last executing test programs:

3.247057633s ago: executing program 0 (id=6318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
close(r4)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200020, 0x2, 0x0, 0x2, 0x8007, 0x80ff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000338683e1051e1e61d808000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x20008040}, 0x24004000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0xfffffffffffffed8, 0x4, 0x1, 0x0, 0x40003fc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @cmp={{}, @void}}, @NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x4000000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000000c0)=0x15, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40008000}, 0x20000000)
ioctl(r5, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)

3.127701439s ago: executing program 2 (id=6320):
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0x42, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x68, 0xe5}}, @ssid={0x0, 0x14, @random="5da7b2080c5bf1e4399978a74054cb59f5459c38"}, @mic={0x8c, 0x10, {0x31d, "01e377a76ad7", @short="3bc160b92a7c8f62"}}, @supported_rates={0x1, 0x2, [{0x48}, {0x18, 0x1}]}, @supported_rates={0x1, 0x3, [{0x16}, {0x16, 0x1}, {0x2, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x2, 0x92, 0x7, 0x5}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x3, 0x0, {0x1, 0x1ff2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x9ad, 0x8}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x1, 0x0, {0x60acedd8, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x8, 0x7, 0x7}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{<r2=>r0, &(0x7f0000000240)='nl80211\x00', 0x8000, &(0x7f0000000280)={@align=0x6, {0x1eb, 0x2, 0x8, 0x7}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x10001}, {[0x7, 0xf, 0x400, 0x101]}, 0x1, 0x2, &(0x7f0000000340)=""/2})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x355f}, {0x8, 0x15, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008001}, 0x40880) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={<r3=>0x0}, &(0x7f0000000640)=0xc) (async)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x214, 0x39, 0x800, 0x70bd25, 0x25dfdbfb, {0xf}, [@typed={0x4, 0x11d}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x99, 0x0, 0x0, @str='#[+!%[(\x00'}, @generic="ae7bd3ba3bf7b841f271b760ddbb96fa13cc475fa6dd15b1847566ea66ece52673aff1bfde3c3dbdf51b3626fa6d6928475cd74e74d1944cf58e24546cf8b1076ffb33694eb1f4c9b04388ddf5748f9e6e9e1e2ab1f07a9e4d16400f1dcc5386265e2b1bca633ee9234d05f8", @generic="66f775ea9884acc14c1bc1868809243fc77c2e9357a969955ab57a28e20d15b43f826ae275bb2eb6edd2eb7105fd5e9ea2ee55faa5ad819151bb79f1b4a2fb", @generic="a51be01e1930b1dfd2a4dab6991bc0db14e6196e94929d762e53ddc129189574908e5dc9a13109e8d6416a44f38f57d02d01a175365aff1c5bee30", @typed={0x8, 0x9e, 0x0, 0x0, @fd=r4}, @generic="c1480bc1f00880bddec269a2d22bd3bd0b31f9e00fcaa9cc95f2ac78ecc44a9bfc672a2bf655b862956636a25ae0f6ee02ef594e276b278c56a1c9e978fd98c7a19175b93c19f2a712673a6df45e0eceda3ba0d3396f0d0601dd09b63c0c908cdfef2012863628d11eeb11e6f83fa33fe079eae1bdf3c17610fb62e00474ecc562f34a08d0540ed2d1e4fd4c49bb0c7b5bad91543d460bf8b15839c0076c89cbd77f76c4d6cc6fe467c276fead8765ebb4165f9b9d9cefdacc448d32149a572f40e567303b953c0d0130f35fb0a179e582dce4e9d3da48e3a294012ee19f4ef02f06781609f1d34d514dfd648fc3185630876c4febf2f5"]}, 0x214}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
socket$key(0xf, 0x3, 0x2) (async)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000009c0)={0x1, [0xaf66]}, &(0x7f0000000a00)=0x6) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000b40)={<r5=>r2, &(0x7f0000000a40)='pci\x00', 0x400, &(0x7f0000000a80)={@_ha_fsid={[0x985, 0x81]}, {0x3, 0x4, 0xfffff001, 0x3}}, 0xe0, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)}) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000c00)={'vcan0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r8=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', <r9=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'syztnl1\x00', <r10=>0x0, 0x2f, 0x3, 0x0, 0x5b, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @mcast2, 0x20, 0x1, 0xfc, 0x9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000e40)={'tunl0\x00', &(0x7f0000000d80)={'sit0\x00', <r11=>0x0, 0x700, 0x700, 0xfffff751, 0x7fff, {{0x27, 0x4, 0x0, 0x6, 0x9c, 0x66, 0x0, 0xfc, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp={0x44, 0x28, 0x29, 0x0, 0x6, [0x4, 0x6, 0xffff5b5f, 0x91, 0x3000, 0xf9a5, 0x9, 0xffffffff, 0x100]}, @ra={0x94, 0x4}, @cipso={0x86, 0x38, 0x0, [{0x2, 0xc, "a011931462689f80908e"}, {0x0, 0xa, "1c6bcc80eb921b91"}, {0x2, 0xd, "8293a1e018d1b29166fe1f"}, {0x0, 0xd, "8c0f66a1f77f7c6073169c"}, {0x7, 0x2}]}, @rr={0x7, 0xb, 0xd2, [@private=0xa010100, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x2f, [@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'syztnl1\x00', <r12=>0x0, 0x2f, 0xfb, 0x2, 0x2, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x700, 0xb, 0xfffffffc}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1d8, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x801}, 0x8000004)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xc0208}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x1) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000001300)={0x1118, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x10e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd1}, @ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "56210803c243ebd82aebed3d907d98d7308772b94f6d87ab92b66042f4a58d05bcf72d122e6435dae8bd26bdc65a2a0a77afa32f23a2004f6b44c525995d9ae053a3f6cfe6d913da0b0ecf96517511dcd93f6d7a51ca37c4a4e80860cb1fc37b144ef319936d3d548db5fd40cee4397f5f9cee73f344cbdd0be8e8d36cbd435660cd6940b9b7d87f6ddd2624783fb1e2a0"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000025c0)={<r14=>0x0, 0x7}, &(0x7f0000002600)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000002640)={<r15=>r14, 0xa, 0x30, 0xaf95, 0x2}, &(0x7f0000002680)=0x18)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000026c0)={r15, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x3}}, 0x3, 0x9}, 0x90)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r13, 0xc0c89425, &(0x7f0000002780)={"270784e10ff953a7e03c97bae9d9a3e8", 0x0, <r16=>0x0, {0x1, 0xfff}, {0x1, 0x5}, 0x1, [0x3, 0x8, 0x7, 0x9, 0x0, 0xfff, 0x6, 0xffffffffffffff01, 0x80000000, 0x8, 0x9, 0x4, 0xffffffff7fffffff, 0xffffffffffffffff, 0x558c, 0x100000000]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000003900)={{r5}, r16, 0x4, @inherit={0x68, &(0x7f0000002880)={0x0, 0x4, 0x2, 0x1e, {0x4, 0x6, 0x23a, 0xfa, 0x6}, [0x9, 0x0, 0xe531, 0x1]}}, @devid})

3.037667877s ago: executing program 0 (id=6322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000000013449c46bddcda4ab00eb010000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4020, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r4 = socket(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={<r7=>0x0, 0x5c}, &(0x7f0000000080)=0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)={r8, 0x66, "fd4bb0df12149db84057e480806c2dc3f430f734ae19b44df8d9a17a20a6c2b1c3449ab36d7dd28bc00eb7788ebdb48cc67e0d869786ee8055322c1210a912b3a9c6765aca60cdae5aae4e74394ae360307dad7c3f7f3304967fbe8e3e61029e52a408f23345"}, &(0x7f0000000140)=0x6e)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r9, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r8, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000340)={r7, 0x7, 0x9, 0x3}, &(0x7f0000000380)=0x10)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x31}, @remote, 0x0, "40be0792183f0dbb9a1d51166daac81108f1d255ad408b42745a53a831d4f332", 0xb, 0x4, 0x4, 0x6}, 0x3c)

2.927798522s ago: executing program 2 (id=6323):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x18)
socket$inet(0x2, 0x5, 0x7)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

2.927029132s ago: executing program 1 (id=6324):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0040001000010400800000fbdbdf2500000000ea5763c06908b1fde73aca5ddd1378d01c452f6a4273ef0a5c108cb183c20b2ffc43b54c6b2ad9c9a132819f45604f6be49c805799ab21d868c1456b53badb4506521da4e205bdf725cb1d111e010a303f216fac01a5bcdc8f9b8505b0b48d6975cb95082dd0bf56a602", @ANYRES32=r1, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x884)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRESDEC=r0, @ANYBLOB="785b3bd02050f9f5ef67888ad57af48b1ecc723b90b50bb202e4f153337995db2d41c340dcd8a12e74afa24480184edbd33d049ccdc2e26cfa66e4762b4e31421c3159fc6e2f4009bd3733fb6337149b6338b1e99bd955d853c1e9e867b7eaed4221a65f397d53198172f8ca89a54f9b81c13e74a567613d240627f3cb3d103941966c737b42151c192f371107a08df6c1f392820c1443ec53846a07713fc21816b67ef2e19d222b5946c518e33663abfec3788c5b4d4e63c36051d25de495df6912a713e55db7fc35086187b7f1", @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="ade998811e16479c934ead97cc6858cc5f"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r9, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000006c0)="b9ff03006043778cff9e14f086dd070000", 0x0, 0x1000009, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000019640)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r12, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x80, @multicast}, 0x10)
poll(&(0x7f00000011c0)=[{r12, 0x2}, {r12, 0x3600}, {r12, 0x40}, {r12, 0x59}], 0x4, 0x3)

2.924236643s ago: executing program 0 (id=6325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000040)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', <r3=>0x0, 0x4, 0x5, 0x8, 0x5, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x6, 0xffffe149}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@struct={0x1, 0x8, 0x0, 0x4, 0x0, 0x9, [{0x3, 0x5, 0x91d9}, {0xc, 0x1, 0x3}, {0xe, 0x1, 0x3}, {0xa, 0x5, 0xf}, {0x0, 0x0, 0x65}, {0xd, 0x0, 0x6}, {0x9, 0x4, 0x1f08}, {0x0, 0x1, 0x1010}]}]}, {0x0, [0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000380)=""/86, 0x8a, 0x56, 0x1, 0x4, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r3, r4, 0x2, 0x5}, 0x50)
syz_emit_ethernet(0x3f, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@llc={0x4, {@snap={0x1, 0xaa, "8f85", "0fed8f", 0x891d, "cce32e72cdcf92edd9e32d3a8ede00b9cba76f5b39cfd7b8ebc6eeece04c75c2bf8a8722"}}}}}, 0x0)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x2a, 0x0, 0x3}, 0xc)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_FLAGS={0x8}]}, 0x2c}}, 0xc040)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r2, &(0x7f0000000680)="740a79314c11782841a9a005604768670f0d5d360ca42a7e780fc175e6c4b351c796026ca1a0bd9cdac667d6bfd7b2be10c3afe7cfb0670af2dcaeabcd04b91d48f6d7f9046b903c23e01a8fdfa468593796cb"}, 0x20)
connect(r0, &(0x7f0000000740)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1401, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x20008000)
ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f00000008c0)={{r4}, "3168da21cf25271a54135f1e857e86a511e3e3e8cd8ea583bb187d3504f073c1a27fa25e3adcc1271542ed8de9b6415498c205160f85a38aea7aa2d7754838c5df139cd9c14449850a78a9849338661cfd3bd85ebb588ef3e59ab9bc7ffdc0df26bd658d0204ff963d99bf0fddffd7d8eb7848064565c4a6c7014cadc43723c245085b249337ef67852afd65ccd826e849d9ccad02e4cc4c0b0e0e79b9e34032b0f1101b641a6f3bdc1770a14797217f386b7bad030921e025499db5ec3d59f9b8500281c25dd24f1207a080abd19b6f5e59c0e95cdcab71f00aff4ee258d52c7dc7309c940495d41ade17ba36946c533eadf662983481ed7dfd124660310ea3a9b199e27bee7d8994382d96b368f66ae4a85c788d45bf5ad01cfd4f44a83f5cd23377bd1dd3eedc3143651a7bbba65d3e4843edc3a9422c435cfc6bee93adcb2590f5028163367d02a7b88201dd6f83e5b0fea2b4197fdf03461a485ba0c90e6d67757e040fcd996c17e6cb34a73f6a802b1eadf569140cf374a5633a5b77e699615f0dba972d5aa933a2ed6a6011ea291bc732d75148b2166cf9adcdd7cb0296f5a6d167202dc22305127a0af507204d40d1b584bd5105067eab1ad20f80dc47d67ac0217b7175d561b96a79af1790fb18e28e5f6b726b009d50f88e0c470dab856ff2cd98fa2a9785df2f7c53090247b77dfbaef7bce0618db3e10c24e0feebbe7671a5789fffe2c48e16d0823273e03d871668553ec69e8dc1bcd05121ce52e1f8bb42522cdf831765ee919007e335c9a72cbfc7e4598cc681dc13e14e26bd93b70f44b39c52ba229865fdc45a1047de35b1a2d2cc24d5c275fc6d828ea0ecbfd1cec8db34d3f263649fc6e145dbf2514f430daa9289b2ea4cebbba769e1ea22895889b791294fe0028f1a7cb00fa99e786e925d2117d54c0a1736a326f0fec6f5897621d7532bc0f18de534f3c93e6f54622af613125cddc19278cad52dddb3cdd4b983538f9fc58e8819a9e76c548fddc026e6223877220f7da19c715d99563d76c64ed2f796fe031cd1b4f491e7773371d799e50538a6fe9913bc86b9f458d3e1151d3299f8d12ffb782ea41869676b797bc758c449807a7b53297bebc4e2bf4a743ba451ce3e0e6c8e6bc07f2712cb5497eec31dea8366474767bd84aa65663b30559bfe37a480b87080348dd4b4f55043c6a01a4fcd68f8960c6804c2e1c1b0a0205b615c0259296563ec734949385f13883605efefb3a848063e180f690e6d17fc87c4cc1704c7a76205a8292d104d02cce3d5854b4cf022c748d6a09fa1f9d1c9db24bf8dce0cf5a5270ba0fc69a9a2f500db9946084d2daf426130b3ee5971f78f7f2943a8f63ab7355558fc60c33dcd9047044429c9e4909081cdb39d97575341cc6b1a0f7adeb2879a78608915c70f01e9648fabd1f39db68b868e489a91045c090b4a21088f1bdcd4fac60d579f67233918a3ec010af90aebefe3278df5ec3d2d2603eaf32a6bba7604a7711eb5e6a7a5ef1e379c78d5796b05960598ed92185ba3c9b3e29b506a053c27611433ed36fc8cea858ddc517e204b4b259bc8e3c683dedee4387ac97f48414af72906dfe6f9ee1dbf297a86323f5541047bb14067ba1d55dd453950ea73e1b695ce34fb55138a4ef318a9f589c33be13d55009f1f9ef71eb049b47dd88fb4d55143cc9eedb0e7348a3b8e844513cb72ca3184d7c9f23efee6cf2e738a34b27ff7fb030480416a762e649ea4991f78e255ea7acff7df2706d3434595a03920452230f5796b16187632461d04a385606deaff369f632da9561d9105e766f4fbdaf07290a517b8e6ccdc99d36448ba87c79ac7dbf3f7c2ffa72c05abf2665f7bcca44e741724b54f35808c909cc954cc421d386d88de3da3f23b08506d6760e33808dc32d2975001a163c79f22095f5d1009773266862ecebbe5febb806ae787b7c4a06321a70f0458593862f6b4442b01946c65aa30b537fc8a4d943a055a5220959c6a745d523d839c24adf7d494d948f2c624d0fa8cb80b066499dd825e773032811ba1b96f6c601647551d819a707686f16327ff4ab3405ef09f7bf88f5d04d1deb9bbddb8e1f2a62ed56d8b999ec1ed0ef78ac84d586e3ed5c6a44cc24d882f57b75ea47c2a74f7f60b8d6b41d9c13ff4f9d09d2aa4e68228eb44104481c9178cf5377afc73b2a34b40474896a8e933626a1f2540fb8fc3175008baa1b6e78bd8956b3afb06287011963c7333131863fca2b5e390cf5faf5f3f173641b45557e5486f7242cd4fc32fa607f9eeef2cd39ae08edba39b22aaf2e27cf603256a67a8de559f9fd2babdf0f7c66c59cbaf44b98da04fcd13ef4c84a41d6cb9eb9c1f49520c5020d46e9903230da60bf157b9822e82d0001cf066387417fc11bc3b5d25b35acd87773d98e3b518fdcea99dccfa64e125984d50999110d565c2e4689f8cd04a20ee687269d976d2ba4dd0627f821e2175fa0ebf37e07ec0e16d503390220a4d9e539c4b87e7cb506787a48add30f7d6fd9c9adbbdac73e41c20162a040b93e780855f2f2210ad3158dbb64cfb9c64be29b8fa5a81d2becb7cfb16a0e43766eb618fb72af362bbea2732840cd105a78c4a6202da6cb5a637769479364859750dccfc0602a5cd63e29c97af9f558e84ab9d1c99eae1c9170cfcf4c9e09e6340f747c17078bc7e572b367dcbc032439cd6179e46ffc069e35e25e72670fdb8d1b1559f02937bdc206d7139fb09d48dd2304af4121077ea718b6e8943fa33eb55c6d3d2a27fb7055a7e765a21c6b28f8b3a899b435c3c54641f0085856e3e2f1c0bf129f1a789fb87c51990c379d40537010058ebf2c0fe137c2c0c6d66fee9f77b73b27eabe4e4d85354bbb542fab4f205d9565ea2b021c54eaedfb8d60bf9d2b04569fcb12213c9f47f8d969d1b6833933233c5bd1fc28ca5c0b6df872ab55741770baaa188573f49651bbd03afdcc22f38bafef500ba0607ac74bbb46488644c0875d6f9d1784211784f55b92a4229133770e2892b911173271e61c62c4ac5fea710ce3c3522115fa3a5ddfd42098365384251338f0d8611cced655698c7aed6d21ec7b61056a5569139008a6c9f6eb54125feb2f3baf457ae268e52ee1cfd44731744d63f1df16a795eb51695147a30696ef44d719a8250829cc4896f91e42bd95c56004d331ad079cc34c928cbd06bd904183d2b2d18f37e052de3c227118821d4c784f6e40cba871e6427e92d6cc77c8fa3e4e359fcd46511f61268ad0ec08c5094f786653ac31c587c84d170daf74993ba954333e92fb764f5362aecb353819aa62f96959446f391185f0a48d6cd3c85cae282071721b6b64f4d26b9296083d50585ddcb0b6e8f51ff98e45b5f61e9a35194a5445c5f318f795ac5bd2aa998979f059ad8c26a4fdd6a5c629009eeb7a26a500ff4ed8d5bb945c234a9f4e5f4f06d45954af7ae4450fa375c4053f938d4f8346bb78e1bea0b6f48e3e1ad3ab14828a47f569d90ee5ec5e4e172c89a600c0225a0572aee5e423e547ad50cc1f2d9e7b1cbc8c5b9ce4e5cf7cc0b67fbca1f5b166a309140b79f3c3182f97c260adc98941a4b9a892c790e027195575c7c34e43e6e676f7b43cb1898123ef440991f0e5bea3ed8722f86d7a8a1f4e7985ccfadd04bea853a48a1c6bbb4ed7ccc213a3a4391caf803c07bddc93b61eeb3ac6d8d662daa12c15361f7174901c44a80ba30afc65a5b6cdc6cf8490118be03b7e177b6a7a219b94d47270b92b60ca4cbe55574a86f39dbedc82c95c2f8515cdd5e54bfc7267d83202f659511bad280fa6144f3a84f3d53a818bdf49ef6d92c9ff2e66dff9c52a423ff055ec0c08c5c6e0fcec9acaec8066b40c59a8b0cf5e5ab94d1533591cac4ae4f25f12fa67170ab2f493847b1b6cd943c3f815dfe3a4503430d76be52d991a633a4f4be7ae1391992d56c6d10872379b829a8d1f1afbe4b088e8b4f0ea249afbbccfd1f6ed9cb74c10b245c60d1e8d9f9e2aeac8c6f5eaf8e6d80f56c8e5a0ff3104739851fc0f4b2d0fa0465bafe067c6bee86845855d039786570a9be7608ed5fa0f04dea0f8873f1834a3a6499e0b788e144b6c941da239f1408c22fc07dd27e61f610d94b534cd9fd1be1653612caccf97b6dae5538857b98a7919ef140e2fe5682764cd2f6838deb555c6c7114398f6fdee8870e06c544c7fbbf70f409f866e3aec8575c02a578c3390b0ae2f52398e9ba1f227500c0a3740e090efa95e59a8a58b6b68e7c4b9a6b2bf7fc19a219ac878138952812167f582c353e1187d9fe742b51e32e357188a2c1b5001ee2a16a013511731a0e12c64023fb2c722fe9010c8a7e2c610674ad0ee1ed9f91a874a0ad70e7083ad876e6ab7c874f302b174d5d83b94e613796403848ba255da86beadc52a081eadf4fc93b2a96a5729e42aeede803ab633268ce93b10b33ebf017efd03548a967446db260eab9b5a865f9509a1f39f76361e97f8952e0355e47557a1f55dea9351b011c24e7a11badd7d88581e6f839cf9072c80d63a0945e6d1dac39b8702af83f83eabb96671ec0d20c50d871a23208c936740a22572c4c60024167fc6dcb0e3e795b1f6553c5582a1d2e2aa0c6c4ed5b55344ce348e5fbc2c27a5d83a91293ecd10a6191a97a1d4907aebd4254b98f8a570927a76a89e72a44ce9d6a047e83211bdf883f1459241de7ff2ac1c16ee229dcdb73efec0297b2f5848c197f63d7f5d8c7e29facb24de0cd65cf53e157b36921af2e5c3255e36c6a99ab5bbefe52a5450dfe8a224ccc904d60a95734da9a7cb5bc364bb2ba1f2ac8eb80de97c2f66bc1f41da25455e2a7bc150e3f0f141d284f920fc1bca28ea147a7fc278e97a6f2ce6974f6e13b4452589cb4a5759e9de8ecfb218aa29f222a42c60c063f4e090909d839b621179d4cccbe9d87a280b26b310734f5fb01fe785aed958f3be40d2b684a7dcd5118aa1fdf633878d5b81f5a17777700cb89d723f716aa974f1cfc72d7eddbdd823925ddc119fdd4cf7c09177abc60befe1a8f56d8778ca6c962bf54ce1e05e7185f93df90277c65c260802899df19934af64f47b5d1b949e3376ea2cd51ea7cfde7987c4d7fdd42cf0edf238f44f2da9bc654678d54e708e80a69c9e87adc649b44dcbd6adfc4fc3fed33c32ee8ceb48b402f6dfa4e95bbcb4fe8ac43f6df327724ea092bd575fe0bf8c86a19cfd60a41e5fd57476a85f54849ec940ffb0e9611eccda6efa42bb675f0cf3d3206b22f1c3ee4b03d35ef55265f7eedb12726b72f143e65d830ae10b1a28072d79c8945ea0d07b53b9df3e53009c4201e92f1eeaaa466f7c8f50dce869e45f6aaf29d5d03b05f009afeb916210bd320773b5f181c7960afa978fca3d11ead6e3be4507c72e1a7438afad16dfec8bc8d023553c7ddbfec9ba6b1e82fd8d12bf6c8d9405c1365c09521f823ea31d09ffa83b8456c58a3206c76e072800ed193c3d619343261f9a95bf7aa03865563fab12ef1d69c54b90f5c154b963bc17894c1d3102147ed836e208b0849c87bc20e4ea2b727e20eaf5e176d25105729ae79c488b6e5cc350fd6df8eb8eef562e3eea132fb6f82bc8fc6cabd17be674cfcb20d443d5741ebf458383f9a00e9b4c795144a3091d57be9ce3111e78c242fc1dc33a9e872d8724f3f0650590e46d2a80e4267f43edd9accb5c4ca4add03f94e3114b22d54ad903945ae9fc51d9b662c90135f1fe97e994803b89d4ea42eb5bff3bf1c"})
r8 = gettid()
syz_open_procfs$namespace(r8, &(0x7f00000018c0)='ns/pid\x00')
setsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000001900)="e6fd944146a79274bd849ff95971f9a2512bb6", 0x13)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001980)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1fa51fa671"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x44081)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001a80))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000001c80)={{<r10=>r0, &(0x7f0000001ac0)='\x00', 0x40040, &(0x7f0000001b00)={@align=0x7fffffffffffffff, {0x51, 0x7fe, 0x1, 0x2000000000000000}}, 0x2, &(0x7f0000001b40)={@_ha_fsid}, &(0x7f0000001b80)=0xfffffff5}, {[0x9, 0x1, 0xf16, 0x40]}, 0xfffffffb, 0x98, &(0x7f0000001bc0)=""/152})
write$tun(r10, &(0x7f0000001d00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x5c, 0x64, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {0x4e21, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "c4586e0b9eb5e1e11e067899aba9678f76f4e83ecc61cb12", "2e7b24fbf2cd74c2c4ef90fecb06ecdcf7d60f5550f9d33be723c9bbbafd2e3c"}}}}, 0x5c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$XFS_IOC_BULKSTAT(r11, 0x8040587f, &(0x7f0000001f40)={{0x49, 0x1, 0x8000, 0x5, 0x8}, &(0x7f0000001dc0)=[{}, {}]})
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002000), r10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r12, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r10, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x16c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x150, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0x30, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x0, 0xfb}}, @measure_req={0x26, 0xb0, {0xe, 0x51, 0x4, "2167928c17e6e646ccd8cafd7546542fb0cad224eaf98b91dfa944181e9fc0d8ba2dfcab33eb13c5f1f31270eb76328fe0f21444ede4efd745433acd14ed6e303e40ecbea55d17884e167519baeb8879e7110c6e58fe9e1dd08caeebc2b7aace7aed3f9a2771065390ae71f45e402f9ac1969a360300212d05d9aa024f3ecb269efba0a43d8cd8e5987f8ef57e8743a3c14dfb6a0c62ac723a7dee0d76b24ca1cd52b4fc8e0188dc0e0ac29b26"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x2, @device_a, 0x5954, @value=@broadcast, 0x5, 0x9, @device_a, 0x8001}}, @random_vendor={0xdd, 0x39, "d71269abcd1a327b0793db49afbf80933d109fcf654708c6fc446ea8bdf0391cdd2b2251613b127a366815b22ebb804625afb0d17c5e4a820f"}, @ht={0x2d, 0x1a, {0x2000, 0x0, 0x5, 0x0, {0x8c5, 0xa, 0x0, 0x7, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x9, 0x2}}, @mesh_chsw={0x76, 0x6, {0x10, 0x6, 0xa, 0xfffe}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x7, 0x6}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20008800}, 0xeca589a0b842443f)

