last executing test programs:

18.842499927s ago: executing program 1 (id=3909):
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040300, &(0x7f0000003700)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000001280))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20)

17.991157386s ago: executing program 1 (id=3921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0)=0x4, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r4, 0x1)
unshare(0x62040200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x9, 0x0, 0x0, @str='rcu_utilization\x00'}]}, 0x4c}}, 0x40)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c)
r7 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0)

17.802932552s ago: executing program 2 (id=3924):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)
getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f00000003c0)=""/67, &(0x7f0000000440)=0x43) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000042000000070000000800000000000000", @ANYBLOB="00000000000000000000000000000000000000005a55a9a14924f1b41ef6a4ba2b4a55dcc11cf0d92e73a329f4e565f3f076d238ea566f78646a1af2ff0f369305ecbe517d458ca0e91b32cd598b7ae79d030b2375dd24d6b15dfbdb3a7cdd89145647c952b11c993d5a"], 0x50)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) (async)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async)
bind$can_raw(r3, &(0x7f0000000080), 0x10) (async)
setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000140)="760732c8f87f96c335870448a8d002e85cdd3985c9683132b15f6cec3319d332ad47e0340b01448fa5", 0x29) (async)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r6 = accept4(r5, 0x0, 0x0, 0x80800) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', <r8=>0x0, 0x761, 0x40, 0x4, 0x3, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x64, 0x0, 0x73, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x1, [{@rand_addr=0x64010102, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x2, [{@multicast1, 0x714}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0xff}, {@rand_addr=0x64010100, 0xb}]}, @timestamp_prespec={0x44, 0x14, 0xb3, 0x3, 0x3, [{@local, 0xd4cc}, {@empty, 0x6}]}, @ssrr={0x89, 0x13, 0x27, [@loopback, @remote, @multicast2, @private=0xa010100]}, @ssrr={0x89, 0x1f, 0xfc, [@rand_addr=0x64010102, @multicast1, @empty, @loopback, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x493}, {@private=0xa010102, 0x5}, {@broadcast, 0x4}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x0)

17.732842381s ago: executing program 2 (id=3925):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x5, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x85, &(0x7f0000000100)=""/133, 0x40f00, 0x41}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1, r4, 0x0, r2}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffff38, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYBLOB="0000569000000000420012800c0001"], 0x68}}, 0x1)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000880)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x4, 0x4, 0xfffff01c}]}, 0x10)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

17.561250947s ago: executing program 2 (id=3926):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111d0000000000006000040000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r1, 0x8971, &(0x7f00000002c0)={'veth1_to_team\x00', @ifru_settings={0xfe, 0x40, @fr_pvc_info=&(0x7f0000000240)={0x4, 'veth0\x00'}}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000400c80bdea90c78d8eb0000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x0, 0x3, 0x3}]}}}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "6263bb"}]}, 0x6d}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000000009050000000000007f0000000000000000048008de00c00000b439c1c59f4f14c67a3100000024000200140010ce80a10180080001000000000008000200e00000020c0002800500010001000000d23db11739aacd2018b97e7a9f1d295eb426dd1505e20e825194ed328107a801dc6cdfa76d66185ced51f93bee86248f5aed68a17650aae8cd694a63936874d9fc7560d6c4ea0153e2f898b2e9b95e514a82e5d21384f5b67b00"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$netlink(r5, &(0x7f0000000300), &(0x7f0000000340)=0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
r6 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xa, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4], [0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8c801}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="640200008618ae9e9a84f6dddd2922af124aeada80623c6fe7f20bf6bd4ae718716bebc911a5159df821565deb9c0df6f3ece2fbd56014929f4764b75b8ff656c98b32e35e826997f482d7f3212bd3353403a56bf9f45c72f022e200419778c31aad710d63710a0cb294dab3c28f588da05b3178bdd67a2a87aa8de10426de245f663737ae2edb91fdf64a508156baa3025cddbc598115ec8b88393b1feef46c9e53b9a0a99ccd4fc104358e21afbfa5092e0133af3e6ad821705dfac8e4a60aca28504ecc2d2ed8c70d339c60c500c587", @ANYRES16=r12, @ANYBLOB="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"], 0x264}}, 0x20000800)

17.123330915s ago: executing program 1 (id=3927):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x42}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000"], 0xbc}}, 0x0)
r3 = socket(0x10, 0x80003, 0x0)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
recvmsg$unix(r3, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket(0x10, 0x803, 0x0)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0x10000, 0x6, 0xd9b, 0x5})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

16.455590003s ago: executing program 2 (id=3929):
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xce, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x40}}, 0x0)

15.672612495s ago: executing program 0 (id=3930):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25022000cb", @ANYRES32=r2, @ANYBLOB="080004006401010108000a0004000000080001007f000001070002a4a47c4fff0800090031f7ffff0700090003010000"], 0x48}}, 0x0)

15.672170362s ago: executing program 2 (id=3931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000007110800000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x80)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c30300fea000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=ANY=[@ANYBLOB="20000000170a0103000000000000000000000006090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0xffffff0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0)

15.613052317s ago: executing program 1 (id=3932):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2a)
r4 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10)
r5 = socket$kcm(0x2, 0x59dee81068a3bf60, 0x73)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xd}, {0xc}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xdf0, '\x00', r7, r9, 0x5, 0x2, 0x1}, 0x50)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000000bbbbbbbbbbbbbbbbbbbb86dd6d002000003011ff00000000000000000000000000000000ff02000000000000000008e6099b6fe04c38efd8fa5c7df24f0000000000014f194e2000309078012c026fccbafc7a29fe6d13033fea840c00000000000000b8"], 0x6a)

15.612519834s ago: executing program 0 (id=3933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r7}, 0x0, 0x0}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000980)=[r7, r7, r7, r7, r7, 0xffffffffffffffff, r7, r7, 0x1]}, 0x94)
close(r2)

15.473202075s ago: executing program 2 (id=3934):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x4000)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a3c000000090a0104000000000a40ffffffff0900020073797a32000000000900010073797a30000000000800054000120102140000001000010000000000000000000000000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@empty, @remote, r3}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@ifindex=r3, 0xe, 0x1, 0x7, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000014c0)=[0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r11, 0x7ca8e000)
r12 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r12, 0x107, 0x12, &(0x7f0000000300), 0x4)
sendto$packet(r6, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b", 0xe, 0x40, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x8, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x2, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xc, 0xfff5}}}, 0x24}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000001440)=0x5, 0x4)
unshare(0x62040200)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

15.471574078s ago: executing program 0 (id=3935):
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf2502f7ffff040001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$rxrpc(0x21, 0x2, 0xa) (async)
socket$rxrpc(0x21, 0x2, 0xa)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x17c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xfb}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x38}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flower={{0xb}, {0xf4, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xe}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "260ba1301e2e7d1fe0a835380c8dc9cd"}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x2}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x280}, @TCA_FLOWER_KEY_ENC_OPTS={0x98, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4b9c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffffe}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x17c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

15.422356528s ago: executing program 0 (id=3936):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]})
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x43, &(0x7f0000000340)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404, 0x0, 0x400, 0x0, 0xa0, 0x40, 0x6}, {0x0, 0xffffffff, 0x0, 0xfdfd, 0x0, 0x2e, 0xffff, 0x6}, {0x0, 0x0, 0x7cae, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x11}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x3, 0x1, 0x0, 0x0, 0x93}}, 0xe8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

15.421957589s ago: executing program 1 (id=3937):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b150008000000000000007fffff", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0)

15.341991198s ago: executing program 0 (id=3938):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f9800"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
listen(r1, 0xfffffffc) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f9800"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) (async)

8.232463189s ago: executing program 0 (id=3939):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x6, &(0x7f0000000240)=[{0x2, 0x71, 0xe, 0x8}, {0x6, 0x5, 0xc, 0xf}, {0x7f, 0x2, 0x2, 0xf}, {0x5, 0x6, 0x5, 0x2}, {0x0, 0x9, 0x8, 0xe381}, {0x6, 0x67, 0xee, 0x7}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x62040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r5}, 0x18)
unshare(0x64000600)
socket$inet6(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})
syz_emit_ethernet(0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa67e827851e3386dd60fc7771003c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f002008290780000000002080d9294f8a639e2a611b3ea7a1e05ff40c0011e10fa401eba2dd15e056ad187832e550100"], 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000180)=0x1, 0x4)

8.232049295s ago: executing program 1 (id=3940):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="b9a423ab51c09cd11196e8973578ec04458e694f993cfeb38233599006d01edc8fcc91c925b69c92c039e0090541576d6bcd66fc00a24c8505c79b97aedc1503d95ed6e0", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
r11 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x1, {0x0, 0x0, 0x0, r12, {}, {0x4, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0xa4}}, 0x4000)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff2, 0xffff}, {0xffe0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x47}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

202.806385ms ago: executing program 32 (id=3939):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x6, &(0x7f0000000240)=[{0x2, 0x71, 0xe, 0x8}, {0x6, 0x5, 0xc, 0xf}, {0x7f, 0x2, 0x2, 0xf}, {0x5, 0x6, 0x5, 0x2}, {0x0, 0x9, 0x8, 0xe381}, {0x6, 0x67, 0xee, 0x7}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x62040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r5}, 0x18)
unshare(0x64000600)
socket$inet6(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})
syz_emit_ethernet(0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa67e827851e3386dd60fc7771003c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f002008290780000000002080d9294f8a639e2a611b3ea7a1e05ff40c0011e10fa401eba2dd15e056ad187832e550100"], 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000180)=0x1, 0x4)

162.383589ms ago: executing program 33 (id=3940):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="b9a423ab51c09cd11196e8973578ec04458e694f993cfeb38233599006d01edc8fcc91c925b69c92c039e0090541576d6bcd66fc00a24c8505c79b97aedc1503d95ed6e0", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
r11 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x1, {0x0, 0x0, 0x0, r12, {}, {0x4, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0xa4}}, 0x4000)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff2, 0xffff}, {0xffe0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x47}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 34 (id=3934):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x4000)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a3c000000090a0104000000000a40ffffffff0900020073797a32000000000900010073797a30000000000800054000120102140000001000010000000000000000000000000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@empty, @remote, r3}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@ifindex=r3, 0xe, 0x1, 0x7, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000014c0)=[0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r11, 0x7ca8e000)
r12 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r12, 0x107, 0x12, &(0x7f0000000300), 0x4)
sendto$packet(r6, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b", 0xe, 0x40, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x8, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x2, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xc, 0xfff5}}}, 0x24}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000001440)=0x5, 0x4)
unshare(0x62040200)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):


