last executing test programs:

1.040798997s ago: executing program 1 (id=664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x703}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x401}]}}}]}, 0x68}}, 0x0)

933.059002ms ago: executing program 1 (id=667):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165cc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="5800fffe1400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

874.348439ms ago: executing program 1 (id=669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000100001042000"/20, @ANYRES32=r4, @ANYBLOB="000300000000040008000a00", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000305000000000000070000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0)
clock_gettime(0x4, &(0x7f0000000980))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r8, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, r8, 0x500, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002e00090027bd700000000000040000000800180002ac0f00197b3c9d07c10a43beb394a4c3e4fc71868c1f583a29c0dbffee4e17f3b94c3adc1432fd112982219a1803ff8dc2e25246fbb86417df0f4d71df1ff5b711bb15cf63c83411f333a475cf09e89a47a15f6335d4bf550c03f408373cfebc10f5eaa7f35a8edadf0487a77d17fdf208e22cf0e62c5072912af162cb9ba0c03ad121a109b6be4c8d55ccbb6b1f4a45d62ebdd0cf2965eda9e654aeb6a4ea69e7835977aa4092fe8355b7"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

564.422509ms ago: executing program 1 (id=674):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a00173068100001c0012800b0001006264676500000c00028005002400010000000a200100aaaaaaaaaaaa0008"], 0x48}}, 0x20000000)

493.941937ms ago: executing program 0 (id=676):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165cc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="58000fff1400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

490.574436ms ago: executing program 1 (id=677):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f00000002c0)=0xf3)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

489.30305ms ago: executing program 0 (id=678):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4001}, 0x44040) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x8000) (async)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) (async)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3, 0x40082}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0xc000)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r3, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)

404.349278ms ago: executing program 2 (id=679):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
close(0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xd6)

403.871165ms ago: executing program 0 (id=680):
socket$inet6(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20040084) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xfffc, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
socket$kcm(0xa, 0x2, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4) (async)
close(0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0) (async)
listen(r9, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20)
connect$unix(r8, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

283.818269ms ago: executing program 1 (id=681):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012000100000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c00150000000000000000000000020000"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

282.931339ms ago: executing program 2 (id=682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r1 = socket(0x1d, 0x2, 0x6)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_modinfo})
bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000061}, 0x81)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = gettid()
sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x20}]}]}, 0x20}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000240)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r12=>0x0, 0x0, 0x5f, 0xf, 0xfff, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8, 0x7, 0x78e, 0x3}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xe0, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xe0}}, 0x0)

282.575352ms ago: executing program 0 (id=683):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0xf}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x1)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) (async)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x2}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x2}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x1a, 0x4}, 0x20)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b00008807c0000805400098028000080060001000a0000001400020000000000000000000000000000000001050003000000000028000080060001000a00000014000200000000000000000000000000000000000500030001000000240001"], 0xfc}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

224.649193ms ago: executing program 2 (id=684):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165cc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="5800feff1400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

165.358085ms ago: executing program 2 (id=685):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000080000000000000001000000620400000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1838a}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xb8, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000884}, 0x4004004)

33.97641ms ago: executing program 2 (id=686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030428c278000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c0002800600020001000067050027009f000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

33.591336ms ago: executing program 2 (id=687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000140)={0x61e1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0xffffff6e)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x2000)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0xfffffffe, 0x4) (async)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0xfffffffe, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000780)={{r7}, "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"})
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000)
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1)

3.621888ms ago: executing program 0 (id=688):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400074020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

