last executing test programs:

1.376352612s ago: executing program 0 (id=8774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x38, 0x28, 0x20, 0x40004001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d8}, 0x0)

1.297245953s ago: executing program 0 (id=8779):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010003704010004800000000000000000", @ANYRES32=r1, @ANYBLOB="e9a802000b2ebe264c0012800e0001006970366772657461700000003800028008000100", @ANYRES32=r1, @ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000ffffffea000000000000eb00000000000000499349957a83bb140e5240141159abb0aa00fbcb143b65e98dcfef4d0d925262593f1faa239934799ee0af1c70162fad2a543a5bdb69471b20", @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.229349868s ago: executing program 0 (id=8781):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xea, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xea, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) (async)

1.228830576s ago: executing program 0 (id=8782):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0300000000000000000000000000000d04000000000000000000000400000000040000000000000f03000000006100302e"], 0x0, 0x53}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b405000000000000611034000000000063016400000800b8b8a75f1e11aab300c90d5accc54e2abec6d060ca97e83e9f316381a659bf34e344c78c3dc36e768c38c4b8d073f2bee0cf51c00a44ccae5dc698fa414ac5450381faf926432d0062b7b63b914f3a6ad3ba3611162f387a1899c6cbd4d4394604ea90b06a85d9f0df3613bb22c485cf8bcdb31f8470defec93b99c39ed72b3911b2293c548f29a3a4b8f1aaf83dfb22de93ef7f98c1de2dce0275db23b599c367986a361986247ddb0875dbfef068dfe76b81df4dbe1fcf90118e2407eac93c00aef9b6a63850f63ee45ea89a47e3f882652775797a5a70f3617a35e8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x4, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10)
close(0x3)
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d1f31659192a0f41ceeb8d4e066b03dd262db8814fcc34e5ec566c9076da39a6107e32ede4020a569db75aa87ff52374adb74ffc2d579834994a0a44c253cf69999516657e81c72d198470fe0ae1370f3a7c7d6e8b30847e1cbab092cac2090c655444b8be172ab4a63ac83ac0e3dd7d21b04e2207d57311bceb5652eb1a11ece0f3", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf257200000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r8, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000140)=0x37, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
tee(r9, r10, 0x22b2, 0x2)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$sock(r11, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
getsockname$packet(r11, 0x0, &(0x7f0000000240))
connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

1.041209892s ago: executing program 0 (id=8784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}, {0x0, 0x2}], 0x2)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="99175e02c57ad612e09c31b2a76c31450c3b01ecdfb88b64d386c5d0343a01556d78ac1f1fa6cae849ca1ff2704a346bda0cf4ea684dd3da26eb14b2f1fcd8caf25afd4a91342c110632903537982f137aa1cc9190f5e5bd56b523aa33b230c5e9b57cdee8e5f10b0fe76fb3d7ad8844cafe1e351503d4b8839849", @ANYRES16=r1, @ANYBLOB="010029bd70000000000003000000280001800d0001007564703a73797a31000000001400028008000100120000000800040006000000"], 0x3c}}, 0x0)

609.490058ms ago: executing program 1 (id=8790):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100002e00010000cea14eb300000004001980080111800101cf80e32fc4fb"], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x40, r4, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000a00)={'syztnl0\x00', <r5=>0x0, 0x1, 0x700, 0x7, 0x4, {{0x23, 0x4, 0x0, 0x1, 0x8c, 0x67, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x5, [{@multicast1, 0x8}, {@remote, 0x3}]}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x12, "821680fc11bb53b9c948b1114c6bf81a"}, {0x0, 0xa, "c854be0d9d7432d1"}, {0x1, 0x12, "6ccafcf0820804613d69007c4c45f8d3"}]}, @rr={0x7, 0x17, 0x71, [@multicast2, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @timestamp_prespec={0x44, 0xc, 0x49, 0x3, 0xd, [{@multicast1, 0x9}]}, @rr={0x7, 0xb, 0x85, [@multicast1, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b80)={0xd8, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48841}, 0x20000891)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'virt_wifi0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "e629bd6970bd15aba3954e41407721d2f8d4ce93fb2d19cf393a05682faac9ae", "3f02c40e88b6eeac6da59b3e05243609aa2592001eef3f9960a261e2e74905d5", "730826c040bad073cfe36d88eb3803b5327fa4623c364c6d0c4a644bc3f65f7b", "dfe6bb0e049221adac3221e6061268a27fc7350aa6229746d38f9e84bde00713", "d095f0a352437ac2c9e0640e784a5ab78505c7cf6c32924a303722c2181a5ccb", "1faca906c49991c92e43a3f4", 0xbf, 0x46d5, 0x0, 0x0, 0x1}}) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000000201030000000000000000070000028c000a8008000140000000003400028014000180086f19a191470a506eab79f467000002060003400001000006000340000400000c00028005000100010000000800014000000001440002800c000280050001005d2f0000000c000280050001008400000006000340000400000c02028005000100210000001400018008000100e0000002080002000a010100ce4d7cb0576fceeb11a5a46dcfd292a1bd25"], 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/142, &(0x7f0000000180)=0x8e)

370.581548ms ago: executing program 1 (id=8792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8)
sendto$inet6(r2, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendto$inet6(r2, &(0x7f0000000040)="de", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e21, 0x2400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r4=>0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r4, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x29, 0x0, @local, @multicast2}}}})

264.019071ms ago: executing program 2 (id=8794):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200feffff000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

211.212254ms ago: executing program 1 (id=8795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

210.352857ms ago: executing program 2 (id=8796):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x8000010}, 0x0)

210.131438ms ago: executing program 1 (id=8797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff000000", @ANYRES32, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c0000300004802c"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200088c4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r8, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080)

110.962434ms ago: executing program 0 (id=8798):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x80000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e00000000000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34000000592405d7873eed647aac28a871bc0465b55ec13641d2337f909339d0beea3d6873d25cf999c92a2c780eef82064d9e43ac82094ca346644fd60a3f15a937f7144952f8b035bcdf6351b2d5d011390709a554da47442fc4ef96ef47d7adbb94b40c04989ba86f214cab3b699e50cf06bc0760a845bebddde5ac9e75ecbf12d33fad4c359a1e9fda020baf39a861d18fd5990724513c128af5f654cee3db8482be9de870e7c4b07194c02ee2c96881d8b0d36bb379cd304243c477ba4fd723a37def4c756885805f871df47841fed51342608ddf4a474b2584b43659b0cec73b992f2308faf223344ab4fa740ea4f5a671c8f53b9bbd35e95953df8eda4add02fa4790948e94072ca2e7a036dfd19952ee47ca531ece039d525c883e7147520ce3354a56f92cdd5f930ea11943e684268473b546d0169af59f1bdbe598fb0afa49eb8d31a3dccb5d99cd987692b71c036001401b21cb315ee3ee393d2ee32453cc003054f5caf4e7fecceeb44993dc630e0d589ba07bc4a388", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0800a0002609000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x8000, 0x1, 0x80, 0x3, r3}, &(0x7f0000000380)=0x10) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="d180c2000000bbbbbbbbbbbb08004500000000019078ac1e0001ac1414aa030490781200183f250000000064000000320077f90000017f00000100a5008808fb50092ce1021793186371ae9b1c03"], 0x0) (async, rerun: 64)
close(r7) (rerun: 64)
close(0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x0, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r11, {0xffe7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7fffffff}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x10}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4004850)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r8, @ANYRES32=r10, @ANYRESHEX=r1, @ANYRES32=r9], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000014)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004240)=ANY=[@ANYRESOCT=0x0], 0x2b78}, 0x1, 0x0, 0x0, 0x30008841}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000800000091100800000000c39500000000000000e242e10df67373182cba4f8bf7c87fada6e0b5def7b0acdb573350e04ac38caafee50985fe20d132fc1e68dc76c82fcc69ccafc114c95ea573f4cb035dfa59f61ca4164076a3763e928b790f7d4de6c3f34e6836a2f320d0d5bf81a22a784360d3a40570b41e374853d559a3f44edd75ee482c020c4186b2c2e7511fe17daf795c8ec1f7c20c71c5d03db98782f0e996366074", @ANYRES8=r10, @ANYRES16, @ANYRESHEX=r7], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]})
getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

110.231455ms ago: executing program 2 (id=8799):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x90}}, 0x50880)

109.721495ms ago: executing program 2 (id=8800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0xa03, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4011)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)={0x334, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "7f57874793079341caa4ff760f3e2111cdcf1b46c50d2791d8d32394d71faca4500874b70ea422a1dd47135646d6acc5884bc9623c6a3d651f5133eb8d14a917be9afc069c1e156a1b64852d4d159f0d8a0deb0e90b47039345b61b5870e08b36119b1038f30d09cf9982afee6151af367f589743d030f99894637c091a0d4298065bd7a67e6f53fdbe769ea118664b3db780afb4c114052bd8aa7a2d1bef6de6ee1dcbb799a47"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d3bd048}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x41, 0x3, "ae64b66e181d3297d84f5a8b6cced24948ac97af3fe21b64196e7a5db548380a9212ccb2be6aac765e0fef3eb2f9c8e70999ff390612eae93cc0ae873b"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x8080}, 0x20000054)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0xa03, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4011) (async)
socket$key(0xf, 0x3, 0x2) (async)
recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)={0x334, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "7f57874793079341caa4ff760f3e2111cdcf1b46c50d2791d8d32394d71faca4500874b70ea422a1dd47135646d6acc5884bc9623c6a3d651f5133eb8d14a917be9afc069c1e156a1b64852d4d159f0d8a0deb0e90b47039345b61b5870e08b36119b1038f30d09cf9982afee6151af367f589743d030f99894637c091a0d4298065bd7a67e6f53fdbe769ea118664b3db780afb4c114052bd8aa7a2d1bef6de6ee1dcbb799a47"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d3bd048}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x41, 0x3, "ae64b66e181d3297d84f5a8b6cced24948ac97af3fe21b64196e7a5db548380a9212ccb2be6aac765e0fef3eb2f9c8e70999ff390612eae93cc0ae873b"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x8080}, 0x20000054) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) (async)

51.237282ms ago: executing program 1 (id=8801):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xd4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x13}, 0x20000040) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10) (async)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2) (async)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
writev(r8, &(0x7f0000000600)=[{&(0x7f0000000280)="4a27435076ba76ccb664f45a3ae393c4d13ea84316321add697e9e2e0c8331cd8163ae7417b7513c3d55ba3096da621155e9b698b9dff286e3280b9d3a44ec776bf55d2c090607997f48cdbf1abf268b2c3516426926c7a7105b", 0x5a}, {&(0x7f00000001c0)="3c438ef70138b04daafa92c88c7802e46d365c52a085b613f7774585a2c2937fc4b6ac1fc51f2bea692303d2463e95b35862476d79636527df39", 0x3a}, {&(0x7f0000000340)="41a303ee", 0x4}, {&(0x7f0000000380)="ff4471eab0acfd894f976099e9b5ecb67d0ced9b24d0d313765556404aac98d81c70f7c2dc1a50c76b2568549e3ddfc022223f9701cde046e6fbc870b755f378bb", 0x41}, {&(0x7f0000000400)="5e4f34b3045fceb3462b5b20123ca646523928944daac737d1f9cdd0d340c5e063f8c0d31b73363be495bd1161634f84763243ede860e136ca0b8cb1d5ec73e8990f02b3611eaaa826bad4afcb16ee60baf805eae28374ba8b98f0a640bbc3645acf1dda9760eaf164f9923265bc2628f9432ccbd7d87025117edf10e22e1d9194ad5d6a847d9be4e2fb7eb3a5d1590f946609fa9b15ecb8ab", 0x99}, {&(0x7f0000000540)="d976683d656ffe059bf8", 0xa}, {&(0x7f0000000580)="50d6def6ad5ceb13c09899250c351170b8af9a4251c7cb4f89d15600aa48974e2bd54d483ec0f773720a2f178ebaf136d6cb9d2dd8286e2f8e0d0a59869c9f1817dcaf64ddcaf0e557aa12a094bcd485c36e06c59207aa53a69fe9b2373c37", 0x5f}], 0x7) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x4804) (async)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={0x14, 0x0, 0x4f79951a91b7df8f, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x42000}, 0x40000c4) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008080)

540.289µs ago: executing program 2 (id=8802):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0xf6)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300)

189.933µs ago: executing program 1 (id=8803):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='%\'$\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x3]}, {0xd90, 0x0, 0x9}}, 0x7f, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x100}, 0x3, &(0x7f0000000380)=[{0xd6f38545aaeeafec, 0x6478, &(0x7f0000000100)='\x00', &(0x7f0000000140)="8ffa80232141811e6d0a82336b8bf401a16cadc80482bedb60ddba0d3a5279883903a8035a2dd5d6d669b78061ef96ad815743699c46281487c0e46c5862ebbc6757eee46d00097b60ae85f4491f31", 0x4f, 0x30}, {0x3, 0x3000000, &(0x7f00000001c0)='()#\\\'\x00', &(0x7f0000000200)="c078fa244fa56da78374b622d84fe17a9e26f5e09d25acdadc845cbf105d9f536c2c3f4ed36eb288c34b5024337028a8dbcf3b23a388f4a1b461ee149e224dcbf0010b7b3abd2f840933f8569d66b2d0183fcf29a6cdc6c362a9291e6ae161eedcd0173db9867af3f49f4ad95f557320faa54a55fbb7781fe022af0eec41107c0090fe4b81b46852", 0x88, 0x20}, {0x1, 0x5, &(0x7f00000002c0)='@+\x00', &(0x7f0000000300)="a8fafb12f18f1b37b42b7fcfa5dd6b419f3d33a5ca525654f38e122b75a55f791cdcb328df954c0e5d5bc87bf2d5c045ecf46f0a68be41125ed59c16133a2c96df6341ee880230341cef56d5ec34ccc5396cb3aa5c541d992ca51bef1219dcb634345d", 0x63, 0x20}]})
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000480))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, &(0x7f00000004c0)="1f6e2761bfc3e8b1bc", &(0x7f0000000500)=""/232}, 0x20)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000640))
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x80000001, <r1=>0x0}, 0x8)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4d87ae36}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xe, 0x8, 0x0, 0x7, 0x7f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf15a}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xca}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0xa, 0xb1, &(0x7f0000000840)=""/177, 0x41100, 0x40, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x4, 0x5, 0xec5, 0xb}, 0x10, r1, 0x0, 0x0, &(0x7f0000000980)=[r0, r0, r0], 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x1, 0xc, 0x7fff, 0x20, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x8, 0x200}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b40)={'ip_vti0\x00', <r4=>r3, 0x80, 0x1, 0x70e, 0x9, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x13, 0x8d, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @end, @cipso={0x86, 0x42, 0x0, [{0x6, 0x7, "e60336ed67"}, {0x7, 0xf, "017b38b64f176755ab8de630fa"}, {0x0, 0xf, "497c1c6a799b8770d8ec4cb8fe"}, {0x0, 0x2}, {0x0, 0x7, "e891bac4a4"}, {0x0, 0x7, "ff2e4f95b0"}, {0x0, 0x7, "6c3264cadf"}]}, @generic={0x148, 0xf, "dca80788b2e50384f0ea53263b"}, @timestamp={0x44, 0xc, 0x7b, 0x0, 0x9, [0x3, 0xb]}, @end]}}}}})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000c40)={<r5=>0x0, 0x40}, &(0x7f0000000c80)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000cc0)={0x1ff, 0x0, 0x4, 0x7ff, r5}, 0x10)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000d00)=0x96, &(0x7f0000000d40)=0x4)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000d80))
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40044880)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x0, 0x5a, 0x7f, &(0x7f0000000f40)="b8bb126f651dbf22c487680512e76912c3daec336f6640bb704d4d6fb8d3a0d0742b3e4317b8b4c3622de07137de95f5d723139bf16289bb2954bd1900c0296b4b6f6aa3ca335cbc5a5579141a916edfb83d57c24f7477f1b911", &(0x7f0000000fc0)=""/127, 0x57, 0x0, 0x73, 0x0, &(0x7f0000001040)="76b33eaf6fb765f9dcd96043f09c358a067c559aff544636d4cde3ff3c8d8bd0b22ed2c8734a6c779a29d752325e4efff24be5157b3b296698d478deb41cdd102efb28e6a467bc78ab7537f6f1c73380bf34ae51681c2d32a83edf7a1d1daa7cd0615761c94a3403888e883912ecb1ee55c8e2", &(0x7f00000010c0), 0x0, 0x0, 0x5}, 0x50)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000080)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x24004004)
pwrite64(r2, &(0x7f0000001380)="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", 0xfd, 0x4)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000002480)={&(0x7f0000001480)=""/4096, 0x1000})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000024c0)={0x52, <r7=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002500)=r7, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x1b, 0x22, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x14f8d878, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x6, 0x0, 0x80}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002680)='GPL\x00', 0x5, 0xd8, &(0x7f00000026c0)=""/216, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000027c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002800)={0x4, 0x0, 0x9, 0x5}, 0x10, 0x0, r2, 0x1, &(0x7f0000002840)=[0x1, r0, r2, r0, r0], &(0x7f0000002880)=[{0x1, 0x1, 0x4, 0xc}]}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002980)={@ifindex=r3, r0, 0xa, 0x8, r8, @void, @value=r2}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0xc, 0x6, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0xffff}, [@ldst={0x3, 0x2, 0x2, 0x0, 0x5, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000002a00)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002a80)=[{0x3, 0x2, 0xb, 0x2}, {0x0, 0x4, 0x10}, {0x4, 0x1, 0x3, 0x3}], 0x10, 0x3}, 0x94)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002bc0)=@o_path={&(0x7f0000002b80)='./file0\x00', r9, 0x4000, r9}, 0x18)
getsockname$packet(r0, &(0x7f0000002c40)={0x11, 0x0, <r10=>0x0}, &(0x7f0000002c80)=0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000002e00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0xe0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4044880}, 0x40000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e40)={r0}, 0x4)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002e80)={r5, 0x4, 0x40}, 0x10)

