last executing test programs:

2.79859056s ago: executing program 1 (id=730):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x4000804) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x54, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x54}}, 0x24044800) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x50) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509040004000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f0ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x5e}]}, 0x10) (async)
splice(r7, 0x0, r7, 0x0, 0x8000f28, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

2.731001319s ago: executing program 1 (id=731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1c8, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x170, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c06d}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r11 = socket(0x10, 0x803, 0x0)
sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12, 0x21eae}}, 0x20}}, 0x0)

2.59071568s ago: executing program 1 (id=733):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0)
r6 = getpid()
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.134401643s ago: executing program 1 (id=736):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0)

2.133405186s ago: executing program 1 (id=738):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}]}]}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
close(0x3)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0xff}}, 0x18, &(0x7f0000000180)={&(0x7f0000000240)="1cec427529347339e690e74dc0a61fb5929f1514a022a1911a80fca16458acb7382b95fb93efbb982965e3cc60eeb46d9552c90e069913aacbe4f8e8b6c15d01e5abe9465605b900434ce20f764e548e9f3ed0f17d34290ebc7b5c8efc878114b42b33e70dc376c5dc812a3c", 0x6c}}, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0)

1.971222098s ago: executing program 2 (id=739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000300", @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="030303030311000000000000"], 0x28}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r10 = accept(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000080)=0x6)
setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r10}, 0x20)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000002100000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000200000000000000000000000000000000000000cd32884384018db216967c31d71933ae92731899c70da3e6d84f"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x58d3}, @jmp={0x5, 0x1, 0x8, 0x8, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ldst={0x1, 0x1, 0x1, 0x3, 0x8, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x59, &(0x7f0000000540)=""/89, 0x41100, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r9, r11, r12, r8], &(0x7f0000000940)=[{0x5, 0x4, 0x8}, {0x1, 0x2, 0x0, 0x7}, {0x2, 0x2, 0x1, 0x6}, {0x2, 0x2, 0xf, 0x5}, {0x5, 0x4, 0xc, 0x4}], 0x10, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r13=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r13, @ANYBLOB="ae1e027616540381"], 0x20}}, 0x0)

1.970013437s ago: executing program 1 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r13=>0x0) (rerun: 64)
sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf251300000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="500113800c009ce1050001002600000050000080090001003a217d860073797a6b616c6c6572300000070001b27a9f3db19bcafdcc5b67e830ff2592005d242c00110001001100010024405b2d257e2e2aa63a2b257b000000580006000000000000002c2909000100544950430000000007000100667100000a0001006e6574656d00000008000100242d2424110001002f6465762f0001002900000005080001001c2f29291c00008005000100140000000f00010073797a6b616c6c65723000006c000080080001002d2f2e5e0a0001006e6574656d00003fce67d7e30409000100544950430000000009000100544950430049b24ee1bfe68a0b0000000f00010073797a6b616c6c6572300000110001002f6465762f6e65742f74756e000000000f00010073797a6b616c6c657230000008000100399bfa2a4de52e33ca273097d0b7bab6c2bb561ff4778689d2517e8ffcbbec0bb35dc8f860050bfd90419e68b80a16392d0566c5b84e5926c516d2fccecc139778929843fc11dac5c802c733d792928f610158214b15b4ce98c0de4fe739d991adb742f1"], 0x174}, 0x1, 0x0, 0x0, 0x9}, 0x4000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r14) (async)
r15 = socket$unix(0x1, 0x1, 0x0) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
r17 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r17, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x1, 0x80000000, 0x0, 0x40, 0xc7, 0x3, 0x9, 0x8}}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r18=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r18, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x38}}, 0x4008000)

1.847374756s ago: executing program 2 (id=741):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x29, 0x0, 0x0)
r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=0x60, 0xc0800)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r2, r3})
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.771563254s ago: executing program 2 (id=742):
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000740)=0x2, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8002}, 0x4)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@xdp, 0x80, 0x0}, 0x2000)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f00000029c0)={&(0x7f0000002540)=@qipcrtr, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002780)=""/145, 0x91}], 0x1}, 0x40010020)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "6b994ea2e3dafa6f"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x46, 0x1, 0x65, 0x1, 0x0, "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", 0x3, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07b433fa40000f00bbf74c21000005000000", @ANYRES32=r7], 0x2c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003"], 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r9, 0x107, 0xa, 0x0, &(0x7f00000004c0))
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})

1.210375481s ago: executing program 0 (id=747):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)

1.141516773s ago: executing program 0 (id=748):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}, {&(0x7f00000000c0)="218aa6b7", 0x4}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900090000006900000006001000c9030000050029000c000000"], 0x38}}, 0x140000c5)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x28, r12, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3b1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe25}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9fe}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf48}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008000)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88888220100140012800b0001006970766c616e00000400028008000500c18d9bc527442b62f1aef4b020b0f295da133292e3bbe204cb5f88680a61d8464875e44b85c809563cd0fc", @ANYRES32=r13, @ANYBLOB], 0x3c}}, 0x0)
r14 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYBLOB="e675bb8b46406e0e9f85860bee5e9b6a0b7f55a051c3ca0a572e7323a4ad6934a7438350e86b555d746ebe1ce0a0d7fbb18f7700c2a9e0fe9bc7e6734a713dfa1dddc12545cbb33fa29cb74f016f45647e2e481734740ba4ea87ce64ac768bdc2666c90b7ef381381d274313b8ad49fce8f8145ae09494176dd0fddc92053c14349357c0240ca10a270e10dc31ff0e49dd9433106d56a597fbdcfe5f4a26a9b3040563b71f22438d60a5d098457092bd4c7c52107f80e14d6e88e9351d4079af5b2e3aeae92b4a53963f1c7391bc060112811a02b119934fae82b91ca076"], 0x5c}}, 0x40)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000001c0)={<r15=>0x0, 0x3, '/9#'}, &(0x7f0000000240)=0xb)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={r15, 0x42}, 0x8)

991.413191ms ago: executing program 0 (id=749):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
socket$inet(0xa, 0x801, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x0, 0xfffffffc, 0x8a}, 0x9c)
socket$netlink(0x10, 0x3, 0xe)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48820)
sendmmsg$inet(r0, &(0x7f0000002b00), 0x0, 0xc4)
r8 = accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000640)={<r9=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000000)=0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={r9, 0x4}, 0x8)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)

908.222142ms ago: executing program 2 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r1=>0x0}) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/73, 0x49}], 0x7, &(0x7f0000000840)=""/4096, 0x1000}, 0xffffb9e0}], 0x1, 0x10100, &(0x7f0000000280)) (async)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x4, {0x0, 0xf0}}, 0x18) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r4, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x100}], 0xa}}], 0x46, 0x20000040)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

841.41678ms ago: executing program 2 (id=751):
pwrite64(0xffffffffffffffff, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000651515bf1ee92be363"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca234e0f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf250400000018000180140002006970766c616e3100000000000000000075d130fca503f6847d388e09f5dcf3bf7eae02b0ba7a007c74f8f0aa9d38b8ea95a716bb087b24879e374bb90455ebfc32a5d6a2c822b3a7e96d0d49188bddd49da3f511ddd1088154f1a88f9da452fd4c4303f9f274481e9d4da01c5019a04e163a"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)

120.780658ms ago: executing program 0 (id=752):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x208, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b8, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x54b}]}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r2=>0x0, 0x2b, 0x0, 0x10, 0x8, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0xffffff7f, 0x80000001}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', <r3=>0x0, 0x4, 0xf9, 0x6, 0xa2d, 0x8, @empty, @rand_addr=' \x01\x00', 0x80, 0x8740, 0x81, 0x8}})
sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@mpls_delroute={0x60, 0x19, 0x10, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x80, 0x80, 0x7, 0x0, 0x2, 0xfe, 0x4, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x14, 0x5, r2}}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xff}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x8, 0xec, r3}}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_VIA={0x14, 0x12, {0x27, "29dce7dc6716fef2ef7511e22f56"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000700)=0x4, 0x4)

120.338743ms ago: executing program 0 (id=753):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
close(0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
socket$kcm(0xa, 0x2, 0x0)
sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
accept4$inet(r0, 0x0, &(0x7f0000000000), 0x800)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a609600000f040b067c55a1bc0009003e00069906f3000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce16bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f04e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x40408c0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

561.912µs ago: executing program 0 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x17) (async)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="0600000300000000394e5db3798700000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="0600000300000000394e5db3798700000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