[  163.675015][T13214] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  163.675022][T13214] R13: 0000000000000000 R14: 00007f9008db6080 R15: 00007ffe8a66f758
[  163.675044][T13214]  </TASK>
[  163.675049][T13214] Mem-Info:
[  163.808080][T13214] active_anon:9321 inactive_anon:0 isolated_anon:0
[  163.808080][T13214]  active_file:1151 inactive_file:38251 isolated_file:0
[  163.808080][T13214]  unevictable:3553 dirty:190 writeback:0
[  163.808080][T13214]  slab_reclaimable:10820 slab_unreclaimable:85468
[  163.808080][T13214]  mapped:18602 shmem:5391 pagetables:1264
[  163.808080][T13214]  sec_pagetables:0 bounce:0
[  163.808080][T13214]  kernel_misc_reclaimable:0
[  163.808080][T13214]  free:251584 free_pcp:15340 free_cma:0
[  163.833964][T13214] Node 0 active_anon:16060kB inactive_anon:0kB active_file:3248kB inactive_file:70604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48980kB dirty:500kB writeback:0kB shmem:7872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8624kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.868410][T13214] Node 1 active_anon:21224kB inactive_anon:0kB active_file:1356kB inactive_file:82400kB unevictable:14280kB isolated(anon):0kB isolated(file):0kB mapped:25428kB dirty:260kB writeback:0kB shmem:13692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8636kB pagetables:2684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  163.894217][T13214] Node 0 DMA free:12568kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:744kB local_pcp:384kB free_cma:0kB
[  163.918378][T13214] lowmem_reserve[]: 0 812 812 812 812
[  163.920734][ T5829] Bluetooth: hci2: link tx timeout
[  163.922874][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.928368][T13214] Node 0 DMA32 free:194772kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15992kB inactive_anon:0kB active_file:3248kB inactive_file:70604kB unevictable:3536kB writepending:500kB present:1556484kB managed:831876kB mlocked:0kB bounce:0kB free_pcp:33660kB local_pcp:15284kB free_cma:0kB
[  163.950110][T13214] lowmem_reserve[]: 0 0 0 0 0
[  163.952148][T13214] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  163.973847][T13214] lowmem_reserve[]: 0 0 854 854 854
[  163.975640][T13214] Node 1 Normal free:332560kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22448kB inactive_anon:0kB active_file:1356kB inactive_file:82400kB unevictable:5644kB writepending:260kB present:1048576kB managed:875016kB mlocked:2108kB bounce:0kB free_pcp:39088kB local_pcp:22360kB free_cma:0kB
[  163.986217][ T5829] Bluetooth: hci2: link tx timeout
[  163.987875][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.990700][T13214] lowmem_reserve[]: 0 0 0 0 0
[  163.992351][T13214] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 12568kB
[  163.997240][T13214] Node 0 DMA32: 590*4kB (UME) 776*8kB (UME) 433*16kB (UME) 66*32kB (UME) 22*64kB (UM) 74*128kB (UME) 127*256kB (UM) 87*512kB (UM) 83*1024kB (UM) 0*2048kB 3*4096kB (U) = 202824kB
[  164.003732][T13214] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  164.008860][T13214] Node 1 Normal: 1*4kB (E) 490*8kB (UME) 1044*16kB (UME) 45*32kB (U) 307*64kB (U) 222*128kB (UM) 185*256kB (UE) 154*512kB (U) 113*1024kB (UE) 4*2048kB (UME) 3*4096kB (M) = 332532kB
[  164.019047][T13214] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.021958][T13214] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.024911][T13214] 42651 total pagecache pages
[  164.026464][T13214] 0 pages in swap cache
[  164.027898][T13214] Free swap  = 124996kB
[  164.029530][T13214] Total swap = 124996kB
[  164.030938][T13214] 786301 pages RAM
[  164.032210][T13214] 0 pages HighMem/MovableOnly
[  164.033791][T13214] 241084 pages reserved
[  164.035207][T13214] 0 pages cma reserved
[  164.110842][T13239] xt_hashlimit: size too large, truncated to 1048576
[  164.173546][T13243] xt_bpf: check failed: parse error
[  164.175545][T13238] xt_bpf: check failed: parse error
[  164.280425][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'.
[  164.296742][T13252] vlan0: entered promiscuous mode
[  164.309532][T13252] bridge0: entered promiscuous mode
[  164.339677][ T5829] Bluetooth: hci2: link tx timeout
[  164.341805][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.450979][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'.
[  164.500154][T13274] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  164.553824][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2118'.
[  164.597568][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'.
[  164.619271][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  164.659344][T13277] validate_nla: 4 callbacks suppressed
[  164.659354][T13277] netlink: 'syz.1.2117': attribute type 12 has an invalid length.
[  164.718429][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  164.802502][T13301] bridge0: port 1(31XD) entered blocking state
[  164.804976][T13301] bridge0: port 1(31XD) entered disabled state
[  164.807204][T13301] 1XD: entered allmulticast mode
[  164.814878][T13306] netlink: 'syz.2.2125': attribute type 5 has an invalid length.
[  164.818495][T13301] 1XD: left allmulticast mode
[  164.937197][T13315] lo speed is unknown, defaulting to 1000
[  164.962080][T13319] 8021q: adding VLAN 0 to HW filter on device bond57
[  165.179670][T13337] netlink: 'syz.1.2133': attribute type 39 has an invalid length.
[  165.231170][T13342] netlink: 'syz.1.2135': attribute type 5 has an invalid length.
[  165.234993][T13342] netlink: 'syz.1.2135': attribute type 5 has an invalid length.
[  165.259507][T13345] netlink: 'syz.0.2136': attribute type 5 has an invalid length.
[  165.303397][T13347] bond53: (slave bond54): Releasing backup interface
[  165.307375][T13347] bond56: left promiscuous mode
[  165.319842][T13347] team0: Port device bond56 removed
[  165.339066][T13353] netlink: 'syz.0.2139': attribute type 32 has an invalid length.
[  165.342899][T13353] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20)
[  165.427420][T13363] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  165.601037][T13373] 8021q: adding VLAN 0 to HW filter on device bond58
[  165.607732][T13373] bond58: entered promiscuous mode
[  165.611543][T13373] team0: Port device bond58 added
[  165.657639][T13376] lo speed is unknown, defaulting to 1000
[  165.733435][T13380] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  165.800481][T13384] netlink: 'syz.2.2150': attribute type 5 has an invalid length.
[  165.850140][T13386] netlink: 'syz.1.2151': attribute type 10 has an invalid length.
[  166.400510][T13403] netlink: 'syz.2.2157': attribute type 10 has an invalid length.
[  166.611674][T13412] lo speed is unknown, defaulting to 1000
[  166.677044][T13426] 8021q: adding VLAN 0 to HW filter on device bond59
[  166.796130][T13438] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  166.914699][T13449] dvmrp0: left allmulticast mode
[  167.051980][T13456] 8021q: adding VLAN 0 to HW filter on device bond60
[  167.066266][T13456] macvlan0: entered promiscuous mode
[  167.068405][T13456] macvlan0: entered allmulticast mode
[  167.071182][T13456] bond60: entered promiscuous mode
[  167.086251][T13456] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  167.093753][T13456] bond60: left promiscuous mode
[  167.257015][T13470] : entered promiscuous mode
[  167.324770][T13473] 8021q: adding VLAN 0 to HW filter on device bond47
[  167.496941][T13485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.581551][T13490] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  167.921270][T13513] __nla_validate_parse: 31 callbacks suppressed
[  167.921279][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2187'.
[  168.160202][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  168.163653][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'.
[  168.248418][   T61] block nbd0: Possible stuck request ffff888022818000: control (read@0,1024B). Runtime 90 seconds
[  168.252345][   T61] block nbd0: Possible stuck request ffff888022818200: control (read@1024,1024B). Runtime 90 seconds
[  168.256290][   T61] block nbd0: Possible stuck request ffff888022818400: control (read@2048,1024B). Runtime 90 seconds
[  168.260156][   T61] block nbd0: Possible stuck request ffff888022818600: control (read@3072,1024B). Runtime 90 seconds
[  168.826419][T13530] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  168.856124][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'.
[  168.928544][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'.
[  169.019558][T13551] bond74 (unregistering): Released all slaves
[  169.189748][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'.
[  169.287866][T13587] lo speed is unknown, defaulting to 1000
[  169.376683][T13598] 8021q: adding VLAN 0 to HW filter on device bond49
[  169.379903][T13598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2214'.
[  169.383821][T13598] bond44: (slave bridge8): Releasing backup interface
[  169.423216][T13595] bond74 (unregistering): Released all slaves
[  169.432395][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'.
[  169.466976][T13603] 8021q: adding VLAN 0 to HW filter on device bond50
[  169.661291][T13618] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2219'.
[  169.665209][T13618] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2219'.
[  169.728546][T13624] xt_hashlimit: size too large, truncated to 1048576
[  169.792305][T13626] xt_bpf: check failed: parse error
[  169.805173][T13628] validate_nla: 7 callbacks suppressed
[  169.805184][T13628] netlink: 'syz.2.2224': attribute type 10 has an invalid length.
[  169.887925][T13635] !: renamed from dummy0
[  170.034971][T13653] bond51 (unregistering): Released all slaves
[  170.045462][T13658] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  170.087122][T13658] 8021q: adding VLAN 0 to HW filter on device bond61
[  170.194807][T13659] lo speed is unknown, defaulting to 1000
[  170.317385][T13681] sctp: [Deprecated]: syz.0.2235 (pid 13681) Use of int in max_burst socket option.
[  170.317385][T13681] Use struct sctp_assoc_value instead
[  170.353129][T13680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.390848][T13678] syzkaller0: entered promiscuous mode
[  170.393111][T13678] syzkaller0: entered allmulticast mode
[  170.494605][T13692] pim6reg1: entered allmulticast mode
[  171.059543][T13740] batadv_slave_0: entered promiscuous mode
[  171.197692][T13752] 8021q: adding VLAN 0 to HW filter on device bond74
[  171.236908][T13757] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  171.242492][T13757] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  171.300574][T13766] netlink: 'syz.0.2256': attribute type 3 has an invalid length.
[  171.470814][ T7456] tipc: Node number set to 2214038048
[  171.813444][T13792] bond51 (unregistering): Released all slaves
[  171.952667][T13797] netlink: 'syz.0.2263': attribute type 2 has an invalid length.
[  172.231861][T13811] 8021q: adding VLAN 0 to HW filter on device bond75
[  172.279320][T13821] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  172.283100][T13821] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  172.416224][T13834] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  172.477516][T13838] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001
[  172.639873][T13853] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  172.643105][T13853] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  172.726993][T13864] netlink: 'syz.0.2285': attribute type 5 has an invalid length.
[  172.755883][T13866] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.769588][T13866] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  172.777777][T13866] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  172.780891][T13866] tipc: Resetting bearer <eth:syzkaller0>
[  172.933869][T13882] 8021q: adding VLAN 0 to HW filter on device bond62
[  172.937354][T13882] bond62: entered promiscuous mode
[  172.942079][T13882] team0: Port device bond62 added
[  172.977139][T13892] netlink: 'syz.0.2293': attribute type 11 has an invalid length.
[  173.013680][T13892] 8021q: adding VLAN 0 to HW filter on device bond51
[  173.016273][T13892] bridge0: port 1(bond51) entered blocking state
[  173.018595][T13892] bridge0: port 1(bond51) entered disabled state
[  173.020845][T13892] bond51: entered allmulticast mode
[  173.024638][T13892] bond51: entered promiscuous mode
[  173.028761][T13893] __nla_validate_parse: 27 callbacks suppressed
[  173.028775][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'.
[  173.074434][T13899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2295'.
[  173.079917][T13899] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  173.091633][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2295'.
[  173.100158][T13899] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2295'.
[  173.104041][T13899] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2295'.
[  173.114204][T13900] netlink: 'syz.2.2291': attribute type 1 has an invalid length.
[  173.151871][T13900] bond76: (slave bridge17): making interface the new active one
[  173.154670][T13900] bond76: (slave bridge17): Enslaving as an active interface with an up link
[  173.165469][T13905] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.173326][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'.
[  173.186486][T13905] tipc: Resetting bearer <eth:syzkaller0>
[  173.254308][T13911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.417037][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.424565][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.473447][T13935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2307'.
[  173.485969][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  173.496498][T13936] tipc: Resetting bearer <eth:syzkaller0>
[  173.504896][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  173.649347][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'.
[  173.785628][T13954] xfrm1: entered allmulticast mode
[  173.880655][T13959] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.892352][T13959] netlink: 'syz.2.2313': attribute type 18 has an invalid length.
[  173.980426][T13969] syzkaller1: entered promiscuous mode
[  173.982364][T13969] syzkaller1: entered allmulticast mode
[  174.160032][T13988] tc_dump_action: action bad kind
[  174.184951][T13988] lo speed is unknown, defaulting to 1000
[  174.256255][T13996] SET target dimension over the limit!
[  174.272263][T13996] 8021q: adding VLAN 0 to HW filter on device bond77
[  174.391692][T14012] tipc: Resetting bearer <eth:syzkaller0>
[  174.723649][T14043] bond78 (unregistering): Released all slaves
[  174.918579][T14066] SET target dimension over the limit!
[  175.047666][T14082] veth7: entered promiscuous mode
[  175.049911][T14082] bridge18: port 1(veth7) entered blocking state
[  175.052189][T14082] bridge18: port 1(veth7) entered disabled state
[  175.054391][T14082] veth7: entered allmulticast mode
[  175.113138][T14090] netlink: 'syz.0.2349': attribute type 1 has an invalid length.
[  175.115854][T14090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.119452][T14091] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  175.130074][T14091] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  175.176902][T14097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.200690][T14097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.225129][T14097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.306570][T14103] netlink: 'syz.2.2352': attribute type 4 has an invalid length.
[  176.003807][T14139] SET target dimension over the limit!
[  176.801839][T14148] netlink: 'syz.0.2360': attribute type 4 has an invalid length.
[  177.389854][T14180] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  177.398263][T14180] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  177.716884][T14197] tipc: Resetting bearer <eth:syzkaller0>
[  177.930614][T14208] 8021q: adding VLAN 0 to HW filter on device bond63
[  177.934242][T14208] bond63: entered promiscuous mode
[  177.936714][T14208] team0: Port device bond63 added
[  178.034372][T14216] bridge0: port 1(vlan0) entered blocking state
[  178.037198][T14216] bridge0: port 1(vlan0) entered disabled state
[  178.040923][T14216] vlan0: entered allmulticast mode
[  178.043227][T14216] bond0: entered allmulticast mode
[  178.047804][T14216] vlan0: entered promiscuous mode
[  178.050436][T14216] bond0: entered promiscuous mode
[  178.094028][T14219] __nla_validate_parse: 28 callbacks suppressed
[  178.094043][T14219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2375'.
[  178.142301][T14222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.146038][T14221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.151279][T14222] syzkaller0: entered promiscuous mode
[  178.153625][T14222] syzkaller0: entered allmulticast mode
[  178.156416][T14222] tipc: Resetting bearer <eth:syzkaller0>
[  178.200370][T14224] tipc: Resetting bearer <eth:syzkaller0>
[  178.213167][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'.
[  178.299363][T14226] lo speed is unknown, defaulting to 1000
[  178.382794][T14226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2378'.
[  178.405843][T14226] netlink: 'syz.1.2378': attribute type 12 has an invalid length.
[  178.496296][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'.
[  178.500882][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'.
[  178.556427][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'.
[  178.707921][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'.
[  178.774935][T14237] 8021q: adding VLAN 0 to HW filter on device bond78
[  178.806624][T14241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2382'.
[  178.806657][T14237] macvlan2: entered promiscuous mode