0s ago: executing program 0 (id=689):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x25, 0x1, 0x70bd25, 0xfffffffc, {0xe}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0, 0xfffffffd}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="500f80", 0x3}], 0x1}}], 0x1, 0x40840)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c)
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000380)={0x19})
shutdown(r1, 0x0)
sendto$packet(r0, &(0x7f0000000680), 0x0, 0x40040, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_PORT_SELF={0x80, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c6517d6b7c917eb19d9a2a46de5db59d"}, @IFLA_PORT_VF={0x8, 0x1, 0x400}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c41b01ce2e77f403182ce2489dce64f5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "63941be180f8c1c69fa10bf1495de848"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e49d46a688a7033c7d679adf2a43b854"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a1ffa4d194fd313804b32272678cb07c"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x20040040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18841' (ED25519) to the list of known hosts.
syzkaller login: [   57.638985][ T5595] cgroup: Unknown subsys name 'net'
[   57.764122][ T5595] cgroup: Unknown subsys name 'cpuset'
[   57.768143][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.525898][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.308221][ T5000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.313531][ T5000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.316507][ T5000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.323547][ T5000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.326941][ T5000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.357825][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.362172][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.365435][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.369142][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.372407][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.394173][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.398630][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.403261][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.406469][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.413547][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.958892][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.962868][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.965763][ T5619] bridge_slave_0: entered allmulticast mode
[   64.969577][ T5619] bridge_slave_0: entered promiscuous mode
[   64.998649][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.001263][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.003875][ T5619] bridge_slave_1: entered allmulticast mode
[   65.007611][ T5619] bridge_slave_1: entered promiscuous mode
[   65.080153][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.103914][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.163895][ T5619] team0: Port device team_slave_0 added
[   65.167268][ T5619] team0: Port device team_slave_1 added
[   65.169095][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.171443][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.174009][ T5616] bridge_slave_0: entered allmulticast mode
[   65.176749][ T5616] bridge_slave_0: entered promiscuous mode
[   65.207899][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.211013][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.214445][ T5616] bridge_slave_1: entered allmulticast mode
[   65.217633][ T5616] bridge_slave_1: entered promiscuous mode
[   65.235351][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.237576][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.245742][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.250691][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.253032][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.261749][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.297763][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.309784][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.312344][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.314705][ T5612] bridge_slave_0: entered allmulticast mode
[   65.317437][ T5612] bridge_slave_0: entered promiscuous mode
[   65.321677][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.324027][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.326041][ T5612] bridge_slave_1: entered allmulticast mode
[   65.328692][ T5612] bridge_slave_1: entered promiscuous mode
[   65.334365][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.403552][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.408410][ T5616] team0: Port device team_slave_0 added
[   65.414454][ T5619] hsr_slave_0: entered promiscuous mode
[   65.417202][ T5619] hsr_slave_1: entered promiscuous mode
[   65.422388][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.442528][ T5616] team0: Port device team_slave_1 added
[   65.488171][ T5612] team0: Port device team_slave_0 added
[   65.491002][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.493846][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.502945][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.507923][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.510114][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.519557][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.534594][ T5612] team0: Port device team_slave_1 added
[   65.614085][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.616841][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.626396][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.636689][ T5616] hsr_slave_0: entered promiscuous mode
[   65.640329][ T5616] hsr_slave_1: entered promiscuous mode
[   65.643475][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   65.646405][ T5616] Cannot create hsr debugfs directory
[   65.658155][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.660650][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.670221][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.810758][ T5612] hsr_slave_0: entered promiscuous mode
[   65.814363][ T5612] hsr_slave_1: entered promiscuous mode
[   65.817421][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   65.819657][ T5612] Cannot create hsr debugfs directory
[   66.010550][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.021629][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.043993][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.048895][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.054979][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.062344][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.097961][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.105579][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.221988][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.228974][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.246418][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.258031][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.283592][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.289892][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.313510][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.320231][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.382095][   T54] Bluetooth: hci0: command tx timeout
[   66.387108][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.398756][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.403915][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.410414][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.427455][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.435459][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.439803][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.447458][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.451489][   T54] Bluetooth: hci1: command tx timeout
[   66.451812][ T5000] Bluetooth: hci2: command tx timeout
[   66.516964][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.575286][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   66.608955][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.612610][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.633600][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.636190][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.686631][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.723556][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.753718][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   66.777519][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   66.789988][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.792831][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.810978][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.813857][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.832758][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.835467][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.854245][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.857064][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.178804][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.233215][ T5619] veth0_vlan: entered promiscuous mode
[   67.244170][ T5619] veth1_vlan: entered promiscuous mode
[   67.274134][ T5619] veth0_macvtap: entered promiscuous mode
[   67.280706][ T5619] veth1_macvtap: entered promiscuous mode
[   67.294795][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.307463][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.335117][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.347656][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.363999][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.375753][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.408780][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.439368][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.465384][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.473745][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.511874][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.515455][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.531246][ T5616] veth0_vlan: entered promiscuous mode
[   67.535478][ T5612] veth0_vlan: entered promiscuous mode
[   67.544404][ T5616] veth1_vlan: entered promiscuous mode
[   67.562587][ T5612] veth1_vlan: entered promiscuous mode
[   67.613402][ T5616] veth0_macvtap: entered promiscuous mode
[   67.620678][ T5616] veth1_macvtap: entered promiscuous mode
[   67.634730][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.645576][ T5612] veth0_macvtap: entered promiscuous mode
[   67.656888][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.665630][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.680799][ T5612] veth1_macvtap: entered promiscuous mode
[   67.689798][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.705964][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.709821][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.723642][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.746823][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.780336][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.824292][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.830686][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.857028][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.860482][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.885613][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.894602][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.963123][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.973859][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.998735][ T5720] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   68.016226][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.024012][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.058587][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.068264][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.148042][ T5723] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.153633][ T5725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.219421][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.226496][ T5727] erspan1: entered allmulticast mode
[   68.313630][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.454394][ T5000] Bluetooth: hci0: command tx timeout
[   68.532081][ T5000] Bluetooth: hci1: command tx timeout
[   68.532095][   T54] Bluetooth: hci2: command tx timeout
[   69.179439][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   69.201447][ T5765] veth0_to_bond: entered allmulticast mode
[   69.352013][ T5773] netlink: 'syz.0.13': attribute type 13 has an invalid length.
[   70.534701][   T54] Bluetooth: hci0: command tx timeout
[   70.615845][   T54] Bluetooth: hci1: command tx timeout
[   70.621609][ T5000] Bluetooth: hci2: command tx timeout
[   70.824441][ T5794] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.838496][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   70.843855][ T5794] veth0_to_bond: entered allmulticast mode
[   70.850114][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   70.856605][ T5796] tipc: Enabling of bearer <dth:s> rejected, media not registered
[   70.878998][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   71.015116][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.019207][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.116425][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.126285][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.323925][ T5804] bond1: entered promiscuous mode