0s ago: executing program 2 (id=8804):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x42, 0x107, 0x0, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x44000)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x81, 0x0, 0xa, 0x8, 0x0, 0x81})
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r4, @ANYRESDEC=r1], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200680803600cfab94dcf5c0461c1d67f6f94007134cf", 0x4f}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x3, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r6, &(0x7f0000001080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000340))
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0xffe3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x1}}]}}]}, 0x44}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)

kernel console output (not intermixed with test programs):

1916] tipc: Failed to remove unknown binding: 66,1,1/2334981084:2638888268/2638888270
[  572.502876][ T1916] tipc: Failed to remove unknown binding: 66,1,1/2334981084:2638888268/2638888270
[  572.508984][ T1916] tipc: Failed to remove unknown binding: 66,1,1/2334981084:2638888268/2638888270
[  572.514053][ T1916] validate_nla: 11 callbacks suppressed
[  572.514068][ T1916] netlink: 'syz.2.7545': attribute type 1 has an invalid length.
[  572.530024][ T1916] bond133: entered promiscuous mode
[  572.531892][ T1916] 8021q: adding VLAN 0 to HW filter on device bond133
[  572.549269][ T1916] bond133: (slave bridge82): making interface the new active one
[  572.551731][ T1916] bridge82: entered promiscuous mode
[  572.554897][ T1916] bridge82: left promiscuous mode
[  572.598750][ T1924] netlink: 'syz.1.7547': attribute type 1 has an invalid length.
[  572.624393][ T1924] bond174: entered promiscuous mode
[  572.627991][ T1924] bond174: entered allmulticast mode
[  572.631291][ T1924] 8021q: adding VLAN 0 to HW filter on device bond174
[  572.640490][ T1924] bond0: Caught tx_queue_len zero misconfig
[  572.659025][ T1924] macvlan4: entered promiscuous mode
[  572.661282][ T1924] macvlan4: entered allmulticast mode
[  572.665363][ T1924] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  572.753691][ T1929] netlink: 'syz.1.7549': attribute type 4 has an invalid length.
[  572.765512][ T5862] lo speed is unknown, defaulting to 1000
[  572.769113][ T5862] syz2: Port: 1 Link DOWN
[  573.304845][ T1966] netlink: 'syz.1.7556': attribute type 1 has an invalid length.
[  573.359187][ T1966] 8021q: adding VLAN 0 to HW filter on device bond176
[  573.367738][ T1966] bond175: (slave bond176): making interface the new active one
[  573.371552][ T1966] bond175: (slave bond176): Enslaving as an active interface with an up link
[  573.381479][ T1966] 8021q: adding VLAN 0 to HW filter on device bond175
[  573.409819][ T1966] vlan16: entered promiscuous mode
[  573.412033][ T1966] bond175: entered promiscuous mode
[  573.414810][ T1966] bond176: entered promiscuous mode
[  573.495230][ T1973] netlink: 'syz.0.7558': attribute type 1 has an invalid length.
[  573.530862][ T1973] bond193: (slave vxcan7): The slave device specified does not support setting the MAC address
[  573.536980][ T1973] bond193: (slave vxcan7): Error -95 calling set_mac_address
[  573.587257][ T1979] bond193: (slave bridge91): Enslaving as an active interface with a down link
[  573.604728][ T1973] bond193: (slave bridge92): Enslaving as an active interface with a down link
[  573.648212][ T1973] macvlan0: entered promiscuous mode
[  573.650397][ T1973] macvlan0: entered allmulticast mode
[  573.653510][ T1973] bond193: entered promiscuous mode
[  573.657081][ T1973] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  573.662494][ T1973] bond193: left promiscuous mode
[  573.953665][ T2002] netlink: 'syz.0.7568': attribute type 2 has an invalid length.
[  573.963220][ T2002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  574.067094][ T2010] netlink: 'syz.0.7570': attribute type 1 has an invalid length.
[  574.094083][ T2010] 8021q: adding VLAN 0 to HW filter on device bond194
[  574.119722][ T2013] bond177: entered promiscuous mode
[  574.121997][ T2013] 8021q: adding VLAN 0 to HW filter on device bond177
[  574.223608][ T2029] lo: Caught tx_queue_len zero misconfig
[  574.308087][ T2035] team_slave_1: Caught tx_queue_len zero misconfig
[  574.327728][ T2035] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.341703][ T2037] lo speed is unknown, defaulting to 1000
[  574.696496][ T2057] netlink: 'syz.0.7583': attribute type 8 has an invalid length.
[  574.969760][ T2063] netlink: 'syz.0.7585': attribute type 1 has an invalid length.
[  575.027354][ T2074] netlink: 'syz.2.7586': attribute type 30 has an invalid length.
[  575.215364][ T2074] __nla_validate_parse: 44 callbacks suppressed
[  575.215383][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.232635][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.235988][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.272198][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.275658][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.285092][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.296266][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.314993][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.324478][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.334960][ T2074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7586'.
[  575.424738][ T2074] tipc: Resetting bearer <eth:ip6gre0>
[  575.997931][ T2103] sctp: [Deprecated]: syz.2.7593 (pid 2103) Use of int in max_burst socket option.
[  575.997931][ T2103] Use struct sctp_assoc_value instead
[  576.048429][ T2104] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  576.055507][ T5862] lo speed is unknown, defaulting to 1000
[  576.059613][ T5862] syz2: Port: 1 Link ACTIVE
[  576.170512][ T2110] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  576.181459][ T2111] xt_CT: No such helper "syz0"
[  576.199142][ T2110] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  576.641572][ T2152] syzkaller1: entered promiscuous mode
[  576.643630][ T2152] syzkaller1: entered allmulticast mode
[  576.735861][ T2158] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  576.910611][ T2170] 8021q: adding VLAN 0 to HW filter on device bond179
[  576.914199][ T2170] bond178: (slave bond179): making interface the new active one
[  576.918419][ T2170] bond178: (slave bond179): Enslaving as an active interface with an up link
[  576.925617][ T2170] 8021q: adding VLAN 0 to HW filter on device bond178
[  577.024932][ T2181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.540217][   T33] audit: type=1107 audit(1772818922.824:5): pid=2207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  577.543569][ T2209] dvmrp12: entered allmulticast mode
[  577.581395][ T2207] dvmrp12: left allmulticast mode
[  577.662505][ T2218] bond180: entered promiscuous mode
[  577.664455][ T2218] 8021q: adding VLAN 0 to HW filter on device bond180
[  577.676593][ T2218] 8021q: adding VLAN 0 to HW filter on device bond180
[  577.681404][ T2218] bond180: (slave ip6tnl13): The slave device specified does not support setting the MAC address
[  577.686818][ T2218] bond180: (slave ip6tnl13): Error -95 calling set_mac_address
[  577.709113][ T2221] validate_nla: 5 callbacks suppressed
[  577.709130][ T2221] netlink: 'syz.2.7629': attribute type 4 has an invalid length.
[  577.717712][ T2221] netlink: 'syz.2.7629': attribute type 4 has an invalid length.
[  577.868660][ T2233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.915238][ T2237] openvswitch: netlink: IP tunnel dst address not specified
[  577.936049][ T2239] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  578.020505][ T2249] sctp: [Deprecated]: syz.1.7639 (pid 2249) Use of int in maxseg socket option.
[  578.020505][ T2249] Use struct sctp_assoc_value instead
[  578.121194][ T2260] xt_socket: unknown flags 0x50
[  578.410996][ T2285] netlink: 'syz.2.7650': attribute type 21 has an invalid length.
[  578.453078][ T2285] lo speed is unknown, defaulting to 1000
[  578.458358][ T2289] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  579.049605][ T2318] bond135: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  579.053720][ T2318] bond135: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  579.267203][ T2329] netlink: 'syz.1.7663': attribute type 4 has an invalid length.
[  579.272132][ T2329] netlink: 'syz.1.7663': attribute type 4 has an invalid length.
[  579.352334][ T2336] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  579.359665][ T2336] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  579.371930][ T2338] team0: Port device gtp4 added
[  579.491642][ T2351] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  579.550080][ T2354] netlink: 'syz.1.7672': attribute type 1 has an invalid length.
[  579.581338][ T2354] bond181: entered promiscuous mode
[  579.583637][ T2354] 8021q: adding VLAN 0 to HW filter on device bond181
[  579.590784][ T2356] bond181: entered allmulticast mode
[  579.633002][ T2354] bond181: (slave bridge85): making interface the new active one
[  579.636547][ T2354] bridge85: entered promiscuous mode
[  579.638378][ T2354] bridge85: entered allmulticast mode
[  579.647673][ T2354] bond181: (slave bridge85): Enslaving as an active interface with an up link
[  579.659545][ T2356] bond181: (slave bridge86): Enslaving as a backup interface with an up link
[  579.714850][ T2371] ip6tnl0: Caught tx_queue_len zero misconfig
[  579.740495][ T2380] netlink: 'syz.2.7678': attribute type 3 has an invalid length.
[  579.750536][ T2380] netlink: 'syz.2.7678': attribute type 3 has an invalid length.
[  580.171449][ T2431] netlink: 'syz.0.7687': attribute type 10 has an invalid length.
[  580.232773][ T2436] netlink: 'syz.1.7690': attribute type 1 has an invalid length.
[  580.720318][ T2450] xt_hashlimit: size too large, truncated to 1048576
[  580.819943][ T2450] __nla_validate_parse: 190 callbacks suppressed
[  580.819956][ T2450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7692'.
[  580.826040][ T2450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7692'.
[  580.882411][ T2454] pim6reg1: entered promiscuous mode
[  580.884278][ T2454] pim6reg1: entered allmulticast mode
[  581.007223][ T2458] pim6reg1: entered promiscuous mode
[  581.009410][ T2458] pim6reg1: entered allmulticast mode
[  581.227713][ T2475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7702'.
[  581.273044][ T2484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7700'.
[  581.337440][ T2486] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7703'.
[  581.341059][ T2486] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7703'.
[  581.367687][ T2488] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7704'.
[  581.371867][ T2488] 0X: renamed from 61X
[  581.375509][ T2488] 0X: entered allmulticast mode
[  581.377930][ T2488] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  581.411099][ T2490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7705'.
[  581.416360][ T2490] 8021q: adding VLAN 0 to HW filter on device bond195
[  581.561802][ T2504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7708'.
[  581.699242][ T2518] netlink: 'syz.0.7710': attribute type 11 has an invalid length.
[  581.983250][ T2534] openvswitch: netlink: IP tunnel dst address not specified
[  581.988230][ T2533] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7713'.
[  582.154227][ T2537] lo: Caught tx_queue_len zero misconfig
[  582.184252][ T2547] bond196 (unregistering): Released all slaves
[  582.326258][ T2562] bond197: Unable to set up delay as MII monitoring is disabled
[  582.329764][ T2562] bond197 (unregistering): Released all slaves
[  582.348730][ T2558] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  582.352972][ T2558] syzkaller0: entered promiscuous mode
[  582.355836][ T2558] syzkaller0: entered allmulticast mode
[  582.413799][ T2568] 0X: left allmulticast mode
[  582.415603][ T2568] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  582.527783][ T2584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.569832][ T2584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.609361][ T2584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.650144][ T2584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.695080][ T5842] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.705004][ T5842] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.715936][ T5842] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.726784][ T5842] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.732192][ T2582] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.782554][ T2582] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.800673][ T2601] bond182: option min_links: invalid value (18446744073709551612)
[  582.804053][ T2601] bond182: option min_links: allowed values 0 - 2147483647
[  582.810054][ T2601] bond182 (unregistering): Released all slaves
[  582.829169][ T2582] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.838438][ T2603] : renamed from bond_slave_0
[  582.871261][ T2582] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.895593][ T2605] validate_nla: 7 callbacks suppressed
[  582.895605][ T2605] netlink: 'syz.1.7730': attribute type 1 has an invalid length.
[  582.918123][ T2605] bond182: entered promiscuous mode
[  582.920221][ T2605] 8021q: adding VLAN 0 to HW filter on device bond182
[  582.932166][ T2605] 8021q: adding VLAN 0 to HW filter on device bond182
[  582.937237][ T2605] geneve13: entered promiscuous mode
[  582.939463][ T2605] bond182: (slave geneve13): Enslaving as an active interface with an up link
[  582.945829][T16469] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  582.949515][T16469] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  582.953668][T16469] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  582.956680][T16469] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  583.353278][ T2621] rdma_rxe: rxe_newlink: failed to add wg1
[  583.508202][ T5842] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.520671][ T5842] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.530306][T28499] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.539275][T28499] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.734555][ T2637] netlink: 'syz.0.7736': attribute type 1 has an invalid length.
[  583.764094][ T2637] bond197: (slave veth89): Enslaving as an active interface with a down link
[  584.066712][ T2670] veth0: entered promiscuous mode
[  584.074326][ T2668] veth0: left promiscuous mode
[  584.222930][ T2693] netlink: 'syz.2.7743': attribute type 10 has an invalid length.
[  584.848672][ T2730] bond198: Removing last ns target with arp_interval on
[  584.887589][ T2738] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.898889][ T2743] mac80211_hwsim hwsim156 wlan0: Caught tx_queue_len zero misconfig
[  584.984997][ T2755] netlink: 'syz.1.7753': attribute type 16 has an invalid length.
[  584.990989][ T2755] netlink: 'syz.1.7753': attribute type 17 has an invalid length.
[  584.994338][ T2756] netlink: 'syz.2.7755': attribute type 1 has an invalid length.
[  585.001254][ T2749] bond199: option lp_interval: invalid value (0)
[  585.003412][ T2749] bond199: option lp_interval: allowed values 1 - 2147483647
[  585.007768][ T2749] bond199 (unregistering): Released all slaves
[  585.064329][ T2756] 8021q: adding VLAN 0 to HW filter on device bond136
[  585.077251][ T2761] bond136: entered promiscuous mode
[  585.085086][ T2760] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  585.091880][ T2760] netlink: 'syz.1.7756': attribute type 1 has an invalid length.
[  585.094972][ T2760] netlink: 'syz.1.7756': attribute type 1 has an invalid length.
[  585.220285][ T2788] netlink: 'syz.1.7761': attribute type 1 has an invalid length.
[  585.273707][ T2788] 8021q: adding VLAN 0 to HW filter on device bond184
[  585.282116][ T2788] bond183: (slave bond184): making interface the new active one
[  585.285912][ T2788] bond183: (slave bond184): Enslaving as an active interface with an up link
[  585.305438][ T2788] 8021q: adding VLAN 0 to HW filter on device bond183
[  585.321376][ T2788] vlan17: entered promiscuous mode
[  585.323798][ T2788] bond183: entered promiscuous mode
[  585.326291][ T2788] bond184: entered promiscuous mode
[  585.344200][ T2795] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  585.349057][ T2795] CPU: 1 UID: 0 PID: 2795 Comm: syz.2.7763 Not tainted syzkaller #0 PREEMPT(full) 
[  585.349078][ T2795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  585.349087][ T2795] Call Trace:
[  585.349093][ T2795]  <TASK>
[  585.349097][ T2795]  dump_stack_lvl+0xe8/0x150
[  585.349113][ T2795]  sysfs_warn_dup+0x8e/0xa0
[  585.349125][ T2795]  sysfs_do_create_link_sd+0xc0/0x110
[  585.349136][ T2795]  device_add_class_symlinks+0x1cf/0x240
[  585.349151][ T2795]  device_add+0x475/0xb70
[  585.349163][ T2795]  wiphy_register+0x1d73/0x2d50
[  585.349180][ T2795]  ? __pfx_wiphy_register+0x10/0x10
[  585.349190][ T2795]  ? __pfx_netdev_run_todo+0x10/0x10
[  585.349198][ T2795]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  585.349209][ T2795]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  585.349222][ T2795]  ieee80211_register_hw+0x3571/0x4220
[  585.349255][ T2795]  ? ieee80211_register_hw+0x1411/0x4220
[  585.349268][ T2795]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  585.349283][ T2795]  ? __hrtimer_setup+0x181/0x200