2.788805782s ago: executing program 0 (id=6326):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1a, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="6f0b0024f8245400c7f833"], 0x14}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x2)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r7, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x378, 0x208, 0x98, 0x2d8, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0xe, 0x2b]}}}, {{@ip={@broadcast, @empty, 0xffffff, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
sendto(r9, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r8)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYRES16=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

2.7884448s ago: executing program 2 (id=6327):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000)
accept4$inet(r2, 0x0, 0x0, 0x800)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
accept4$nfc_llcp(r2, 0x0, 0x0, 0x800)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x96, 0x9, 0x8, 0x80000001, 0x2, 0x9], 0x2, &(0x7f0000000080)=[{}, {}], 0x0, [{}, {}]}, 0x98)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400000000fb01ff01000000000000bf31b5ca", @ANYRES32=r7, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0001000000"], 0x40}}, 0x24000080)
r8 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000010000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14)
sendto(r2, &(0x7f0000000180), 0x0, 0x20004000, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80)
ioctl$NILFS_IOCTL_SYNC(r6, 0x80086e8a, &(0x7f0000000100))

2.743947165s ago: executing program 1 (id=6328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl(r3, 0x8b21, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r4, 0x25, 0x2, @val=@perf_event={0xaa0}}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x100, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0x0, 0x1}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
close(r5)

2.610259184s ago: executing program 1 (id=6329):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r4)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='rose0\x00')
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r5, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0)

2.519347832s ago: executing program 1 (id=6330):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0xfffffffffffffcb4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0210030d0700000025bd7000ffdbdf250500070032a000800a004e2000000006fe8800"/56], 0x38}}, 0x40)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000440)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {0x4, 0x1}, {0x4ea9b64d57a88163, 0x10}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xd}, {0xfff2, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x404c080)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.909147526s ago: executing program 0 (id=6331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d8005"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8002}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8885}, 0x410)

1.816893084s ago: executing program 2 (id=6332):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x1, 0x4, 0x8}, 0x50)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000780)={{&(0x7f0000000640)=""/119, 0x77}, &(0x7f00000006c0), 0x17}, 0x20)
socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25bd0400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080003000100000008001801100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

139.259109ms ago: executing program 2 (id=6333):
epoll_create(0xfffffffc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000020, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={0x0, 0x2710}, 0x10)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r1, &(0x7f0000000000)='\"', 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
ioctl$TUNGETVNETLE(r3, 0x4004743c, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x100})

137.700362ms ago: executing program 0 (id=6334):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r1, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x20000001}, 0x20008000)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18)
sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b931", 0x8}], 0x1}}], 0x1, 0x4)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r8, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x800, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0x7fffffff, 0x4, 0x0, 0x0, 0x400000, 0x1000, 0x1}}, 0xe8)
connect$inet6(r9, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)

134.592604ms ago: executing program 1 (id=6335):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000440)=""/180, 0xb4}], 0x3, &(0x7f0000000540)=""/53, 0x35}, 0x2020) (async)
recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000440)=""/180, 0xb4}], 0x3, &(0x7f0000000540)=""/53, 0x35}, 0x2020)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63ec436946dc7634cb41c9f7b943", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0012000a00000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="120000004e0001"], 0x18}], 0x1}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0xc, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in=@remote, 0x20, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x100000000000008}, {0xf8}, 0x0, 0x4, 0xa, 0x0, 0x1}}, 0xf0}}, 0x844) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0xc, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in=@remote, 0x20, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x100000000000008}, {0xf8}, 0x0, 0x4, 0xa, 0x0, 0x1}}, 0xf0}}, 0x844)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r7=>0x0})
socket(0x2c, 0x3, 0x0) (async)
r8 = socket(0x2c, 0x3, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0) (async)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r9=>r7, 0x29, 0x9, 0x7, 0x60, 0x2, @mcast2, @mcast2, 0x870f, 0x16, 0x2, 0x8}})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@ipv4_getnexthop={0x50, 0x6a, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8, 0x5, r9}, @NHA_GROUPS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24028004}, 0x8090) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@ipv4_getnexthop={0x50, 0x6a, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8, 0x5, r9}, @NHA_GROUPS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24028004}, 0x8090)
ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000640)={r4, 0x0, 0x2, 0x8, 0x4, 0x4, [0x4f48fc2d, 0x5, 0x9, 0xd1, 0x3, 0x200]})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r11, 0x20, 0x70bd2b, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) (async)
sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r11, 0x20, 0x70bd2b, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000)
close(r10) (async)
close(r10)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r12, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa0800456c00b000000000fb01907864010102ac1414aa0300907803240000450000000001000000010034e92885ad27ebf1c91f65cec2077f000001640100fe8677ffffffff000e08362ce8da6ee06cb8dd94520509020007651442eb011274b000561de584b703c87214d4220207cfa11cab1a001084a4913275be675de6a70a05a0dc060aed54fe6655490000021273bc23f9ffffffa30900a301c8460028000cc8bf6909a79ea788f03d86060000002000"], 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa0800456c00b000000000fb01907864010102ac1414aa0300907803240000450000000001000000010034e92885ad27ebf1c91f65cec2077f000001640100fe8677ffffffff000e08362ce8da6ee06cb8dd94520509020007651442eb011274b000561de584b703c87214d4220207cfa11cab1a001084a4913275be675de6a70a05a0dc060aed54fe6655490000021273bc23f9ffffffa30900a301c8460028000cc8bf6909a79ea788f03d86060000002000"], 0x0)

311.842µs ago: executing program 2 (id=6336):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}}, 0xfc76ce48d6aa8b1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'gretap0\x00', <r9=>r2, 0x80, 0x700, 0x12e929b9, 0x5, {{0x10, 0x4, 0x3, 0x3b, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0xd0, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x4}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @generic={0x89, 0x5, 'K\x00\\'}, @noop, @end]}}}}})
connect$packet(r1, &(0x7f0000000740)={0x11, 0x5, r9, 0x1, 0x5e, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000ffffffff0073797a300000000009000300000000006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x4}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)

0s ago: executing program 1 (id=6337):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000002020000000200000800040001000000", 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e1, &(0x7f0000000000))
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r6, 0x5760, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x5760, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0xba01}, 0x4000000) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0xba01}, 0x4000000)

kernel console output (not intermixed with test programs):