[  178.813160][T14237] macvlan2: entered allmulticast mode
[  178.816458][T14237] bond78: (slave macvlan2): Opening slave failed
[  178.851856][T14243] IPVS: length: 149 != 8
[  178.940199][T14251] netlink: 'syz.1.2386': attribute type 5 has an invalid length.
[  178.943560][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'.
[  178.946642][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'.
[  178.965678][T14253] 8021q: adding VLAN 0 to HW filter on device bond52
[  179.107844][T14266] lo speed is unknown, defaulting to 1000
[  179.421552][T14289] netlink: 'syz.2.2400': attribute type 10 has an invalid length.
[  179.430182][T14289] !: entered promiscuous mode
[  179.435178][T14289] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  179.497902][T14289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.703720][T14310] netlink: 'syz.2.2407': attribute type 1 has an invalid length.
[  179.740874][T14310] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  179.745055][T14310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  179.749111][T14310] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  179.751763][T14310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  179.755817][T14310] bond79: (slave geneve4): making interface the new active one
[  179.760144][T14310] bond79: (slave geneve4): Enslaving as an active interface with an up link
[  179.774680][T14310] 8021q: adding VLAN 0 to HW filter on device bond79
[  179.861805][T14321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.890260][T14325] netlink: 'syz.1.2410': attribute type 1 has an invalid length.
[  179.951602][T14325] 8021q: adding VLAN 0 to HW filter on device bond64
[  179.965683][T14329] bond64: (slave bridge8): making interface the new active one
[  179.974002][T14329] bond64: (slave bridge8): Enslaving as an active interface with an up link
[  179.985396][T14325] netlink: 'syz.1.2410': attribute type 2 has an invalid length.
[  179.994473][T14325] netlink: 'syz.1.2410': attribute type 1 has an invalid length.
[  180.129599][T14341] netlink: 'syz.1.2413': attribute type 5 has an invalid length.
[  180.198332][T14344] 8021q: adding VLAN 0 to HW filter on device bond65
[  180.204368][T14344] bond65: entered promiscuous mode
[  180.206632][T14344] team0: Port device bond65 added
[  180.314798][T14355] 8021q: adding VLAN 0 to HW filter on device bond80
[  180.330200][T14355] macvlan2: entered promiscuous mode
[  180.331966][T14355] macvlan2: entered allmulticast mode
[  180.334315][T14355] bond80: (slave macvlan2): Opening slave failed
[  180.356931][T14360] netlink: 'syz.1.2418': attribute type 12 has an invalid length.
[  180.464412][T14368] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  180.470058][T14368] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  180.551970][T14372] netlink: 'syz.1.2421': attribute type 1 has an invalid length.
[  180.560549][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  180.612450][T14372] 8021q: adding VLAN 0 to HW filter on device bond66
[  180.634196][T14380] 8021q: adding VLAN 0 to HW filter on device bond66
[  180.637504][T14380] bond66: (slave vxcan3): The slave device specified does not support setting the MAC address
[  180.655351][T14380] bond66: (slave vxcan3): Error -95 calling set_mac_address
[  180.763928][T14372] veth7: entered promiscuous mode
[  180.769733][T14372] bond66: (slave veth7): Enslaving as an active interface with a down link
[  180.817099][T14385] bond81 (unregistering): Released all slaves
[  180.831511][T14393] lo: MTU too low for tipc bearer
[  180.833628][T14393] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  180.846346][T14395] macsec2: entered promiscuous mode
[  180.848762][T14395] ip6gretap0: entered promiscuous mode
[  180.851174][T14395] macsec2: entered allmulticast mode
[  180.853326][T14395] ip6gretap0: entered allmulticast mode
[  180.856781][T14380] erspan0: entered allmulticast mode
[  180.965478][T14406] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  180.970427][T14406] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  181.017678][T14409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.049938][T14412] netlink: 'syz.0.2430': attribute type 5 has an invalid length.
[  181.052784][T14414] delete_channel: no stack
[  181.885606][T14457] sctp: [Deprecated]: syz.1.2440 (pid 14457) Use of int in max_burst socket option.
[  181.885606][T14457] Use struct sctp_assoc_value instead
[  181.892932][T14457] sctp: [Deprecated]: syz.1.2440 (pid 14457) Use of int in maxseg socket option.
[  181.892932][T14457] Use struct sctp_assoc_value instead
[  182.158955][T14469] syzkaller0: Caught tx_queue_len zero misconfig
[  182.229721][T14478] netlink: 'syz.2.2447': attribute type 2 has an invalid length.
[  182.307729][T14495] netlink: 'syz.2.2449': attribute type 5 has an invalid length.
[  182.370752][T14499] 8021q: adding VLAN 0 to HW filter on device bond81
[  182.395729][T14499] macvlan2: entered promiscuous mode
[  182.400923][T14499] macvlan2: entered allmulticast mode
[  182.404359][T14499] bond81: (slave macvlan2): Opening slave failed
[  182.563333][T14515] sctp: [Deprecated]: syz.0.2456 (pid 14515) Use of int in maxseg socket option.
[  182.563333][T14515] Use struct sctp_assoc_value instead
[  182.652604][T14523] netlink: 'syz.0.2459': attribute type 5 has an invalid length.
[  182.763079][T14528] veth0: entered promiscuous mode
[  182.905705][T14537] 8021q: adding VLAN 0 to HW filter on device bond53
[  182.920672][T14537] macvlan0: entered promiscuous mode
[  182.922925][T14537] macvlan0: entered allmulticast mode
[  182.926943][T14537] bond53: (slave macvlan0): Opening slave failed
[  183.174948][T14545] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.180104][T14545] 8021q: adding VLAN 0 to HW filter on device team0
[  183.184479][T14545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.432063][T14551] netlink: 'syz.0.2467': attribute type 39 has an invalid length.
[  183.464941][T14520] veth0: left promiscuous mode
[  183.516180][T14555] 0XD: left allmulticast mode
[  183.518764][T14555] ip6gre0: left promiscuous mode
[  183.520512][T14555] !: left promiscuous mode
[  183.532836][T14555] batadv_slave_0: left promiscuous mode
[  183.535713][T14555] hsr0: left promiscuous mode
[  183.537585][T14555] hsr0: left allmulticast mode
[  183.541111][T14555] hsr_slave_0: left allmulticast mode
[  183.543782][T14555] vlan0: left promiscuous mode
[  183.554357][T14555] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  183.557073][T14555] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  183.561610][T14555] vti0: left allmulticast mode
[  183.563879][T14555] veth3: left promiscuous mode
[  183.565622][T14555] bond40: left promiscuous mode
[  183.567804][T14555] bond40: left allmulticast mode
[  183.572650][T14555] batadv0: left allmulticast mode
[  183.576320][T14555] bond48: left promiscuous mode
[  183.589447][T14555] bridge10: left promiscuous mode
[  183.591499][T14555] bridge10: left allmulticast mode
[  183.594760][T14555] gretap0: left promiscuous mode
[  183.596389][T14555] gretap0: left allmulticast mode
[  183.628856][T14555] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.632101][T14555] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.635274][T14555] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.645193][T14555] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.665237][T14557] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  183.669075][T14557] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  183.727304][T14561] __nla_validate_parse: 34 callbacks suppressed
[  183.727319][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2471'.
[  183.947180][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'.
[  184.079037][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'.
[  184.192806][T14578] netlink: 'syz.0.2476': attribute type 5 has an invalid length.
[  184.196037][T14578] netlink: 'syz.0.2476': attribute type 7 has an invalid length.
[  184.233955][T14578] : entered promiscuous mode
[  184.366485][T14585] 8021q: adding VLAN 0 to HW filter on device bond67
[  184.375305][T14585] bond67: entered promiscuous mode
[  184.390487][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2478'.
[  184.396018][T14585] team0: Port device bond67 added
[  184.627870][T14604] lo speed is unknown, defaulting to 1000
[  184.806725][T14625] openvswitch: netlink: IP tunnel dst address not specified
[  184.849003][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'.
[  185.017719][T14625] dvmrp8: entered allmulticast mode
[  185.105605][T14624] dvmrp8: left allmulticast mode
[  185.209701][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'.
[  185.213622][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'.
[  185.216678][T14649] netlink: 'syz.1.2485': attribute type 7 has an invalid length.
[  185.262745][T14650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2485'.
[  185.335198][T14653] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  185.339918][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'.
[  185.344323][T14653] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  185.347746][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2485'.
[  185.608676][T14673] A link change request failed with some changes committed already. Interface gre5 may have been left with an inconsistent configuration, please check.
[  185.697241][T14679] 8021q: adding VLAN 0 to HW filter on device bond82
[  185.728511][T14683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.740183][T14679] macvlan2: entered promiscuous mode
[  185.741869][T14679] macvlan2: entered allmulticast mode
[  185.744141][T14679] bond82: (slave macvlan2): Opening slave failed
[  185.880047][T14695] lo speed is unknown, defaulting to 1000
[  185.966457][T14703] netlink: 'syz.2.2500': attribute type 1 has an invalid length.
[  185.986942][T14703] 8021q: adding VLAN 0 to HW filter on device bond83
[  186.006318][T14703] 8021q: adding VLAN 0 to HW filter on device bond83
[  186.009682][T14703] bond83: (slave vxcan1): The slave device specified does not support setting the MAC address
[  186.013872][T14703] bond83: (slave vxcan1): Error -95 calling set_mac_address
[  186.057398][T14705] erspan0: entered allmulticast mode
[  186.157113][T14709] vlan0: entered promiscuous mode
[  186.252021][T14713] 8021q: adding VLAN 0 to HW filter on device bond84
[  186.261495][T14713] macvlan2: entered promiscuous mode
[  186.263351][T14713] macvlan2: entered allmulticast mode
[  186.265956][T14713] bond84: (slave macvlan2): Opening slave failed
[  186.816296][T14729] bond85 (unregistering): Released all slaves
[  186.913203][T14735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.917742][T14735] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  186.922851][T14735] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  186.925655][T14735] tipc: Resetting bearer <eth:syzkaller0>
[  186.934194][T14735] netlink: 'syz.2.2511': attribute type 11 has an invalid length.
[  187.006761][T14737] batadv1: left allmulticast mode
[  187.009102][T14737] batadv1: left promiscuous mode
[  187.011563][T14737] bridge0: port 2(batadv1) entered disabled state
[  187.015962][T14737] vlan2: left allmulticast mode
[  187.017897][T14737] bond0: left allmulticast mode
[  187.019989][T14737] bond71: left allmulticast mode
[  187.022515][T14737] vlan2: left promiscuous mode
[  187.024465][T14737] bond0: left promiscuous mode
[  187.026405][T14737] bond71: left promiscuous mode
[  187.029183][T14737] bridge0: port 1(vlan2) entered disabled state
[  187.329408][T14752] ip6tnl2: entered promiscuous mode
[  187.331877][T14752] ip6tnl2: entered allmulticast mode
[  187.347340][T14752] _Z`Ԁ@: entered promiscuous mode
[  187.565660][T14755] 8021q: adding VLAN 0 to HW filter on device bond54
[  187.576398][T14755] macvlan0: entered promiscuous mode
[  187.578678][T14755] macvlan0: entered allmulticast mode
[  187.581198][T14755] bond54: (slave macvlan0): Opening slave failed
[  187.754379][T14763] chnl_net:caif_netlink_parms(): no params data found
[  187.909088][T14772] lo speed is unknown, defaulting to 1000
[  188.040329][T14782] tipc: Resetting bearer <eth:syzkaller0>
[  188.050659][T14782] ip6gretap0: left allmulticast mode
[  188.220711][T14793] bond68: entered promiscuous mode
[  188.418821][T14809] bridge10: the hash_elasticity option has been deprecated and is always 16
[  188.422193][T14809] bridge10: entered allmulticast mode
[  188.473665][T14819] bridge11: entered allmulticast mode
[  189.216000][T14827] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  189.245023][T14829] __nla_validate_parse: 14 callbacks suppressed
[  189.245038][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'.
[  189.270023][T14827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'.
[  189.278555][T14825] block nbd1: server does not support multiple connections per device.
[  189.281981][T14825] block nbd1: shutting down sockets
[  189.285503][T14827] batadv_slave_0: entered promiscuous mode
[  189.299213][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'.
[  189.304338][T14827] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2533'.
[  189.307931][T14827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2533'.
[  189.426662][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'.
[  189.441800][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'.
[  189.553893][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2539'.
[  189.586236][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'.
[  189.605042][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'.
[  189.713032][T14876] 8021q: adding VLAN 0 to HW filter on device bond55
[  189.725913][T14876] macvlan0: entered promiscuous mode
[  189.732695][T14876] macvlan0: entered allmulticast mode
[  189.735803][T14876] bond55: (slave macvlan0): Opening slave failed
[  189.742922][T14873] tun0: tun_chr_ioctl cmd 2147767520
[  189.744945][T14878] tun0: tun_chr_ioctl cmd 2147767520
[  189.834616][T14884] bond56: entered promiscuous mode
[  189.838377][T14878] netlink: 'syz.1.2545': attribute type 39 has an invalid length.
[  189.892725][T14893] tipc: Resetting bearer <eth:syzkaller0>
[  189.959731][T14895] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  190.053753][T14900] netlink: 'syz.0.2554': attribute type 12 has an invalid length.
[  190.056333][T14900] netlink: 'syz.0.2554': attribute type 11 has an invalid length.
[  190.145213][T14905] 8021q: adding VLAN 0 to HW filter on device bond57
[  190.154419][T14905] macvlan0: entered promiscuous mode
[  190.156281][T14905] macvlan0: entered allmulticast mode
[  190.159295][T14905] bond57: (slave macvlan0): Opening slave failed
[  190.293996][T14915] netlink: 'syz.0.2558': attribute type 3 has an invalid length.
[  190.572604][T14930] bond51: left allmulticast mode
[  190.574848][T14930] bond51: left promiscuous mode
[  190.577269][T14930] bridge0: port 1(bond51) entered disabled state
[  190.641396][T14932] 8021q: adding VLAN 0 to HW filter on device bond69
[  190.653476][T14932] macvlan0: entered promiscuous mode
[  190.655723][T14932] macvlan0: entered allmulticast mode
[  190.659861][T14932] bond69: (slave macvlan0): Opening slave failed
[  190.953299][T14959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.978210][T14961] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  191.023958][T14963] team_slave_1: mtu less than device minimum
[  191.051185][T14965] 8021q: adding VLAN 0 to HW filter on device bond70
[  191.077412][T14965] macvlan0: entered promiscuous mode
[  191.081085][T14965] macvlan0: entered allmulticast mode
[  191.083573][T14965] bond70: (slave macvlan0): Opening slave failed
[  191.122961][T14974] macsec0: entered allmulticast mode
[  191.125914][T14974] veth1_macvtap: entered allmulticast mode
[  191.130583][T14974] macsec0: left allmulticast mode
[  191.134743][T14974] veth1_macvtap: left allmulticast mode
[  191.240644][T14984] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  191.302029][T14990] lo speed is unknown, defaulting to 1000
[  191.348583][T14993] lo speed is unknown, defaulting to 1000
[  191.355063][T14988] xt_hashlimit: size too large, truncated to 1048576
[  191.357493][T14988] xt_hashlimit: overflow, try lower: 3/0
[  191.383904][T14995] lo speed is unknown, defaulting to 1000
[  191.416690][T14990] netlink: 'syz.0.2582': attribute type 12 has an invalid length.
[  191.531476][T15004] netlink: 'syz.1.2585': attribute type 83 has an invalid length.
[  191.534609][T15006] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  191.560603][T15003] bridge0: failed insert local address into bridge forwarding table
[  191.629970][T15013] netlink: 'syz.1.2588': attribute type 32 has an invalid length.
[  191.633258][T15013] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  191.824204][T15021] netlink: 'syz.1.2591': attribute type 8 has an invalid length.
[  192.248645][T15025] xt_hashlimit: size too large, truncated to 1048576
[  192.256410][T15025] xt_hashlimit: overflow, try lower: 3/0
[  192.299479][T15028] wg2: entered promiscuous mode
[  192.302624][T15028] wg2: entered allmulticast mode
[  192.374227][T15032] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  192.820773][T15066] 8021q: adding VLAN 0 to HW filter on device bond59
[  192.824063][T15066] bond58: (slave bond59): Enslaving as an active interface with an up link
[  192.834059][T15066] raw_sendmsg: syz.0.2607 forgot to set AF_INET. Fix it!
[  192.874330][T15072] 8021q: adding VLAN 0 to HW filter on device bond72
[  192.877907][T15072] bond72: entered promiscuous mode
[  192.881386][T15072] team0: Port device bond72 added
[  193.116254][T15094] bond60 (unregistering): Released all slaves
