last executing test programs:

891.315172ms ago: executing program 1 (id=1693):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44)
listen(r0, 0x100101)
r1 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r3=>0x0})
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a010200"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840)
write$nci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001004000128009000100766c616e0000000030000280060001000200000006000100020000001c0004800c00010005000000000800000c0001008100000081ffffff08000500", @ANYRES32=r3, @ANYBLOB='\x00 \x00\x00', @ANYRES32=r10, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

737.540571ms ago: executing program 0 (id=1695):
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, 0x8)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/52, &(0x7f0000000100)=0x34)
sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="52db452fb62933a50dbf19143001bd97e256ad9c76bdfa074c582c7d3a79cf23e25306cdd7c65d772c6c7bf02e6511e7c2", 0x31}, {&(0x7f0000000180)="a23df3c93b5c46cf43459f4dd7fdf8a38e193f309df656da91c90d9039958025d07205efd2a894bea6bb937a81923b11c3c9b8f17eeae39b0be23c4e65a199bc075af77d0af9697eb3c3c9df7258804ee56168b873eff322656af90d3204fbf56877b4b43d43de196c18653230d94dc7ad4bfe8f262563acb81ab086e8ab425d35fd6a3a951b72f2db71f9bd25b54e3232bfa84d0e2a8d8963005bb3b272eebaf898f54671b70edc4b81376be0402d3077652bc18e850c5d3f3560a14e7a1e543c45b6726890f7c85c383b5d2adf", 0xce}], 0x2, &(0x7f00000002c0)=[@mark={{0x14}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xaf3d}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9d87}}], 0x90}, 0x4000800)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={<r1=>0x0, 0x8c, "6583e428ba183f7ec18e3398315d8fc774a4ab1f359fbcb8da2bed978face336d31a611a7927633776e2133de848d9bed9b9c4a10e7c2bb4481f314e5786847aafaf09918fa56ee104e0a01f29361a437f62917ce5c1aaa888ac4c7be814281a303a34e4e43d3c5742dd4d5815302ed3434ae53c7ece33c3ee3dc2e6a9934b5109d0158909382d3050a2c8d7"}, &(0x7f0000000480)=0x94)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r1, 0x8}, &(0x7f0000000500)=0x8)
r2 = accept4(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000005c0)=0x80, 0xf37c2e3d0e898281)
ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000000a40)={&(0x7f0000000600), 0xb5f, &(0x7f0000000640)=[{}, {}, {}, {}, {}], &(0x7f0000000a00)})
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000a80)={0xb20, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000011600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000011640)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000011700)={&(0x7f00000115c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000116c0)={&(0x7f0000011680)={0x40, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc8b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x5400004d}, 0x4008881)
ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000011740))
getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000011780)=""/60, 0x3c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000117c0), r4)
connect$inet6(r0, &(0x7f0000011800)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000011880), r3)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000011940)={&(0x7f0000011840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000011900)={&(0x7f00000118c0)={0x30, r7, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x40000000, 0x180000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8480}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000119c0), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000011ac0)={&(0x7f0000011980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000011a80)={&(0x7f0000011a00)={0x44, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x68c2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000011b00))
ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000011b40), 0x800, 0x0)
write$rfkill(r9, &(0x7f0000011b80)={0x6, 0x2, 0x1}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000011bc0))

694.74253ms ago: executing program 0 (id=1696):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

639.856027ms ago: executing program 1 (id=1697):
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000) (async)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)
accept4(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x0) (async)
r1 = accept4(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x0)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000240)={'lo\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000440)=@gettfilter={0x3c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0xd, 0xfff2}, {0xfff3, 0xffe0}}, [{0x8, 0xb, 0xdd}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES16=r4], 0x44}}, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmsg(r6, &(0x7f0000000a40)={&(0x7f0000000480)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/61, 0x3d}], 0x7, &(0x7f0000000940)=""/241, 0xf1}, 0x10001) (async)
recvmsg(r6, &(0x7f0000000a40)={&(0x7f0000000480)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/61, 0x3d}], 0x7, &(0x7f0000000940)=""/241, 0xf1}, 0x10001)

552.252173ms ago: executing program 1 (id=1699):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x7, "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"}}}}, 0x7ff)

551.515192ms ago: executing program 0 (id=1700):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xd, r2, 0xe, r1}, 0x10)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

472.541173ms ago: executing program 2 (id=1701):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000c0)

419.777179ms ago: executing program 1 (id=1702):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x5865, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

332.891474ms ago: executing program 0 (id=1703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000500819c0800000008000000000004005979bd81678f9bb455d8c76d11375047dc32fa7a567c92c10e35f6e2677782c821acd187b5375da630943952ac8cf9468c5da1793bbba5c5962b9bea96268043196e28950d30a89dacf03b571496c45d69325e85d99478bdbccd54c7c19bddd92f5d67c8c38c9f240c45e0e6cb334d4e5a24f56eee4310fade5770f0a3ee2ea5e68d30a41f379c58afe9907485f0d38af6151dc76d0c172dac85898bc100"/191, @ANYRES32, @ANYBLOB="000000000000001b00000000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="80200100420000002000128008000100677470001400028008000200", @ANYRES32=r2, @ANYBLOB="97bb097399084fdadee0d41462ea3283e22ef7defcac7fefece900000000db1a6158c165317b018c4e641dcacc45fcc447816485f4b5f1f9c65f1d3c509556961a405ba31a12fe76d1dee343ab9fca306ccd04905552491b58a8387bb446dc3139a8a45f95d5b095845d092862b74c0afaa340758a9ab5222239ef0c8d", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x10}, {0x10, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="100020000000a2a1002ad80012800b0041006272696467650000184002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000005000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x40800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x3a0af83a)
poll(&(0x7f0000000040)=[{r6, 0x1146}, {r6, 0x8214}], 0x2, 0x400)
shutdown(r6, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000100ba8000001201", 0x2e}], 0x1}, 0x40840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, 0x0, 0x8004)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, 0x0, 0x20005)

332.48235ms ago: executing program 1 (id=1704):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)

279.104079ms ago: executing program 2 (id=1705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002bbd7000fddbdf2502148004fe03fe0300260000080005006401010008000b00ad"], 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x44, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70428, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x81}]}, 0x44}}, 0x4040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r2, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)

277.314075ms ago: executing program 2 (id=1706):
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000008800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'ip6_vti0\x00', {'batadv_slave_1\x00'}, 0xf48})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000004c0)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f", 0xa2}, {&(0x7f0000000280)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c31", 0x37}], 0x2}, 0x22040000)
accept4$x25(r0, 0x0, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)

221.625934ms ago: executing program 1 (id=1707):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, 0x0, 0x400c89c)
socketpair$unix(0x1, 0x9625531a560e5a4e, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c005}, 0x8000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x91b5, 0x74d0, 0x80000000, 0x6, 0xc28}, 0x0)

219.30364ms ago: executing program 0 (id=1708):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000000b000000420000003e0000a4cc09fead01047d869eada944cfdca4a21d5f9049f40042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @remote, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10002, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000000214010027bd7000fcdbdf2508004400c911ddf90d261dbaee1ce56b7c8952e8c55ef4681a52f483495d7fb0221f6fa833675db4255aab805cbc5b6028bf7af7d6da4f2bdb02713965f90cf527948f95b19b01c3d6ae60290f1ce515aa8c2e35c7ddff8c0520d34da7ecc6ac4b0f3347cc0f37551748c10aa68c85f5c8ee94484c96745f9351d57d9156af56549c6cf0380c66b2ff082b658a288d00ea426e21ce661a84dc1e1e3086efd3545d379426e6e710ed000000000022f28b9842ab546e9f7ec2e1d15c1e7c505d3f38f98396b499c1", @ANYRES32, @ANYBLOB="0500540001000000080001000200000008000100010000000800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = gettid()
r5 = socket(0x2c, 0x803, 0x2)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0898050007500500e9ff1200", @ANYRES32=r4, @ANYBLOB="06d6c4bf9d31d31260b45725a65ce1f6193379ade6640a65679727edc82d6bce178bcdf4e3bba477aad7d19ab7a51d2e92e8e339b54c48456c79f7b4ef45e410bdcbc892df644fb4d6efe899109b83ba2fc4eb14f787a18676692be45deab6ce44831383df0868bd4cf53db162f184ebf34d6f3ac26b9ec0bf0edf27a38f56b50000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x80000)

130.512073ms ago: executing program 2 (id=1709):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001200))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000c, 0x12, r3, 0x0)
connect$tipc(r2, &(0x7f0000001a40)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x7, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1"}}}}, 0x7ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001a80)={'nr0\x00', {0x2, 0x0, @empty}})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fe8000000000000000001100000000aaff02000000000000000000000000000104"], 0xfce)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"c7d183b903429d690580fdd38cbbe2a5", <r8=>0x0, 0x0, {0x7ff, 0x3}, {0x4, 0x2}, 0x30000000, [0x9, 0x102000000000, 0x3, 0x6, 0x2, 0x753, 0x400006, 0x100, 0x5, 0x80, 0x0, 0x5, 0x8, 0x401, 0x0, 0x9]})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0)
socket(0x1d, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000200)={{r0}, r8, 0x1a, @unused=[0xa97, 0x80000001, 0x3, 0x9c2], @name="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"})

1.393767ms ago: executing program 2 (id=1710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xffffffffffffffa0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000010000020000040900010073797a30000000000900020073797a320000000034000000080a05000000000000000000020000060900020073797a32000000000900010073797a3000000000080009"], 0x88}}, 0x20000040)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x6}, {0x6}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000090)

1.196506ms ago: executing program 0 (id=1711):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000c0)

0s ago: executing program 2 (id=1712):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendfile(0xffffffffffffffff, r0, &(0x7f0000000640)=0x80000000, 0xc86)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x20000, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async, rerun: 32)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) (async)
epoll_create1(0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P'], 0x6c}}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 64)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000100)=@tipc=@id, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/40, 0x28}], 0x8, &(0x7f0000000900)=""/255, 0xff}, 0x7}, {{&(0x7f0000000a80)=@tipc=@id, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/4, 0x4}], 0x1, &(0x7f0000000b80)=""/220, 0xdc}, 0x1}], 0x2, 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x4008000) (async)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async)
setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000140), 0x8) (async)
sendmmsg$sock(r6, 0x0, 0x0, 0x880)

kernel console output (not intermixed with test programs):