promiscuous mode
[  540.790344][T26499] syzkaller0: entered allmulticast mode
[  540.792541][T26499] tipc: Resetting bearer <eth:syzkaller0>
[  541.143277][T26526] veth0_to_bond: Caught tx_queue_len zero misconfig
[  541.224384][T26529] 8021q: adding VLAN 0 to HW filter on device bond150
[  541.300426][T26537] openvswitch: : Dropping previously announced user features
[  541.323630][T26539] validate_nla: 9 callbacks suppressed
[  541.323646][T26539] netlink: 'syz.1.5269': attribute type 1 has an invalid length.
[  541.591124][T26543] : port 1(veth0_virt_wifi) entered disabled state
[  542.129902][ T8112] wg1 speed is unknown, defaulting to 1000
[  542.140266][ T8112] syz0: Port: 1 Link DOWN
[  542.148446][ T5691] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.151467][ T5691] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.154176][ T5691] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.157157][ T5691] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.327381][T26576] bond151: option updelay: invalid value (18446744073709518847)
[  542.330368][T26576] bond151: option updelay: allowed values 0 - 2147483647
[  542.335734][T26576] bond151 (unregistering): Released all slaves
[  542.796558][T26610] bond175: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  542.802169][T26610] bond175 (unregistering): Released all slaves
[  542.961245][T26623] syzkaller1: entered promiscuous mode
[  542.962935][T26623] syzkaller1: entered allmulticast mode
[  542.965848][T26616] syzkaller1: entered promiscuous mode
[  542.968172][T26616] syzkaller1: entered allmulticast mode
[  543.215696][T26635] __nla_validate_parse: 21 callbacks suppressed
[  543.215712][T26635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5290'.
[  543.230336][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5290'.
[  543.398724][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'.
[  543.420616][T26642] bond144: (slave vcan0): Releasing backup interface
[  543.425376][T26642] vcan0 (unregistering): left promiscuous mode
[  543.432250][T26642] bond144: Destroying bond
[  543.452230][T26642] bond144 (unregistering): Released all slaves
[  543.535185][ T5649] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  543.544666][T26659] netlink: 'syz.0.5296': attribute type 1 has an invalid length.
[  544.297540][T26653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  544.527165][T26681] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5300'.
[  544.596016][T26683] openvswitch: : Dropping previously announced user features
[  544.613608][T26683] openvswitch: : Dropping previously announced user features
[  544.669751][T26690] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  544.691981][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5305'.
[  544.753435][T26701] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  544.772107][T26701] 8021q: adding VLAN 0 to HW filter on device bond144
[  544.774843][T26705] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  544.786361][T26701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.886876][T26714] netlink: 'syz.1.5311': attribute type 1 has an invalid length.
[  544.906528][T26714] 8021q: adding VLAN 0 to HW filter on device bond137
[  545.212482][T26754] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  545.379585][T26764] netlink: 'syz.0.5323': attribute type 13 has an invalid length.
[  545.382503][T26764] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5323'.
[  545.758903][T26773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5326'.
[  545.954008][T26778]  speed is unknown, defaulting to 1000
[  546.070012][T26778]  speed is unknown, defaulting to 1000
[  546.073549][T26778] wg1 speed is unknown, defaulting to 1000
[  546.239312][T26784] netlink: 'syz.0.5329': attribute type 1 has an invalid length.
[  546.263297][T26784] 8021q: adding VLAN 0 to HW filter on device bond177
[  546.283972][T26784] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5329'.
[  546.311961][T26784] bond177: (slave gretap6): making interface the new active one
[  546.318845][T26784] bond177: (slave gretap6): Enslaving as an active interface with an up link
[  546.382624][T26787] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  546.576956][T26802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'.
[  546.580360][T26802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'.
[  546.611048][T26802] batadv11: entered promiscuous mode
[  546.613177][T26802] batadv11: entered allmulticast mode
[  546.617618][T26802] 8021q: adding VLAN 0 to HW filter on device batadv11
[  547.164161][T26844] netlink: 'syz.0.5341': attribute type 10 has an invalid length.
[  547.248397][T26849] netlink: zone id is out of range
[  547.273200][T26849] netlink: get zone limit has 4 unknown bytes
[  547.704094][T26873] netlink: 'syz.0.5348': attribute type 1 has an invalid length.
[  547.707030][T26874] netlink: 'syz.0.5348': attribute type 1 has an invalid length.
[  547.734199][T26873] 8021q: adding VLAN 0 to HW filter on device bond178
[  547.782006][T26874] macvlan4: entered promiscuous mode
[  547.783786][T26874] macvlan4: entered allmulticast mode
[  547.791738][T26873] macvlan5: entered promiscuous mode
[  547.793818][T26873] macvlan5: entered allmulticast mode
[  547.851780][T26881] 8021q: adding VLAN 0 to HW filter on device bond179
[  547.861214][T26881] bond179 (unregistering): Released all slaves
[  548.220531][T26900] netlink: 'syz.0.5353': attribute type 1 has an invalid length.
[  548.417773][T26920] netlink: 'syz.1.5357': attribute type 10 has an invalid length.
[  548.447572][T26918] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  548.474395][T26922] veth0: entered promiscuous mode
[  548.484840][T26922] bond0: entered promiscuous mode
[  548.652063][T26919] bond0: left promiscuous mode
[  548.653711][T26919] veth0: left promiscuous mode
[  548.720841][T26932] netlink: 'syz.1.5360': attribute type 1 has an invalid length.
[  548.748528][T26932] bond138: entered promiscuous mode
[  548.750743][T26932] 8021q: adding VLAN 0 to HW filter on device bond138
[  548.761456][T26932] 8021q: adding VLAN 0 to HW filter on device bond138
[  548.768547][T26932] bond138: (slave vti3): The slave device specified does not support setting the MAC address
[  548.771711][T26932] bond138: (slave vti3): Setting fail_over_mac to active for active-backup mode
[  548.781426][T26932] bond138: (slave vti3): making interface the new active one
[  548.783926][T26932] vti3: entered promiscuous mode
[  548.788411][T26932] bond138: (slave vti3): Enslaving as an active interface with an up link
[  548.836275][T26938] syzkaller0: entered promiscuous mode
[  548.838149][T26938] syzkaller0: entered allmulticast mode
[  548.951871][T26945] __nla_validate_parse: 16 callbacks suppressed
[  548.951888][T26945] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5363'.
[  549.043441][T26952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5366'.
[  549.059796][T26949] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  549.330794][T26973] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  549.373911][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5373'.
[  549.381731][T26979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5373'.
[  549.386039][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5373'.
[  549.388804][T26979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5373'.
[  549.503877][T26985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5374'.
[  549.651137][T26992] netlink: 'syz.1.5377': attribute type 1 has an invalid length.
[  549.655094][T26992] workqueue: Failed to create a rescuer kthread for wq "bond139": -EINTR
[  549.700887][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'.
[  550.291494][T27022] netlink: 'syz.1.5380': attribute type 9 has an invalid length.
[  550.466029][T27031] netlink: 'syz.1.5381': attribute type 9 has an invalid length.
[  550.468385][T27031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'.
[  550.491050][T27035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5382'.
[  550.785315][T27067] bridge0: entered allmulticast mode
[  550.787625][T27067] bridge0: left allmulticast mode
[  551.197153][T27087] netlink: 'syz.2.5390': attribute type 1 has an invalid length.
[  551.643311][T27128] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002
[  551.700110][T27115] ipvlan8: entered promiscuous mode
[  551.751461][T27128] bond118: (slave syz_tun): Removing an active aggregator
[  551.760919][T27128] bond118: (slave syz_tun): Releasing backup interface
[  551.973724][T27145] macsec0: entered promiscuous mode
[  551.982525][T27145] ip6gretap0: entered promiscuous mode
[  552.017954][T27145] ip6gretap0: left promiscuous mode
[  552.029946][T27145] macsec0 (unregistering): left promiscuous mode
[  552.055475][T27154] bridge50: port 1(veth67) entered blocking state
[  552.057519][T27154] bridge50: port 1(veth67) entered disabled state
[  552.059701][T27154] veth67: entered allmulticast mode
[  552.062245][T27154] veth67: entered promiscuous mode
[  552.073713][T27154] bridge50: port 2(veth0_to_bond) entered blocking state
[  552.082346][T27154] bridge50: port 2(veth0_to_bond) entered disabled state
[  552.089257][T27154] veth0_to_bond: entered allmulticast mode
[  552.096625][T27154] veth0_to_bond: entered promiscuous mode
[  552.100306][T27154] bridge50: port 2(veth0_to_bond) entered blocking state
[  552.102493][T27154] bridge50: port 2(veth0_to_bond) entered forwarding state
[  552.122660][T27164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  552.124950][T27164] IPv6: NLM_F_CREATE should be set when creating new route
[  552.127152][T27164] IPv6: NLM_F_CREATE should be set when creating new route
[  552.129682][T27164] IPv6: NLM_F_CREATE should be set when creating new route
[  552.433372][T27192] validate_nla: 6 callbacks suppressed
[  552.433383][T27192] netlink: 'syz.0.5414': attribute type 1 has an invalid length.
[  552.503006][T27192] bond179: entered promiscuous mode
[  552.507147][T27192] 8021q: adding VLAN 0 to HW filter on device bond179
[  552.668040][T27222] netlink: 'syz.0.5418': attribute type 1 has an invalid length.
[  552.668905][T27210] netlink: 'syz.0.5418': attribute type 1 has an invalid length.
[  552.687716][T27228] netlink: 'syz.2.5420': attribute type 30 has an invalid length.
[  552.754570][T27231] netlink: 'syz.0.5423': attribute type 10 has an invalid length.
[  552.849423][T27235] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  552.877864][T27238] netlink: 'syz.0.5424': attribute type 3 has an invalid length.
[  552.880317][T27238] netlink: 'syz.0.5424': attribute type 1 has an invalid length.
[  553.191099][T27258] pim6reg: entered allmulticast mode
[  553.194303][T27257] pim6reg: left allmulticast mode
[  553.519644][T27270] netlink: 'syz.2.5434': attribute type 9 has an invalid length.
[  553.712636][T27279] netlink: 'syz.2.5437': attribute type 1 has an invalid length.
[  553.742478][T27279] bond153: (slave bridge63): making interface the new active one
[  553.746042][T27279] bond153: (slave bridge63): Enslaving as an active interface with an up link
[  553.763081][T27279] bond153: entered promiscuous mode
[  553.764878][T27279] bridge63: entered promiscuous mode
[  553.768431][T27279] bond153: entered allmulticast mode
[  553.770263][T27279] bridge63: entered allmulticast mode
[  553.772802][T27279] 8021q: adding VLAN 0 to HW filter on device bond153
[  554.063481][T27305] netlink: 'syz.1.5446': attribute type 1 has an invalid length.
[  554.337530][T27317] sctp: [Deprecated]: syz.1.5446 (pid 27317) Use of int in maxseg socket option.
[  554.337530][T27317] Use struct sctp_assoc_value instead
[  555.071141][T27298] tipc: Resetting bearer <eth:syzkaller0>
[  555.192843][T27314] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  555.234300][ T7545] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.255166][ T7545] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  555.258557][ T7545] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  555.261662][ T7545] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  555.269596][ T7545] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.276297][ T7545] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  555.280456][ T7545] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  555.283972][ T7545] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  555.287555][T27321] __nla_validate_parse: 17 callbacks suppressed
[  555.287565][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'.
[  555.288762][ T7545] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.292809][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'.
[  555.297963][ T7545] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  555.297980][ T7545] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  555.297991][ T7545] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  555.298012][ T7545] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.312770][ T7545] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  555.316581][ T7545] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  555.319577][ T7545] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  555.321753][T27325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5449'.
[  555.326370][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'.
[  555.335735][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'.
[  555.524420][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5453'.
[  555.603408][T27360] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5457'.
[  555.647736][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5453'.
[  555.671867][T27365] bond154: invalid ARP target 0.0.0.0 specified for addition
[  555.674263][T27365] bond154: option arp_ip_target: invalid value (0)
[  555.679162][T27365] bond154 (unregistering): Released all slaves
[  555.697485][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5453'.
[  555.700773][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5453'.
[  555.702738][T27369] vxcan0: entered allmulticast mode
[  555.831786][T27377] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  556.319207][T27398] 8021q: adding VLAN 0 to HW filter on device bond154
[  556.359496][T27401] tunl0: Caught tx_queue_len zero misconfig
[  556.424203][T27401]  speed is unknown, defaulting to 1000
[  556.551769][T27401]  speed is unknown, defaulting to 1000
[  556.556356][T27401] wg1 speed is unknown, defaulting to 1000
[  556.960046][T27425] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  557.121387][T27437] syzkaller1: entered promiscuous mode
[  557.125830][T27437] syzkaller1: entered allmulticast mode
[  557.151855][T27440] bond180: entered promiscuous mode
[  557.154115][T27440] 8021q: adding VLAN 0 to HW filter on device bond180
[  557.200889][T27440] bond180: (slave bridge51): making interface the new active one
[  557.203758][T27440] bridge51: entered promiscuous mode
[  557.207884][T27440] bond180: (slave bridge51): Enslaving as an active interface with an up link
[  557.224732][T27440] bond180: (slave ipvlan9): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  557.228941][T27440] bond180: (slave ipvlan9): The slave device specified does not support setting the MAC address
[  557.332721][T27447] 8021q: adding VLAN 0 to HW filter on device bond155
[  557.340385][T27452] veth0_virt_wifi: left allmulticast mode
[  557.342561][T27452] veth0_virt_wifi: left promiscuous mode
[  557.344845][T27452] : port 1(veth0_virt_wifi) entered disabled state
[  557.352840][T27452] bond3: (slave erspan1): Releasing active interface
[  557.360144][T27452] bond8: (slave gretap1): Releasing active interface
[  557.365643][T27452] bond9: (slave bridge2): Releasing active interface
[  557.370600][T27452] bond10: (slave bridge3): Releasing active interface
[  557.376278][T27452] bond12: (slave geneve2): Releasing active interface
[  557.386355][T27452] bond19: (slave bridge6): Releasing backup interface
[  557.396697][T27452] bond25: (slave geneve5): Releasing active interface
[  557.403717][T27452] bond26: (slave bridge9): Releasing active interface
[  557.407906][T27454] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  557.414015][T27452] bond31: (slave bridge11): Releasing backup interface
[  557.423877][T27452] bond32: (slave bridge12): Releasing active interface
[  557.429679][T27452] bond37: (slave gretap3): Releasing active interface
[  557.435529][T27452] bond48: (slave geneve7): Releasing active interface
[  557.440260][T27452] veth17: left allmulticast mode
[  557.442231][T27452] veth17: left promiscuous mode
[  557.444192][T27452] bridge20: port 1(veth17) entered disabled state
[  557.454730][T27452] bond45: (slave bridge21): Releasing backup interface
[  557.462576][T27452] bond53: (slave veth19): Releasing backup interface
[  557.468308][T27452] bond55: (slave bridge24): Releasing backup interface
[  557.473264][T27452] bond58: (slave bridge25): Releasing backup interface
[  557.480301][T27452] bond66: (slave gretap6): Releasing active interface
[  557.486657][T27452] bond71: (slave wireguard0): Releasing backup interface
[  557.491566][T27452] bond74: (slave bridge30): Releasing backup interface
[  557.500315][T27452] bond92: (slave gretap0): Releasing active interface
[  557.505963][T27452] bond94: (slave veth35): Releasing active interface
[  557.508477][T27452] bond94: (slave veth35): the permanent HWaddr of slave - aa:fd:6a:56:be:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  557.518558][T27452] bond94: (slave batadv0): Releasing active interface
[  557.521253][T27452] batadv0: left promiscuous mode
[  557.526985][T27452] bond98: (slave veth37): Releasing active interface
[  557.529558][T27452] bond98: (slave veth37): the permanent HWaddr of slave - ce:6d:3b:0d:a3:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  557.538417][T27452] bond98: (slave batadv9): Releasing active interface
[  557.541012][T27452] batadv9: left promiscuous mode
[  557.544482][T27452] bond99: left allmulticast mode
[  557.547182][T27452] bridge0: port 1(bond99) entered disabled state
[  557.553622][T27452] bond104: (slave bridge45): Releasing backup interface
[  557.557989][T27452] bridge45: left promiscuous mode
[  557.560090][T27452] bridge45: left allmulticast mode
[  557.564464][T27452] bond107: (slave bridge46): Releasing active interface
[  557.571590][T27452] bond114: (slave bridge49): Releasing backup interface
[  557.574243][T27452] bridge49: left promiscuous mode
[  557.580063][T27452] bridge49: left allmulticast mode
[  557.584802][T27452] bond120: (slave bridge50): Releasing backup interface
[  557.587688][T27452] bridge50: left promiscuous mode
[  557.589733][T27452] bridge50: left allmulticast mode
[  557.594323][T27452] bond121: (slave bridge51): Releasing backup interface
[  557.600148][T27452] bond124: (slave bridge54): Releasing backup interface
[  557.602773][T27452] bridge54: left promiscuous mode
[  557.608064][T27452] bond128: (slave bridge56): Releasing active interface
[  557.612868][T27452] bond130: (slave veth43): Releasing active interface
[  557.616207][T27452] bond130: (slave veth43): the permanent HWaddr of slave - b2:03:d2:ff:3d:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  557.624302][T27452] bond130: (slave veth45): Releasing active interface
[  557.630760][T27452] bond133: (slave veth49): Releasing active interface
[  557.636771][T27452] bond138: (slave vti3): Releasing backup interface
[  557.639000][T27452] vti3: left promiscuous mode
[  557.712240][T27456] openvswitch: netlink: IP tunnel dst address not specified
[  557.729448][T27459] xt_hashlimit: size too large, truncated to 1048576
[  557.743691][T27456] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  557.778996][T27456] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.798349][T27463] validate_nla: 4 callbacks suppressed
[  557.798363][T27463] netlink: 'syz.1.5488': attribute type 1 has an invalid length.
[  557.823362][T27463] 8021q: adding VLAN 0 to HW filter on device bond139
[  557.840484][T27464] 8021q: adding VLAN 0 to HW filter on device batadv12
[  557.846227][T27464] bond139: (slave batadv12): making interface the new active one
[  557.852404][T27464] bond139: (slave batadv12): Enslaving as an active interface with an up link
[  557.878735][T27463] bond139: (slave veth53): Enslaving as an active interface with a down link
[  557.894834][T27456] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.919763][T27469] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y
[  557.919763][T27469] 3UH5rBn\'
[  557.924204][T27469] CPU: 0 UID: 0 PID: 27469 Comm: syz.2.5489 Not tainted syzkaller #0 PREEMPT(full) 
[  557.924231][T27469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  557.924242][T27469] Call Trace:
[  557.924248][T27469]  <TASK>
[  557.924256][T27469]  dump_stack_lvl+0xe8/0x150
[  557.924276][T27469]  sysfs_warn_dup+0x8e/0xa0
[  557.924297][T27469]  sysfs_do_create_link_sd+0xc0/0x110
[  557.924319][T27469]  device_add_class_symlinks+0x1cf/0x240
[  557.924341][T27469]  device_add+0x475/0xbb0
[  557.924357][T27469]  wiphy_register+0x1dc5/0x2dc0
[  557.924395][T27469]  ? __pfx_wiphy_register+0x10/0x10
[  557.924425][T27469]  ? __pfx_netdev_run_todo+0x10/0x10
[  557.924442][T27469]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  557.924466][T27469]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  557.924493][T27469]  ieee80211_register_hw+0x3d82/0x4a70
[  557.924525][T27469]  ? ieee80211_register_hw+0x18d1/0x4a70
[  557.924566][T27469]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  557.924594][T27469]  ? __asan_memset+0x22/0x50
[  557.924609][T27469]  ? __hrtimer_setup+0x1b7/0x260
[  557.924625][T27469]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  557.924648][T27469]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  557.924691][T27469]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  557.924702][T27469]  ? kstrndup+0xbf/0x160
[  557.924725][T27469]  hwsim_new_radio_nl+0xf6a/0x1c00
[  557.924763][T27469]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  557.924785][T27469]  ? rcu_is_watching+0x15/0xb0
[  557.924800][T27469]  ? trace_kmalloc+0x2a/0xf0
[  557.924826][T27469]  ? __nla_parse+0x40/0x60