[   71.326328][ T5804] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.357921][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.362631][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.367228][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.419453][ T5808] syzkaller0: entered promiscuous mode
[   71.425030][ T5808] syzkaller0: entered allmulticast mode
[   71.480211][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   72.625223][ T5000] Bluetooth: hci0: command tx timeout
[   72.690085][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.695391][ T5000] Bluetooth: hci2: command tx timeout
[   72.701849][ T5000] Bluetooth: hci1: command tx timeout
[   72.865487][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'.
[   72.986963][ T5848] Zero length message leads to an empty skb
[   72.997400][ T5851] syzkaller1: entered promiscuous mode
[   73.000661][ T5851] syzkaller1: entered allmulticast mode
[   73.114592][ T5859] batadv_slave_0: Caught tx_queue_len zero misconfig
[   73.169506][ T5862] __nla_validate_parse: 3 callbacks suppressed
[   73.169518][ T5862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'.
[   73.366348][ T5874] netlink: 'syz.1.39': attribute type 4 has an invalid length.
[   73.369515][ T5874] netlink: 17 bytes leftover after parsing attributes in process `syz.1.39'.
[   73.394981][ T5876] syzkaller1: entered promiscuous mode
[   73.396660][ T5876] syzkaller1: entered allmulticast mode
[   73.510284][ T5882] netlink: 'syz.0.42': attribute type 1 has an invalid length.
[   73.520429][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'.
[   73.524169][ T5882] virt_wifi0: entered promiscuous mode
[   73.526353][ T5882] virt_wifi0: entered allmulticast mode
[   73.596956][ T5886] netlink: 'syz.0.43': attribute type 4 has an invalid length.
[   73.603051][ T5886] netlink: 'syz.0.43': attribute type 4 has an invalid length.
[   73.956714][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'.
[   74.018481][ T5911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   74.169907][ T5918] netlink: 14 bytes leftover after parsing attributes in process `syz.0.52'.
[   74.270685][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'.
[   74.319254][ T5931] netlink: 76 bytes leftover after parsing attributes in process `syz.1.54'.
[   74.375149][ T5933] syzkaller1: entered promiscuous mode
[   74.378931][ T5933] syzkaller1: entered allmulticast mode
[   74.416364][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'.
[   74.600810][ T5953] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   74.794352][ T5956] ip6erspan0: entered allmulticast mode
[   74.820135][ T5961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.820809][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.840639][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.854415][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.882908][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.886074][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.897657][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   74.901327][ T5965] netlink: 'syz.1.63': attribute type 11 has an invalid length.
[   74.904827][ T5967] syzkaller1: entered promiscuous mode
[   74.906608][ T5967] syzkaller1: entered allmulticast mode
[   74.922124][ T5965] netlink: 'syz.1.63': attribute type 11 has an invalid length.
[   74.935611][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.941881][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.944845][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.947848][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.045596][ T5972] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   75.069138][ T5972] bond1: entered promiscuous mode
[   75.072548][ T5972] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.268755][ T5993] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   75.330801][ T5996] netlink: 'syz.0.71': attribute type 13 has an invalid length.
[   75.726213][ T6024] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   75.826702][ T6032] block nbd0: Unsupported socket: should be TCP or UNIX.
[   75.899036][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.941893][ T6044] netlink: 'syz.1.85': attribute type 1 has an invalid length.
[   75.955600][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.958431][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.982015][ T6045] netlink: 'syz.0.84': attribute type 13 has an invalid length.
[   75.984603][ T6045] netlink: 'syz.0.84': attribute type 17 has an invalid length.
[   76.154122][ T6044] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.192591][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.195788][ T6045] 8021q: adding VLAN 0 to HW filter on device team0
[   76.233169][ T6045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   76.236220][ T6045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.243602][ T6045] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   76.246553][ T6045] virt_wifi0: left promiscuous mode
[   76.248199][ T6045] virt_wifi0: left allmulticast mode
[   76.250910][ T6045] veth1_vlan: left promiscuous mode
[   76.254030][ T6045] veth0_vlan: left promiscuous mode
[   76.256097][ T6045] veth0_vlan: entered promiscuous mode
[   76.259875][ T6045] veth1_vlan: entered promiscuous mode
[   76.266989][ T6045] veth1_macvtap: left promiscuous mode
[   76.269436][ T6045] veth0_macvtap: left promiscuous mode
[   76.271940][ T6045] veth0_macvtap: entered promiscuous mode
[   76.280205][ T6045] veth1_macvtap: entered promiscuous mode
[   76.286223][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.292328][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.298543][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.305889][ T6045] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.313603][ T6045] veth0_to_team: entered promiscuous mode
[   76.317459][ T6045] bond1: left promiscuous mode
[   76.319070][ T6045] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.328547][ T6052] vlan2: entered allmulticast mode
[   76.330075][ T6052] bond1: entered allmulticast mode
[   76.344843][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.347186][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.355673][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.358002][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.162222][ T6106] bridge_slave_0: left allmulticast mode
[   77.164660][ T6106] bridge_slave_0: left promiscuous mode
[   77.167479][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.177010][ T6106] bridge_slave_1: left allmulticast mode
[   77.185499][ T6106] bridge_slave_1: left promiscuous mode
[   77.192409][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.211507][ T6106] bond0: (slave bond_slave_0): Releasing backup interface
[   77.225705][ T6106] bond0: (slave bond_slave_1): Releasing backup interface
[   77.247621][ T6106] team0: Port device team_slave_0 removed
[   77.258480][ T6106] team0: Port device team_slave_1 removed
[   77.263933][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.268009][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.277770][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.282538][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.289300][ T6106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   77.527410][ T6119] netlink: 'syz.1.98': attribute type 39 has an invalid length.
[   77.652846][ T6123] tipc: Started in network mode
[   77.654861][ T6123] tipc: Node identity 02b1b795d7e5, cluster identity 4711
[   77.657783][ T6123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.661658][ T6123] syzkaller0: entered promiscuous mode
[   77.663717][ T6123] syzkaller0: entered allmulticast mode
[   77.667733][ T6123] netem: change failed
[   77.670133][ T6122] tipc: Resetting bearer <eth:syzkaller0>
[   77.682030][ T6122] tipc: Disabling bearer <eth:syzkaller0>
[   78.026156][ T6143] bond2: entered promiscuous mode
[   78.030258][ T6143] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.067288][ T6152] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[   78.117048][ T6143] vlan2: entered allmulticast mode
[   78.118798][ T6143] bond2: entered allmulticast mode
[   78.200406][   T33] audit: type=1804 audit(1778543589.675:2): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.107" name="/newroot/39/memory.events" dev="tmpfs" ino=221 res=1 errno=0
[   78.212746][   T33] audit: type=1800 audit(1778543589.695:3): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="memory.events" dev="tmpfs" ino=221 res=0 errno=0
[   78.219154][   T33] audit: type=1800 audit(1778543589.695:4): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="memory.events" dev="tmpfs" ino=221 res=0 errno=0
[   78.227266][ T6161] __nla_validate_parse: 15 callbacks suppressed
[   78.227282][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.238706][ T6163] IPVS: set_ctl: invalid protocol: 50 172.20.20.51:20002
[   78.242533][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.247627][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.251713][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.257846][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.266012][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.282541][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.305518][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.309098][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.320486][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.363000][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.365804][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.583709][ T5666] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.594324][ T5666] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.597882][ T5666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.648554][ T5666] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.872374][ T6211] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   79.182438][ T6229] bond3: option arp_all_targets: invalid value (129)
[   79.197658][ T6229] bond3 (unregistering): Released all slaves
[   79.437981][ T6244] bond2: entered promiscuous mode
[   79.440395][ T6244] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.494929][ T6244] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.497203][ T6244] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   79.503259][ T6244] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   79.516993][ T6244] bond2: (slave wireguard0): making interface the new active one
[   79.519688][ T6244] wireguard0: entered promiscuous mode
[   79.525072][ T6244] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   79.529296][ T6252] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) !
[   82.329791][ T6241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   82.457891][ T6264] 8021q: VLANs not supported on wg1
[   82.549980][ T6269] validate_nla: 3 callbacks suppressed
[   82.549991][ T6269] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   82.733681][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.750371][ T6284] sock: sock_set_timeout: `syz.0.132' (pid 6284) tries to set negative timeout
[   83.209672][ T6305] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   83.242784][ T6305] bond2: entered promiscuous mode
[   83.244633][ T6305] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.265216][ T6305] bond2: (slave bridge1): making interface the new active one
[   83.267821][ T6305] bridge1: entered promiscuous mode
[   83.270785][ T6305] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   83.355987][ T6310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.418173][ T6316] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   83.474978][ T6316] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   83.611905][ T6334] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   83.658328][ T6334] bond3: entered promiscuous mode
[   83.660160][ T6334] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.693865][ T6334] bond3: (slave bridge2): making interface the new active one
[   83.696365][ T6334] bridge2: entered promiscuous mode
[   83.698702][ T6334] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   83.711523][ T6342] __nla_validate_parse: 147 callbacks suppressed
[   83.711539][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'.
[   83.805959][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'.
[   83.852261][ T6352] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.148'.
[   83.858834][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   84.061682][ T6363] netlink: 'syz.2.155': attribute type 15 has an invalid length.
[   84.066240][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   84.089357][ T6367] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001
[   84.090000][ T6363] netlink: 'syz.2.155': attribute type 15 has an invalid length.
[   84.095892][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   84.160153][ T5479] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   84.167607][ T5479] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   84.248207][ T5479] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   84.265682][ T5479] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   84.314678][ T6379] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   84.338012][ T6383] xt_hashlimit: max too large, truncated to 1048576
[   84.415154][ T6386] bond5: (slave geneve2): making interface the new active one
[   84.420507][ T6386] bond5: (slave geneve2): Enslaving as an active interface with an up link
[   84.433151][ T5479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   84.443698][ T6383] vti0: entered promiscuous mode
[   84.445565][ T6383] vti0: entered allmulticast mode