[  585.349294][ T2795]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  585.349305][ T2795]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  585.349330][ T2795]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  585.349342][ T2795]  ? kstrndup+0xbf/0x160
[  585.349355][ T2795]  hwsim_new_radio_nl+0xf35/0x1bd0
[  585.349376][ T2795]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  585.349391][ T2795]  ? rcu_is_watching+0x15/0xb0
[  585.349401][ T2795]  ? trace_kmalloc+0x2a/0x110
[  585.349412][ T2795]  ? __nla_parse+0x40/0x60
[  585.349423][ T2795]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  585.349444][ T2795]  genl_family_rcv_msg_doit+0x22a/0x330
[  585.349458][ T2795]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  585.349473][ T2795]  ? bpf_lsm_capable+0x9/0x20
[  585.349484][ T2795]  ? security_capable+0x7e/0x2c0
[  585.349497][ T2795]  genl_rcv_msg+0x61c/0x7a0
[  585.349527][ T2795]  ? __pfx_genl_rcv_msg+0x10/0x10
[  585.349539][ T2795]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  585.349551][ T2795]  ? __lock_acquire+0x6b5/0x2cf0
[  585.349564][ T2795]  netlink_rcv_skb+0x232/0x4b0
[  585.349574][ T2795]  ? __pfx_genl_rcv_msg+0x10/0x10
[  585.349585][ T2795]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  585.349601][ T2795]  ? down_read+0x272/0x2e0
[  585.349607][ T2795]  ? genl_rcv+0xd/0x40
[  585.349618][ T2795]  genl_rcv+0x28/0x40
[  585.349628][ T2795]  netlink_unicast+0x80f/0x9b0
[  585.349639][ T2795]  ? __pfx_netlink_unicast+0x10/0x10
[  585.349648][ T2795]  ? netlink_sendmsg+0x650/0xb40
[  585.349656][ T2795]  ? skb_put+0x11b/0x210
[  585.349669][ T2795]  netlink_sendmsg+0x813/0xb40
[  585.349682][ T2795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  585.349693][ T2795]  ? aa_sock_msg_perm+0xf1/0x1b0
[  585.349703][ T2795]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  585.349712][ T2795]  ____sys_sendmsg+0x972/0x9f0
[  585.349723][ T2795]  ? futex_unqueue+0x211/0x240
[  585.349735][ T2795]  ? __pfx_____sys_sendmsg+0x10/0x10
[  585.349749][ T2795]  ? import_iovec+0x73/0xa0
[  585.349761][ T2795]  ___sys_sendmsg+0x2a5/0x360
[  585.349774][ T2795]  ? __pfx____sys_sendmsg+0x10/0x10
[  585.349787][ T2795]  ? futex_wait+0x29a/0x380
[  585.349807][ T2795]  ? __fget_files+0x2a/0x420
[  585.349817][ T2795]  ? __fget_files+0x3a0/0x420
[  585.349831][ T2795]  __x64_sys_sendmsg+0x1bd/0x2a0
[  585.349843][ T2795]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  585.349856][ T2795]  ? rcu_is_watching+0x15/0xb0
[  585.349872][ T2795]  do_syscall_64+0x14d/0xf80
[  585.349882][ T2795]  ? trace_irq_disable+0x3b/0x150
[  585.349892][ T2795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.349902][ T2795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.349910][ T2795] RIP: 0033:0x7fa32fb9c799
[  585.349918][ T2795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.349925][ T2795] RSP: 002b:00007fa3309ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.349934][ T2795] RAX: ffffffffffffffda RBX: 00007fa32fe15fa0 RCX: 00007fa32fb9c799
[  585.349968][ T2795] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  585.349977][ T2795] RBP: 00007fa32fc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  585.349982][ T2795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  585.349987][ T2795] R13: 00007fa32fe16038 R14: 00007fa32fe15fa0 R15: 00007ffd5b130238
[  585.350001][ T2795]  </TASK>
[  585.585687][ T2808] netlink: 'syz.1.7766': attribute type 142 has an invalid length.
[  585.799552][ T2821] bond185: option xmit_hash_policy: invalid value (10)
[  585.803392][ T2821] bond185 (unregistering): Released all slaves
[  586.061109][ T2837] __nla_validate_parse: 63 callbacks suppressed
[  586.061119][ T2837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7773'.
[  586.073351][ T2831] bond137: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  586.083075][ T2831] bond137 (unregistering): Released all slaves
[  586.184437][ T2845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7776'.
[  586.238822][ T2847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7777'.
[  586.241736][ T2847] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7777'.
[  586.344760][ T2870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7782'.
[  586.351372][ T2870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7782'.
[  586.355376][ T2870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.364762][ T2870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7782'.
[  586.368211][ T2870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7782'.
[  586.370787][ T2873] lo speed is unknown, defaulting to 1000
[  586.371761][ T2870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7782'.
[  586.661087][ T2900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7788'.
[  586.878556][ T2927] syzkaller0: entered promiscuous mode
[  586.880702][ T2927] syzkaller0: entered allmulticast mode
[  587.138333][ T2937] Cannot find del_set index 4 as target
[  587.264865][ T2944] bond185: entered promiscuous mode
[  587.269215][ T2944] 8021q: adding VLAN 0 to HW filter on device bond185
[  587.288022][ T2944] 8021q: adding VLAN 0 to HW filter on device bond186
[  587.294268][ T2944] bond185: (slave bond186): making interface the new active one
[  587.297320][ T2944] bond186: entered promiscuous mode
[  587.299985][ T2944] bond185: (slave bond186): Enslaving as an active interface with an up link
[  587.335024][ T2951] nbd: must specify an index to disconnect
[  587.342529][ T2951] dvmrp12: entered allmulticast mode
[  587.345822][ T2950] dvmrp12: left allmulticast mode
[  587.433500][ T2953] 8021q: adding VLAN 0 to HW filter on device bond187
[  587.666071][ T2961] vxcan6: entered allmulticast mode
[  587.818446][T16469] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  587.824969][T16469] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  587.830502][T16469] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  587.836670][T16469] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  587.938171][ T2983] xt_addrtype: ipv6 does not support BROADCAST matching
[  588.333453][ T2995] dvmrp0: left allmulticast mode
[  588.335703][ T2995] pimreg: left allmulticast mode
[  588.390373][ T2995] Set syz0 is full, maxelem 0 reached
[  588.392926][ T2995] nbd: must specify a device to reconfigure
[  588.410212][ T3007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  588.513830][ T3013] validate_nla: 9 callbacks suppressed
[  588.513842][ T3013] netlink: 'syz.2.7816': attribute type 21 has an invalid length.
[  588.724186][ T3016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.318013][ T3091] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  589.322506][ T3091] syzkaller0: entered promiscuous mode
[  589.324724][ T3091] syzkaller0: entered allmulticast mode
[  589.379983][ T3093] lo speed is unknown, defaulting to 1000
[  589.538193][ T3114] netlink: 'syz.2.7841': attribute type 10 has an invalid length.
[  589.549272][ T3115] xt_ecn: cannot match TCP bits for non-tcp packets
[  589.584695][ T3118] netlink: 'syz.2.7842': attribute type 8 has an invalid length.
[  589.672722][ T3130] netlink: 'syz.1.7845': attribute type 1 has an invalid length.
[  589.701198][ T3130] bond188: entered promiscuous mode
[  589.703911][ T3130] 8021q: adding VLAN 0 to HW filter on device bond188
[  589.764104][ T3130] bond188: (slave bridge87): making interface the new active one
[  589.769821][ T3130] bridge87: entered promiscuous mode
[  589.774221][ T3130] bridge87: left promiscuous mode
[  589.921238][ T3138] lo speed is unknown, defaulting to 1000
[  590.121105][ T3149] netlink: 'syz.0.7849': attribute type 1 has an invalid length.
[  590.156456][ T3149] bond199: entered promiscuous mode
[  590.159075][ T3149] 8021q: adding VLAN 0 to HW filter on device bond199
[  590.238339][ T3158] openvswitch: netlink: Actions may not be safe on all matching packets
[  590.266085][ T3158] openvswitch: netlink: Actions may not be safe on all matching packets
[  590.482566][ T3186] netlink: 'syz.2.7857': attribute type 1 has an invalid length.
[  590.502698][ T3186] bond137: entered promiscuous mode
[  590.504581][ T3186] 8021q: adding VLAN 0 to HW filter on device bond137
[  590.537453][ T3186] bond137: (slave bridge89): making interface the new active one
[  590.540178][ T3186] bridge89: entered promiscuous mode
[  590.545678][ T3186] bridge89: left promiscuous mode
[  590.592706][ T3192] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode
[  590.595383][ T3192] tipc: Resetting bearer <eth:syzkaller0>
[  591.017851][ T3229] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.025360][ T3229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  591.102113][ T3229] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.105439][ T3229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  591.163563][ T3229] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.171006][ T3229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  591.201840][ T3249] syzkaller0: entered promiscuous mode
[  591.203775][ T3249] syzkaller0: entered allmulticast mode
[  591.220774][ T3229] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.227930][ T3229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  591.279914][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.284915][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  591.308744][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.314652][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  591.329735][ T3258] netlink: 'syz.2.7867': attribute type 1 has an invalid length.
[  591.333676][ T3258] __nla_validate_parse: 101 callbacks suppressed
[  591.333685][ T3258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7867'.
[  591.343249][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.355072][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  591.359214][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  591.363524][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  591.393125][ T3258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7867'.
[  591.397567][ T3258] netlink: 'syz.2.7867': attribute type 2 has an invalid length.
[  591.410185][ T3258] !9: entered promiscuous mode
[  591.538284][ T3281] netlink: 'syz.2.7874': attribute type 1 has an invalid length.
[  591.540753][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7874'.
[  591.584384][ T3289] syzkaller1: entered promiscuous mode
[  591.586079][ T3289] syzkaller1: entered allmulticast mode
[  591.657018][ T3289] tipc: Resetting bearer <eth:ip6gre0>
[  591.659701][ T3289] tipc: Resetting bearer <eth:ip6gre0>
[  591.667198][ T3289] tipc: Resetting bearer <eth:syzkaller0>
[  591.669765][ T3289] tipc: Resetting bearer <eth:syzkaller0>
[  591.707049][ T3289] netlink: 'syz.1.7876': attribute type 16 has an invalid length.
[  591.719768][ T3289] tipc: Resetting bearer <eth:ip6gre0>
[  591.723801][ T3289] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  591.850893][ T3311] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7881'.
[  592.034376][ T3320] syzkaller0: entered promiscuous mode
[  592.037222][ T3320] syzkaller0: entered allmulticast mode
[  592.097971][ T3320] bond132: left promiscuous mode
[  592.099964][ T3320] wireguard5: left promiscuous mode
[  592.102957][ T3320] bond133: left promiscuous mode
[  592.105693][ T3320] bond136: left promiscuous mode
[  592.110182][ T3320] bond137: left promiscuous mode
[  592.114100][ T3320] syzkaller0: left promiscuous mode
[  592.117477][ T3320] syzkaller0: left allmulticast mode
[  592.264053][ T3340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7889'.
[  592.300132][ T3342] 8021q: adding VLAN 0 to HW filter on device bond138
[  592.313928][ T3340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7889'.
[  592.325204][ T3342] bond138: (slave veth73): Enslaving as an active interface with a down link
[  592.330689][ T3340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7889'.
[  592.351491][ T3342] 8021q: adding VLAN 0 to HW filter on device batadv3
[  592.354329][ T3342] bond138: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  592.736780][ T3380] netlink: 174 bytes leftover after parsing attributes in process `syz.2.7898'.
[  592.779457][ T3380] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7898'.
[  592.783003][ T3380] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  592.819358][ T3384] tipc: Resetting bearer <eth:syzkaller0>
[  592.883046][ T5842] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.886415][ T5842] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.893347][ T5842] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.901812][ T5842] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.021745][ T3397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7902'.
[  593.034740][ T3398] workqueue: Failed to create a rescuer kthread for wq "bond189": -EINTR
[  593.056847][ T3403] Set syz0 is full, maxelem 0 reached
[  593.062322][ T3403] nbd: must specify a device to reconfigure
[  593.210910][ T3420] bond0: invalid ARP target 0.0.0.0 specified for addition
[  593.214718][ T3420] bond0: option arp_ip_target: invalid value (0)
[  593.328287][ T3426] pim6reg1: entered promiscuous mode
[  593.330465][ T3426] pim6reg1: entered allmulticast mode
[  593.459461][ T3457] 8021q: adding VLAN 0 to HW filter on device `
[  593.463548][ T3457] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  593.537203][ T3470] lo speed is unknown, defaulting to 1000
[  593.684041][ T3475] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  593.807958][ T3499] smc_pnet_add_by_ndev: 6 callbacks suppressed
[  593.807973][ T3499] smc: adding net device hsr0 with user defined pnetid SYZ2
[  593.815035][ T3499] smc_pnet_remove_by_ndev: 6 callbacks suppressed
[  593.815046][ T3499] smc: removing net device hsr0 with user defined pnetid SYZ2
[  593.980261][ T3520] tunl0: Caught tx_queue_len zero misconfig
[  594.113162][ T3535] validate_nla: 8 callbacks suppressed
[  594.113172][ T3535] netlink: 'syz.1.7933': attribute type 2 has an invalid length.
[  594.121675][ T3535] !9: entered promiscuous mode
[  594.124650][ T3535] netlink: 'syz.1.7933': attribute type 2 has an invalid length.
[  594.128839][ T3535] !9: left promiscuous mode
[  594.422057][ T3560] bond140: option xmit_hash_policy: invalid value (10)
[  594.426844][ T3560] bond140 (unregistering): Released all slaves
[  594.441608][ T3561] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.444749][ T3561] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  594.518275][ T3561] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.526386][ T3561] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  594.574893][ T3561] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.584683][ T3561] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  594.620674][ T3561] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.635793][ T3561] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  594.724679][T16469] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  594.729624][T16469] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  594.750008][T16469] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.753095][T16469] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  594.766080][T16469] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.769082][T16469] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  594.786441][T16469] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  594.790600][T16469] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  594.827892][ T3607] lo: entered promiscuous mode
[  594.830017][ T3607] lo: entered allmulticast mode
[  594.892087][ T3609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  594.938902][ T3620] netlink: 'syz.2.7956': attribute type 1 has an invalid length.
[  595.090630][ T3636] netlink: 'syz.1.7961': attribute type 1 has an invalid length.
[  595.097396][ T3638] block nbd0: not configured, cannot reconfigure
[  595.117171][ T3636] bond189: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  595.134934][ T3636] veth83: entered promiscuous mode
[  595.139306][ T3636] bond189: (slave veth83): Enslaving as a backup interface with a down link
[  595.149548][ T3636] 8021q: adding VLAN 0 to HW filter on device bond189
[  595.149827][ T5842] bond189: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  595.266383][T28499] bond189: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  595.398543][ T3661] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  595.479206][ T3665] lo: entered promiscuous mode
[  595.480816][ T3665] lo: entered allmulticast mode
[  595.483118][ T3665] tunl0: entered promiscuous mode
[  595.484762][ T3665] tunl0: entered allmulticast mode
[  595.487495][ T3665] gre0: entered promiscuous mode
[  595.489379][ T3665] gre0: entered allmulticast mode
[  595.493086][ T3665] 0{X: entered allmulticast mode
[  595.495365][ T3665] erspan0: entered allmulticast mode
[  595.498234][ T3665] ip_vti0: entered promiscuous mode
[  595.499945][ T3665] ip_vti0: entered allmulticast mode
[  595.502357][ T3665] ip6_vti0: entered promiscuous mode
[  595.504078][ T3665] ip6_vti0: entered allmulticast mode
[  596.013124][ T3669] netlink: 'syz.0.7971': attribute type 1 has an invalid length.
[  596.017888][ T3669] workqueue: Failed to create a rescuer kthread for wq "bond201": -EINTR
[  596.060376][ T3674] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  596.236796][ T3692] ipt_ECN: cannot use operation on non-tcp rule
[  596.365941][ T3697] __nla_validate_parse: 34 callbacks suppressed
[  596.365958][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'.