0s ago: executing program 2 (id=755):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0xd8a1}], 0x1c)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40588' (ED25519) to the list of known hosts.
syzkaller login: [   56.191327][ T5836] cgroup: Unknown subsys name 'net'
[   56.298353][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.305237][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.380609][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.663875][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.667941][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.670922][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.675100][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.678225][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.735653][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.740121][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.743815][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.746544][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.749851][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.753133][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.778416][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.784499][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.795086][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.798250][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.861378][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   63.982202][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.985811][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.989031][ T5852] bridge_slave_0: entered allmulticast mode
[   63.992891][ T5852] bridge_slave_0: entered promiscuous mode
[   64.002951][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.006230][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.009254][ T5852] bridge_slave_1: entered allmulticast mode
[   64.012996][ T5852] bridge_slave_1: entered promiscuous mode
[   64.054011][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.066768][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.108039][ T5852] team0: Port device team_slave_0 added
[   64.113629][ T5852] team0: Port device team_slave_1 added
[   64.141525][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.144530][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.153019][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.164813][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.167210][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.175630][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.319221][ T5852] hsr_slave_0: entered promiscuous mode
[   64.321961][ T5852] hsr_slave_1: entered promiscuous mode
[   64.352729][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.421977][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.468688][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.471462][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.474161][ T5858] bridge_slave_0: entered allmulticast mode
[   64.477084][ T5858] bridge_slave_0: entered promiscuous mode
[   64.495749][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.498264][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.500966][ T5858] bridge_slave_1: entered allmulticast mode
[   64.504501][ T5858] bridge_slave_1: entered promiscuous mode
[   64.580010][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.597737][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.628271][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.631226][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.634094][ T5857] bridge_slave_0: entered allmulticast mode
[   64.637678][ T5857] bridge_slave_0: entered promiscuous mode
[   64.642274][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.645801][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.648675][ T5857] bridge_slave_1: entered allmulticast mode
[   64.652396][ T5857] bridge_slave_1: entered promiscuous mode
[   64.668100][ T5858] team0: Port device team_slave_0 added
[   64.692240][ T5858] team0: Port device team_slave_1 added
[   64.718772][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.726308][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.756685][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.759060][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.768363][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.773235][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.779221][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.788077][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.805857][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.825739][ T5857] team0: Port device team_slave_0 added
[   64.828226][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.835611][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.841198][ T5857] team0: Port device team_slave_1 added
[   64.844560][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.940277][ T5858] hsr_slave_0: entered promiscuous mode
[   64.943626][ T5858] hsr_slave_1: entered promiscuous mode
[   64.946691][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   64.949002][ T5858] Cannot create hsr debugfs directory
[   64.951688][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.954386][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.962516][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.969670][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.972187][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.981921][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.054450][ T5857] hsr_slave_0: entered promiscuous mode
[   65.057612][ T5857] hsr_slave_1: entered promiscuous mode
[   65.060062][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   65.062239][ T5857] Cannot create hsr debugfs directory
[   65.327131][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.333813][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.341701][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.356392][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.367618][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.382206][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.422578][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.425593][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.446419][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.449197][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.458692][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.473963][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.481338][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.489205][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.622429][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.652523][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   65.662217][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.673047][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.675381][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.696076][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.700158][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.702303][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.707766][ T5855] Bluetooth: hci0: command tx timeout
[   65.725437][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.727674][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.747019][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.749238][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.785262][ T5855] Bluetooth: hci2: command tx timeout
[   65.799814][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.863917][ T5855] Bluetooth: hci1: command tx timeout
[   65.919957][ T5852] veth0_vlan: entered promiscuous mode
[   65.939305][ T5852] veth1_vlan: entered promiscuous mode
[   66.002581][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.019940][ T5852] veth0_macvtap: entered promiscuous mode
[   66.047317][ T5852] veth1_macvtap: entered promiscuous mode
[   66.052399][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.076139][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.086905][ T5857] veth0_vlan: entered promiscuous mode
[   66.098090][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.110233][ T5748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.115370][ T5748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.118888][ T5748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.122227][ T5748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.130794][ T5857] veth1_vlan: entered promiscuous mode
[   66.210573][ T5858] veth0_vlan: entered promiscuous mode
[   66.228020][ T5857] veth0_macvtap: entered promiscuous mode
[   66.246514][ T5858] veth1_vlan: entered promiscuous mode
[   66.250264][ T5857] veth1_macvtap: entered promiscuous mode
[   66.279673][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.282824][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.284411][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.325467][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.337312][ T5858] veth0_macvtap: entered promiscuous mode
[   66.342295][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.355463][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.361895][ T5858] veth1_macvtap: entered promiscuous mode
[   66.366826][ T5748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.370315][ T5748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.378954][ T5748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.394167][ T5748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.425794][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.436355][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.449201][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.472132][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.512616][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.522812][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.545958][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.618980][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.621855][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.627768][ T5918] pim6reg1: entered promiscuous mode
[   66.629450][ T5918] pim6reg1: entered allmulticast mode
[   66.648566][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.697199][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.700346][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.711903][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.719382][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.761088][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.769100][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.927134][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.930511][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.993298][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.000450][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.078201][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.084827][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.088742][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.092273][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.131108][ T5929] sctp: [Deprecated]: syz.2.5 (pid 5929) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.131108][ T5929] Use struct sctp_sack_info instead
[   67.137865][ T5929] tipc: Started in network mode
[   67.139927][ T5929] tipc: Node identity fa691745164f, cluster identity 4711
[   67.142744][ T5929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.150540][ T5929] syzkaller0: entered promiscuous mode
[   67.152734][ T5929] syzkaller0: entered allmulticast mode
[   67.160988][ T5929] tipc: Resetting bearer <eth:syzkaller0>
[   67.168791][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[   67.176165][ T5928] tipc: Disabling bearer <eth:syzkaller0>
[   67.743282][ T5940] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   67.749084][ T5939] tipc: Started in network mode
[   67.751034][ T5939] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   67.759268][ T5939] tipc: Enabled bearer <udp:syz0>, priority 10
[   67.762512][ T5941] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   67.770131][ T5941] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   67.778475][ T5940] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   67.782963][ T5940] netlink: 'syz.0.9': attribute type 10 has an invalid length.
[   67.793946][ T5855] Bluetooth: hci0: command tx timeout
[   67.796271][ T5940] team0: Device veth0_macvtap failed to register rx_handler
[   67.839312][ T5940] syz.0.9 (5940) used greatest stack depth: 19896 bytes left
[   67.859068][ T5944] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   67.864388][ T5855] Bluetooth: hci2: command tx timeout
[   67.872414][ T5945] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET)
[   67.947511][ T5855] Bluetooth: hci1: command tx timeout
[   67.968755][ T5950] netlink: 277 bytes leftover after parsing attributes in process `syz.1.13'.
[   67.993837][ T5950] Zero length message leads to an empty skb
[   68.170811][ T5961] syzkaller0: entered promiscuous mode
[   68.172982][ T5961] syzkaller0: entered allmulticast mode
[   68.181725][ T5961] netlink: 'syz.0.16': attribute type 2 has an invalid length.
[   68.186613][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   68.477468][ T5968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.523262][ T5970] _Z`Ԁ@: entered promiscuous mode
[   68.612209][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   68.680146][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'.
[   68.886909][ T5883] tipc: Node number set to 4269801488
[   68.899092][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   68.972176][ T5984] netlink: 'syz.0.23': attribute type 12 has an invalid length.
[   69.011213][ T5986] netlink: 'syz.1.24': attribute type 13 has an invalid length.
[   69.013983][ T5986] netlink: 'syz.1.24': attribute type 17 has an invalid length.
[   69.016666][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'.
[   69.084942][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.087828][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.132379][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24'.
[   69.156653][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.166771][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.196725][ T5996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.243285][ T5986] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   69.252854][ T5996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.304207][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.330653][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.335180][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.338213][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.338517][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.359979][ T5998] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[   69.506093][ T6004] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.642146][ T6009] pim6reg1: entered promiscuous mode
[   69.648004][ T6009] pim6reg1: entered allmulticast mode
[   69.663170][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.28'.
[   69.838486][ T6017] syzkaller1: entered promiscuous mode
[   69.840635][ T6017] syzkaller1: entered allmulticast mode
[   69.873845][ T5855] Bluetooth: hci0: command tx timeout
[   69.955248][ T5855] Bluetooth: hci2: command tx timeout
[   69.985864][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.023862][ T5855] Bluetooth: hci1: command tx timeout
[   70.281337][ T6026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.291041][   T10] IPVS: starting estimator thread 0...
[   70.291399][ T6026] syzkaller0: entered promiscuous mode
[   70.298052][ T6026] syzkaller0: entered allmulticast mode