[  557.924852][T27469]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  557.924867][T27469]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  557.924883][T27469]  genl_family_rcv_msg_doit+0x22a/0x330
[  557.924953][T27469]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  557.924978][T27469]  ? bpf_lsm_capable+0x9/0x20
[  557.924994][T27469]  ? security_capable+0x7e/0x2c0
[  557.925036][T27469]  genl_rcv_msg+0x61c/0x7a0
[  557.925054][T27469]  ? __pfx_genl_rcv_msg+0x10/0x10
[  557.925069][T27469]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  557.925102][T27469]  netlink_rcv_skb+0x232/0x4b0
[  557.925124][T27469]  ? __pfx_genl_rcv_msg+0x10/0x10
[  557.925137][T27469]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  557.925167][T27469]  ? down_read+0x270/0x2e0
[  557.925181][T27469]  ? genl_rcv+0xd/0x40
[  557.925198][T27469]  genl_rcv+0x28/0x40
[  557.925211][T27469]  netlink_unicast+0x75c/0x8e0
[  557.925232][T27469]  netlink_sendmsg+0x813/0xb40
[  557.925261][T27469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  557.925286][T27469]  ? aa_sock_msg_perm+0xf1/0x1b0
[  557.925306][T27469]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  557.925322][T27469]  ____sys_sendmsg+0x972/0x9f0
[  557.925343][T27469]  ? __might_fault+0xaf/0x130
[  557.925369][T27469]  ? __pfx_____sys_sendmsg+0x10/0x10
[  557.925395][T27469]  ? import_iovec+0x73/0xa0
[  557.925424][T27469]  ___sys_sendmsg+0x2a5/0x360
[  557.925446][T27469]  ? __lock_acquire+0x6b5/0x2cf0
[  557.925468][T27469]  ? __pfx____sys_sendmsg+0x10/0x10
[  557.925489][T27469]  ? futex_wait+0x2a2/0x390
[  557.925534][T27469]  ? __fget_files+0x2a/0x420
[  557.925551][T27469]  ? __fget_files+0x3a0/0x420
[  557.925572][T27469]  __x64_sys_sendmsg+0x1bd/0x2a0
[  557.925594][T27469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  557.925622][T27469]  ? rcu_is_watching+0x15/0xb0
[  557.925649][T27469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.925666][T27469]  do_syscall_64+0x15f/0xf80
[  557.925686][T27469]  ? trace_irq_disable+0x3b/0x140
[  557.925714][T27469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.925730][T27469] RIP: 0033:0x7f49c239cdd9
[  557.925742][T27469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.925749][T27469] RSP: 002b:00007f49c31f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  557.925760][T27469] RAX: ffffffffffffffda RBX: 00007f49c2615fa0 RCX: 00007f49c239cdd9
[  557.925767][T27469] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  557.925772][T27469] RBP: 00007f49c2432d69 R08: 0000000000000000 R09: 0000000000000000
[  557.925778][T27469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.925783][T27469] R13: 00007f49c2616038 R14: 00007f49c2615fa0 R15: 00007ffd71ae4738
[  557.925798][T27469]  </TASK>
[  558.071077][T27456] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.144049][T27456] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.259735][ T7545] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.309366][T11216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.318266][T27492] bond139: (slave batadv12): Releasing active interface
[  558.321042][T27492] bond139: (slave batadv12): the permanent HWaddr of slave - ae:d2:dc:d3:50:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  558.334608][T27492] bond139: (slave veth53): Releasing active interface
[  558.344012][T27494] netlink: 'syz.2.5495': attribute type 1 has an invalid length.
[  558.357177][T11216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.369666][T11216] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.444133][T27498] netlink: 'syz.2.5497': attribute type 16 has an invalid length.
[  558.510609][T11216] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  558.514482][T11216] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.523386][T11216] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.552889][T27502] bond140: option resend_igmp: invalid value (2878)
[  558.555300][T27502] bond140: option resend_igmp: allowed values 0 - 255
[  558.558919][T27502] bond140 (unregistering): Released all slaves
[  558.572345][T11216] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.596452][T27509] netlink: 'syz.0.5501': attribute type 16 has an invalid length.
[  558.599402][T27509] netlink: 'syz.0.5501': attribute type 17 has an invalid length.
[  558.703173][T27515] syzkaller1: entered promiscuous mode
[  558.707191][T27515] syzkaller1: entered allmulticast mode
[  558.759498][T27513] veth1_macvtap: entered promiscuous mode
[  558.763128][T27513] macsec0: left promiscuous mode
[  558.766507][T27513] veth1_macvtap: left promiscuous mode
[  558.770278][T27513] netlink: 'syz.1.5503': attribute type 1 has an invalid length.
[  558.881994][T27532] bond156: invalid ARP target 0.0.0.0 specified for addition
[  558.884159][T27532] bond156: option arp_ip_target: invalid value (0)
[  558.888158][T27532] bond156 (unregistering): Released all slaves
[  559.144474][T27551] bridge64: the hash_elasticity option has been deprecated and is always 16
[  559.149648][T27549] netlink: 'syz.0.5512': attribute type 1 has an invalid length.
[  559.163151][T27551] pim6reg1: entered promiscuous mode
[  559.165783][T27551] pim6reg1: entered allmulticast mode
[  559.278483][T27563] syzkaller1: entered promiscuous mode
[  559.284717][T27563] syzkaller1: entered allmulticast mode
[  559.323382][T27568] "syz.2.5518" (27568) uses obsolete ecb(arc4) skcipher
[  559.326206][T27567] "syz.2.5518" (27567) uses obsolete ecb(arc4) skcipher
[  559.380598][T27570] bond156: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  559.387461][T27570] bond156 (unregistering): Released all slaves
[  559.613677][T27594] netlink: 'syz.1.5524': attribute type 13 has an invalid length.
[  559.617159][T27594] netlink: 'syz.1.5524': attribute type 17 has an invalid length.
[  559.641621][T27594] erspan0: left promiscuous mode
[  559.675164][T27594] 8021q: adding VLAN 0 to HW filter on device 60X
[  559.680742][T27597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.734298][T27594] veth1_macvtap: entered promiscuous mode
[  559.739036][T27594] veth0_macvtap: left promiscuous mode
[  559.753674][T27594] veth0_macvtap: entered promiscuous mode
[  559.766896][T27594] geneve1: left promiscuous mode
[  559.776413][T27594] 8021q: adding VLAN 0 to HW filter on device bond1
[  559.780052][T27594] 8021q: adding VLAN 0 to HW filter on device bond2
[  559.784419][T27594] erspan0: entered promiscuous mode
[  559.793335][T27594] 8021q: adding VLAN 0 to HW filter on device bond3
[  559.801345][T27594] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  559.810104][T27591] ip6tnl11: entered allmulticast mode
[  559.829620][ T8112] wg1 speed is unknown, defaulting to 1000
[  559.832322][T25767] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  559.835239][ T8112] syz0: Port: 1 Link ACTIVE
[  559.836854][T25767] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.840207][T25767] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  559.845339][T25767] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.850441][T11216] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  559.856799][T25767] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  559.860855][T25767] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.865344][T25767] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  559.869356][T25767] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.921157][T27605]  speed is unknown, defaulting to 1000
[  560.077573][T27605]  speed is unknown, defaulting to 1000
[  560.081132][T27605] wg1 speed is unknown, defaulting to 1000
[  560.136200][ T7545] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  560.154724][T27605] x_tables: duplicate underflow at hook 3
[  560.493595][T27634] __nla_validate_parse: 27 callbacks suppressed
[  560.493606][T27634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5534'.
[  560.672822][T27636] vlan7: entered promiscuous mode
[  560.674810][T27636] bridge0: entered promiscuous mode
[  560.713228][T27640] netlink: 'syz.2.5535': attribute type 4 has an invalid length.
[  560.722571][T27640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5535'.
[  560.734898][T27640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5535'.
[  561.004706][T27654] aԬ: renamed from bond0
[  561.053597][T27658] bond181: entered promiscuous mode
[  561.058739][T27658] 8021q: adding VLAN 0 to HW filter on device bond181
[  561.067329][T27658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5541'.
[  561.069581][T27661] ipvlan9: entered promiscuous mode
[  561.091026][T27658] bond181: entered allmulticast mode
[  561.114351][T27658] bond181: (slave bridge52): making interface the new active one
[  561.118242][T27658] bridge52: entered promiscuous mode
[  561.120527][T27658] bridge52: entered allmulticast mode
[  561.124258][T27658] bond181: (slave bridge52): Enslaving as an active interface with an up link
[  561.196356][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5543'.
[  561.211870][T27665] ipvlan9: entered allmulticast mode
[  561.213959][T27665] gretap0: entered allmulticast mode
[  561.343199][T27672]  speed is unknown, defaulting to 1000
[  561.489032][T27672]  speed is unknown, defaulting to 1000
[  561.492580][T27672] wg1 speed is unknown, defaulting to 1000
[  561.794366][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  561.807244][T25767] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  561.808953][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'.
[  561.812902][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5555'.
[  561.829321][T25767] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  561.833238][T25767] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  561.844503][T25767] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  561.951567][T27715] No such timeout policy "syz1"
[  561.960187][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5555'.
[  561.967378][T27715] veth0_macvtap: left promiscuous mode
[  562.031175][T27718] bond156: entered promiscuous mode
[  562.033156][T27718] bond156: entered allmulticast mode
[  562.038431][T27718] 8021q: adding VLAN 0 to HW filter on device bond156
[  562.249118][T27738] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  562.489477][T27750] bond157 (unregistering): Released all slaves
[  562.646754][T27764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5572'.
[  562.772433][T27773] 8021q: adding VLAN 0 to HW filter on device bond141
[  562.788001][T27773] bond141 (unregistering): Released all slaves
[  562.834667][T27781] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma?
[  562.889867][T27785] validate_nla: 9 callbacks suppressed
[  562.889878][T27785] netlink: 'syz.2.5579': attribute type 1 has an invalid length.
[  563.024479][T27793] netlink: 'syz.2.5581': attribute type 30 has an invalid length.
[  563.975518][    C0] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  564.375338][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  572.615725][    C0] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  573.255500][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  575.001560][T27801] netlink: 'syz.0.5583': attribute type 64 has an invalid length.
[  575.043499][T27805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  575.258568][T27810] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  575.290955][T27817] bond158: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  575.295894][T27817] bond158 (unregistering): Released all slaves
[  575.314020][T27819] syzkaller1: entered promiscuous mode
[  575.316642][T27819] syzkaller1: entered allmulticast mode
[  575.329006][T27827] netlink: 'syz.0.5587': attribute type 23 has an invalid length.
[  575.445733][T27831] xt_hashlimit: size too large, truncated to 1048576
[  575.526769][T27838] geneve1: entered promiscuous mode
[  575.541646][T11216] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.545187][T27838] __nla_validate_parse: 4 callbacks suppressed
[  575.545284][T27838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5591'.
[  575.546894][T11216] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.554670][T11216] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.559648][T11216] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.566491][T27838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5591'.
[  575.646646][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5592'.
[  575.681474][T27841] veth1_macvtap: left promiscuous mode
[  575.731505][T27851] geneve1: entered promiscuous mode
[  576.373418][   T10] wg1 speed is unknown, defaulting to 1000
[  576.376241][T25767] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  576.384047][   T10] syz0: Port: 1 Link DOWN
[  576.385437][T25767] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.392205][T25767] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  576.405521][T25767] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.409640][T25767] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  576.413166][T25767] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.418375][T25767] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  576.424188][T25767] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.432329][T27878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5600'.
[  576.745879][T27902] netlink: 'syz.2.5607': attribute type 1 has an invalid length.
[  576.749170][T27903] netlink: 'syz.2.5607': attribute type 1 has an invalid length.
[  576.783114][T27902] bond159: entered promiscuous mode
[  576.789807][T27902] 8021q: adding VLAN 0 to HW filter on device bond159
[  576.813638][T27903] bond160: entered promiscuous mode
[  576.816076][T27903] 8021q: adding VLAN 0 to HW filter on device bond160
[  576.841901][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'.
[  576.856073][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'.
[  576.860775][ T7545] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  576.863782][ T7545] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  576.872227][ T7545] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  576.876420][ T7545] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  576.891132][T27914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5609'.
[  576.907859][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5609'.
[  576.922681][T27920] netlink: 'syz.1.5610': attribute type 1 has an invalid length.
[  576.929852][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5611'.
[  576.933958][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5611'.
[  576.968893][T27920] 8021q: adding VLAN 0 to HW filter on device bond141
[  576.976047][T27926] netlink: 'syz.0.5612': attribute type 9 has an invalid length.
[  576.983664][T27920] vlan0: entered allmulticast mode
[  576.985365][T27920] bond141: entered allmulticast mode
[  576.993868][T27926] erspan0: entered promiscuous mode
[  576.999179][T27926] macvlan6: entered promiscuous mode
[  577.002272][T27926] macvlan6: entered allmulticast mode
[  577.003988][T27926] erspan0: entered allmulticast mode
[  577.062760][T27935] netlink: 'syz.2.5616': attribute type 7 has an invalid length.
[  577.077981][T27935] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.112316][T27937] xt_TCPMSS: Only works on TCP SYN packets
[  577.139353][T27935] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.208658][T27935] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.300587][T27935] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.307487][T27950] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  577.403185][T11216] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  577.423724][ T7545] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  577.432609][ T7545] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  577.441048][ T7545] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  577.480037][T27957] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  577.588276][T27976]  speed is unknown, defaulting to 1000
[  577.665393][T27983] veth7: Caught tx_queue_len zero misconfig
[  577.691054][   T33] audit: type=1804 audit(1778617245.169:14): pid=27986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5628" name="/newroot/1880/memory.events" dev="tmpfs" ino=9601 res=1 errno=0
[  577.702376][   T33] audit: type=1800 audit(1778617245.169:15): pid=27987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5628" name="memory.events" dev="tmpfs" ino=9601 res=0 errno=0
[  577.711428][   T33] audit: type=1800 audit(1778617245.169:16): pid=27986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5628" name="memory.events" dev="tmpfs" ino=9601 res=0 errno=0
[  577.750242][T27986] bond184: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  577.757464][T27986] bond184 (unregistering): Released all slaves
[  577.774260][T27976]  speed is unknown, defaulting to 1000
[  577.780707][T27976] wg1 speed is unknown, defaulting to 1000
[  578.074858][T28008] netlink: 'syz.0.5635': attribute type 13 has an invalid length.
[  578.179928][T28011] netlink: 'syz.1.5636': attribute type 10 has an invalid length.
[  578.269129][T28022] tunl0: Caught tx_queue_len zero misconfig
[  578.403864][T28029] bond161: (slave vxcan3): The slave device specified does not support setting the MAC address
[  578.407945][T28029] bond161: (slave vxcan3): Error -95 calling set_mac_address
[  578.427160][T28037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.445864][T28039] sctp: [Deprecated]: syz.1.5642 (pid 28039) Use of int in maxseg socket option.
[  578.445864][T28039] Use struct sctp_assoc_value instead
[  578.477673][T28029] x_tables: ip_tables: icmp match: only valid for protocol 1
[  578.501159][T28029] macvlan3: entered promiscuous mode
[  578.503434][T28029] macvlan3: entered allmulticast mode
[  578.551780][T28051] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  578.630984][T28059] netlink: 'syz.2.5647': attribute type 13 has an invalid length.
[  578.691714][T28056] tipc: Resetting bearer <eth:syzkaller0>
[  578.796489][T28059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.821491][T28059] xfrm0: left allmulticast mode
[  578.828053][T28059] veth1_macvtap: left promiscuous mode
[  578.834326][T28059] geneve1: left promiscuous mode
[  578.838722][T28059] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  578.843181][ T7545] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.846259][ T7545] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.850464][ T7545] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.854327][ T7545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.891741][T28064] bond184 (unregistering): Released all slaves
[  578.902823][ T7545] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.906533][ T7545] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.909040][ T7545] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  578.911538][ T7545] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.570422][T28102] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  580.387590][T28116] bridge50: port 2(veth0_to_bond) entered disabled state
[  580.530383][T28116] tipc: Resetting bearer <eth:syzkaller0>
[  580.597563][T28116] erspan0: left allmulticast mode
[  580.620921][T28117] erspan0: left promiscuous mode
[  580.650779][T28117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.700676][T28117] geneve1: left promiscuous mode
[  580.704434][T28117] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  580.723070][ T5649] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.727659][ T5649] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.733271][ T8112]  speed is unknown, defaulting to 1000
[  580.739912][ T5670]  speed is unknown, defaulting to 1000
[  580.743100][ T5649] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.750961][ T5649] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.760552][ T5649] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  580.766612][ T5649] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.772682][ T5649] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  580.777527][ T5649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.784351][ T5649] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  580.791199][ T5649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.794448][ T5649] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  580.798150][ T5649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.801454][T28131] __nla_validate_parse: 28 callbacks suppressed
[  580.801463][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5663'.
[  580.883556][T28134]  speed is unknown, defaulting to 1000
[  580.946970][T28148] erspan0: left promiscuous mode
[  580.967670][T28148] 8021q: adding VLAN 0 to HW filter on device 60X
[  581.001746][T28148] veth0_macvtap: left promiscuous mode
[  581.006008][T28148] veth0_macvtap: entered promiscuous mode
[  581.018923][T28148] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  581.032953][T28150] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  581.054008][T10024] wg1 speed is unknown, defaulting to 1000
[  581.055735][ T7545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.056778][T10024] syz0: Port: 1 Link ACTIVE
[  581.072973][ T7545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.091841][T28152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.117714][ T7545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.122569][T28134]  speed is unknown, defaulting to 1000
[  581.123038][ T7545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.134287][T28134] wg1 speed is unknown, defaulting to 1000
[  581.158426][T28154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5669'.
[  581.162061][T28152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.252919][T28152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.358029][T28152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.742952][T28177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5675'.
[  581.795303][T28177] syzkaller0: left promiscuous mode
[  581.796976][T28177] syzkaller0: left allmulticast mode
[  581.839292][T28180] ip6gretap4: entered promiscuous mode
[  581.910384][T28181] tipc: Resetting bearer <eth:syzkaller0>
[  581.915492][T28181] tipc: Resetting bearer <eth:syzkaller0>
[  581.927251][T28180] validate_nla: 5 callbacks suppressed
[  581.927260][T28180] netlink: 'syz.2.5676': attribute type 16 has an invalid length.