 mode
[  105.232118][ T7768] batadv1: left promiscuous mode
[  105.233816][ T7768] vlan4: left allmulticast mode
[  105.235374][ T7768] bond8: left allmulticast mode
[  105.236858][ T7768] batadv1: left allmulticast mode
[  105.239757][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv1
[  105.243321][ T7768] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.246130][ T7768] bond10: left promiscuous mode
[  105.247609][ T7768] bond10: left allmulticast mode
[  105.249446][ T7768] 8021q: adding VLAN 0 to HW filter on device bond10
[  105.252018][ T7768] bond11: left promiscuous mode
[  105.253465][ T7768] bond11: left allmulticast mode
[  105.255113][ T7768] 8021q: adding VLAN 0 to HW filter on device bond11
[  105.287850][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.307546][ T5445] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.311365][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.323247][ T5445] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  105.333868][ T5445] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 42581 - 0
[  105.338411][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.341163][ T5445] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.344704][ T5445] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  105.355311][ T5445] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 42581 - 0
[  105.358185][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.373413][ T5445] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.377965][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.381802][ T5445] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  105.384967][ T5445] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 42581 - 0
[  105.398612][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.406073][ T5445] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.411058][ T5445] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  105.417760][ T5445] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 42581 - 0
[  105.417896][ T5763] bond3: (slave bridge1): link status up again after 0 ms
[  105.447903][ T5445] bond3: (slave bridge1): link status up again after 0 ms
[  105.459745][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  105.516848][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'.
[  105.723018][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  105.742499][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  105.751355][ T7798] vti0: entered promiscuous mode
[  105.769802][ T7805] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.789796][ T7805] 8021q: adding VLAN 0 to HW filter on device bond10
[  105.793784][ T7805] bond9: (slave bond10): Enslaving as an active interface with an up link
[  105.799243][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  105.818453][ T7805] bond9 (unregistering): (slave bond10): Releasing backup interface
[  105.823738][ T7805] bond9 (unregistering): Released all slaves
[  105.873280][ T7811] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[  105.929599][ T7811] bond10: (slave bridge4): Enslaving as a backup interface with an up link
[  105.946307][ T7811] macvlan4: entered promiscuous mode
[  105.948657][ T7811] macvlan4: entered allmulticast mode
[  105.951103][ T7811] bond10: entered promiscuous mode
[  105.953080][ T7811] bridge4: entered promiscuous mode
[  105.956955][ T7811] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  105.964244][ T7811] bond10: left promiscuous mode
[  105.965784][ T7811] bridge4: left promiscuous mode
[  105.999749][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'.
[  106.060481][ T7818] netlink: 'syz.1.628': attribute type 10 has an invalid length.
[  106.086775][ T7818] team0: Port device dummy0 added
[  106.123922][ T7820] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  106.129472][ T7820] bond9 (unregistering): Released all slaves
[  106.152920][ T7822] veth0: entered promiscuous mode
[  106.253012][ T7824] netlink: 'syz.2.630': attribute type 22 has an invalid length.
[  106.256131][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  106.272544][ T5763] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.275963][ T7824] netlink: 'syz.2.630': attribute type 22 has an invalid length.
[  106.279634][ T5763] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.282887][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  106.286535][ T7817] veth0: left promiscuous mode
[  106.289113][ T5763] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.292411][ T5763] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.406026][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  106.529073][ T7842] veth0: entered promiscuous mode
[  106.540830][ T7842] bond0: entered promiscuous mode
[  106.676967][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'.
[  106.698436][ T7850] bridge5: entered allmulticast mode
[  106.754256][ T7835] bond0: left promiscuous mode
[  106.762621][ T7835] veth0: left promiscuous mode
[  106.865860][ T7860] xt_ecn: cannot match TCP bits for non-tcp packets
[  106.982957][ T7873] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  107.006564][ T7873] bond12: entered promiscuous mode
[  107.009917][ T7873] 8021q: adding VLAN 0 to HW filter on device bond12
[  107.066271][ T7873] 8021q: adding VLAN 0 to HW filter on device bond12
[  107.070368][ T7873] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[  107.073607][ T7873] bond12: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  107.080339][ T7873] bond12: (slave vcan1): making interface the new active one
[  107.082630][ T7873] vcan1: entered promiscuous mode
[  107.085172][ T7873] bond12: (slave vcan1): Enslaving as an active interface with an up link
[  107.116275][ T7878] xt_ecn: cannot match TCP bits for non-tcp packets
[  107.205999][ T7881] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  107.211706][ T7881] bond13 (unregistering): Released all slaves
[  107.762320][ T5612] Bluetooth: hci2: command tx timeout
[  108.458513][ T5763] net_ratelimit: 15 callbacks suppressed
[  108.458524][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  108.541119][ T7911] netlink: 'syz.0.653': attribute type 12 has an invalid length.
[  108.567961][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  108.678952][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  108.714692][ T7921] bridge6: the hash_elasticity option has been deprecated and is always 16
[  108.718003][ T7921] bridge6: entered allmulticast mode
[  108.787803][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  108.829625][ T7937] openvswitch: netlink: IP tunnel dst address not specified
[  108.845622][ T7937] 8021q: adding VLAN 0 to HW filter on device bond13
[  108.854669][ T7937] bond13: (slave veth0): Enslaving as a backup interface with an up link
[  108.898563][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  109.007773][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  109.118531][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  109.184640][ T7963] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 3, id = 0
[  109.228122][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  109.386057][ T5445] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.389920][ T5445] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  109.393375][ T5445] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 42581 - 0
[  109.396742][ T5445] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.402044][ T5445] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  109.405216][ T5445] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 42581 - 0
[  109.408908][ T5445] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.412038][ T5445] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  109.415093][ T5445] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 42581 - 0
[  109.422797][ T5445] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.425790][ T5445] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  109.430583][ T5445] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 42581 - 0
[  109.501387][ T7967] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  109.966032][ T7984] __nla_validate_parse: 7 callbacks suppressed
[  109.966047][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[  110.026380][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  110.057497][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  110.064999][ T7986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.677'.
[  110.085586][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[  110.244390][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  110.331680][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'.
[  110.398411][ T8017] 8021q: adding VLAN 0 to HW filter on device bond14
[  110.460945][ T8011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'.
[  110.532696][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'.
[  110.544966][ T8028] bond11: option arp_interval: invalid value (18446744073709551615)
[  110.547494][ T8028] bond11: option arp_interval: allowed values 0 - 2147483647
[  110.551707][ T8028] bond11 (unregistering): Released all slaves
[  110.574427][ T8025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.688'.
[  110.740329][ T8040] validate_nla: 1 callbacks suppressed
[  110.740345][ T8040] netlink: 'syz.2.692': attribute type 10 has an invalid length.
[  110.757952][ T8040] 8021q: adding VLAN 0 to HW filter on device team0
[  110.767423][ T8040] bond0: (slave team0): Enslaving as an active interface with an up link
[  110.872229][ T8044] syzkaller0: create flow: hash 756201431 index 1
[  110.890169][ T5720] syzkaller0: tun_net_xmit 76
[  110.908351][ T8043] syzkaller0: delete flow: hash 756201431 index 1
[  110.971025][ T8055] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[  110.983197][ T8056] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[  110.994544][ T8055] netlink: 'syz.2.698': attribute type 2 has an invalid length.
[  112.094154][ T8053] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  112.179340][ T5445] batadv2: left promiscuous mode
[  112.334364][ T8077] sctp: [Deprecated]: syz.2.704 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.334364][ T8077] Use struct sctp_sack_info instead
[  112.425498][ T8080] netlink: 'syz.1.705': attribute type 1 has an invalid length.
[  112.471129][ T8080] 8021q: adding VLAN 0 to HW filter on device bond11
[  112.509935][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.540355][ T8085] veth9: entered promiscuous mode
[  112.545086][ T8087] only policy match revision 0 supported
[  112.545101][ T8087] unable to load match
[  112.559746][ T8085] syzkaller0: entered promiscuous mode
[  112.561359][ T8085] syzkaller0: entered allmulticast mode
[  112.713833][ T8091] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  112.756668][ T8091] bond9: (slave bridge9): making interface the new active one
[  112.762585][ T8091] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  112.777549][ T8096] netlink: 'syz.0.712': attribute type 2 has an invalid length.
[  112.782896][ T8091] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  112.797477][ T8091] macvlan3: entered promiscuous mode
[  112.800177][ T8091] macvlan3: entered allmulticast mode
[  112.804403][ T8091] bond9: entered promiscuous mode
[  112.806515][ T8098] trusted_key: syz.1.713 sent an empty control message without MSG_MORE.
[  112.807812][ T8091] bridge9: entered promiscuous mode
[  112.813392][ T8091] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  112.819806][ T8091] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  112.830043][ T8091] bond9: left promiscuous mode
[  112.832106][ T8091] bridge9: left promiscuous mode
[  112.887882][ T8102] netlink: 'syz.1.715': attribute type 1 has an invalid length.
[  112.917364][ T8102] 8021q: adding VLAN 0 to HW filter on device bond12
[  112.941359][ T8104] bond15: entered promiscuous mode
[  113.245349][ T8125] netlink: 'syz.1.722': attribute type 11 has an invalid length.
[  113.281753][ T8122] ip6gretap0: left promiscuous mode
[  113.294648][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.318940][ T8122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.355325][ T8122] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  113.461143][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.463337][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.467416][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.469902][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.538612][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.542469][ T8137] 8021q: adding VLAN 0 to HW filter on device team0
[  113.546756][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.574362][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.579046][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.592542][ T8137] veth1_vlan: left promiscuous mode
[  113.595123][ T8137] veth0_vlan: left promiscuous mode
[  113.598237][ T8137] veth0_vlan: entered promiscuous mode
[  113.602305][ T8137] veth1_vlan: entered promiscuous mode
[  113.607395][ T8137] veth1_macvtap: left promiscuous mode
[  113.610520][ T8137] veth0_macvtap: left promiscuous mode
[  113.613264][ T8137] veth0_macvtap: entered promiscuous mode
[  113.623095][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.625727][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.633379][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.636149][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.316139][ T8188] netlink: 'syz.0.736': attribute type 2 has an invalid length.
[  114.541734][ T8207] netlink: 'syz.0.738': attribute type 2 has an invalid length.
[  114.577815][ T8207] macsec1: entered promiscuous mode
[  115.076824][ T8230] __nla_validate_parse: 25 callbacks suppressed
[  115.076869][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  115.088188][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  115.116314][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'.
[  115.176262][ T8237] openvswitch: : Dropping previously announced user features
[  115.338845][ T8251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.757'.
[  115.484227][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.487402][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.683841][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'.
[  115.739780][ T8275] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  115.963040][ T8295] validate_nla: 4 callbacks suppressed
[  115.963050][ T8295] netlink: 'syz.0.768': attribute type 25 has an invalid length.
[  115.967437][ T8295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.768'.
[  116.515468][ T8309] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  116.524343][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[  116.633465][ T8316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.774'.
[  117.017298][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'.
[  117.214068][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  117.353807][ T8339] erspan0: entered promiscuous mode
[  117.435719][ T8343] netlink: 'syz.1.784': attribute type 1 has an invalid length.
[  117.460209][ T8343] bond13: entered promiscuous mode
[  117.462694][ T8343] 8021q: adding VLAN 0 to HW filter on device bond13
[  117.473143][ T8343] bond13: entered allmulticast mode
[  117.492426][ T8343] bond13: (slave bridge7): making interface the new active one
[  117.495270][ T8343] bridge7: entered promiscuous mode
[  117.497453][ T8343] bridge7: entered allmulticast mode
[  117.502354][ T8343] bond13: (slave bridge7): Enslaving as an active interface with an up link
[  117.648432][ T8347] netlink: 'syz.1.785': attribute type 18 has an invalid length.
[  120.096057][ T8360] netlink: 'syz.1.791': attribute type 1 has an invalid length.
[  120.096273][ T8362] bridge0: Device is already in use.
[  120.125771][ T8360] bond14: entered promiscuous mode
[  120.129841][ T8360] 8021q: adding VLAN 0 to HW filter on device bond14
[  120.963215][ T8410] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  121.012865][ T8410] 8021q: adding VLAN 0 to HW filter on device bond15
[  121.015905][ T8413] __nla_validate_parse: 4 callbacks suppressed
[  121.015919][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'.
[  121.032439][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'.
[  121.114341][ T8413] 8021q: adding VLAN 0 to HW filter on device bond11
[  121.124237][ T8410] bond15: entered promiscuous mode
[  121.126080][ T8410] bond15: entered allmulticast mode
[  121.149548][ T8414] team0: Port device dummy0 removed
[  121.172322][ T8414] bond15: (slave dummy0): making interface the new active one
[  121.175507][ T8414] dummy0: entered promiscuous mode
[  121.178615][ T8414] dummy0: entered allmulticast mode
[  121.182040][ T8414] bond15: (slave dummy0): Enslaving as an active interface with an up link
[  121.185454][ T8416] bond11: entered promiscuous mode
[  121.187374][ T8416] bond11: entered allmulticast mode
[  121.196666][ T8416] 8021q: adding VLAN 0 to HW filter on device bond11
[  121.221978][ T8416] team0: Port device bond11 added
[  121.240602][ T8414] syz.1.806 (8414) used greatest stack depth: 20096 bytes left
[  121.264160][ T8413] team_slave_1: entered promiscuous mode
[  121.282570][ T8413] team0: Port device team_slave_1 removed
[  121.290938][ T8413] team_slave_1: entered allmulticast mode
[  121.295263][ T8413] bond11: (slave team_slave_1): Enslaving as an active interface with an up link
[  121.320931][ T8433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.812'.
[  121.335821][ T8434] netlink: 'syz.1.811': attribute type 3 has an invalid length.
[  121.342075][ T8434] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  121.346512][ T8434] netlink: 232 bytes leftover after parsing attributes in process `syz.1.811'.
[  121.499319][ T8448] netlink: 'syz.0.815': attribute type 2 has an invalid length.
[  121.502669][ T8448] netlink: 180 bytes leftover after parsing attributes in process `syz.0.815'.
[  121.885224][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'.
[  121.908978][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'.
[  121.924044][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'.
[  122.140490][ T8494] netlink: 'syz.0.829': attribute type 2 has an invalid length.
[  122.142966][ T8494] netlink: 180 bytes leftover after parsing attributes in process `syz.0.829'.
[  122.153362][ T8496] Bluetooth: MGMT ver 1.23
[  122.208787][ T8499] syzkaller0: entered promiscuous mode
[  122.210919][ T8499] syzkaller0: entered allmulticast mode
[  122.218119][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  122.352615][ T8505] netlink: 'syz.1.832': attribute type 1 has an invalid length.
[  122.384624][ T8505] gretap1: entered allmulticast mode
[  122.391427][ T8505] bond16: (slave gretap1): making interface the new active one