[   70.334466][ T6026] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   70.372091][ T6026] tipc: Resetting bearer <eth:syzkaller0>
[   70.384674][ T6030] IPVS: using max 64 ests per chain, 153600 per kthread
[   70.395852][ T6032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.399206][ T6032] syzkaller0: entered promiscuous mode
[   70.401095][ T6032] syzkaller0: entered allmulticast mode
[   70.412829][ T6032] tipc: Resetting bearer <eth:syzkaller0>
[   70.859364][ T6053] netlink: 'syz.0.42': attribute type 2 has an invalid length.
[   70.966256][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.968803][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.019602][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.027277][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.101416][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[   71.111013][ T6024] tipc: Disabling bearer <eth:syzkaller0>
[   71.118836][ T5890] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.122481][ T5890] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.130523][ T5890] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.139582][ T5890] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.173238][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.176795][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.203022][ T6031] tipc: Resetting bearer <eth:syzkaller0>
[   71.219332][ T6031] tipc: Disabling bearer <eth:syzkaller0>
[   71.311206][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.314384][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.351902][ T6067] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   71.364428][ T6067] vlan2: entered promiscuous mode
[   71.367280][ T6067] veth0_virt_wifi: entered promiscuous mode
[   71.370041][ T6067] vlan2: entered allmulticast mode
[   71.372076][ T6067] veth0_virt_wifi: entered allmulticast mode
[   71.667352][ T6089] __nla_validate_parse: 5 callbacks suppressed
[   71.667370][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53'.
[   71.726286][ T6089] netlink: 'syz.1.53': attribute type 13 has an invalid length.
[   71.731500][ T6089] netlink: 'syz.1.53': attribute type 17 has an invalid length.
[   71.738834][ T6091] netlink: 76 bytes leftover after parsing attributes in process `syz.2.54'.
[   71.801711][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'.
[   71.818750][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.824564][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.830238][ T6089] 8021q: adding VLAN 0 to HW filter on device team0
[   71.853636][ T6089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.946146][ T5855] Bluetooth: hci0: command tx timeout
[   71.996637][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   72.038002][ T5855] Bluetooth: hci2: command tx timeout
[   72.054653][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'.
[   72.070259][ T6105] team0: Port device team_slave_1 removed
[   72.109369][ T6110] netlink: 'syz.2.57': attribute type 2 has an invalid length.
[   72.113676][ T5855] Bluetooth: hci1: command tx timeout
[   72.118192][ T6110] ave_0: entered promiscuous mode
[   72.176353][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.179412][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.184322][ T6112] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   72.190828][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.195541][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.196670][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[   72.331921][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.480151][ T6124] IPVS: length: 213 != 8
[   72.821252][ T6142] veth3: entered promiscuous mode
[   72.859764][ T6146] erspan0: entered allmulticast mode
[   73.345882][ T6150] validate_nla: 2 callbacks suppressed
[   73.345914][ T6150] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   73.501285][ T6136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.709420][ T6169] warning: `syz.0.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.949582][ T6182] nbd: must specify an index to disconnect
[   74.296872][ T6211] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.827247][ T6235] bridge1: port 1(veth3) entered blocking state
[   74.829873][ T6235] bridge1: port 1(veth3) entered disabled state
[   74.840683][ T6235] veth3: entered allmulticast mode
[   74.847306][ T6235] veth3: entered promiscuous mode
[   74.868553][ T6235] bridge1: port 2(veth0_to_bond) entered blocking state
[   74.871461][ T6235] bridge1: port 2(veth0_to_bond) entered disabled state
[   74.900964][ T6235] veth0_to_bond: entered allmulticast mode
[   74.908358][ T6235] veth0_to_bond: entered promiscuous mode
[   75.020851][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.060340][ T6248] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   75.066270][ T6248] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   75.125447][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   75.158469][   T12] bond1: (slave macvlan2): link status up again after 0 ms
[   75.187479][ T5890] bond1: (slave macvlan2): link status up again after 0 ms
[   75.198526][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.262573][ T6266] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   75.272459][ T5890] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   75.282577][ T6267] netlink: 'syz.1.85': attribute type 8 has an invalid length.
[   75.306145][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.336224][ T6271] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   75.382473][ T6275] netlink: 'syz.0.90': attribute type 2 has an invalid length.
[   75.529276][ T6272] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   75.564558][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.622875][ T6283] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.626785][ T6284] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.646690][ T6283] macvlan1: entered promiscuous mode
[   75.649638][ T6283] ipvlan0: entered promiscuous mode
[   75.652938][ T6283] ipvlan0: left promiscuous mode
[   75.665209][ T6283] macvlan1: left promiscuous mode
[   75.677072][ T6284] macvlan1: entered promiscuous mode
[   75.679516][ T6284] ipvlan0: entered promiscuous mode
[   75.684059][ T6284] ipvlan0: left promiscuous mode
[   75.687050][ T6284] macvlan1: left promiscuous mode
[   75.723887][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.771132][ T6294] bridge0: port 3(hsr_slave_0) entered blocking state
[   75.779588][ T6294] bridge0: port 3(hsr_slave_0) entered disabled state
[   75.782505][ T6294] hsr_slave_0: entered allmulticast mode
[   75.789348][ T6294] hsr_slave_0: left allmulticast mode
[   75.801703][ T6288] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[   75.854277][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.918689][ T6305] tipc: Started in network mode
[   75.920528][ T6305] tipc: Node identity 92501cc06c22, cluster identity 4711
[   75.923105][ T6305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.926363][ T6305] syzkaller0: entered promiscuous mode
[   75.929195][ T6305] syzkaller0: entered allmulticast mode
[   75.933231][ T6306] tipc: Resetting bearer <eth:syzkaller0>
[   75.939361][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   75.954347][ T6304] tipc: Disabling bearer <eth:syzkaller0>
[   75.964213][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   75.977048][ T6309] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.057453][ T6313] netlink: 'syz.1.100': attribute type 6 has an invalid length.
[   76.075465][ T6313] netlink: 'syz.1.100': attribute type 12 has an invalid length.
[   76.203962][ T6326] vlan3: entered promiscuous mode
[   76.206134][ T6326] gretap0: entered promiscuous mode
[   76.384332][ T6333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.390176][ T6332] tipc: Resetting bearer <eth:syzkaller0>
[   77.126634][ T6332] tipc: Disabling bearer <eth:syzkaller0>
[   77.387178][ T6359] netlink: 'syz.0.113': attribute type 8 has an invalid length.
[   77.403841][ T6360] netlink: 'syz.0.113': attribute type 8 has an invalid length.
[   78.695306][ T6379] veth3: entered allmulticast mode
[   78.715418][ T6380] bridge3: entered promiscuous mode
[   78.718413][ T6380] bridge3: entered allmulticast mode
[   78.721695][ T6384] __nla_validate_parse: 32 callbacks suppressed
[   78.721705][ T6384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.117'.
[   78.734947][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'.
[   78.747851][ T6382] netlink: 1140 bytes leftover after parsing attributes in process `syz.0.116'.
[   78.758531][ T6382] netlink: 1140 bytes leftover after parsing attributes in process `syz.0.116'.
[   78.768678][ T6385] netlink: 108 bytes leftover after parsing attributes in process `syz.0.116'.
[   78.933201][   T33] audit: type=1800 audit(1757216213.208:2): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.117" name="cgroup.controllers" dev="tmpfs" ino=197 res=0 errno=0
[   78.951896][ T6396] pim6reg1: entered promiscuous mode
[   78.955165][ T6396] pim6reg1: entered allmulticast mode
[   79.022359][ T6400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.121'.
[   79.025882][ T6401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.121'.
[   79.060232][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.066346][ T6400] 8021q: adding VLAN 0 to HW filter on device team0
[   79.087865][ T6404] ip6tnl1: entered promiscuous mode
[   79.089881][ T6404] ip6tnl1: entered allmulticast mode
[   79.094665][ T6404] team0: Device ip6tnl1 is of different type
[   79.121463][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[   79.399691][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'.
[   79.624423][ T6424] Bluetooth: MGMT ver 1.23
[   79.739988][ T6433] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'.
[   79.826505][ T6436] pim6reg1: entered promiscuous mode
[   79.828711][ T6436] pim6reg1: entered allmulticast mode
[   80.042692][ T6463] trusted_key: syz.1.140 sent an empty control message without MSG_MORE.
[   80.072921][ T6466] Illegal XDP return value 16128 on prog  (id 62) dev syz_tun, expect packet loss!
[   80.144630][ T5890] net_ratelimit: 17 callbacks suppressed
[   80.144666][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.231895][ T6474] netlink: set zone limit has 4 unknown bytes
[   80.253780][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.262859][ T6474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.273861][ T6474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   80.279716][ T6474] tipc: Resetting bearer <eth:syzkaller0>
[   80.291529][ T6473] tipc: Disabling bearer <eth:syzkaller0>
[   80.351768][ T6477] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   80.355772][ T6479] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   80.385805][ T6479] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.454120][ T5748] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.510138][ T6489] netlink: 'syz.0.145': attribute type 10 has an invalid length.
[   80.522850][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.526861][ T6489] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   80.532928][ T6482] netlink: 'syz.0.145': attribute type 10 has an invalid length.
[   80.549628][ T6486] netlink: 'syz.2.146': attribute type 1 has an invalid length.
[   80.565094][ T5748] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.643253][ T6494] netlink: 'syz.2.147': attribute type 4 has an invalid length.
[   80.685197][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.749073][ T6497] pim6reg1: entered promiscuous mode
[   80.751024][ T6497] pim6reg1: entered allmulticast mode
[   80.793686][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.904372][ T5890] bond1: (slave macvlan2): failed to get link speed/duplex
[   80.968078][ T6517] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[   80.970945][ T6517] veth0_macvtap: left promiscuous mode
[   80.978379][ T6517] team0: Device veth0_macvtap failed to register rx_handler
[   81.016126][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   81.082595][ T6528] syz_tun: entered allmulticast mode
[   81.095793][ T6523] netlink: 'syz.1.154': attribute type 9 has an invalid length.
[   81.097853][ T6526] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   81.161967][ T6526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   81.166236][ T6526] gretap2: entered promiscuous mode
[   81.183849][ T5748] bond1: (slave macvlan2): failed to get link speed/duplex
[   81.261982][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.296705][ T6533] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   81.310856][ T6533] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   81.322847][ T6540] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   81.344913][ T6533] bond0: (slave batadv0): Releasing backup interface
[   81.349859][ T6533] bridge_slave_0: left allmulticast mode
[   81.352128][ T6533] bridge_slave_0: left promiscuous mode
[   81.355252][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.360970][ T6533] bridge_slave_1: left allmulticast mode
[   81.363200][ T6533] bridge_slave_1: left promiscuous mode
[   81.367931][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.374058][ T6533] veth0_to_bond: left allmulticast mode
[   81.376345][ T6533] veth0_to_bond: left promiscuous mode
[   81.379278][ T6533] bridge1: port 2(veth0_to_bond) entered disabled state
[   81.385602][ T6533] bond0: (slave bond_slave_0): Releasing backup interface
[   81.390141][ T6533] bond0: (slave bond_slave_1): Releasing backup interface
[   81.398625][ T6533] team0: Port device team_slave_0 removed
[   81.402912][ T6533] team0: Port device team_slave_1 removed
[   81.406527][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.410066][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.414774][ T6533] veth3: left allmulticast mode
[   81.416818][ T6533] veth3: left promiscuous mode
[   81.418911][ T6533] bridge1: port 1(veth3) entered disabled state
[   81.425447][ T6533] bond1: (slave macvlan2): Removing an active aggregator
[   81.428445][ T6533] bond1: (slave macvlan2): Releasing backup interface
[   81.480645][ T6547] bridge0: entered allmulticast mode
[   81.500091][ T6547] pim6reg: entered allmulticast mode
[   81.537151][ T6547] bridge_slave_1: left allmulticast mode
[   81.539430][ T6547] bridge_slave_1: left promiscuous mode
[   81.541850][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.550305][ T6547] bridge_slave_0: left allmulticast mode
[   81.552074][ T6547] bridge_slave_0: left promiscuous mode
[   81.556987][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.576958][ T6547] bridge0 (unregistering): left allmulticast mode
[   81.677995][ T6556] macvtap1: entered allmulticast mode
[   81.680067][ T6556] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   81.686783][ T6556] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   81.703950][ T5855] Bluetooth: hci0: command tx timeout
[   81.942788][ T6570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.953297][ T6570] syzkaller0: entered promiscuous mode
[   81.955806][ T6570] syzkaller0: entered allmulticast mode
[   81.963979][ T6570] tipc: Resetting bearer <eth:syzkaller0>
[   81.969115][ T6569] tipc: Resetting bearer <eth:syzkaller0>
[   81.979649][ T6569] tipc: Disabling bearer <eth:syzkaller0>
[   82.538200][ T6603] bond0: entered promiscuous mode
[   82.541046][ T6603] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.564660][ T6603] batadv0: entered promiscuous mode
[   82.566730][ T6603] batadv0: entered allmulticast mode
[   82.571141][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.578720][ T6603] bond0: (slave batadv0): making interface the new active one