[  193.349301][T15111] netlink: 'syz.2.2621': attribute type 1 has an invalid length.
[  193.372546][T15111] 8021q: adding VLAN 0 to HW filter on device bond85
[  193.469471][T15122] netlink: 'syz.2.2624': attribute type 10 has an invalid length.
[  193.472427][T15122] !: entered promiscuous mode
[  193.474208][T15122] !: entered allmulticast mode
[  193.477151][T15122] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  193.565312][T15128] 8021q: adding VLAN 0 to HW filter on device bond60
[  193.582934][T15128] macvlan0: entered promiscuous mode
[  193.584781][T15128] macvlan0: entered allmulticast mode
[  193.587112][T15128] bond60: (slave macvlan0): Opening slave failed
[  193.620610][T15134] veth0: entered promiscuous mode
[  193.633821][T15133] veth0 (unregistering): left promiscuous mode
[  193.940201][T15160] bond86 (unregistering): Released all slaves
[  194.563645][T15198] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  194.566938][T15198] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  195.024210][T15241] x_tables: unsorted underflow at hook 2
[  195.070251][T15249] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  195.090974][T15243] bond61 (unregistering): Released all slaves
[  195.103420][T15249] bond58: left promiscuous mode
[  195.106219][T15249] team0: Port device bond58 removed
[  195.108516][T15249] bond62: left promiscuous mode
[  195.112899][T15249] team0: Port device bond62 removed
[  195.114956][T15249] bond63: left promiscuous mode
[  195.117376][T15249] team0: Port device bond63 removed
[  195.121003][T15249] vlan0: left allmulticast mode
[  195.122752][T15249] bond0: left allmulticast mode
[  195.124380][T15249] vlan0: left promiscuous mode
[  195.126110][T15249] bond0: left promiscuous mode
[  195.129052][T15249] bridge0: port 1(vlan0) entered disabled state
[  195.133174][T15249] bond64: (slave bridge8): Releasing active interface
[  195.136323][T15249] bond65: left promiscuous mode
[  195.139317][T15249] team0: Port device bond65 removed
[  195.141870][T15249] bond66: (slave veth7): Releasing active interface
[  195.144766][T15249] bond67: left promiscuous mode
[  195.147683][T15249] team0: Port device bond67 removed
[  195.151753][T15249] bond72: left promiscuous mode
[  195.161822][T15249] team0: Port device bond72 removed
[  195.211510][T15249] netlink: 'syz.1.2654': attribute type 10 has an invalid length.
[  195.218667][T15249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  195.229365][T15249] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  195.311859][T15263] __nla_validate_parse: 44 callbacks suppressed
[  195.311874][T15263] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.2657'.
[  195.610270][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'.
[  195.771026][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'.
[  195.806266][T15302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2665'.
[  195.867746][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'.
[  195.916249][T15307] netlink: 'syz.0.2666': attribute type 12 has an invalid length.
[  195.921002][T15307] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2666'.
[  196.012567][T15309] bond0: entered promiscuous mode
[  196.037897][T15312] netlink: 'syz.0.2668': attribute type 12 has an invalid length.
[  196.132267][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'.
[  196.160016][T15318] 8021q: adding VLAN 0 to HW filter on device bond73
[  196.173535][T15317] bridge0: the hash_elasticity option has been deprecated and is always 16
[  196.177078][T15317] bridge0: entered allmulticast mode
[  196.180156][T15321] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  196.185533][T15321] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  196.195879][T15318] macvlan0: entered promiscuous mode
[  196.203364][T15318] macvlan0: entered allmulticast mode
[  196.206261][T15318] bond73: (slave macvlan0): Opening slave failed
[  196.316849][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'.
[  196.527469][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'.
[  196.553935][T15343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'.
[  196.581233][T15355] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  196.584502][T15355] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  196.613924][T15358] sctp: [Deprecated]: syz.2.2682 (pid 15358) Use of int in max_burst socket option.
[  196.613924][T15358] Use struct sctp_assoc_value instead
[  196.673375][T15364] netlink: 'syz.2.2682': attribute type 4 has an invalid length.
[  196.685726][T15364] netlink: 'syz.2.2682': attribute type 4 has an invalid length.
[  196.701494][T14784] lo speed is unknown, defaulting to 1000
[  196.708819][T14784] syz2: Port: 1 Link ACTIVE
[  196.904689][T15387] 8021q: adding VLAN 0 to HW filter on device bond74
[  196.908691][T15387] bond74: entered promiscuous mode
[  196.911754][T15387] team0: Port device bond74 added
[  197.040040][T15399] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  197.044389][T15399] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  197.302023][T15423] netlink: 'syz.1.2697': attribute type 39 has an invalid length.
[  197.482587][T15433] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  197.488497][T15433] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  197.745574][T14784] lo speed is unknown, defaulting to 1000
[  197.748270][T14784] syz2: Port: 1 Link DOWN
[  197.888840][T15456] x_tables: duplicate underflow at hook 1
[  198.022083][T15472] netlink: 'syz.0.2713': attribute type 1 has an invalid length.
[  198.055303][T15472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  198.059255][T15472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  198.062672][T15472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  198.066030][T15472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  198.071890][T15472] bond61: (slave geneve4): making interface the new active one
[  198.072846][T15417] delete_channel: no stack
[  198.075603][T15472] bond61: (slave geneve4): Enslaving as an active interface with an up link
[  198.088867][T15472] 8021q: adding VLAN 0 to HW filter on device bond61
[  198.102982][T15476] netlink: 'syz.2.2712': attribute type 1 has an invalid length.
[  198.125086][T15478] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  198.129795][T15478] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  198.171306][T15481] netlink: 'syz.0.2715': attribute type 11 has an invalid length.
[  198.278778][T15490] netlink: 'syz.0.2719': attribute type 2 has an invalid length.
[  198.282078][T15490] netlink: 'syz.0.2719': attribute type 3 has an invalid length.
[  198.328263][   T61] block nbd0: Possible stuck request ffff888022818000: control (read@0,1024B). Runtime 120 seconds
[  198.335682][   T61] block nbd0: Possible stuck request ffff888022818200: control (read@1024,1024B). Runtime 120 seconds
[  198.340154][   T61] block nbd0: Possible stuck request ffff888022818400: control (read@2048,1024B). Runtime 120 seconds
[  198.344068][   T61] block nbd0: Possible stuck request ffff888022818600: control (read@3072,1024B). Runtime 120 seconds
[  198.361548][T15497] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  198.442914][T15500] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  198.446439][T15500] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  198.541927][T15509] bridge0: port 1(macsec0) entered blocking state
[  198.544444][T15509] bridge0: port 1(macsec0) entered disabled state
[  198.546776][T15509] macsec0: entered allmulticast mode
[  198.550357][T15509] macsec0: entered promiscuous mode
[  198.713757][T15525] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  198.735096][T15527] 8021q: adding VLAN 0 to HW filter on device bond87
[  198.745274][T15527] macvlan2: entered promiscuous mode
[  198.747136][T15527] macvlan2: entered allmulticast mode
[  198.750141][T15527] bond87: (slave macvlan2): Opening slave failed
[  198.755788][T15530] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  198.760387][T15530] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  198.922497][T15545] 8021q: adding VLAN 0 to HW filter on device bond75
[  198.926008][T15545] bond75: entered promiscuous mode
[  198.928398][T15545] team0: Port device bond75 added
[  198.949410][ T5878] lo speed is unknown, defaulting to 1000
[  198.951881][ T5878] syz2: Port: 1 Link ACTIVE
[  199.001236][T15552] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  199.004526][T15552] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  199.215403][T15563] bond88 (unregistering): Released all slaves
[  199.402552][   T10] lo speed is unknown, defaulting to 1000
[  199.404958][   T10] syz2: Port: 1 Link DOWN
[  199.493942][T15594] 8021q: adding VLAN 0 to HW filter on device bond62
[  199.517073][T15597] 8021q: adding VLAN 0 to HW filter on device bond88
[  199.531556][T15597] macvlan2: entered promiscuous mode
[  199.533777][T15597] macvlan2: entered allmulticast mode
[  199.537009][T15597] bond88: (slave macvlan2): Opening slave failed
[  199.632000][T15603] lo speed is unknown, defaulting to 1000
[  199.905545][T15613] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  199.909990][T15613] tipc: Resetting bearer <eth:syzkaller0>
[  200.301612][T15628] 8021q: adding VLAN 0 to HW filter on device bond76
[  200.412940][T15631] bond63 (unregistering): Released all slaves
[  200.434350][T15642] syzkaller0: left promiscuous mode
[  200.436704][T15642] tipc: Resetting bearer <eth:syzkaller0>
[  200.502832][T15646] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.514584][T15646] syzkaller0: entered promiscuous mode
[  200.517232][T15646] tipc: Resetting bearer <eth:syzkaller0>
[  200.561411][T15651] __nla_validate_parse: 27 callbacks suppressed
[  200.561426][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'.
[  200.593227][T15651] 8021q: adding VLAN 0 to HW filter on device bond77
[  200.659813][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  200.742927][T15665] bond89 (unregistering): Released all slaves
[  200.774779][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'.
[  200.792994][T15676] 8021q: adding VLAN 0 to HW filter on device bond78
[  200.833086][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  200.840360][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'.
[  200.843480][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'.
[  200.900276][T15684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2784'.
[  200.915562][T15687] tipc: Resetting bearer <eth:syzkaller0>
[  200.917631][T15687] tipc: Resetting bearer <eth:syzkaller0>
[  200.922043][T15686] tipc: Resetting bearer <eth:syzkaller0>
[  200.987281][T15690] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2786'.
[  201.584830][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'.
[  201.594152][T15704] validate_nla: 8 callbacks suppressed
[  201.594162][T15704] netlink: 'syz.1.2790': attribute type 1 has an invalid length.
[  201.612655][T15702] 8021q: adding VLAN 0 to HW filter on device bond89
[  201.651682][T15704] workqueue: Failed to create a rescuer kthread for wq "bond79": -EINTR
[  201.658969][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2791'.
[  201.659343][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2791'.
[  201.674152][T15710] pim6reg: left allmulticast mode
[  201.716899][T15714] lo speed is unknown, defaulting to 1000
[  202.042975][T15743] netlink: 'syz.2.2801': attribute type 18 has an invalid length.
[  202.127344][T15755] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  202.190325][T15761] xt_CT: No such helper "pptp"
[  202.235817][T15769] netlink: 'syz.1.2809': attribute type 39 has an invalid length.
[  202.284313][T15774] netlink: 'syz.2.2810': attribute type 32 has an invalid length.
[  202.380139][T15788] tipc: Resetting bearer <eth:syzkaller0>
[  203.433259][T15826] netlink: 'syz.0.2822': attribute type 1 has an invalid length.
[  203.437335][T15824] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  203.461961][T15826] xt_CT: No such helper "snmp"
[  203.507091][T15837] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  203.514115][T15837] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  203.604289][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.606882][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.739585][T15860] lo speed is unknown, defaulting to 1000
[  203.929753][T15873] lo speed is unknown, defaulting to 1000
[  203.972498][T15879] netlink: 'syz.1.2836': attribute type 13 has an invalid length.
[  203.975852][T15879] netlink: 'syz.1.2836': attribute type 17 has an invalid length.
[  204.204868][T15896] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  204.209244][T15896] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  204.292200][T15904] netlink: 'syz.0.2847': attribute type 13 has an invalid length.
[  204.435809][T15916] netlink: 'syz.1.2849': attribute type 4 has an invalid length.
[  204.469326][T15918] bond64 (unregistering): Released all slaves
[  204.531264][T15929] bond80: entered promiscuous mode
[  204.625871][T15946] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  204.651146][T15950] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  204.679969][T15946] bond58: (slave bond59): Releasing backup interface
[  204.688830][T15946] bond61: (slave geneve4): Releasing active interface
[  204.701403][T15946] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.704821][T15946] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.707577][T15946] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.711310][T15946] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.743269][T15961] bond90: entered promiscuous mode
[  204.802960][T15966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  204.805983][T15966] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  205.343479][T15990] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  205.434368][T15992] bond91 (unregistering): Released all slaves
[  205.657170][T16006] __nla_validate_parse: 26 callbacks suppressed
[  205.657189][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'.
[  205.679575][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'.
[  205.712485][T16014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2876'.
[  205.743703][T16018] bond81: entered promiscuous mode
[  205.748695][T16021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.786387][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2880'.
[  205.822524][T16023] lo speed is unknown, defaulting to 1000
[  205.909408][T16036] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  205.961117][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2883'.
[  206.031707][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'.
[  206.035654][T16039] bridge0: left allmulticast mode
[  206.117728][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'.
[  206.390301][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'.
[  206.439269][T16067] : entered promiscuous mode
[  206.470751][T16069] bond64: entered promiscuous mode
[  206.507197][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'.
[  206.523105][T16077] bridge11: port 1(ip6gretap4) entered blocking state
[  206.525544][T16077] bridge11: port 1(ip6gretap4) entered disabled state
[  206.527960][T16077] ip6gretap4: entered allmulticast mode
[  206.531122][T16077] ip6gretap4: entered promiscuous mode
[  206.533772][T16077] bridge11: port 1(ip6gretap4) entered blocking state
[  206.536108][T16077] bridge11: port 1(ip6gretap4) entered forwarding state
[  206.544847][T16077] bridge0: failed insert local address into bridge forwarding table
[  206.560202][T16077] veth11: entered promiscuous mode
[  206.562126][T16077] bridge11: port 2(veth11) entered blocking state
[  206.564720][T16077] bridge11: port 2(veth11) entered disabled state
[  206.567237][T16077] veth11: entered allmulticast mode
[  206.616114][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  206.751809][T16098] openvswitch: netlink: Tunnel attr 3587 out of range max 16
[  206.867109][T16113] validate_nla: 5 callbacks suppressed
[  206.867118][T16113] netlink: 'syz.1.2909': attribute type 10 has an invalid length.
[  206.877239][T16113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  206.922676][T16117] bond82: entered promiscuous mode
[  206.940902][T16122] pim6reg: left allmulticast mode
[  207.070832][T16137] netlink: 'syz.2.2916': attribute type 3 has an invalid length.
[  207.206665][T16150] vlan1: entered allmulticast mode
[  207.209217][T16150] bond83: entered allmulticast mode
[  207.416132][T16161] 8021q: adding VLAN 0 to HW filter on device bond84
[  207.420250][T16161] bond84: entered promiscuous mode
[  207.422512][T16161] team0: Port device bond84 added
[  207.513806][T16167] netlink: 'syz.1.2925': attribute type 1 has an invalid length.
[  207.532358][T16167] bond85: entered promiscuous mode
[  207.538500][T16167] 8021q: adding VLAN 0 to HW filter on device bond85
[  207.735030][T16181] bond65 (unregistering): Released all slaves
[  207.862038][T16190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.866172][T16190] tipc: Resetting bearer <eth:syzkaller0>
[  207.953004][T16195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.956257][T16195] syzkaller0: left promiscuous mode
[  207.958246][T16195] syzkaller0: left allmulticast mode
[  207.960346][T16195] tipc: Resetting bearer <eth:syzkaller0>
[  208.037900][T16198] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  208.140850][T16203] tipc: Resetting bearer <eth:syzkaller0>
[  208.352604][T16225] dvmrp0: entered allmulticast mode
[  208.506559][T16237] 8021q: adding VLAN 0 to HW filter on device bond86
[  208.510505][T16237] bond86: entered promiscuous mode
[  208.512641][T16237] team0: Port device bond86 added