[  596.372854][ T3697] netlink: 580 bytes leftover after parsing attributes in process `syz.1.7978'.
[  596.489278][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7982'.
[  596.967809][ T3719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7985'.
[  597.070889][ T3730] netlink: 'syz.2.7987': attribute type 1 has an invalid length.
[  597.085394][ T3730] bond141: entered promiscuous mode
[  597.087549][ T3730] 8021q: adding VLAN 0 to HW filter on device bond141
[  597.092628][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7987'.
[  597.095648][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7987'.
[  597.105184][ T3730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7987'.
[  597.140282][ T3734] netlink: 'syz.0.7988': attribute type 3 has an invalid length.
[  597.187379][ T3739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7990'.
[  597.232290][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7992'.
[  597.235985][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7992'.
[  597.242143][ T3748] netlink: 'syz.0.7992': attribute type 14 has an invalid length.
[  597.245252][ T3748] netlink: 'syz.0.7992': attribute type 11 has an invalid length.
[  597.250048][ T3747] bpq0: entered allmulticast mode
[  597.287860][ T3755] bond201: entered promiscuous mode
[  597.294714][ T3755] macvlan0: entered promiscuous mode
[  597.298638][ T3755] macvlan0: entered allmulticast mode
[  597.302029][ T3755] bond201: (slave macvlan0): Opening slave failed
[  597.340658][ T3761] netlink: 'syz.2.7996': attribute type 1 has an invalid length.
[  597.590164][ T3787] 8021q: adding VLAN 0 to HW filter on device bond143
[  597.701048][ T3797] tipc: Resetting bearer <eth:ip6gre0>
[  597.912989][ T3807] bridge91: entered promiscuous mode
[  597.914793][ T3807] macsec7: entered promiscuous mode
[  597.919704][ T3807] bridge91: port 1(macsec7) entered blocking state
[  597.922328][ T3807] bridge91: port 1(macsec7) entered disabled state
[  597.924665][ T3807] macsec7: entered allmulticast mode
[  597.927870][ T3807] bridge91: entered allmulticast mode
[  597.931998][ T3807] macsec7: left allmulticast mode
[  597.934124][ T3807] bridge91: left allmulticast mode
[  597.938402][ T3807] bridge91: left promiscuous mode
[  597.958700][ T3814] syzkaller1: entered promiscuous mode
[  597.962332][ T3814] syzkaller1: entered allmulticast mode
[  598.222639][ T3833] 8021q: adding VLAN 0 to HW filter on device bond5
[  598.248364][ T3833] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.257575][ T3833] bond5: (slave bond0): Enslaving as an active interface with a down link
[  598.271472][ T3835] bond203: (slave vxcan7): The slave device specified does not support setting the MAC address
[  598.276402][ T3835] bond203: (slave vxcan7): Error -95 calling set_mac_address
[  598.315679][ T3838] bond203: (slave bridge94): Enslaving as an active interface with a down link
[  598.357781][ T3842] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[  598.360648][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.2.8021 Not tainted syzkaller #0 PREEMPT(full) 
[  598.360659][ T3842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.360664][ T3842] Call Trace:
[  598.360667][ T3842]  <TASK>
[  598.360672][ T3842]  dump_stack_lvl+0xe8/0x150
[  598.360686][ T3842]  sysfs_warn_dup+0x8e/0xa0
[  598.360697][ T3842]  sysfs_do_create_link_sd+0xc0/0x110
[  598.360708][ T3842]  device_add_class_symlinks+0x1cf/0x240
[  598.360722][ T3842]  device_add+0x475/0xb70
[  598.360734][ T3842]  wiphy_register+0x1d73/0x2d50
[  598.360783][ T3842]  ? __pfx_wiphy_register+0x10/0x10
[  598.360798][ T3842]  ? __pfx_netdev_run_todo+0x10/0x10
[  598.360810][ T3842]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  598.360821][ T3842]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  598.360834][ T3842]  ieee80211_register_hw+0x3571/0x4220
[  598.360848][ T3842]  ? ieee80211_register_hw+0x1411/0x4220
[  598.360860][ T3842]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  598.360874][ T3842]  ? __hrtimer_setup+0x181/0x200
[  598.360885][ T3842]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  598.360894][ T3842]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  598.360917][ T3842]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  598.360927][ T3842]  ? kstrndup+0xbf/0x160
[  598.360940][ T3842]  hwsim_new_radio_nl+0xf35/0x1bd0
[  598.360959][ T3842]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  598.360974][ T3842]  ? rcu_is_watching+0x15/0xb0
[  598.360985][ T3842]  ? trace_kmalloc+0x2a/0x110
[  598.360995][ T3842]  ? __nla_parse+0x40/0x60
[  598.361007][ T3842]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  598.361021][ T3842]  genl_family_rcv_msg_doit+0x22a/0x330
[  598.361035][ T3842]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  598.361050][ T3842]  ? bpf_lsm_capable+0x9/0x20
[  598.361060][ T3842]  ? security_capable+0x7e/0x2c0
[  598.361071][ T3842]  genl_rcv_msg+0x61c/0x7a0
[  598.361084][ T3842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  598.361094][ T3842]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  598.361105][ T3842]  ? __lock_acquire+0x6b5/0x2cf0
[  598.361119][ T3842]  netlink_rcv_skb+0x232/0x4b0
[  598.361128][ T3842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  598.361139][ T3842]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  598.361154][ T3842]  ? down_read+0x272/0x2e0
[  598.361162][ T3842]  ? genl_rcv+0xd/0x40
[  598.361172][ T3842]  genl_rcv+0x28/0x40
[  598.361182][ T3842]  netlink_unicast+0x80f/0x9b0
[  598.361193][ T3842]  ? __pfx_netlink_unicast+0x10/0x10
[  598.361202][ T3842]  ? netlink_sendmsg+0x650/0xb40
[  598.361210][ T3842]  ? skb_put+0x11b/0x210
[  598.361221][ T3842]  netlink_sendmsg+0x813/0xb40
[  598.361234][ T3842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  598.361244][ T3842]  ? aa_sock_msg_perm+0xf1/0x1b0
[  598.361255][ T3842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  598.361264][ T3842]  ____sys_sendmsg+0x972/0x9f0
[  598.361274][ T3842]  ? futex_unqueue+0x211/0x240
[  598.361285][ T3842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  598.361299][ T3842]  ? import_iovec+0x73/0xa0
[  598.361311][ T3842]  ___sys_sendmsg+0x2a5/0x360
[  598.361323][ T3842]  ? __pfx____sys_sendmsg+0x10/0x10
[  598.361336][ T3842]  ? futex_wait+0x29a/0x380
[  598.361361][ T3842]  ? __fget_files+0x2a/0x420
[  598.361371][ T3842]  ? __fget_files+0x3a0/0x420
[  598.361385][ T3842]  __x64_sys_sendmsg+0x1bd/0x2a0
[  598.361396][ T3842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  598.361416][ T3842]  do_syscall_64+0x14d/0xf80
[  598.361425][ T3842]  ? trace_irq_disable+0x3b/0x150
[  598.361435][ T3842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.361446][ T3842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.361453][ T3842] RIP: 0033:0x7fa32fb9c799
[  598.361461][ T3842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.361468][ T3842] RSP: 002b:00007fa3309ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.361482][ T3842] RAX: ffffffffffffffda RBX: 00007fa32fe15fa0 RCX: 00007fa32fb9c799
[  598.361491][ T3842] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  598.361499][ T3842] RBP: 00007fa32fc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  598.361506][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.361513][ T3842] R13: 00007fa32fe16038 R14: 00007fa32fe15fa0 R15: 00007ffd5b130238
[  598.361535][ T3842]  </TASK>
[  598.515001][ T3843] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[  598.520409][ T3843] CPU: 1 UID: 0 PID: 3843 Comm: syz.2.8021 Not tainted syzkaller #0 PREEMPT(full) 
[  598.520429][ T3843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  598.520437][ T3843] Call Trace:
[  598.520442][ T3843]  <TASK>
[  598.520448][ T3843]  dump_stack_lvl+0xe8/0x150
[  598.520469][ T3843]  sysfs_warn_dup+0x8e/0xa0
[  598.520487][ T3843]  sysfs_do_create_link_sd+0xc0/0x110
[  598.520504][ T3843]  device_add_class_symlinks+0x1cf/0x240
[  598.520525][ T3843]  device_add+0x475/0xb70
[  598.520545][ T3843]  wiphy_register+0x1d73/0x2d50
[  598.520570][ T3843]  ? __pfx_wiphy_register+0x10/0x10
[  598.520585][ T3843]  ? __pfx_netdev_run_todo+0x10/0x10
[  598.520597][ T3843]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  598.520615][ T3843]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  598.520638][ T3843]  ieee80211_register_hw+0x3571/0x4220
[  598.520660][ T3843]  ? ieee80211_register_hw+0x1411/0x4220
[  598.520679][ T3843]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  598.520700][ T3843]  ? __hrtimer_setup+0x181/0x200
[  598.520715][ T3843]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  598.520731][ T3843]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  598.520803][ T3843]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  598.520820][ T3843]  ? kstrndup+0xbf/0x160
[  598.520843][ T3843]  hwsim_new_radio_nl+0xf35/0x1bd0
[  598.520877][ T3843]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  598.520902][ T3843]  ? rcu_is_watching+0x15/0xb0
[  598.520918][ T3843]  ? trace_kmalloc+0x2a/0x110
[  598.520928][ T3843]  ? __nla_parse+0x40/0x60
[  598.520939][ T3843]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  598.520955][ T3843]  genl_family_rcv_msg_doit+0x22a/0x330
[  598.520968][ T3843]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  598.520984][ T3843]  ? bpf_lsm_capable+0x9/0x20
[  598.520993][ T3843]  ? security_capable+0x7e/0x2c0
[  598.521005][ T3843]  genl_rcv_msg+0x61c/0x7a0
[  598.521017][ T3843]  ? __pfx_genl_rcv_msg+0x10/0x10
[  598.521028][ T3843]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  598.521039][ T3843]  ? __lock_acquire+0x6b5/0x2cf0
[  598.521052][ T3843]  netlink_rcv_skb+0x232/0x4b0
[  598.521062][ T3843]  ? __pfx_genl_rcv_msg+0x10/0x10
[  598.521073][ T3843]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  598.521088][ T3843]  ? down_read+0x272/0x2e0
[  598.521096][ T3843]  ? genl_rcv+0xd/0x40
[  598.521106][ T3843]  genl_rcv+0x28/0x40
[  598.521118][ T3843]  netlink_unicast+0x80f/0x9b0
[  598.521136][ T3843]  ? __pfx_netlink_unicast+0x10/0x10
[  598.521149][ T3843]  ? netlink_sendmsg+0x650/0xb40
[  598.521163][ T3843]  ? skb_put+0x11b/0x210
[  598.521183][ T3843]  netlink_sendmsg+0x813/0xb40
[  598.521204][ T3843]  ? __pfx_netlink_sendmsg+0x10/0x10
[  598.521223][ T3843]  ? aa_sock_msg_perm+0xf1/0x1b0
[  598.521241][ T3843]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  598.521256][ T3843]  ____sys_sendmsg+0x972/0x9f0
[  598.521272][ T3843]  ? futex_unqueue+0x211/0x240
[  598.521292][ T3843]  ? __pfx_____sys_sendmsg+0x10/0x10
[  598.521309][ T3843]  ? import_iovec+0x73/0xa0
[  598.521321][ T3843]  ___sys_sendmsg+0x2a5/0x360
[  598.521334][ T3843]  ? __pfx____sys_sendmsg+0x10/0x10
[  598.521353][ T3843]  ? futex_wait+0x29a/0x380
[  598.521374][ T3843]  ? __fget_files+0x2a/0x420
[  598.521384][ T3843]  ? __fget_files+0x3a0/0x420
[  598.521397][ T3843]  __x64_sys_sendmsg+0x1bd/0x2a0
[  598.521409][ T3843]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  598.521422][ T3843]  ? rcu_is_watching+0x15/0xb0
[  598.521437][ T3843]  do_syscall_64+0x14d/0xf80
[  598.521447][ T3843]  ? trace_irq_disable+0x3b/0x150
[  598.521457][ T3843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.521467][ T3843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.521475][ T3843] RIP: 0033:0x7fa32fb9c799
[  598.521483][ T3843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.521490][ T3843] RSP: 002b:00007fa33098d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.521499][ T3843] RAX: ffffffffffffffda RBX: 00007fa32fe16090 RCX: 00007fa32fb9c799
[  598.521505][ T3843] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  598.521510][ T3843] RBP: 00007fa32fc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  598.521514][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.521519][ T3843] R13: 00007fa32fe16128 R14: 00007fa32fe16090 R15: 00007ffd5b130238
[  598.521531][ T3843]  </TASK>
[  598.709228][ T3845] pim6reg1: entered promiscuous mode
[  598.710970][ T3845] pim6reg1: entered allmulticast mode
[  598.832806][ T3853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.832843][ T3854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.856034][ T3851] bond144: entered promiscuous mode
[  598.858660][ T3851] bond144: entered allmulticast mode
[  598.861349][ T3851] 8021q: adding VLAN 0 to HW filter on device bond144
[  598.871769][ T3853] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  598.886757][ T3851] macvlan13: entered promiscuous mode
[  598.889018][ T3851] macvlan13: entered allmulticast mode
[  598.893441][ T3851] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  598.986885][ T3863] x_tables: duplicate underflow at hook 2
[  599.253600][ T3874] pimreg: tun_chr_ioctl cmd 1074025677
[  599.260041][ T3874] pimreg: linktype set to 1
[  599.291214][ T3876] validate_nla: 12 callbacks suppressed
[  599.291230][ T3876] netlink: 'syz.0.8033': attribute type 1 has an invalid length.
[  599.299494][ T3876] workqueue: Failed to create a rescuer kthread for wq "bond204": -EINTR
[  599.340497][ T3882] 8021q: adding VLAN 0 to HW filter on device `
[  599.349371][ T3882] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  599.419638][ T3884] netlink: 'syz.2.8035': attribute type 1 has an invalid length.
[  599.445196][ T3884] bond145: entered promiscuous mode
[  599.447629][ T3884] bond145: entered allmulticast mode
[  599.450543][ T3884] 8021q: adding VLAN 0 to HW filter on device bond145
[  599.537185][ T3890] bond146: entered promiscuous mode
[  599.695926][ T3904] netlink: 'syz.2.8039': attribute type 1 has an invalid length.
[  599.755833][ T3906] lo speed is unknown, defaulting to 1000
[  599.817902][ T3907] lo speed is unknown, defaulting to 1000
[  599.963204][ T3913] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode
[  599.967979][ T3913] tipc: Resetting bearer <eth:syzkaller0>
[  600.096480][ T3919] pim6reg1: entered promiscuous mode
[  600.098292][ T3919] pim6reg1: entered allmulticast mode
[  600.169529][ T3921] bond190: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  600.174497][ T3921] bond190 (unregistering): Released all slaves
[  600.369999][ T3929] netlink: 'syz.2.8047': attribute type 11 has an invalid length.
[  600.410876][ T3931] bond204 (unregistering): Released all slaves
[  600.674435][ T3956] ip6_vti0: Caught tx_queue_len zero misconfig
[  600.688871][ T3956] netlink: 'syz.0.8055': attribute type 142 has an invalid length.
[  600.719616][ T3957] netlink: 'syz.1.8054': attribute type 1 has an invalid length.
[  600.788398][ T3961] openvswitch: netlink: IP tunnel dst address not specified
[  601.052954][ T3976] ip6t_srh: unknown srh match flags  4000
[  601.144355][ T3978] 8021q: adding VLAN 0 to HW filter on device bond147
[  601.153303][ T3978] macsec7: entered promiscuous mode
[  601.155126][ T3978] bond147: entered promiscuous mode
[  601.157840][ T3978] macsec7: entered allmulticast mode
[  601.159670][ T3978] bond147: entered allmulticast mode
[  601.162580][ T3978] bond147: left allmulticast mode
[  601.164307][ T3978] bond147: left promiscuous mode
[  601.569546][ T3990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.573518][ T3988] tipc: Resetting bearer <eth:syzkaller0>
[  601.737993][ T3996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.742329][ T3997] __nla_validate_parse: 49 callbacks suppressed
[  601.742342][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'.
[  601.849234][ T4000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8067'.
[  601.858573][ T4000] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  601.930511][ T4003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8068'.
[  601.982108][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8068'.
[  602.068124][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8069'.
[  602.182284][ T4021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8074'.
[  602.234609][ T4028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8077'.
[  602.248793][ T4028] netlink: 'syz.1.8077': attribute type 10 has an invalid length.
[  602.251613][ T4028] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8077'.
[  602.335781][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'.
[  602.340112][ T4030] tipc: Enabling of bearer <eth:vlan0> rejected, max 3 bearers permitted
[  602.390618][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8080'.
[  602.393527][ T4043] openvswitch: netlink: Missing key (keys=40, expected=80)
[  602.398544][ T4043] netlink: 'syz.0.8080': attribute type 1 has an invalid length.
[  602.605993][ T4074] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0
[  602.659905][ T4073] bond148: entered promiscuous mode
[  602.665726][ T4073] vcan2: entered promiscuous mode
[  602.667885][ T4073] vcan2: entered allmulticast mode
[  602.718586][ T4084] netlink: 'syz.2.8089': attribute type 1 has an invalid length.
[  602.748467][ T4087] netlink: 'syz.0.8091': attribute type 1 has an invalid length.
[  603.022238][ T4119] netlink: 'syz.0.8097': attribute type 2 has an invalid length.
[  603.276328][ T4137] batadv6: entered promiscuous mode
[  603.355763][ T4143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  603.361075][ T4143] tipc: Resetting bearer <eth:syzkaller0>
[  603.492915][ T4145] Unsupported ieee802154 address type: 0
[  603.529773][ T4155] lo: left promiscuous mode
[  603.550521][ T4155] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  603.674725][ T4170] vti3: entered promiscuous mode
[  603.733055][ T4173] 8021q: adding VLAN 0 to HW filter on device bond190