[   82.582820][ T6603] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   82.636962][ T6609] syzkaller0: entered promiscuous mode
[   82.639104][ T6609] syzkaller0: entered allmulticast mode
[   82.748602][ T5890] bond0 (unregistering): (slave batadv0): Releasing active interface
[   82.753173][ T5890] bond0 (unregistering): Released all slaves
[   83.931846][ T6624] vti0: entered promiscuous mode
[   83.956803][ T6626] __nla_validate_parse: 22 callbacks suppressed
[   83.956821][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'.
[   84.037642][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.058782][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.067444][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.080064][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.089930][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.096777][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.101457][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.106660][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.112542][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.139649][ T6641] syz.1.192: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.146002][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.1.192 Not tainted syzkaller #0 PREEMPT(full) 
[   84.146015][ T6641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.146021][ T6641] Call Trace:
[   84.146025][ T6641]  <TASK>
[   84.146034][ T6641]  dump_stack_lvl+0x189/0x250
[   84.146052][ T6641]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.146061][ T6641]  ? __pfx__printk+0x10/0x10
[   84.146074][ T6641]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.146085][ T6641]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.146094][ T6641]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   84.146104][ T6641]  warn_alloc+0x214/0x310
[   84.146121][ T6641]  ? __pfx_warn_alloc+0x10/0x10
[   84.146136][ T6641]  ? __get_vm_area_node+0x28f/0x300
[   84.146148][ T6641]  ? xskq_create+0xbf/0x170
[   84.146158][ T6641]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   84.146182][ T6641]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.146196][ T6641]  ? __kasan_kmalloc+0x93/0xb0
[   84.146210][ T6641]  vmalloc_user_noprof+0xad/0xf0
[   84.146221][ T6641]  ? xskq_create+0xbf/0x170
[   84.146228][ T6641]  xskq_create+0xbf/0x170
[   84.146237][ T6641]  xsk_init_queue+0xb0/0x110
[   84.146246][ T6641]  xsk_setsockopt+0x57b/0x8d0
[   84.146255][ T6641]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.146261][ T6641]  ? __pfx_aa_sk_perm+0x10/0x10
[   84.146276][ T6641]  ? __fget_files+0x2a/0x420
[   84.146282][ T6641]  ? aa_sock_opt_perm+0xff/0x1b0
[   84.146291][ T6641]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   84.146300][ T6641]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.146333][ T6641]  do_sock_setsockopt+0x17c/0x1b0
[   84.146345][ T6641]  __x64_sys_setsockopt+0x13f/0x1b0
[   84.146357][ T6641]  do_syscall_64+0xfa/0x3b0
[   84.146366][ T6641]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.146375][ T6641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.146383][ T6641]  ? exc_page_fault+0x9f/0xf0
[   84.146392][ T6641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.146399][ T6641] RIP: 0033:0x7f61a7b8ebe9
[   84.146409][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.146415][ T6641] RSP: 002b:00007f61a892e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.146424][ T6641] RAX: ffffffffffffffda RBX: 00007f61a7dc6090 RCX: 00007f61a7b8ebe9
[   84.146429][ T6641] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[   84.146434][ T6641] RBP: 00007f61a7c11e19 R08: 0000000000000004 R09: 0000000000000000
[   84.146438][ T6641] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   84.146443][ T6641] R13: 00007f61a7dc6128 R14: 00007f61a7dc6090 R15: 00007fff818bbb28
[   84.146455][ T6641]  </TASK>
[   84.146459][ T6641] Mem-Info:
[   84.271549][ T6641] active_anon:5680 inactive_anon:0 isolated_anon:0
[   84.271549][ T6641]  active_file:1161 inactive_file:38229 isolated_file:0
[   84.271549][ T6641]  unevictable:1768 dirty:1481 writeback:0
[   84.271549][ T6641]  slab_reclaimable:9879 slab_unreclaimable:78941
[   84.271549][ T6641]  mapped:19207 shmem:2445 pagetables:968
[   84.271549][ T6641]  sec_pagetables:0 bounce:0
[   84.271549][ T6641]  kernel_misc_reclaimable:0
[   84.271549][ T6641]  free:274742 free_pcp:16320 free_cma:0
[   84.288886][ T6641] Node 0 active_anon:13616kB inactive_anon:0kB active_file:3340kB inactive_file:132040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42044kB dirty:5848kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5864kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.299640][ T6641] Node 1 active_anon:9104kB inactive_anon:0kB active_file:1304kB inactive_file:20876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34784kB dirty:76kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5920kB pagetables:1728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.310481][ T6641] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.320503][ T6641] lowmem_reserve[]: 0 811 811 811 811
[   84.322462][ T6641] Node 0 DMA32 free:187440kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13616kB inactive_anon:0kB active_file:3340kB inactive_file:132040kB unevictable:3536kB writepending:5848kB present:1556484kB managed:830868kB mlocked:0kB bounce:0kB free_pcp:21316kB local_pcp:1964kB free_cma:0kB
[   84.334141][ T6641] lowmem_reserve[]: 0 0 0 0 0
[   84.335929][ T6641] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   84.346179][ T6641] lowmem_reserve[]: 0 0 854 854 854
[   84.347971][ T6641] Node 1 Normal free:437676kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9104kB inactive_anon:0kB active_file:1304kB inactive_file:20876kB unevictable:3536kB writepending:76kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43840kB local_pcp:15328kB free_cma:0kB
[   84.359278][ T6641] lowmem_reserve[]: 0 0 0 0 0
[   84.361036][ T6641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.366142][ T6641] Node 0 DMA32: 287*4kB (UME) 264*8kB (UME) 132*16kB (UM) 28*32kB (ME) 36*64kB (UM) 41*128kB (UME) 10*256kB (UME) 12*512kB (UME) 7*1024kB (ME) 5*2048kB (ME) 36*4096kB (UM) = 187388kB
[   84.372945][ T6641] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   84.379682][ T6641] Node 1 Normal: 475*4kB (UME) 742*8kB (UM) 235*16kB (UME) 354*32kB (UME) 71*64kB (UME) 21*128kB (UM) 6*256kB (ME) 1*512kB (M) 2*1024kB (ME) 3*2048kB (UME) 97*4096kB (M) = 437708kB
[   84.386835][ T6641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.389944][ T6641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.393347][ T6641] 41835 total pagecache pages
[   84.395468][ T6641] 0 pages in swap cache
[   84.397010][ T6641] Free swap  = 124996kB
[   84.398332][ T6641] Total swap = 124996kB
[   84.399672][ T6641] 786301 pages RAM
[   84.400877][ T6641] 0 pages HighMem/MovableOnly
[   84.402462][ T6641] 241352 pages reserved
[   84.403921][ T6641] 0 pages cma reserved
[   84.532652][ T6651] pim6reg1: entered promiscuous mode
[   84.534996][ T6651] pim6reg1: entered allmulticast mode
[   84.778966][ T6660] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   84.783097][ T6660] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   84.860089][ T6664] vlan3: entered promiscuous mode
[   84.862593][ T6664] bond0: entered promiscuous mode
[   84.865922][ T6664] bond_slave_0: entered promiscuous mode
[   84.868563][ T6664] bond_slave_1: entered promiscuous mode
[   84.871159][ T6664] vlan3: entered allmulticast mode
[   84.873565][ T6664] bond0: entered allmulticast mode
[   84.875865][ T6664] bond_slave_0: entered allmulticast mode
[   84.878239][ T6664] bond_slave_1: entered allmulticast mode
[   85.260110][ T6687] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   85.280856][ T6688] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   85.299288][ T6688] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.764503][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   85.902823][ T6727] validate_nla: 11 callbacks suppressed
[   85.902835][ T6727] netlink: 'syz.2.214': attribute type 30 has an invalid length.
[   85.941227][ T6727] netlink: 'syz.2.214': attribute type 30 has an invalid length.
[   85.945265][ T5890] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.945900][ T5890] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.956956][ T5890] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.961272][ T6731] netlink: 'syz.0.215': attribute type 30 has an invalid length.
[   85.972598][ T5890] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.985943][ T5890] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.985981][ T6731] netlink: 'syz.0.215': attribute type 30 has an invalid length.
[   86.000036][ T5890] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.005249][ T5890] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.011423][ T5890] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.078945][ T6739] netlink: 'syz.0.216': attribute type 10 has an invalid length.
[   86.124162][ T6741] syzkaller0: entered promiscuous mode
[   86.126431][ T6741] syzkaller0: entered allmulticast mode
[   86.165678][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   86.195988][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   86.471227][ T6753] netlink: 'syz.0.220': attribute type 13 has an invalid length.
[   86.474225][ T6753] netlink: 'syz.0.220': attribute type 17 has an invalid length.
[   86.530946][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.535526][ T6753] 8021q: adding VLAN 0 to HW filter on device team0
[   86.542316][ T6753] net_ratelimit: 8 callbacks suppressed
[   86.542324][ T6753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.665291][   T24] cfg80211: failed to load regulatory.db
[   86.841130][ T6770] vlan3: entered promiscuous mode
[   86.844349][ T6770] vlan3: entered allmulticast mode
[   86.846542][ T6770] hsr_slave_1: entered allmulticast mode
[   86.992317][ T6777] vlan2: entered promiscuous mode
[   86.996916][ T6777] vlan2: entered allmulticast mode
[   86.999701][ T6777] hsr_slave_1: entered allmulticast mode
[   87.067385][ T6781] netlink: 'syz.0.226': attribute type 6 has an invalid length.
[   87.211241][ T6783] netlink: 'syz.0.226': attribute type 12 has an invalid length.
[   87.236408][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.240267][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.353731][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.384800][ T6790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.386502][ T6792] netlink: 'syz.1.229': attribute type 1 has an invalid length.
[   87.418818][ T6792] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.434572][ T6792] bond1: (slave ip6gretap1): making interface the new active one
[   87.441854][ T6792] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   87.471954][ T6792] veth7: entered promiscuous mode
[   87.476801][ T6792] bond1: (slave veth7): Enslaving as an active interface with a down link
[   87.493358][ T6792] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   87.735453][ T6805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.740558][ T6805] syzkaller0: entered promiscuous mode
[   87.742768][ T6805] syzkaller0: entered allmulticast mode
[   87.746901][ T6807] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   87.763713][ T6805] tipc: Resetting bearer <eth:syzkaller0>
[   87.768610][ T6804] tipc: Resetting bearer <eth:syzkaller0>
[   87.782894][ T6804] tipc: Disabling bearer <eth:syzkaller0>
[   87.887403][ T6811] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   88.194961][ T6830] bridge_slave_0: left allmulticast mode
[   88.197025][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.202028][ T6830] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   88.455841][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.459740][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.473990][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.481980][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.643234][ T6860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.662793][ T6859] tipc: Disabling bearer <eth:syzkaller0>
[   88.680475][ T6863] veth5: entered promiscuous mode
[   88.755682][ T6865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.760276][ T6865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.826435][ T6865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.829902][ T6865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.888298][ T6865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.892438][ T6865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.922035][ T6868] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.934499][ T6868] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.937283][ T6868] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   88.941680][ T6868] bond2: (slave wireguard0): Error -95 calling set_mac_address
[   88.964053][ T6865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.967496][ T6865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.028715][ T5890] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.032022][ T5890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.043266][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.046405][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.059383][ T5890] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.063741][ T5890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.074209][ T5890] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.077029][ T5890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.256799][ T6875] __nla_validate_parse: 76 callbacks suppressed
[   89.256814][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'.
[   89.267181][ T6875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'.
[   89.391630][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   89.511427][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.520051][ T6889] macvtap1: entered promiscuous mode
[   89.522130][ T6889] team0: entered promiscuous mode
[   89.524074][ T6889] team_slave_0: entered promiscuous mode
[   89.526383][ T6889] team_slave_1: entered promiscuous mode
[   89.528645][ T6889] macvtap1: entered allmulticast mode
[   89.530856][ T6889] team0: entered allmulticast mode
[   89.532697][ T6889] team_slave_0: entered allmulticast mode
[   89.535443][ T6889] team_slave_1: entered allmulticast mode
[   89.537795][ T6889] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   89.542342][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.548141][ T6889] team0: left allmulticast mode
[   89.550161][ T6889] team_slave_0: left allmulticast mode
[   89.552284][ T6889] team_slave_1: left allmulticast mode
[   89.554899][ T6889] team0: left promiscuous mode
[   89.556838][ T6889] team_slave_0: left promiscuous mode
[   89.559187][ T6889] team_slave_1: left promiscuous mode
[   89.627085][ T6893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.027036][ T6914] netlink: 64 bytes leftover after parsing attributes in process `syz.0.265'.
[   90.041279][ T6914] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   90.579260][ T6942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.581795][ T6942] syzkaller0: entered promiscuous mode
[   90.584485][ T6942] syzkaller0: entered allmulticast mode
[   90.614738][ T6942] tipc: Resetting bearer <eth:syzkaller0>
[   90.632412][ T6941] tipc: Resetting bearer <eth:syzkaller0>
[   90.669003][ T6941] tipc: Disabling bearer <eth:syzkaller0>
[   90.757324][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.273'.
[   91.463660][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   91.576606][ T6971] validate_nla: 9 callbacks suppressed
[   91.576619][ T6971] netlink: 'syz.1.275': attribute type 1 has an invalid length.