[  208.588143][T16245] netlink: 'syz.1.2950': attribute type 1 has an invalid length.
[  208.609516][T16245] 8021q: adding VLAN 0 to HW filter on device bond87
[  208.730188][T16252] vlan1: entered allmulticast mode
[  208.732576][T16252] bond88: entered allmulticast mode
[  208.891984][T16267] xt_hashlimit: size too large, truncated to 1048576
[  208.948665][T16273] : renamed from bridge_slave_0
[  209.146993][T16291] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  209.166579][T16291] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  209.260897][T16298] ip6gretap0: entered promiscuous mode
[  209.274510][T16298] ip6gretap0: left promiscuous mode
[  209.375939][T16306] lo speed is unknown, defaulting to 1000
[  209.406319][T16309] netlink: 'syz.1.2965': attribute type 5 has an invalid length.
[  209.734187][T16326] bond65 (unregistering): Released all slaves
[  209.883715][T16335] netlink: 'syz.2.2974': attribute type 5 has an invalid length.
[  209.914753][T16337] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  210.018858][T16343] wireguard0: entered promiscuous mode
[  210.023042][T16343] wireguard0: entered allmulticast mode
[  210.080928][T16348] bond65: entered promiscuous mode
[  210.247795][T16361] netlink: 'syz.2.2983': attribute type 5 has an invalid length.
[  210.472925][T16378] bridge11: port 1(ip6gretap4) entered disabled state
[  210.672837][T16386] erspan0: left allmulticast mode
[  210.675158][T16386] bond0: left promiscuous mode
[  210.677008][T16386] wg2: left promiscuous mode
[  210.679127][T16386] wg2: left allmulticast mode
[  210.682511][T16386] syzkaller0: left promiscuous mode
[  210.684354][T16386] syzkaller0: left allmulticast mode
[  210.691431][T16386] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  210.695229][T16386] veth7: left promiscuous mode
[  210.695778][T16388] __nla_validate_parse: 30 callbacks suppressed
[  210.695790][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  210.696997][T16386] ip6tnl2: left promiscuous mode
[  210.707970][T16386] ip6tnl2: left allmulticast mode
[  210.710420][T16386] bond68: left promiscuous mode
[  210.714524][T16386] bond80: left promiscuous mode
[  210.716333][T16386] bond81: left promiscuous mode
[  210.718816][T16386] bond82: left promiscuous mode
[  210.720645][T16386] bond85: left promiscuous mode
[  210.834781][T16395] bond74: left promiscuous mode
[  210.838609][T16395] team0: Port device bond74 removed
[  210.841341][T16395] bond75: left promiscuous mode
[  210.844719][T16395] team0: Port device bond75 removed
[  210.847458][T16395] ip6gretap4: left allmulticast mode
[  210.851285][T16395] ip6gretap4: left promiscuous mode
[  210.853682][T16395] bridge11: port 1(ip6gretap4) entered disabled state
[  210.860657][T16395] veth11: left allmulticast mode
[  210.862780][T16395] veth11: left promiscuous mode
[  210.865156][T16395] bridge11: port 2(veth11) entered disabled state
[  210.871862][T16395] bond84: left promiscuous mode
[  210.876309][T16395] team0: Port device bond84 removed
[  210.879738][T16395] bond86: left promiscuous mode
[  210.882335][T16395] team0: Port device bond86 removed
[  210.966485][T16397] netlink: 'syz.2.2996': attribute type 23 has an invalid length.
[  210.984175][T16397] netlink: 'syz.2.2996': attribute type 4 has an invalid length.
[  210.992724][T16397] netlink: 'syz.2.2996': attribute type 1 has an invalid length.
[  211.072099][T16405] workqueue: Failed to create a rescuer kthread for wq "bond91": -EINTR
[  211.134913][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'.
[  211.205738][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  211.300550][T16418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3002'.
[  211.674817][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'.
[  212.021370][T16435] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3009'.
[  212.025146][T16435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.070584][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[  212.150050][T16441] validate_nla: 1 callbacks suppressed
[  212.150065][T16441] netlink: 'syz.2.3011': attribute type 21 has an invalid length.
[  212.155622][T16441] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3011'.
[  212.161610][T16441] netlink: 'syz.2.3011': attribute type 5 has an invalid length.
[  212.164790][T16441] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3011'.
[  212.182305][T16439] wireguard0: entered promiscuous mode
[  212.198332][T16439] wireguard0: entered allmulticast mode
[  212.243667][T16447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.250419][T16449] syzkaller0: entered promiscuous mode
[  212.252786][T16449] syzkaller0: entered allmulticast mode
[  212.255587][T16449] tipc: Resetting bearer <eth:syzkaller0>
[  212.282410][T16452] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  212.286281][T16452] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  212.351584][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'.
[  212.445386][T16466] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  212.451941][T16466] gretap4: entered promiscuous mode
[  212.454112][T16466] gretap4: entered allmulticast mode
[  212.464536][T16470] netlink: 'syz.0.3022': attribute type 2 has an invalid length.
[  212.682174][T16489] netlink: 'syz.0.3028': attribute type 10 has an invalid length.
[  213.030440][T16519] netlink: 'syz.1.3041': attribute type 1 has an invalid length.
[  213.059859][T16519] 8021q: adding VLAN 0 to HW filter on device bond89
[  213.077272][T16519] bond89: (slave bridge12): making interface the new active one
[  213.082175][T16519] bond89: (slave bridge12): Enslaving as an active interface with an up link
[  213.118278][T16519] syz.1.3041 (16519) used greatest stack depth: 19480 bytes left
[  213.385227][T16541] netlink: 'syz.2.3045': attribute type 15 has an invalid length.
[  213.641088][T16553] bond90: entered promiscuous mode
[  214.012212][T16571] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  214.740750][T16583] bond0 (unregistering): (slave bond71): Releasing backup interface
[  214.744306][T16583] bond0 (unregistering): Released all slaves
[  214.865689][T16588] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  214.870280][T16588] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  215.040749][T16603] : entered promiscuous mode
[  215.133342][T16613] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  215.137515][T16613] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  215.143329][T16611] netdevsim0: entered promiscuous mode
[  215.146005][T16611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  215.732769][T16643] __nla_validate_parse: 26 callbacks suppressed
[  215.732788][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'.
[  215.781238][T16645] netlink: 'syz.2.3080': attribute type 1 has an invalid length.
[  215.784770][T16645] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3080'.
[  215.795003][T16645] team_slave_1: entered allmulticast mode
[  215.797986][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'.
[  215.892535][T16644] team_slave_1: left allmulticast mode
[  215.950633][T16649] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.011695][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'.
[  216.086938][T16656] dvmrp8: entered allmulticast mode
[  216.097015][T16658] tipc: Resetting bearer <eth:syzkaller0>
[  216.106266][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'.
[  216.143034][T16650] dvmrp8: left allmulticast mode
[  216.167638][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'.
[  216.221566][T16671] netlink: 'syz.2.3091': attribute type 1 has an invalid length.
[  216.267861][T16671] bond0: (slave bridge19): making interface the new active one
[  216.272160][T16671] bond0: (slave bridge19): Enslaving as an active interface with an up link
[  216.321280][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3093'.
[  216.368762][T16680] set match dimension is over the limit!
[  216.427910][T16689] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.434227][T16691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  216.439554][T16691] hsr0: entered promiscuous mode
[  216.441666][T16691] hsr0: entered allmulticast mode
[  216.443760][T16691] hsr_slave_0: entered allmulticast mode
[  216.448826][T16689] tipc: Resetting bearer <eth:syzkaller0>
[  216.506354][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  216.592427][T16703] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  216.660093][T16707] sch_fq: defrate 257 ignored.
[  216.673923][T16709] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3104'.
[  216.687419][T16709] vlan1: entered allmulticast mode
[  216.691522][T16709] erspan0: entered allmulticast mode
[  216.700104][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'.
[  216.891810][T16720] netlink: 'syz.1.3109': attribute type 4 has an invalid length.
[  216.896197][T16720] netlink: 'syz.1.3109': attribute type 4 has an invalid length.
[  217.480756][T16750] wireguard1: entered promiscuous mode
[  217.482845][T16750] wireguard1: entered allmulticast mode
[  217.755132][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.761835][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.765588][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.769829][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.773611][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.777256][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.781748][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.785530][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.789627][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.793355][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.797275][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.801632][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.805316][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.809916][T16757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.839622][T16762] xt_hashlimit: size too large, truncated to 1048576
[  217.966061][T16762] bond0 (unregistering): Released all slaves
[  218.149430][T16779] tipc: Resetting bearer <eth:syzkaller0>
[  218.172068][T16781] netlink: 'syz.1.3129': attribute type 25 has an invalid length.
[  218.215837][T16786] vxcan0: entered promiscuous mode
[  218.395902][T16801] lo speed is unknown, defaulting to 1000
[  218.526049][T16809] dvmrp1: tun_chr_ioctl cmd 1074025677
[  218.528820][T16809] dvmrp1: linktype set to 805
[  218.695725][T16819] erspan0: left allmulticast mode
[  218.699037][T16819] !: left promiscuous mode
[  218.701130][T16819] !: left allmulticast mode
[  218.704807][T16819] batadv_slave_0: left promiscuous mode
[  218.707437][T16819] : left promiscuous mode
[  218.712514][T16819] vlan0: left promiscuous mode
[  218.721116][T16819] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  218.724277][T16819] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  218.740246][T16819] bond90: left promiscuous mode
[  218.743081][T16819] gretap4: left promiscuous mode
[  218.745421][T16819] gretap4: left allmulticast mode
[  219.243861][T16823] lo speed is unknown, defaulting to 1000
[  219.572486][T16833] netlink: 'syz.0.3147': attribute type 1 has an invalid length.
[  219.619431][T16833] 8021q: adding VLAN 0 to HW filter on device bond66
[  219.626900][T16833] netlink: 'syz.0.3147': attribute type 1 has an invalid length.
[  219.788836][T16848] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  219.913996][T16857] sctp: [Deprecated]: syz.0.3157 (pid 16857) Use of int in max_burst socket option.
[  219.913996][T16857] Use struct sctp_assoc_value instead
[  219.931696][T16857] netlink: 'syz.0.3157': attribute type 10 has an invalid length.
[  219.937327][T16857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  219.943497][T16857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  220.242372][T16869] netlink: 'syz.1.3162': attribute type 1 has an invalid length.
[  220.541756][T16890] bond91 (unregistering): Released all slaves
[  220.754938][T16906] bond0 (unregistering): Released all slaves
[  220.794202][T16909] lo speed is unknown, defaulting to 1000
[  220.863647][T16909] __nla_validate_parse: 19 callbacks suppressed
[  220.863659][T16909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3171'.
[  220.881025][T16909] netlink: 'syz.2.3171': attribute type 12 has an invalid length.
[  220.900742][T16921] bond89: (slave bridge12): Releasing active interface
[  221.003012][T16932] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  221.106536][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'.
[  221.118566][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'.
[  221.124442][T16946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.152701][T16946] tipc: Resetting bearer <eth:syzkaller0>
[  221.219376][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'.
[  221.287814][T16955] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3181'.
[  221.326153][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  221.404471][T16955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3181'.
[  221.520557][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'.
[  221.563208][T16988] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  221.591065][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'.
[  221.688437][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'.
[  221.707523][T16995] 8021q: adding VLAN 0 to HW filter on device bond91
[  221.819576][T17008] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  221.823469][T17008] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  221.845061][T17008] bond0 (unregistering): Released all slaves
[  221.916207][T17006] veth0_to_team: entered promiscuous mode
[  221.918799][T17006] veth0_to_team: entered allmulticast mode
[  221.923618][T17013] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  221.927933][T17013] bridge0: port 1(31XD) entered blocking state
[  221.930992][T17013] bridge0: port 1(31XD) entered disabled state
[  221.933877][T17013] 1XD: entered allmulticast mode
[  221.937555][T17013] 1XD: left allmulticast mode
[  222.164789][T17034] macsec3: entered allmulticast mode
[  222.166626][T17034] macsec0: entered allmulticast mode
[  222.191329][T17033] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.194302][T17033] bond0: entered promiscuous mode
[  222.196633][T17033] team0: Port device bond0 added
[  222.211201][T17045] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  222.215189][T17045] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  222.439947][T17088] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  222.486472][T17091] 8021q: adding VLAN 0 to HW filter on device bond91
[  222.491376][T17091] bond91: entered promiscuous mode
[  222.494308][T17091] team0: Port device bond91 added
[  222.519723][T17094] netlink: 'syz.0.3218': attribute type 83 has an invalid length.
[  222.529745][T17094] pimreg: entered allmulticast mode
[  222.863638][T17118] bond92 (unregistering): Released all slaves
[  223.328843][T17141] bond67 (unregistering): Released all slaves
[  223.386246][T17147] netlink: 'syz.2.3236': attribute type 15 has an invalid length.
[  223.486700][T17160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.493643][T17160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.496734][T17160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.500579][T17160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.540178][T17147] netlink: 'syz.2.3236': attribute type 8 has an invalid length.
[  223.771131][T17181] bond67 (unregistering): Released all slaves
[  223.783843][T17186] smc: net device bond0 applied user defined pnetid SYZ
[  224.122153][T17214] 8021q: adding VLAN 0 to HW filter on device bond92
[  224.125064][T17214] bond92: entered promiscuous mode
[  224.130308][T17214] team0: Port device bond92 added
[  224.175779][T17216] netlink: 'syz.0.3256': attribute type 12 has an invalid length.
[  224.266643][T17230] sctp: [Deprecated]: syz.2.3262 (pid 17230) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.266643][T17230] Use struct sctp_sack_info instead
[  224.625725][T17248] netlink: 'syz.1.3266': attribute type 9 has an invalid length.
[  224.776505][T17250] bond0: left promiscuous mode
[  224.783011][T17250] team0: Port device bond0 removed
[  225.024726][T17254] netlink: 'syz.1.3269': attribute type 12 has an invalid length.
[  225.304954][T17276] vlan1: entered promiscuous mode
[  225.306646][T17276] bridge0: entered promiscuous mode
[  225.322933][T17276] vlan1: entered allmulticast mode
[  225.325371][T17276] bridge0: entered allmulticast mode
[  225.374304][T17286] bond93: entered promiscuous mode
[  225.376827][T17286] 8021q: adding VLAN 0 to HW filter on device bond93
[  225.461594][T17294] macsec0: left allmulticast mode
[  225.463612][T17294] macsec0: left promiscuous mode
[  225.465441][T17294] bridge0: port 1(macsec0) entered disabled state
[  225.521311][T17298] lo speed is unknown, defaulting to 1000
[  225.822479][T17333] tipc: Resetting bearer <eth:syzkaller0>
[  225.852726][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.855815][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.905172][T17343] __nla_validate_parse: 42 callbacks suppressed
[  225.905186][T17343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'.
[  226.028498][T17347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3298'.
[  226.217730][T17365] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  226.226904][T17365] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  226.293821][T17371] smc: net device bond0 erased user defined pnetid SYZ
[  226.345942][T17371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3304'.