[   84.447807][ T5479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   84.455599][ T5479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   84.463461][ T5479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   84.947760][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'.
[   85.081848][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[   86.304313][ T6429] netlink: 76 bytes leftover after parsing attributes in process `syz.2.165'.
[   86.475384][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'.
[   86.513654][ T6441] team0 (unregistering): Port device team_slave_0 removed
[   86.523709][ T6441] team0 (unregistering): Port device team_slave_1 removed
[   86.703304][ T6452] vlan4: entered promiscuous mode
[   86.707710][ T6452] gretap0: entered promiscuous mode
[   86.842239][ T6457] bond6: option arp_interval: invalid value (18446744073709551615)
[   86.856678][ T6457] bond6: option arp_interval: allowed values 0 - 2147483647
[   86.885949][ T6457] bond6 (unregistering): Released all slaves
[   87.038241][   T24] cfg80211: failed to load regulatory.db
[   87.468052][ T6496] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[   87.578717][ T6507] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   87.645531][ T6517] IPVS: Error connecting to the multicast addr
[   87.874019][ T6543] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   87.918665][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[   87.926523][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[   87.930224][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[   87.934717][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.015592][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[   88.019147][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.026451][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[   88.035030][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[   88.204199][ T6568] bond4: entered allmulticast mode
[   88.525820][ T6602] netlink: 'syz.0.197': attribute type 24 has an invalid length.
[   88.677281][ T6609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   89.046624][ T6631] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   89.069224][ T6631] bond5: entered promiscuous mode
[   89.072715][ T6631] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.095431][ T6631] bond5: (slave bridge4): making interface the new active one
[   89.098479][ T6631] bridge4: entered promiscuous mode
[   89.103414][ T6631] bond5: (slave bridge4): Enslaving as an active interface with an up link
[   89.158987][ T6634] __nla_validate_parse: 7 callbacks suppressed
[   89.159009][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   89.550526][ T6659] m1Ie5n: entered promiscuous mode
[   89.661006][ T6666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.208'.
[   89.681426][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   89.734131][ T6668] bond3: Invalid ad_actor_system MAC address.
[   89.739157][ T6668] bond3: option ad_actor_system: invalid value (7)
[   89.744697][ T6668] bond3 (unregistering): Released all slaves
[   89.746996][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'.
[   89.918279][ T6678] bridge5: entered promiscuous mode
[   89.926115][ T6678] bridge5: entered allmulticast mode
[   89.956237][ T6682] x9: renamed from bridge_slave_0 (while UP)
[   89.971091][ T6682] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   89.997138][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   90.040415][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.215'.
[   90.118927][ T6689] syzkaller1: entered promiscuous mode
[   90.122808][ T6689] syzkaller1: entered allmulticast mode
[   90.234550][ T6693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.239449][ T6693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.359001][ T6700] syzkaller0: entered promiscuous mode
[   90.364820][ T6700] syzkaller0: entered allmulticast mode
[   90.416642][ T6693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.420519][ T6693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.520318][ T6693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.524257][ T6693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.592239][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   90.614788][ T6693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.625329][ T6693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.671534][ T6703] ipvlan2: entered allmulticast mode
[   90.674174][ T6703] gretap0: entered allmulticast mode
[   90.756204][ T5479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.763219][ T5479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.806310][ T5479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.816499][ T5479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.832339][ T5479] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.835752][ T5479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.858040][ T5479] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.861863][ T5479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.006599][ T6715] dvmrp0: entered allmulticast mode
[   91.082785][ T6717] netlink: 'syz.1.226': attribute type 1 has an invalid length.
[   91.090443][ T6719] netlink: 124 bytes leftover after parsing attributes in process `syz.2.227'.
[   91.102100][ T6720] netlink: 'syz.2.227': attribute type 1 has an invalid length.
[   91.161462][ T6722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.164952][ T6722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.194271][ T6730] netlink: 'syz.2.229': attribute type 4 has an invalid length.
[   91.199150][ T6730] netlink: 'syz.2.229': attribute type 4 has an invalid length.
[   91.242567][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'.
[   91.256013][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'.
[   91.380572][ T6742] macvtap1: entered promiscuous mode
[   91.383267][ T6742] macvtap1: entered allmulticast mode
[   91.385473][ T6742] veth1_vlan: entered allmulticast mode
[   91.408637][ T6742] macvtap2: entered promiscuous mode
[   91.410676][ T6742] macvtap2: entered allmulticast mode
[   91.721442][ T6763] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   91.726127][ T6764] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   91.801680][ T6765] bond0: entered promiscuous mode
[   91.806026][ T6765] batadv0: entered promiscuous mode
[   91.812299][ T6765] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   91.830276][ T6765] 8021q: adding VLAN 0 to HW filter on device hsr1
[   91.838094][ T6765] bond0: left promiscuous mode
[   91.843349][ T6765] batadv0: left promiscuous mode
[   91.894100][ T6770] ipvlan2: entered allmulticast mode
[   91.895913][ T6770] gretap0: entered allmulticast mode
[   91.974700][ T6773] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   92.067827][ T6777] bond3: entered promiscuous mode
[   92.069985][ T6777] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.083112][ T6777] bond3: entered allmulticast mode
[   92.098880][ T6777] bond3: (slave bridge1): making interface the new active one
[   92.101598][ T6777] bridge1: entered promiscuous mode
[   92.103429][ T6777] bridge1: entered allmulticast mode
[   92.108210][ T6777] bond3: (slave bridge1): Enslaving as an active interface with an up link
[   92.191296][ T6772] nbd0: detected capacity change from 0 to 63
[   92.197132][ T6783] block nbd0: Receive control failed (result -32)
[   92.200040][   T56] block nbd0: Receive control failed (result -32)
[   92.210831][ T6036] block nbd0: Send control failed (result -32)
[   92.216732][ T6036] block nbd0: Request send failed, requeueing
[   92.229018][ T6036] block nbd0: Dead connection, failed to find a fallback
[   92.233275][  T643] block nbd0: Dead connection, failed to find a fallback
[   92.236110][  T643] block nbd0: shutting down sockets
[   92.238047][  T643] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.243746][  T643] Buffer I/O error on dev nbd0, logical block 0, async page read
[   92.247046][ T6036] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.250717][ T6036] Buffer I/O error on dev nbd0, logical block 1, async page read
[   92.254936][ T6036] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.260413][ T6036] Buffer I/O error on dev nbd0, logical block 2, async page read
[   92.267432][ T6036] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.270281][ T6036] Buffer I/O error on dev nbd0, logical block 3, async page read
[   92.273841][ T6036] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.277739][ T6036] Buffer I/O error on dev nbd0, logical block 0, async page read
[   92.280317][ T6036] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.286198][ T6036] Buffer I/O error on dev nbd0, logical block 1, async page read
[   92.289959][ T6788] gretap0: refused to change device tx_queue_len
[   92.292777][ T6788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   92.292931][ T6036] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.312950][ T6036] Buffer I/O error on dev nbd0, logical block 2, async page read
[   92.324533][ T6036] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.327795][ T6036] Buffer I/O error on dev nbd0, logical block 3, async page read
[   92.330297][ T6036] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.333343][ T6036] Buffer I/O error on dev nbd0, logical block 0, async page read
[   92.335859][ T6036] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.338691][ T6036] Buffer I/O error on dev nbd0, logical block 1, async page read
[   92.348135][ T6036] ldm_validate_partition_table(): Disk read failed.
[   92.357030][ T6036] Dev nbd0: unable to read RDB block 0
[   92.360102][ T6036]  nbd0: unable to read partition table
[   92.375177][ T6036] ldm_validate_partition_table(): Disk read failed.
[   92.385494][ T6036] Dev nbd0: unable to read RDB block 0
[   92.389890][ T6036]  nbd0: unable to read partition table
[   92.558493][ T6806] bond4: entered promiscuous mode
[   92.560476][ T6806] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.607283][ T6806] bond4: left promiscuous mode
[   92.608870][ T6806] bond4: entered allmulticast mode
[   92.637912][ T6806] bond4: (slave bridge2): making interface the new active one
[   92.640401][ T6806] bridge2: entered allmulticast mode
[   92.644331][ T6806] bond4: (slave bridge2): Enslaving as an active interface with an up link
[   92.724473][ T6816] xt_hashlimit: size too large, truncated to 1048576
[   92.922913][ T6816] bridge_slave_0 (unregistering): left allmulticast mode
[   92.926802][ T6816] bridge_slave_0 (unregistering): left promiscuous mode
[   92.929420][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.184169][ T6832] dummy0: entered promiscuous mode
[   93.187415][ T6832] dummy0: entered allmulticast mode
[   93.665287][ T6836] validate_nla: 5 callbacks suppressed
[   93.665299][ T6836] netlink: 'syz.2.257': attribute type 7 has an invalid length.
[   94.068351][ T6854] tipc: Started in network mode
[   94.072552][ T6854] tipc: Node identity d6d7cac05e24, cluster identity 4711
[   94.075567][ T6854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.213012][ T6865] netlink: del zone limit has 8 unknown bytes
[   94.339200][ T6874] bridge0: port 1(vlan4) entered blocking state
[   94.341988][ T6874] bridge0: port 1(vlan4) entered disabled state
[   94.344812][ T6874] vlan4: entered allmulticast mode
[   94.346887][ T6874] geneve0: entered allmulticast mode
[   94.349433][ T6874] vlan4: entered promiscuous mode
[   94.350966][ T6874] geneve0: entered promiscuous mode
[   94.573568][   T10] IPVS: starting estimator thread 0...
[   94.596912][ T6882] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   94.606905][ T6869] __nla_validate_parse: 18 callbacks suppressed
[   94.606917][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'.
[   94.627295][ T6869] bond0: (slave bond_slave_1): Releasing backup interface
[   94.660787][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.271'.
[   94.671567][ T6890] IPVS: using max 64 ests per chain, 153600 per kthread
[   94.850470][ T6900] veth0_to_bond: left allmulticast mode
[   94.866524][ T6900] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   94.887962][ T6900] syzkaller0: entered promiscuous mode
[   94.890505][ T6900] syzkaller0: entered allmulticast mode
[   94.911958][ T6902] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.273'.
[   95.090101][ T6177] tipc: Node number set to 2297678528
[   96.156343][ T6945] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   96.214353][ T6945] 8021q: adding VLAN 0 to HW filter on device bond8
[   96.262851][ T6945] bond8: (slave gretap2): making interface the new active one
[   96.267840][ T6945] bond8: (slave gretap2): Enslaving as an active interface with an up link
[   96.390631][ T6939] xt_NFQUEUE: number of total queues is 0
[   96.649453][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'.
[   96.991428][ T6946] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   97.050449][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'.
[   97.054498][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'.
[   97.235879][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'.
[   97.440873][ T6979] tipc: Enabling of bearer <eth:3yzjaller0> rejected, failed to enable media
[   97.475563][ T6981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.510413][ T6983] geneve3: entered promiscuous mode
[   97.513294][ T5666] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.516397][ T5666] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.523228][ T5666] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.537292][ T5666] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.588958][ T6987] netlink: 'syz.2.295': attribute type 21 has an invalid length.
[   97.591537][ T6987] IPv6: NLM_F_CREATE should be specified when creating new route