[   91.607951][ T6971] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.656334][ T6976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.663273][ T6976] syzkaller0: entered promiscuous mode
[   91.666329][ T6976] syzkaller0: entered allmulticast mode
[   91.671631][ T6976] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   91.687157][ T6976] tipc: Resetting bearer <eth:syzkaller0>
[   91.690947][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[   91.699550][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[   91.838445][ T6990] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   91.855527][ T6992] netlink: 'syz.1.281': attribute type 2 has an invalid length.
[   91.867547][ T6992] k*]: entered promiscuous mode
[   91.873737][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   91.875291][ T6992] erspan0: left allmulticast mode
[   91.889126][ T6992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.902897][ T6995] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[   91.911028][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'.
[   91.914331][ T6992] veth0_to_team: entered promiscuous mode
[   91.917299][ T6992] veth0_to_team: entered allmulticast mode
[   92.035886][ T7006] netlink: 256 bytes leftover after parsing attributes in process `syz.2.286'.
[   92.159289][ T7011] geneve0: entered promiscuous mode
[   92.163115][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.167475][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.170839][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.176779][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.206352][ T7013] gtp0: entered promiscuous mode
[   92.208064][ T7013] gtp0: entered allmulticast mode
[   92.242207][ T7015] netlink: 96 bytes leftover after parsing attributes in process `syz.1.289'.
[   92.251036][ T7015] vlan3: entered allmulticast mode
[   92.252770][ T7015] gretap0: entered allmulticast mode
[   93.237075][ T7043] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   93.252289][ T7043] bond5: entered promiscuous mode
[   93.254588][ T7043] bond5: entered allmulticast mode
[   93.256914][ T7043] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.505907][ T7072] tap0: tun_chr_ioctl cmd 1074025677
[   93.509698][ T7072] tap0: linktype set to 776
[   93.536313][ T7074] C: renamed from lo (while UP)
[   93.546936][ T7074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   93.698757][ T7082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.702147][ T7082] syzkaller0: entered promiscuous mode
[   93.704602][ T7082] syzkaller0: entered allmulticast mode
[   93.732194][ T7082] tipc: Resetting bearer <eth:syzkaller0>
[   93.742675][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[   93.761571][ T7081] tipc: Disabling bearer <eth:syzkaller0>
[   93.848260][ T7085] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   93.860083][ T7088] netlink: 'syz.2.308': attribute type 16 has an invalid length.
[   93.941387][ T7085] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   94.071206][ T7095] batman_adv: batadv0: Adding interface: ipvlan2
[   94.073311][ T7095] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.082003][ T7095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.086746][ T7095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.091539][ T7095] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   94.342487][ T7106] __nla_validate_parse: 7 callbacks suppressed
[   94.342506][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[   94.397278][ T7108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.400770][ T7108] syzkaller0: entered promiscuous mode
[   94.402936][ T7108] syzkaller0: entered allmulticast mode
[   94.408887][ T7108] tipc: Resetting bearer <eth:syzkaller0>
[   94.415135][ T7107] tipc: Resetting bearer <eth:syzkaller0>
[   94.426011][ T7107] tipc: Disabling bearer <eth:syzkaller0>
[   94.547391][ T7114] netlink: 'syz.2.318': attribute type 5 has an invalid length.
[   94.552786][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'.
[   94.634562][ T7120] macvtap2: entered promiscuous mode
[   94.636674][ T7120] macvtap2: entered allmulticast mode
[   94.639126][ T7120] syz_tun: entered promiscuous mode
[   94.641404][ T7120] syz_tun: entered allmulticast mode
[   94.646761][ T7120] team0: Device macvtap2 failed to register rx_handler
[   94.655360][ T7120] syz_tun: left allmulticast mode
[   94.657524][ T7120] syz_tun: left promiscuous mode
[   94.701062][ T7125] netlink: 'syz.0.321': attribute type 1 has an invalid length.
[   94.723829][ T7125] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.727129][ T7128] netlink: 'syz.2.323': attribute type 4 has an invalid length.
[   94.754254][ T7125] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.756772][ T7125] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[   94.762356][ T7125] bond2: (slave vxcan5): Error -95 calling set_mac_address
[   94.785383][ T7132] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   94.788461][ T7132] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.822027][ T7137] bond2: (slave bridge8): Enslaving as an active interface with a down link
[   94.827496][ T7130] netlink: 'syz.2.325': attribute type 10 has an invalid length.
[   94.827510][ T7136] netlink: 'syz.2.325': attribute type 10 has an invalid length.
[   94.832681][ T7130] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   94.836816][ T7130] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   94.840598][ T7130] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   94.937272][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'.
[   94.942482][ T7144] netlink: 'syz.1.327': attribute type 7 has an invalid length.
[   94.946142][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'.
[   94.990561][ T7144] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.061570][ T7144] bond4 (unregistering): Released all slaves
[   95.170997][ T7153] netlink: 144 bytes leftover after parsing attributes in process `syz.2.329'.
[   95.174114][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[   95.177401][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   95.247435][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'.
[   95.293620][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'.
[   95.316225][ T7162] bridge3: port 1(veth5) entered blocking state
[   95.318475][ T7162] bridge3: port 1(veth5) entered disabled state
[   95.320580][ T7162] veth5: entered allmulticast mode
[   95.323278][ T7162] veth5: entered promiscuous mode
[   95.330097][ T7162] bridge3: port 2(veth0_to_bond) entered blocking state
[   95.332523][ T7162] bridge3: port 2(veth0_to_bond) entered disabled state
[   95.335554][ T7162] veth0_to_bond: entered allmulticast mode
[   95.338788][ T7162] veth0_to_bond: entered promiscuous mode
[   95.347808][ T7162] vlan4: entered allmulticast mode
[   95.349543][ T7162] veth1: entered allmulticast mode
[   95.351622][ T7162] bridge3: port 3(vlan4) entered blocking state
[   95.354491][ T7162] bridge3: port 3(vlan4) entered disabled state
[   95.357955][ T7162] vlan4: entered promiscuous mode
[   95.359560][ T7162] veth1: entered promiscuous mode
[   95.447045][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'.
[   95.592698][ T7173] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20003
[   95.598654][ T7173] batadv_slave_0: entered promiscuous mode
[   95.605133][ T7173] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   95.616939][ T7172] batadv_slave_0: left promiscuous mode
[   97.624778][ T7233] validate_nla: 2 callbacks suppressed
[   97.624803][ T7233] netlink: 'syz.1.351': attribute type 6 has an invalid length.
[   97.655843][ T7233] netlink: 'syz.1.351': attribute type 12 has an invalid length.
[   97.843150][ T7246] netlink: 'syz.1.355': attribute type 13 has an invalid length.
[   97.848928][ T7246] netlink: 'syz.1.355': attribute type 17 has an invalid length.
[   97.859475][ T7246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.880318][ T7247] netlink: 'syz.0.356': attribute type 13 has an invalid length.
[   97.884125][ T7247] netlink: 'syz.0.356': attribute type 17 has an invalid length.
[   97.895296][ T7247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.976269][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.978091][ T7252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.988578][ T7252] syzkaller0: entered promiscuous mode
[   97.990462][ T7252] syzkaller0: entered allmulticast mode
[   97.992539][ T7253] netlink: 'syz.2.357': attribute type 13 has an invalid length.
[   98.000344][ T7253] netlink: 'syz.2.357': attribute type 17 has an invalid length.
[   98.037711][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.077789][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.085536][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   98.092524][ T7253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.120477][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   98.130108][ T7251] tipc: Resetting bearer <eth:syzkaller0>
[   98.141839][ T7251] tipc: Disabling bearer <eth:syzkaller0>
[   98.210151][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.722449][ T7253] syz.2.357 (7253) used greatest stack depth: 18880 bytes left
[   98.773202][ T7286] netlink: 'syz.2.367': attribute type 4 has an invalid length.
[   98.778300][ T7286] netlink: 'syz.2.367': attribute type 4 has an invalid length.
[   98.972797][ T7299] syz_tun: left allmulticast mode
[   98.993228][ T7299] lo speed is unknown, defaulting to 1000
[   98.998299][ T7299] lo speed is unknown, defaulting to 1000
[   99.016514][ T7299] lo speed is unknown, defaulting to 1000
[   99.029916][ T7299] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.049063][ T7299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   99.117607][ T7305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.126250][ T7299] lo speed is unknown, defaulting to 1000
[   99.128232][ T5853] lo speed is unknown, defaulting to 1000
[   99.144833][ T7299] lo speed is unknown, defaulting to 1000
[   99.150323][ T7299] lo speed is unknown, defaulting to 1000
[   99.155454][ T7299] lo speed is unknown, defaulting to 1000
[   99.358029][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.361584][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.366075][ T7318] @: renamed from veth0_vlan
[   99.370698][ T7314] __nla_validate_parse: 10 callbacks suppressed
[   99.370711][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'.
[   99.371694][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.384496][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.390850][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.398614][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.401884][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.411935][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.430361][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'.
[   99.439103][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   99.441967][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   99.464960][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   99.604604][ T7322] nbd0: detected capacity change from 0 to 63
[   99.612182][ T7327] block nbd0: NBD_DISCONNECT
[   99.623901][ T7327] block nbd0: Disconnected due to user request.
[   99.626225][ T7327] block nbd0: shutting down sockets
[   99.636768][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.639799][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.642814][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.646377][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.649469][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.652466][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[   99.654369][ T7322] bond3: entered promiscuous mode
[   99.655170][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.656979][ T7322] bond3: entered allmulticast mode
[   99.660309][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[   99.662708][ T7322] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.669897][ T6117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.675004][ T6117] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.677698][ T6117] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.682673][ T6117] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.690771][ T6117] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.694511][ T6117] Buffer I/O error on dev nbd0, logical block 2, async page read
[   99.697928][ T6117] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.701534][ T6117] Buffer I/O error on dev nbd0, logical block 3, async page read
[   99.706099][ T6117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.709293][ T6117] Buffer I/O error on dev nbd0, logical block 0, async page read
[   99.716869][ T6117] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.719761][ T6117] Buffer I/O error on dev nbd0, logical block 1, async page read
[   99.732640][ T6117] ldm_validate_partition_table(): Disk read failed.
[   99.745397][ T6117] Dev nbd0: unable to read RDB block 0
[   99.754818][ T6117]  nbd0: unable to read partition table
[   99.771813][ T6117] ldm_validate_partition_table(): Disk read failed.
[   99.782994][ T6117] Dev nbd0: unable to read RDB block 0
[   99.783948][ T7334] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.790940][ T6117]  nbd0: unable to read partition table
[   99.872064][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   99.892502][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   99.955831][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   99.965063][  T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   99.977461][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   99.977483][ T7340] veth5: left promiscuous mode
[   99.989848][ T7340] bond3: left promiscuous mode
[   99.991385][ T7340] bond3: left allmulticast mode
[   99.993975][    T9] lo speed is unknown, defaulting to 1000
[   99.996607][    T9] syz0: Port: 1 Link DOWN
[  100.006809][ T7343] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  100.012761][ T7346] hsr_slave_0: left promiscuous mode
[  100.041595][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.045379][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.066704][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.069763][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.120856][ T7350] gretap0: refused to change device tx_queue_len
[  100.124213][ T7350] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  100.153255][ T7350] lo speed is unknown, defaulting to 1000
[  100.192458][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'.
[  100.196789][ T7352] netdevsim0: renamed from gre0
[  100.199589][ T7352] netdevsim0: entered promiscuous mode
[  100.205281][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'.
[  100.214277][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[  100.298216][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'.
[  100.301017][ T7358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.384'.
[  100.304751][ T7358] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  100.946863][ T7381] syzkaller0: entered allmulticast mode
[  100.996046][ T7387] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5)
[  101.360513][ T7414] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  101.681515][ T7450] syzkaller0: entered promiscuous mode
[  101.687127][ T7450] syzkaller0: entered allmulticast mode
[  102.406443][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.426758][ T7456] bond0: (slave rose0): Enslaving as an active interface with an up link
[  102.484546][ T7462] : renamed from batadv_slave_1
[  102.643283][ T7477] bond0: Device is already in use.