[  122.395046][ T8505] bond16: (slave gretap1): Enslaving as an active interface with an up link
[  122.493777][ T8514] netlink: 'syz.1.835': attribute type 1 has an invalid length.
[  122.644596][ T8518] syzkaller0: create flow: hash 756201431 index 1
[  122.721202][ T8517] syzkaller0: delete flow: hash 756201431 index 1
[  122.725395][ T8524] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  124.020151][ T8533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.240603][ T4999] Bluetooth: hci2: command 0x0401 tx timeout
[  124.243361][ T5612] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  124.695409][ T8593] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  124.698933][ T8593] netlink: 'syz.1.860': attribute type 9 has an invalid length.
[  124.933659][ T8604] netlink: 'syz.2.863': attribute type 2 has an invalid length.
[  125.053172][ T8611] gre0: entered promiscuous mode
[  125.054819][ T8611] gre0: entered allmulticast mode
[  125.181316][ T8617] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  125.355104][ T8628] block nbd0: NBD_DISCONNECT
[  125.661242][ T8636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.903026][ T8650] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  125.910757][ T8650] bond17 (unregistering): Released all slaves
[  125.999367][ T8653] 0X: renamed from batadv0 (while UP)
[  126.002481][ T8653] 0X: entered allmulticast mode
[  126.004424][ T8653] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  126.363355][ T8672] validate_nla: 1 callbacks suppressed
[  126.363365][ T8672] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  126.446658][ T8674] syzkaller1: entered promiscuous mode
[  126.457748][ T8674] syzkaller1: entered allmulticast mode
[  126.477605][ T8674] vti0: left promiscuous mode
[  126.479947][ T8674] bond12: left promiscuous mode
[  126.485545][ T8674] vcan1: left promiscuous mode
[  126.493705][ T8674] bridge6: left allmulticast mode
[  126.499542][ T8684] __nla_validate_parse: 14 callbacks suppressed
[  126.499552][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  126.511370][ T8674] bond15: left promiscuous mode
[  126.529339][ T8674] syzkaller1: left promiscuous mode
[  126.539826][ T8674] syzkaller1: left allmulticast mode
[  126.550475][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'.
[  126.571207][ T8686] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[  126.582431][ T8686] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  126.585623][ T8680] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  126.602778][ T8684] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[  126.891171][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  126.893812][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'.
[  126.961760][ T8710] netlink: 56 bytes leftover after parsing attributes in process `syz.2.897'.
[  127.057779][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.899'.
[  127.119025][ T8718] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  127.128453][ T8718] bond17 (unregistering): Released all slaves
[  127.153779][ T8721] netlink: 'syz.2.902': attribute type 3 has an invalid length.
[  127.156480][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.902'.
[  127.560434][ T8731] netlink: 'syz.0.906': attribute type 1 has an invalid length.
[  127.596148][ T8731] bond16: (slave bridge8): making interface the new active one
[  127.600057][ T8731] bond16: (slave bridge8): Enslaving as an active interface with an up link
[  127.649866][ T8731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.906'.
[  127.655048][ T8731] bond16: entered promiscuous mode
[  127.657474][ T8731] bridge8: entered promiscuous mode
[  127.659632][ T8731] bond16: entered allmulticast mode
[  127.661311][ T8731] bridge8: entered allmulticast mode
[  127.663772][ T8731] 8021q: adding VLAN 0 to HW filter on device bond16
[  127.698704][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'.
[  127.701424][ T8734] block nbd0: not configured, cannot reconfigure
[  127.793384][ T8738] netlink: 'syz.0.909': attribute type 3 has an invalid length.
[  127.795711][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.909'.
[  127.886138][ T8742] bridge9: entered promiscuous mode
[  128.323332][ T8764] netlink: 'syz.2.920': attribute type 2 has an invalid length.
[  128.361687][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.363881][ T8766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.366353][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.368528][ T8766] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.374135][ T8766] 0X: left allmulticast mode
[  128.390960][ T8766] veth1_macvtap: entered promiscuous mode
[  128.400176][ T8766] geneve2: left promiscuous mode
[  128.405172][ T8766] vlan2: left allmulticast mode
[  128.406788][ T8766] geneve2: left allmulticast mode
[  128.415831][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.423492][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.431339][ T8766] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.434829][ T8766] veth1_vlan: entered allmulticast mode
[  128.436947][ T8766] macvlan2: left allmulticast mode
[  128.439652][ T8766] veth1_vlan: left allmulticast mode
[  128.442639][ T8766] bond4: left promiscuous mode
[  128.444490][ T8766] veth7: left promiscuous mode
[  128.447327][ T8766] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.454284][ T8766] bond5: left allmulticast mode
[  128.456458][ T8766] 8021q: adding VLAN 0 to HW filter on device bond5
[  128.462960][ T8766] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.470415][ T8766] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.474389][ T8766] 8021q: adding VLAN 0 to HW filter on device bond8
[  128.477246][ T8766] hsr1: left promiscuous mode
[  128.483747][ T8766] 8021q: adding VLAN 0 to HW filter on device bond9
[  128.486661][ T8766] gre1: left allmulticast mode
[  128.492562][ T8766] ip6gretap0: entered promiscuous mode
[  128.504925][ T8766] 8021q: adding VLAN 0 to HW filter on device bond10
[  128.507514][ T6965] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  128.512602][ T8766] bridge5: left allmulticast mode
[  128.519469][ T8766] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  128.526539][ T8767] bridge0: entered promiscuous mode
[  128.554755][ T8767] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  128.605372][ T8769] bond12: option all_slaves_active: invalid value (9)
[  128.612399][ T6965] bond10: (slave bridge4): link status up again after 0 ms
[  128.624096][ T6965] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  128.629642][ T8769] bond12 (unregistering): Released all slaves
[  128.638031][ T6965] bond10: (slave bridge4): link status up again after 0 ms
[  128.660389][ T5763] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.663248][ T5763] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.665900][ T5763] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  128.668768][ T6965] bond10: (slave bridge4): link status up again after 0 ms
[  128.671070][ T5763] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.673729][ T5763] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.676376][ T5763] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  128.681517][ T5763] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.684058][ T5763] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.686506][ T5763] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  128.690024][ T6965] bond10: (slave bridge4): link status up again after 0 ms
[  128.699726][ T5763] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.706422][ T5763] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.712174][ T5763] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  128.728273][ T5763] bond10: (slave bridge4): link status up again after 0 ms
[  128.741033][   T13] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  128.761313][   T13] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  128.768229][ T6965] bond10: (slave bridge4): link status up again after 0 ms
[  128.771356][   T13] bond5: (slave veth9): making interface the new active one
[  128.776198][   T13] bond5: active interface up!
[  128.918727][ T8782] netlink: 'syz.0.926': attribute type 2 has an invalid length.
[  128.926289][ T8782] netlink: 'syz.0.926': attribute type 2 has an invalid length.
[  128.937510][ T8782] macsec1: entered promiscuous mode
[  128.947163][ T8789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.950363][ T8789] syzkaller0: entered promiscuous mode
[  128.952077][ T8789] syzkaller0: entered allmulticast mode
[  128.967785][ T8789] tipc: Resetting bearer <eth:syzkaller0>
[  128.976833][ T8788] tipc: Resetting bearer <eth:syzkaller0>
[  128.992536][ T8788] tipc: Disabling bearer <eth:syzkaller0>
[  128.999938][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.002980][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.027997][ T7365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.112328][   T13] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  129.117371][   T13] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  129.138384][ T7365] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  129.356738][ T8796] netlink: 'syz.0.932': attribute type 2 has an invalid length.
[  129.397970][ T7365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.428613][ T7365] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  129.449952][ T7365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.516812][ T8800] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  129.681373][ T7365] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  129.777006][ T8819] bond15: (slave dummy0): Releasing active interface
[  129.781160][ T8819] dummy0: left promiscuous mode
[  129.783650][ T8819] dummy0: left allmulticast mode
[  129.789877][ T8819] team0: Port device dummy0 added
[  129.796149][ T8820] ipvlan3: entered promiscuous mode
[  129.846490][ T8821] veth0: entered promiscuous mode
[  129.940251][ T8825] pim6reg1: entered promiscuous mode
[  129.942007][ T8825] pim6reg1: entered allmulticast mode
[  130.013365][ T8817] veth0: left promiscuous mode
[  130.170833][ T5763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.175388][ T5763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.183152][ T5763] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.188870][ T5763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.369516][ T8857] only policy match revision 0 supported
[  130.369528][ T8857] unable to load match
[  130.632261][ T8866] bond17: option all_slaves_active: invalid value (9)
[  130.637974][ T8866] bond17 (unregistering): Released all slaves
[  131.226860][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  131.369221][ T8919] bond17: option all_slaves_active: invalid value (9)
[  131.372814][ T8919] bond17 (unregistering): Released all slaves
[  131.486781][ T8922] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  131.499012][ T8922] bond17: (slave lo): Enslaving as an active interface with an up link
[  131.958475][ T8901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.172422][ T8939] validate_nla: 10 callbacks suppressed
[  132.172433][ T8939] netlink: 'syz.2.979': attribute type 10 has an invalid length.
[  132.183528][ T8939] __nla_validate_parse: 18 callbacks suppressed
[  132.183538][ T8939] netlink: 2 bytes leftover after parsing attributes in process `syz.2.979'.
[  132.245746][ T8953] netlink: 92 bytes leftover after parsing attributes in process `syz.0.983'.
[  132.250794][ T8954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.401539][ T8961] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  132.408431][ T8961] netlink: 'syz.1.982': attribute type 1 has an invalid length.
[  132.413709][ T5720] team_slave_0: entered promiscuous mode
[  132.416207][ T5720] team_slave_1: entered promiscuous mode
[  132.420428][ T5720] dummy0: entered promiscuous mode
[  132.438399][ T8960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.443894][ T8965] syzkaller0: entered promiscuous mode
[  132.446683][ T8965] syzkaller0: entered allmulticast mode
[  132.460874][ T8960] tipc: Resetting bearer <eth:syzkaller0>
[  132.469626][ T8959] tipc: Resetting bearer <eth:syzkaller0>
[  132.484012][ T8959] tipc: Disabling bearer <eth:syzkaller0>
[  132.519341][ T8968] netlink: 'syz.0.987': attribute type 21 has an invalid length.
[  132.521791][ T8968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.987'.
[  132.524469][ T8968] netlink: 'syz.0.987': attribute type 4 has an invalid length.
[  132.526801][ T8968] netlink: 'syz.0.987': attribute type 3 has an invalid length.
[  132.531628][ T8968] netlink: 3 bytes leftover after parsing attributes in process `syz.0.987'.
[  132.625335][ T8982] Cannot find del_set index 4 as target
[  132.633993][ T8982] IPv6: sit2: Disabled Multicast RS
[  132.639614][ T8982] bridge: RTM_NEWNEIGH with invalid ether address
[  132.647482][ T8977] pim6reg: entered allmulticast mode
[  132.656317][ T8977] pim6reg: left allmulticast mode
[  132.677095][ T8985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.993'.
[  132.683324][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.685504][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.778799][ T8992] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  132.802862][ T8989] netlink: 'syz.0.994': attribute type 10 has an invalid length.
[  132.805174][ T8989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.994'.
[  132.834553][ T8989] team0: Device geneve1 is of different type
[  132.966302][ T9006] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1000'.
[  132.983979][ T9006] syzkaller1: entered promiscuous mode
[  132.985740][ T9006] syzkaller1: entered allmulticast mode
[  132.992311][ T9006] netlink: 'syz.0.1000': attribute type 1 has an invalid length.
[  133.068541][ T9012] bond17: option all_slaves_active: invalid value (9)
[  133.071493][ T9012] bond17 (unregistering): Released all slaves
[  133.162462][ T9016] netlink: 'syz.2.1004': attribute type 1 has an invalid length.
[  133.185738][ T9016] bond12: entered promiscuous mode
[  133.188276][ T9016] 8021q: adding VLAN 0 to HW filter on device bond12
[  133.274814][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1007'.
[  133.393900][ T9031] pim6reg1: entered promiscuous mode
[  133.395500][ T9031] pim6reg1: entered allmulticast mode
[  133.527594][ T9047] bond17: option all_slaves_active: invalid value (9)
[  133.536284][ T9047] bond17 (unregistering): Released all slaves
[  133.556940][ T9053] syzkaller0: entered promiscuous mode
[  133.559409][ T9053] syzkaller0: entered allmulticast mode
[  133.657074][ T9058] netlink: 'syz.1.1016': attribute type 1 has an invalid length.
[  133.794368][ T9064] dvmrp1: tun_chr_ioctl cmd 1074025677
[  133.796684][ T9064] dvmrp1: linktype set to 555
[  133.809970][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'.
[  133.813272][ T9064] net_ratelimit: 40 callbacks suppressed
[  133.813286][ T9064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  133.947883][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  133.959988][ T9062] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  133.962934][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.965939][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  133.970727][ T9062] veth0_to_bond: entered allmulticast mode
[  134.016545][ T9068] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  134.021927][ T9068] bond17 (unregistering): Released all slaves
[  134.104386][ T5445] bond10: (slave bridge4): failed to get link speed/duplex
[  134.130460][ T9073] netlink: 'syz.2.1021': attribute type 23 has an invalid length.
[  134.217920][ T5763] bond10: (slave bridge4): failed to get link speed/duplex
[  134.437878][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  134.473024][ T9094] syzkaller0: entered promiscuous mode
[  134.474864][ T9094] syzkaller0: entered allmulticast mode
[  134.502941][ T9094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.519942][ T9093] tipc: Resetting bearer <eth:syzkaller0>
[  134.529908][ T9097] NCSI netlink: No device for ifindex 1073545264
[  134.537030][ T9093] tipc: Disabling bearer <eth:syzkaller0>
[  134.548520][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  134.658843][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  134.777959][ T5445] bond10: (slave bridge4): failed to get link speed/duplex
[  134.909986][ T9112] xt_ecn: cannot match TCP bits for non-tcp packets
[  134.996431][ T5612] Bluetooth: hci2: link tx timeout
[  134.998688][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.094129][ T4999] Bluetooth: hci2: link tx timeout
[  135.096555][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.119901][ T4999] Bluetooth: hci2: link tx timeout
[  135.121439][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.196482][ T9139] bond13: option all_slaves_active: invalid value (9)
[  135.208389][ T4999] Bluetooth: hci2: link tx timeout
[  135.210315][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.219056][ T9139] bond13 (unregistering): Released all slaves
[  135.463276][ T9152] bond17: entered promiscuous mode
[  135.469850][ T9152] 8021q: adding VLAN 0 to HW filter on device bond17
[  135.535586][ T9152] 8021q: adding VLAN 0 to HW filter on device bond17
[  135.539590][ T9152] bond17: (slave wireguard1): The slave device specified does not support setting the MAC address
[  135.543461][ T9152] bond17: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  135.556319][ T9152] bond17: (slave wireguard1): making interface the new active one
[  135.560381][ T9152] wireguard1: entered promiscuous mode
[  135.563895][ T9152] bond17: (slave wireguard1): Enslaving as an active interface with an up link
[  135.580965][ T4999] Bluetooth: hci2: link tx timeout
[  135.586239][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.973507][ T9172] macsec0: entered promiscuous mode
[  136.547541][ T9180] 8021q: adding VLAN 0 to HW filter on device team0
[  136.568516][ T4999] Bluetooth: hci2: link tx timeout
[  136.570139][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.590474][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.653800][ T9180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  136.657070][ T9180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.669898][ T9180] veth1_vlan: left promiscuous mode
[  136.672516][ T9180] veth0_vlan: left promiscuous mode
[  136.674711][ T9180] veth0_vlan: entered promiscuous mode
[  136.678863][ T9180] veth1_vlan: entered promiscuous mode
[  136.684656][ T9180] veth1_macvtap: left promiscuous mode
[  136.687338][ T9180] veth0_macvtap: left promiscuous mode
[  136.689987][ T9180] veth0_macvtap: entered promiscuous mode
[  136.698443][ T9180] veth1_macvtap: entered promiscuous mode