[  581.931511][T28180] netlink: 'syz.2.5676': attribute type 17 has an invalid length.
[  581.952239][T28180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.981411][T28180] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  582.004535][T11216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.007801][T11216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.010965][T11216] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.022813][T11216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.148386][T28186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5678'.
[  582.311856][T28194] netlink: 'syz.2.5680': attribute type 1 has an invalid length.
[  582.330649][T28199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5681'.
[  582.374314][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5682'.
[  582.384498][T28205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5683'.
[  582.430675][T28205] bond142: (slave vxcan1): The slave device specified does not support setting the MAC address
[  582.437519][T28205] bond142: (slave vxcan1): Error -95 calling set_mac_address
[  582.478906][T28209] macvlan17: entered promiscuous mode
[  582.480936][T28209] macvlan17: entered allmulticast mode
[  582.482868][T28209] bond142: (slave macvlan17): Error -98 calling set_mac_address
[  582.533117][T11216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.551630][ T7545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.572052][ T7545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.587098][ T7545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.598165][T28214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.660416][T28213] syzkaller0: entered promiscuous mode
[  582.662646][T28213] syzkaller0: entered allmulticast mode
[  582.664886][T28213] tipc: Resetting bearer <eth:syzkaller0>
[  582.676849][T28212] tipc: Resetting bearer <eth:syzkaller0>
[  584.918587][T28212] tipc: Disabling bearer <eth:syzkaller0>
[  584.926287][T28220] geneve1: entered promiscuous mode
[  584.956400][ T7545] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.970323][ T7545] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.973469][ T7545] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  584.983448][ T7545] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.082664][T28239] netlink: 'syz.0.5691': attribute type 13 has an invalid length.
[  585.092777][T28239] netlink: 'syz.0.5691': attribute type 17 has an invalid length.
[  585.398074][ T8099]  speed is unknown, defaulting to 1000
[  585.400478][ T8099] syz2: Port: 1 Link DOWN
[  585.443093][T28239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.480308][T28239] geneve1: left promiscuous mode
[  585.484903][T28239] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  585.505255][T28247] bridge71: the hash_elasticity option has been deprecated and is always 16
[  585.515274][T28247] bridge71: entered allmulticast mode
[  585.545164][ T5670]  speed is unknown, defaulting to 1000
[  585.549697][ T5670] syz2: Port: 1 Link ACTIVE
[  585.552161][ T7545] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.559443][ T7545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.564073][ T7545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.569642][ T7545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.596387][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'.
[  585.626340][T28251] 8021q: adding VLAN 0 to HW filter on device bond184
[  585.709183][T28256] bond164: option arp_interval: invalid value (18446744071578976288)
[  585.711679][T28256] bond164: option arp_interval: allowed values 0 - 2147483647
[  585.715203][T28256] bond164 (unregistering): Released all slaves
[  585.820436][T28264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5698'.
[  585.823831][T28264] netlink: 'syz.2.5698': attribute type 1 has an invalid length.
[  585.982332][T28278] netlink: 'syz.1.5701': attribute type 10 has an invalid length.
[  585.990602][T28278] netlink: 'syz.1.5701': attribute type 10 has an invalid length.
[  586.086463][T28285] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5704'.
[  586.136571][T28284] bond185 (unregistering): Released all slaves
[  586.170050][T28285] bond185 (unregistering): Released all slaves
[  586.209059][T28296] bond164: entered promiscuous mode
[  586.211040][T28296] 8021q: adding VLAN 0 to HW filter on device bond164
[  586.278181][T28286] bond143: entered allmulticast mode
[  586.361777][T28310] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5708'.
[  586.443231][T28316] can: request_module (can-proto-0) failed.
[  586.453819][T28319] netlink: 'syz.2.5711': attribute type 10 has an invalid length.
[  586.514605][T28325] netlink: 'syz.2.5712': attribute type 1 has an invalid length.
[  586.552600][T28325] 8021q: adding VLAN 0 to HW filter on device bond165
[  587.074582][T28359] validate_nla: 3 callbacks suppressed
[  587.074593][T28359] netlink: 'syz.1.5721': attribute type 13 has an invalid length.
[  587.194902][T28367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.235883][T28367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.308557][T28373] netlink: 'syz.1.5724': attribute type 3 has an invalid length.
[  587.311493][T28373] netlink: 'syz.1.5724': attribute type 3 has an invalid length.
[  587.334469][T28379] netlink: 'syz.2.5725': attribute type 1 has an invalid length.
[  587.367405][T28381] 8021q: adding VLAN 0 to HW filter on device bond185
[  587.468064][T28379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5725'.
[  587.471415][T28379] bond167: entered promiscuous mode
[  587.473107][T28379] bond167: entered allmulticast mode
[  587.476082][T28379] 8021q: adding VLAN 0 to HW filter on device bond167
[  587.559650][T28404] netlink: 'syz.0.5728': attribute type 4 has an invalid length.
[  587.587210][T28404] netlink: 'syz.0.5728': attribute type 4 has an invalid length.
[  587.593940][ T8106]  speed is unknown, defaulting to 1000
[  587.596854][ T8106] syz2: Port: 1 Link DOWN
[  587.606481][ T8106]  speed is unknown, defaulting to 1000
[  587.606685][T28407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5729'.
[  587.613294][ T8106] syz2: Port: 1 Link ACTIVE
[  587.782634][T28430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5732'.
[  587.829198][T28426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5734'.
[  588.275805][ T8106]  speed is unknown, defaulting to 1000
[  588.279804][ T8106] syz2: Port: 1 Link DOWN
[  588.288211][T11216] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.295339][T11216] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.333906][T11216] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.342045][T11216] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.354436][T28456] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  588.359096][T28456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5739'.
[  588.369876][T28456] debugfs: 'netdev:syzkaller0' already exists in 'phy6'
[  588.423618][T28459] netlink: 'syz.0.5740': attribute type 10 has an invalid length.
[  588.451727][T28462] netlink: 'syz.1.5741': attribute type 1 has an invalid length.
[  588.504728][T28470] veth0: entered promiscuous mode
[  588.529041][T28462] bond144: entered promiscuous mode
[  588.534811][T28462] bond144: entered allmulticast mode
[  588.539914][T28462] 8021q: adding VLAN 0 to HW filter on device bond144
[  588.663715][T28458] veth0: left promiscuous mode
[  588.846488][T28501] netlink: 'syz.1.5748': attribute type 1 has an invalid length.
[  588.892054][T28501] 8021q: adding VLAN 0 to HW filter on device bond145
[  588.902374][T28505] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  588.905733][T28501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5748'.
[  588.914497][T28501] bond145: entered promiscuous mode
[  588.918770][T28501] bond145: entered allmulticast mode
[  588.929088][T28501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5748'.
[  589.005429][T28510] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  589.105389][T28523] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  589.111024][T28523] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  589.181573][T28525] macsec0: entered promiscuous mode
[  589.216063][T28525] macsec0 (unregistering): left promiscuous mode
[  589.414602][T28541] bridge0: entered allmulticast mode
[  589.420146][T28541] bridge0: left allmulticast mode
[  589.541002][T28546] syzkaller0: entered promiscuous mode
[  589.543170][T28546] syzkaller0: entered allmulticast mode
[  589.732376][T28549] bond146: entered promiscuous mode
[  589.740500][T28549] 8021q: adding VLAN 0 to HW filter on device bond146
[  589.775773][T28553] tipc: Resetting bearer <eth:syzkaller0>
[  589.788917][T28549] vlan7: entered allmulticast mode
[  589.790961][T28549] bond146: entered allmulticast mode
[  589.971656][T28562] bond187: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  589.976366][T28562] bond187 (unregistering): Released all slaves
[  590.043680][T28573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  590.046616][T28573] syzkaller0: entered promiscuous mode
[  590.048237][T28573] syzkaller0: entered allmulticast mode
[  590.050107][T28573] tipc: Resetting bearer <eth:syzkaller0>
[  590.053961][T28573] netlink: 'syz.2.5766': attribute type 10 has an invalid length.
[  590.244178][T28592] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.249357][T28592] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.290941][T28592] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.294317][T28592] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.350774][T28599] bond187: (slave vxcan2): The slave device specified does not support setting the MAC address
[  590.355801][T28599] bond187: (slave vxcan2): Error -95 calling set_mac_address
[  590.372669][T28592] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.379838][T28592] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.416008][T28601] bond187: (slave bridge53): Enslaving as an active interface with a down link
[  590.430416][T28599] ip6gretap4: entered promiscuous mode
[  590.432596][T28599] ip6gretap4: entered allmulticast mode
[  590.439137][T28599] bond187: (slave ip6gretap4): making interface the new active one
[  590.442828][T28599] bond187: (slave ip6gretap4): Enslaving as an active interface with an up link
[  590.452994][T28592] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.457413][T28592] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.533487][T11216] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  590.540687][T11216] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.565090][ T7545] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  590.568526][ T7545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.587323][ T7545] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  590.589938][ T7545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.618610][T11216] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  590.621805][T11216] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.694119][T28613] xt_hashlimit: size too large, truncated to 1048576
[  590.842266][T28613] xt_hashlimit: size too large, truncated to 1048576
[  590.933362][T28613] xt_hashlimit: size too large, truncated to 1048576
[  590.966638][T28628] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  590.983031][T28628] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.986772][T28628] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.030000][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.040341][T28628] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.043274][T28628] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.103892][T28628] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.107255][T28628] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.118937][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.152174][T28628] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.157683][T28628] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.180159][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.180574][T28637] __nla_validate_parse: 10 callbacks suppressed
[  591.180584][T28637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5781'.
[  591.191783][T28637] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR
[  591.272039][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.344960][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.406697][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.414213][T28655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5784'.
[  591.467636][T28613] xt_hashlimit: size too large, truncated to 1048576
[  591.581055][T28661] bond188: entered promiscuous mode
[  591.583479][T28661] 8021q: adding VLAN 0 to HW filter on device bond188
[  591.629287][T28667] syzkaller0: Caught tx_queue_len zero misconfig
[  591.673571][T28669] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5787'.
[  591.696938][T28669] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5787'.
[  591.703583][T28669] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR
[  591.771012][T28679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5789'.
[  591.778469][T28679] openvswitch: netlink: Message has 4 unknown bytes.
[  591.826873][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  591.873941][T28681] bond189: entered allmulticast mode
[  591.887339][T28681] macvlan8: entered promiscuous mode
[  591.889617][T28681] macvlan8: entered allmulticast mode
[  591.896728][T28681] bond189: entered promiscuous mode
[  591.899676][T28681] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  591.908899][T28681] bond189: left promiscuous mode
[  591.970628][T25767] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.974983][T25767] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.989308][T11216] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.992889][T11216] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.004897][T11216] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  592.008022][T11216] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.016200][T11216] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.018752][T11216] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.070032][T28690] sctp: [Deprecated]: syz.0.5794 (pid 28690) Use of int in maxseg socket option.
[  592.070032][T28690] Use struct sctp_assoc_value instead
[  592.160581][T28695] syzkaller0: left promiscuous mode
[  592.162711][T28695] syzkaller0: left allmulticast mode
[  592.302103][T25767] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  592.372043][T28714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5801'.
[  592.375942][T28714] validate_nla: 6 callbacks suppressed
[  592.375951][T28714] netlink: 'syz.0.5801': attribute type 1 has an invalid length.
[  592.447940][T28725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5804'.
[  592.451927][T28721] netlink: 'syz.1.5803': attribute type 1 has an invalid length.
[  592.472580][T28721] bond148: entered promiscuous mode
[  592.474676][T28721] 8021q: adding VLAN 0 to HW filter on device bond148
[  592.484695][T28723]  speed is unknown, defaulting to 1000
[  592.512310][T28729] netlink: 201912 bytes leftover after parsing attributes in process `syz.1.5805'.
[  592.517307][T28729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5805'.
[  592.520060][T28729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5805'.
[  592.523307][T28729] netlink: 'syz.1.5805': attribute type 1 has an invalid length.
[  592.535107][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  592.559082][T28729] 8021q: adding VLAN 0 to HW filter on device bond149
[  592.629831][T28723]  speed is unknown, defaulting to 1000
[  592.633978][T28723] wg1 speed is unknown, defaulting to 1000
[  592.656413][T28738] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  593.122282][T28753] 8021q: VLANs not supported on ip6gre0
[  593.224101][T28759] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  593.273903][T28759] bond150 (unregistering): Released all slaves
[  593.579943][T28794] bond150: Removing last arp target with arp_interval on
[  593.598426][T28794] bond151: Removing last arp target with arp_interval on
[  593.659612][T28801] netlink: 'syz.1.5820': attribute type 1 has an invalid length.
[  593.847985][T28824] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  593.859596][T28824] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  593.883869][T28830] netlink: 'syz.1.5827': attribute type 1 has an invalid length.
[  593.904734][T28830] 8021q: adding VLAN 0 to HW filter on device bond153
[  593.921315][T28832] tipc: Resetting bearer <eth:hsr0>
[  593.934793][T28832] tipc: Resetting bearer <eth:syzkaller0>
[  593.958022][T28832] tipc: Resetting bearer <eth:hsr0>
[  594.023469][ T8123]  speed is unknown, defaulting to 1000
[  594.045386][T28830] bond153: (slave veth55): Enslaving as an active interface with a down link
[  594.054586][T28833] bond153 (unregistering): (slave veth55): Releasing active interface
[  594.060197][T28833] bond153 (unregistering): Released all slaves
[  594.154772][T28837] netlink: 'syz.1.5828': attribute type 2 has an invalid length.
[  594.160078][T28837] netlink: 'syz.1.5828': attribute type 1 has an invalid length.
[  594.162804][T28837] netlink: 'syz.1.5828': attribute type 1 has an invalid length.
[  594.166378][T28837] netlink: 'syz.1.5828': attribute type 2 has an invalid length.
[  594.260788][   T33] audit: type=1804 audit(1778617261.739:17): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5830" name="/newroot/1925/memory.events" dev="tmpfs" ino=9828 res=1 errno=0
[  594.273301][   T33] audit: type=1800 audit(1778617261.739:18): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.280019][   T33] audit: type=1800 audit(1778617261.739:19): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.292376][   T33] audit: type=1800 audit(1778617261.739:20): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.299392][   T33] audit: type=1800 audit(1778617261.739:21): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.309417][   T33] audit: type=1800 audit(1778617261.739:22): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.323964][   T33] audit: type=1800 audit(1778617261.739:23): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.338805][   T33] audit: type=1800 audit(1778617261.739:24): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.351122][   T33] audit: type=1800 audit(1778617261.739:25): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.358167][   T33] audit: type=1800 audit(1778617261.739:26): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5830" name="memory.events" dev="tmpfs" ino=9828 res=0 errno=0
[  594.482961][T28857] netlink: 'syz.1.5832': attribute type 12 has an invalid length.
[  595.182200][T28849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  595.689974][T28906] bond153: entered promiscuous mode
[  595.701734][T28906] vcan0: entered promiscuous mode
[  595.703329][T28906] vcan0: entered allmulticast mode
[  595.705887][T28906] bond153: (slave vcan0): The slave device specified does not support setting the MAC address
[  595.709824][T28906] bond153: (slave vcan0): Error -95 calling set_mac_address
[  595.837888][T28916] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.896835][T28920] bridge_slave_1: entered promiscuous mode
[  595.902199][T28920] macvtap2: entered promiscuous mode
[  595.908426][T28920] macvtap2: entered allmulticast mode
[  595.910570][T28920] bridge_slave_1: entered allmulticast mode
[  595.923561][T28921] macvtap3: entered promiscuous mode
[  595.925999][T28921] macvtap3: entered allmulticast mode
[  595.947490][T28923] bond168: entered promiscuous mode
[  595.949857][T28923] 8021q: adding VLAN 0 to HW filter on device bond168
[  595.963007][T28923] ipvlan9: entered allmulticast mode
[  595.966581][T28923] bond168: entered allmulticast mode
[  595.997396][T28923] bond168: (slave bridge72): making interface the new active one
[  596.004057][T28923] bridge72: entered promiscuous mode
[  596.007005][T28923] bridge72: entered allmulticast mode
[  596.010957][T28923] bond168: (slave bridge72): Enslaving as an active interface with an up link
[  596.243681][T28940] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  596.253196][T28944] __nla_validate_parse: 18 callbacks suppressed
[  596.253211][T28944] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5854'.
[  596.288133][T28945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5856'.
[  596.317960][T28945] bridge55: port 1(veth69) entered blocking state
[  596.322044][T28945] bridge55: port 1(veth69) entered disabled state
[  596.331914][T28945] veth69: entered allmulticast mode
[  596.347468][T28945] veth69: entered promiscuous mode
[  596.362014][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5858'.
[  596.370718][T28946] bridge55: port 2(veth71) entered blocking state
[  596.373246][T28946] bridge55: port 2(veth71) entered disabled state
[  596.377352][T28946] veth71: entered allmulticast mode
[  596.381045][T28946] veth71: entered promiscuous mode
[  596.438665][T28954] bond169: (slave vxcan3): The slave device specified does not support setting the MAC address
[  596.448406][T28954] bond169: (slave vxcan3): Error -95 calling set_mac_address
[  596.454431][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'.
[  596.478761][T28961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5858'.
[  596.482892][T28960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5860'.
[  596.486983][T28961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'.
[  596.653138][T28978] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5865'.
[  596.682418][T28979]  speed is unknown, defaulting to 1000
[  596.780745][T28983] bond170 (unregistering): Released all slaves
[  596.869751][T28979]  speed is unknown, defaulting to 1000
[  596.875813][T28979] wg1 speed is unknown, defaulting to 1000
[  597.018478][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5867'.
[  597.122811][T28998] vlan16: entered promiscuous mode
[  597.125977][T28998] bridge0: entered promiscuous mode
[  597.438746][T29007] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5872'.
[  597.442268][T29007] 8021q: VLANs not supported on ip6_vti0
[  597.593746][T29015]  speed is unknown, defaulting to 1000