[  603.760267][ T4173] bond190: (slave veth85): Enslaving as an active interface with a down link
[  603.778604][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv7
[  603.783093][ T4173] bond190: (slave batadv7): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  603.917946][ T4187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  603.927820][ T4187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  603.945431][ T4190] IPVS: sync thread started: state = BACKUP, mcast_ifn = syzkaller0, syncid = 1, id = 0
[  604.030885][ T4177] tipc: Resetting bearer <eth:ip6gre0>
[  604.193943][ T4197] lo speed is unknown, defaulting to 1000
[  604.196962][ T4198] lo speed is unknown, defaulting to 1000
[  604.721929][ T4205] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  604.837064][ T4216] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  604.930633][ T4235] validate_nla: 3 callbacks suppressed
[  604.930669][ T4235] netlink: 'syz.1.8128': attribute type 1 has an invalid length.
[  604.952170][ T4235] 8021q: adding VLAN 0 to HW filter on device bond191
[  604.977060][ T4237] SET target dimension over the limit!
[  605.053627][ T4243] vlan17: entered allmulticast mode
[  605.055855][ T4243] bridge0: entered allmulticast mode
[  605.060132][ T4243] bridge0: port 1(bond0) entered blocking state
[  605.063089][ T4243] bridge0: port 1(bond0) entered disabled state
[  605.065380][ T4243] bond0: entered allmulticast mode
[  605.069138][ T4243] bond0: left allmulticast mode
[  605.071142][ T4244] bridge0: port 1(bond0) entered blocking state
[  605.073290][ T4244] bridge0: port 1(bond0) entered disabled state
[  605.075298][ T4244] bond0: entered allmulticast mode
[  605.078758][ T4244] bond0: left allmulticast mode
[  605.283148][ T4259] netlink: 'syz.1.8135': attribute type 1 has an invalid length.
[  605.300235][ T4259] 8021q: adding VLAN 0 to HW filter on device bond192
[  605.308348][ T4259] netlink: 'syz.1.8135': attribute type 4 has an invalid length.
[  605.311572][ T4257] SET target dimension over the limit!
[  605.338957][ T4267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  605.490196][ T4266] tipc: Resetting bearer <eth:ip6gre0>
[  605.520226][ T4266] tipc: Resetting bearer <eth:syzkaller0>
[  605.769021][ T7384] lo speed is unknown, defaulting to 1000
[  605.770860][ T7384] syz2: Port: 1 Link DOWN
[  605.772277][ T5842] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.774742][ T5842] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  605.783789][ T5842] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.792623][ T5842] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  605.796327][ T5842] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.799494][ T5842] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  605.802448][ T5842] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  605.807565][ T5842] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  605.947085][ T4289] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode
[  605.950697][ T4289] tipc: Resetting bearer <eth:syzkaller0>
[  605.973154][ T4289] 8021q: adding VLAN 0 to HW filter on device bond205
[  605.990892][ T4292] lo speed is unknown, defaulting to 1000
[  606.221744][ T4309] bond206: entered promiscuous mode
[  606.235325][ T4309] 8021q: adding VLAN 0 to HW filter on device bond206
[  606.300924][ T4314] lo speed is unknown, defaulting to 1000
[  606.376849][ T4322] netlink: 'syz.0.8150': attribute type 1 has an invalid length.
[  606.463461][ T4327] bond207: (slave bridge96): making interface the new active one
[  606.467217][ T4327] bond207: (slave bridge96): Enslaving as an active interface with an up link
[  606.532531][ T4329] lo: left promiscuous mode
[  606.540952][ T4329] tunl0: left promiscuous mode
[  606.566651][ T4329] gre0: left promiscuous mode
[  606.574117][ T4329] ip_vti0: left promiscuous mode
[  606.577218][ T4329] ip6_vti0: left promiscuous mode
[  606.579864][ T4329] sit0: entered allmulticast mode
[  606.584481][ T4329] ip6tnl0: entered allmulticast mode
[  606.587903][ T4329] ip6gre0: entered allmulticast mode
[  606.590548][ T4329] nlmon0: entered allmulticast mode
[  606.593366][ T4329] 0X: entered allmulticast mode
[  606.595225][ T4329] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  606.887193][ T4347] __nla_validate_parse: 32 callbacks suppressed
[  606.887207][ T4347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8158'.
[  606.924340][ T4354] netlink: 'syz.1.8159': attribute type 1 has an invalid length.
[  606.943818][ T4354] bond193: entered promiscuous mode
[  606.945578][ T4354] bond193: entered allmulticast mode
[  606.947773][ T4354] 8021q: adding VLAN 0 to HW filter on device bond193
[  607.133981][ T4372] netlink: 'syz.0.8161': attribute type 3 has an invalid length.
[  607.161284][ T4377] netlink: 'syz.0.8162': attribute type 4 has an invalid length.
[  607.174932][ T4377] netlink: 'syz.0.8162': attribute type 4 has an invalid length.
[  607.221289][ T4383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8163'.
[  607.231483][ T4383] netlink: 'syz.0.8163': attribute type 1 has an invalid length.
[  607.307360][ T4391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  607.335759][ T4383] veth93: entered promiscuous mode
[  607.347361][ T4383] bond208: (slave veth93): Enslaving as a backup interface with a down link
[  607.351688][ T4383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8163'.
[  607.355654][ T4383] 8021q: adding VLAN 0 to HW filter on device bond208
[  607.373687][ T4394] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8165'.
[  607.387011][ T4394] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8165'.
[  607.419334][ T4399] netlink: 'syz.2.8167': attribute type 1 has an invalid length.
[  607.445637][ T4400] bond149: (slave vxcan1): The slave device specified does not support setting the MAC address
[  607.449685][ T4400] bond149: (slave vxcan1): Error -95 calling set_mac_address
[  607.481651][ T4404] bpq0: left allmulticast mode
[  607.596575][ T4417] sch_tbf: peakrate 7 is lower than or equals to rate 994622507201582345 !
[  607.932118][ T4437] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8173'.
[  607.953435][ T4428] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  608.039679][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8174'.
[  608.043428][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8174'.
[  608.122832][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8175'.
[  608.154658][ T4446] vlan15: entered allmulticast mode
[  608.156551][ T4446] bond150: entered allmulticast mode
[  608.234502][ T4455] x_tables: duplicate underflow at hook 3
[  608.341390][ T4464] lo speed is unknown, defaulting to 1000
[  608.527390][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8183'.
[  608.989334][ T4505] lo speed is unknown, defaulting to 1000
[  609.089144][ T4516] lo: left allmulticast mode
[  609.204292][ T4516] veth0_to_bridge: left promiscuous mode
[  609.206992][ T4516] veth0_to_bridge: left allmulticast mode
[  609.211510][ T4516] netdevsim0: left allmulticast mode
[  609.214031][ T4516] tipc: Resetting bearer <eth:syzkaller0>
[  609.222151][ T4516] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode
[  609.226693][ T4516] bond151: left promiscuous mode
[  609.228707][ T4516] bond151: left allmulticast mode
[  609.231039][ T4516] bond152: left promiscuous mode
[  609.233148][ T4516] bond152: left allmulticast mode
[  609.235498][ T4516] bond153: left promiscuous mode
[  609.237724][ T4516] bond153: left allmulticast mode
[  609.239840][ T4516] bond154: left promiscuous mode
[  609.241935][ T4516] bond154: left allmulticast mode
[  609.244189][ T4516] bond155: left promiscuous mode
[  609.246604][ T4516] bond155: left allmulticast mode
[  609.248801][ T4516] bond156: left promiscuous mode
[  609.250786][ T4516] bond156: left allmulticast mode
[  609.253080][ T4516] bond157: left promiscuous mode
[  609.255336][ T4516] bond157: left allmulticast mode
[  609.258088][ T4516] bond158: left promiscuous mode
[  609.260252][ T4516] bond158: left allmulticast mode
[  609.262509][ T4516] bond159: left promiscuous mode
[  609.264668][ T4516] bond159: left allmulticast mode
[  609.267183][ T4516] bond160: left promiscuous mode
[  609.269461][ T4516] bond160: left allmulticast mode
[  609.271731][ T4516] bond161: left promiscuous mode
[  609.273861][ T4516] bond161: left allmulticast mode
[  609.276794][ T4516] bond162: left promiscuous mode
[  609.278927][ T4516] bond162: left allmulticast mode
[  609.281305][ T4516] bond163: left promiscuous mode
[  609.283417][ T4516] bond163: left allmulticast mode
[  609.285691][ T4516] bond164: left promiscuous mode
[  609.287885][ T4516] bond164: left allmulticast mode
[  609.290129][ T4516] bond165: left promiscuous mode
[  609.292358][ T4516] bond165: left allmulticast mode
[  609.294655][ T4516] bond166: left promiscuous mode
[  609.296942][ T4516] bond166: left allmulticast mode
[  609.299304][ T4516] bond167: left promiscuous mode
[  609.301511][ T4516] bond167: left allmulticast mode
[  609.303975][ T4516] bond168: left promiscuous mode
[  609.306079][ T4516] bond168: left allmulticast mode
[  609.308747][ T4516] bond169: left promiscuous mode
[  609.310948][ T4516] bond169: left allmulticast mode
[  609.313219][ T4516] bond170: left promiscuous mode
[  609.315425][ T4516] bond170: left allmulticast mode
[  609.317968][ T4516] bond171: left promiscuous mode
[  609.320035][ T4516] bond171: left allmulticast mode
[  609.322423][ T4516] bond172: left promiscuous mode
[  609.324542][ T4516] bond172: left allmulticast mode
[  609.327225][ T4516] bond173: left promiscuous mode
[  609.329339][ T4516] bond173: left allmulticast mode
[  609.331396][ T4516] bond174: left promiscuous mode
[  609.333549][ T4516] bond174: left allmulticast mode
[  609.335700][ T4516] bond175: left promiscuous mode
[  609.337837][ T4516] bond175: left allmulticast mode
[  609.340013][ T4516] bond176: left promiscuous mode
[  609.341949][ T4516] bond176: left allmulticast mode
[  609.344191][ T4516] bond177: left promiscuous mode
[  609.346281][ T4516] bond177: left allmulticast mode
[  609.348568][ T4516] bond178: left promiscuous mode
[  609.350512][ T4516] bond178: left allmulticast mode
[  609.352680][ T4516] bond179: left promiscuous mode
[  609.354768][ T4516] bond179: left allmulticast mode
[  609.357236][ T4516] bond180: left promiscuous mode
[  609.359382][ T4516] bond180: left allmulticast mode
[  609.361474][ T4516] bond181: left promiscuous mode
[  609.363389][ T4516] bond181: left allmulticast mode
[  609.367274][ T4516] bond186: left promiscuous mode
[  609.369288][ T4516] bond186: left allmulticast mode
[  609.371603][ T4516] geneve11: left promiscuous mode
[  609.373878][ T4516] bond189: left promiscuous mode
[  609.376914][ T4516] bond199: left promiscuous mode
[  609.379012][ T4516] bond201: left promiscuous mode
[  609.386720][ T4516] vti3: left promiscuous mode
[  609.400088][ T4516] bond206: left promiscuous mode
[  609.424512][ T4516] veth93: left promiscuous mode
[  609.456684][ T4519] bond194: entered promiscuous mode
[  609.458554][ T4519] 8021q: adding VLAN 0 to HW filter on device bond194
[  609.503533][ T4523] bond194: (slave bridge88): making interface the new active one
[  609.509037][ T4523] bridge88: entered promiscuous mode
[  609.513196][ T4523] bond194: (slave bridge88): Enslaving as an active interface with an up link
[  609.729687][ T4536] lo speed is unknown, defaulting to 1000
[  609.742397][ T4542] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  609.773501][ T4542] bond2: (slave lo): making interface the new active one
[  609.787394][ T4542] bond2: (slave lo): Enslaving as an active interface with an up link
[  609.790497][ T4542] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  609.821832][   T10] lo speed is unknown, defaulting to 1000
[  609.823689][   T10] syz2: Port: 1 Link ACTIVE
[  609.825139][ T5876] lo speed is unknown, defaulting to 1000
[  609.827758][ T7374] lo speed is unknown, defaulting to 1000
[  609.830144][ T7384] lo speed is unknown, defaulting to 1000
[  609.832736][ T5862] lo speed is unknown, defaulting to 1000
[  609.965180][ T4533] tipc: Resetting bearer <eth:ip6gre0>
[  609.992860][ T4551] validate_nla: 31 callbacks suppressed
[  609.992876][ T4551] netlink: 'syz.1.8196': attribute type 1 has an invalid length.
[  610.079002][ T4551] 8021q: adding VLAN 0 to HW filter on device bond195
[  610.093318][ T4552] bond195: (slave veth87): Enslaving as an active interface with a down link
[  610.144377][ T4555] lo speed is unknown, defaulting to 1000
[  610.160965][ T4550] 8021q: adding VLAN 0 to HW filter on device batadv7
[  610.163872][ T4550] bond195: (slave batadv7): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  610.468220][ T4565] netlink: 'syz.1.8200': attribute type 10 has an invalid length.
[  610.477463][ T4565] netlink: 'syz.1.8200': attribute type 10 has an invalid length.
[  610.966689][ T4575] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002
[  611.063355][ T4580] lo speed is unknown, defaulting to 1000
[  611.145417][ T4581] lo speed is unknown, defaulting to 1000
[  611.250021][ T4589] netlink: 'syz.0.8207': attribute type 1 has an invalid length.
[  611.283045][ T4589] bond209: entered promiscuous mode
[  611.285738][ T4589] 8021q: adding VLAN 0 to HW filter on device bond209
[  611.309589][ T4589] bond209: entered allmulticast mode
[  611.426439][ T4591] bond209: (slave bridge97): making interface the new active one
[  611.429841][ T4591] bridge97: entered promiscuous mode
[  611.432232][ T4591] bridge97: entered allmulticast mode
[  611.437975][ T4591] bond209: (slave bridge97): Enslaving as an active interface with an up link
[  611.995865][ T4609] netlink: 'syz.1.8212': attribute type 1 has an invalid length.
[  612.038494][ T4609] bond196: (slave vxcan99): The slave device specified does not support setting the MAC address
[  612.043598][ T4609] bond196: (slave vxcan99): Error -95 calling set_mac_address
[  612.056076][ T4614] netlink: 'syz.2.8214': attribute type 1 has an invalid length.
[  612.094311][ T4614] 8021q: adding VLAN 0 to HW filter on device bond151
[  612.113659][ T4609] bond196: (slave bridge89): Enslaving as an active interface with a down link
[  612.141355][ T4614] bond151: (slave veth81): Enslaving as an active interface with a down link
[  612.150916][ T4618] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[  612.154215][ T4618] CPU: 0 UID: 0 PID: 4618 Comm: syz.0.8215 Not tainted syzkaller #0 PREEMPT(full) 
[  612.154234][ T4618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  612.154242][ T4618] Call Trace:
[  612.154248][ T4618]  <TASK>
[  612.154255][ T4618]  dump_stack_lvl+0xe8/0x150
[  612.154278][ T4618]  sysfs_warn_dup+0x8e/0xa0
[  612.154298][ T4618]  sysfs_do_create_link_sd+0xc0/0x110
[  612.154318][ T4618]  device_add_class_symlinks+0x1cf/0x240
[  612.154342][ T4618]  device_add+0x475/0xb70
[  612.154364][ T4618]  wiphy_register+0x1d73/0x2d50
[  612.154394][ T4618]  ? __pfx_wiphy_register+0x10/0x10
[  612.154410][ T4618]  ? __pfx_netdev_run_todo+0x10/0x10
[  612.154424][ T4618]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  612.154443][ T4618]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  612.154466][ T4618]  ieee80211_register_hw+0x3571/0x4220
[  612.154491][ T4618]  ? ieee80211_register_hw+0x1411/0x4220
[  612.154512][ T4618]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  612.154566][ T4618]  ? __hrtimer_setup+0x181/0x200
[  612.154587][ T4618]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  612.154604][ T4618]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  612.154644][ T4618]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  612.154663][ T4618]  ? kstrndup+0xbf/0x160
[  612.154691][ T4618]  hwsim_new_radio_nl+0xf35/0x1bd0
[  612.154726][ T4618]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  612.154752][ T4618]  ? rcu_is_watching+0x15/0xb0
[  612.154769][ T4618]  ? trace_kmalloc+0x2a/0x110
[  612.154786][ T4618]  ? __nla_parse+0x40/0x60
[  612.154807][ T4618]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  612.154832][ T4618]  genl_family_rcv_msg_doit+0x22a/0x330
[  612.154856][ T4618]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  612.154885][ T4618]  ? bpf_lsm_capable+0x9/0x20
[  612.154900][ T4618]  ? security_capable+0x7e/0x2c0
[  612.154920][ T4618]  genl_rcv_msg+0x61c/0x7a0
[  612.154942][ T4618]  ? __pfx_genl_rcv_msg+0x10/0x10
[  612.154959][ T4618]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  612.154979][ T4618]  ? __lock_acquire+0x6b5/0x2cf0
[  612.155003][ T4618]  netlink_rcv_skb+0x232/0x4b0
[  612.155019][ T4618]  ? __pfx_genl_rcv_msg+0x10/0x10
[  612.155039][ T4618]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  612.155067][ T4618]  ? down_read+0x272/0x2e0
[  612.155079][ T4618]  ? genl_rcv+0xd/0x40
[  612.155098][ T4618]  genl_rcv+0x28/0x40
[  612.155115][ T4618]  netlink_unicast+0x80f/0x9b0
[  612.155137][ T4618]  ? __pfx_netlink_unicast+0x10/0x10
[  612.155154][ T4618]  ? netlink_sendmsg+0x650/0xb40
[  612.155169][ T4618]  ? skb_put+0x11b/0x210
[  612.155189][ T4618]  netlink_sendmsg+0x813/0xb40
[  612.155212][ T4618]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.155230][ T4618]  ? aa_sock_msg_perm+0xf1/0x1b0
[  612.155247][ T4618]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  612.155263][ T4618]  ____sys_sendmsg+0x972/0x9f0
[  612.155280][ T4618]  ? futex_unqueue+0x211/0x240
[  612.155300][ T4618]  ? __pfx_____sys_sendmsg+0x10/0x10