[  226.350293][T17376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.354859][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'.
[  226.360527][T17376] tipc: Resetting bearer <eth:syzkaller0>
[  226.372461][T17371] smc: removing net device bond0 with user defined pnetid SYZ2
[  226.375651][T17371] bond0 (unregistering): Released all slaves
[  226.525349][ T5829] Bluetooth: hci2: link tx timeout
[  226.527109][ T5829] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  226.557604][T17390] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3308'.
[  227.333037][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'.
[  227.387420][T17404] bond92 (unregistering): Released all slaves
[  227.479548][T17420] netlink: 'syz.1.3313': attribute type 10 has an invalid length.
[  227.693738][T17434] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.3318'.
[  227.733768][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3319'.
[  227.784898][T17445] xt_hashlimit: size too large, truncated to 1048576
[  227.914666][T17453] netlink: 'syz.2.3323': attribute type 1 has an invalid length.
[  227.932430][T17453] 8021q: adding VLAN 0 to HW filter on device bond92
[  227.946634][T17453] 8021q: adding VLAN 0 to HW filter on device bond92
[  227.949969][T17453] bond92: (slave vxcan1): The slave device specified does not support setting the MAC address
[  227.954122][T17453] bond92: (slave vxcan1): Error -95 calling set_mac_address
[  227.976103][T17452] smc: adding net device bond0 with user defined pnetid SYZ2
[  227.980353][T17452] smc: removing net device bond0 with user defined pnetid SYZ2
[  227.983041][T17452] bond0 (unregistering): Released all slaves
[  228.073179][T17460] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  228.077091][T17460] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  228.111611][T17464] netlink: 'syz.0.3325': attribute type 1 has an invalid length.
[  228.125259][T17464] smc: adding net device bond0 with user defined pnetid SYZ2
[  228.132103][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'.
[  228.138341][T17464] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.149729][T17464] veth9: entered promiscuous mode
[  228.160980][T17466] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.174606][T17466] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  228.181451][T17466] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  228.185297][T17466] tipc: Resetting bearer <eth:syzkaller0>
[  228.364380][T17475] lo speed is unknown, defaulting to 1000
[  228.398482][   T61] block nbd0: Possible stuck request ffff888022818000: control (read@0,1024B). Runtime 150 seconds
[  228.402990][   T61] block nbd0: Possible stuck request ffff888022818200: control (read@1024,1024B). Runtime 150 seconds
[  228.407486][   T61] block nbd0: Possible stuck request ffff888022818400: control (read@2048,1024B). Runtime 150 seconds
[  228.412233][   T61] block nbd0: Possible stuck request ffff888022818600: control (read@3072,1024B). Runtime 150 seconds
[  228.558374][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  228.812389][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'.
[  228.824563][T17496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  228.846651][T17497] bond67 (unregistering): Released all slaves
[  229.000578][T17511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.317566][T17602] netlink: 'syz.2.3353': attribute type 1 has an invalid length.
[  230.339714][T17602] 8021q: adding VLAN 0 to HW filter on device bond93
[  230.356558][T17602] 8021q: adding VLAN 0 to HW filter on device bond93
[  230.359403][T17602] bond93: (slave vxcan1): The slave device specified does not support setting the MAC address
[  230.363594][T17602] bond93: (slave vxcan1): Error -95 calling set_mac_address
[  230.372697][T17594] syzkaller0: mtu less than device minimum
[  230.390962][T17597] tipc: Disabling bearer <eth:syzkaller0>
[  230.440985][T17605] veth9: entered promiscuous mode
[  230.445288][T17605] bond93: (slave veth9): Enslaving as an active interface with a down link
[  230.450806][T17602] erspan0: entered allmulticast mode
[  230.457018][T17602] bond93: (slave erspan0): making interface the new active one
[  230.464655][T17602] bond93: (slave erspan0): Enslaving as an active interface with an up link
[  230.856488][T17662] netlink: 'syz.0.3365': attribute type 5 has an invalid length.
[  230.859426][T17662] netlink: 'syz.0.3365': attribute type 7 has an invalid length.
[  230.892638][T17660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.911855][T17666] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  230.927503][T17668] vlan2: entered promiscuous mode
[  230.930151][T17668] bridge0: entered promiscuous mode
[  230.932120][T17668] vlan2: entered allmulticast mode
[  230.933794][T17668] bridge0: entered allmulticast mode
[  230.946859][T17668] bond93: (slave erspan0): Releasing active interface
[  230.952868][T17668] tipc: Resetting bearer <eth:syzkaller0>
[  230.953936][T17666] x_tables: duplicate underflow at hook 2
[  230.957125][T17668] bond61: (slave bridge12): Releasing active interface
[  230.963473][T17668] bond68: (slave bridge15): Releasing active interface
[  230.974330][T17668] bond76: (slave bridge17): Releasing active interface
[  230.977396][T17668] veth7: left allmulticast mode
[  230.979385][T17668] veth7: left promiscuous mode
[  230.981131][T17668] bridge18: port 1(veth7) entered disabled state
[  230.985224][T17668] bond79: (slave geneve4): Releasing active interface
[  230.991356][T17668] bond0: (slave bridge19): Releasing active interface
[  230.995735][T17668] bond93: (slave veth9): Releasing active interface
[  231.162665][T17697] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.196459][T17703] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  231.201376][T17703] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  231.224810][T17705] __nla_validate_parse: 39 callbacks suppressed
[  231.224820][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'.
[  231.276021][T17713] tipc: Resetting bearer <eth:syzkaller0>
[  231.292038][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'.
[  231.327062][T17718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.333568][T17718] tipc: Resetting bearer <eth:syzkaller0>
[  231.337341][T17718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3380'.
[  231.415907][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3382'.
[  231.428195][T17730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3382'.
[  231.452427][T17730] bond95: entered promiscuous mode
[  231.454393][T17730] 8021q: adding VLAN 0 to HW filter on device bond95
[  231.466644][T17725] bond96: entered promiscuous mode
[  231.469497][T17725] 8021q: adding VLAN 0 to HW filter on device bond96
[  231.493385][T17731] bond67 (unregistering): Released all slaves
[  231.554137][T17744] lo speed is unknown, defaulting to 1000
[  231.580524][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'.
[  231.630475][T17750] tipc: Resetting bearer <eth:syzkaller0>
[  231.644827][T17750] macsec0: left allmulticast mode
[  231.656684][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  231.661556][T17750] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.664229][T17750] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.675584][T17750] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.678624][T17750] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.791622][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'.
[  231.807668][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'.
[  231.811108][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'.
[  231.873336][T17772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.053799][T17804] netlink: 'syz.0.3403': attribute type 3 has an invalid length.
[  232.135633][T17817] tipc: Resetting bearer <eth:syzkaller0>
[  232.285188][T17824] netlink: 'syz.2.3408': attribute type 13 has an invalid length.
[  232.287866][T17824] netlink: 'syz.2.3408': attribute type 17 has an invalid length.
[  232.294879][T17824] erspan0: left allmulticast mode
[  232.301492][T17824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.306652][T14784] lo speed is unknown, defaulting to 1000
[  232.308867][T14784] syz2: Port: 1 Link ACTIVE
[  232.327149][T17824] lo speed is unknown, defaulting to 1000
[  233.176558][T17858] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.179996][T17862] netlink: 'syz.2.3415': attribute type 1 has an invalid length.
[  233.184037][T17859] tipc: Resetting bearer <eth:syzkaller0>
[  233.425881][T17874] 8021q: adding VLAN 0 to HW filter on device bond68
[  233.431402][T17874] bond67: (slave bond68): Enslaving as an active interface with an up link
[  233.436704][T17874] 8021q: adding VLAN 0 to HW filter on device bond67
[  233.870527][T17919] macsec4: entered promiscuous mode
[  233.881239][T17919] bridge0: port 1(macsec4) entered blocking state
[  233.883548][T17919] bridge0: port 1(macsec4) entered disabled state
[  233.885745][T17919] macsec4: entered allmulticast mode
[  233.889103][T17919] macsec4: left allmulticast mode
[  233.936486][T17919] macsec4: entered promiscuous mode
[  233.939709][T17919] bridge0: port 1(macsec4) entered blocking state
[  233.941943][T17919] bridge0: port 1(macsec4) entered disabled state
[  233.944554][T17919] macsec4: entered allmulticast mode
[  233.949587][T17919] macsec4: left allmulticast mode
[  234.015012][T17919] macsec4: entered promiscuous mode
[  234.017254][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.022789][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.025025][T17919] macsec4: entered allmulticast mode
[  234.027847][T17919] macsec4: left allmulticast mode
[  234.095489][T17919] macsec4: entered promiscuous mode
[  234.101651][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.104680][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.106857][T17919] macsec4: entered allmulticast mode
[  234.111194][T17919] macsec4: left allmulticast mode
[  234.170545][T17919] macsec4: entered promiscuous mode
[  234.175256][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.178575][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.181651][T17919] macsec4: entered allmulticast mode
[  234.185430][T17919] macsec4: left allmulticast mode
[  234.215826][T17940] macsec1: entered promiscuous mode
[  234.220490][T17940] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  234.223584][T17940] macsec1: entered allmulticast mode
[  234.225867][T17940] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  234.242216][T17919] macsec4: entered promiscuous mode
[  234.245632][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.249070][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.252033][T17919] macsec4: entered allmulticast mode
[  234.263940][T17919] macsec4: left allmulticast mode
[  234.348398][T17919] macsec4: entered promiscuous mode
[  234.353772][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.356482][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.361111][T17919] macsec4: entered allmulticast mode
[  234.364121][T17919] macsec4: left allmulticast mode
[  234.425828][T17919] macsec4: entered promiscuous mode
[  234.428510][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.430862][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.433186][T17919] macsec4: entered allmulticast mode
[  234.440186][T17919] macsec4: left allmulticast mode
[  234.486920][T17919] macsec4: entered promiscuous mode
[  234.495915][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.500161][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.502529][T17919] macsec4: entered allmulticast mode
[  234.509104][T17919] macsec4: left allmulticast mode
[  234.570165][T17919] macsec4: entered promiscuous mode
[  234.573179][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.576130][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.579755][T17919] macsec4: entered allmulticast mode
[  234.583953][T17919] macsec4: left allmulticast mode
[  234.676339][T17919] macsec4: entered promiscuous mode
[  234.682002][T17919] bridge0: port 1(macsec4) entered blocking state
[  234.684949][T17919] bridge0: port 1(macsec4) entered disabled state
[  234.687831][T17919] macsec4: entered allmulticast mode
[  234.693100][T17919] macsec4: left allmulticast mode
[  234.811716][T17971] tipc: Resetting bearer <eth:syzkaller0>
[  234.991753][T17975] hsr_slave_1 (unregistering): left promiscuous mode
[  235.615574][T18002] bond69 (unregistering): Released all slaves
[  235.635876][T18011] hsr0: left promiscuous mode
[  235.650454][T18011] netdevsim0: left promiscuous mode
[  235.654209][T18011] bond90: left promiscuous mode
[  235.656338][T18011] bond93: left promiscuous mode
[  235.803414][T18025] veth0: entered promiscuous mode
[  235.812189][T18025] veth0 (unregistering): left promiscuous mode
[  235.861575][T18032] netlink: 'syz.1.3459': attribute type 21 has an invalid length.
[  235.869297][T18023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.877660][T18032] netlink: 'syz.1.3459': attribute type 1 has an invalid length.
[  235.884834][T18023] tipc: Resetting bearer <eth:syzkaller0>
[  236.065545][T18050] tipc: Resetting bearer <eth:syzkaller0>
[  236.223820][T18063] bond97 (unregistering): Released all slaves
[  236.234624][T18058] __nla_validate_parse: 22 callbacks suppressed
[  236.234637][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3466'.
[  236.324714][T18071] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3470'.
[  236.381124][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  236.434176][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3474'.
[  236.603417][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3477'.
[  236.653101][T18104] netlink: 'syz.1.3479': attribute type 1 has an invalid length.
[  236.700731][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3479'.
[  236.704500][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'.
[  236.818788][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'.
[  236.886246][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  236.912903][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3485'.
[  236.913113][T18124] netlink: 'syz.1.3484': attribute type 3 has an invalid length.
[  237.020958][T18131] 8021q: adding VLAN 0 to HW filter on device bond95
[  237.025069][T18131] bond95: entered promiscuous mode
[  237.027882][T18131] team0: Port device bond95 added
[  237.080442][T18136] netlink: 'syz.1.3488': attribute type 10 has an invalid length.
[  237.083927][T18136] dummy0: entered allmulticast mode
[  237.087083][T18136] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  237.268477][T18156] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  237.270729][T18156] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  237.275192][T18142] netlink: 'syz.0.3489': attribute type 5 has an invalid length.
[  237.284128][ T7456] lo speed is unknown, defaulting to 1000
[  237.286069][ T7456] syz2: Port: 1 Link DOWN
[  237.287628][T18142] netlink: 'syz.0.3489': attribute type 6 has an invalid length.
[  237.321753][T18160] ksmbd: Unknown IPC event: 3, ignore.
[  237.329847][T18160] netlink: 'syz.2.3493': attribute type 1 has an invalid length.
[  237.376788][T18162] bond70 (unregistering): Released all slaves
[  237.516376][T18173] batadv_slave_0: entered promiscuous mode
[  238.082153][T18179] netdevsim0: entered allmulticast mode
[  238.243853][T18188] 8021q: adding VLAN 0 to HW filter on device bond96
[  238.252565][T18188] bond96: entered promiscuous mode
[  238.256518][T18188] team0: Port device bond96 added
[  238.265939][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.271044][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.321563][T18194] netlink: 'syz.1.3504': attribute type 10 has an invalid length.
[  238.590053][T18207] bond67: (slave bond68): Releasing backup interface
[  238.996730][T18247] 8021q: adding VLAN 0 to HW filter on device bond97
[  239.001051][T18247] bond97: entered promiscuous mode
[  239.003870][T18247] team0: Port device bond97 added
[  239.222884][T18271] macsec0: entered promiscuous mode
[  239.225180][T18271] : entered promiscuous mode
[  239.227444][T18271] macsec0: entered allmulticast mode
[  239.238573][T18271] : entered allmulticast mode
[  239.243967][T18271] : left allmulticast mode
[  239.245908][T18271] : left promiscuous mode
[  239.410602][T18285] lo speed is unknown, defaulting to 1000
[  239.471170][T18294] netlink: 'syz.0.3534': attribute type 1 has an invalid length.
[  239.552341][T18294] bond70: entered promiscuous mode
[  239.554296][T18294] bond70: entered allmulticast mode
[  239.559292][T18294] 8021q: adding VLAN 0 to HW filter on device bond70
[  239.595499][T18294] bridge13: entered promiscuous mode
[  239.597359][T18294] bridge13: entered allmulticast mode
[  239.600613][T18294] bond70: (slave bridge13): Enslaving as a backup interface with an up link
[  239.631043][T18299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.658505][   T12] bond70: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  239.769136][ T5843] bond70: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  240.141332][T18359] : renamed from bond_slave_0
[  240.242167][T18368] 8021q: adding VLAN 0 to HW filter on device bond71
[  240.271938][T18369] 8021q: adding VLAN 0 to HW filter on device bond71
[  240.275051][T18369] bond71: (slave vxcan1): The slave device specified does not support setting the MAC address
[  240.283229][T18369] bond71: (slave vxcan1): Error -95 calling set_mac_address
[  240.310438][T18368] veth11: entered promiscuous mode
[  240.314144][T18368] bond71: (slave veth11): Enslaving as an active interface with a down link
