0xa0
[ 1395.212063][ T9589]  ___sys_sendmsg+0x2a5/0x360
[ 1395.212071][ T9589]  ? __lock_acquire+0x683/0x2cf0
[ 1395.212079][ T9589]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1395.212088][ T9589]  ? futex_wake+0x51b/0x5f0
[ 1395.212104][ T9589]  ? __fget_files+0x2a/0x420
[ 1395.212111][ T9589]  ? __fget_files+0x3a2/0x420
[ 1395.212119][ T9589]  __x64_sys_sendmsg+0x1b1/0x290
[ 1395.212128][ T9589]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1395.212140][ T9589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.212147][ T9589]  do_syscall_64+0x174/0x580
[ 1395.212155][ T9589]  ? trace_irq_disable+0x3b/0x140
[ 1395.212167][ T9589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.212208][ T9589] RIP: 0033:0x7fc2c3d9ce59
[ 1395.212219][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1395.212225][ T9589] RSP: 002b:00007fc2c4c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1395.212234][ T9589] RAX: ffffffffffffffda RBX: 00007fc2c4015fa0 RCX: 00007fc2c3d9ce59
[ 1395.212240][ T9589] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 000000000000000a
[ 1395.212245][ T9589] RBP: 00007fc2c3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1395.212250][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1395.212256][ T9589] R13: 00007fc2c4016038 R14: 00007fc2c4015fa0 R15: 00007ffd941d2ba8
[ 1395.212264][ T9589]  </TASK>
[ 1395.402969][ T9589] smbdirect: ib_dev[syz0] removed