[  102.702678][ T7486] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.707954][ T7485] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.809089][ T7499] validate_nla: 8 callbacks suppressed
[  102.809107][ T7499] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  102.832452][ T7502] netlink: 'syz.0.416': attribute type 3 has an invalid length.
[  102.907962][ T7511] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  102.911378][ T7511] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  102.940106][ T7511] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  102.959548][ T7511] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[  103.194282][ T7540] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[  103.271762][ T7548] netlink: 'syz.0.424': attribute type 29 has an invalid length.
[  103.297306][ T7549] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[  103.333902][ T7549] gretap2: entered promiscuous mode
[  103.347671][ T7549] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.616225][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.630202][ T7562] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  103.636429][ T7562] bond1: (slave macvlan4): Enslaving as a backup interface with an up link
[  103.645801][ T7562] bond0: (slave wlan1): Releasing backup interface
[  103.650617][ T7562] bond2: (slave bridge8): Releasing active interface
[  103.658351][ T7562] bond1: (slave macvlan4): Releasing backup interface
[  103.691022][ T7564] bond6: entered promiscuous mode
[  103.692848][ T7564] bond6: entered allmulticast mode
[  103.698659][ T7564] 8021q: adding VLAN 0 to HW filter on device bond6
[  103.744536][ T7569] netlink: 'syz.2.431': attribute type 7 has an invalid length.
[  103.752909][ T7569] : entered promiscuous mode
[  103.889026][ T7576] lo speed is unknown, defaulting to 1000
[  104.246673][ T5748] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.250913][ T5748] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.271928][ T5748] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.276557][ T5748] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.319376][ T7614] bond7: entered promiscuous mode
[  104.321018][ T7614] bond7: entered allmulticast mode
[  104.322891][ T7614] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.337950][ T7614] bridge4: entered promiscuous mode
[  104.339686][ T7614] bridge4: entered allmulticast mode
[  104.341713][ T7614] bond7: (slave bridge4): Enslaving as a backup interface with an up link
[  104.389659][ T7622] __nla_validate_parse: 156 callbacks suppressed
[  104.389670][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'.
[  104.459262][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.464609][ T7630] team0: Port device bond0 added
[  104.512727][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.453'.
[  104.568765][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'.
[  104.620936][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'.
[  104.756927][ T7646] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  105.679069][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'.
[  105.808358][ T7657] lo speed is unknown, defaulting to 1000
[  105.903236][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  105.906232][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  105.909397][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  105.937536][   T10] lo speed is unknown, defaulting to 1000
[  105.943726][   T10] syz0: Port: 1 Link ACTIVE
[  105.988819][ T7673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.463'.
[  106.026318][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'.
[  106.253510][ T7695] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  106.547741][ T7708] bridge_slave_1: left allmulticast mode
[  106.550126][ T7708] bridge_slave_1: left promiscuous mode
[  106.552574][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.561244][ T7708] veth0_to_bond: left allmulticast mode
[  106.564353][ T7708] veth0_to_bond: left promiscuous mode
[  106.566672][ T7708] bridge3: port 2(veth0_to_bond) entered disabled state
[  106.574335][ T7708] bond0: (slave bond_slave_0): Releasing backup interface
[  106.579017][ T7708] bond_slave_0: left promiscuous mode
[  106.582399][ T7708] bond_slave_0: left allmulticast mode
[  106.596527][ T7708] bond0: (slave bond_slave_1): Releasing backup interface
[  106.601990][ T7708] bond_slave_1: left promiscuous mode
[  106.604488][ T7708] bond_slave_1: left allmulticast mode
[  106.607958][ T7708] team0: Port device team_slave_0 removed
[  106.610417][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.614619][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.619259][ T7708] bond0: (slave wlan1): Releasing backup interface
[  106.623132][ T7708] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  106.629509][ T7708] bond1: (slave macvlan2): Removing an active aggregator
[  106.632440][ T7708] bond1: (slave macvlan2): Releasing backup interface
[  106.637694][ T7708] bond4: (slave ip6gretap2): Releasing backup interface
[  106.640723][ T7708] batman_adv: batadv0: Removing interface: ipvlan2
[  106.644115][ T7708] veth5: left allmulticast mode
[  106.647083][ T7708] veth5: left promiscuous mode
[  106.649273][ T7708] bridge3: port 1(veth5) entered disabled state
[  106.654105][ T7708] vlan4: left promiscuous mode
[  106.655946][ T7708] veth1: left promiscuous mode
[  106.657865][ T7708] bridge3: port 3(vlan4) entered disabled state
[  106.662347][ T7708] bond7: (slave bridge4): Releasing backup interface
[  106.666406][ T7708] bridge4: left promiscuous mode
[  106.668221][ T7708] bridge4: left allmulticast mode
[  106.964053][ T7744] rdma_rxe: rxe_newlink: failed to add lo
[  107.049097][ T7750] IPv6: sit1: Disabled Multicast RS
[  107.141533][ T7759] sctp: [Deprecated]: syz.2.486 (pid 7759) Use of int in maxseg socket option.
[  107.141533][ T7759] Use struct sctp_assoc_value instead
[  107.211867][ T7764] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  107.679234][ T7788] tap0: tun_chr_ioctl cmd 2147767507
[  107.681749][ T7789] tap0: tun_chr_ioctl cmd 2147767507
[  107.811454][ T7795] pim6reg1: entered promiscuous mode
[  107.821968][ T7795] pim6reg1: entered allmulticast mode
[  107.831385][ T7798] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.837622][ T7798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.888500][ T7801] validate_nla: 14 callbacks suppressed
[  107.888513][ T7801] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[  107.928213][ T7801] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.944520][ T7798] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.948828][ T7798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.006042][ T7798] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.010093][ T7798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.077044][ T7812] team0: entered promiscuous mode
[  108.157400][ T7813] team0 (unregistering): left promiscuous mode
[  108.171272][ T7798] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.176828][ T7798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.232937][ T7821] syzkaller1: entered promiscuous mode
[  108.235001][ T7821] syzkaller1: entered allmulticast mode
[  108.318364][ T5890] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.321763][ T5890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.338870][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.341512][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.384336][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.389407][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.399333][ T5872] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.403905][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.620438][ T7831] netlink: 'syz.0.501': attribute type 4 has an invalid length.
[  108.630566][ T5883] lo speed is unknown, defaulting to 1000
[  108.632985][ T5883] syz0: Port: 1 Link DOWN
[  108.638536][ T7831] netlink: 'syz.0.501': attribute type 4 has an invalid length.
[  108.646147][ T5883] lo speed is unknown, defaulting to 1000
[  108.648632][ T5883] syz0: Port: 1 Link ACTIVE
[  108.662028][ T5883] lo speed is unknown, defaulting to 1000
[  108.666335][ T5883] syz0: Port: 1 Link DOWN
[  108.680375][ T7831] lo speed is unknown, defaulting to 1000
[  108.749798][ T7834] lo speed is unknown, defaulting to 1000
[  108.825991][ T7838] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[  108.870596][ T7838] bond4: entered promiscuous mode
[  108.872901][ T7838] 8021q: adding VLAN 0 to HW filter on device bond4
[  108.881174][ T7838] batadv1: entered promiscuous mode
[  108.882942][ T7838] batadv1: entered allmulticast mode
[  108.886139][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv1
[  108.896945][ T7838] bond4: (slave batadv1): making interface the new active one
[  108.906276][ T7838] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  108.949852][ T7836] netlink: 'syz.1.502': attribute type 13 has an invalid length.
[  108.953112][ T7836] netlink: 'syz.1.502': attribute type 17 has an invalid length.
[  108.999442][ T7836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.267110][ T7858] netlink: 'syz.0.508': attribute type 7 has an invalid length.
[  109.306766][ T7858] 8021q: adding VLAN 0 to HW filter on device bond5
[  109.310165][ T7858] bridge9: port 1(bond5) entered blocking state
[  109.313109][ T7858] bridge9: port 1(bond5) entered disabled state
[  109.316107][ T7858] bond5: entered allmulticast mode
[  109.321798][ T7858] bridge9: port 1(bond5) entered blocking state
[  109.326090][ T7858] bridge9: port 1(bond5) entered forwarding state
[  109.369682][ T7861] !: renamed from dummy0
[  109.952440][  T238] bridge9: port 1(bond5) entered disabled state
[  110.345462][ T7946] netlink: 'syz.0.510': attribute type 4 has an invalid length.
[  110.419039][ T7946] netlink: 'syz.0.510': attribute type 4 has an invalid length.
[  110.429336][   T10] lo speed is unknown, defaulting to 1000
[  110.431449][   T10] syz0: Port: 1 Link ACTIVE
[  110.435921][ T7948] netlink: 'syz.2.511': attribute type 4 has an invalid length.
[  110.498794][ T7953] __nla_validate_parse: 37 callbacks suppressed
[  110.498813][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'.
[  110.742217][ T7966] 8021q: adding VLAN 0 to HW filter on device bond6
[  110.805368][ T7966] 8021q: adding VLAN 0 to HW filter on device bond6
[  110.808360][ T7966] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  110.815756][ T7966] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  110.857384][ T7972] 8021q: adding VLAN 0 to HW filter on device bond8
[  110.869345][ T7970] bond6: (slave bridge10): Enslaving as an active interface with a down link
[  110.889003][ T7974] bond6: (slave bridge11): Enslaving as an active interface with a down link
[  110.892080][ T7977] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  110.943109][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[  110.952062][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'.
[  111.001028][ T7984] lo speed is unknown, defaulting to 1000
[  111.029508][ T7986] pim6reg1: entered allmulticast mode
[  111.121929][ T7993] team0: Port device dummy0 added
[  111.140306][ T7993] team0: Port device dummy0 removed
[  111.164812][ T7993] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.266747][ T8007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.269470][ T8007] syzkaller0: entered promiscuous mode
[  111.271582][ T8007] syzkaller0: entered allmulticast mode
[  111.288868][ T8007] tipc: Resetting bearer <eth:syzkaller0>
[  111.303357][ T8007] macvtap0: entered promiscuous mode
[  111.308181][ T8007] vlan0: entered promiscuous mode
[  111.309999][ T8007] macvtap0: entered allmulticast mode
[  111.311755][ T8007] vlan0: entered allmulticast mode
[  111.313959][ T8007] veth0_vlan: entered allmulticast mode
[  111.326176][ T8007] macvtap1: entered promiscuous mode
[  111.328338][ T8007] macvtap1: entered allmulticast mode
[  111.387681][ T8005] tipc: Resetting bearer <eth:syzkaller0>
[  111.410444][ T8005] tipc: Disabling bearer <eth:syzkaller0>
[  111.497153][ T8015] syzkaller0: entered promiscuous mode
[  111.499151][ T8015] syzkaller0: entered allmulticast mode
[  111.690726][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[  111.696738][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[  111.891472][ T8029] netlink: 666 bytes leftover after parsing attributes in process `syz.2.536'.
[  111.904788][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'.
[  111.998662][ T8033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'.
[  112.087904][ T8043] lo speed is unknown, defaulting to 1000
[  112.139240][ T8048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.169044][ T8048] syzkaller0: entered promiscuous mode
[  112.171041][ T8048] syzkaller0: entered allmulticast mode
[  112.187806][ T8048] tipc: Resetting bearer <eth:syzkaller0>
[  112.190909][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  112.202589][ T8047] tipc: Resetting bearer <eth:syzkaller0>
[  112.211669][ T8047] tipc: Disabling bearer <eth:syzkaller0>
[  112.464399][ T8069] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.645366][ T8082] netlink: 3 bytes leftover after parsing attributes in process `syz.1.547'.
[  112.655077][ T8082] batadv1: entered promiscuous mode
[  112.657196][ T8082] batadv1: entered allmulticast mode
[  112.721644][ T8084] lo speed is unknown, defaulting to 1000
[  112.905965][ T8102] validate_nla: 6 callbacks suppressed
[  112.905976][ T8102] netlink: 'syz.1.550': attribute type 30 has an invalid length.
[  113.003102][ T8105] lo speed is unknown, defaulting to 1000
[  113.108086][ T8107] netlink: 'syz.0.552': attribute type 10 has an invalid length.
[  113.123268][ T8107] !: entered promiscuous mode
[  113.128180][ T8107] bridge0: port 1(0!) entered blocking state
[  113.131002][ T8107] bridge0: port 1(0!) entered disabled state
[  113.135590][ T8107] !: entered allmulticast mode
[  113.145131][ T8117] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.171267][ T8121] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[  113.223755][ T8121] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.258817][ T8121] vlan2: entered promiscuous mode
[  113.260697][ T8121] bond9: entered promiscuous mode
[  113.262634][ T8121] vlan2: entered allmulticast mode
[  113.269229][ T8121] bond9: entered allmulticast mode
[  113.280022][ T8121] bond9: (slave gretap3): making interface the new active one
[  113.282628][ T8121] gretap3: entered promiscuous mode
[  113.287136][ T8121] gretap3: entered allmulticast mode
[  113.300744][ T8121] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  113.386693][   T33] audit: type=1804 audit(1757216247.668:3): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.557" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1037 res=1 errno=0
[  113.394944][   T33] audit: type=1800 audit(1757216247.678:4): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.557" name="cgroup.controllers" dev="tmpfs" ino=1037 res=0 errno=0
[  113.577517][ T8148] netlink: 'syz.2.561': attribute type 1 has an invalid length.
[  113.586045][ T8147] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  113.590551][ T8147] bond1: (slave vcan0): Error -95 calling set_mac_address
[  113.696789][ T8154] lo speed is unknown, defaulting to 1000
[  113.751808][ T8156] lo speed is unknown, defaulting to 1000
[  113.799031][ T8163] macvlan5: entered promiscuous mode
[  113.800876][ T8163] bond0: entered promiscuous mode
[  113.802889][ T8163] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  113.978764][ T8172] : entered promiscuous mode
[  114.741391][ T8206] lo speed is unknown, defaulting to 1000
[  114.855509][ T8210] pim6reg: entered allmulticast mode
[  114.990166][ T8213] tap0: tun_chr_ioctl cmd 1074025677