[  612.155324][ T4618]  ? import_iovec+0x73/0xa0
[  612.155344][ T4618]  ___sys_sendmsg+0x2a5/0x360
[  612.155366][ T4618]  ? __pfx____sys_sendmsg+0x10/0x10
[  612.155389][ T4618]  ? futex_wait+0x29a/0x380
[  612.155424][ T4618]  ? __fget_files+0x2a/0x420
[  612.155442][ T4618]  ? __fget_files+0x3a0/0x420
[  612.155467][ T4618]  __x64_sys_sendmsg+0x1bd/0x2a0
[  612.155488][ T4618]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  612.155513][ T4618]  ? rcu_is_watching+0x15/0xb0
[  612.155567][ T4618]  do_syscall_64+0x14d/0xf80
[  612.155589][ T4618]  ? trace_irq_disable+0x3b/0x150
[  612.155607][ T4618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.155625][ T4618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.155637][ T4618] RIP: 0033:0x7f6604b9c799
[  612.155652][ T4618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.155662][ T4618] RSP: 002b:00007f6605a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  612.155677][ T4618] RAX: ffffffffffffffda RBX: 00007f6604e15fa0 RCX: 00007f6604b9c799
[  612.155694][ T4618] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  612.155702][ T4618] RBP: 00007f6604c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  612.155711][ T4618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.155720][ T4618] R13: 00007f6604e16038 R14: 00007f6604e15fa0 R15: 00007fff990e15d8
[  612.155742][ T4618]  </TASK>
[  612.340008][ T4619] 8021q: adding VLAN 0 to HW filter on device batadv3
[  612.345751][ T4619] bond151: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  612.471928][ T4631] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  612.494864][ T4632] __nla_validate_parse: 18 callbacks suppressed
[  612.494952][ T4632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8219'.
[  612.595188][ T4643] bond210: entered promiscuous mode
[  612.597544][ T4643] 8021q: adding VLAN 0 to HW filter on device bond210
[  612.635970][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8223'.
[  612.692563][ T4651] netlink: 'syz.0.8225': attribute type 11 has an invalid length.
[  612.717069][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8225'.
[  612.864576][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8229'.
[  612.940138][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8229'.
[  613.001661][ T4681] netlink: 'syz.2.8233': attribute type 29 has an invalid length.
[  613.005424][ T4681] netlink: 'syz.2.8233': attribute type 29 has an invalid length.
[  613.059906][ T4683] tipc: Resetting bearer <eth:syzkaller0>
[  613.074317][ T4684] netlink: 'syz.1.8234': attribute type 1 has an invalid length.
[  613.078352][ T4687] netlink: 'syz.1.8234': attribute type 1 has an invalid length.
[  613.098978][ T4684] 8021q: adding VLAN 0 to HW filter on device bond198
[  613.105600][ T4681] netlink: 524 bytes leftover after parsing attributes in process `syz.2.8233'.
[  613.121831][ T4690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8235'.
[  613.125607][ T4681] unsupported nla_type 58
[  613.128257][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8235'.
[  613.245976][ T4699] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  613.257089][ T4701] x_tables: duplicate underflow at hook 3
[  613.349925][ T4708] bond199: entered promiscuous mode
[  613.351740][ T4708] bond199: entered allmulticast mode
[  613.354108][ T4708] 8021q: adding VLAN 0 to HW filter on device bond199
[  613.399846][ T4712] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8242'.
[  613.409214][ T4712] netlink: 3850 bytes leftover after parsing attributes in process `syz.0.8242'.
[  613.496711][ T4722] bond209: left promiscuous mode
[  613.498999][ T4722] bridge97: left promiscuous mode
[  613.507810][ T4722] bond209: left allmulticast mode
[  613.509839][ T4722] bridge97: left allmulticast mode
[  613.554432][ T4722] bond210: left promiscuous mode
[  613.565165][ T4728] gre0: entered promiscuous mode
[  613.679545][ T4736] IPVS: persistence engine module ip_vs_pe_ not found
[  613.802591][ T4758] bond200: entered promiscuous mode
[  613.805090][ T4758] 8021q: adding VLAN 0 to HW filter on device bond200
[  613.830950][ T4758] bond200: (slave bridge90): making interface the new active one
[  613.834236][ T4758] bridge90: entered promiscuous mode
[  613.838547][ T4758] bridge90: left promiscuous mode
[  613.861737][ T4763] xt_ecn: cannot match TCP bits for non-tcp packets
[  614.247674][ T4782] bond152: entered promiscuous mode
[  614.250068][ T4782] bond152: entered allmulticast mode
[  614.252763][ T4782] 8021q: adding VLAN 0 to HW filter on device bond152
[  614.588875][ T4806] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000
[  615.004359][ T4822] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  615.059189][ T4826] bond201 (unregistering): Released all slaves
[  615.088665][ T4821] bond154 (unregistering): Released all slaves
[  615.221476][ T4847] syzkaller1: entered promiscuous mode
[  615.224326][ T4847] syzkaller1: entered allmulticast mode
[  615.245776][ T4849] tipc: Resetting bearer <eth:syzkaller0>
[  615.580873][ T4856] syzkaller1: entered promiscuous mode
[  615.582665][ T4856] syzkaller1: entered allmulticast mode
[  615.713730][ T4871] lo speed is unknown, defaulting to 1000
[  615.804408][ T4877] ipvlan2: entered promiscuous mode
[  615.807879][ T4877] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  616.085913][ T4895] bond154: Unable to set up delay as MII monitoring is disabled
[  616.090692][ T4895] bond154 (unregistering): Released all slaves
[  616.493673][ T4923] syzkaller1: entered promiscuous mode
[  616.495455][ T4923] syzkaller1: entered allmulticast mode
[  616.541642][ T4925] lo speed is unknown, defaulting to 1000
[  616.560986][ T4929] lo speed is unknown, defaulting to 1000
[  616.978655][ T4964] 1X: renamed from 60X
[  616.992062][ T4964] 1X: entered allmulticast mode
[  616.993811][ T4964] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  617.082485][ T4976] validate_nla: 6 callbacks suppressed
[  617.082497][ T4976] netlink: 'syz.2.8308': attribute type 1 has an invalid length.
[  617.098935][ T4976] netlink: 'syz.2.8308': attribute type 30 has an invalid length.
[  617.175799][ T4983] openvswitch: netlink: Actions may not be safe on all matching packets
[  617.299809][ T4992] bond211: Removing last ns target with arp_interval on
[  617.505496][ T5010] __nla_validate_parse: 193 callbacks suppressed
[  617.505507][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8315'.
[  617.519446][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8315'.
[  617.528244][ T5010] ip6gretap6: entered promiscuous mode
[  617.530196][ T5010] ip6gretap6: entered allmulticast mode
[  617.557442][ T5011] sctp: [Deprecated]: syz.2.8316 (pid 5011) Use of int in max_burst socket option.
[  617.557442][ T5011] Use struct sctp_assoc_value instead
[  617.578293][ T5015] 8021q: adding VLAN 0 to HW filter on device `
[  617.581581][ T5015] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  617.594400][ T5011] pim6reg1: entered promiscuous mode
[  617.600069][ T5011] pim6reg1: entered allmulticast mode
[  617.622639][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8317'.
[  617.654704][ T5021] netlink: 'syz.0.8318': attribute type 4 has an invalid length.
[  617.662604][ T5021] netlink: 'syz.0.8318': attribute type 4 has an invalid length.
[  617.669672][ T5021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.673868][ T5021] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8318'.
[  617.690306][ T5021] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ1
[  617.793745][ T5031] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  617.804744][ T5031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8322'.
[  617.819779][ T5028] lo speed is unknown, defaulting to 1000
[  617.842874][ T5034] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  618.153876][ T5049] netlink: 'syz.2.8326': attribute type 1 has an invalid length.
[  618.179481][ T5049] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8326'.
[  618.190638][ T5049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8326'.
[  618.211785][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'.
[  618.215506][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8324'.
[  618.248156][ T5045] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8324'.
[  618.672511][T16469] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  618.679143][T16469] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  618.683505][T16469] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  618.695649][T16469] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  618.816756][ T5096] openvswitch: netlink: Actions may not be safe on all matching packets
[  618.980549][ T5120] netlink: 'syz.1.8346': attribute type 1 has an invalid length.
[  619.029501][ T5120] bond202: (slave vxcan1): The slave device specified does not support setting the MAC address
[  619.034876][ T5120] bond202: (slave vxcan1): Error -95 calling set_mac_address
[  619.231835][ T5129] netlink: 'syz.1.8347': attribute type 1 has an invalid length.
[  619.476839][ T5157] netlink: 'syz.1.8353': attribute type 2 has an invalid length.
[  619.510143][ T5150] macsec4: entered promiscuous mode
[  619.582463][ T5164] bond212: entered promiscuous mode
[  619.589466][ T5164] 8021q: adding VLAN 0 to HW filter on device bond212
[  619.618857][ T5166] netlink: 'syz.1.8354': attribute type 7 has an invalid length.
[  619.622676][ T5166] netlink: 'syz.1.8354': attribute type 5 has an invalid length.
[  619.737791][ T5180] wg1: entered promiscuous mode
[  619.740491][ T5180] wg1: entered allmulticast mode
[  619.902267][ T5191] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode
[  619.905818][ T5191] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode
[  619.910563][ T5191] tipc: Resetting bearer <eth:syzkaller0>
[  620.008465][ T5197] vlan11: entered promiscuous mode
[  620.256600][ T5215] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  620.355161][ T5228] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002
[  620.464803][ T5230] geneve13: entered promiscuous mode
[  620.479562][ T5842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 50270 - 0
[  620.482994][ T5842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 50270 - 0
[  620.491045][ T5842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 50270 - 0
[  620.498327][ T5842] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 50270 - 0
[  620.649278][ T5253] 8021q: adding VLAN 0 to HW filter on device bond213
[  620.788204][ T5265] vlan15: entered promiscuous mode
[  620.790540][ T5265] veth0_to_bridge: entered promiscuous mode
[  620.792857][ T5265] vlan15: entered allmulticast mode
[  620.794680][ T5265] veth0_to_bridge: entered allmulticast mode
[  620.844945][ T5268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.029915][ T5285] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  621.151555][T10502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.154694][T10502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.161281][ T5305] dvmrp0: left allmulticast mode
[  621.163423][ T5305] pimreg: left allmulticast mode
[  621.274854][ T5319] 1X: renamed from 60X
[  621.284616][ T5319] 1X: entered allmulticast mode
[  621.287992][ T5319] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  621.605672][ T5345] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  621.650085][ T5345] bond214: entered promiscuous mode
[  621.674326][ T5345] vcan0: entered promiscuous mode
[  621.677328][ T5345] vcan0: entered allmulticast mode
[  621.679712][ T5345] bond214: (slave vcan0): The slave device specified does not support setting the MAC address
[  621.683783][ T5345] bond214: (slave vcan0): Error -95 calling set_mac_address
[  621.939289][ T5369] mac80211_hwsim hwsim163 wlan0: Caught tx_queue_len zero misconfig
[  622.216631][ T5386] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  622.678680][ T5389] __nla_validate_parse: 39 callbacks suppressed
[  622.678691][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8413'.
[  622.683751][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8413'.
[  622.790549][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8416'.
[  622.793616][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8416'.
[  622.825639][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8417'.
[  622.835675][ T5397] vlan16: entered allmulticast mode
[  622.839137][ T5397] team0: entered allmulticast mode
[  622.964345][ T5401] tipc: Resetting bearer <eth:ip6gre0>
[  622.977713][ T5401] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  623.017617][ T5411] openvswitch: netlink: IP tunnel dst address not specified
[  623.099296][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8419'.
[  623.171181][ T5425] syzkaller1: entered promiscuous mode
[  623.173452][ T5425] syzkaller1: entered allmulticast mode
[  623.533316][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8428'.
[  623.607165][ T5439] veth94: entered allmulticast mode
[  623.650512][ T5439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8429'.
[  623.653731][ T5439] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  623.680944][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8430'.
[  623.688733][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8430'.
[  623.718490][ T5449] validate_nla: 10 callbacks suppressed
[  623.718502][ T5449] netlink: 'syz.1.8431': attribute type 2 has an invalid length.
[  623.779963][ T5456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  623.784881][ T5456] tipc: Resetting bearer <eth:syzkaller0>
[  624.038780][ T5466] tipc: Resetting bearer <eth:ip6gre0>
[  624.081648][ T5477] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  624.127846][T16469] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  624.136482][T16469] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 50270 - 0
[  624.139399][T16469] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  624.142166][T16469] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 50270 - 0
[  624.146873][T16469] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  624.149900][T16469] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 50270 - 0
[  624.152804][T16469] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  624.155574][T16469] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 50270 - 0
[  624.213307][ T5481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  624.268206][ T5485] netlink: 'syz.2.8441': attribute type 15 has an invalid length.
[  624.297021][ T5487] netlink: 'syz.0.8442': attribute type 10 has an invalid length.
[  624.299719][ T5487] 1X: left allmulticast mode
[  624.425685][ T5492] bridge91: port 1(bond0) entered blocking state
[  624.436284][ T5492] bridge91: port 1(bond0) entered disabled state
[  624.438635][ T5492] bond0: entered allmulticast mode
[  624.441262][ T5492] bond0: left allmulticast mode
[  624.485451][ T5502] bond155: entered promiscuous mode
[  624.488142][ T5502] 8021q: adding VLAN 0 to HW filter on device bond155
[  624.581956][ T5517] lo speed is unknown, defaulting to 1000
[  624.630391][ T5520] netlink: 'syz.0.8451': attribute type 1 has an invalid length.
[  624.662796][ T5520] bond215: entered promiscuous mode
[  624.664774][ T5520] 8021q: adding VLAN 0 to HW filter on device bond215
[  624.936646][ T5539] netlink: 'syz.0.8455': attribute type 21 has an invalid length.
[  624.939456][ T5539] netlink: 'syz.0.8455': attribute type 4 has an invalid length.
[  625.022332][ T5543] vlan0: Caught tx_queue_len zero misconfig
[  625.222303][ T5559] vlan11: entered allmulticast mode
[  625.224547][ T5559] bridge101: entered allmulticast mode
[  625.358672][ T5577] netlink: 'syz.0.8464': attribute type 14 has an invalid length.
[  625.362305][ T5577] netlink: 'syz.0.8464': attribute type 13 has an invalid length.
[  625.410260][ T5578] nbd: must specify a device to reconfigure
[  625.735734][ T5589] netlink: 'syz.1.8469': attribute type 4 has an invalid length.
[  625.749250][ T5589] netlink: 'syz.1.8469': attribute type 4 has an invalid length.
[  626.018262][ T5607] team4: entered promiscuous mode
[  626.020067][ T5607] team4: entered allmulticast mode
[  626.022067][ T5607] 8021q: adding VLAN 0 to HW filter on device team4
[  626.027362][ T5607] team5 (uninitialized): Failed to send options change via netlink (err -105)
[  626.042503][ T5607] team5: entered promiscuous mode
[  626.044353][ T5607] team5: entered allmulticast mode
[  626.046775][ T5607] 8021q: adding VLAN 0 to HW filter on device team5
[  626.101513][ T5613] erspan0: Device is already in use.
[  626.180142][ T5615] wg1: left promiscuous mode
[  626.184106][ T5615] wg1: left allmulticast mode
[  626.211999][ T5615] tipc: Resetting bearer <eth:syzkaller0>
[  626.219036][ T5615] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode
[  626.221470][ T5615] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode
[  626.245374][ T5615] ip6gretap6: left promiscuous mode
[  626.251158][ T5615] ip6gretap6: left allmulticast mode
[  626.258221][ T5615] macsec4: left promiscuous mode
[  626.262908][ T5615] bond212: left promiscuous mode
[  626.274126][ T5615] bond215: left promiscuous mode
[  626.288623][ T5615] vlan11: left allmulticast mode
[  626.292535][ T5615] bridge101: left allmulticast mode
[  629.076261][ T5613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  629.082216][ T5627] netlink: 'syz.2.8480': attribute type 12 has an invalid length.
[  629.202339][ T5642] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  629.273209][ T5647] __nla_validate_parse: 22 callbacks suppressed