[  136.704216][ T9180] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.708656][ T9180] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.711504][ T9180] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.725408][ T9180] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.730938][ T9180] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.737114][ T9180] 8021q: adding VLAN 0 to HW filter on device eth0
[  136.746771][ T9180] 8021q: adding VLAN 0 to HW filter on device eth1
[  136.758978][ T9180] 8021q: adding VLAN 0 to HW filter on device eth2
[  136.766796][ T9180] 8021q: adding VLAN 0 to HW filter on device eth3
[  136.786930][ T9180] 8021q: adding VLAN 0 to HW filter on device bond6
[  136.792119][ T9180] 8021q: adding VLAN 0 to HW filter on device bond7
[  136.796766][ T9180] 8021q: adding VLAN 0 to HW filter on device bond8
[  136.804441][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv1
[  136.809529][ T9180] 8021q: adding VLAN 0 to HW filter on device bond9
[  136.813566][ T9180] 8021q: adding VLAN 0 to HW filter on device bond10
[  136.817575][ T9180] 8021q: adding VLAN 0 to HW filter on device bond11
[  136.826862][ T9180] 8021q: adding VLAN 0 to HW filter on device bond12
[  136.856970][ T9184] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  136.865755][ T9184] bond13 (unregistering): Released all slaves
[  136.928919][ T5763] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.932007][ T5763] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  136.935131][ T5763] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 46968 - 0
[  136.939622][ T5763] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.942855][ T5763] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  136.946125][ T5763] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 46968 - 0
[  136.961762][ T5763] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.971914][ T5763] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  136.986178][ T5763] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 46968 - 0
[  136.996026][ T5763] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.999340][ T5763] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  137.003521][ T5763] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 46968 - 0
[  137.009082][ T4999] Bluetooth: hci2: link tx timeout
[  137.010652][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.014100][ T4999] Bluetooth: hci2: link tx timeout
[  137.016024][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.029191][ T4999] Bluetooth: hci2: command 0x0401 tx timeout
[  137.183370][ T9195] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  137.220241][ T9195] bond13: (slave lo): Enslaving as an active interface with an up link
[  137.267346][ T9203] validate_nla: 5 callbacks suppressed
[  137.267359][ T9203] netlink: 'syz.1.1057': attribute type 21 has an invalid length.
[  137.289316][ T9201] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  137.293307][ T9201] bond18 (unregistering): Released all slaves
[  137.304241][ T9203] netlink: 'syz.1.1057': attribute type 6 has an invalid length.
[  137.307376][ T9203] __nla_validate_parse: 5 callbacks suppressed
[  137.307392][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1057'.
[  137.346754][ T9206] bond14: (slave bond_slave_1): Device is not our slave
[  137.351419][ T9206] bond14: option active_slave: invalid value (bond_slave_1)
[  137.359364][ T9206] bond14 (unregistering): Released all slaves
[  137.687488][ T9226] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  137.694367][ T9226] bond18 (unregistering): Released all slaves
[  137.707418][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  137.723637][ T9229] gretap0: entered promiscuous mode
[  137.727472][ T9229] macvlan3: entered allmulticast mode
[  137.731852][ T9229] gretap0: entered allmulticast mode
[  138.072931][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'.
[  138.128099][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'.
[  138.131427][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'.
[  138.544334][ T9271] xt_bpf: check failed: parse error
[  138.564353][ T9271] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1083'.
[  138.578064][ T9273] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1084'.
[  138.590574][ T9273] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  138.599238][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1084'.
[  138.788111][ T9284] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  138.792528][ T9284] bond14 (unregistering): Released all slaves
[  138.817757][ T9287] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  138.839551][ T5445] net_ratelimit: 54 callbacks suppressed
[  138.839563][ T5445] bond10: (slave bridge4): failed to get link speed/duplex
[  138.868205][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  138.924013][ T9293] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.1092'.
[  138.958455][ T9295] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  138.965525][ T9295] hm3): entered promiscuous mode
[  138.977816][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  138.988771][   T13] bond10: (slave bridge4): failed to get link speed/duplex
[  139.087835][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  139.097840][   T13] bond10: (slave bridge4): failed to get link speed/duplex
[  139.208182][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  139.229439][   T13] bond10: (slave bridge4): failed to get link speed/duplex
[  139.359038][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  139.379304][   T13] bond10: (slave bridge4): failed to get link speed/duplex
[  139.952755][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.957278][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'.
[  139.961896][ T9330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.966813][ T9330] syzkaller0: entered promiscuous mode
[  139.970120][ T9330] syzkaller0: entered allmulticast mode
[  139.972983][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.976629][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.980379][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.984406][ T9330] tipc: Resetting bearer <eth:syzkaller0>
[  139.989537][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.992228][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  139.996658][ T9329] tipc: Resetting bearer <eth:syzkaller0>
[  140.012976][ T9329] tipc: Disabling bearer <eth:syzkaller0>
[  140.018329][ T9332] netlink: 'syz.0.1102': attribute type 29 has an invalid length.
[  140.793994][ T9388] 8021q: adding VLAN 0 to HW filter on device bond18
[  140.814153][ T9390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.822476][ T9390] syzkaller0: entered promiscuous mode
[  140.828190][ T9390] syzkaller0: entered allmulticast mode
[  140.856128][ T9390] tipc: Resetting bearer <eth:syzkaller0>
[  141.060008][ T5689] tipc: Node number set to 1563414810
[  141.235009][ T9408] bond14: option all_slaves_active: invalid value (9)
[  141.241815][ T9408] bond14 (unregistering): Released all slaves
[  141.268087][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  141.268109][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  141.439685][ T9414] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  141.443780][ T9414] bond14 (unregistering): Released all slaves
[  141.544003][ T9382] tipc: Resetting bearer <eth:syzkaller0>
[  141.572768][ T9382] tipc: Disabling bearer <eth:syzkaller0>
[  142.073652][ T9436] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  142.078912][ T9436] bond19 (unregistering): Released all slaves
[  142.214512][ T9440] 8021q: adding VLAN 0 to HW filter on device bond19
[  142.550093][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  143.897900][ T6965] net_ratelimit: 74 callbacks suppressed
[  143.897917][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  143.917834][ T6965] bond3: (slave bridge1): failed to get link speed/duplex
[  144.008023][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  144.028063][ T6965] bond3: (slave bridge1): failed to get link speed/duplex
[  144.091237][ T9400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.127473][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  144.138725][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  144.238060][ T5445] bond10: (slave bridge4): failed to get link speed/duplex
[  144.246937][ T9452] __nla_validate_parse: 43 callbacks suppressed
[  144.246954][ T9452] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1142'.
[  144.256871][ T9452] validate_nla: 32 callbacks suppressed
[  144.256886][ T9452] netlink: 'syz.1.1142': attribute type 1 has an invalid length.
[  144.294710][ T9452] 8021q: adding VLAN 0 to HW filter on device bond19
[  144.337915][ T6965] bond3: (slave bridge1): failed to get link speed/duplex
[  144.348033][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  144.379189][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  144.384617][ T9452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1142'.
[  144.389293][ T9452] bond19: entered promiscuous mode
[  144.391247][ T9452] bond19: entered allmulticast mode
[  144.412575][ T9452] team0: Port device dummy0 removed
[  144.422443][ T9452] bond19: (slave dummy0): making interface the new active one
[  144.425429][ T9452] dummy0: entered allmulticast mode
[  144.428999][ T9452] bond19: (slave dummy0): Enslaving as an active interface with an up link
[  144.447862][ T6965] bond3: (slave bridge1): failed to get link speed/duplex
[  144.492907][ T9466] netlink: 'syz.1.1146': attribute type 13 has an invalid length.
[  144.495561][ T9466] netlink: 'syz.1.1146': attribute type 17 has an invalid length.
[  144.609104][ T5689] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  144.619307][ T5689] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  144.749409][ T7373] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  144.948463][ T7373] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.107374][ T9473] netlink: 'syz.0.1147': attribute type 10 has an invalid length.
[  145.125692][ T9473] team0: Device dummy0 is of different type
[  145.178544][ T5445] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.180988][ T5445] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.222701][ T9474] veth0: entered promiscuous mode
[  145.251462][ T9474] bond0: entered promiscuous mode
[  145.336314][  T797] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.427422][ T9472] bond0: left promiscuous mode
[  145.431534][ T9472] veth0: left promiscuous mode
[  145.437889][ T9482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.449665][ T9482] syzkaller0: entered promiscuous mode
[  145.453866][ T9482] syzkaller0: entered allmulticast mode
[  145.474050][ T9482] tipc: Resetting bearer <eth:syzkaller0>
[  145.482301][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  145.504019][ T9481] tipc: Disabling bearer <eth:syzkaller0>
[  145.512340][ T5445] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  145.516113][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  145.520449][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  145.529047][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  145.625064][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[  145.753009][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1152'.
[  145.783177][ T9491] pim6reg1: entered promiscuous mode
[  145.784976][ T9491] pim6reg1: entered allmulticast mode
[  146.308670][  T797] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  146.308681][  T797] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  147.162281][ T9519] bond20: option all_slaves_active: invalid value (9)
[  147.171845][ T9519] bond20 (unregistering): Released all slaves
[  147.369406][ T9538] sctp: [Deprecated]: syz.1.1165 (pid 9538) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.369406][ T9538] Use struct sctp_sack_info instead
[  147.375672][ T9538] raw_sendmsg: syz.1.1165 forgot to set AF_INET. Fix it!
[  147.501079][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'.
[  147.501084][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'.
[  147.501105][ T9546] netlink: 'syz.1.1167': attribute type 15 has an invalid length.
[  147.510209][ T9543] netlink: 'syz.1.1167': attribute type 15 has an invalid length.
[  147.527191][ T9550] netlink: 'syz.2.1168': attribute type 9 has an invalid length.
[  147.758914][ T9563] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  147.862685][ T9576] netlink: 'syz.0.1176': attribute type 3 has an invalid length.
[  148.061695][ T9590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.075797][ T9585] netlink: 'syz.0.1179': attribute type 10 has an invalid length.
[  148.134006][ T9590] syzkaller0: entered promiscuous mode
[  148.136038][ T9590] syzkaller0: entered allmulticast mode
[  148.143685][ T9590] tipc: Resetting bearer <eth:syzkaller0>
[  148.146368][ T9585] ipvlan0: entered allmulticast mode
[  148.150564][ T9585] veth0_vlan: entered allmulticast mode
[  148.161601][ T9585] team0: Device ipvlan0 failed to register rx_handler
[  148.182831][ T9598] veth11: entered promiscuous mode
[  148.204188][ T9585] batadv3: entered promiscuous mode
[  148.205790][ T9585] batadv3: entered allmulticast mode
[  148.211609][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv3
[  148.260094][ T9589] tipc: Resetting bearer <eth:syzkaller0>
[  149.037842][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  149.350716][    C1] net_ratelimit: 57 callbacks suppressed
[  149.350728][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  149.437781][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  149.492871][ T9589] tipc: Disabling bearer <eth:syzkaller0>
[  149.606093][ T9610] netlink: 'syz.0.1187': attribute type 10 has an invalid length.
[  149.636265][ T9610] team0: Device dummy0 is of different type
[  149.658176][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  149.678491][ T5763] bond10: (slave bridge4): failed to get link speed/duplex
[  149.701984][ T9616] veth0: entered promiscuous mode
[  149.718189][ T9616] bond0: entered promiscuous mode
[  149.777783][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  149.801648][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  149.910411][ T9632] pimreg: entered allmulticast mode
[  149.922532][ T9631] pimreg: left allmulticast mode
[  149.943003][ T9636] gre0: entered promiscuous mode
[  149.944539][ T9636] gre0: entered allmulticast mode
[  149.948050][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  149.968806][ T5763] bond10: (slave bridge4): failed to get link speed/duplex
[  150.001423][ T9609] bond0: left promiscuous mode
[  150.011401][ T9609] veth0: left promiscuous mode
[  150.057770][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  150.089473][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  150.144649][ T9651] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  150.155281][ T9653] __nla_validate_parse: 4 callbacks suppressed
[  150.155294][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'.
[  150.185298][ T9651] bond20: entered promiscuous mode
[  150.188819][ T9651] 8021q: adding VLAN 0 to HW filter on device bond20
[  150.197845][ T5763] bond10: (slave bridge4): failed to get link speed/duplex
[  150.204964][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1199'.
[  150.214422][ T9651] bond20: entered allmulticast mode
[  150.235930][ T9651] bond20: (slave bridge16): making interface the new active one
[  150.238544][ T9651] bridge16: entered promiscuous mode
[  150.240490][ T9651] bridge16: entered allmulticast mode
[  150.243717][ T9651] bond20: (slave bridge16): Enslaving as an active interface with an up link
[  150.291961][ T9658] dvmrp0: entered allmulticast mode
[  150.354782][ T5668] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  150.365047][ T5668] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  150.379120][ T7365] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  150.390106][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  150.394488][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  150.407936][ T7365] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  150.574772][ T9678] pim6reg: entered allmulticast mode
[  150.636149][ T9680] bond14: option all_slaves_active: invalid value (9)
[  150.642277][ T9680] bond14 (unregistering): Released all slaves
[  150.688004][ T7365] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  150.873264][ T9696] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1213'.
[  150.914698][ T9700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.921265][ T9700] syzkaller0: entered promiscuous mode
[  150.923053][ T9700] syzkaller0: entered allmulticast mode
[  150.935114][ T9700] tipc: Resetting bearer <eth:syzkaller0>
[  150.946032][ T9699] tipc: Resetting bearer <eth:syzkaller0>
[  150.969533][ T9699] tipc: Disabling bearer <eth:syzkaller0>
[  151.044774][ T9703] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  151.062377][ T9703] 8021q: adding VLAN 0 to HW filter on device bond14
[  151.076404][ T9703] bond14: (slave veth13): Enslaving as an active interface with a down link
[  151.079446][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'.
[  151.079742][ T9706] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1216'.
[  151.210815][ T9711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.239883][ T9717] xt_hashlimit: size too large, truncated to 1048576
[  151.245386][ T9711] syzkaller0: entered promiscuous mode
[  151.247075][ T9711] syzkaller0: entered allmulticast mode
[  151.249607][ T9711] tipc: Resetting bearer <eth:syzkaller0>
[  151.255115][ T9711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1218'.
[  151.384535][ T9711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.403357][ T9711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.407607][ T9725] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  151.413753][ T9711] bond0 (unregistering): (slave team0): Releasing backup interface
[  151.424456][ T9711] bond0 (unregistering): Released all slaves
[  151.432682][ T9723] gre0: left promiscuous mode
[  151.434297][ T9723] gre0: left allmulticast mode
[  151.460977][ T9727] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  151.493646][ T7365] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  151.500330][ T7365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.578015][ T7365] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.625365][   T41] tipc: Resetting bearer <eth:syzkaller0>
[  151.643387][ T9710] tipc: Resetting bearer <eth:syzkaller0>
[  151.693753][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'.
[  151.860169][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1224'.
[  152.389496][  T797] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  152.914855][ T9710] tipc: Disabling bearer <eth:syzkaller0>