[  114.996746][ T8213] tap0: linktype set to 804
[  115.371837][ T8230] bridge8: entered promiscuous mode
[  115.379467][ T8230] macsec4: entered promiscuous mode
[  115.383879][ T8230] macsec4: entered allmulticast mode
[  115.388063][ T8230] bridge8: entered allmulticast mode
[  115.397832][ T8230] bridge8: port 1(macsec4) entered blocking state
[  115.402675][ T8230] bridge8: port 1(macsec4) entered disabled state
[  115.416674][ T8230] bridge8: left allmulticast mode
[  115.421431][ T8230] bridge8: left promiscuous mode
[  115.630761][ T8235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  116.577742][ T8247] __nla_validate_parse: 15 callbacks suppressed
[  116.577763][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[  116.878887][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'.
[  116.885892][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'.
[  117.427441][ T8260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.589'.
[  117.595047][ T8260] batadv_slave_0: entered promiscuous mode
[  117.619816][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'.
[  117.671033][ T8260] netlink: 428 bytes leftover after parsing attributes in process `syz.1.589'.
[  117.678298][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.589'.
[  117.908091][ T8268] netlink: 'syz.1.591': attribute type 1 has an invalid length.
[  118.112760][ T8274] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  118.131356][ T8274] 8021q: adding VLAN 0 to HW filter on device bond11
[  118.149755][ T8274] vlan5: entered allmulticast mode
[  118.154690][ T8274] bond11: (slave vlan5): Enslaving as an active interface with a down link
[  118.159110][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[  118.194043][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[  118.233119][ T8279] netlink: 'syz.2.595': attribute type 1 has an invalid length.
[  118.252950][ T8279] 8021q: adding VLAN 0 to HW filter on device bond12
[  118.266396][ T8279] 8021q: adding VLAN 0 to HW filter on device bond12
[  118.268740][ T8279] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  118.273037][ T8279] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  118.318077][ T8281] bond12: (slave bridge6): Enslaving as an active interface with a down link
[  118.533223][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  118.723304][ T8291] bond0: entered promiscuous mode
[  118.727780][ T8291] bond_slave_0: entered promiscuous mode
[  118.729833][ T8291] bond_slave_1: entered promiscuous mode
[  118.732403][ T8291] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  118.738885][ T8291] dummy0: entered promiscuous mode
[  118.825616][ T8294] netlink: 'syz.2.598': attribute type 11 has an invalid length.
[  118.828756][ T8294] netlink: 'syz.2.598': attribute type 11 has an invalid length.
[  119.256007][ T8231] Set syz1 is full, maxelem 65536 reached
[  119.368706][ T5890] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  119.371317][ T8312] netlink: 'syz.0.600': attribute type 5 has an invalid length.
[  119.592828][ T8316] batadv_slave_1: entered promiscuous mode
[  119.665385][ T8317] batadv_slave_1 (unregistering): left promiscuous mode
[  119.667959][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.865576][ T8323] syzkaller0: entered promiscuous mode
[  119.870353][ T8323] syzkaller0: entered allmulticast mode
[  120.275665][ T8336] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  120.369598][ T8336] batadv_slave_0: entered promiscuous mode
[  120.494759][ T8351] .70: renamed from hsr0
[  120.499942][ T8351] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.504142][ T8351] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.507676][ T8351] .70: entered allmulticast mode
[  120.509418][ T8351] hsr_slave_0: entered allmulticast mode
[  120.511283][ T8351] hsr_slave_1: entered allmulticast mode
[  120.518348][ T8351] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  120.526618][ T8349] netlink: 'syz.1.612': attribute type 4 has an invalid length.
[  120.530130][ T8353] .71: renamed from .70 (while UP)
[  120.536711][ T8353] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[  120.636384][ T8359] lo speed is unknown, defaulting to 1000
[  120.697743][ T8357] pim6reg99999999: entered allmulticast mode
[  120.715495][ T8365] netlink: 'syz.1.617': attribute type 4 has an invalid length.
[  120.972420][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.977925][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.985692][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.995211][ T5872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.019829][ T8371] lo speed is unknown, defaulting to 1000
[  121.186215][ T8386] netlink: 'syz.2.622': attribute type 2 has an invalid length.
[  121.189296][ T8386] netlink: 'syz.2.622': attribute type 8 has an invalid length.
[  121.230866][ T8371] netlink: 'syz.1.619': attribute type 2 has an invalid length.
[  121.291570][ T8397] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  121.356586][ T8397] bond7: entered promiscuous mode
[  121.358762][ T8397] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.404777][ T8402] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[  121.418149][ T8399] 8021q: adding VLAN 0 to HW filter on device bond8
[  121.424592][ T8399] bond7: (slave bond8): making interface the new active one
[  121.427522][ T8399] bond8: entered promiscuous mode
[  121.430633][ T8399] bond7: (slave bond8): Enslaving as an active interface with an up link
[  121.471318][ T8402] bond7: entered promiscuous mode
[  121.476692][ T8402] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.495671][ T8404] batadv1: entered promiscuous mode
[  121.497575][ T8404] batadv1: entered allmulticast mode
[  121.500782][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv1
[  121.508222][ T8404] bond7: (slave batadv1): making interface the new active one
[  121.511781][ T8404] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  121.664320][ T8404] __nla_validate_parse: 14 callbacks suppressed
[  121.664340][ T8404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.625'.
[  121.754172][ T8422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.630'.
[  121.768087][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'.
[  121.769531][ T8424] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  121.815082][ T8426] veth6: entered allmulticast mode
[  121.906127][ T8432] macvlan6: entered promiscuous mode
[  121.908262][ T8432] vlan0: entered promiscuous mode
[  122.064562][ T8443] lo speed is unknown, defaulting to 1000
[  122.304103][ T8456] bond0: left promiscuous mode
[  122.317609][ T8456] vlan0: left promiscuous mode
[  122.325525][   T24] lo speed is unknown, defaulting to 1000
[  122.328314][   T24] syz0: Port: 1 Link DOWN
[  122.592482][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.642'.
[  122.595943][ T8460] 8021q: VLANs not supported on ip_vti0
[  122.737133][ T8464] dvmrp8: entered allmulticast mode
[  122.765693][ T8464] lo speed is unknown, defaulting to 1000
[  122.819985][ T8463] dvmrp8: left allmulticast mode
[  123.028301][ T8474] netlink: 'syz.0.647': attribute type 11 has an invalid length.
[  123.147539][ T8480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.151968][ T8480] syzkaller0: entered promiscuous mode
[  123.154830][ T8480] syzkaller0: entered allmulticast mode
[  123.177149][ T8482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.182055][ T8480] tipc: Resetting bearer <eth:syzkaller0>
[  123.185525][ T8482] syzkaller0: entered promiscuous mode
[  123.187698][ T8482] syzkaller0: entered allmulticast mode
[  123.191693][ T8479] tipc: Resetting bearer <eth:syzkaller0>
[  123.207420][ T8479] tipc: Disabling bearer <eth:syzkaller0>
[  123.218075][ T8482] tipc: Resetting bearer <eth:syzkaller0>
[  123.221653][ T8481] tipc: Resetting bearer <eth:syzkaller0>
[  123.239883][ T8481] tipc: Disabling bearer <eth:syzkaller0>
[  123.279048][ T8484] validate_nla: 2 callbacks suppressed
[  123.279065][ T8484] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  123.390930][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'.
[  123.413258][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  123.419450][ T8493] 8021q: adding VLAN 0 to HW filter on device team0
[  123.473571][ T8497] syzkaller0: entered promiscuous mode
[  123.475969][ T8497] syzkaller0: entered allmulticast mode
[  123.530317][ T8501] geneve3: entered promiscuous mode
[  123.532072][ T8501] geneve3: entered allmulticast mode
[  123.536779][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  123.539465][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  123.542335][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  123.546384][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  123.642513][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.850785][ T8519] lo speed is unknown, defaulting to 1000
[  124.159468][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.665'.
[  124.169280][ T8532] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  124.176651][ T8532] netlink: 92 bytes leftover after parsing attributes in process `syz.1.665'.
[  124.228619][ T8534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.578144][ T8547] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  124.655876][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[  124.681219][ T8554] netlink: 'syz.0.672': attribute type 10 has an invalid length.
[  124.712840][ T8554] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.790698][ T8561] netlink: 'syz.1.674': attribute type 10 has an invalid length.
[  124.798133][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.674'.
[  124.811811][ T8561] bond0: (slave dummy0): Releasing backup interface
[  124.824443][ T8561] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  125.001667][ T8574] geneve2: entered promiscuous mode
[  125.356812][ T8605] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  125.387745][ T8605] 8021q: adding VLAN 0 to HW filter on device bond15
[  125.411970][ T8605] bond15: (slave wlan0): Enslaving as an active interface with a down link
[  125.776692][ T8641] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  125.780275][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.061863][ T8665] netlink: 'syz.1.696': attribute type 12 has an invalid length.
[  126.237101][ T8679] geneve4: entered promiscuous mode
[  126.240735][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  126.247176][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  126.252302][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  126.273138][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  126.481176][ T8696] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.495945][ T8696] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.546676][ T8696] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.550740][ T8696] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.644986][ T8696] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.653543][ T8696] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.715087][ T8723] dvmrp1: entered allmulticast mode
[  126.720707][ T8696] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.730023][ T8696] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.795284][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.798175][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.806969][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.810154][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.821883][ T5872] nci: nci_rx_work: unknown MT 0x1
[  126.839224][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.842368][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.858571][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.861876][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.889070][ T8730] __nla_validate_parse: 13 callbacks suppressed
[  126.889090][ T8730] netlink: 14 bytes leftover after parsing attributes in process `syz.0.708'.
[  126.910170][ T8737] pimreg: entered allmulticast mode
[  126.923023][ T8737] dvmrp8: entered allmulticast mode
[  126.928698][ T8737] pimreg: left allmulticast mode
[  126.931625][ T8737] dvmrp8: left allmulticast mode
[  127.556139][ T8749] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  127.595115][ T8753] netlink: 'syz.0.712': attribute type 13 has an invalid length.
[  127.642289][ T8762] bridge0: entered allmulticast mode
[  127.651228][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'.
[  127.659626][ T5890] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  127.671030][ T8759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.673229][ T8762] !: left allmulticast mode
[  127.683795][ T8762] bridge0: port 1(0!) entered disabled state
[  127.728519][ T8762] bridge0 (unregistering): left allmulticast mode
[  127.791258][ T8759] syzkaller0: entered promiscuous mode
[  127.793065][ T8759] syzkaller0: entered allmulticast mode
[  127.916180][ T8759] tipc: Resetting bearer <eth:syzkaller0>
[  127.928391][ T8759] tipc: Disabling bearer <eth:syzkaller0>
[  128.536415][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'.
[  128.687372][ T8825] bond0: (slave wlan1): Releasing backup interface
[  128.718446][ T8825] bond4: (slave batadv1): Releasing active interface
[  128.725242][ T8825] bond5: left allmulticast mode
[  128.727350][ T8825] bridge9: port 1(bond5) entered disabled state
[  128.748165][ T8825] bond6: (slave bridge10): Releasing active interface
[  128.758842][ T8825] bond6: (slave bridge11): Releasing active interface
[  128.766105][ T8825] bond7: (slave bond8): Releasing backup interface
[  128.774228][ T8825] bond8: left promiscuous mode
[  128.782952][ T8838] Bluetooth: MGMT ver 1.23
[  128.800847][ T8832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.815895][ T8832] syzkaller0: entered promiscuous mode
[  128.818086][ T8832] syzkaller0: entered allmulticast mode
[  128.850283][ T8832] tipc: Resetting bearer <eth:syzkaller0>
[  128.862674][ T8828] tipc: Resetting bearer <eth:syzkaller0>
[  128.872300][ T8828] tipc: Disabling bearer <eth:syzkaller0>
[  128.941296][ T8843] netlink: 'syz.2.728': attribute type 4 has an invalid length.
[  128.945103][ T8843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.947534][ T8843] syzkaller0: entered promiscuous mode
[  128.949338][ T8843] syzkaller0: entered allmulticast mode
[  129.026456][ T8849] tipc: Resetting bearer <eth:syzkaller0>
[  129.034649][ T8855] netlink: 'syz.0.729': attribute type 13 has an invalid length.
[  129.037932][ T8855] netlink: 'syz.0.729': attribute type 17 has an invalid length.
[  129.101021][ T8855] 8021q: adding VLAN 0 to HW filter on device team0
[  129.105748][ T8855] !: left promiscuous mode
[  129.115893][ T8855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.123609][    T9] lo speed is unknown, defaulting to 1000
[  129.126142][ T8842] tipc: Resetting bearer <eth:syzkaller0>
[  129.126315][    T9] syz0: Port: 1 Link ACTIVE
[  129.141201][ T8842] tipc: Disabling bearer <eth:syzkaller0>
[  129.147305][ T8858] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  129.163677][ T8858] netlink: 'syz.1.731': attribute type 10 has an invalid length.
[  129.165716][ T8855] lo speed is unknown, defaulting to 1000
[  129.187628][ T8858] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  129.206731][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  129.215580][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.238022][ T8862] lo speed is unknown, defaulting to 1000
[  129.242244][ T8862] lo speed is unknown, defaulting to 1000
[  129.249006][ T8862] lo speed is unknown, defaulting to 1000
[  129.263061][ T8862] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  129.282312][ T8865] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.299890][ T8865] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.310482][ T8862] lo speed is unknown, defaulting to 1000