[   97.636211][ T6918] Set syz1 is full, maxelem 65536 reached
[   97.692409][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[   97.721930][ T6993] bond6: option broadcast_neighbor: invalid value (30)
[   97.726677][ T6993] bond6 (unregistering): Released all slaves
[   97.831219][ T6999] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.834957][ T6999] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.858820][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[   97.880320][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[   97.884055][ T6991] "syz.1.297" (6991) uses obsolete ecb(arc4) skcipher
[   98.221359][ T5000] Bluetooth: hci1: command 0x0401 tx timeout
[   98.329041][ T7023] tipc: Started in network mode
[   98.330896][ T7023] tipc: Node identity 8a4839abf4d2, cluster identity 4711
[   98.334217][ T7023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.337959][ T7023] syzkaller0: entered promiscuous mode
[   98.339983][ T7023] syzkaller0: entered allmulticast mode
[   98.346453][ T7023] netem: change failed
[   98.350975][ T7023] tipc: Resetting bearer <eth:syzkaller0>
[   98.355062][ T7022] tipc: Resetting bearer <eth:syzkaller0>
[   98.365590][ T7022] tipc: Disabling bearer <eth:syzkaller0>
[   98.732798][ T7032] netlink: 'syz.2.308': attribute type 12 has an invalid length.
[   98.754891][ T7032] netlink: 'syz.2.308': attribute type 39 has an invalid length.
[   99.053119][ T7047] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   99.118040][ T7050] dummy0: left promiscuous mode
[   99.121323][ T7050] dummy0: left allmulticast mode
[   99.128650][ T7050] bond2: left promiscuous mode
[   99.130620][ T7050] bridge1: left promiscuous mode
[   99.135754][ T7050] vti0: left promiscuous mode
[   99.137635][ T7050] vti0: left allmulticast mode
[   99.139700][ T7050] tipc: Resetting bearer <eth:syzkaller0>
[   99.145506][ T7050] syzkaller0: left promiscuous mode
[   99.150496][ T7050] syzkaller0: left allmulticast mode
[   99.157287][ T7050] bond4: left allmulticast mode
[   99.163247][ T7050] bond5: left promiscuous mode
[   99.168163][ T7050] bridge4: left promiscuous mode
[   99.182858][ T7050] bridge5: left promiscuous mode
[   99.185131][ T7050] bridge5: left allmulticast mode
[   99.478557][ T7066] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[   99.506714][ T7066] veth3: entered allmulticast mode
[   99.622354][ T7069] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   99.651917][ T7069] bond9: entered promiscuous mode
[   99.654500][ T7069] 8021q: adding VLAN 0 to HW filter on device bond9
[   99.689214][ T7069] 8021q: adding VLAN 0 to HW filter on device bond9
[   99.704616][ T7069] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address
[   99.710437][ T7069] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[   99.718621][ T7069] bond9: (slave ip6gre2): making interface the new active one
[   99.730401][ T7069] ip6gre2: entered promiscuous mode
[   99.734680][ T7069] bond9: (slave ip6gre2): Enslaving as an active interface with an up link
[   99.750544][ T7072] pimreg: entered allmulticast mode
[   99.902392][ T7086] __nla_validate_parse: 10 callbacks suppressed
[   99.902410][ T7086] netlink: 232 bytes leftover after parsing attributes in process `syz.1.323'.
[   99.944007][ T7089] netlink: 'syz.0.324': attribute type 1 has an invalid length.
[   99.976187][ T7089] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.982027][ T7086] syzkaller0: entered promiscuous mode
[   99.984680][ T7086] syzkaller0: entered allmulticast mode
[  100.149260][ T7103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.156123][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.188096][   T33] audit: type=1804 audit(1778543611.665:5): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.327" name="/newroot/114/memory.events" dev="tmpfs" ino=607 res=1 errno=0
[  100.206508][   T33] audit: type=1800 audit(1778543611.665:6): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="memory.events" dev="tmpfs" ino=607 res=0 errno=0
[  100.221758][ T7108] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[  100.275099][ T7111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.289522][ T7101] bond8 (unregistering): Released all slaves
[  100.326412][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.355313][ T7103] veth2: entered promiscuous mode
[  100.357476][ T7103] veth2: entered allmulticast mode
[  100.378880][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.389527][ T7103] veth3: entered promiscuous mode
[  100.509036][ T7118] netlink: 'syz.1.330': attribute type 21 has an invalid length.
[  100.529055][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'.
[  100.662443][ T7134] netlink: 'syz.1.332': attribute type 10 has an invalid length.
[  100.760170][ T7150] netlink: 'syz.1.336': attribute type 3 has an invalid length.
[  100.770523][ T7150] netlink: 'syz.1.336': attribute type 1 has an invalid length.
[  100.779376][ T7150] netlink: 232 bytes leftover after parsing attributes in process `syz.1.336'.
[  100.836319][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[  100.861796][ T7150] : renamed from bond0 (while UP)
[  100.944119][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[  100.959390][   T33] audit: type=1800 audit(1778543612.435:7): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="memory.events" dev="tmpfs" ino=638 res=0 errno=0
[  101.064375][ T7175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  101.136911][ T7183] bond0: entered promiscuous mode
[  101.138949][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.319992][ T7190] bond5: (slave geneve3): making interface the new active one
[  101.325426][ T7190] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  101.328604][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  101.332125][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  101.335352][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  101.338469][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  101.560171][ T7197] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.604648][ T7197] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.674006][ T7197] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.754351][ T7197] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.835250][ T7213] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  101.856335][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.881499][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.895848][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.907791][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.225583][ T7232] sctp: [Deprecated]: syz.2.355 (pid 7232) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.225583][ T7232] Use struct sctp_sack_info instead
[  102.315381][ T7239] sit1: entered allmulticast mode
[  102.529389][ T7250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.838966][ T7267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.967289][ T7284] smc: net device veth1_to_team applied user defined pnetid SYZ2
[  103.043032][ T7292] syzkaller1: entered promiscuous mode
[  103.045185][ T7292] syzkaller1: entered allmulticast mode
[  103.291969][ T7299] bond8: entered promiscuous mode
[  103.294781][ T7299] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.321792][ T7299] bond8: (slave bridge7): making interface the new active one
[  103.324856][ T7299] bridge7: entered promiscuous mode
[  103.328168][ T7299] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  103.476554][ T7308] syzkaller1: entered promiscuous mode
[  103.478647][ T7308] syzkaller1: entered allmulticast mode
[  103.513306][ T7310] bridge0: Device is already in use.
[  103.556011][ T7315] syzkaller0: entered promiscuous mode
[  103.558271][ T7315] syzkaller0: entered allmulticast mode
[  103.613737][ T7318] pim6reg: entered allmulticast mode
[  103.679921][ T7322] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  103.682035][ T7326] bond6: entered promiscuous mode
[  103.687819][ T7326] bond6: entered allmulticast mode
[  103.690183][ T7326] 8021q: adding VLAN 0 to HW filter on device bond6
[  103.750232][ T7334] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20003
[  103.804917][ T7338] bond10: (slave bond_slave_1): Device is not our slave
[  103.807938][ T7338] bond10: option active_slave: invalid value (bond_slave_1)
[  103.814048][ T7338] bond10 (unregistering): Released all slaves
[  103.819118][ T7341] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20001
[  103.970274][ T7344] bond9: option arp_all_targets: invalid value (129)
[  103.977777][ T7344] bond9 (unregistering): Released all slaves
[  104.199898][ T7366] validate_nla: 4 callbacks suppressed
[  104.199922][ T7366] netlink: 'syz.1.393': attribute type 12 has an invalid length.
[  104.227605][ T7364] bond10: (slave bridge3): Enslaving as an active interface with an up link
[  104.417605][ T7380] xfrm0: entered promiscuous mode
[  104.420042][ T7380] xfrm0: entered allmulticast mode
[  104.459455][ T7385] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[  104.468660][ T7385] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  104.540380][ T7393] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  104.556334][ T7395] tc_dump_action: action bad kind
[  104.606848][ T7393] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.619178][ T7402] vlan2: entered allmulticast mode
[  104.622020][ T7402] bond9: entered allmulticast mode
[  104.630320][ T7401] vlan5: entered promiscuous mode
[  104.632854][ T7401] batadv0: entered promiscuous mode
[  104.656557][ T7393] bond9: (slave geneve2): making interface the new active one
[  104.659256][ T7393] geneve2: entered allmulticast mode
[  104.664211][ T7393] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  104.679122][ T6056] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.698996][ T6056] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.702239][ T6056] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.713469][ T6056] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.760363][ T7409] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[  104.790765][ T7409] bond7: entered promiscuous mode
[  104.794155][ T7409] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.817175][ T7409] ipvlan2: entered allmulticast mode
[  104.819346][ T7409] bond7: entered allmulticast mode
[  105.015208][ T7431] netlink: 'syz.1.412': attribute type 1 has an invalid length.
[  105.033093][ T7433] netlink: 'syz.2.411': attribute type 1 has an invalid length.
[  105.051867][ T7433] __nla_validate_parse: 34 callbacks suppressed
[  105.051884][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[  105.060805][ T7431] bond8: entered promiscuous mode
[  105.063966][ T7431] 8021q: adding VLAN 0 to HW filter on device bond8
[  105.076710][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[  105.085186][ T7431] vlan6: entered allmulticast mode
[  105.087033][ T7431] bond8: entered allmulticast mode
[  105.102546][ T7431] bond8: (slave bridge3): making interface the new active one
[  105.105386][ T7431] bridge3: entered promiscuous mode
[  105.107644][ T7431] bridge3: entered allmulticast mode
[  105.113435][ T7431] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  105.154556][ T7438] macvtap1: entered promiscuous mode
[  105.156810][ T7438] macvtap1: entered allmulticast mode
[  105.158588][ T7438] veth1_vlan: entered allmulticast mode
[  105.169569][ T7438] macvtap2: entered promiscuous mode
[  105.173324][ T7438] macvtap2: entered allmulticast mode
[  105.279791][ T7448] bridge0: port 3(erspan0) entered blocking state
[  105.289741][ T7448] bridge0: port 3(erspan0) entered disabled state
[  105.292935][ T7448] erspan0: entered allmulticast mode
[  105.299874][ T7448] erspan0: entered promiscuous mode
[  105.309215][ T7443] pim6reg1: entered promiscuous mode
[  105.311668][ T7443] pim6reg1: entered allmulticast mode
[  105.333091][ T7448] erspan0: left allmulticast mode
[  105.335135][ T7448] erspan0: left promiscuous mode
[  105.339205][ T7448] bridge0: port 3(erspan0) entered disabled state
[  105.403543][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'.
[  105.508715][ T7456] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  105.513061][ T7456] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  105.519756][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'.
[  105.533881][ T7458] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[  105.581480][ T7458] bond9: entered promiscuous mode
[  105.586457][ T7458] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.637604][ T7458] bond9: (slave bridge4): making interface the new active one
[  105.640881][ T7458] bridge4: entered promiscuous mode
[  105.643853][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'.
[  105.647863][ T7458] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  105.719638][ T7473] xt_hashlimit: size too large, truncated to 1048576
[  105.817807][ T7475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.199460][ T7500] netlink: 'syz.0.432': attribute type 4 has an invalid length.
[  106.204316][ T7503] netlink: 'syz.0.432': attribute type 4 has an invalid length.
[  106.227080][ T7500] tipc: Resetting bearer <eth:syzkaller0>
[  106.229794][ T7486] netlink: 68 bytes leftover after parsing attributes in process `syz.1.427'.
[  106.250332][ T7500] veth1_vlan: left allmulticast mode
[  106.260719][ T5666] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.265783][ T5666] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.272557][ T5666] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.277628][ T5666] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.442993][ T7515] bond10 (unregistering): Released all slaves