[  152.952114][ T5668] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  152.957553][ T5668] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  152.978273][ T5668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.981322][ T5668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  153.142205][ T9752] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  153.279290][ T5689] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  153.381954][ T9767] syzkaller1: entered promiscuous mode
[  153.383650][ T9767] syzkaller1: entered allmulticast mode
[  153.386082][ T9767] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  153.789193][ T9782] netlink: 'syz.1.1236': attribute type 1 has an invalid length.
[  153.812683][ T9782] 8021q: adding VLAN 0 to HW filter on device bond20
[  154.021885][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.024643][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.067946][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  154.211887][ T9803] netlink: 'syz.0.1244': attribute type 10 has an invalid length.
[  154.219069][ T9803] team0: Device ipvlan0 failed to register rx_handler
[  154.234395][ T9801] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.237580][ T9801] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.241211][ T9801] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  154.281762][ T9809] netlink: 'syz.0.1245': attribute type 1 has an invalid length.
[  154.294336][ T9805] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  154.320705][ T9801] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.323490][ T9801] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.326299][ T9801] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  154.332605][ T9809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.337010][ T9813] syzkaller0: entered promiscuous mode
[  154.348528][ T9813] tipc: Resetting bearer <eth:syzkaller0>
[  154.362326][ T9813] tipc: Disabling bearer <eth:syzkaller0>
[  154.395780][ T9801] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.399623][ T9801] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.402886][ T9801] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  154.457819][   T13] net_ratelimit: 122 callbacks suppressed
[  154.457830][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  154.505379][ T9801] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.510158][ T9801] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.513597][ T9801] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  154.537966][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  154.543219][ T9824] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  154.578998][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  154.598917][ T5668] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.603021][ T5668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  154.607075][ T5668] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  154.631654][ T5668] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.634908][ T5668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  154.638083][ T5668] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  154.648320][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  154.651055][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.656694][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  154.662144][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  154.674161][ T9832] xt_hashlimit: size too large, truncated to 1048576
[  154.686326][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.691517][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  154.696019][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  154.721440][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  154.797763][   T13] bond10: (slave bridge4): failed to get link speed/duplex
[  154.835479][ T9839] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  154.837970][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  154.841999][ T9840] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  154.976089][ T9850] team_slave_0: left promiscuous mode
[  154.981880][ T9850] team_slave_1: left promiscuous mode
[  155.007870][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  155.028084][ T5763] bond10: (slave bridge4): failed to get link speed/duplex
[  155.118021][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  155.164922][ T9868] __nla_validate_parse: 20 callbacks suppressed
[  155.165029][ T9868] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1263'.
[  155.188598][ T9870] netlink: 'syz.1.1264': attribute type 10 has an invalid length.
[  155.203164][ T9870] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1264'.
[  155.206679][ T9870] veth1_virt_wifi: entered promiscuous mode
[  155.209276][ T9870] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  155.211744][ T9870] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  155.214321][ T9870] veth1_virt_wifi: entered allmulticast mode
[  155.219267][ T9870] veth1_virt_wifi: left allmulticast mode
[  155.447264][ T9881] ip6t_rpfilter: unknown options
[  155.456404][ T9881] tipc: Enabling <eth:lo> not permitted
[  155.460613][ T9881] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  155.488763][ T9881] 8021q: adding VLAN 0 to HW filter on device bond21
[  155.688929][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  155.781453][ T9900] netlink: 'syz.0.1274': attribute type 3 has an invalid length.
[  155.785128][ T9900] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1274'.
[  155.795951][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  155.871262][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'.
[  156.105079][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'.
[  156.109371][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'.
[  156.165706][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'.
[  156.182715][ T9921] bond15: entered promiscuous mode
[  156.184624][ T9921] 8021q: adding VLAN 0 to HW filter on device bond15
[  156.708029][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  156.708045][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.268036][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  158.865519][ T9906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.024038][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'.
[  159.036620][ T9935] sctp: [Deprecated]: syz.1.1282 (pid 9935) Use of int in max_burst socket option.
[  159.036620][ T9935] Use struct sctp_assoc_value instead
[  159.046460][ T9935] : renamed from bridge_slave_0 (while UP)
[  159.076773][ T6965] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  159.092845][ T9940] IPv6: sit1: Disabled Multicast RS
[  159.123774][ T9942] netlink: 'syz.1.1285': attribute type 10 has an invalid length.
[  159.156430][ T9942] team0 (unregistering): Port device team_slave_0 removed
[  159.166902][ T9942] team0 (unregistering): Port device team_slave_1 removed
[  159.187238][ T9945] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  159.291871][ T9949] pim6reg: entered allmulticast mode
[  159.558040][ T6965] net_ratelimit: 81 callbacks suppressed
[  159.558058][ T6965] bond10: (slave bridge4): failed to get link speed/duplex
[  159.577880][ T6965] bond3: (slave bridge1): failed to get link speed/duplex
[  159.670503][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  159.687785][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  159.786882][ T9925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.790807][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  159.819572][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  159.896346][ T9958] netlink: 'syz.2.1291': attribute type 1 has an invalid length.
[  159.902101][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  159.960475][ T9958] bond16: entered promiscuous mode
[  159.962799][ T9958] 8021q: adding VLAN 0 to HW filter on device bond16
[  160.002655][   T12] bond3: (slave bridge1): failed to get link speed/duplex
[  160.019242][ T5668] bond10: (slave bridge4): failed to get link speed/duplex
[  160.108552][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  160.285291][ T9973] bridge0: port 1(vlan5) entered blocking state
[  160.287584][ T9973] bridge0: port 1(vlan5) entered disabled state
[  160.290590][ T9973] vlan5: entered allmulticast mode
[  160.292481][ T9973] geneve0: entered allmulticast mode
[  160.323125][ T9976] __nla_validate_parse: 3 callbacks suppressed
[  160.323137][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1295'.
[  160.436018][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.438906][ T9981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.441816][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.444542][ T9981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.448377][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'.
[  160.450120][ T9981] 8021q: adding VLAN 0 to HW filter on device team0
[  160.451437][ T9987] block nbd0: Unsupported socket: should be TCP or UNIX.
[  160.469992][ T9981] veth1_vlan: left promiscuous mode
[  160.473060][ T9981] veth0_vlan: left promiscuous mode
[  160.475879][ T9981] veth0_vlan: entered promiscuous mode
[  160.492699][ T9981] veth1_vlan: entered promiscuous mode
[  160.501883][ T9981] veth1_macvtap: left promiscuous mode
[  160.505143][ T9981] veth0_macvtap: left promiscuous mode
[  160.508875][ T9981] veth0_macvtap: entered promiscuous mode
[  160.533340][ T9981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.551091][ T9981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.561504][ T9981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.574235][ T9981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.610987][ T9981] syz_tun: entered promiscuous mode
[  160.620094][ T9981] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.626310][ T9981] 8021q: adding VLAN 0 to HW filter on device batadv1
[  160.632240][ T9981] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.636934][ T9981] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.641778][ T9981] ip6gretap0: entered promiscuous mode
[  160.646662][ T9981] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.659117][ T9980] pim6reg: entered allmulticast mode
[  160.697192][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.701624][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  160.710783][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.718334][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  160.726789][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.730310][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  160.733544][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.746993][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  161.029573][T10015] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  161.033411][T10015] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  161.035662][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  161.066502][T10015] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  161.105919][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'.
[  161.112593][T10019] block nbd0: Unsupported socket: should be TCP or UNIX.
[  161.140320][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  161.747816][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  162.357416][T10061] netlink: 'syz.0.1320': attribute type 15 has an invalid length.
[  162.376712][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'.
[  162.441608][T10069] pimreg: entered allmulticast mode
[  162.449501][T10069] pimreg: left allmulticast mode
[  162.455703][T10070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1319'.
[  162.624110][T10075] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1324'.
[  162.736429][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  162.739937][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  163.066695][T10091] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  163.079728][T10091] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  163.266592][ T5445] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.270043][ T5445] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  163.273061][ T5445] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.276190][ T5445] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.279361][ T5445] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  163.282587][ T5445] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.285595][ T5445] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.288605][ T5445] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  163.291673][ T5445] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.295132][ T5445] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.307799][ T5445] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  163.310901][ T5445] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  163.663044][T10111] netlink: 'syz.2.1333': attribute type 21 has an invalid length.
[  163.783585][T10120] xt_hashlimit: size too large, truncated to 1048576
[  163.791954][T10115] bond23: invalid ARP target 0.0.0.0 specified for addition
[  163.794645][T10115] bond23: option arp_ip_target: invalid value (0)
[  163.803361][T10115] bond23 (unregistering): Released all slaves
[  163.978212][T10127] bond14: option all_slaves_active: invalid value (255)
[  164.105071][   T34] audit: type=1800 audit(1778615812.558:4): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1341" name="r" dev="tmpfs" ino=2204 res=0 errno=0
[  164.271455][T10144] bond17: (slave lo): Releasing backup interface
[  164.274660][T10144] bond17: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  164.289944][T10144] bond13: (slave veth0): Removing an active aggregator
[  164.293796][T10144] bond13: (slave veth0): Releasing backup interface
[  164.601972][T10155] net_ratelimit: 91 callbacks suppressed
[  164.601985][T10155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  164.647864][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  164.668135][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  164.721564][T10157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.758249][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  164.788086][ T5445] bond4: (slave bridge3): failed to get link speed/duplex
[  164.871365][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  164.897860][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  164.987871][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  165.008018][ T5445] bond4: (slave bridge3): failed to get link speed/duplex
[  165.169854][T10185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  165.334036][T10198] IPVS: Unknown mcast interface: vcan0
[  165.342829][T10198] __nla_validate_parse: 157 callbacks suppressed
[  165.342839][T10198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1358'.
[  165.487323][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1361'.
[  165.491664][T10210] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  165.494008][T10210] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1361'.
[  165.704242][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'.
[  165.714002][T10220] xfrm1: entered promiscuous mode
[  165.716069][T10220] xfrm1: entered allmulticast mode
[  165.723382][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'.
[  166.034471][T10239] netlink: 'syz.2.1371': attribute type 39 has an invalid length.
[  166.139650][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'.
[  166.208615][T10248] bond17: option all_slaves_active: invalid value (9)
[  166.213136][T10248] bond17 (unregistering): Released all slaves
[  166.941511][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'.
[  166.989029][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  167.286357][T10285] bond24: option all_slaves_active: invalid value (9)
[  167.290865][T10285] bond24 (unregistering): Released all slaves
[  167.296263][T10281] netlink: 'syz.1.1386': attribute type 58 has an invalid length.
[  167.302058][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'.
[  167.409728][T10288] syzkaller0: create flow: hash 756201431 index 1
[  167.460565][T10287] syzkaller0: delete flow: hash 756201431 index 1
[  167.665807][T10299] IPVS: set_ctl: invalid protocol: 135 172.20.20.58:20000
[  169.387290][T10315] netlink: 'syz.1.1398': attribute type 2 has an invalid length.
[  169.446085][T10317] netlink: 'syz.1.1399': attribute type 1 has an invalid length.
[  169.456567][T10317] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  169.584077][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  169.727959][   T12] net_ratelimit: 45 callbacks suppressed
[  169.727977][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  169.747995][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  169.838422][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  169.878053][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  169.948192][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  169.958267][T10350] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  169.988475][   T12] bond3: (slave bridge1): failed to get link speed/duplex
[  170.058612][ T5445] bond4: (slave bridge3): failed to get link speed/duplex
[  170.140040][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  170.167756][ T5763] bond4: (slave bridge3): failed to get link speed/duplex
[  170.204473][T10364] block nbd0: Unsupported socket: should be TCP or UNIX.
[  170.236339][T10366] netlink: 'syz.0.1416': attribute type 15 has an invalid length.
[  170.249002][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  170.396597][T10378] __nla_validate_parse: 2 callbacks suppressed
[  170.396607][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  170.407942][T10378] netlink: 'syz.0.1418': attribute type 5 has an invalid length.
[  170.410984][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'.
[  170.422702][T10378] geneve5: entered promiscuous mode
[  170.424863][T10378] geneve5: entered allmulticast mode
[  170.429981][ T5445] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 256 - 0
[  170.436647][ T5445] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 256 - 0
[  170.442216][ T5445] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 256 - 0
[  170.446421][ T5445] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 256 - 0
[  170.597564][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'.
[  170.777517][T10391] netlink: 'syz.0.1421': attribute type 4 has an invalid length.
[  170.782940][T10391] netlink: 'syz.0.1421': attribute type 4 has an invalid length.
[  170.881990][T10395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.885489][T10395] syzkaller0: entered promiscuous mode
[  170.887563][T10395] syzkaller0: entered allmulticast mode
[  170.894424][T10395] netlink: 'syz.2.1423': attribute type 1 has an invalid length.