[  597.641444][T29017] sctp: [Deprecated]: syz.0.5874 (pid 29017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  597.641444][T29017] Use struct sctp_sack_info instead
[  597.648052][T29017] sctp: [Deprecated]: syz.0.5874 (pid 29017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  597.648052][T29017] Use struct sctp_sack_info instead
[  597.724307][T29015]  speed is unknown, defaulting to 1000
[  597.729835][T29015] wg1 speed is unknown, defaulting to 1000
[  597.908287][T29020] validate_nla: 6 callbacks suppressed
[  597.908303][T29020] netlink: 'syz.0.5875': attribute type 1 has an invalid length.
[  598.027387][T29020] 8021q: adding VLAN 0 to HW filter on device bond190
[  598.377202][T29038] 8021q: adding VLAN 0 to HW filter on device bond191
[  598.453316][T29039] bond191: entered promiscuous mode
[  598.456688][T29039] bond191: entered allmulticast mode
[  598.535267][T29056] netlink: 'syz.0.5881': attribute type 1 has an invalid length.
[  598.552329][T29056] bond192: entered promiscuous mode
[  598.554205][T29056] 8021q: adding VLAN 0 to HW filter on device bond192
[  598.566664][T29056] 8021q: adding VLAN 0 to HW filter on device bond192
[  598.570381][T29056] bond192: (slave vcan0): The slave device specified does not support setting the MAC address
[  598.574005][T29056] bond192: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  598.587599][T29056] bond192: (slave vcan0): making interface the new active one
[  598.590434][T29056] vcan0: entered promiscuous mode
[  598.594327][T29056] bond192: (slave vcan0): Enslaving as an active interface with an up link
[  598.749511][T29068] netlink: 'syz.2.5884': attribute type 15 has an invalid length.
[  598.973293][T29078]  speed is unknown, defaulting to 1000
[  599.770142][T29101] netlink: 'syz.0.5895': attribute type 1 has an invalid length.
[  599.951706][T29117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.064202][T29128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.141369][T29135] syzkaller1: entered promiscuous mode
[  600.144740][T29135] syzkaller1: entered allmulticast mode
[  600.334175][T29150] netlink: 'syz.2.5907': attribute type 10 has an invalid length.
[  600.394132][T29151] veth0: entered promiscuous mode
[  600.397495][T29151] bond0: entered promiscuous mode
[  600.499996][T29149] bond0: left promiscuous mode
[  600.501580][T29149] veth0: left promiscuous mode
[  600.791125][T29164] bond170: entered promiscuous mode
[  600.792887][T29164] bond170: entered allmulticast mode
[  600.795669][T29164] 8021q: adding VLAN 0 to HW filter on device bond170
[  600.867239][T29170] bridge76: entered promiscuous mode
[  600.869982][T29170] bridge76: entered allmulticast mode
[  601.029949][T29174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.070645][T29175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  601.073922][T29175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  601.189982][T29179] tipc: Resetting bearer <eth:syzkaller0>
[  601.394559][T29181] tipc: Resetting bearer <eth:syzkaller0>
[  601.397278][T29181] tipc: Resetting bearer <eth:syzkaller0>
[  601.571920][T29186] __nla_validate_parse: 45 callbacks suppressed
[  601.571932][T29186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'.
[  601.582371][T29186] vlan16: entered allmulticast mode
[  601.584232][T29186] macvtap0: entered allmulticast mode
[  601.587965][T29186] veth0_macvtap: entered allmulticast mode
[  601.677647][T29193] x_tables: duplicate underflow at hook 1
[  602.113587][T29212] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  602.150176][T29205] netlink: 'syz.0.5923': attribute type 58 has an invalid length.
[  602.153233][T29205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5923'.
[  602.240053][T29222] syzkaller0: entered promiscuous mode
[  602.241809][T29222] syzkaller0: entered allmulticast mode
[  602.247697][T29221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  602.265172][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  602.281686][T29228] netlink: 'syz.0.5928': attribute type 4 has an invalid length.
[  602.377381][T29237] netlink: 'syz.2.5930': attribute type 1 has an invalid length.
[  602.394018][T29237] bond171: entered promiscuous mode
[  602.396057][T29237] bond171: entered allmulticast mode
[  602.398152][T29237] 8021q: adding VLAN 0 to HW filter on device bond171
[  602.414145][T29237] erspan2: entered allmulticast mode
[  602.419253][T29237] bond171: (slave erspan2): making interface the new active one
[  602.421592][T29237] erspan2: entered promiscuous mode
[  602.426378][T29237] bond171: (slave erspan2): Enslaving as an active interface with an up link
[  602.515125][T29242] netlink: 'syz.2.5931': attribute type 1 has an invalid length.
[  602.542504][T29242] bond172: (slave bridge77): making interface the new active one
[  602.545274][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  602.549066][T29242] bond172: (slave bridge77): Enslaving as an active interface with an up link
[  602.552921][T29242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5931'.
[  602.560448][T29242] bond172: entered promiscuous mode
[  602.565496][T29242] bridge77: entered promiscuous mode
[  602.569111][T29242] bond172: entered allmulticast mode
[  602.573810][T29242] bridge77: entered allmulticast mode
[  602.577681][T29242] 8021q: adding VLAN 0 to HW filter on device bond172
[  602.587356][T29242] netlink: 'syz.2.5931': attribute type 1 has an invalid length.
[  602.758326][T29254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5934'.
[  602.772374][T29254] 8021q: adding VLAN 0 to HW filter on device bond173
[  602.875219][T29262] x_tables: duplicate underflow at hook 1
[  602.967905][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5939'.
[  602.989979][T29268] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  602.998358][T29266] veth0_to_bond: left allmulticast mode
[  603.002292][T29266] veth0_to_bond: left promiscuous mode
[  603.004340][T29266] bridge50: port 2(veth0_to_bond) entered disabled state
[  603.044115][T29272] validate_nla: 3 callbacks suppressed
[  603.044127][T29272] netlink: 'syz.2.5940': attribute type 1 has an invalid length.
[  603.063455][T29275] openvswitch: netlink: IPv4 tun info is not correct
[  603.098831][T29272] bond174: (slave bridge78): Enslaving as a backup interface with an up link
[  603.108655][T29275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5941'.
[  603.112532][T29272] macvlan5: entered promiscuous mode
[  603.114177][T29272] macvlan5: entered allmulticast mode
[  603.116677][T29272] bond174: entered promiscuous mode
[  603.118186][T29272] bridge78: entered promiscuous mode
[  603.120488][T29272] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  603.123405][T29272] bond174: left promiscuous mode
[  603.124864][T29272] bridge78: left promiscuous mode
[  603.150944][T29275] bond192: (slave vcan0): Releasing backup interface
[  603.153260][T29275] vcan0 (unregistering): left promiscuous mode
[  603.161514][T29275] bond192: Destroying bond
[  603.167491][T29275] bond192 (unregistering): Released all slaves
[  603.282421][T29281] geneve0: entered promiscuous mode
[  603.286317][ T5691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 40855 - 0
[  603.289575][ T5691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 40855 - 0
[  603.292448][ T5691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 40855 - 0
[  603.297329][ T5691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 40855 - 0
[  603.596855][T29288] netlink: 'syz.1.5944': attribute type 1 has an invalid length.
[  603.625003][T29288] 8021q: adding VLAN 0 to HW filter on device bond154
[  603.681570][T29291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5945'.
[  603.717927][T29291] bond155: (slave vxcan1): The slave device specified does not support setting the MAC address
[  603.722610][T29291] bond155: (slave vxcan1): Error -95 calling set_mac_address
[  603.796710][T29291] macvlan17: entered promiscuous mode
[  603.798827][T29291] macvlan17: entered allmulticast mode
[  603.801368][T29291] bond155: (slave macvlan17): Error -98 calling set_mac_address
[  603.879592][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5946'.
[  603.908633][T29301] netlink: 'syz.1.5947': attribute type 10 has an invalid length.
[  603.911274][T29301] netlink: 'syz.1.5947': attribute type 10 has an invalid length.
[  603.913755][T29302] netlink: 'syz.1.5947': attribute type 10 has an invalid length.
[  604.154724][T29316] netlink: 'syz.2.5952': attribute type 1 has an invalid length.
[  604.184680][T29316] 8021q: adding VLAN 0 to HW filter on device bond175
[  604.212892][T29316] bond175: (slave veth97): Enslaving as an active interface with a down link
[  604.231098][T29316] 8021q: adding VLAN 0 to HW filter on device batadv11
[  604.240685][T29316] bond175: (slave batadv11): making interface the new active one
[  604.246949][T29316] batadv11: entered promiscuous mode
[  604.249541][T29316] bond175: (slave batadv11): Enslaving as an active interface with an up link
[  604.272968][T29316] bond175 (unregistering): (slave veth97): Releasing active interface
[  604.286880][T29316] bond175 (unregistering): (slave batadv11): Releasing active interface
[  604.300818][T29316] bond175 (unregistering): Released all slaves
[  604.378835][T29331] netlink: 'syz.1.5955': attribute type 1 has an invalid length.
[  604.471996][T29333] macvlan17: entered promiscuous mode
[  604.473711][T29333] macvlan17: entered allmulticast mode
[  604.481545][T29333] bond156: entered promiscuous mode
[  604.485750][T29333] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  604.492153][T29333] bond156: left promiscuous mode
[  604.651416][T29350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5961'.
[  604.716305][T29350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.749689][T29350] 8021q: adding VLAN 0 to HW filter on device bond1
[  604.759407][T29350] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.772778][T29350] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  604.778015][ T8123]  speed is unknown, defaulting to 1000
[  604.779766][ T8123] syz2: Port: 1 Link ACTIVE
[  604.795635][ T5691] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  604.802703][ T5691] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  604.807724][ T5691] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  604.813480][ T5691] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  604.942465][T29361] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  605.010462][T29366] vlan17: entered promiscuous mode
[  605.111909][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5964'.
[  605.132979][T29366] netlink: 'syz.1.5963': attribute type 4 has an invalid length.
[  605.158594][T29366] netlink: 'syz.1.5963': attribute type 1 has an invalid length.
[  605.165901][T29370] netlink: 'syz.0.5964': attribute type 5 has an invalid length.
[  605.318649][T29378] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003
[  605.437470][T29386] veth0: entered promiscuous mode
[  605.592451][T29383] veth0: left promiscuous mode
[  606.149724][T29419] bond175: Removing last ns target with arp_interval on
[  606.281386][T29423] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  606.291696][T29425] bridge0: port 4(vlan2) entered blocking state
[  606.294232][T29425] bridge0: port 4(vlan2) entered disabled state
[  606.298442][T29425] vlan2: entered allmulticast mode
[  606.300156][T29425] geneve0: entered allmulticast mode
[  606.303214][T29425] vlan2: entered promiscuous mode
[  606.395849][T29434] bond176: entered promiscuous mode
[  606.398255][T29434] 8021q: adding VLAN 0 to HW filter on device bond176
[  606.411226][T29433] bond0: (slave ipvlan9): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  606.714854][T29461] __nla_validate_parse: 7 callbacks suppressed
[  606.714866][T29461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5992'.
[  606.729344][T29461] 0X: renamed from batadv0 (while UP)
[  606.732319][T29461] 0X: entered allmulticast mode
[  606.734118][T29461] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  606.811195][T29458]  speed is unknown, defaulting to 1000
[  606.924782][T29475] bond192: entered promiscuous mode
[  606.927212][T29475] 8021q: adding VLAN 0 to HW filter on device bond192
[  606.944615][T29475] 8021q: adding VLAN 0 to HW filter on device bond192
[  606.947165][T29475] bond192: (slave vcan0): The slave device specified does not support setting the MAC address
[  606.950080][T29475] bond192: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  606.962698][T29475] bond192: (slave vcan0): making interface the new active one
[  606.965797][T29475] vcan0: entered promiscuous mode
[  606.968514][T29475] bond192: (slave vcan0): Enslaving as an active interface with an up link
[  607.011269][T29458]  speed is unknown, defaulting to 1000
[  607.022810][T29458] wg1 speed is unknown, defaulting to 1000
[  607.179922][T29497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5998'.
[  607.182591][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'.
[  607.186113][T29497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5998'.
[  607.190374][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'.
[  607.237571][T29508] syzkaller1: entered promiscuous mode
[  607.239423][T29508] syzkaller1: entered allmulticast mode
[  607.580789][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6004'.
[  607.593024][T29519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6005'.
[  607.597362][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[  607.600418][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[  607.603602][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[  607.824617][T29530] bond157: (slave vxcan1): The slave device specified does not support setting the MAC address
[  607.830957][T29530] bond157: (slave vxcan1): Error -95 calling set_mac_address
[  607.882091][T29534] bond157: (slave bridge61): Enslaving as an active interface with a down link
[  607.891406][T29534] macvlan17: entered promiscuous mode
[  607.892977][T29534] macvlan17: entered allmulticast mode
[  607.895609][T29534] bond157: entered promiscuous mode
[  607.897653][T29534] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  607.900756][T29534] bond157: left promiscuous mode
[  607.999311][T29539] bond158: entered promiscuous mode
[  608.001560][T29539] 8021q: adding VLAN 0 to HW filter on device bond158
[  608.016858][T29539] 8021q: adding VLAN 0 to HW filter on device bond158
[  608.019922][T29539] bond158: (slave wireguard4): The slave device specified does not support setting the MAC address
[  608.023913][T29539] bond158: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  608.034125][T29539] bond158: (slave wireguard4): making interface the new active one
[  608.037442][T29539] wireguard4: entered promiscuous mode
[  608.040299][T29539] bond158: (slave wireguard4): Enslaving as an active interface with an up link
[  608.160016][T29555] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  608.270359][T29562] validate_nla: 6 callbacks suppressed
[  608.270370][T29562] netlink: 'syz.0.6019': attribute type 3 has an invalid length.
[  608.308944][T29566] syzkaller1: entered promiscuous mode
[  608.310743][T29566] syzkaller1: entered allmulticast mode
[  608.380452][T29569] block nbd1: reconnected socket
[  608.382367][T29569] block nbd1: reconnected socket
[  608.435872][T10888] block nbd1: Receive control failed (result -32)
[  608.440997][T10889] block nbd1: Receive control failed (result -32)
[  608.471905][T29576] netlink: 'syz.2.6024': attribute type 1 has an invalid length.
[  608.497968][T29576] bond177: entered promiscuous mode
[  608.499950][T29576] 8021q: adding VLAN 0 to HW filter on device bond177
[  608.510218][T29576] bridge0: Device is already in use.
[  608.649278][T29595] netlink: 'syz.0.6028': attribute type 13 has an invalid length.
[  608.652383][T29595] netlink: 'syz.0.6028': attribute type 17 has an invalid length.
[  609.110348][T29592] tipc: Resetting bearer <eth:syzkaller0>
[  609.191100][    T9]  speed is unknown, defaulting to 1000
[  609.214631][T29595] 0X: left allmulticast mode
[  609.217241][T29595] 8021q: adding VLAN 0 to HW filter on device 60X
[  609.248768][T29595] 8021q: adding VLAN 0 to HW filter on device bond1
[  609.257394][T29595] 8021q: adding VLAN 0 to HW filter on device bond2
[  609.269503][T29595] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  609.286987][T25767] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 40855 - 0
[  609.290534][T25767] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 40855 - 0
[  609.328638][    T9]  speed is unknown, defaulting to 1000
[  609.331178][T25767] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 40855 - 0
[  609.346958][T25767] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 40855 - 0
[  609.521394][T29620] netlink: 'syz.2.6033': attribute type 29 has an invalid length.
[  609.522519][T29621] netlink: 'syz.0.6032': attribute type 1 has an invalid length.
[  609.524803][T29617]  speed is unknown, defaulting to 1000
[  609.545449][T29621] bond193: entered promiscuous mode
[  609.547258][T29621] 8021q: adding VLAN 0 to HW filter on device bond193
[  609.549268][T29610] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  609.552525][T29620] netlink: 'syz.2.6033': attribute type 29 has an invalid length.
[  609.559241][T29620] netlink: 'syz.2.6033': attribute type 29 has an invalid length.
[  609.564284][T29620] netlink: 'syz.2.6033': attribute type 29 has an invalid length.
[  609.581981][T29621] 8021q: adding VLAN 0 to HW filter on device bond193
[  609.588212][T29621] bond193: (slave wireguard7): The slave device specified does not support setting the MAC address
[  609.592398][T29621] bond193: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  609.602190][T29621] bond193: (slave wireguard7): making interface the new active one
[  609.604898][T29621] wireguard7: entered promiscuous mode
[  609.608832][T29621] bond193: (slave wireguard7): Enslaving as an active interface with an up link
[  609.611811][T29620] netlink: 'syz.2.6033': attribute type 29 has an invalid length.
[  609.696425][T29626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  609.735185][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  609.784633][T29617]  speed is unknown, defaulting to 1000
[  609.792825][T29617] wg1 speed is unknown, defaulting to 1000
[  609.845137][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  609.914210][T29647] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  609.978478][T29651] syzkaller0: Caught tx_queue_len zero misconfig
[  610.100123][T29662]  speed is unknown, defaulting to 1000
[  610.180555][T29664] bond178: entered promiscuous mode
[  610.182327][T29664] 8021q: adding VLAN 0 to HW filter on device bond178
[  610.427458][T29668] vlan13: entered promiscuous mode
[  610.497140][T29662]  speed is unknown, defaulting to 1000
[  610.501443][T29665]  speed is unknown, defaulting to 1000
[  610.652962][T29662] wg1 speed is unknown, defaulting to 1000
[  610.665781][T29665]  speed is unknown, defaulting to 1000
[  610.747872][T29665] wg1 speed is unknown, defaulting to 1000
[  611.023162][T29696] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  611.087871][T29696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.216129][T29696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.247154][T29700] nbd0: detected capacity change from 0 to 63
[  611.279178][T10889] block nbd0: Receive control failed (result -104)
[  611.281675][T10888] block nbd0: Receive control failed (result -32)
[  611.285904][T29696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.381706][T29696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.438892][ T8106]  speed is unknown, defaulting to 1000
[  611.441685][    T9]  speed is unknown, defaulting to 1000
[  611.529770][T25767] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.593323][T29716] bond194: entered allmulticast mode
[  611.604780][T29716] 8021q: adding VLAN 0 to HW filter on device bond194
[  611.643046][ T5691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.704706][ T5691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.738677][ T5691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.858814][T29728] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  612.110195][T29756] __nla_validate_parse: 192 callbacks suppressed
[  612.110206][T29756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'.
[  612.266359][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6068'.
[  612.278639][ T5691] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  612.282013][ T5691] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  612.286138][ T5691] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  612.289775][ T5691] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  612.403618][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6069'.
[  612.772004][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'.
[  615.034718][T29745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.179029][T29789] ipvlan1: entered allmulticast mode
[  615.191351][T29789] bond23: entered allmulticast mode
[  615.197626][T29789] ipvlan1: left allmulticast mode
[  615.201626][T29789] bond23: left allmulticast mode
[  615.206171][T29791] validate_nla: 177 callbacks suppressed
[  615.206181][T29791] netlink: 'syz.1.6073': attribute type 4 has an invalid length.
[  615.506167][ T7545] nci: nci_ntf_packet: unknown ntf opcode 0x132
[  615.550274][T29816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'.
[  615.553466][T29816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'.
[  615.556922][T29816] netlink: 'syz.0.6080': attribute type 4 has an invalid length.
[  616.577221][T29840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6086'.
[  616.584039][T29840] vcan2: entered promiscuous mode
[  616.586344][T29840] vcan2: entered allmulticast mode
[  616.704482][T29847]  speed is unknown, defaulting to 1000
[  616.802906][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6088'.
[  616.808750][T29847]  speed is unknown, defaulting to 1000
[  616.810514][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6088'.
[  616.814633][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6088'.
[  616.818057][T29847] wg1 speed is unknown, defaulting to 1000