[  106.488027][ T7523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.495444][ T7516] bond10 (unregistering): Released all slaves
[  106.520078][ T7521] IPv6: sit1: Disabled Multicast RS
[  106.924889][ T7545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.928646][ T7545] syzkaller0: entered promiscuous mode
[  106.930888][ T7545] syzkaller0: entered allmulticast mode
[  106.949129][ T7545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.441'.
[  106.960649][ T7545] tipc: Resetting bearer <eth:syzkaller0>
[  106.966467][ T7544] tipc: Resetting bearer <eth:syzkaller0>
[  106.983593][ T7544] tipc: Disabling bearer <eth:syzkaller0>
[  107.056745][ T7549] sctp: [Deprecated]: syz.2.443 (pid 7549) Use of int in max_burst socket option.
[  107.056745][ T7549] Use struct sctp_assoc_value instead
[  107.065060][ T7547] syzkaller1: entered promiscuous mode
[  107.068255][ T7547] syzkaller1: entered allmulticast mode
[  107.228516][ T7551] netlink: 'syz.0.444': attribute type 1 has an invalid length.
[  107.297605][ T7549] ipvlan0: entered promiscuous mode
[  107.363944][ T7551] bond10: entered promiscuous mode
[  107.368176][ T7551] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.409480][ T7553] bond10: (slave bridge8): making interface the new active one
[  107.412988][ T7553] bridge8: entered promiscuous mode
[  107.416901][ T7553] bond10: (slave bridge8): Enslaving as an active interface with an up link
[  107.440846][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.447908][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.457102][ T7556] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.460565][ T7556] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  107.474584][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'.
[  107.480374][ T7561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.717395][ T7585] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  107.953589][ T6183] IPVS: starting estimator thread 0...
[  107.965895][ T7609] bridge0: port 3(vlan3) entered blocking state
[  107.968336][ T7609] bridge0: port 3(vlan3) entered disabled state
[  107.970742][ T7609] vlan3: entered allmulticast mode
[  107.974733][ T7609] bridge0: entered allmulticast mode
[  107.978931][ T7609] vlan3: left allmulticast mode
[  107.980936][ T7609] bridge0: left allmulticast mode
[  108.061264][ T7611] IPVS: using max 64 ests per chain, 153600 per kthread
[  108.066804][ T7613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.070825][ T7613] syzkaller0: entered promiscuous mode
[  108.074697][ T7613] syzkaller0: entered allmulticast mode
[  108.102022][ T7613] tipc: MTU too low for tipc bearer
[  108.109286][ T7612] tipc: Resetting bearer <eth:syzkaller0>
[  108.148841][ T7612] tipc: Disabling bearer <eth:syzkaller0>
[  108.267341][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'.
[  108.357821][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'.
[  108.712228][ T7665] vlan0: entered promiscuous mode
[  108.714310][ T7665] batadv0: entered promiscuous mode
[  108.745071][ T7669] bond11: entered promiscuous mode
[  108.747637][ T7669] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.770429][ T7669] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.789003][ T7669] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  108.800420][ T7669] bond11: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  108.819468][ T7669] bond11: (slave vcan1): making interface the new active one
[  108.822561][ T7669] vcan1: entered promiscuous mode
[  108.826095][ T7669] bond11: (slave vcan1): Enslaving as an active interface with an up link
[  108.852470][ T7676] vlan7: entered promiscuous mode
[  108.854669][ T7676] veth0: entered promiscuous mode
[  108.954240][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.958026][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.973862][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.990776][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.047784][ T7689] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  109.052740][ T7688] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  109.052958][ T7689] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  109.055682][ T7688] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  109.552573][ T7709] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.562822][ T7709] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.774728][ T5666] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.778424][ T5666] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.782822][ T5666] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.787210][ T5666] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.044371][ T7743] syzkaller1: tun_chr_ioctl cmd 1074025673
[  110.048724][ T7742] validate_nla: 7 callbacks suppressed
[  110.048732][ T7742] netlink: 'syz.2.491': attribute type 1 has an invalid length.
[  110.084910][ T7743] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  110.088804][ T7743] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  110.114745][ T7742] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  110.118369][ T7742] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  110.129276][ T7745] __nla_validate_parse: 110 callbacks suppressed
[  110.129287][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.138103][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.143234][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.147579][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.150351][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.155067][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.157848][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.160566][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.163292][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.166273][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'.
[  110.306513][ T7756] bridge0: port 3(erspan0) entered blocking state
[  110.311933][ T7756] bridge0: port 3(erspan0) entered disabled state
[  110.316341][ T7756] erspan0: entered allmulticast mode
[  110.322699][ T7756] erspan0: entered promiscuous mode
[  110.326653][ T7756] erspan0: left allmulticast mode
[  110.328685][ T7756] erspan0: left promiscuous mode
[  110.332911][ T7756] bridge0: port 3(erspan0) entered disabled state
[  110.704337][ T7784] sctp: [Deprecated]: syz.0.499 (pid 7784) Use of int in maxseg socket option.
[  110.704337][ T7784] Use struct sctp_assoc_value instead
[  110.790822][ T7794] erspan1: entered promiscuous mode
[  110.793210][ T7794] erspan1: entered allmulticast mode
[  110.831511][ T7798] netlink: 'syz.0.504': attribute type 1 has an invalid length.
[  110.874177][ T7798] bond13: (slave bridge9): making interface the new active one
[  110.876854][ T7798] bond13: (slave bridge9): Enslaving as an active interface with an up link
[  110.879626][ T7801] syzkaller1: entered promiscuous mode
[  110.881949][ T7801] syzkaller1: entered allmulticast mode
[  111.012205][ T7806] 8021q: adding VLAN 0 to HW filter on device macsec1
[  111.344052][ T7832] syzkaller1: entered promiscuous mode
[  111.346378][ T7832] syzkaller1: entered allmulticast mode
[  111.355124][ T7832] veth0_to_bond: left allmulticast mode
[  111.362278][ T7832] bond1: left promiscuous mode
[  111.364336][ T7832] bond2: left promiscuous mode
[  111.366402][ T7832] vlan2: left allmulticast mode
[  111.368476][ T7832] bond2: left allmulticast mode
[  111.370266][ T7832] bond3: left promiscuous mode
[  111.372091][ T7832] bridge2: left promiscuous mode
[  111.374770][ T7832] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  111.377345][ T7832] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  111.380319][ T7832] geneve3: left promiscuous mode
[  111.382834][ T7832] bond9: left promiscuous mode
[  111.384734][ T7832] ip6gre2: left promiscuous mode
[  111.386976][ T7832] veth2: left promiscuous mode
[  111.388950][ T7832] veth2: left allmulticast mode
[  111.391306][ T7832] veth3: left promiscuous mode
[  111.393519][ T7832] sit1: left allmulticast mode
[  111.395749][ T7832] ipvlan0: left promiscuous mode
[  111.398097][ T7832] vlan0: left promiscuous mode
[  111.399621][ T7832] batadv0: left promiscuous mode
[  111.405162][ T7832] syzkaller1: left promiscuous mode
[  111.407910][ T7832] syzkaller1: left allmulticast mode
[  111.418143][ T7836] ip6gre0: Caught tx_queue_len zero misconfig
[  111.425249][ T7836] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  111.510998][ T7840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.519637][ T7840] syzkaller0: entered promiscuous mode
[  111.524833][ T7840] syzkaller0: entered allmulticast mode
[  111.543591][ T7839] tipc: Resetting bearer <eth:syzkaller0>
[  111.574053][ T7839] tipc: Disabling bearer <eth:syzkaller0>
[  111.741325][ T7854] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[  111.790642][ T7857] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  111.820814][ T7859] bond13: entered allmulticast mode
[  112.135500][ T7876] Set syz1 is full, maxelem 65536 reached
[  112.217233][ T7881] vlan1: entered promiscuous mode
[  112.219342][ T7881] bridge0: entered promiscuous mode
[  112.335253][ T7886] bond14: entered promiscuous mode
[  112.337662][ T7886] 8021q: adding VLAN 0 to HW filter on device bond14
[  112.387694][ T7889] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  112.399588][ T7889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.653256][ T7908] bond15: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  112.665116][ T7908] bond15 (unregistering): Released all slaves
[  112.793831][ T7916] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  112.843707][ T7920] syzkaller1: tun_chr_ioctl cmd 1074025677
[  112.845671][ T7920] syzkaller1: linktype set to 805
[  115.801482][ T6174] tipc: Node number set to 3579099029
[  115.853322][ T7928] netlink: 'syz.1.537': attribute type 8 has an invalid length.
[  115.878274][ T7930] __nla_validate_parse: 201 callbacks suppressed
[  115.878284][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'.
[  115.994106][ T7939] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  116.030277][ T7940] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  116.035619][ T7937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.539'.
[  116.073426][ T7937] syzkaller1: entered promiscuous mode
[  116.075676][ T7937] syzkaller1: entered allmulticast mode
[  116.116610][ T7950] netlink: 'syz.0.543': attribute type 1 has an invalid length.
[  116.358363][ T7966] syzkaller0: left promiscuous mode
[  116.363459][ T7966] syzkaller0: left allmulticast mode
[  116.375536][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'.
[  116.434591][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'.
[  116.513904][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'.
[  116.550643][ T7977] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[  116.645473][ T7980] erspan0: entered promiscuous mode
[  116.647695][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'.
[  117.018901][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'.
[  117.044127][ T8002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.556'.
[  117.054287][ T8002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.556'.
[  117.063221][ T8002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.556'.
[  117.109633][ T8005] 5: entered promiscuous mode
[  117.254098][ T8020] netlink: 'syz.0.560': attribute type 1 has an invalid length.
[  117.323996][ T8020] bond15: entered promiscuous mode
[  117.334148][ T8020] 8021q: adding VLAN 0 to HW filter on device bond15
[  117.384477][ T8020] bond15: (slave bridge10): making interface the new active one
[  117.394393][ T8020] bridge10: entered promiscuous mode
[  117.401795][ T8020] bond15: (slave bridge10): Enslaving as an active interface with an up link
[  117.725134][ T8050] team0 (unregistering): Port device team_slave_0 removed
[  117.728904][ T8050] team0 (unregistering): Port device team_slave_1 removed
[  117.796470][ T8057] netlink: 'syz.0.571': attribute type 10 has an invalid length.
[  117.851025][ T8059] netlink: 'syz.1.572': attribute type 1 has an invalid length.
[  117.867124][ T8059] 8021q: adding VLAN 0 to HW filter on device bond13
[  117.869925][ T8060] veth0: entered promiscuous mode
[  117.876459][ T8060] bond0: entered promiscuous mode
[  117.879456][ T8060] bond_slave_0: entered promiscuous mode
[  117.888562][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv1
[  117.903935][ T8059] bond13: (slave batadv1): making interface the new active one
[  117.907453][ T8059] bond13: (slave batadv1): Enslaving as an active interface with an up link
[  117.952479][ T8064] syzkaller0: entered promiscuous mode
[  117.955722][ T8064] syzkaller0: entered allmulticast mode
[  117.958627][ T8064] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  117.958741][ T8056] bond0: left promiscuous mode
[  117.964627][ T8056] bond_slave_0: left promiscuous mode
[  117.966942][ T8056] veth0: left promiscuous mode
[  118.665547][ T8133] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  118.687539][ T8133] bond16: entered promiscuous mode
[  118.689825][ T8133] 8021q: adding VLAN 0 to HW filter on device bond16
[  118.717528][ T8133] bond16: (slave bridge11): making interface the new active one
[  118.720761][ T8133] bridge11: entered promiscuous mode
[  118.725348][ T8133] bond16: (slave bridge11): Enslaving as an active interface with an up link
[  118.791553][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.801293][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.803984][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.807787][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.880356][ T8151] netlink: 'syz.1.592': attribute type 12 has an invalid length.