[  170.914446][T10395] bond17: entered promiscuous mode
[  170.916819][T10395] 8021q: adding VLAN 0 to HW filter on device bond17
[  170.925874][T10394] tipc: Resetting bearer <eth:syzkaller0>
[  170.941642][T10394] tipc: Disabling bearer <eth:syzkaller0>
[  171.072944][T10401] veth0_to_bridge: entered promiscuous mode
[  171.076833][T10401] macvtap1: entered allmulticast mode
[  171.080000][T10401] veth0_to_bridge: entered allmulticast mode
[  171.085783][T10401] veth0_to_bridge: left allmulticast mode
[  171.091433][T10401] veth0_to_bridge: left promiscuous mode
[  171.141956][T10404] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  171.145018][T10404] CPU: 0 UID: 0 PID: 10404 Comm: syz.1.1426 Not tainted syzkaller #0 PREEMPT(full) 
[  171.145031][T10404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.145038][T10404] Call Trace:
[  171.145043][T10404]  <TASK>
[  171.145047][T10404]  dump_stack_lvl+0xe8/0x150
[  171.145063][T10404]  sysfs_warn_dup+0x8e/0xa0
[  171.145074][T10404]  sysfs_do_create_link_sd+0xc0/0x110
[  171.145086][T10404]  device_add_class_symlinks+0x1cf/0x240
[  171.145098][T10404]  device_add+0x475/0xbb0
[  171.145109][T10404]  wiphy_register+0x1dc5/0x2dc0
[  171.145129][T10404]  ? __pfx_wiphy_register+0x10/0x10
[  171.145141][T10404]  ? __pfx_netdev_run_todo+0x10/0x10
[  171.145154][T10404]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  171.145166][T10404]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  171.145181][T10404]  ieee80211_register_hw+0x3d82/0x4a70
[  171.145203][T10404]  ? ieee80211_register_hw+0x18d1/0x4a70
[  171.145226][T10404]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  171.145239][T10404]  ? __asan_memset+0x22/0x50
[  171.145249][T10404]  ? __hrtimer_setup+0x1b7/0x260
[  171.145259][T10404]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.145271][T10404]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  171.145294][T10404]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.145302][T10404]  ? kstrndup+0xbf/0x160
[  171.145314][T10404]  hwsim_new_radio_nl+0xf6a/0x1c00
[  171.145333][T10404]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.145347][T10404]  ? rcu_is_watching+0x15/0xb0
[  171.145356][T10404]  ? trace_kmalloc+0x2a/0xf0
[  171.145371][T10404]  ? __nla_parse+0x40/0x60
[  171.145385][T10404]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  171.145394][T10404]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  171.145406][T10404]  genl_family_rcv_msg_doit+0x22a/0x330
[  171.145417][T10404]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.145432][T10404]  ? bpf_lsm_capable+0x9/0x20
[  171.145445][T10404]  ? security_capable+0x7e/0x2c0
[  171.145459][T10404]  genl_rcv_msg+0x61c/0x7a0
[  171.145470][T10404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.145477][T10404]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.145493][T10404]  netlink_rcv_skb+0x232/0x4b0
[  171.145504][T10404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.145513][T10404]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.145531][T10404]  ? down_read+0x270/0x2e0
[  171.145538][T10404]  ? genl_rcv+0xd/0x40
[  171.145546][T10404]  genl_rcv+0x28/0x40
[  171.145553][T10404]  netlink_unicast+0x75c/0x8e0
[  171.145567][T10404]  netlink_sendmsg+0x813/0xb40
[  171.145582][T10404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.145594][T10404]  ? aa_sock_msg_perm+0xf1/0x1b0
[  171.145606][T10404]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.145618][T10404]  ____sys_sendmsg+0x972/0x9f0
[  171.145634][T10404]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.145649][T10404]  ? import_iovec+0x73/0xa0
[  171.145662][T10404]  ___sys_sendmsg+0x2a5/0x360
[  171.145673][T10404]  ? __lock_acquire+0x6b5/0x2cf0
[  171.145683][T10404]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.145732][T10404]  ? futex_wait+0x2a2/0x390
[  171.145759][T10404]  ? __fget_files+0x2a/0x420
[  171.145768][T10404]  ? __fget_files+0x3a0/0x420
[  171.145782][T10404]  __x64_sys_sendmsg+0x1bd/0x2a0
[  171.145794][T10404]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.145809][T10404]  ? rcu_is_watching+0x15/0xb0
[  171.145822][T10404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.145831][T10404]  do_syscall_64+0x15f/0xf80
[  171.145842][T10404]  ? trace_irq_disable+0x3b/0x140
[  171.145856][T10404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.145864][T10404] RIP: 0033:0x7f041e39cdd9
[  171.145873][T10404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.145880][T10404] RSP: 002b:00007f041f25e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.145890][T10404] RAX: ffffffffffffffda RBX: 00007f041e615fa0 RCX: 00007f041e39cdd9
[  171.145896][T10404] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  171.145901][T10404] RBP: 00007f041e432d69 R08: 0000000000000000 R09: 0000000000000000
[  171.145906][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.145911][T10404] R13: 00007f041e616038 R14: 00007f041e615fa0 R15: 00007ffe6bd5c288
[  171.145925][T10404]  </TASK>
[  171.428733][T10410] netlink: 'syz.1.1428': attribute type 21 has an invalid length.
[  171.444516][T10411] netlink: 'syz.2.1427': attribute type 1 has an invalid length.
[  171.474813][T10410] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1428'.
[  171.610211][T10418] netlink: 'syz.1.1430': attribute type 4 has an invalid length.
[  171.837003][T10442] netlink: 'syz.2.1437': attribute type 1 has an invalid length.
[  171.837149][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  171.847118][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'.
[  171.863603][T10442] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  171.864974][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'.
[  171.950615][T10448] netlink: 'syz.2.1438': attribute type 10 has an invalid length.
[  171.967349][T10448] team0: Port device dummy0 added
[  172.014347][T10454] IPv6: NLM_F_CREATE should be specified when creating new route
[  172.016757][T10453] IPv6: NLM_F_CREATE should be specified when creating new route
[  172.020037][T10454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.022171][T10454] IPv6: NLM_F_CREATE should be set when creating new route
[  172.024225][T10454] IPv6: NLM_F_CREATE should be set when creating new route
[  172.026237][T10454] IPv6: NLM_F_CREATE should be set when creating new route
[  172.030160][T10453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.179159][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'.
[  172.201996][T10458] 8021q: adding VLAN 0 to HW filter on device bond24
[  172.299964][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'.
[  172.313162][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1443'.
[  172.400733][T10471] block nbd0: Unsupported socket: should be TCP or UNIX.
[  172.570682][T10482] batadv3: entered promiscuous mode
[  172.578350][T10482] batadv3: entered allmulticast mode
[  172.581748][T10482] 8021q: adding VLAN 0 to HW filter on device batadv3
[  172.896777][T10493] xfrm1: entered allmulticast mode
[  172.903978][T10486] netlink: 'syz.2.1449': attribute type 10 has an invalid length.
[  173.055693][T10503] block nbd0: Unsupported socket: should be TCP or UNIX.
[  173.450757][T10511] syzkaller0: entered promiscuous mode
[  173.452559][T10511] syzkaller0: entered allmulticast mode
[  174.897845][   T12] net_ratelimit: 49 callbacks suppressed
[  174.897862][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  174.929913][   T12] bond3: (slave bridge1): failed to get link speed/duplex
[  175.008933][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  175.035503][T10519] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  175.035503][T10519] Please contact the netfilter-devel mailing list or update your nftables rules.
[  175.056242][T10521] 5n: entered promiscuous mode
[  175.076109][T10524] block nbd0: Unsupported socket: should be TCP or UNIX.
[  175.088349][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  175.119245][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  175.199168][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  175.237892][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  175.281870][T10538] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  175.289924][T10538] bond23 (unregistering): Released all slaves
[  175.388283][   T12] bond3: (slave bridge1): failed to get link speed/duplex
[  175.400758][T10546] __nla_validate_parse: 13 callbacks suppressed
[  175.400769][T10546] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1470'.
[  175.408382][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  175.538545][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  175.656208][T10555] nftables ruleset with unbound chain
[  175.715293][T10555] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  175.889558][T10567] validate_nla: 1 callbacks suppressed
[  175.889597][T10567] netlink: 'syz.1.1477': attribute type 1 has an invalid length.
[  176.062401][T10568] veth0: entered promiscuous mode
[  176.082531][T10572] bond0: entered promiscuous mode
[  176.185221][T10561] bond0: left promiscuous mode
[  176.187318][T10561] veth0: left promiscuous mode
[  176.584419][T10588] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1481'.
[  176.641126][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1481'.
[  176.865988][T10595] bond25: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  176.869656][T10595] bond25: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  176.920479][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'.
[  176.923061][T10598] block nbd0: Unsupported socket: should be TCP or UNIX.
[  177.193781][T10604] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  177.202175][T10604] bond23 (unregistering): Released all slaves
[  177.322023][T10612] netlink: 'syz.0.1488': attribute type 1 has an invalid length.
[  177.406336][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'.
[  177.637541][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  177.738889][T10629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1497'.
[  177.756259][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'.
[  177.808651][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'.
[  177.922943][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'.
[  177.926847][T10641] block nbd0: Unsupported socket: should be TCP or UNIX.
[  177.954892][T10644] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  177.960108][T10644] bond23 (unregistering): Released all slaves
[  178.031718][T10642] netlink: 'syz.0.1501': attribute type 1 has an invalid length.
[  178.399039][T10664] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.402155][T10664] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.405296][T10664] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.410086][T10664] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 46968 - 0
[  178.413609][T10664] netdevsim netdevsim0 eth3 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  178.470586][T10664] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.473590][T10664] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.476413][T10664] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.488152][T10664] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 46968 - 0
[  178.497266][T10664] netdevsim netdevsim0 eth2 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  178.584846][T10664] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.588683][T10664] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.592345][T10664] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.595928][T10664] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 46968 - 0
[  178.600365][T10664] netdevsim netdevsim0 eth1 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  178.625067][T10670] tipc: Resetting bearer <eth:xfrm0>
[  178.687174][T10664] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.692525][T10664] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.695385][T10664] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  178.708555][T10664] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 46968 - 0
[  178.711354][T10664] netdevsim netdevsim0 eth0 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  178.738610][T10673] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  178.742791][T10673] bond19 (unregistering): Released all slaves
[  178.781296][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.783942][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  178.786806][ T5668] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 46968 - 0
[  178.801666][ T5668] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  178.807729][ T5668] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  178.840676][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.843632][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  178.846095][ T5668] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 46968 - 0
[  178.850402][ T5668] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  178.853160][ T5668] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  178.862557][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.867574][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  178.874850][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 46968 - 0
[  178.880705][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  178.887017][   T13] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  178.920983][ T5763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.924776][ T5763] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  178.933852][ T5763] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 46968 - 0
[  178.937298][ T5763] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  178.945299][ T5763] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  179.186564][T10703] syzkaller0: entered promiscuous mode
[  179.189525][T10703] syzkaller0: entered allmulticast mode
[  179.308686][T10711] netlink: 'syz.2.1518': attribute type 1 has an invalid length.
[  179.429712][ T4999] Bluetooth: hci2: command 0x0401 tx timeout
[  179.431669][ T5612] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  180.632584][T10710] ipvlan0: left allmulticast mode
[  180.634299][T10710] veth0_vlan: left allmulticast mode
[  180.658164][ T5668] net_ratelimit: 52 callbacks suppressed
[  180.658176][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  180.682944][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  180.754332][T10720] pimreg9: entered allmulticast mode
[  180.771251][T10724] __nla_validate_parse: 2 callbacks suppressed
[  180.771269][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'.
[  180.795094][T10723] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  180.805840][T10723] bond23 (unregistering): Released all slaves
[  180.838105][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  180.902471][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'.
[  180.909335][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  180.997615][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1524'.
[  181.007818][ T5763] bond4: (slave bridge3): failed to get link speed/duplex
[  181.039480][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  181.057288][T10742] ip6t_srh: unknown srh invflags BA61
[  181.062167][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'.
[  181.077302][T10742] sit1: entered allmulticast mode
[  181.097356][T10739] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1526'.
[  181.126502][T10745] netlink: 'syz.2.1530': attribute type 1 has an invalid length.
[  181.147903][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  181.159057][   T13] bond4: (slave bridge3): failed to get link speed/duplex
[  181.260584][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  181.267801][   T13] bond4: (slave bridge3): failed to get link speed/duplex
[  181.420965][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'.
[  181.423988][T10760] block nbd0: Unsupported socket: should be TCP or UNIX.
[  181.428756][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  181.518919][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  181.732093][T10768] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  181.736196][T10768] bond19 (unregistering): Released all slaves
[  181.811840][T10775] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  181.835044][T10775] 8021q: adding VLAN 0 to HW filter on device bond23
[  181.836816][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'.
[  181.864591][T10775] veth17: entered promiscuous mode
[  181.872379][T10775] bond23: (slave veth17): Enslaving as an active interface with an up link
[  181.875218][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'.
[  182.020119][T10784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  182.023416][T10784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  182.054878][T10789] vlan0: entered promiscuous mode
[  182.326498][T10798] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  182.331907][T10798] bond19 (unregistering): Released all slaves
[  182.487327][T10806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.492362][T10806] syzkaller0: entered promiscuous mode
[  182.494389][T10806] syzkaller0: entered allmulticast mode
[  182.512477][T10806] tipc: Resetting bearer <eth:syzkaller0>
[  182.516309][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  182.530219][T10805] tipc: Disabling bearer <eth:syzkaller0>
[  182.645204][T10813] xt_hashlimit: size too large, truncated to 1048576
[  182.702437][T10819] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.720173][T10819] bridge_slave_0 (unregistering): left allmulticast mode
[  182.726541][T10819] bridge_slave_0 (unregistering): left promiscuous mode
[  182.730656][T10819] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.928724][T10827] netlink: 'syz.2.1556': attribute type 1 has an invalid length.
[  183.151724][T10839] netlink: 'syz.2.1560': attribute type 1 has an invalid length.
[  183.155349][T10841] netlink: 'syz.1.1559': attribute type 10 has an invalid length.
[  183.168470][T10839] 8021q: adding VLAN 0 to HW filter on device bond19
[  183.175209][T10841] bond19: (slave dummy0): Releasing active interface
[  183.177530][T10841] dummy0: left promiscuous mode
[  183.179485][T10841] dummy0: left allmulticast mode
[  183.190096][T10839] macvlan0: entered promiscuous mode
[  183.191989][T10839] macvlan0: entered allmulticast mode
[  183.194048][T10839] bond19: entered allmulticast mode
[  183.195951][T10839] bond19: entered promiscuous mode
[  183.199335][T10839] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  183.205164][T10839] team0: Port device macvlan0 added
[  183.208246][T10841] veth0: entered promiscuous mode
[  183.274741][T10840] veth0: left promiscuous mode
[  183.309185][T10846] netlink: 'syz.2.1562': attribute type 11 has an invalid length.