[  240.415816][T18387] : entered promiscuous mode
[  240.551813][T18399] bond72: entered promiscuous mode
[  240.554215][T18399] bond72: entered allmulticast mode
[  240.556346][T18399] 8021q: adding VLAN 0 to HW filter on device bond72
[  240.573080][T18399] bridge14: entered promiscuous mode
[  240.574978][T18399] bridge14: entered allmulticast mode
[  240.577194][T18399] bond72: (slave bridge14): Enslaving as a backup interface with an up link
[  240.733042][T18414] bond73 (unregistering): Released all slaves
[  240.951672][T18432] validate_nla: 4 callbacks suppressed
[  240.951682][T18432] netlink: 'syz.0.3559': attribute type 10 has an invalid length.
[  241.052979][T18436] batadv1: entered promiscuous mode
[  241.097191][T18439] bond97 (unregistering): Released all slaves
[  241.344178][T18449] __nla_validate_parse: 34 callbacks suppressed
[  241.344193][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'.
[  241.424354][T18460] netlink: 'syz.2.3566': attribute type 10 has an invalid length.
[  241.515906][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'.
[  241.680492][T18473] bond97 (unregistering): Released all slaves
[  241.800741][T18478] pim6reg1: entered promiscuous mode
[  241.803164][T18478] pim6reg1: entered allmulticast mode
[  241.947595][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'.
[  241.986030][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'.
[  242.019262][T18491] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  242.072303][T18494] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  242.075320][T18494] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  242.277589][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3584'.
[  242.281877][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3584'.
[  242.287101][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3584'.
[  242.289820][T18509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3584'.
[  242.330917][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[  242.366677][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3583'.
[  242.555824][T18538] tipc: Resetting bearer <eth:syzkaller0>
[  242.790572][T18565] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.842103][T18567] tipc: Resetting bearer <eth:syzkaller0>
[  243.256639][T18596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.290405][T18603] openvswitch: netlink: Key type 251 is out of range max 32
[  243.300310][T18603] bond0: entered promiscuous mode
[  243.303161][T18603] batadv0: entered promiscuous mode
[  243.305841][T18603] batadv0: left promiscuous mode
[  243.307833][T18603] bond0: left promiscuous mode
[  243.627784][T18626] C: renamed from lo
[  243.636948][T18626] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  243.894161][T18646] veth13: entered promiscuous mode
[  244.048809][T18662] x_tables: duplicate underflow at hook 1
[  244.493423][T18691] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  244.663190][T18704] xt_recent: Unsupported userspace flags (00000048)
[  244.752496][T18709] bond74 (unregistering): Released all slaves
[  244.889146][T18714] can: request_module (can-proto-4) failed.
[  244.935722][T18722] netlink: 'syz.2.3639': attribute type 12 has an invalid length.
[  245.134792][T18743] openvswitch: netlink: Duplicate or invalid key (type 0).
[  245.139289][T18743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.279755][T18760] ipt_REJECT: ECHOREPLY no longer supported.
[  245.316890][T18760] ipt_REJECT: ECHOREPLY no longer supported.
[  245.407131][T18767] bond74 (unregistering): Released all slaves
[  245.604864][T18780] netlink: 'syz.2.3656': attribute type 10 has an invalid length.
[  245.959140][T18784] bridge0: failed insert local address into bridge forwarding table
[  245.975193][T18784] veth1: entered promiscuous mode
[  246.151970][T18789] lo speed is unknown, defaulting to 1000
[  246.207517][T18804] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  246.494877][T18832] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.501768][T18832] tipc: Resetting bearer <eth:syzkaller0>
[  246.601808][T18837] lo speed is unknown, defaulting to 1000
[  246.637401][T18839] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  246.844486][T18856] __nla_validate_parse: 66 callbacks suppressed
[  246.844501][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3670'.
[  246.860900][T18856] openvswitch: netlink: Flow actions attr not present in new flow.
[  247.106854][T18865] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3671'.
[  247.115431][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'.
[  247.289044][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  247.292912][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  247.350499][T18883] netlink: 'syz.0.3674': attribute type 1 has an invalid length.
[  247.505124][T18898] bridge0: failed insert local address into bridge forwarding table
[  247.542575][T18902] netlink: 'syz.2.3678': attribute type 1 has an invalid length.
[  247.565496][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  247.565792][T18902] bond97: entered promiscuous mode
[  247.577687][T18902] 8021q: adding VLAN 0 to HW filter on device bond97
[  247.631433][T18902] bond97: (slave bridge0): making interface the new active one
[  247.634762][T18902] bridge0: entered promiscuous mode
[  247.637803][T18902] bond97: (slave bridge0): Enslaving as an active interface with an up link
[  247.663093][T18910] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3682'.
[  247.721271][T18912] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3682'.
[  247.789620][T18915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.844272][T18923] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  247.930520][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3688'.
[  247.935039][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3688'.
[  248.099871][T18951] netlink: 'syz.0.3691': attribute type 14 has an invalid length.
[  248.102507][T18951] netlink: 'syz.0.3691': attribute type 13 has an invalid length.
[  248.172236][T18955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.180110][T18955] syzkaller0: entered promiscuous mode
[  248.188685][T18955] syzkaller0: entered allmulticast mode
[  248.216235][T18955] tipc: Resetting bearer <eth:syzkaller0>
[  248.248936][T18955] tipc: Disabling bearer <eth:syzkaller0>
[  248.286407][T18971] tipc: Resetting bearer <eth:syzkaller0>
[  248.392685][T18978] bridge17: the hash_elasticity option has been deprecated and is always 16
[  248.440219][T18986] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  248.449835][T18986] macsec4: entered allmulticast mode
[  248.451957][T18986] macvlan0: entered allmulticast mode
[  248.461798][T18986] macvlan0: left allmulticast mode
[  248.729985][T17064] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  248.976314][T19039] netlink: 'syz.0.3708': attribute type 10 has an invalid length.
[  249.110536][T19046] netlink: 'syz.2.3712': attribute type 1 has an invalid length.
[  249.627718][T19072] lo speed is unknown, defaulting to 1000
[  249.691643][T19071] sctp: [Deprecated]: syz.0.3715 (pid 19071) Use of int in maxseg socket option.
[  249.691643][T19071] Use struct sctp_assoc_value instead
[  249.691986][T19079] lo speed is unknown, defaulting to 1000
[  249.865683][T19087] 8021q: adding VLAN 0 to HW filter on device bond99
[  249.869954][T19087] bond0: (slave bond99): Enslaving as an active interface with a down link
[  250.796534][T19148] bond100 (unregistering): Released all slaves
[  250.896472][T19158] lo speed is unknown, defaulting to 1000
[  250.937828][T19162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.961794][T19162] tipc: Resetting bearer <eth:syzkaller0>
[  251.051227][T19170] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  251.110853][T19175] lo speed is unknown, defaulting to 1000
[  251.215452][T19175] netlink: 'syz.1.3734': attribute type 12 has an invalid length.
[  251.422152][T19186] netlink: 'syz.2.3736': attribute type 10 has an invalid length.
[  251.871108][T19194] __nla_validate_parse: 54 callbacks suppressed
[  251.871124][T19194] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3738'.
[  251.921730][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'.
[  252.141021][T19209] netlink: 'syz.0.3742': attribute type 83 has an invalid length.
[  252.301010][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3745'.
[  252.353128][T19226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.363007][T19226] syzkaller0: entered promiscuous mode
[  252.364874][T19226] syzkaller0: entered allmulticast mode
[  252.373028][T19222] lo speed is unknown, defaulting to 1000
[  252.423296][T19226] tipc: Resetting bearer <eth:syzkaller0>
[  252.450357][T19225] tipc: Resetting bearer <eth:syzkaller0>
[  252.462990][T19225] tipc: Disabling bearer <eth:syzkaller0>
[  252.471427][T19229] lo speed is unknown, defaulting to 1000
[  252.579947][T19237] netlink: 'syz.1.3750': attribute type 10 has an invalid length.
[  252.583211][T19237] dummy0: left allmulticast mode
[  252.586203][T19237] team0: Device dummy0 failed to register rx_handler
[  252.664252][T19240] netlink: 'syz.0.3751': attribute type 12 has an invalid length.
[  252.767455][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'.
[  252.912855][T19251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.229200][T19265] netlink: 'syz.0.3756': attribute type 10 has an invalid length.
[  253.566809][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'.
[  253.660046][T19274] netlink: 'syz.1.3760': attribute type 1 has an invalid length.
[  253.688615][T19274] wireguard0: entered promiscuous mode
[  253.690460][T19274] wireguard0: entered allmulticast mode
[  253.723534][T19279] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3760'.
[  253.791677][T19277] bond75 (unregistering): Released all slaves
[  253.806727][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3762'.
[  253.858824][T19287] netlink: 'syz.1.3763': attribute type 25 has an invalid length.
[  253.902038][T19290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3764'.
[  253.913418][T19290] veth13: entered promiscuous mode
[  253.921884][T19287] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3763'.
[  254.035097][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'.
[  254.132498][T19307] netlink: 'syz.0.3770': attribute type 10 has an invalid length.
[  254.296831][T19317] netlink: 'syz.0.3772': attribute type 25 has an invalid length.
[  254.562149][T19337] netlink: 'syz.0.3778': attribute type 1 has an invalid length.
[  254.592812][T19337] 8021q: adding VLAN 0 to HW filter on device bond75
[  254.630515][T19338] bond75: (slave bridge18): making interface the new active one
[  254.633890][T19338] bond75: (slave bridge18): Enslaving as an active interface with an up link
[  254.660444][T19337] bond75: (slave bridge19): Enslaving as an active interface with a down link
[  254.673571][T19337] gretap3: entered promiscuous mode
[  254.677469][T19337] bond75: (slave gretap3): Enslaving as an active interface with an up link
[  254.701511][T19337] macvlan1: entered promiscuous mode
[  254.703274][T19337] macvlan1: entered allmulticast mode
[  254.708628][T19337] bond75: entered promiscuous mode
[  254.710362][T19337] bridge18: entered promiscuous mode
[  254.712480][T19337] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  254.714956][T19337] bond75: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  254.724098][T19337] bond75: left promiscuous mode
[  254.725858][T19337] bridge18: left promiscuous mode
[  254.754765][T19338] macvlan1: entered promiscuous mode
[  254.757569][T19338] macvlan1: entered allmulticast mode
[  254.764124][T19338] bond75: entered promiscuous mode
[  254.766455][T19338] bridge18: entered promiscuous mode
[  254.770148][T19338] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  254.773852][T19338] bond75: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  254.785075][T19338] bond75: left promiscuous mode
[  254.788812][T19338] bridge18: left promiscuous mode
[  254.896323][T19353] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  254.941690][T19359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.019316][T19363] trusted_key: syz.1.3785 sent an empty control message without MSG_MORE.
[  255.164946][T19373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.170305][T19373] syzkaller0: entered promiscuous mode
[  255.172202][T19373] syzkaller0: entered allmulticast mode
[  255.181416][T19373] ip6gre0: mtu less than device minimum
[  255.186017][T19372] tipc: Resetting bearer <eth:syzkaller0>
[  255.196663][T19372] tipc: Disabling bearer <eth:syzkaller0>
[  255.911177][T19396] netlink: 'syz.0.3795': attribute type 1 has an invalid length.
[  255.927885][T19396] 8021q: adding VLAN 0 to HW filter on device bond76
[  255.946967][T19396] 8021q: adding VLAN 0 to HW filter on device bond76
[  255.949868][T19396] bond76: (slave vxcan1): The slave device specified does not support setting the MAC address
[  255.953999][T19396] bond76: (slave vxcan1): Error -95 calling set_mac_address
[  256.104080][T19400] lo speed is unknown, defaulting to 1000
[  256.245743][T19406] 8021q: adding VLAN 0 to HW filter on device bond98
[  256.250092][T19406] bond98: entered promiscuous mode
[  256.252734][T19406] team0: Port device bond98 added
[  256.593108][T19437] bond77 (unregistering): Released all slaves
[  256.959397][T19469] __nla_validate_parse: 16 callbacks suppressed
[  256.959409][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'.
[  256.974771][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3814'.
[  256.984035][T19471] pim6reg: left allmulticast mode
[  256.986320][T19471] bridge0: left allmulticast mode
[  257.172969][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'.
[  257.344932][T19484] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  257.500912][T19491] bond91: left promiscuous mode
[  257.505330][T19491] team0: Port device bond91 removed
[  257.507560][T19491] bond92: left promiscuous mode
[  257.510812][T19491] team0: Port device bond92 removed
[  257.513046][T19491] bond95: left promiscuous mode
[  257.516183][T19491] team0: Port device bond95 removed
[  257.519619][T19491] bond96: left promiscuous mode
[  257.527914][T19491] team0: Port device bond96 removed
[  257.532125][T19491] bond97: left promiscuous mode
[  257.535111][T19491] team0: Port device bond97 removed
[  257.537803][T19491] bond98: left promiscuous mode
[  257.541654][T19491] team0: Port device bond98 removed
[  257.570365][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3822'.
[  257.579881][T19493] tun0: tun_chr_ioctl cmd 1074025677
[  257.581769][T19493] tun0: linktype set to 778
[  257.680880][T19495] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3823'.
[  257.696794][T19495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3823'.
[  257.836877][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'.
[  257.921035][T19516] xfrm0: entered allmulticast mode
[  257.931883][T19510] lo speed is unknown, defaulting to 1000
[  257.971690][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3830'.
[  258.015420][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'.
[  258.032021][T19522] bond77 (unregistering): Released all slaves
[  258.130557][T19530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3832'.
[  258.279896][T19534] 8021q: adding VLAN 0 to HW filter on device bond100
[  258.291743][T19534] 8021q: adding VLAN 0 to HW filter on device bond100
[  258.294259][T19534] bond100: (slave vti2): The slave device specified does not support setting the MAC address
[  258.297861][T19534] bond100: (slave vti2): Error -95 calling set_mac_address
[  258.319222][T19535] bond100: (slave vti2): The slave device specified does not support setting the MAC address
[  258.322604][T19535] bond100: (slave vti2): Error -95 calling set_mac_address
[  258.388436][T19540] netlink: 'syz.0.3834': attribute type 2 has an invalid length.
[  258.480513][   T61] block nbd0: Possible stuck request ffff888022818000: control (read@0,1024B). Runtime 180 seconds
[  258.483951][   T61] block nbd0: Possible stuck request ffff888022818200: control (read@1024,1024B). Runtime 180 seconds
[  258.487443][   T61] block nbd0: Possible stuck request ffff888022818400: control (read@2048,1024B). Runtime 180 seconds
[  258.491210][   T61] block nbd0: Possible stuck request ffff888022818600: control (read@3072,1024B). Runtime 180 seconds
[  258.605997][T19545] wireguard0: entered promiscuous mode
[  258.607774][T19545] wireguard0: entered allmulticast mode
[  258.705561][T19554] tap0: tun_chr_ioctl cmd 1074025677
[  258.707979][T19554] tap0: linktype set to 776
[  258.767902][T19560] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode
[  258.774053][T19560] bond97: (slave bridge0): Releasing backup interface
[  258.776395][T19560] bridge0: left promiscuous mode
[  258.781492][T19560] bond0: (slave bond99): Releasing active interface
[  258.786833][T19560] netlink: 'syz.2.3842': attribute type 10 has an invalid length.
[  258.791652][T19560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  258.794852][T19560] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  258.953593][T19566] netlink: 'syz.0.3843': attribute type 1 has an invalid length.
[  259.076559][T19569] bond77: entered promiscuous mode
[  259.079825][T19569] 8021q: adding VLAN 0 to HW filter on device bond77
[  259.181690][T19573] bond78 (unregistering): Released all slaves
[  259.343590][T19581] bond78: entered promiscuous mode
[  259.345920][T19581] bond78: entered allmulticast mode
[  259.350702][T19581] 8021q: adding VLAN 0 to HW filter on device bond78
[  259.678722][T19602] netlink: 'syz.1.3851': attribute type 11 has an invalid length.