[  118.939564][ T8152] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  119.103139][ T8172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.111313][ T8172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.186308][ T8169] syzkaller0: entered promiscuous mode
[  119.188074][ T8169] syzkaller0: entered allmulticast mode
[  119.229213][ T8164] syzkaller1: entered promiscuous mode
[  119.231389][ T8164] syzkaller1: entered allmulticast mode
[  119.496247][ T8180] bond14: entered promiscuous mode
[  119.498420][ T8180] 8021q: adding VLAN 0 to HW filter on device bond14
[  119.524356][ T8180] bond14: (slave bridge6): making interface the new active one
[  119.527379][ T8180] bridge6: entered promiscuous mode
[  119.530107][ T8180] bond14: (slave bridge6): Enslaving as an active interface with an up link
[  122.018831][ T8175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.574213][ T8186] bond0: (slave dummy0): Releasing backup interface
[  122.594716][ T8187] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  122.664271][ T8191] __nla_validate_parse: 25 callbacks suppressed
[  122.664283][ T8191] netlink: 3 bytes leftover after parsing attributes in process `syz.1.601'.
[  122.788184][ T8201] netlink: 292 bytes leftover after parsing attributes in process `syz.0.603'.
[  122.837530][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.878569][ T8208] validate_nla: 3 callbacks suppressed
[  122.878580][ T8208] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  122.888162][ T8208] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  122.891635][ T8206] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.605'.
[  123.051348][ T8218] tipc: Resetting bearer <eth:syzkaller0>
[  123.088455][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.097153][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.103633][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.107598][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.405432][ T8235] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  123.408873][ T8235] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  123.411876][ T8235] tipc: Resetting bearer <eth:syzkaller0>
[  123.640394][ T8237] netlink: 'syz.0.614': attribute type 9 has an invalid length.
[  123.868605][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  123.910294][ T8255] 8021q: adding VLAN 0 to HW filter on device bond17
[  123.925747][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  124.061839][ T8264] netlink: 'syz.2.622': attribute type 8 has an invalid length.
[  124.106492][ T8261] 5n: entered promiscuous mode
[  124.118033][ T8261] netlink: 'syz.0.621': attribute type 1 has an invalid length.
[  124.127485][ T8261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.621'.
[  124.159740][ T8271] pim6reg1: entered promiscuous mode
[  124.161941][ T8271] pim6reg1: entered allmulticast mode
[  124.270283][ T8280] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  124.333486][ T8274] tipc: Trying to set illegal importance in message
[  124.353949][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'.
[  124.777880][ T8291] dvmrp8: entered allmulticast mode
[  124.820218][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'.
[  124.824827][ T6056] dvmrp8: left allmulticast mode
[  124.904363][ T8299] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  125.004681][ T8299] bond15: entered promiscuous mode
[  125.017067][ T8299] 8021q: adding VLAN 0 to HW filter on device bond15
[  125.044444][ T8305] bond15: (slave bridge9): making interface the new active one
[  125.047546][ T8305] bridge9: entered promiscuous mode
[  125.050751][ T8305] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  125.122817][ T8308] netlink: 'syz.2.634': attribute type 58 has an invalid length.
[  127.401570][ T8285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.496668][ T8328] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  127.516872][ T8326] veth4: entered allmulticast mode
[  127.578608][ T8328] bond16: entered promiscuous mode
[  127.581579][ T8328] 8021q: adding VLAN 0 to HW filter on device bond16
[  127.628274][ T8328] bond16: (slave bridge10): making interface the new active one
[  127.634579][ T8328] bridge10: entered promiscuous mode
[  127.636975][ T8328] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  127.639098][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  127.662118][ T8326] syzkaller0: entered promiscuous mode
[  127.668264][ T8326] syzkaller0: entered allmulticast mode
[  127.706594][ T8339] openvswitch: netlink: IPv4 tun info is not correct
[  127.728514][ T8339] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  127.734576][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.2.643 Not tainted syzkaller #0 PREEMPT(full) 
[  127.734599][ T8339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.734610][ T8339] Call Trace:
[  127.734616][ T8339]  <TASK>
[  127.734623][ T8339]  dump_stack_lvl+0xe8/0x150
[  127.734648][ T8339]  sysfs_warn_dup+0x8e/0xa0
[  127.734668][ T8339]  sysfs_do_create_link_sd+0xc0/0x110
[  127.734690][ T8339]  device_add_class_symlinks+0x1cf/0x240
[  127.734719][ T8339]  device_add+0x475/0xbb0
[  127.734740][ T8339]  wiphy_register+0x1dc5/0x2dc0
[  127.734775][ T8339]  ? __pfx_wiphy_register+0x10/0x10
[  127.734796][ T8339]  ? __pfx_netdev_run_todo+0x10/0x10
[  127.734817][ T8339]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  127.734839][ T8339]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  127.734865][ T8339]  ieee80211_register_hw+0x3d82/0x4a70
[  127.734900][ T8339]  ? ieee80211_register_hw+0x1901/0x4a70
[  127.734939][ T8339]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  127.734963][ T8339]  ? __asan_memset+0x22/0x50
[  127.734980][ T8339]  ? __hrtimer_setup+0x1b7/0x260
[  127.734997][ T8339]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  127.735019][ T8339]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  127.735059][ T8339]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  127.735076][ T8339]  ? kstrndup+0xbf/0x160
[  127.735116][ T8339]  hwsim_new_radio_nl+0xf6a/0x1c00
[  127.735155][ T8339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  127.735180][ T8339]  ? rcu_is_watching+0x15/0xb0
[  127.735199][ T8339]  ? trace_kmalloc+0x2a/0xf0
[  127.735225][ T8339]  ? __nla_parse+0x40/0x60
[  127.735251][ T8339]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  127.735267][ T8339]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  127.735289][ T8339]  genl_family_rcv_msg_doit+0x22a/0x330
[  127.735311][ T8339]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  127.735338][ T8339]  ? bpf_lsm_capable+0x9/0x20
[  127.735379][ T8339]  ? security_capable+0x7e/0x2c0
[  127.735406][ T8339]  genl_rcv_msg+0x61c/0x7a0
[  127.735427][ T8339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.735442][ T8339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  127.735470][ T8339]  netlink_rcv_skb+0x232/0x4b0
[  127.735491][ T8339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.735508][ T8339]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.735541][ T8339]  ? down_read+0x270/0x2e0
[  127.735554][ T8339]  ? genl_rcv+0xd/0x40
[  127.735569][ T8339]  genl_rcv+0x28/0x40
[  127.735582][ T8339]  netlink_unicast+0x75c/0x8e0
[  127.735609][ T8339]  netlink_sendmsg+0x813/0xb40
[  127.735637][ T8339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.735661][ T8339]  ? aa_sock_msg_perm+0xf1/0x1b0
[  127.735682][ T8339]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.735710][ T8339]  ____sys_sendmsg+0x972/0x9f0
[  127.735732][ T8339]  ? __might_fault+0xaf/0x130
[  127.735758][ T8339]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.735788][ T8339]  ? import_iovec+0x73/0xa0
[  127.735812][ T8339]  ___sys_sendmsg+0x2a5/0x360
[  127.735830][ T8339]  ? __lock_acquire+0x6b5/0x2cf0
[  127.735850][ T8339]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.735876][ T8339]  ? futex_wake+0x4ac/0x580
[  127.735919][ T8339]  ? __fget_files+0x2a/0x420
[  127.735936][ T8339]  ? __fget_files+0x3a0/0x420
[  127.735963][ T8339]  __x64_sys_sendmsg+0x1bd/0x2a0
[  127.735986][ T8339]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.736019][ T8339]  ? rcu_is_watching+0x15/0xb0
[  127.736044][ T8339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.736060][ T8339]  do_syscall_64+0x15f/0xf80
[  127.736087][ T8339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.736101][ T8339] RIP: 0033:0x7f113a79cdd9
[  127.736117][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.736130][ T8339] RSP: 002b:00007f113b61e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.736147][ T8339] RAX: ffffffffffffffda RBX: 00007f113aa15fa0 RCX: 00007f113a79cdd9
[  127.736162][ T8339] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  127.736172][ T8339] RBP: 00007f113a832d69 R08: 0000000000000000 R09: 0000000000000000
[  127.736182][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.736190][ T8339] R13: 00007f113aa16038 R14: 00007f113aa15fa0 R15: 00007fff57051c58
[  127.736216][ T8339]  </TASK>
[  127.948555][ T8343] syzkaller1: entered promiscuous mode
[  127.951873][ T8343] syzkaller1: entered allmulticast mode
[  128.067843][ T8352] veth0_macvtap: entered allmulticast mode
[  128.070292][ T8352] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  128.114413][ T8356] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[  128.130393][ T8356] bond17: entered promiscuous mode
[  128.133618][ T8356] 8021q: adding VLAN 0 to HW filter on device bond17
[  128.161170][ T8356] bond17: (slave bridge11): making interface the new active one
[  128.164635][ T8356] bridge11: entered promiscuous mode
[  128.168352][ T8356] bond17: (slave bridge11): Enslaving as an active interface with an up link
[  128.418005][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[  128.421715][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[  128.588953][ T8377] syzkaller1: entered promiscuous mode
[  128.596955][ T8377] syzkaller1: entered allmulticast mode
[  128.657396][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'.
[  129.001785][ T8412] netlink: 'syz.0.661': attribute type 2 has an invalid length.
[  129.090050][ T8416] bond18: Removing last ns target with arp_interval on
[  129.110808][ T8421] bond19: entered promiscuous mode
[  129.240142][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'.
[  129.340789][ T8445] block nbd0: reconnected socket
[  129.343592][ T8445] block nbd0: reconnected socket
[  129.346573][ T8445] netlink: 'syz.0.672': attribute type 1 has an invalid length.
[  129.373298][ T8445] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.380111][ T8447] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[  129.380588][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  129.385995][ T8447] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[  129.388744][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'.
[  129.428276][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[  129.444619][ T8445] bond20 (unregistering): Released all slaves
[  129.458868][ T8452] netlink: 'syz.2.673': attribute type 1 has an invalid length.
[  129.461868][ T8452] netlink: 280 bytes leftover after parsing attributes in process `syz.2.673'.
[  129.466405][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[  129.516552][   T56] block nbd0: Receive control failed (result -32)
[  129.521422][ T6783] block nbd0: Receive control failed (result -32)
[  129.549492][ T8456] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  129.569514][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'.
[  129.639319][ T8462] netlink: 'syz.0.678': attribute type 29 has an invalid length.
[  129.649784][ T8463] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  129.690578][ T8463] bond15: entered promiscuous mode
[  129.693046][ T8463] 8021q: adding VLAN 0 to HW filter on device bond15
[  129.732791][ T8463] vlan7: entered allmulticast mode
[  129.734886][ T8463] bond15: entered allmulticast mode
[  129.749140][ T8463] bond15: (slave bridge7): making interface the new active one
[  129.751640][ T8463] bridge7: entered promiscuous mode
[  129.753747][ T8463] bridge7: entered allmulticast mode
[  129.757325][ T8463] bond15: (slave bridge7): Enslaving as an active interface with an up link
[  129.860692][ T8480] netlink: 'syz.0.683': attribute type 1 has an invalid length.
[  129.908761][ T8480] bond20: entered promiscuous mode
[  129.914680][ T8480] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.939537][ T8481] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.942929][ T8481] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address
[  129.947842][ T8481] bond20: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  129.958052][ T8481] bond20: (slave wireguard0): making interface the new active one
[  129.961903][ T8481] wireguard0: entered promiscuous mode
[  129.966767][ T8481] bond20: (slave wireguard0): Enslaving as an active interface with an up link
[  129.985594][ T8490] batadv_slave_0: entered promiscuous mode
[  129.987994][ T8490] batadv_slave_0: entered allmulticast mode
[  130.093602][ T8499] : entered promiscuous mode
[  130.128761][ T8500] 
[  130.129818][ T8500] ======================================================
[  130.132614][ T8500] WARNING: possible circular locking dependency detected
[  130.135592][ T8500] syzkaller #0 Not tainted
[  130.137405][ T8500] ------------------------------------------------------
[  130.140054][ T8500] syz.2.687/8500 is trying to acquire lock:
[  130.142278][ T8500] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.145160][ T8500] 
[  130.145160][ T8500] but task is already holding lock:
[  130.147231][ T8500] ffff8881b8f93180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  130.150194][ T8500] 
[  130.150194][ T8500] which lock already depends on the new lock.