[  183.368409][T10846] netlink: 'syz.2.1562': attribute type 11 has an invalid length.
[  183.595968][T10858] 8021q: adding VLAN 0 to HW filter on device bond20
[  183.651987][T10858] 8021q: adding VLAN 0 to HW filter on device bond21
[  183.668841][T10858] bond20: (slave bond21): Enslaving as an active interface with an up link
[  183.682249][T10862] bond20 (unregistering): (slave bond21): Releasing backup interface
[  183.711970][T10862] bond20 (unregistering): Released all slaves
[  183.841077][T10865] bond27: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  183.848494][T10865] bond27: (slave lo): Enslaving as an active interface with an up link
[  183.951345][T10874] netlink: 'syz.2.1574': attribute type 39 has an invalid length.
[  184.079682][T10878] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  184.084511][T10878] bond20 (unregistering): Released all slaves
[  185.113562][T10906] syzkaller0: entered promiscuous mode
[  185.115920][T10906] syzkaller0: entered allmulticast mode
[  185.223799][T10909] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.231458][T10909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  185.235396][T10909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46968 - 0
[  185.239229][T10909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  185.242429][T10909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  185.315368][T10909] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.319367][T10909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  185.322801][T10909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46968 - 0
[  185.326320][T10909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  185.330157][T10909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  185.337154][T10916] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.393522][T10909] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.399715][T10909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  185.405568][T10909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46968 - 0
[  185.411506][T10909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  185.415131][T10909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  185.483976][T10909] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.487068][T10909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  185.490530][T10909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46968 - 0
[  185.493414][T10909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  185.496256][T10909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  185.580003][ T5445] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.585368][ T5445] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  185.591485][ T5445] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 46968 - 0
[  185.595513][ T5445] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  185.599912][ T5445] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  185.615813][ T5445] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.620575][ T5445] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  185.623152][ T5445] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 46968 - 0
[  185.625982][ T5445] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  185.630290][ T5445] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  185.639730][ T5445] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.642395][ T5445] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  185.644888][ T5445] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 46968 - 0
[  185.647324][ T5445] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  185.650229][ T5445] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  185.661766][ T5668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.664240][ T5668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  185.666621][ T5668] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 46968 - 0
[  185.669549][ T5668] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  185.671993][ T5668] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  185.707847][ T5445] net_ratelimit: 65 callbacks suppressed
[  185.707863][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  185.730268][ T5445] bond4: (slave bridge3): failed to get link speed/duplex
[  185.810157][T10931] pimreg: entered allmulticast mode
[  185.813202][T10931] pimreg: left allmulticast mode
[  185.838408][   T12] bond4: (slave bridge3): failed to get link speed/duplex
[  185.860233][T10935] __nla_validate_parse: 12 callbacks suppressed
[  185.860249][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'.
[  185.864991][T10935] block nbd0: Unsupported socket: should be TCP or UNIX.
[  185.869937][   T12] bond3: (slave bridge1): failed to get link speed/duplex
[  185.923760][T10937] netlink: 'syz.0.1596': attribute type 5 has an invalid length.
[  185.926183][T10937] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  185.948478][ T5763] bond4: (slave bridge3): failed to get link speed/duplex
[  185.979369][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  185.990891][   T41] wlan0: Trigger new scan to find an IBSS to join
[  186.233666][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  186.777284][T10967] bridge0: entered allmulticast mode
[  186.783608][T10965] pim6reg: left allmulticast mode
[  186.786684][T10965] bridge0: left allmulticast mode
[  186.858395][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  186.878003][ T5763] bond4: (slave bridge3): failed to get link speed/duplex
[  186.897039][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'.
[  186.904381][T10971] block nbd0: Unsupported socket: should be TCP or UNIX.
[  186.969777][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  186.988333][ T5668] bond4: (slave bridge3): failed to get link speed/duplex
[  186.996303][T10974] netlink: 'syz.2.1604': attribute type 1 has an invalid length.
[  187.056067][T10974] 8021q: adding VLAN 0 to HW filter on device bond20
[  187.197337][T10987] bond24: option all_slaves_active: invalid value (9)
[  187.203801][T10987] bond24 (unregistering): Released all slaves
[  187.394909][T10992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1609'.
[  187.462707][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'.
[  187.480265][T11006] syzkaller1: entered promiscuous mode
[  187.481958][T11006] syzkaller1: entered allmulticast mode
[  187.502929][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'.
[  187.506849][T11008] GUP no longer grows the stack in syz.1.1614 (11008): 200000003000-20000000a000 (200000001000)
[  187.513240][T11008] CPU: 1 UID: 0 PID: 11008 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT(full) 
[  187.513261][T11008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.513270][T11008] Call Trace:
[  187.513276][T11008]  <TASK>
[  187.513283][T11008]  dump_stack_lvl+0xe8/0x150
[  187.513306][T11008]  __get_user_pages+0x2378/0x2720
[  187.513326][T11008]  ? __gup_longterm_locked+0xc4e/0x1630
[  187.513354][T11008]  ? __gup_longterm_locked+0xc4e/0x1630
[  187.513372][T11008]  ? down_read_killable+0x1bb/0x340
[  187.513391][T11008]  __gup_longterm_locked+0xdcf/0x1630
[  187.513413][T11008]  ? lock_acquire+0x106/0x350
[  187.513440][T11008]  gup_fast_fallback+0x1d84/0x20d0
[  187.513527][T11008]  ? __pfx_gup_fast_fallback+0x10/0x10
[  187.513564][T11008]  ? is_valid_gup_args+0x11f/0x200
[  187.513585][T11008]  ? get_user_pages_fast+0x4d/0xb0
[  187.513604][T11008]  __iov_iter_get_pages_alloc+0x370/0xa10
[  187.513632][T11008]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  187.513655][T11008]  iov_iter_get_pages2+0x5e/0xa0
[  187.513676][T11008]  __se_sys_vmsplice+0x7c7/0x1620
[  187.513705][T11008]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  187.513726][T11008]  ? __pfx_futex_wake+0x10/0x10
[  187.513793][T11008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.513809][T11008]  do_syscall_64+0x15f/0xf80
[  187.513830][T11008]  ? trace_irq_disable+0x3b/0x140
[  187.513856][T11008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.513871][T11008] RIP: 0033:0x7f041e39cdd9
[  187.513885][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.513899][T11008] RSP: 002b:00007f041f25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  187.513916][T11008] RAX: ffffffffffffffda RBX: 00007f041e615fa0 RCX: 00007f041e39cdd9
[  187.513927][T11008] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  187.513937][T11008] RBP: 00007f041e432d69 R08: 0000000000000000 R09: 0000000000000000
[  187.513946][T11008] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  187.513955][T11008] R13: 00007f041e616038 R14: 00007f041e615fa0 R15: 00007ffe6bd5c288
[  187.513981][T11008]  </TASK>
[  187.855246][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'.
[  187.862926][T11026] bond24: entered allmulticast mode
[  187.875981][T11026] macvlan14: entered promiscuous mode
[  187.878280][T11026] macvlan14: entered allmulticast mode
[  187.881449][T11026] bond24: entered promiscuous mode
[  187.885575][T11026] 8021q: adding VLAN 0 to HW filter on device macvlan14
[  187.901092][T11026] bond24: left promiscuous mode
[  188.047554][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'.
[  188.065264][T11039] ip6gre1: entered promiscuous mode
[  188.116260][T11045] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  188.118809][T11045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1626'.
[  188.132723][T11045] vti2: entered promiscuous mode
[  188.190637][T11050] tap0: tun_chr_ioctl cmd 1074025676
[  188.192842][T11050] tap0: owner set to 0
[  188.999630][T11068] netlink: 'syz.1.1632': attribute type 1 has an invalid length.
[  189.002608][T11068] netlink: 'syz.1.1632': attribute type 1 has an invalid length.
[  189.028776][  T170] wlan0: Trigger new scan to find an IBSS to join
[  189.033031][T11068] bond25: option arp_all_targets: invalid value (129)
[  189.037153][T11068] bond25 (unregistering): Released all slaves
[  189.146269][T11071] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1633'.
[  189.197050][T11073] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1634'.
[  189.202597][T11073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.243335][T11073] syzkaller0: entered promiscuous mode
[  189.245568][T11073] syzkaller0: entered allmulticast mode
[  189.248282][T11073] tipc: Resetting bearer <eth:syzkaller0>
[  189.320530][T11072] tipc: Resetting bearer <eth:syzkaller0>
[  190.895665][T11072] tipc: Disabling bearer <eth:syzkaller0>
[  190.956681][T11076] tipc: Resetting bearer <eth:xfrm0>
[  191.052905][T11076] gretap0: left allmulticast mode
[  191.068932][T11076] bond19: left allmulticast mode
[  191.070497][T11076] bond19: left promiscuous mode
[  191.122202][ T7378] tipc: Node number set to 2542604633
[  191.128957][ T5445] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.135378][ T5445] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.144049][ T5445] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  191.167731][T11088] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1638'.
[  191.167909][ T5445] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.182980][ T5445] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.185832][ T5445] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  191.190504][ T5445] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.199015][ T5445] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.205214][ T5445] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  191.240088][ T5445] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.247195][ T5445] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.261248][ T5445] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  191.290157][   T13] net_ratelimit: 37 callbacks suppressed
[  191.290174][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  191.301355][T11098] openvswitch: netlink: IPv4 tun info is not correct
[  191.304687][T11098] netlink: 'syz.0.1641': attribute type 1 has an invalid length.
[  191.325434][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  191.345302][T11098] bond28: entered promiscuous mode
[  191.349076][T11098] 8021q: adding VLAN 0 to HW filter on device bond28
[  191.361883][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1641'.
[  191.382564][T11098] bond28: (slave bridge18): making interface the new active one
[  191.385489][T11098] bridge18: entered promiscuous mode
[  191.390202][T11098] bond28: (slave bridge18): Enslaving as an active interface with an up link
[  191.416746][T11108] netlink: 'syz.1.1644': attribute type 1 has an invalid length.
[  191.419441][T11108] netlink: 'syz.1.1644': attribute type 2 has an invalid length.
[  191.425993][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'.
[  191.434522][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'.
[  191.438452][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  191.495425][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'.
[  191.500025][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'.
[  191.548392][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  191.583332][T11119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.585588][T11118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.591835][T11118] syzkaller0: entered promiscuous mode
[  191.593529][T11118] syzkaller0: entered allmulticast mode
[  191.645514][T11124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.656424][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'.
[  191.660796][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  191.665685][T11122] syzkaller1: entered promiscuous mode
[  191.672143][T11122] syzkaller1: entered allmulticast mode
[  191.696319][T11122] veth1_virt_wifi: left promiscuous mode
[  191.706471][T11122] bond13: left promiscuous mode
[  191.709708][T11122] bridge7: left promiscuous mode
[  191.713833][T11122] bond13: left allmulticast mode
[  191.719685][T11122] bridge7: left allmulticast mode
[  191.722622][T11122] bond14: left promiscuous mode
[  191.724766][T11122] bond15: left promiscuous mode
[  191.726224][T11122] bond15: left allmulticast mode
[  191.729592][T11122] gretap1: left allmulticast mode
[  191.731772][T11122] bond17: left promiscuous mode
[  191.733255][T11122] wireguard1: left promiscuous mode
[  191.735142][T11122] bond19: left promiscuous mode
[  191.736581][T11122] bond19: left allmulticast mode
[  191.760396][T11122] xfrm1: left allmulticast mode
[  191.768269][T11122] sit1: left allmulticast mode
[  191.779343][T11122] veth17: left promiscuous mode
[  191.789067][T11122] bond24: left allmulticast mode
[  191.795470][T11122] syzkaller1: left promiscuous mode
[  191.800124][T11122] syzkaller1: left allmulticast mode
[  191.805054][T11129] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  191.848114][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  191.957923][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  191.990385][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  191.990528][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  191.998674][ T1111] wlan0: Trigger new scan to find an IBSS to join
[  192.067857][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  192.189114][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  192.233933][T11147] xt_hashlimit: invalid rate
[  192.309232][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  192.646964][T11162] netlink: 'syz.1.1663': attribute type 1 has an invalid length.
[  192.733180][T11162] 8021q: adding VLAN 0 to HW filter on device bond25
[  192.749646][ T7379] tipc: Node number set to 4052090409
[  192.777271][T11162] bond25: (slave ip6gretap1): making interface the new active one
[  192.783171][T11162] bond25: (slave ip6gretap1): Enslaving as an active interface with an up link
[  192.808362][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.811084][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.813527][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.816150][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.819322][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.822286][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.825277][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.828086][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.831088][T11162] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  192.900781][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.943900][T11169] bond26: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  192.949466][T11169] bond26 (unregistering): Released all slaves
[  193.224923][T11180] 8021q: adding VLAN 0 to HW filter on device bond26
[  193.250227][T11180] bond26: (slave veth19): Enslaving as an active interface with a down link
[  193.261931][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.264610][T11180] bond26: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  193.438416][T11184] dummy0: entered promiscuous mode
[  193.440501][T11184] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  193.618153][T11183] nbd0: detected capacity change from 0 to 63
[  193.628228][T11187] block nbd0: Receive control failed (result -104)
[  193.632037][   T58] block nbd0: Receive control failed (result -32)
[  193.772078][T11194] bond27: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  193.776264][T11194] bond27 (unregistering): Released all slaves
[  194.281135][T11229] pim6reg: entered allmulticast mode
[  194.611275][ T4999] Bluetooth: hci2: link tx timeout
[  194.612891][ T4999] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  194.694733][T11238] bond27: (slave lo): Releasing backup interface
[  194.704933][T11238] bond27: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  194.887026][T11248] syzkaller1: entered promiscuous mode
[  194.894131][T11248] syzkaller1: entered allmulticast mode
[  194.959578][   T34] audit: type=1107 audit(1778615843.408:5): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='a۱/4	loο>)]`<e;L3+^VL:o&⸓ձ"6ܥou6'6ǙAZw
[  194.959578][   T34] qK!ɽp8<΅ ԱfD)xz~Q&eR. _SC+ie	Z1_ln,aM>+HY>mrad<A!Ζ?;{oȰ@?3Hwvɜy!]] [+LElP1-V,[wN6qL5hSl}^'n4]K$BkGd=X~Jו/RRLMiViG;
[  194.959578][   T34] wi'}Z1K8~aw'W{ٵ[<$i7X:U~@ALp4*u&'
[  195.051263][T11262] bond29: option min_links: invalid value (18446744073709551612)
[  195.058179][T11262] bond29: option min_links: allowed values 0 - 2147483647
[  195.063233][T11262] bond29 (unregistering): Released all slaves
[  195.200543][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.263169][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.277476][T11279] tls_set_device_offload_rx: netdev not found
[  195.382317][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.385585][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.423902][T11293] bond29: entered promiscuous mode
[  195.425762][T11293] 8021q: adding VLAN 0 to HW filter on device bond29