[  259.685620][T19602] ip6gretap0: entered promiscuous mode
[  259.764852][T19613] netlink: 'syz.1.3853': attribute type 10 has an invalid length.
[  260.073806][T19629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  260.130707][T19633] vlan2: entered promiscuous mode
[  260.132467][T19633] vlan2: entered allmulticast mode
[  260.134070][T19633] bridge0: entered allmulticast mode
[  260.384792][T19650] IPVS: length: 4096 != 8
[  260.705041][T19682] netlink: 'syz.1.3872': attribute type 10 has an invalid length.
[  260.721194][T19682] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  260.972681][T19701] lo speed is unknown, defaulting to 1000
[  261.070699][T19701] netlink: 'syz.2.3878': attribute type 12 has an invalid length.
[  264.925482][ T5276] udevd[5276]: worker [6118] /devices/virtual/block/nbd0 timeout; kill it
[  264.929523][ T5276] udevd[5276]: seq 12481 '/devices/virtual/block/nbd0' killed
[  281.091421][T19760] netlink: 'syz.1.3883': attribute type 9 has an invalid length.
[  281.094073][T19753] __nla_validate_parse: 24 callbacks suppressed
[  281.094081][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3882'.
[  281.094952][T19760] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3883'.
[  281.096188][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3882'.
[  281.101581][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3883'.
[  281.102830][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3882'.
[  281.112754][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3882'.
[  281.115845][T19753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3882'.
[  281.157578][T19757] netlink: 'syz.2.3884': attribute type 21 has an invalid length.
[  281.160926][T19757] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3884'.
[  281.163873][T19757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3884'.
[  281.343978][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'.
[  281.359754][T19771] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20001
[  281.362115][T19773] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20001
[  281.567718][T19795] bond101 (unregistering): Released all slaves
[  281.590298][T19798] bond0: entered promiscuous mode
[  281.593484][T19798] batadv0: entered promiscuous mode
[  281.596852][T19798] batadv0: left promiscuous mode
[  281.599976][T19798] bond0: left promiscuous mode
[  281.823925][T19812] netlink: 'syz.0.3899': attribute type 1 has an invalid length.
[  281.938893][T19821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.978853][T19815] netlink: 'syz.2.3900': attribute type 10 has an invalid length.
[  282.008971][T19825] 8021q: adding VLAN 0 to HW filter on device bond99
[  282.011964][T19825] bond99: entered promiscuous mode
[  282.022564][T19825] team0: Port device bond99 added
[  282.073113][T19837] batadv_slave_0: left promiscuous mode
[  282.075770][T19837] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  282.082325][T19837] mac80211_hwsim hwsim30 wlan1: left allmulticast mode
[  282.087589][T19837] tipc: Resetting bearer <eth:syzkaller0>
[  282.096286][T19837] syzkaller0: left promiscuous mode
[  282.100604][T19837] syzkaller0: left allmulticast mode
[  282.103456][T19837] xfrm1: left allmulticast mode
[  282.105246][T19837] macsec2: left promiscuous mode
[  282.106920][T19837] macsec2: left allmulticast mode
[  282.109594][T19837] bridge10: left allmulticast mode
[  282.111730][T19837] bridge11: left allmulticast mode
[  282.113645][T19837] bond56: left promiscuous mode
[  282.116359][T19837] bond64: left promiscuous mode
[  282.120034][T19837] wireguard0: left promiscuous mode
[  282.122279][T19837] wireguard0: left allmulticast mode
[  282.124260][T19837] bond65: left promiscuous mode
[  282.126042][T19837] wireguard1: left promiscuous mode
[  282.127797][T19837] wireguard1: left allmulticast mode
[  282.130792][T19837] macsec3: left allmulticast mode
[  282.133808][T19837] veth9: left promiscuous mode
[  282.136467][T19837] bond70: left promiscuous mode
[  282.138581][T19837] bridge13: left promiscuous mode
[  282.140701][T19837] bond70: left allmulticast mode
[  282.142764][T19837] bridge13: left allmulticast mode
[  282.145165][T19837] veth11: left promiscuous mode
[  282.147372][T19837] bond72: left promiscuous mode
[  282.149600][T19837] bridge14: left promiscuous mode
[  282.151853][T19837] bond72: left allmulticast mode
[  282.153814][T19837] bridge14: left allmulticast mode
[  282.156438][T19837] veth13: left promiscuous mode
[  282.166952][T19837] gretap3: left promiscuous mode
[  282.170140][T19837] bond77: left promiscuous mode
[  282.178752][T19837] bond78: left promiscuous mode
[  282.180695][T19837] bond78: left allmulticast mode
[  282.366530][T19853] bond101 (unregistering): Released all slaves
[  282.444648][T19858] netlink: 'syz.2.3913': attribute type 2 has an invalid length.
[  282.578699][T19862] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  282.581591][T19862] tipc: Resetting bearer <eth:syzkaller0>
[  282.608447][T19865] IPv6: NLM_F_CREATE should be specified when creating new route
[  282.730984][T19869] netlink: 'syz.2.3918': attribute type 21 has an invalid length.
[  282.867382][T19873] bond101 (unregistering): Released all slaves
[  283.085833][T19887] lo speed is unknown, defaulting to 1000
[  283.312346][T19903] netlink: 'syz.2.3925': attribute type 21 has an invalid length.
[  283.427592][T19907] lo speed is unknown, defaulting to 1000
[  285.048132][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  285.264453][T19916] workqueue: Failed to create a rescuer kthread for wq "bond79": -EINTR
[  285.296931][T19928] netlink: 'syz.2.3931': attribute type 10 has an invalid length.
[  285.302598][T19928] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  285.326209][T19924] netlink: 'syz.0.3930': attribute type 9 has an invalid length.
[  285.605345][T19954] lo speed is unknown, defaulting to 1000
[  285.649075][T19953] 8021q: adding VLAN 0 to HW filter on device bond100
[  285.652706][T19953] bond100: entered promiscuous mode
[  285.655774][T19953] team0: Port device bond100 added
[  285.721405][T19964] No such timeout policy "syz0"
[  285.727597][T19968] lo speed is unknown, defaulting to 1000
[  301.009954][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.013994][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.017245][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.021473][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.024191][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.339824][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.344221][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.349110][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.352655][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.356014][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.390572][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.395335][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.399534][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.403159][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.406614][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.038568][ T5829] Bluetooth: hci3: command tx timeout
[  303.438443][ T5829] Bluetooth: hci5: command tx timeout
[  303.440740][ T5829] Bluetooth: hci4: command tx timeout
[  305.118293][   T55] Bluetooth: hci3: command tx timeout
[  305.518586][   T55] Bluetooth: hci4: command tx timeout
[  305.520943][   T55] Bluetooth: hci5: command tx timeout
[  307.198672][ T5829] Bluetooth: hci3: command tx timeout
[  307.598580][ T5829] Bluetooth: hci5: command tx timeout
[  307.600848][ T5829] Bluetooth: hci4: command tx timeout
[  309.278536][   T55] Bluetooth: hci3: command tx timeout
[  309.678570][   T55] Bluetooth: hci4: command tx timeout
[  309.680944][   T55] Bluetooth: hci5: command tx timeout
[  362.021907][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.026707][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.030927][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.034913][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.038686][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.241679][ T5217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.245750][ T5217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.249530][ T5217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.252925][ T5217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.255646][ T5217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.413565][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  362.417475][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  362.421036][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  362.423948][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  362.426906][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  390.728025][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  390.730275][    C0] rcu: 	0-...!: (10501 ticks this GP) idle=259c/1/0x4000000000000000 softirq=93879/93879 fqs=0
[  390.735375][    C0] rcu: 	(t=10501 jiffies g=60193 q=1482 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  390.737549][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g60193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  390.741652][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=18220
[  390.744100][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g60193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  390.747735][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  390.751175][    C0] rcu: RCU grace-period kthread stack dump:
[  390.753133][    C0] task:rcu_preempt     state:I stack:26784 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  390.757003][    C0] Call Trace:
[  390.758130][    C0]  <TASK>
[  390.759126][    C0]  __schedule+0x16f5/0x4d00
[  390.760618][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  390.762258][    C0]  ? schedule+0x165/0x360
[  390.763726][    C0]  ? __lock_acquire+0xab9/0xd20
[  390.765344][    C0]  ? __pfx___schedule+0x10/0x10
[  390.766999][    C0]  ? schedule+0x91/0x360
[  390.768372][    C0]  schedule+0x165/0x360
[  390.769715][    C0]  schedule_timeout+0x12b/0x270
[  390.771280][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  390.772981][    C0]  ? __pfx_process_timeout+0x10/0x10
[  390.774738][    C0]  ? prepare_to_swait_event+0x341/0x380
[  390.776583][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  390.778200][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  390.779870][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.781605][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  390.783352][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  390.785026][    C0]  ? finish_swait+0xcd/0x1f0
[  390.786599][    C0]  rcu_gp_kthread+0x99/0x390
[  390.788131][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  390.789880][    C0]  ? __kthread_parkme+0x7b/0x200
[  390.791538][    C0]  ? __kthread_parkme+0x1a1/0x200
[  390.793209][    C0]  kthread+0x711/0x8a0
[  390.794602][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  390.796314][    C0]  ? __pfx_kthread+0x10/0x10
[  390.797879][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.799629][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.801341][    C0]  ? __pfx_kthread+0x10/0x10
[  390.802910][    C0]  ret_from_fork+0x3fc/0x770
[  390.804476][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  390.806172][    C0]  ? __switch_to_asm+0x39/0x70
[  390.807788][    C0]  ? __switch_to_asm+0x33/0x70
[  390.809382][    C0]  ? __pfx_kthread+0x10/0x10
[  390.810952][    C0]  ret_from_fork_asm+0x1a/0x30
[  390.812568][    C0]  </TASK>
[  390.813639][    C0] CPU: 0 UID: 0 PID: 19964 Comm: syz.1.3940 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  390.813649][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.813653][    C0] RIP: 0010:lock_is_held_type+0x137/0x190
[  390.813665][    C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 19 13 31 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  390.813672][    C0] RSP: 0018:ffffc90002faef08 EFLAGS: 00000206
[  390.813679][    C0] RAX: 81d5f7b94f3d7a00 RBX: 0000000000000001 RCX: 81d5f7b94f3d7a00
[  390.813684][    C0] RDX: ffff88803f8b0000 RSI: ffffffff8db8661b RDI: ffffffff8be29dc0
[  390.813689][    C0] RBP: 00000000ffffffff R08: ffff88803f8b0000 R09: 0000000000000002
[  390.813693][    C0] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000246
[  390.813697][    C0] R13: ffff88803f8b0000 R14: ffffffff8e13f160 R15: 0000000000000002
[  390.813701][    C0] FS:  00007fb79c95b6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  390.813707][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.813711][    C0] CR2: 0000000000000000 CR3: 000000003a9fa000 CR4: 00000000000006f0
[  390.813736][    C0] Call Trace:
[  390.813741][    C0]  <TASK>
[  390.813746][    C0]  qdisc_lookup_rcu+0x32b/0x6d0
[  390.813759][    C0]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  390.813769][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  390.813780][    C0]  fq_codel_change+0xa96/0xef0
[  390.813788][    C0]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  390.813803][    C0]  ? __pfx_fq_codel_change+0x10/0x10
[  390.813810][    C0]  ? __sock_sendmsg+0x21c/0x270
[  390.813822][    C0]  fq_codel_init+0x355/0x960
[  390.813829][    C0]  ? lockdep_rtnl_is_held+0x26/0x40
[  390.813839][    C0]  ? __pfx_fq_codel_init+0x10/0x10
[  390.813847][    C0]  qdisc_create+0x7ac/0xea0
[  390.813857][    C0]  tc_modify_qdisc+0x1538/0x20e0
[  390.813863][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  390.813875][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  390.813891][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  390.813896][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  390.813905][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  390.813911][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  390.813924][    C0]  netlink_rcv_skb+0x208/0x470
[  390.813932][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  390.813939][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  390.813951][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  390.813958][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  390.813968][    C0]  netlink_unicast+0x75c/0x8e0
[  390.813978][    C0]  netlink_sendmsg+0x805/0xb30
[  390.813989][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.813998][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  390.814009][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  390.814018][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.814026][    C0]  __sock_sendmsg+0x21c/0x270
[  390.814033][    C0]  ____sys_sendmsg+0x52d/0x830
[  390.814044][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  390.814055][    C0]  ? import_iovec+0x74/0xa0
[  390.814065][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  390.814073][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  390.814093][    C0]  ? __fget_files+0x2a/0x420
[  390.814102][    C0]  ? __fget_files+0x3a0/0x420
[  390.814118][    C0]  __sys_sendmmsg+0x227/0x430
[  390.814128][    C0]  ? __pfx___sys_sendmmsg+0x10/0x10
[  390.814136][    C0]  ? do_futex+0x333/0x420
[  390.814154][    C0]  ? __pfx___se_sys_futex+0x10/0x10
[  390.814162][    C0]  ? fd_install+0x30d/0x540
[  390.814173][    C0]  __x64_sys_sendmmsg+0xa0/0xc0
[  390.814182][    C0]  do_syscall_64+0xfa/0x3b0
[  390.814188][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.814198][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.814204][    C0]  ? exc_page_fault+0x9f/0xf0
[  390.814214][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.814221][    C0] RIP: 0033:0x7fb79bb8e929
[  390.814229][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.814235][    C0] RSP: 002b:00007fb79c95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  390.814242][    C0] RAX: ffffffffffffffda RBX: 00007fb79bdb5fa0 RCX: 00007fb79bb8e929
[  390.814247][    C0] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d
[  390.814251][    C0] RBP: 00007fb79bc10b39 R08: 0000000000000000 R09: 0000000000000000
[  390.814255][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  390.814259][    C0] R13: 0000000000000000 R14: 00007fb79bdb5fa0 R15: 00007fff74fb8da8
[  390.814269][    C0]  </TASK>

VM DIAGNOSIS:
15:26:49  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe970 RSP=ffffc90000007390
R8 =ffff8880214e0237 R9 =1ffff1100429c046 R10=dffffc0000000000 R11=ffffffff854786b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478727 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb79c95b6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003a9fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0073657479625f6e 695f65676173752e
XMM02=000000000000a1bf 00000000fff81a7b XMM03=00000008000002b7 fffffff800000107
XMM04=9500000071000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 0025702020000001
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9008c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000009 RCX=0000000000000009 RDX=0000000000000008
RSI=ffff88801f0e6158 RDI=ffff88801f0e5640 RBP=0000000000000200 RSP=ffffc90002f7ec30
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc90002f7eeb8 R11=ffffffff81ad03a0
R12=0000000000000004 R13=0000000000000001 R14=ffff88801f0e6158 R15=ffff88801f0e6178
RIP=ffffffff819e6e7c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7e1aae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7e19f856a3 00007f7e19f856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=0000000000000000 000000000000003f XMM07=0000000000000000 000001ffffffffff
XMM08=ffffffc5080ea403 5004000e0000003e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