[  130.150194][ T8500] 
[  130.154044][ T8500] 
[  130.154044][ T8500] the existing dependency chain (in reverse order) is:
[  130.157429][ T8500] 
[  130.157429][ T8500] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  130.160043][ T8500]        down_write+0x96/0x200
[  130.161532][ T8500]        kernfs_add_one+0x41/0x5c0
[  130.163364][ T8500]        kernfs_create_dir_ns+0xde/0x130
[  130.165284][ T8500]        internal_create_group+0x425/0x1180
[  130.167108][ T8500]        cpuhp_invoke_callback+0x445/0x860
[  130.168827][ T8500]        cpuhp_issue_call+0x430/0x7a0
[  130.170555][ T8500]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  130.172437][ T8500]        __cpuhp_setup_state+0x3f/0x60
[  130.174100][ T8500]        do_one_initcall+0x250/0x870
[  130.175711][ T8500]        do_initcall_level+0x104/0x190
[  130.177361][ T8500]        do_initcalls+0x59/0xa0
[  130.178814][ T8500]        kernel_init_freeable+0x2a6/0x3e0
[  130.180545][ T8500]        kernel_init+0x1d/0x1d0
[  130.182078][ T8500]        ret_from_fork+0x514/0xb70
[  130.183575][ T8500]        ret_from_fork_asm+0x1a/0x30
[  130.185256][ T8500] 
[  130.185256][ T8500] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  130.187557][ T8500] 
[  130.187557][ T8500] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  130.189880][ T8500]        cpus_read_lock+0x42/0x160
[  130.191498][ T8500]        static_key_slow_inc+0x12/0x30
[  130.193183][ T8500]        nbd_genl_reconfigure+0x132f/0x1ea0
[  130.194995][ T8500]        genl_family_rcv_msg_doit+0x22a/0x330
[  130.196851][ T8500]        genl_rcv_msg+0x61c/0x7a0
[  130.198412][ T8500]        netlink_rcv_skb+0x232/0x4b0
[  130.200166][ T8500]        genl_rcv+0x28/0x40
[  130.201571][ T8500]        netlink_unicast+0x75c/0x8e0
[  130.203177][ T8500]        netlink_sendmsg+0x813/0xb40
[  130.204717][ T8500]        ____sys_sendmsg+0x972/0x9f0
[  130.206269][ T8500]        ___sys_sendmsg+0x2a5/0x360
[  130.208176][ T8500]        __x64_sys_sendmsg+0x1bd/0x2a0
[  130.210532][ T8500]        do_syscall_64+0x15f/0xf80
[  130.212152][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.214318][ T8500] 
[  130.214318][ T8500] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  130.216868][ T8500]        __mutex_lock+0x1a3/0x1550
[  130.218659][ T8500]        nbd_queue_rq+0x37b/0x1100
[  130.220503][ T8500]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  130.223032][ T8500]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  130.225210][ T8500]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  130.227538][ T8500]        blk_mq_run_hw_queue+0x348/0x4f0
[  130.229255][ T8500]        blk_mq_dispatch_list+0xd16/0xe10
[  130.230970][ T8500]        blk_mq_flush_plug_list+0x48d/0x570
[  130.232881][ T8500]        __blk_flush_plug+0x3ed/0x4d0
[  130.234662][ T8500]        __submit_bio+0x28d/0x580
[  130.236256][ T8500]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  130.238630][ T8500]        block_read_full_folio+0x599/0x830
[  130.240668][ T8500]        filemap_read_folio+0x137/0x3b0
[  130.242412][ T8500]        do_read_cache_folio+0x358/0x590
[  130.244455][ T8500]        read_part_sector+0xb6/0x2b0
[  130.246737][ T8500]        adfspart_check_ICS+0xb1/0x960
[  130.248699][ T8500]        bdev_disk_changed+0x817/0x1770
[  130.250396][ T8500]        blkdev_get_whole+0x380/0x510
[  130.252252][ T8500]        bdev_open+0x31e/0xd30
[  130.253703][ T8500]        blkdev_open+0x470/0x610
[  130.255736][ T8500]        do_dentry_open+0x785/0x14e0
[  130.257262][ T8500]        vfs_open+0x3b/0x340
[  130.258616][ T8500]        path_openat+0x2e08/0x3860
[  130.260138][ T8500]        do_file_open+0x23e/0x4a0
[  130.261593][ T8500]        do_sys_openat2+0x113/0x200
[  130.263070][ T8500]        __x64_sys_openat+0x138/0x170
[  130.264644][ T8500]        do_syscall_64+0x15f/0xf80
[  130.266578][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.268979][ T8500] 
[  130.268979][ T8500] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  130.271497][ T8500]        __mutex_lock+0x1a3/0x1550
[  130.273241][ T8500]        nbd_queue_rq+0xc6/0x1100
[  130.274942][ T8500]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  130.277026][ T8500]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  130.279558][ T8500]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  130.281871][ T8500]        blk_mq_run_hw_queue+0x348/0x4f0
[  130.283976][ T8500]        blk_mq_dispatch_list+0xd16/0xe10
[  130.286058][ T8500]        blk_mq_flush_plug_list+0x48d/0x570
[  130.288332][ T8500]        __blk_flush_plug+0x3ed/0x4d0
[  130.290275][ T8500]        __submit_bio+0x28d/0x580
[  130.292210][ T8500]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  130.294559][ T8500]        block_read_full_folio+0x599/0x830
[  130.296876][ T8500]        filemap_read_folio+0x137/0x3b0
[  130.299105][ T8500]        do_read_cache_folio+0x358/0x590
[  130.301189][ T8500]        read_part_sector+0xb6/0x2b0
[  130.303245][ T8500]        adfspart_check_ICS+0xb1/0x960
[  130.305353][ T8500]        bdev_disk_changed+0x817/0x1770
[  130.307461][ T8500]        blkdev_get_whole+0x380/0x510
[  130.309494][ T8500]        bdev_open+0x31e/0xd30
[  130.311331][ T8500]        blkdev_open+0x470/0x610
[  130.313159][ T8500]        do_dentry_open+0x785/0x14e0
[  130.314832][ T8500]        vfs_open+0x3b/0x340
[  130.316379][ T8500]        path_openat+0x2e08/0x3860
[  130.317887][ T8500]        do_file_open+0x23e/0x4a0
[  130.319445][ T8500]        do_sys_openat2+0x113/0x200
[  130.321163][ T8500]        __x64_sys_openat+0x138/0x170
[  130.322786][ T8500]        do_syscall_64+0x15f/0xf80
[  130.324528][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.326513][ T8500] 
[  130.326513][ T8500] -> #3 (set->srcu){.+.+}-{0:0}:
[  130.328493][ T8500]        __synchronize_srcu+0xca/0x300
[  130.330072][ T8500]        elevator_switch+0x1e8/0x7a0
[  130.331632][ T8500]        elevator_change+0x2cc/0x450
[  130.333198][ T8500]        elevator_set_default+0x36c/0x430
[  130.334797][ T8500]        blk_register_queue+0x3e9/0x4e0
[  130.336446][ T8500]        __add_disk+0x677/0xd50
[  130.337771][ T8500]        add_disk_fwnode+0xfb/0x480
[  130.339199][ T8500]        nbd_dev_add+0x72c/0xb50
[  130.340637][ T8500]        nbd_init+0x168/0x1f0
[  130.342028][ T8500]        do_one_initcall+0x250/0x870
[  130.343584][ T8500]        do_initcall_level+0x104/0x190
[  130.345450][ T8500]        do_initcalls+0x59/0xa0
[  130.347516][ T8500]        kernel_init_freeable+0x2a6/0x3e0
[  130.349693][ T8500]        kernel_init+0x1d/0x1d0
[  130.351514][ T8500]        ret_from_fork+0x514/0xb70
[  130.353031][ T8500]        ret_from_fork_asm+0x1a/0x30
[  130.354915][ T8500] 
[  130.354915][ T8500] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  130.357547][ T8500]        __mutex_lock+0x1a3/0x1550
[  130.359156][ T8500]        elevator_change+0x1b3/0x450
[  130.360897][ T8500]        elevator_set_none+0xb5/0x140
[  130.362705][ T8500]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  130.364621][ T8500]        nbd_start_device+0x17f/0xb10
[  130.366242][ T8500]        nbd_genl_connect+0x165b/0x1cf0
[  130.367914][ T8500]        genl_family_rcv_msg_doit+0x22a/0x330
[  130.369735][ T8500]        genl_rcv_msg+0x61c/0x7a0
[  130.371625][ T8500]        netlink_rcv_skb+0x232/0x4b0
[  130.373493][ T8500]        genl_rcv+0x28/0x40
[  130.375308][ T8500]        netlink_unicast+0x75c/0x8e0
[  130.377343][ T8500]        netlink_sendmsg+0x813/0xb40
[  130.379595][ T8500]        ____sys_sendmsg+0x972/0x9f0
[  130.381463][ T8500]        ___sys_sendmsg+0x2a5/0x360
[  130.383137][ T8500]        __x64_sys_sendmsg+0x1bd/0x2a0
[  130.384973][ T8500]        do_syscall_64+0x15f/0xf80
[  130.386520][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.388660][ T8500] 
[  130.388660][ T8500] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  130.391411][ T8500]        blk_alloc_queue+0x546/0x680
[  130.393009][ T8500]        __blk_mq_alloc_disk+0x197/0x390
[  130.394883][ T8500]        nbd_dev_add+0x499/0xb50
[  130.396328][ T8500]        nbd_init+0x168/0x1f0
[  130.397725][ T8500]        do_one_initcall+0x250/0x870
[  130.399253][ T8500]        do_initcall_level+0x104/0x190
[  130.400814][ T8500]        do_initcalls+0x59/0xa0
[  130.402296][ T8500]        kernel_init_freeable+0x2a6/0x3e0
[  130.404178][ T8500]        kernel_init+0x1d/0x1d0
[  130.405918][ T8500]        ret_from_fork+0x514/0xb70
[  130.407811][ T8500]        ret_from_fork_asm+0x1a/0x30
[  130.409831][ T8500] 
[  130.409831][ T8500] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  130.412415][ T8500]        __lock_acquire+0x15a5/0x2cf0
[  130.414134][ T8500]        lock_acquire+0x106/0x350
[  130.415628][ T8500]        fs_reclaim_acquire+0x71/0x100
[  130.417718][ T8500]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.419858][ T8500]        alloc_inode+0xb8/0x1b0
[  130.421352][ T8500]        iget_locked+0x131/0x6a0
[  130.423147][ T8500]        kernfs_get_inode+0x4f/0x780
[  130.425082][ T8500]        kernfs_iop_lookup+0x1fe/0x320
[  130.426943][ T8500]        lookup_one_qstr_excl+0x12d/0x360
[  130.428898][ T8500]        filename_create+0x20e/0x370
[  130.430997][ T8500]        filename_mkdirat+0xd2/0x510
[  130.432779][ T8500]        __se_sys_mkdirat+0x35/0x150
[  130.434453][ T8500]        do_syscall_64+0x15f/0xf80
[  130.436021][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.437874][ T8500] 
[  130.437874][ T8500] other info that might help us debug this:
[  130.437874][ T8500] 
[  130.441045][ T8500] Chain exists of:
[  130.441045][ T8500]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  130.441045][ T8500] 
[  130.444553][ T8500]  Possible unsafe locking scenario:
[  130.444553][ T8500] 
[  130.446566][ T8500]        CPU0                    CPU1
[  130.448119][ T8500]        ----                    ----
[  130.449705][ T8500]   rlock(&root->kernfs_rwsem);
[  130.451135][ T8500]                                lock(cpuhp_state_mutex);
[  130.453191][ T8500]                                lock(&root->kernfs_rwsem);
[  130.455289][ T8500]   lock(fs_reclaim);
[  130.456461][ T8500] 
[  130.456461][ T8500]  *** DEADLOCK ***
[  130.456461][ T8500] 
[  130.458825][ T8500] 3 locks held by syz.2.687/8500:
[  130.460445][ T8500]  #0: ffff88816a970410 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  130.463455][ T8500]  #1: ffff88811cc01460 (&type->i_mutex_dir_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  130.467003][ T8500]  #2: ffff8881b8f93180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  130.470234][ T8500] 
[  130.470234][ T8500] stack backtrace:
[  130.472494][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.2.687 Not tainted syzkaller #0 PREEMPT(full) 
[  130.472506][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.472513][ T8500] Call Trace:
[  130.472518][ T8500]  <TASK>
[  130.472524][ T8500]  dump_stack_lvl+0xe8/0x150
[  130.472537][ T8500]  print_circular_bug+0x2e1/0x300
[  130.472549][ T8500]  check_noncircular+0x12e/0x150
[  130.472559][ T8500]  __lock_acquire+0x15a5/0x2cf0
[  130.472569][ T8500]  ? percpu_ref_get_many+0x19/0x140
[  130.472583][ T8500]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.472593][ T8500]  lock_acquire+0x106/0x350
[  130.472600][ T8500]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.472610][ T8500]  ? find_inode_fast+0xd2/0x550
[  130.472621][ T8500]  ? alloc_inode+0xb8/0x1b0
[  130.472628][ T8500]  fs_reclaim_acquire+0x71/0x100
[  130.472639][ T8500]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.472648][ T8500]  kmem_cache_alloc_lru_noprof+0x45/0x640
[  130.472659][ T8500]  alloc_inode+0xb8/0x1b0
[  130.472667][ T8500]  iget_locked+0x131/0x6a0
[  130.472676][ T8500]  kernfs_get_inode+0x4f/0x780
[  130.472687][ T8500]  kernfs_iop_lookup+0x1fe/0x320
[  130.472698][ T8500]  lookup_one_qstr_excl+0x12d/0x360
[  130.472709][ T8500]  filename_create+0x20e/0x370
[  130.472721][ T8500]  ? __pfx_filename_create+0x10/0x10
[  130.472732][ T8500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.472740][ T8500]  filename_mkdirat+0xd2/0x510
[  130.472751][ T8500]  ? __pfx_filename_mkdirat+0x10/0x10
[  130.472762][ T8500]  ? do_getname+0x151/0x250
[  130.472770][ T8500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.472777][ T8500]  __se_sys_mkdirat+0x35/0x150
[  130.472788][ T8500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.472795][ T8500]  do_syscall_64+0x15f/0xf80
[  130.472807][ T8500]  ? trace_irq_disable+0x3b/0x140
[  130.472819][ T8500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.472827][ T8500] RIP: 0033:0x7f113a79cdd9
[  130.472836][ T8500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.472842][ T8500] RSP: 002b:00007f113b5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  130.472852][ T8500] RAX: ffffffffffffffda RBX: 00007f113aa16090 RCX: 00007f113a79cdd9
[  130.472858][ T8500] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  130.472863][ T8500] RBP: 00007f113a832d69 R08: 0000000000000000 R09: 0000000000000000
[  130.472868][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.472872][ T8500] R13: 00007f113aa16128 R14: 00007f113aa16090 R15: 00007fff57051c58
[  130.472880][ T8500]  </TASK>
[  130.565355][ T8507] bridge_slave_0: left allmulticast mode
[  130.567756][ T8507] bridge_slave_0: left promiscuous mode
[  130.571322][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.594580][ T8507] bridge_slave_1: left allmulticast mode
[  130.596331][ T8507] bridge_slave_1: left promiscuous mode
[  130.598185][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.602861][ T8507] bond0: (slave bond_slave_0): Releasing backup interface
[  130.605647][ T8507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