[  195.429834][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.471603][T11296] bond22: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  195.476846][T11296] bond22 (unregistering): Released all slaves
[  195.508957][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.585100][T11302] team0 (unregistering): Port device ip6gre1 removed
[  195.616191][T11305] bridge_slave_1: left allmulticast mode
[  195.618063][T11305] bridge_slave_1: left promiscuous mode
[  195.619882][T11305] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.718542][T11309] pim6reg: left allmulticast mode
[  195.825140][T11319] can: request_module (can-proto-0) failed.
[  195.946930][T11328] bond30: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  195.952363][T11328] bond30 (unregistering): Released all slaves
[  195.979682][T11336] 
[  195.980415][T11336] ======================================================
[  195.982323][T11336] WARNING: possible circular locking dependency detected
[  195.984420][T11336] syzkaller #0 Not tainted
[  195.986100][T11336] ------------------------------------------------------
[  195.988520][T11336] syz.2.1713/11336 is trying to acquire lock:
[  195.990712][T11336] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  195.994476][T11336] 
[  195.994476][T11336] but task is already holding lock:
[  195.997049][T11336] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  196.000500][T11336] 
[  196.000500][T11336] which lock already depends on the new lock.
[  196.000500][T11336] 
[  196.004291][T11336] 
[  196.004291][T11336] the existing dependency chain (in reverse order) is:
[  196.007477][T11336] 
[  196.007477][T11336] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  196.010402][T11336]        down_write+0x96/0x200
[  196.012124][T11336]        kernfs_add_one+0x41/0x5c0
[  196.013961][T11336]        kernfs_create_dir_ns+0xde/0x130
[  196.015983][T11336]        internal_create_group+0x425/0x1180
[  196.018192][T11336]        cpuhp_invoke_callback+0x445/0x860
[  196.020338][T11336]        cpuhp_issue_call+0x430/0x7a0
[  196.022277][T11336]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  196.024203][T11336]        __cpuhp_setup_state+0x3f/0x60
[  196.025882][T11336]        do_one_initcall+0x250/0x870
[  196.027394][T11336]        do_initcall_level+0x104/0x190
[  196.029004][T11336]        do_initcalls+0x59/0xa0
[  196.030466][T11336]        kernel_init_freeable+0x2a6/0x3e0
[  196.032065][T11336]        kernel_init+0x1d/0x1d0
[  196.033512][T11336]        ret_from_fork+0x514/0xb70
[  196.034971][T11336]        ret_from_fork_asm+0x1a/0x30
[  196.036499][T11336] 
[  196.036499][T11336] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  196.038610][T11336] 
[  196.038610][T11336] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  196.040854][T11336]        cpus_read_lock+0x42/0x160
[  196.042336][T11336]        static_key_slow_inc+0x12/0x30
[  196.043938][T11336]        udp_tunnel_encap_enable+0x86/0xb0
[  196.045680][T11336]        udp_lib_setsockopt+0x2da/0x6b0
[  196.047219][T11336]        udpv6_setsockopt+0x67/0xb0
[  196.048758][T11336]        do_sock_setsockopt+0x17c/0x1b0
[  196.050326][T11336]        __x64_sys_setsockopt+0x13d/0x1b0
[  196.051903][T11336]        do_syscall_64+0x15f/0xf80
[  196.053294][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.055284][T11336] 
[  196.055284][T11336] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  196.057693][T11336]        lock_sock_nested+0x41/0x100
[  196.059230][T11336]        inet_shutdown+0x6a/0x390
[  196.060670][T11336]        nbd_mark_nsock_dead+0x2e9/0x560
[  196.062267][T11336]        sock_shutdown+0x15e/0x260
[  196.063646][T11336]        nbd_clear_sock+0x24/0x170
[  196.065233][T11336]        nbd_config_put+0x2dd/0x580
[  196.066769][T11336]        nbd_genl_connect+0x19d5/0x1cf0
[  196.068462][T11336]        genl_family_rcv_msg_doit+0x22a/0x330
[  196.070278][T11336]        genl_rcv_msg+0x61c/0x7a0
[  196.071854][T11336]        netlink_rcv_skb+0x232/0x4b0
[  196.073392][T11336]        genl_rcv+0x28/0x40
[  196.074685][T11336]        netlink_unicast+0x75c/0x8e0
[  196.076215][T11336]        netlink_sendmsg+0x813/0xb40
[  196.077771][T11336]        ____sys_sendmsg+0x972/0x9f0
[  196.079434][T11336]        ___sys_sendmsg+0x2a5/0x360
[  196.080925][T11336]        __x64_sys_sendmsg+0x1bd/0x2a0
[  196.082359][T11336]        do_syscall_64+0x15f/0xf80
[  196.083738][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.085625][T11336] 
[  196.085625][T11336] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  196.087843][T11336]        __mutex_lock+0x1a3/0x1550
[  196.089430][T11336]        nbd_queue_rq+0x37b/0x1100
[  196.091087][T11336]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  196.092959][T11336]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  196.095158][T11336]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  196.097247][T11336]        blk_mq_run_hw_queue+0x348/0x4f0
[  196.098987][T11336]        blk_mq_dispatch_list+0xd16/0xe10
[  196.100715][T11336]        blk_mq_flush_plug_list+0x48d/0x570
[  196.102460][T11336]        __blk_flush_plug+0x3ed/0x4d0
[  196.104000][T11336]        __submit_bio+0x28d/0x580
[  196.105410][T11336]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  196.107332][T11336]        block_read_full_folio+0x599/0x830
[  196.109466][T11336]        filemap_read_folio+0x137/0x3b0
[  196.111164][T11336]        do_read_cache_folio+0x358/0x590
[  196.112772][T11336]        read_part_sector+0xb6/0x2b0
[  196.114324][T11336]        adfspart_check_ICS+0xb1/0x960
[  196.115949][T11336]        bdev_disk_changed+0x817/0x1770
[  196.117618][T11336]        blkdev_get_whole+0x380/0x510
[  196.119181][T11336]        bdev_open+0x31e/0xd30
[  196.120797][T11336]        blkdev_open+0x470/0x610
[  196.122494][T11336]        do_dentry_open+0x785/0x14e0
[  196.124056][T11336]        vfs_open+0x3b/0x340
[  196.125439][T11336]        path_openat+0x2e08/0x3860
[  196.127005][T11336]        do_file_open+0x23e/0x4a0
[  196.128582][T11336]        do_sys_openat2+0x113/0x200
[  196.130209][T11336]        __x64_sys_openat+0x138/0x170
[  196.131882][T11336]        do_syscall_64+0x15f/0xf80
[  196.133343][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.135335][T11336] 
[  196.135335][T11336] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  196.137694][T11336]        __mutex_lock+0x1a3/0x1550
[  196.139218][T11336]        nbd_queue_rq+0xc6/0x1100
[  196.140796][T11336]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  196.142598][T11336]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  196.144719][T11336]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  196.146752][T11336]        blk_mq_run_hw_queue+0x348/0x4f0
[  196.148611][T11336]        blk_mq_dispatch_list+0xd16/0xe10
[  196.150456][T11336]        blk_mq_flush_plug_list+0x48d/0x570
[  196.152253][T11336]        __blk_flush_plug+0x3ed/0x4d0
[  196.153906][T11336]        __submit_bio+0x28d/0x580
[  196.155404][T11336]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  196.157356][T11336]        block_read_full_folio+0x599/0x830
[  196.159102][T11336]        filemap_read_folio+0x137/0x3b0
[  196.160819][T11336]        do_read_cache_folio+0x358/0x590
[  196.162496][T11336]        read_part_sector+0xb6/0x2b0
[  196.164075][T11336]        adfspart_check_ICS+0xb1/0x960
[  196.165732][T11336]        bdev_disk_changed+0x817/0x1770
[  196.167319][T11336]        blkdev_get_whole+0x380/0x510
[  196.168976][T11336]        bdev_open+0x31e/0xd30
[  196.170514][T11336]        blkdev_open+0x470/0x610
[  196.172049][T11336]        do_dentry_open+0x785/0x14e0
[  196.173600][T11336]        vfs_open+0x3b/0x340
[  196.175051][T11336]        path_openat+0x2e08/0x3860
[  196.176680][T11336]        do_file_open+0x23e/0x4a0
[  196.178139][T11336]        do_sys_openat2+0x113/0x200
[  196.179602][T11336]        __x64_sys_openat+0x138/0x170
[  196.181123][T11336]        do_syscall_64+0x15f/0xf80
[  196.182577][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.184394][T11336] 
[  196.184394][T11336] -> #4 (set->srcu){.+.+}-{0:0}:
[  196.186411][T11336]        __synchronize_srcu+0xca/0x300
[  196.188064][T11336]        elevator_switch+0x1e8/0x7a0
[  196.190010][T11336]        elevator_change+0x2cc/0x450
[  196.191968][T11336]        elevator_set_default+0x36c/0x430
[  196.194070][T11336]        blk_register_queue+0x3e9/0x4e0
[  196.195972][T11336]        __add_disk+0x677/0xd50
[  196.197425][T11336]        add_disk_fwnode+0xfb/0x480
[  196.198922][T11336]        nbd_dev_add+0x72c/0xb50
[  196.200329][T11336]        nbd_init+0x168/0x1f0
[  196.201683][T11336]        do_one_initcall+0x250/0x870
[  196.203205][T11336]        do_initcall_level+0x104/0x190
[  196.204769][T11336]        do_initcalls+0x59/0xa0
[  196.206183][T11336]        kernel_init_freeable+0x2a6/0x3e0
[  196.207836][T11336]        kernel_init+0x1d/0x1d0
[  196.209387][T11336]        ret_from_fork+0x514/0xb70
[  196.211187][T11336]        ret_from_fork_asm+0x1a/0x30
[  196.212717][T11336] 
[  196.212717][T11336] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  196.214988][T11336]        __mutex_lock+0x1a3/0x1550
[  196.216449][T11336]        elevator_change+0x1b3/0x450
[  196.217996][T11336]        elevator_set_none+0xb5/0x140
[  196.219518][T11336]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  196.221311][T11336]        nbd_start_device+0x17f/0xb10
[  196.222802][T11336]        nbd_genl_connect+0x165b/0x1cf0
[  196.224368][T11336]        genl_family_rcv_msg_doit+0x22a/0x330
[  196.226096][T11336]        genl_rcv_msg+0x61c/0x7a0
[  196.227556][T11336]        netlink_rcv_skb+0x232/0x4b0
[  196.229100][T11336]        genl_rcv+0x28/0x40
[  196.230324][T11336]        netlink_unicast+0x75c/0x8e0
[  196.231759][T11336]        netlink_sendmsg+0x813/0xb40
[  196.233263][T11336]        ____sys_sendmsg+0x972/0x9f0
[  196.234810][T11336]        ___sys_sendmsg+0x2a5/0x360
[  196.236273][T11336]        __x64_sys_sendmsg+0x1bd/0x2a0
[  196.237809][T11336]        do_syscall_64+0x15f/0xf80
[  196.239315][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.241155][T11336] 
[  196.241155][T11336] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  196.243533][T11336]        blk_alloc_queue+0x546/0x680
[  196.245041][T11336]        __blk_mq_alloc_disk+0x197/0x390
[  196.246593][T11336]        nbd_dev_add+0x499/0xb50
[  196.248047][T11336]        nbd_init+0x168/0x1f0
[  196.249408][T11336]        do_one_initcall+0x250/0x870
[  196.250939][T11336]        do_initcall_level+0x104/0x190
[  196.252481][T11336]        do_initcalls+0x59/0xa0
[  196.253816][T11336]        kernel_init_freeable+0x2a6/0x3e0
[  196.255464][T11336]        kernel_init+0x1d/0x1d0
[  196.256884][T11336]        ret_from_fork+0x514/0xb70
[  196.258447][T11336]        ret_from_fork_asm+0x1a/0x30
[  196.259987][T11336] 
[  196.259987][T11336] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  196.262055][T11336]        fs_reclaim_acquire+0x71/0x100
[  196.263715][T11336]        kmem_cache_alloc_noprof+0x40/0x650
[  196.265447][T11336]        __kernfs_iattrs+0xdf/0x320
[  196.267017][T11336]        kernfs_iop_setattr+0xea/0x3f0
[  196.268929][T11336]        notify_change+0xc1a/0xf40
[  196.270424][T11336]        do_truncate+0x1c2/0x250
[  196.271888][T11336]        path_openat+0x2f89/0x3860
[  196.273544][T11336]        do_file_open+0x23e/0x4a0
[  196.275039][T11336]        do_sys_openat2+0x113/0x200
[  196.276614][T11336]        __x64_sys_openat+0x138/0x170
[  196.278254][T11336]        do_syscall_64+0x15f/0xf80
[  196.279711][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.281564][T11336] 
[  196.281564][T11336] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  196.283997][T11336]        __lock_acquire+0x15a5/0x2cf0
[  196.285602][T11336]        lock_acquire+0x106/0x350
[  196.287073][T11336]        down_write+0x96/0x200
[  196.288554][T11336]        kernfs_link_sibling+0x4ed/0x5c0
[  196.290184][T11336]        kernfs_add_one+0x1ca/0x5c0
[  196.291726][T11336]        __kernfs_create_file+0x22b/0x2e0
[  196.293350][T11336]        sysfs_add_file_mode_ns+0x238/0x300
[  196.295075][T11336]        sysfs_create_file_ns+0x12b/0x1b0
[  196.296753][T11336]        idletimer_tg_checkentry+0x41b/0xa70
[  196.298875][T11336]        xt_check_target+0x61a/0xca0
[  196.300746][T11336]        translate_table+0x184f/0x20b0
[  196.302480][T11336]        do_ip6t_set_ctl+0x9fe/0xe10
[  196.304062][T11336]        nf_setsockopt+0x26f/0x290
[  196.305632][T11336]        do_sock_setsockopt+0x17c/0x1b0
[  196.307221][T11336]        __x64_sys_setsockopt+0x13d/0x1b0
[  196.308778][T11336]        do_syscall_64+0x15f/0xf80
[  196.310288][T11336]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.312201][T11336] 
[  196.312201][T11336] other info that might help us debug this:
[  196.312201][T11336] 
[  196.315161][T11336] Chain exists of:
[  196.315161][T11336]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  196.315161][T11336] 
[  196.319355][T11336]  Possible unsafe locking scenario:
[  196.319355][T11336] 
[  196.321505][T11336]        CPU0                    CPU1
[  196.323044][T11336]        ----                    ----
[  196.324652][T11336]   lock(&root->kernfs_rwsem);
[  196.326119][T11336]                                lock(cpuhp_state_mutex);
[  196.328223][T11336]                                lock(&root->kernfs_rwsem);
[  196.330377][T11336]   lock(&root->kernfs_iattr_rwsem);
[  196.332093][T11336] 
[  196.332093][T11336]  *** DEADLOCK ***
[  196.332093][T11336] 
[  196.334865][T11336] 2 locks held by syz.2.1713/11336:
[  196.336686][T11336]  #0: ffffffff8fe7ab20 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x70/0xa70
[  196.340314][T11336]  #1: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  196.343739][T11336] 
[  196.343739][T11336] stack backtrace:
[  196.345945][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.2.1713 Not tainted syzkaller #0 PREEMPT(full) 
[  196.345962][T11336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.345971][T11336] Call Trace:
[  196.345980][T11336]  <TASK>
[  196.345987][T11336]  dump_stack_lvl+0xe8/0x150
[  196.346005][T11336]  print_circular_bug+0x2e1/0x300
[  196.346026][T11336]  check_noncircular+0x12e/0x150
[  196.346045][T11336]  __lock_acquire+0x15a5/0x2cf0
[  196.346060][T11336]  ? __lock_acquire+0x6b5/0x2cf0
[  196.346078][T11336]  ? kernfs_link_sibling+0x4ed/0x5c0
[  196.346095][T11336]  lock_acquire+0x106/0x350
[  196.346108][T11336]  ? kernfs_link_sibling+0x4ed/0x5c0
[  196.346130][T11336]  down_write+0x96/0x200
[  196.346143][T11336]  ? kernfs_link_sibling+0x4ed/0x5c0
[  196.346160][T11336]  ? __pfx_down_write+0x10/0x10
[  196.346172][T11336]  ? kernfs_root+0x1c/0x230
[  196.346187][T11336]  ? kernfs_root+0x1c/0x230
[  196.346201][T11336]  ? kernfs_root+0x1c/0x230
[  196.346216][T11336]  ? kernfs_root+0x1ea/0x230
[  196.346232][T11336]  kernfs_link_sibling+0x4ed/0x5c0
[  196.346253][T11336]  kernfs_add_one+0x1ca/0x5c0
[  196.346272][T11336]  __kernfs_create_file+0x22b/0x2e0
[  196.346286][T11336]  sysfs_add_file_mode_ns+0x238/0x300
[  196.346303][T11336]  sysfs_create_file_ns+0x12b/0x1b0
[  196.346318][T11336]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  196.346332][T11336]  ? __asan_memcpy+0x40/0x70
[  196.346350][T11336]  idletimer_tg_checkentry+0x41b/0xa70
[  196.346369][T11336]  xt_check_target+0x61a/0xca0
[  196.346381][T11336]  ? xt_find_target+0x83/0x260
[  196.346402][T11336]  ? __pfx_xt_check_target+0x10/0x10
[  196.346419][T11336]  ? xt_find_target+0x208/0x260
[  196.346439][T11336]  translate_table+0x184f/0x20b0
[  196.346463][T11336]  ? __pfx_translate_table+0x10/0x10
[  196.346477][T11336]  ? __might_fault+0xaf/0x130
[  196.346494][T11336]  ? __might_fault+0xaf/0x130
[  196.346516][T11336]  ? _copy_from_user+0x94/0xb0
[  196.346537][T11336]  do_ip6t_set_ctl+0x9fe/0xe10
[  196.346553][T11336]  ? rcu_is_watching+0x15/0xb0
[  196.346569][T11336]  ? trace_contention_end+0x3d/0x140
[  196.346587][T11336]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  196.346608][T11336]  ? __pfx___mutex_lock+0x10/0x10
[  196.346631][T11336]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  196.346652][T11336]  ? __pfx_aa_sk_perm+0x10/0x10
[  196.346670][T11336]  nf_setsockopt+0x26f/0x290
[  196.346686][T11336]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  196.346700][T11336]  do_sock_setsockopt+0x17c/0x1b0
[  196.346718][T11336]  __x64_sys_setsockopt+0x13d/0x1b0
[  196.346736][T11336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.346751][T11336]  do_syscall_64+0x15f/0xf80
[  196.346771][T11336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.346786][T11336] RIP: 0033:0x7efcbf99cdd9
[  196.346799][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.346811][T11336] RSP: 002b:00007efcc07ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  196.346825][T11336] RAX: ffffffffffffffda RBX: 00007efcbfc15fa0 RCX: 00007efcbf99cdd9
[  196.346834][T11336] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  196.346871][T11336] RBP: 00007efcbfa32d69 R08: 0000000000000540 R09: 0000000000000000
[  196.346880][T11336] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.346887][T11336] R13: 00007efcbfc16038 R14: 00007efcbfc15fa0 R15: 00007ffcd3f2a288
[  196.346903][T11336]  </TASK>
[  196.347793][ T5763] net_ratelimit: 33 callbacks suppressed
[  196.347804][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  196.557994][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  196.627785][ T5612] Bluetooth: hci2: command 0x0401 tx timeout
[  196.668560][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  196.780536][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  196.888830][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  197.007837][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  197.119361][ T5763] bond3: (slave bridge1): failed to get link speed/duplex
[  197.227846][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  197.337820][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  197.447903][   T13] bond3: (slave bridge1): failed to get link speed/duplex
[  201.387925][ T5445] net_ratelimit: 34 callbacks suppressed
[  201.387956][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  201.498143][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  201.607872][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  201.717822][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  201.827901][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  201.947774][ T5445] bond3: (slave bridge1): failed to get link speed/duplex
[  202.057897][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  202.167819][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  202.277902][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
[  202.387795][ T5668] bond3: (slave bridge1): failed to get link speed/duplex