[  617.479015][T29866] __nla_validate_parse: 6 callbacks suppressed
[  617.479026][T29866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6093'.
[  617.483585][T29866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6093'.
[  618.339527][T29797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  618.502836][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6094'.
[  618.582973][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6095'.
[  618.607675][T29878] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6095'.
[  618.615675][T29878] IPv6: NLM_F_CREATE should be specified when creating new route
[  619.563310][T29905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  619.719735][T29927] netlink: 'syz.0.6103': attribute type 1 has an invalid length.
[  619.762859][T29927] 8021q: adding VLAN 0 to HW filter on device bond195
[  619.778702][T29927] vlan13: entered allmulticast mode
[  619.780298][T29927] bond195: entered allmulticast mode
[  619.826414][T29935] netlink: 'syz.0.6104': attribute type 1 has an invalid length.
[  619.846447][T29935] 8021q: adding VLAN 0 to HW filter on device bond196
[  619.859978][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6104'.
[  619.967582][T29939] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6105'.
[  619.984094][T29939] tun0: tun_chr_ioctl cmd 1074025675
[  619.989601][T29939] tun0: persist enabled
[  619.991051][T29939] tun0: tun_chr_ioctl cmd 1074025675
[  619.992629][T29939] tun0: persist enabled
[  619.993864][T29939] tun0: tun_chr_ioctl cmd 1074025673
[  620.129996][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'.
[  620.162057][T29969] netlink: 'syz.0.6112': attribute type 64 has an invalid length.
[  620.188230][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6111'.
[  620.202275][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6113'.
[  620.272072][T29980] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  620.401086][T29993] bond197: entered allmulticast mode
[  620.472050][T29987] netlink: 'syz.2.6116': attribute type 2 has an invalid length.
[  620.474476][T29987] netlink: 'syz.2.6116': attribute type 2 has an invalid length.
[  620.658260][T29997] netlink: 'syz.0.6119': attribute type 10 has an invalid length.
[  620.836100][T30011] netlink: 'syz.0.6123': attribute type 1 has an invalid length.
[  620.852605][T30011] bond198: entered promiscuous mode
[  620.854730][T30011] 8021q: adding VLAN 0 to HW filter on device bond198
[  620.883542][T30014] syzkaller0: entered allmulticast mode
[  620.896017][T30014] syzkaller0: entered promiscuous mode
[  620.917285][T30014] syzkaller0 (unregistering): left promiscuous mode
[  620.919797][T30014] syzkaller0 (unregistering): left allmulticast mode
[  620.962797][T30019] netlink: 'syz.2.6126': attribute type 1 has an invalid length.
[  621.002566][T30019] 8021q: adding VLAN 0 to HW filter on device bond179
[  621.009447][T30019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.091586][T30036] netlink: 'syz.0.6130': attribute type 1 has an invalid length.
[  621.128113][T30036] bond199: entered promiscuous mode
[  621.134493][T30036] 8021q: adding VLAN 0 to HW filter on device bond199
[  621.148268][T30036] bond199: entered allmulticast mode
[  621.163534][T30036] bond199: (slave bridge59): making interface the new active one
[  621.167805][T30036] bridge59: entered promiscuous mode
[  621.169515][T30036] bridge59: entered allmulticast mode
[  621.172168][T30036] bond199: (slave bridge59): Enslaving as an active interface with an up link
[  621.213725][T30045] netlink: 'syz.2.6134': attribute type 10 has an invalid length.
[  621.415923][T30065] netlink: 'syz.1.6140': attribute type 1 has an invalid length.
[  621.440826][T30064] bond180: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  621.446380][T30064] bond180 (unregistering): Released all slaves
[  621.478024][T30076] 8021q: adding VLAN 0 to HW filter on device bond159
[  621.590658][T30080]  speed is unknown, defaulting to 1000
[  621.750692][T30080]  speed is unknown, defaulting to 1000
[  621.751564][T30093]  speed is unknown, defaulting to 1000
[  621.753974][T30080] wg1 speed is unknown, defaulting to 1000
[  621.886712][T30093]  speed is unknown, defaulting to 1000
[  621.890073][T30093] wg1 speed is unknown, defaulting to 1000
[  622.576253][T30108] 8021q: adding VLAN 0 to HW filter on device bond180
[  622.655827][T30112] : renamed from bond_slave_0
[  624.592512][T30083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  624.667139][T30117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.681838][T30118] syzkaller0: entered promiscuous mode
[  624.683601][T30118] syzkaller0: entered allmulticast mode
[  624.692160][T30118] __nla_validate_parse: 26 callbacks suppressed
[  624.692169][T30118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6152'.
[  624.699416][T30122] netlink: 'syz.2.6154': attribute type 1 has an invalid length.
[  624.702000][T30117] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6152'.
[  624.720675][T30122] 8021q: adding VLAN 0 to HW filter on device bond181
[  624.732225][T30118] tipc: Resetting bearer <eth:syzkaller0>
[  624.736610][T30116] tipc: Resetting bearer <eth:syzkaller0>
[  624.757641][T30116] tipc: Disabling bearer <eth:syzkaller0>
[  624.891229][T30131] : renamed from veth0_to_bond (while UP)
[  624.910050][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.912424][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.994666][T30140] bond157: (slave bridge61): Releasing active interface
[  625.012607][T30140] bond158: (slave wireguard4): Releasing backup interface
[  625.018794][T30140] wireguard4: left promiscuous mode
[  625.123659][T30150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6163'.
[  625.188038][T30155] netlink: 'syz.2.6164': attribute type 1 has an invalid length.
[  625.233333][T30155] bond182: entered promiscuous mode
[  625.240736][T30155] 8021q: adding VLAN 0 to HW filter on device bond182
[  625.353788][T30171] : Caught tx_queue_len zero misconfig
[  625.451064][T30188] bridge81: entered promiscuous mode
[  625.464198][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6171'.
[  625.467812][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6171'.
[  625.554680][T30195] validate_nla: 1 callbacks suppressed
[  625.554695][T30195] netlink: 'syz.1.6172': attribute type 1 has an invalid length.
[  625.581946][T30195] 8021q: adding VLAN 0 to HW filter on device bond160
[  625.603841][T30195] bond160: (slave veth57): Enslaving as an active interface with a down link
[  625.619706][T30195] 8021q: adding VLAN 0 to HW filter on device batadv13
[  625.623417][T30195] bond160: (slave batadv13): making interface the new active one
[  625.626827][T30195] batadv13: entered promiscuous mode
[  625.628864][T30195] bond160: (slave batadv13): Enslaving as an active interface with an up link
[  625.706537][T30204] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  625.714081][T30204] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  625.780063][T30206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  625.783242][T30208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6176'.
[  626.049301][T30208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'.
[  626.245423][T30242] openvswitch: : Dropping previously announced user features
[  626.616197][T30254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6187'.
[  626.817243][T30278] netlink: 'syz.1.6194': attribute type 1 has an invalid length.
[  626.820078][T30278] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6194'.
[  626.860700][T30272] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  626.903347][T30281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6195'.
[  626.911742][T30281] netlink: 'syz.1.6195': attribute type 1 has an invalid length.
[  627.123475][T30291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  627.127256][T30291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  627.211377][T30296] netlink: 'syz.2.6198': attribute type 1 has an invalid length.
[  627.383902][ T8104] wg1 speed is unknown, defaulting to 1000
[  627.423575][T30299] bond183: (slave vxcan3): The slave device specified does not support setting the MAC address
[  627.428901][T30299] bond183: (slave vxcan3): Error -95 calling set_mac_address
[  627.466548][T30301] bond183: (slave bridge82): Enslaving as an active interface with a down link
[  627.569613][T30308] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  627.591110][T30308] 8021q: adding VLAN 0 to HW filter on device bond201
[  627.662019][T30315] macvlan10: entered promiscuous mode
[  627.664539][T30315] macvlan10: entered allmulticast mode
[  627.798609][T30322] pim6reg: entered allmulticast mode
[  627.801932][T30322] pim6reg: left allmulticast mode
[  628.012381][T30328] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  628.020087][T30329] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  628.025600][T30329] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  628.025634][T30328] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  628.037348][T30336] netlink: 'syz.2.6210': attribute type 1 has an invalid length.
[  628.092094][T30336] 8021q: adding VLAN 0 to HW filter on device bond184
[  628.167695][T30351] netlink: 'syz.0.6214': attribute type 1 has an invalid length.
[  628.193082][T30351] 8021q: adding VLAN 0 to HW filter on device bond202
[  628.224483][T30354] xt_limit: Overflow, try lower: 324382443/0
[  628.240316][T30351] bond202: (slave veth75): Enslaving as an active interface with a down link
[  628.527573][T30370] syzkaller0: entered promiscuous mode
[  628.530894][T30372] netlink: 'syz.2.6217': attribute type 11 has an invalid length.
[  628.533676][T30370] syzkaller0: entered allmulticast mode
[  628.754314][T30389] netlink: 'syz.1.6223': attribute type 1 has an invalid length.
[  628.803351][T30388] bond161: (slave vxcan1): The slave device specified does not support setting the MAC address
[  628.807600][T30388] bond161: (slave vxcan1): Error -95 calling set_mac_address
[  628.821640][T30391] bond203: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  628.829995][T30391] bond203: (slave 26): Enslaving as an active interface with an up link
[  628.832834][T30391] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  628.838630][T10024]  speed is unknown, defaulting to 1000
[  628.840362][ T8119]  speed is unknown, defaulting to 1000
[  628.842273][ T8123]  speed is unknown, defaulting to 1000
[  628.846460][T30382] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  628.849730][T30382] CPU: 1 UID: 0 PID: 30382 Comm: syz.2.6221 Not tainted syzkaller #0 PREEMPT(full) 
[  628.849746][T30382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  628.849753][T30382] Call Trace:
[  628.849760][T30382]  <TASK>
[  628.849766][T30382]  dump_stack_lvl+0xe8/0x150
[  628.849789][T30382]  sysfs_warn_dup+0x8e/0xa0
[  628.849808][T30382]  sysfs_do_create_link_sd+0xc0/0x110
[  628.849829][T30382]  device_add_class_symlinks+0x1cf/0x240
[  628.849849][T30382]  device_add+0x475/0xbb0
[  628.849864][T30382]  wiphy_register+0x1dc5/0x2dc0
[  628.849898][T30382]  ? __pfx_wiphy_register+0x10/0x10
[  628.849919][T30382]  ? __pfx_netdev_run_todo+0x10/0x10
[  628.849940][T30382]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  628.849963][T30382]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  628.849979][T30382]  ieee80211_register_hw+0x3d82/0x4a70
[  628.850012][T30382]  ? ieee80211_register_hw+0x18d1/0x4a70
[  628.850055][T30382]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  628.850078][T30382]  ? __asan_memset+0x22/0x50
[  628.850090][T30382]  ? __hrtimer_setup+0x1b7/0x260
[  628.850108][T30382]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  628.850130][T30382]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  628.850170][T30382]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  628.850185][T30382]  ? kstrndup+0xbf/0x160
[  628.850208][T30382]  hwsim_new_radio_nl+0xf6a/0x1c00
[  628.850235][T30382]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  628.850260][T30382]  ? rcu_is_watching+0x15/0xb0
[  628.850277][T30382]  ? trace_kmalloc+0x2a/0xf0
[  628.850304][T30382]  ? __nla_parse+0x40/0x60
[  628.850329][T30382]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  628.850346][T30382]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  628.850360][T30382]  genl_family_rcv_msg_doit+0x22a/0x330
[  628.850380][T30382]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  628.850412][T30382]  ? bpf_lsm_capable+0x9/0x20
[  628.850426][T30382]  ? security_capable+0x7e/0x2c0
[  628.850451][T30382]  genl_rcv_msg+0x61c/0x7a0
[  628.850467][T30382]  ? __pfx_genl_rcv_msg+0x10/0x10
[  628.850477][T30382]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  628.850506][T30382]  netlink_rcv_skb+0x232/0x4b0
[  628.850526][T30382]  ? __pfx_genl_rcv_msg+0x10/0x10
[  628.850543][T30382]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  628.850573][T30382]  ? down_read+0x270/0x2e0
[  628.850581][T30382]  ? genl_rcv+0xd/0x40
[  628.850596][T30382]  genl_rcv+0x28/0x40
[  628.850608][T30382]  netlink_unicast+0x75c/0x8e0
[  628.850635][T30382]  netlink_sendmsg+0x813/0xb40
[  628.850688][T30382]  ? __pfx_netlink_sendmsg+0x10/0x10
[  628.850712][T30382]  ? aa_sock_msg_perm+0xf1/0x1b0
[  628.850733][T30382]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  628.850771][T30382]  ____sys_sendmsg+0x972/0x9f0
[  628.850793][T30382]  ? __might_fault+0xaf/0x130
[  628.850817][T30382]  ? __pfx_____sys_sendmsg+0x10/0x10
[  628.850842][T30382]  ? import_iovec+0x73/0xa0
[  628.850863][T30382]  ___sys_sendmsg+0x2a5/0x360
[  628.850882][T30382]  ? __lock_acquire+0x6b5/0x2cf0
[  628.850902][T30382]  ? __pfx____sys_sendmsg+0x10/0x10
[  628.850927][T30382]  ? futex_wait+0x2a2/0x390
[  628.850964][T30382]  ? __fget_files+0x2a/0x420
[  628.850980][T30382]  ? __fget_files+0x3a0/0x420
[  628.851007][T30382]  __x64_sys_sendmsg+0x1bd/0x2a0
[  628.851022][T30382]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  628.851048][T30382]  ? rcu_is_watching+0x15/0xb0
[  628.851074][T30382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.851090][T30382]  do_syscall_64+0x15f/0xf80
[  628.851104][T30382]  ? trace_irq_disable+0x3b/0x140
[  628.851127][T30382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.851142][T30382] RIP: 0033:0x7f49c239cdd9
[  628.851156][T30382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.851168][T30382] RSP: 002b:00007f49c31d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.851183][T30382] RAX: ffffffffffffffda RBX: 00007f49c2616090 RCX: 00007f49c239cdd9
[  628.851190][T30382] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  628.851196][T30382] RBP: 00007f49c2432d69 R08: 0000000000000000 R09: 0000000000000000
[  628.851204][T30382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.851213][T30382] R13: 00007f49c2616128 R14: 00007f49c2616090 R15: 00007ffd71ae4738
[  628.851238][T30382]  </TASK>
[  628.997036][T30389] macvlan17: entered promiscuous mode
[  628.998870][T30389] macvlan17: entered allmulticast mode
[  629.001360][T30389] bond161: entered promiscuous mode
[  629.003766][T30389] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  629.010824][T30389] bond161: left promiscuous mode
[  629.143100][T30399] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.147268][T30399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.213240][T30399] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.218354][T30399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.324897][T30399] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.328937][T30399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.404606][T30399] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.410240][T30399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.433125][T30414] netlink: 'syz.0.6231': attribute type 1 has an invalid length.
[  629.476866][T30414] 8021q: adding VLAN 0 to HW filter on device bond204
[  629.498323][T30414] bond204: (slave veth79): Enslaving as an active interface with a down link
[  629.515473][T30414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.527200][T30414] bond204: (slave batadv0): making interface the new active one
[  629.532172][T30414] batadv0: entered promiscuous mode
[  629.534644][T30414] bond204: (slave batadv0): Enslaving as an active interface with an up link
[  629.600397][T30414] bond204 (unregistering): (slave veth79): Releasing active interface
[  629.615915][T30414] bond204 (unregistering): (slave batadv0): Releasing active interface
[  629.628789][T30414] bond204 (unregistering): Released all slaves
[  629.650988][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  629.654063][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.673391][ T5649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  629.680241][ T5649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.712963][ T5649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  629.716976][ T5649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.729961][ T5649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  629.735239][ T5649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.774851][T30421] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000
[  629.832220][T30424] __nla_validate_parse: 5 callbacks suppressed
[  629.832236][T30424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6234'.
[  629.836418][T30427] netlink: 'syz.0.6235': attribute type 1 has an invalid length.
[  629.864196][T30427] bond204: entered promiscuous mode
[  629.866168][T30427] 8021q: adding VLAN 0 to HW filter on device bond204
[  629.886214][T30424] 8021q: adding VLAN 0 to HW filter on device bond162
[  629.893735][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6234'.
[  629.915957][T30427] 8021q: adding VLAN 0 to HW filter on device bond204
[  629.920903][T30427] bond204: (slave wireguard8): The slave device specified does not support setting the MAC address
[  629.930710][T30427] bond204: (slave wireguard8): Setting fail_over_mac to active for active-backup mode
[  629.948683][T30427] bond204: (slave wireguard8): making interface the new active one
[  629.957636][T30427] wireguard8: entered promiscuous mode
[  629.961001][T30427] bond204: (slave wireguard8): Enslaving as an active interface with an up link
[  629.965388][T30425] workqueue: Failed to create a rescuer kthread for wq "bond163": -EINTR
[  629.979288][T30431] bond162 (unregistering): Released all slaves
[  630.028020][T30438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.030676][T30438] IPv6: NLM_F_CREATE should be set when creating new route
[  630.033431][T30438] IPv6: NLM_F_CREATE should be set when creating new route
[  630.036000][T30438] IPv6: NLM_F_CREATE should be set when creating new route
[  630.173906][T30446] bond205: entered promiscuous mode
[  630.180962][T30446] 8021q: adding VLAN 0 to HW filter on device bond205
[  630.188232][T30446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6238'.
[  630.191164][T30446] bond205: entered allmulticast mode
[  630.201832][T30446] bond205: (slave bridge60): making interface the new active one
[  630.204150][T30446] bridge60: entered promiscuous mode
[  630.206260][T30446] bridge60: entered allmulticast mode
[  630.208989][T30446] bond205: (slave bridge60): Enslaving as an active interface with an up link
[  630.442841][T30468] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002
[  630.500007][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6244'.
[  630.510480][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6247'.
[  630.522916][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6247'.
[  630.529420][T30478] 8021q: VLANs not supported on ip6_vti0
[  630.538200][T30477] 8021q: VLANs not supported on ip6_vti0
[  630.561792][T30482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6248'.
[  630.576270][T30482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6248'.
[  630.766564][T30502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6254'.
[  630.864363][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'.
[  631.113908][T30504] validate_nla: 1 callbacks suppressed
[  631.113924][T30504] netlink: 'syz.2.6255': attribute type 1 has an invalid length.
[  631.148939][T30533]  speed is unknown, defaulting to 1000
[  631.164248][T30504] bond185: (slave vxcan3): The slave device specified does not support setting the MAC address
[  631.168371][T30504] bond185: (slave vxcan3): Error -95 calling set_mac_address
[  631.270669][T30533]  speed is unknown, defaulting to 1000
[  631.274035][T30533] wg1 speed is unknown, defaulting to 1000
[  631.621195][T30557]  speed is unknown, defaulting to 1000
[  631.726857][T30557]  speed is unknown, defaulting to 1000
[  631.730803][T30557] wg1 speed is unknown, defaulting to 1000
[  632.250106][T30565] netlink: 'syz.2.6270': attribute type 1 has an invalid length.
[  632.264009][T30565] bond186: entered promiscuous mode
[  632.266444][T30565] 8021q: adding VLAN 0 to HW filter on device bond186
[  632.333021][T30567] ipvlan10: entered allmulticast mode
[  632.334584][T30567] bond186: entered allmulticast mode
[  632.344612][T30567] ipvlan11: entered allmulticast mode
[  632.362749][T30567] bond186: (slave bridge83): making interface the new active one
[  632.365457][T30567] bridge83: entered promiscuous mode
[  632.367040][T30567] bridge83: entered allmulticast mode
[  632.370166][T30567] bond186: (slave bridge83): Enslaving as an active interface with an up link
[  634.054468][T30526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.242638][T30578] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  634.316836][T30583] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  634.413550][T30589] x_tables: ip6_tables: mh match: only valid for protocol 135
[  634.570694][T30593] bond206 (unregistering): Released all slaves
[  634.682748][T30605] netlink: 'syz.0.6282': attribute type 1 has an invalid length.
[  634.724514][T30605] 8021q: adding VLAN 0 to HW filter on device bond206
[  635.047892][T30623] netlink: 'syz.2.6287': attribute type 1 has an invalid length.
[  635.095482][T30623] workqueue: Failed to create a rescuer kthread for wq "bond187": -EINTR
[  635.204590][T30642] dvmrp0: left allmulticast mode