[  629.273227][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8485'.
[  629.315410][ T5653] netlink: 'syz.1.8484': attribute type 1 has an invalid length.
[  629.350670][ T5656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8486'.
[  629.354616][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8486'.
[  629.373930][ T5653] 8021q: adding VLAN 0 to HW filter on device bond203
[  629.379638][ T5656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8486'.
[  629.406039][ T5649] bond203: (slave veth95): Enslaving as an active interface with a down link
[  629.417863][ T5656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8486'.
[  629.494783][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv7
[  629.500735][ T5649] bond203: (slave batadv7): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  629.515914][ T5664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  629.620867][ T5676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  629.662929][ T5680] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  629.680729][ T5682] netlink: 'syz.1.8489': attribute type 8 has an invalid length.
[  629.683825][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8489'.
[  629.699643][ T5682] bond189: (slave ip6gretap0): Removing an active aggregator
[  629.702775][ T5682] bond189: (slave ip6gretap0): Releasing backup interface
[  629.705045][ T5682] bond189: (slave ip6gretap0): the permanent HWaddr of slave - 8a:ea:cf:8e:74:b7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  630.054686][ T5710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8494'.
[  630.058317][ T5710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8494'.
[  630.335487][ T5733] syzkaller1: tun_chr_ioctl cmd 1074025677
[  630.338383][ T5733] syzkaller1: linktype set to 768
[  630.354610][ T5733] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode
[  630.358026][ T5733] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode
[  630.361925][ T5733] tipc: Resetting bearer <eth:syzkaller0>
[  630.445014][ T5735] netlink: 'syz.0.8501': attribute type 1 has an invalid length.
[  630.468910][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8501'.
[  630.473098][ T5735] 8021q: adding VLAN 0 to HW filter on device bond217
[  630.487889][ T5738] netlink: 'syz.1.8502': attribute type 1 has an invalid length.
[  630.624704][ T5740] netlink: 4140 bytes leftover after parsing attributes in process `syz.0.8503'.
[  630.720506][ T5756] nbd: illegal input index -1113835520
[  630.724330][ T5842] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  630.727503][ T5842] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  630.731381][ T5842] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  630.734364][ T5842] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  630.801468][ T5765] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap11
[  630.948311][ T5781] netlink: 'syz.1.8516': attribute type 1 has an invalid length.
[  631.083459][ T5789] tun0: tun_chr_ioctl cmd 1074025677
[  631.085424][ T5789] tun0: linktype set to 804
[  631.146730][ T5791] bond0: entered promiscuous mode
[  631.148974][ T5791] bond0: left promiscuous mode
[  631.153014][ T5795] netlink: 'syz.0.8520': attribute type 29 has an invalid length.
[  631.261522][ T5801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  631.264678][ T5801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  631.306880][ T5805] bond218: entered promiscuous mode
[  631.309433][ T5805] 8021q: adding VLAN 0 to HW filter on device bond218
[  631.343266][ T5816] bond219: entered promiscuous mode
[  631.345325][ T5816] 8021q: adding VLAN 0 to HW filter on device bond219
[  631.351756][ T5815] tipc: Resetting bearer <eth:syzkaller0>
[  631.383913][ T5815] tipc: Resetting bearer <eth:syzkaller0>
[  631.435927][ T5829] syzkaller1: entered promiscuous mode
[  631.438439][ T5829] syzkaller1: entered allmulticast mode
[  631.521950][ T5832] syzkaller0: entered promiscuous mode
[  631.525160][ T5832] syzkaller0: entered allmulticast mode
[  631.912502][ T5889] bond156: option packets_per_slave: invalid value (775041080)
[  631.924093][ T5889] bond156: option packets_per_slave: allowed values 0 - 65535
[  631.953561][ T5889] bond156 (unregistering): Released all slaves
[  632.127409][ T5903] netlink: 'syz.2.8533': attribute type 10 has an invalid length.
[  632.144487][ T5903] netlink: 'syz.2.8533': attribute type 10 has an invalid length.
[  632.591489][ T5943] x_tables: unsorted entry at hook 2
[  632.868095][ T5955] block nbd0: NBD_DISCONNECT
[  633.852757][ T6008] dvmrp0: entered allmulticast mode
[  634.043568][ T6024] bridge103: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  634.151019][ T6029] netlink: 'syz.2.8560': attribute type 1 has an invalid length.
[  634.351454][ T6043] netlink: 'syz.2.8562': attribute type 1 has an invalid length.
[  634.374599][ T6043] 8021q: adding VLAN 0 to HW filter on device bond156
[  634.408927][ T6041] bond156: (slave veth83): Enslaving as an active interface with a down link
[  634.420973][ T6046] rdma_op ffff88802d75b9f0 conn xmit_rdma 0000000000000000
[  634.445330][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv3
[  634.456503][ T6041] bond156: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  634.508714][ T5920] Set syz1 is full, maxelem 65536 reached
[  634.583057][ T6053] __nla_validate_parse: 14 callbacks suppressed
[  634.583079][ T6053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8566'.
[  634.594175][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8567'.
[  634.599058][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8567'.
[  634.603537][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8567'.
[  634.608130][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8567'.
[  634.748905][ T6069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8571'.
[  634.755309][ T6069] netlink: 'syz.0.8571': attribute type 5 has an invalid length.
[  634.761469][ T6069] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ1
[  634.768757][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8568'.
[  634.779472][ T6056] bond0: entered promiscuous mode
[  634.781792][ T6056] bond0: left promiscuous mode
[  634.785881][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8572'.
[  634.793722][ T6069] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  634.799739][ T6072] bond2: option mode: unable to set because the bond device has slaves
[  634.803563][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8572'.
[  634.808412][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8572'.
[  634.817024][ T6072] netlink: 'syz.1.8572': attribute type 4 has an invalid length.
[  634.969948][ T6086] syzkaller1: entered promiscuous mode
[  634.972851][ T6086] syzkaller1: entered allmulticast mode
[  635.041162][ T6097] netlink: 'syz.1.8580': attribute type 1 has an invalid length.
[  635.084847][ T6097] 8021q: adding VLAN 0 to HW filter on device bond204
[  635.163110][ T6105] 0{X: renamed from 31{X
[  635.170447][ T6105] 0{X: entered allmulticast mode
[  635.173989][ T6105] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  635.682296][ T6175] bond220: entered promiscuous mode
[  635.684668][ T6175] 8021q: adding VLAN 0 to HW filter on device bond220
[  635.783601][ T6185] netlink: 'syz.1.8599': attribute type 1 has an invalid length.
[  635.818119][ T6185] 8021q: adding VLAN 0 to HW filter on device bond205
[  635.842035][ T6185] bond205: (slave veth97): Enslaving as an active interface with a down link
[  635.894438][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv7
[  635.898261][ T6185] bond205: (slave batadv7): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  635.965273][ T6198] netlink: 'syz.0.8602': attribute type 1 has an invalid length.
[  635.988885][ T6198] 8021q: adding VLAN 0 to HW filter on device bond221
[  636.077293][ T6209] syzkaller1: entered promiscuous mode
[  636.079042][ T6209] syzkaller1: entered allmulticast mode
[  636.144678][ T6215] bond0: (slave rose0): Releasing backup interface
[  636.148385][ T6215] rose0: left promiscuous mode
[  636.149981][ T6215] rose0: left allmulticast mode
[  636.277401][ T6224] netlink: 'syz.0.8609': attribute type 21 has an invalid length.
[  636.279968][ T6224] netlink: 'syz.0.8609': attribute type 4 has an invalid length.
[  636.297801][ T6224] netlink: 'syz.0.8609': attribute type 1 has an invalid length.
[  636.380779][ T6234] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  636.580005][ T6250] bond157: entered promiscuous mode
[  636.582138][ T6250] 8021q: adding VLAN 0 to HW filter on device bond157
[  636.585122][ T6247] bond157: entered allmulticast mode
[  636.600461][ T6247] bond157: (slave bridge97): making interface the new active one
[  636.603035][ T6247] bridge97: entered promiscuous mode
[  636.604837][ T6247] bridge97: entered allmulticast mode
[  636.608094][ T6247] bond157: (slave bridge97): Enslaving as an active interface with an up link
[  636.673744][ T6257] bond158: (slave vxcan1): The slave device specified does not support setting the MAC address
[  636.679694][ T6257] bond158: (slave vxcan1): Error -95 calling set_mac_address
[  636.690603][ T6260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  636.731800][ T6261] bond158: (slave bridge98): Enslaving as an active interface with a down link
[  636.750033][ T6257] bond158: (slave bridge99): Enslaving as an active interface with a down link
[  636.766626][ T6257] macvlan15: entered promiscuous mode
[  636.768656][ T6257] macvlan15: entered allmulticast mode
[  636.771753][ T6257] bond158: entered promiscuous mode
[  636.773985][ T6257] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  636.780232][ T6257] bond158: left promiscuous mode
[  636.985499][ T6281] 8021q: adding VLAN 0 to HW filter on device bond222
[  637.004968][ T6281] vlan12: entered promiscuous mode
[  637.007586][ T6281] bond222: entered promiscuous mode
[  637.010475][ T6281] vlan12: entered allmulticast mode
[  637.012767][ T6281] bond222: entered allmulticast mode
[  637.028638][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv6
[  637.033636][ T6281] bond222: (slave batadv6): making interface the new active one
[  637.036396][ T6281] batadv6: entered promiscuous mode
[  637.046000][ T6281] batadv6: entered allmulticast mode
[  637.048972][ T6281] bond222: (slave batadv6): Enslaving as an active interface with an up link
[  637.254688][ T6304] pimreg: entered allmulticast mode
[  637.260362][ T6307] pim6reg1: entered promiscuous mode
[  637.262183][ T6307] pim6reg1: entered allmulticast mode
[  637.308044][ T6310] lo speed is unknown, defaulting to 1000
[  637.521399][ T6331] bond159: (slave bridge100): Enslaving as a backup interface with an up link
[  637.542567][ T6331] bond159: (slave bridge101): Enslaving as a backup interface with a down link
[  637.695068][ T6351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  637.884288][ T6365] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  637.887921][ T6355] lo speed is unknown, defaulting to 1000
[  637.892915][ T6363] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  637.908264][ T6366] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  638.110236][ T6378] bond5: (slave bond0): Releasing active interface
[  638.167387][ T6375] bond223: Setting coupled_control to off (0)
[  638.171819][ T6382] openvswitch: netlink: IP tunnel dst address not specified
[  638.206384][ T6382] lo speed is unknown, defaulting to 1000
[  638.524424][ T6411] bridge0: entered allmulticast mode
[  638.950113][ T6443] xt_hashlimit: size too large, truncated to 1048576
[  639.127204][ T6446] syzkaller1: tun_chr_ioctl cmd 1074025677
[  639.129684][ T6446] syzkaller1: linktype set to 768
[  639.210313][ T6448] team0 (unregistering): Port device gtp4 removed
[  639.369583][ T6458] validate_nla: 8 callbacks suppressed
[  639.369593][ T6458] netlink: 'syz.1.8668': attribute type 1 has an invalid length.
[  639.384319][ T6458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.588652][ T6464] __nla_validate_parse: 155 callbacks suppressed
[  639.588663][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8670'.
[  639.621331][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8673'.
[  639.646081][ T6484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8674'.
[  639.727985][ T6493] 0{X: left allmulticast mode
[  639.729677][ T6493] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8677'.
[  639.748162][ T6479] gretap11: entered promiscuous mode
[  639.750569][ T6479] batman_adv: batadv0: Adding interface: gretap11
[  639.753052][ T6479] batman_adv: batadv0: The MTU of interface gretap11 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.777923][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8676'.
[  639.790736][ T6479] batman_adv: batadv0: Not using interface gretap11 (retrying later): interface not active
[  639.876392][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8680'.
[  639.900070][ T6505] bond207: entered promiscuous mode
[  639.902549][ T6505] 8021q: adding VLAN 0 to HW filter on device bond207
[  639.930878][ T6505] 8021q: adding VLAN 0 to HW filter on device bond208
[  639.936777][ T6505] bond208: entered promiscuous mode
[  639.939589][ T6505] bond207: (slave bond208): Enslaving as an active interface with an up link
[  639.977860][ T6508] netlink: 'syz.2.8679': attribute type 11 has an invalid length.
[  640.008870][ T6510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8681'.
[  640.048860][ T6510] bond224: Unable to set down delay as MII monitoring is disabled
[  640.060616][ T6510] bond224 (unregistering): Released all slaves
[  640.087549][ T6515] pim6reg: entered allmulticast mode
[  640.090790][ T6515] pim6reg: left allmulticast mode
[  640.181478][ T6518] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8684'.
[  640.307074][ T6522] netlink: 'syz.0.8686': attribute type 2 has an invalid length.
[  640.440457][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8687'.
[  640.890273][ T6540] bridge105: entered promiscuous mode
[  640.892199][ T6540] bridge105: entered allmulticast mode
[  641.183376][ T6544] netlink: 'syz.2.8693': attribute type 10 has an invalid length.
[  641.185980][ T6544] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8693'.
[  641.238561][ T6550] syzkaller0: entered promiscuous mode
[  641.240751][ T6550] syzkaller0: entered allmulticast mode
[  641.245156][ T6548] netlink: 'syz.2.8694': attribute type 1 has an invalid length.
[  641.668229][ T6581] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[  641.670833][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.0.8704 Not tainted syzkaller #0 PREEMPT(full) 
[  641.670845][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.670850][ T6581] Call Trace:
[  641.670855][ T6581]  <TASK>
[  641.670860][ T6581]  dump_stack_lvl+0xe8/0x150
[  641.670875][ T6581]  sysfs_warn_dup+0x8e/0xa0
[  641.670887][ T6581]  sysfs_do_create_link_sd+0xc0/0x110
[  641.670898][ T6581]  device_add_class_symlinks+0x1cf/0x240
[  641.670912][ T6581]  device_add+0x475/0xb70
[  641.670924][ T6581]  wiphy_register+0x1d73/0x2d50
[  641.670941][ T6581]  ? __pfx_wiphy_register+0x10/0x10
[  641.670950][ T6581]  ? __pfx_netdev_run_todo+0x10/0x10
[  641.670958][ T6581]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  641.670969][ T6581]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  641.670983][ T6581]  ieee80211_register_hw+0x3571/0x4220
[  641.670996][ T6581]  ? ieee80211_register_hw+0x1411/0x4220
[  641.671007][ T6581]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  641.671020][ T6581]  ? __hrtimer_setup+0x181/0x200
[  641.671031][ T6581]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  641.671041][ T6581]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  641.671065][ T6581]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  641.671076][ T6581]  ? kstrndup+0xbf/0x160
[  641.671112][ T6581]  hwsim_new_radio_nl+0xf35/0x1bd0
[  641.671132][ T6581]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  641.671147][ T6581]  ? rcu_is_watching+0x15/0xb0
[  641.671158][ T6581]  ? trace_kmalloc+0x2a/0x110
[  641.671169][ T6581]  ? __nla_parse+0x40/0x60
[  641.671180][ T6581]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  641.671200][ T6581]  genl_family_rcv_msg_doit+0x22a/0x330
[  641.671214][ T6581]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  641.671230][ T6581]  ? bpf_lsm_capable+0x9/0x20
[  641.671241][ T6581]  ? security_capable+0x7e/0x2c0
[  641.671252][ T6581]  genl_rcv_msg+0x61c/0x7a0
[  641.671266][ T6581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  641.671277][ T6581]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  641.671288][ T6581]  ? __lock_acquire+0x6b5/0x2cf0
[  641.671302][ T6581]  netlink_rcv_skb+0x232/0x4b0
[  641.671312][ T6581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  641.671324][ T6581]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  641.671340][ T6581]  ? down_read+0x272/0x2e0
[  641.671347][ T6581]  ? genl_rcv+0xd/0x40
[  641.671358][ T6581]  genl_rcv+0x28/0x40
[  641.671367][ T6581]  netlink_unicast+0x80f/0x9b0
[  641.671379][ T6581]  ? __pfx_netlink_unicast+0x10/0x10
[  641.671387][ T6581]  ? netlink_sendmsg+0x650/0xb40
[  641.671395][ T6581]  ? skb_put+0x11b/0x210
[  641.671406][ T6581]  netlink_sendmsg+0x813/0xb40
[  641.671419][ T6581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  641.671429][ T6581]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  641.671441][ T6581]  ? aa_sock_msg_perm+0xf1/0x1b0