[  129.319111][ T8862] lo speed is unknown, defaulting to 1000
[  129.323143][ T8862] lo speed is unknown, defaulting to 1000
[  129.330102][ T8862] lo speed is unknown, defaulting to 1000
[  129.357069][ T8865] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.360099][ T8865] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.366065][ T8867] netlink: 'syz.2.732': attribute type 4 has an invalid length.
[  129.414960][ T8865] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.418984][ T8865] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.460839][ T8865] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.478774][ T8865] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.568074][ T8804] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.571305][ T8804] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.577782][ T8804] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.581166][ T8804] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.592700][ T8804] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.600488][ T8804] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.617570][ T8804] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.621059][ T8804] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.641908][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'.
[  129.652503][ T8885] vlan6: entered promiscuous mode
[  129.677826][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'.
[  129.870681][ T8909] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  129.881224][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[  129.887571][ T8912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.890264][ T8909] netlink: 'syz.2.739': attribute type 10 has an invalid length.
[  129.899788][ T8909] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  129.902691][ T8909] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  129.908054][ T8912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.909021][ T8909] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  129.916857][ T8913] syzkaller0: entered promiscuous mode
[  129.919078][ T8913] syzkaller0: entered allmulticast mode
[  129.957448][ T8913] tipc: Resetting bearer <eth:syzkaller0>
[  129.976575][ T8913] tipc: Disabling bearer <eth:syzkaller0>
[  129.982603][ T8920] netlink: 'syz.2.741': attribute type 22 has an invalid length.
[  129.986535][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'.
[  130.002841][ T8920] netlink: 'syz.2.741': attribute type 22 has an invalid length.
[  130.006294][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'.
[  130.490101][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  130.537431][ T8934] netlink: 'syz.0.745': attribute type 10 has an invalid length.
[  130.540805][ T8934] @: left promiscuous mode
[  130.547430][ T8934] @: entered promiscuous mode
[  130.551441][ T8934] team0: Device 4@ failed to register rx_handler
[  131.852876][ T8975] ------------[ cut here ]------------
[  131.855877][ T8975] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  131.861797][ T8975] WARNING: CPU: 1 PID: 8975 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  131.866488][ T8975] Modules linked in:
[  131.868237][ T8975] CPU: 1 UID: 0 PID: 8975 Comm: syz.0.754 Not tainted syzkaller #0 PREEMPT(full) 
[  131.872336][ T8975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.876677][ T8975] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  131.878975][ T8975] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 52 b0 8c e8 96 82 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 e6 d6 f6 90 0f 0b 90 42 80 7c 3d
[  131.886097][ T8975] RSP: 0018:ffffc900085e6f80 EFLAGS: 00010246
[  131.888151][ T8975] RAX: 86d7f2a57bc82000 RBX: 0000000000000000 RCX: ffff8880428c9cc0
[  131.891088][ T8975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  131.894018][ T8975] RBP: ffff88810d5a9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[  131.896459][ T8975] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810d5aa9d0
[  131.898925][ T8975] R13: ffff88810d5a8d80 R14: 1ffff11021ab52e5 R15: dffffc0000000000
[  131.901436][ T8975] FS:  00007f0d776e66c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  131.904397][ T8975] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  131.906703][ T8975] CR2: 0000200000001440 CR3: 00000000236ea000 CR4: 00000000000006f0
[  131.909526][ T8975] Call Trace:
[  131.910734][ T8975]  <TASK>
[  131.911782][ T8975]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  131.913867][ T8975]  __ieee80211_link_release_channel+0x33b/0x4a0
[  131.916073][ T8975]  ? __pfx_ieee80211_uninit+0x10/0x10
[  131.918020][ T8975]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  131.920369][ T8975]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  131.923032][ T8975]  ? __pfx_call_rcu+0x10/0x10
[  131.924686][ T8975]  unregister_netdevice_queue+0x33c/0x380
[  131.926407][ T8975]  ? kernfs_remove_by_name_ns+0xee/0x130
[  131.928117][ T8975]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  131.930098][ T8975]  _cfg80211_unregister_wdev+0x165/0x590
[  131.932488][ T8975]  ieee80211_if_remove+0x256/0x310
[  131.934407][ T8975]  ieee80211_del_iface+0x19/0x30
[  131.936105][ T8975]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  131.938414][ T8975]  genl_family_rcv_msg_doit+0x215/0x300
[  131.940606][ T8975]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  131.942919][ T8975]  ? bpf_lsm_capable+0x9/0x20
[  131.944718][ T8975]  ? security_capable+0x7e/0x2e0
[  131.946498][ T8975]  genl_rcv_msg+0x60e/0x790
[  131.947931][ T8975]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.949783][ T8975]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  131.951884][ T8975]  ? __pfx_nl80211_del_interface+0x10/0x10
[  131.954392][ T8975]  ? __pfx_nl80211_post_doit+0x10/0x10
[  131.956609][ T8975]  ? __asan_memcpy+0x40/0x70
[  131.958500][ T8975]  ? __pfx_ref_tracker_free+0x10/0x10
[  131.960703][ T8975]  netlink_rcv_skb+0x208/0x470
[  131.962652][ T8975]  ? __lock_acquire+0xab9/0xd20
[  131.964812][ T8975]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.966901][ T8975]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.969058][ T8975]  ? down_read+0x1ad/0x2e0
[  131.970831][ T8975]  genl_rcv+0x28/0x40
[  131.972483][ T8975]  netlink_unicast+0x82f/0x9e0
[  131.974555][ T8975]  ? __pfx_netlink_unicast+0x10/0x10
[  131.976626][ T8975]  ? netlink_sendmsg+0x642/0xb30
[  131.978562][ T8975]  ? skb_put+0x11b/0x210
[  131.980232][ T8975]  netlink_sendmsg+0x805/0xb30
[  131.982162][ T8975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.984385][ T8975]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.986380][ T8975]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.988443][ T8975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.990233][ T8975]  __sock_sendmsg+0x21c/0x270
[  131.991718][ T8975]  ____sys_sendmsg+0x505/0x830
[  131.993226][ T8975]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.995169][ T8975]  ? import_iovec+0x74/0xa0
[  131.996758][ T8975]  ___sys_sendmsg+0x21f/0x2a0
[  131.998224][ T8975]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.000215][ T8975]  ? __fget_files+0x2a/0x420
[  132.002018][ T8975]  ? __fget_files+0x3a0/0x420
[  132.004006][ T8975]  __x64_sys_sendmsg+0x19b/0x260
[  132.005860][ T8975]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.007867][ T8975]  ? rcu_is_watching+0x15/0xb0
[  132.009635][ T8975]  ? do_syscall_64+0xbe/0x3b0
[  132.011323][ T8975]  do_syscall_64+0xfa/0x3b0
[  132.012772][ T8975]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.014903][ T8975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.017413][ T8975]  ? exc_page_fault+0x9f/0xf0
[  132.019385][ T8975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.021616][ T8975] RIP: 0033:0x7f0d7678ebe9
[  132.023101][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.029400][ T8975] RSP: 002b:00007f0d776e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.031976][ T8975] RAX: ffffffffffffffda RBX: 00007f0d769c5fa0 RCX: 00007f0d7678ebe9
[  132.035083][ T8975] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  132.037596][ T8975] RBP: 00007f0d76811e19 R08: 0000000000000000 R09: 0000000000000000
[  132.040058][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.042546][ T8975] R13: 00007f0d769c6038 R14: 00007f0d769c5fa0 R15: 00007fff89d8ac38
[  132.045218][ T8975]  </TASK>
[  132.046221][ T8975] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  132.048440][ T8975] CPU: 1 UID: 0 PID: 8975 Comm: syz.0.754 Not tainted syzkaller #0 PREEMPT(full) 
[  132.051848][ T8975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.054982][ T8975] Call Trace:
[  132.056060][ T8975]  <TASK>
[  132.057165][ T8975]  dump_stack_lvl+0x99/0x250
[  132.059009][ T8975]  ? __asan_memcpy+0x40/0x70
[  132.060812][ T8975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.062873][ T8975]  ? __pfx__printk+0x10/0x10
[  132.064735][ T8975]  vpanic+0x281/0x750
[  132.066369][ T8975]  ? __pfx__printk+0x10/0x10
[  132.068217][ T8975]  ? __pfx_vpanic+0x10/0x10
[  132.070070][ T8975]  ? is_bpf_text_address+0x26/0x2b0
[  132.072165][ T8975]  panic+0xb9/0xc0
[  132.073732][ T8975]  ? __pfx_panic+0x10/0x10
[  132.075558][ T8975]  __warn+0x31b/0x4b0
[  132.077209][ T8975]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  132.079577][ T8975]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  132.081884][ T8975]  report_bug+0x2be/0x4f0
[  132.083672][ T8975]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  132.085996][ T8975]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  132.088309][ T8975]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  132.090586][ T8975]  handle_bug+0x84/0x160
[  132.092307][ T8975]  exc_invalid_op+0x1a/0x50
[  132.094126][ T8975]  asm_exc_invalid_op+0x1a/0x20
[  132.096091][ T8975] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  132.098663][ T8975] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 52 b0 8c e8 96 82 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 e6 d6 f6 90 0f 0b 90 42 80 7c 3d
[  132.106248][ T8975] RSP: 0018:ffffc900085e6f80 EFLAGS: 00010246
[  132.108693][ T8975] RAX: 86d7f2a57bc82000 RBX: 0000000000000000 RCX: ffff8880428c9cc0
[  132.111767][ T8975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  132.114854][ T8975] RBP: ffff88810d5a9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[  132.118009][ T8975] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810d5aa9d0
[  132.121176][ T8975] R13: ffff88810d5a8d80 R14: 1ffff11021ab52e5 R15: dffffc0000000000
[  132.124287][ T8975]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  132.126639][ T8975]  __ieee80211_link_release_channel+0x33b/0x4a0
[  132.129081][ T8975]  ? __pfx_ieee80211_uninit+0x10/0x10
[  132.131184][ T8975]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  132.133662][ T8975]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  132.136248][ T8975]  ? __pfx_call_rcu+0x10/0x10
[  132.138123][ T8975]  unregister_netdevice_queue+0x33c/0x380
[  132.140386][ T8975]  ? kernfs_remove_by_name_ns+0xee/0x130
[  132.142564][ T8975]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  132.145010][ T8975]  _cfg80211_unregister_wdev+0x165/0x590
[  132.147210][ T8975]  ieee80211_if_remove+0x256/0x310
[  132.149285][ T8975]  ieee80211_del_iface+0x19/0x30
[  132.151229][ T8975]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  132.153545][ T8975]  genl_family_rcv_msg_doit+0x215/0x300
[  132.155741][ T8975]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  132.158156][ T8975]  ? bpf_lsm_capable+0x9/0x20
[  132.160047][ T8975]  ? security_capable+0x7e/0x2e0
[  132.162075][ T8975]  genl_rcv_msg+0x60e/0x790
[  132.163967][ T8975]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.166062][ T8975]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  132.168169][ T8975]  ? __pfx_nl80211_del_interface+0x10/0x10
[  132.170444][ T8975]  ? __pfx_nl80211_post_doit+0x10/0x10
[  132.172629][ T8975]  ? __asan_memcpy+0x40/0x70
[  132.174478][ T8975]  ? __pfx_ref_tracker_free+0x10/0x10
[  132.176621][ T8975]  netlink_rcv_skb+0x208/0x470
[  132.178503][ T8975]  ? __lock_acquire+0xab9/0xd20
[  132.180461][ T8975]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.182433][ T8975]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.184556][ T8975]  ? down_read+0x1ad/0x2e0
[  132.186343][ T8975]  genl_rcv+0x28/0x40
[  132.187963][ T8975]  netlink_unicast+0x82f/0x9e0
[  132.189898][ T8975]  ? __pfx_netlink_unicast+0x10/0x10
[  132.191990][ T8975]  ? netlink_sendmsg+0x642/0xb30
[  132.193985][ T8975]  ? skb_put+0x11b/0x210
[  132.195701][ T8975]  netlink_sendmsg+0x805/0xb30
[  132.197588][ T8975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.199692][ T8975]  ? aa_sock_msg_perm+0xf1/0x1d0
[  132.201668][ T8975]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.203773][ T8975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.205887][ T8975]  __sock_sendmsg+0x21c/0x270
[  132.207771][ T8975]  ____sys_sendmsg+0x505/0x830
[  132.209698][ T8975]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.211790][ T8975]  ? import_iovec+0x74/0xa0
[  132.213611][ T8975]  ___sys_sendmsg+0x21f/0x2a0
[  132.215487][ T8975]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.217568][ T8975]  ? __fget_files+0x2a/0x420
[  132.219425][ T8975]  ? __fget_files+0x3a0/0x420
[  132.221251][ T8975]  __x64_sys_sendmsg+0x19b/0x260
[  132.223224][ T8975]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.225405][ T8975]  ? rcu_is_watching+0x15/0xb0
[  132.227306][ T8975]  ? do_syscall_64+0xbe/0x3b0
[  132.229162][ T8975]  do_syscall_64+0xfa/0x3b0
[  132.230947][ T8975]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.232979][ T8975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.235339][ T8975]  ? exc_page_fault+0x9f/0xf0
[  132.237164][ T8975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.239447][ T8975] RIP: 0033:0x7f0d7678ebe9
[  132.241191][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.248736][ T8975] RSP: 002b:00007f0d776e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.251979][ T8975] RAX: ffffffffffffffda RBX: 00007f0d769c5fa0 RCX: 00007f0d7678ebe9
[  132.255005][ T8975] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  132.258040][ T8975] RBP: 00007f0d76811e19 R08: 0000000000000000 R09: 0000000000000000
[  132.261114][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.264178][ T8975] R13: 00007f0d769c6038 R14: 00007f0d769c5fa0 R15: 00007fff89d8ac38
[  132.267294][ T8975]  </TASK>
[  132.269295][ T8975] Kernel Offset: disabled
[  132.270991][ T8975] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:37:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000005 RBX=ffffffff8e139f20 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88801fc65640 RBP=0000000000000000 RSP=ffffc900087a7268
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900087a74b8 R11=ffffffff81ac3ae0
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88801fc66130
RIP=ffffffff819d6411 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f28f8731440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900085e6730
R8 =ffff888020678237 R9 =1ffff110040cf046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018ec R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0d776e66c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001440 CR3=00000000236ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f0d774fd100 00007f0d76997460 XMM05=00007f0d76997478 00007f0d769974c0
XMM06=00007f0d769974b8 00007f0d769974b0 XMM07=00007f0d769974a8 00007f0d769974a0
XMM08=0000000000000000 00007f0d76812ee7 XMM09=0000000000000000 00007f0d76812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