[  635.211877][T30644] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  635.216812][T30644] netlink: 'syz.2.6293': attribute type 1 has an invalid length.
[  635.241139][T30644] 8021q: adding VLAN 0 to HW filter on device bond187
[  635.393061][T30655] __nla_validate_parse: 6 callbacks suppressed
[  635.393076][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'.
[  635.460633][T30650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6295'.
[  635.474825][T30663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6299'.
[  635.622659][T30673] netlink: 'syz.0.6302': attribute type 49 has an invalid length.
[  635.738452][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6305'.
[  635.817483][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6304'.
[  635.830653][T30683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6305'.
[  635.927869][T30691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6308'.
[  635.933221][T30689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6306'.
[  636.113625][T30703] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6311'.
[  636.274599][T30714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6312'.
[  636.318707][T30711] netlink: 'syz.0.6313': attribute type 13 has an invalid length.
[  636.329370][T30711] netlink: 'syz.0.6313': attribute type 17 has an invalid length.
[  636.654444][T30710] tipc: Resetting bearer <eth:syzkaller0>
[  636.899230][T30711] 8021q: adding VLAN 0 to HW filter on device 60X
[  636.939852][T30711] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  636.962967][T30724] bond188 (unregistering): Released all slaves
[  636.989726][T11216] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  636.993178][T11216] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  637.003382][T11216] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  637.013564][T11216] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  637.089777][ T5649] batadv13: left promiscuous mode
[  637.248467][T30738] bond207: option arp_all_targets: invalid value (129)
[  637.256037][T30738] bond207 (unregistering): Released all slaves
[  637.504381][T30773] vcan0: entered promiscuous mode
[  637.507677][T30773] vcan0: entered allmulticast mode
[  637.519018][T30777] syzkaller0: left promiscuous mode
[  637.520721][T30777] syzkaller0: left allmulticast mode
[  637.522495][T30777] tipc: Resetting bearer <eth:syzkaller0>
[  637.567578][T30781] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  637.637156][T30786] netlink: 'syz.2.6327': attribute type 32 has an invalid length.
[  637.774819][T30790] bond163: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  637.783335][T30790] bond163: (slave 26): Enslaving as an active interface with an up link
[  637.790267][T30790] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  637.884492][T30793] syzkaller0: entered promiscuous mode
[  637.886355][T30793] syzkaller0: entered allmulticast mode
[  640.356891][T30802] bond192: (slave vcan0): Releasing backup interface
[  640.359124][T30802] vcan0 (unregistering): left promiscuous mode
[  640.361984][T30812] netlink: 'syz.2.6336': attribute type 1 has an invalid length.
[  640.372469][T30802] bond192: Destroying bond
[  640.383957][T30802] bond192 (unregistering): Released all slaves
[  640.417130][T30812] bond188: entered promiscuous mode
[  640.419241][T30812] 8021q: adding VLAN 0 to HW filter on device bond188
[  640.491245][T30823] 
[  640.492048][T30823] ======================================================
[  640.494063][T30823] WARNING: possible circular locking dependency detected
[  640.496236][T30823] syzkaller #0 Not tainted
[  640.497926][T30823] ------------------------------------------------------
[  640.499925][T30823] syz.2.6339/30823 is trying to acquire lock:
[  640.501612][T30823] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.504519][T30823] 
[  640.504519][T30823] but task is already holding lock:
[  640.506567][T30823] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  640.509215][T30823] 
[  640.509215][T30823] which lock already depends on the new lock.
[  640.509215][T30823] 
[  640.512089][T30823] 
[  640.512089][T30823] the existing dependency chain (in reverse order) is:
[  640.514522][T30823] 
[  640.514522][T30823] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  640.516714][T30823]        down_write+0x96/0x200
[  640.518114][T30823]        kernfs_add_one+0x41/0x5c0
[  640.519531][T30823]        kernfs_create_dir_ns+0xde/0x130
[  640.521109][T30823]        internal_create_group+0x425/0x1180
[  640.522781][T30823]        cpuhp_invoke_callback+0x445/0x860
[  640.524463][T30823]        cpuhp_issue_call+0x430/0x7a0
[  640.526011][T30823]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  640.527855][T30823]        __cpuhp_setup_state+0x3f/0x60
[  640.529394][T30823]        do_one_initcall+0x250/0x870
[  640.530935][T30823]        do_initcall_level+0x104/0x190
[  640.532650][T30823]        do_initcalls+0x59/0xa0
[  640.534032][T30823]        kernel_init_freeable+0x2a6/0x3e0
[  640.535635][T30823]        kernel_init+0x1d/0x1d0
[  640.537020][T30823]        ret_from_fork+0x514/0xb70
[  640.538413][T30823]        ret_from_fork_asm+0x1a/0x30
[  640.539887][T30823] 
[  640.539887][T30823] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  640.542123][T30823] 
[  640.542123][T30823] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  640.544371][T30823]        cpus_read_lock+0x42/0x160
[  640.545970][T30823]        static_key_slow_inc+0x12/0x30
[  640.547419][T30823]        nbd_genl_reconfigure+0x132f/0x1ea0
[  640.549499][T30823]        genl_family_rcv_msg_doit+0x22a/0x330
[  640.551646][T30823]        genl_rcv_msg+0x61c/0x7a0
[  640.553490][T30823]        netlink_rcv_skb+0x232/0x4b0
[  640.555403][T30823]        genl_rcv+0x28/0x40
[  640.557074][T30823]        netlink_unicast+0x75c/0x8e0
[  640.558987][T30823]        netlink_sendmsg+0x813/0xb40
[  640.560937][T30823]        ____sys_sendmsg+0x972/0x9f0
[  640.562786][T30823]        ___sys_sendmsg+0x2a5/0x360
[  640.564666][T30823]        __x64_sys_sendmsg+0x1bd/0x2a0
[  640.566598][T30823]        do_syscall_64+0x15f/0xf80
[  640.568449][T30823]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.570767][T30823] 
[  640.570767][T30823] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  640.573416][T30823]        __mutex_lock+0x1a3/0x1550
[  640.575068][T30823]        nbd_queue_rq+0x37b/0x1100
[  640.576989][T30823]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  640.579087][T30823]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  640.581572][T30823]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  640.583939][T30823]        blk_mq_run_hw_queue+0x348/0x4f0
[  640.585992][T30823]        blk_mq_dispatch_list+0xd16/0xe10
[  640.588045][T30823]        blk_mq_flush_plug_list+0x48d/0x570
[  640.590189][T30823]        __blk_flush_plug+0x3ed/0x4d0
[  640.592105][T30823]        __submit_bio+0x28d/0x580
[  640.593948][T30823]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  640.595848][T30823]        block_read_full_folio+0x599/0x830
[  640.597677][T30823]        filemap_read_folio+0x137/0x3b0
[  640.599291][T30823]        do_read_cache_folio+0x358/0x590
[  640.601189][T30823]        read_part_sector+0xb6/0x2b0
[  640.602976][T30823]        adfspart_check_ICS+0xb1/0x960
[  640.604934][T30823]        bdev_disk_changed+0x817/0x1770
[  640.607016][T30823]        blkdev_get_whole+0x380/0x510
[  640.608995][T30823]        bdev_open+0x31e/0xd30
[  640.610731][T30823]        blkdev_open+0x470/0x610
[  640.612219][T30823]        do_dentry_open+0x785/0x14e0
[  640.613737][T30823]        vfs_open+0x3b/0x340
[  640.615128][T30823]        path_openat+0x2e08/0x3860
[  640.616787][T30823]        do_file_open+0x23e/0x4a0
[  640.618638][T30823]        do_sys_openat2+0x113/0x200
[  640.620613][T30823]        __x64_sys_openat+0x138/0x170
[  640.622645][T30823]        do_syscall_64+0x15f/0xf80
[  640.624585][T30823]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.626968][T30823] 
[  640.626968][T30823] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  640.629635][T30823]        __mutex_lock+0x1a3/0x1550
[  640.631523][T30823]        nbd_queue_rq+0xc6/0x1100
[  640.633243][T30823]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  640.635284][T30823]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  640.637735][T30823]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  640.639664][T30823]        blk_mq_run_hw_queue+0x348/0x4f0
[  640.641395][T30823]        blk_mq_dispatch_list+0xd16/0xe10
[  640.643390][T30823]        blk_mq_flush_plug_list+0x48d/0x570
[  640.645451][T30823]        __blk_flush_plug+0x3ed/0x4d0
[  640.647111][T30823]        __submit_bio+0x28d/0x580
[  640.648639][T30823]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  640.650628][T30823]        block_read_full_folio+0x599/0x830
[  640.652272][T30823]        filemap_read_folio+0x137/0x3b0
[  640.653815][T30823]        do_read_cache_folio+0x358/0x590
[  640.655359][T30823]        read_part_sector+0xb6/0x2b0
[  640.657032][T30823]        adfspart_check_ICS+0xb1/0x960
[  640.659058][T30823]        bdev_disk_changed+0x817/0x1770
[  640.660856][T30823]        blkdev_get_whole+0x380/0x510
[  640.662529][T30823]        bdev_open+0x31e/0xd30
[  640.664241][T30823]        blkdev_open+0x470/0x610
[  640.666384][T30823]        do_dentry_open+0x785/0x14e0
[  640.668666][T30823]        vfs_open+0x3b/0x340
[  640.670827][T30823]        path_openat+0x2e08/0x3860
[  640.672640][T30823]        do_file_open+0x23e/0x4a0
[  640.674497][T30823]        do_sys_openat2+0x113/0x200
[  640.676323][T30823]        __x64_sys_openat+0x138/0x170
[  640.678217][T30823]        do_syscall_64+0x15f/0xf80
[  640.680046][T30823]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.682438][T30823] 
[  640.682438][T30823] -> #3 (set->srcu){.+.+}-{0:0}:
[  640.684880][T30823]        __synchronize_srcu+0xca/0x300
[  640.686532][T30823]        elevator_switch+0x1e8/0x7a0
[  640.688187][T30823]        elevator_change+0x2cc/0x450
[  640.689619][T30823]        elevator_set_default+0x36c/0x430
[  640.691219][T30823]        blk_register_queue+0x3e9/0x4e0
[  640.692908][T30823]        __add_disk+0x677/0xd50
[  640.694291][T30823]        add_disk_fwnode+0xfb/0x480
[  640.695939][T30823]        nbd_dev_add+0x72c/0xb50
[  640.697472][T30823]        nbd_init+0x168/0x1f0
[  640.698848][T30823]        do_one_initcall+0x250/0x870
[  640.700302][T30823]        do_initcall_level+0x104/0x190
[  640.701921][T30823]        do_initcalls+0x59/0xa0
[  640.703233][T30823]        kernel_init_freeable+0x2a6/0x3e0
[  640.704913][T30823]        kernel_init+0x1d/0x1d0
[  640.706199][T30823]        ret_from_fork+0x514/0xb70
[  640.707537][T30823]        ret_from_fork_asm+0x1a/0x30
[  640.708972][T30823] 
[  640.708972][T30823] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  640.711125][T30823]        __mutex_lock+0x1a3/0x1550
[  640.712541][T30823]        elevator_change+0x1b3/0x450
[  640.713991][T30823]        elevator_set_none+0xb5/0x140
[  640.715514][T30823]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  640.717722][T30823]        nbd_start_device+0x17f/0xb10
[  640.719620][T30823]        nbd_genl_connect+0x165b/0x1cf0
[  640.721648][T30823]        genl_family_rcv_msg_doit+0x22a/0x330
[  640.724447][T30823]        genl_rcv_msg+0x61c/0x7a0
[  640.726319][T30823]        netlink_rcv_skb+0x232/0x4b0
[  640.728208][T30823]        genl_rcv+0x28/0x40
[  640.729879][T30823]        netlink_unicast+0x75c/0x8e0
[  640.731765][T30823]        netlink_sendmsg+0x813/0xb40
[  640.733624][T30823]        ____sys_sendmsg+0x972/0x9f0
[  640.735408][T30823]        ___sys_sendmsg+0x2a5/0x360
[  640.737094][T30823]        __x64_sys_sendmsg+0x1bd/0x2a0
[  640.740112][T30823]        do_syscall_64+0x15f/0xf80
[  640.741935][T30823]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.744169][T30823] 
[  640.744169][T30823] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  640.747154][T30823]        blk_alloc_queue+0x546/0x680
[  640.749066][T30823]        __blk_mq_alloc_disk+0x197/0x390
[  640.751115][T30823]        nbd_dev_add+0x499/0xb50
[  640.752819][T30823]        nbd_init+0x168/0x1f0
[  640.754452][T30823]        do_one_initcall+0x250/0x870
[  640.756366][T30823]        do_initcall_level+0x104/0x190
[  640.758230][T30823]        do_initcalls+0x59/0xa0
[  640.759993][T30823]        kernel_init_freeable+0x2a6/0x3e0
[  640.762019][T30823]        kernel_init+0x1d/0x1d0
[  640.763783][T30823]        ret_from_fork+0x514/0xb70
[  640.765627][T30823]        ret_from_fork_asm+0x1a/0x30
[  640.767544][T30823] 
[  640.767544][T30823] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  640.770120][T30823]        __lock_acquire+0x15a5/0x2cf0
[  640.771926][T30823]        lock_acquire+0x106/0x350
[  640.773627][T30823]        fs_reclaim_acquire+0x71/0x100
[  640.775526][T30823]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.777766][T30823]        kstrdup+0x42/0x100
[  640.779341][T30823]        kernfs_rename_ns+0x476/0x830
[  640.781217][T30823]        sysfs_rename_link_ns+0x16e/0x1b0
[  640.783204][T30823]        device_rename+0x110/0x210
[  640.784885][T30823]        cfg80211_dev_rename+0x131/0x200
[  640.786729][T30823]        nl80211_set_wiphy+0x2a5/0x2ea0
[  640.788703][T30823]        genl_family_rcv_msg_doit+0x22a/0x330
[  640.790603][T30823]        genl_rcv_msg+0x61c/0x7a0
[  640.792201][T30823]        netlink_rcv_skb+0x232/0x4b0
[  640.793918][T30823]        genl_rcv+0x28/0x40
[  640.795926][T30823]        netlink_unicast+0x75c/0x8e0
[  640.798115][T30823]        netlink_sendmsg+0x813/0xb40
[  640.800373][T30823]        ____sys_sendmsg+0x972/0x9f0
[  640.802822][T30823]        ___sys_sendmsg+0x2a5/0x360
[  640.804859][T30823]        __x64_sys_sendmsg+0x1bd/0x2a0
[  640.806853][T30823]        do_syscall_64+0x15f/0xf80
[  640.808676][T30823]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.811046][T30823] 
[  640.811046][T30823] other info that might help us debug this:
[  640.811046][T30823] 
[  640.814665][T30823] Chain exists of:
[  640.814665][T30823]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  640.814665][T30823] 
[  640.820064][T30823]  Possible unsafe locking scenario:
[  640.820064][T30823] 
[  640.823272][T30823]        CPU0                    CPU1
[  640.825541][T30823]        ----                    ----
[  640.827758][T30823]   lock(&root->kernfs_rwsem);
[  640.829998][T30823]                                lock(cpuhp_state_mutex);
[  640.832657][T30823]                                lock(&root->kernfs_rwsem);
[  640.835250][T30823]   lock(fs_reclaim);
[  640.836409][T30823] 
[  640.836409][T30823]  *** DEADLOCK ***
[  640.836409][T30823] 
[  640.838696][T30823] 4 locks held by syz.2.6339/30823:
[  640.840273][T30823]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  640.842823][T30823]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0x99/0x2ea0
[  640.845901][T30823]  #2: ffff88819c340780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x25b/0x2ea0
[  640.849093][T30823]  #3: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  640.852019][T30823] 
[  640.852019][T30823] stack backtrace:
[  640.853659][T30823] CPU: 0 UID: 0 PID: 30823 Comm: syz.2.6339 Not tainted syzkaller #0 PREEMPT(full) 
[  640.853670][T30823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  640.853677][T30823] Call Trace:
[  640.853682][T30823]  <TASK>
[  640.853689][T30823]  dump_stack_lvl+0xe8/0x150
[  640.853702][T30823]  print_circular_bug+0x2e1/0x300
[  640.853715][T30823]  check_noncircular+0x12e/0x150
[  640.853727][T30823]  __lock_acquire+0x15a5/0x2cf0
[  640.853737][T30823]  ? __lock_acquire+0x6b5/0x2cf0
[  640.853747][T30823]  ? __lock_acquire+0x6b5/0x2cf0
[  640.853757][T30823]  ? __lock_acquire+0x6b5/0x2cf0
[  640.853766][T30823]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.853796][T30823]  lock_acquire+0x106/0x350
[  640.853807][T30823]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.853819][T30823]  ? kernfs_root+0x1c/0x230
[  640.853831][T30823]  fs_reclaim_acquire+0x71/0x100
[  640.853843][T30823]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.853854][T30823]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  640.853865][T30823]  ? kernfs_rename_ns+0x476/0x830
[  640.853877][T30823]  kstrdup+0x42/0x100
[  640.853885][T30823]  kernfs_rename_ns+0x476/0x830
[  640.853898][T30823]  sysfs_rename_link_ns+0x16e/0x1b0
[  640.853908][T30823]  device_rename+0x110/0x210
[  640.853919][T30823]  cfg80211_dev_rename+0x131/0x200
[  640.853931][T30823]  nl80211_set_wiphy+0x2a5/0x2ea0
[  640.853945][T30823]  ? __rtnl_unlock+0xc8/0xf0
[  640.853957][T30823]  ? netdev_run_todo+0xd5c/0xde0
[  640.853968][T30823]  ? nl80211_pre_doit+0x5e/0x8a0
[  640.853978][T30823]  ? __pfx_netdev_run_todo+0x10/0x10
[  640.853990][T30823]  ? __pfx_nl80211_set_wiphy+0x10/0x10
[  640.854000][T30823]  ? __nla_parse+0x40/0x60
[  640.854015][T30823]  genl_family_rcv_msg_doit+0x22a/0x330
[  640.854025][T30823]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  640.854036][T30823]  ? bpf_lsm_capable+0x9/0x20
[  640.854043][T30823]  ? security_capable+0x7e/0x2c0
[  640.854054][T30823]  genl_rcv_msg+0x61c/0x7a0
[  640.854063][T30823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  640.854070][T30823]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  640.854078][T30823]  ? __pfx_nl80211_set_wiphy+0x10/0x10
[  640.854088][T30823]  ? __pfx_nl80211_post_doit+0x10/0x10
[  640.854097][T30823]  ? __pfx_ref_tracker_free+0x10/0x10
[  640.854110][T30823]  netlink_rcv_skb+0x232/0x4b0
[  640.854120][T30823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  640.854128][T30823]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  640.854141][T30823]  ? down_read+0x270/0x2e0
[  640.854147][T30823]  ? genl_rcv+0xd/0x40
[  640.854155][T30823]  genl_rcv+0x28/0x40
[  640.854161][T30823]  netlink_unicast+0x75c/0x8e0
[  640.854172][T30823]  netlink_sendmsg+0x813/0xb40
[  640.854185][T30823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  640.854195][T30823]  ? aa_sock_msg_perm+0xf1/0x1b0
[  640.854206][T30823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  640.854220][T30823]  ____sys_sendmsg+0x972/0x9f0
[  640.854232][T30823]  ? __might_fault+0xaf/0x130
[  640.854243][T30823]  ? __pfx_____sys_sendmsg+0x10/0x10
[  640.854256][T30823]  ? import_iovec+0x73/0xa0
[  640.854268][T30823]  ___sys_sendmsg+0x2a5/0x360
[  640.854278][T30823]  ? __lock_acquire+0x6b5/0x2cf0
[  640.854288][T30823]  ? __pfx____sys_sendmsg+0x10/0x10
[  640.854300][T30823]  ? futex_wake+0x4ac/0x580
[  640.854315][T30823]  ? __fget_files+0x2a/0x420
[  640.854324][T30823]  ? __fget_files+0x3a0/0x420
[  640.854335][T30823]  __x64_sys_sendmsg+0x1bd/0x2a0
[  640.854346][T30823]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  640.854358][T30823]  ? rcu_is_watching+0x15/0xb0
[  640.854369][T30823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.854377][T30823]  do_syscall_64+0x15f/0xf80
[  640.854389][T30823]  ? trace_irq_disable+0x3b/0x140
[  640.854401][T30823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.854409][T30823] RIP: 0033:0x7f49c239cdd9
[  640.854419][T30823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.854427][T30823] RSP: 002b:00007f49c31f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.854437][T30823] RAX: ffffffffffffffda RBX: 00007f49c2615fa0 RCX: 00007f49c239cdd9
[  640.854444][T30823] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  640.854449][T30823] RBP: 00007f49c2432d69 R08: 0000000000000000 R09: 0000000000000000
[  640.854454][T30823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.854460][T30823] R13: 00007f49c2616038 R14: 00007f49c2615fa0 R15: 00007ffd71ae4738
[  640.854470][T30823]  </TASK>
[  641.040334][T30823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  641.735204][  T504] block nbd0: Connection timed out, retrying (0/2 alive)
[  641.737628][  T504] block nbd0: Connection timed out, retrying (0/2 alive)
[  641.740274][  T504] block nbd0: Connection timed out, retrying (0/2 alive)
[  641.742777][  T504] block nbd0: Connection timed out, retrying (0/2 alive)
[  641.744817][  T504] block nbd0: Dead connection, failed to find a fallback
[  641.747475][  T504] block nbd0: shutting down sockets
[  641.749295][  T504] blk_print_req_error: 138 callbacks suppressed
[  641.749307][  T504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.753697][  T504] buffer_io_error: 138 callbacks suppressed
[  641.753704][  T504] Buffer I/O error on dev nbd0, logical block 3, async page read
[  641.757765][  T504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.760264][  T504] Buffer I/O error on dev nbd0, logical block 2, async page read
[  641.762458][  T504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.765061][  T504] Buffer I/O error on dev nbd0, logical block 1, async page read
[  641.767347][  T504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.769933][  T504] Buffer I/O error on dev nbd0, logical block 0, async page read
[  641.772227][T29412] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.774868][T29412] Buffer I/O error on dev nbd0, logical block 0, async page read
[  641.777215][T29412] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.779833][T29412] Buffer I/O error on dev nbd0, logical block 1, async page read
[  641.782042][T29412] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.784576][T29412] Buffer I/O error on dev nbd0, logical block 2, async page read
[  641.787054][T29412] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.789645][T29412] Buffer I/O error on dev nbd0, logical block 3, async page read
[  641.791900][T29412] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.794439][T29412] Buffer I/O error on dev nbd0, logical block 0, async page read
[  641.796838][T29412] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  641.799494][T29412] Buffer I/O error on dev nbd0, logical block 1, async page read
[  641.802479][T29412] ldm_validate_partition_table(): Disk read failed.
[  641.805118][T29412] Dev nbd0: unable to read RDB block 0
[  641.807384][T29412]  nbd0: unable to read partition table
[  641.811694][T29412] ldm_validate_partition_table(): Disk read failed.
[  641.814138][T29412] Dev nbd0: unable to read RDB block 0
[  641.816565][T29412]  nbd0: unable to read partition table