[  641.671451][ T6581]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  641.671461][ T6581]  ____sys_sendmsg+0x972/0x9f0
[  641.671476][ T6581]  ? __pfx_____sys_sendmsg+0x10/0x10
[  641.671490][ T6581]  ? import_iovec+0x73/0xa0
[  641.671501][ T6581]  ___sys_sendmsg+0x2a5/0x360
[  641.671514][ T6581]  ? __pfx____sys_sendmsg+0x10/0x10
[  641.671543][ T6581]  ? futex_wake+0x4ac/0x580
[  641.671568][ T6581]  ? __fget_files+0x2a/0x420
[  641.671583][ T6581]  ? __fget_files+0x3a0/0x420
[  641.671605][ T6581]  __x64_sys_sendmsg+0x1bd/0x2a0
[  641.671622][ T6581]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  641.671642][ T6581]  ? rcu_is_watching+0x15/0xb0
[  641.671666][ T6581]  do_syscall_64+0x14d/0xf80
[  641.671683][ T6581]  ? trace_irq_disable+0x3b/0x150
[  641.671698][ T6581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.671713][ T6581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.671723][ T6581] RIP: 0033:0x7f6604b9c799
[  641.671735][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.671745][ T6581] RSP: 002b:00007f6605a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  641.671757][ T6581] RAX: ffffffffffffffda RBX: 00007f6604e16090 RCX: 00007f6604b9c799
[  641.671772][ T6581] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  641.671781][ T6581] RBP: 00007f6604c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  641.671788][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.671794][ T6581] R13: 00007f6604e16128 R14: 00007f6604e16090 R15: 00007fff990e15d8
[  641.671810][ T6581]  </TASK>
[  641.983043][ T6579] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  642.059543][ T6599] netlink: 'syz.1.8707': attribute type 1 has an invalid length.
[  642.081768][ T6599] bond209: entered promiscuous mode
[  642.083790][ T6599] bond209: entered allmulticast mode
[  642.089839][ T6599] 8021q: adding VLAN 0 to HW filter on device bond209
[  642.288010][ T6624] bond163: option lp_interval: invalid value (0)
[  642.290539][ T6624] bond163: option lp_interval: allowed values 1 - 2147483647
[  642.296032][ T6624] bond163 (unregistering): Released all slaves
[  642.329233][ T6619] lo speed is unknown, defaulting to 1000
[  642.410209][ T6636] netlink: 'syz.2.8717': attribute type 1 has an invalid length.
[  642.474624][ T6642] x_tables: duplicate underflow at hook 2
[  642.504602][ T6636] bond163: entered promiscuous mode
[  642.507054][ T6636] bond163: entered allmulticast mode
[  642.511429][ T6636] 8021q: adding VLAN 0 to HW filter on device bond163
[  642.630680][ T6652] netlink: 'syz.2.8720': attribute type 13 has an invalid length.
[  642.634058][ T6652] netlink: 'syz.2.8720': attribute type 17 has an invalid length.
[  642.637921][ T6652] lo: left allmulticast mode
[  642.650447][ T6652] tunl0: left allmulticast mode
[  642.655545][ T6652] gre0: left promiscuous mode
[  642.657985][ T6652] gre0: left allmulticast mode
[  642.671553][ T6652] erspan0: left allmulticast mode
[  642.689271][ T6652] ip_vti0: left allmulticast mode
[  642.694300][ T6652] ip6_vti0: left allmulticast mode
[  642.698800][ T6652] sit0: left allmulticast mode
[  642.707888][ T6652] ip6tnl0: left allmulticast mode
[  642.713335][ T6656] No such timeout policy "syz1"
[  642.713341][ T6652] ip6gre0: left allmulticast mode
[  642.720937][ T6652] nlmon0: left allmulticast mode
[  642.726009][ T6652] 0X: left allmulticast mode
[  642.728895][ T6652] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  642.888474][ T6672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  643.045737][ T6677] netlink: 'syz.2.8727': attribute type 1 has an invalid length.
[  643.309891][ T6692] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  643.665859][ T6716] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  643.676486][ T6716] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.722310][ T6718] bridge92: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  643.777974][ T6726] netlink: 'syz.1.8740': attribute type 1 has an invalid length.
[  643.811355][ T6726] bond210: entered promiscuous mode
[  643.813097][ T6726] bond210: entered allmulticast mode
[  643.815442][ T6726] 8021q: adding VLAN 0 to HW filter on device bond210
[  643.829118][ T6726] macvlan4: entered promiscuous mode
[  643.831269][ T6726] macvlan4: entered allmulticast mode
[  643.837115][ T6726] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  643.865929][ T6727] tipc: Resetting bearer <eth:ip6gre0>
[  644.112935][ T6738] bond0: (slave ): Enslaving as a backup interface with an up link
[  644.334946][ T6762] bond0: Caught tx_queue_len zero misconfig
[  644.508906][ T6778] xt_ecn: cannot match TCP bits for non-tcp packets
[  644.652470][ T6794] netlink: 'syz.0.8758': attribute type 1 has an invalid length.
[  644.712236][ T6790] lo speed is unknown, defaulting to 1000
[  644.781963][ T6800] netlink: 'syz.1.8761': attribute type 1 has an invalid length.
[  644.815014][ T6800] bond211: entered promiscuous mode
[  644.817977][ T6800] 8021q: adding VLAN 0 to HW filter on device bond211
[  644.861402][ T6803] 8021q: adding VLAN 0 to HW filter on device bond212
[  644.869952][ T6803] bond211: (slave bond212): making interface the new active one
[  644.873384][ T6803] bond212: entered promiscuous mode
[  644.876590][ T6803] bond211: (slave bond212): Enslaving as an active interface with an up link
[  644.906429][ T6811] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  644.917780][ T6813] __nla_validate_parse: 16 callbacks suppressed
[  644.917789][ T6813] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8764'.
[  644.918784][ T6811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  645.054626][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8768'.
[  645.097994][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8770'.
[  645.168435][ T6827] bond213: entered promiscuous mode
[  645.170805][ T6827] 8021q: adding VLAN 0 to HW filter on device bond213
[  645.212660][ T6841] 8021q: adding VLAN 0 to HW filter on device bond214
[  645.219547][ T6841] bond214: entered promiscuous mode
[  645.222252][ T6841] bond213: (slave bond214): Enslaving as an active interface with an up link
[  645.287305][ T6854] bridge93: entered promiscuous mode
[  645.346420][ T6871] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8779'.
[  645.435585][ T6876] lo speed is unknown, defaulting to 1000
[  645.484302][ T6884] netlink: 'syz.0.8782': attribute type 21 has an invalid length.
[  645.501306][ T6888] netlink: 'syz.2.8783': attribute type 1 has an invalid length.
[  645.586403][ T6888] 8021q: adding VLAN 0 to HW filter on device bond165
[  645.593169][ T6888] bond164: (slave bond165): making interface the new active one
[  645.598605][ T6888] bond164: (slave bond165): Enslaving as an active interface with an up link
[  645.615967][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8783'.
[  645.621058][ T6892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.627435][ T6888] 8021q: adding VLAN 0 to HW filter on device bond164
[  645.638575][ T6888] vlan16: entered promiscuous mode
[  645.640820][ T6888] bond164: entered promiscuous mode
[  645.642707][ T6888] bond165: entered promiscuous mode
[  645.778551][ T6904] netlink: 'syz.1.8786': attribute type 1 has an invalid length.
[  645.785625][ T6904] workqueue: Failed to create a rescuer kthread for wq "bond215": -EINTR
[  645.881288][ T6912] netlink: 'syz.1.8787': attribute type 2 has an invalid length.
[  645.907591][ T6912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  646.056606][ T6921] sysfs: cannot create duplicate filename '/class/ieee80211/π!'
[  646.059743][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.1.8790 Not tainted syzkaller #0 PREEMPT(full) 
[  646.059755][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.059760][ T6921] Call Trace:
[  646.059764][ T6921]  <TASK>
[  646.059768][ T6921]  dump_stack_lvl+0xe8/0x150
[  646.059783][ T6921]  sysfs_warn_dup+0x8e/0xa0
[  646.059794][ T6921]  sysfs_do_create_link_sd+0xc0/0x110
[  646.059805][ T6921]  device_add_class_symlinks+0x1cf/0x240
[  646.059818][ T6921]  device_add+0x475/0xb70
[  646.059830][ T6921]  wiphy_register+0x1d73/0x2d50
[  646.059846][ T6921]  ? __pfx_wiphy_register+0x10/0x10
[  646.059859][ T6921]  ? ieee80211_register_hw+0x34ba/0x4220
[  646.059869][ T6921]  ieee80211_register_hw+0x3571/0x4220
[  646.059881][ T6921]  ? ieee80211_register_hw+0x1411/0x4220
[  646.059892][ T6921]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  646.059906][ T6921]  ? __hrtimer_setup+0x181/0x200
[  646.059916][ T6921]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  646.059925][ T6921]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  646.059947][ T6921]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  646.059958][ T6921]  ? kstrndup+0xbf/0x160
[  646.059970][ T6921]  hwsim_new_radio_nl+0xf35/0x1bd0
[  646.059992][ T6921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  646.060006][ T6921]  ? rcu_is_watching+0x15/0xb0
[  646.060048][ T6921]  ? trace_kmalloc+0x2a/0x110
[  646.060065][ T6921]  ? __nla_parse+0x40/0x60
[  646.060084][ T6921]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  646.060101][ T6921]  genl_family_rcv_msg_doit+0x22a/0x330
[  646.060115][ T6921]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  646.060130][ T6921]  ? bpf_lsm_capable+0x9/0x20
[  646.060140][ T6921]  ? security_capable+0x7e/0x2c0
[  646.060150][ T6921]  genl_rcv_msg+0x61c/0x7a0
[  646.060163][ T6921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  646.060174][ T6921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  646.060184][ T6921]  ? __lock_acquire+0x6b5/0x2cf0
[  646.060198][ T6921]  netlink_rcv_skb+0x232/0x4b0
[  646.060207][ T6921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  646.060218][ T6921]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  646.060234][ T6921]  ? down_read+0x272/0x2e0
[  646.060241][ T6921]  ? genl_rcv+0xd/0x40
[  646.060251][ T6921]  genl_rcv+0x28/0x40
[  646.060261][ T6921]  netlink_unicast+0x80f/0x9b0
[  646.060273][ T6921]  ? __pfx_netlink_unicast+0x10/0x10
[  646.060281][ T6921]  ? netlink_sendmsg+0x650/0xb40
[  646.060289][ T6921]  ? skb_put+0x11b/0x210
[  646.060301][ T6921]  netlink_sendmsg+0x813/0xb40
[  646.060313][ T6921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  646.060324][ T6921]  ? aa_sock_msg_perm+0xf1/0x1b0
[  646.060333][ T6921]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  646.060343][ T6921]  ____sys_sendmsg+0x972/0x9f0
[  646.060353][ T6921]  ? futex_unqueue+0x211/0x240
[  646.060364][ T6921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  646.060378][ T6921]  ? import_iovec+0x73/0xa0
[  646.060390][ T6921]  ___sys_sendmsg+0x2a5/0x360
[  646.060403][ T6921]  ? __pfx____sys_sendmsg+0x10/0x10
[  646.060416][ T6921]  ? futex_wait+0x29a/0x380
[  646.060436][ T6921]  ? __fget_files+0x2a/0x420
[  646.060446][ T6921]  ? __fget_files+0x3a0/0x420
[  646.060460][ T6921]  __x64_sys_sendmsg+0x1bd/0x2a0
[  646.060471][ T6921]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  646.060496][ T6921]  do_syscall_64+0x14d/0xf80
[  646.060507][ T6921]  ? trace_irq_disable+0x3b/0x150
[  646.060517][ T6921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.060527][ T6921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.060534][ T6921] RIP: 0033:0x7f481139c799
[  646.060543][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.060550][ T6921] RSP: 002b:00007f481229b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.060559][ T6921] RAX: ffffffffffffffda RBX: 00007f4811615fa0 RCX: 00007f481139c799
[  646.060565][ T6921] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  646.060570][ T6921] RBP: 00007f4811432bd9 R08: 0000000000000000 R09: 0000000000000000
[  646.060575][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.060579][ T6921] R13: 00007f4811616038 R14: 00007f4811615fa0 R15: 00007fff38ddfc18
[  646.060591][ T6921]  </TASK>
[  646.408405][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8795'.
[  646.421305][ T6943] netlink: 'syz.2.8796': attribute type 1 has an invalid length.
[  646.423959][ T6943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8796'.
[  646.451131][ T6947] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8797'.
[  646.553584][ T6957] netlink: 'syz.2.8800': attribute type 29 has an invalid length.
[  646.564513][ T6957] netlink: 'syz.2.8800': attribute type 1 has an invalid length.
[  646.577333][ T6957] netlink: 'syz.2.8800': attribute type 29 has an invalid length.
[  646.587500][ T6960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8801'.
[  646.587527][ T6959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8801'.
[  646.689583][ T6971] ------------[ cut here ]------------
[  646.691784][ T6971] i != fen6_info->nsiblings
[  646.691795][ T6971] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0x1060/0x1210, CPU#1: syz.2.8804/6971
[  646.697698][ T6971] Modules linked in:
[  646.699253][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.2.8804 Not tainted syzkaller #0 PREEMPT(full) 
[  646.702421][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.707141][ T6971] RIP: 0010:nsim_fib_event_nb+0x1060/0x1210
[  646.709599][ T6971] Code: 00 00 00 48 89 df e8 2f 1f 8e fd 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 38 4c 8b 64 24 20 e9 1d f3 ff ff e8 81 82 a5 fa 90 <0f> 0b 90 e9 d3 f9 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c b7 f0
[  646.717468][ T6971] RSP: 0018:ffffc9000f9aefc8 EFLAGS: 00010283
[  646.719965][ T6971] RAX: ffffffff8720092f RBX: 0000000000000001 RCX: 0000000000080000
[  646.723139][ T6971] RDX: ffffc90008425000 RSI: 00000000000009d5 RDI: 00000000000009d6
[  646.726413][ T6971] RBP: ffffc9000f9af160 R08: ffff88817642a82f R09: 1ffff1102ec85505
[  646.727479][ T6974] 8021q: adding VLAN 0 to HW filter on device bond216
[  646.729540][ T6971] R10: dffffc0000000000 R11: ffffed102ec85506 R12: ffff88817642a818
[  646.733288][ T6974] bond215: (slave bond216): making interface the new active one
[  646.735064][ T6971] R13: 0000000000000000 R14: ffffc9000f9af178 R15: dffffc0000000000
[  646.738259][ T6974] bond215: (slave bond216): Enslaving as an active interface with an up link
[  646.741026][ T6971] FS:  00007fa3309ae6c0(0000) GS:ffff8882a9464000(0000) knlGS:0000000000000000
[  646.747513][ T6971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  646.750229][ T6971] CR2: 0000200000003ff6 CR3: 000000004fd20000 CR4: 00000000000006f0
[  646.753489][ T6971] Call Trace:
[  646.754952][ T6971]  <TASK>
[  646.756309][ T6971]  notifier_call_chain+0x1be/0x400
[  646.758334][ T6971]  ? atomic_notifier_call_chain+0x26/0x180
[  646.760727][ T6971]  atomic_notifier_call_chain+0xda/0x180
[  646.763044][ T6971]  call_fib_notifiers+0x31/0x60
[  646.764917][ T6971]  call_fib6_multipath_entry_notifiers+0xf5/0x160
[  646.767556][ T6971]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  646.770469][ T6971]  ? inet6_rtm_newroute+0xfb8/0x19e0
[  646.772716][ T6971]  ? inet6_rtm_newroute+0xfb8/0x19e0
[  646.774977][ T6971]  inet6_rtm_newroute+0x14a2/0x19e0
[  646.777600][ T6971]  ? kasan_quarantine_put+0xbb/0x1f0
[  646.779775][ T6971]  ? lockdep_hardirqs_on+0x7a/0x110
[  646.781891][ T6971]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  646.784066][ T6971]  ? kmem_cache_free+0x187/0x630
[  646.785989][ T6971]  ? nlmon_xmit+0xb0/0x100
[  646.788888][ T6971]  ? lockdep_hardirqs_on+0x7a/0x110
[  646.790798][ T6971]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  646.792567][ T6971]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  646.794072][ T6971]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  646.795699][ T6971]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  646.798040][ T6971]  ? ref_tracker_free+0x693/0x840
[  646.800155][ T6971]  ? __copy_skb_header+0xa3/0x4a0
[  646.802210][ T6971]  ? __pfx_ref_tracker_free+0x10/0x10
[  646.804341][ T6971]  netlink_rcv_skb+0x232/0x4b0
[  646.806457][ T6971]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  646.808663][ T6971]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  646.810858][ T6971]  ? netlink_deliver_tap+0x2e/0x1b0
[  646.813026][ T6971]  netlink_unicast+0x80f/0x9b0
[  646.814993][ T6971]  ? __pfx_netlink_unicast+0x10/0x10
[  646.817380][ T6971]  ? netlink_sendmsg+0x650/0xb40
[  646.819433][ T6971]  ? skb_put+0x11b/0x210
[  646.821218][ T6971]  netlink_sendmsg+0x813/0xb40
[  646.823254][ T6971]  ? __pfx_netlink_sendmsg+0x10/0x10
[  646.825481][ T6971]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  646.828245][ T6971]  ? aa_sock_msg_perm+0xf1/0x1b0
[  646.830292][ T6971]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  646.832493][ T6971]  ____sys_sendmsg+0x972/0x9f0
[  646.834326][ T6971]  ? __pfx_____sys_sendmsg+0x10/0x10
[  646.836680][ T6971]  ? import_iovec+0x73/0xa0
[  646.838549][ T6971]  ___sys_sendmsg+0x2a5/0x360
[  646.840493][ T6971]  ? __pfx____sys_sendmsg+0x10/0x10
[  646.842523][ T6971]  ? futex_wake+0x4ac/0x580
[  646.844343][ T6971]  ? __fget_files+0x2a/0x420
[  646.846417][ T6971]  ? __fget_files+0x3a0/0x420
[  646.848354][ T6971]  __x64_sys_sendmsg+0x1bd/0x2a0
[  646.850352][ T6971]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  646.852573][ T6971]  ? rcu_is_watching+0x15/0xb0
[  646.854427][ T6971]  do_syscall_64+0x14d/0xf80
[  646.856230][ T6971]  ? trace_irq_disable+0x3b/0x150
[  646.858301][ T6971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.860810][ T6971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.863296][ T6971] RIP: 0033:0x7fa32fb9c799
[  646.865193][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.873550][ T6971] RSP: 002b:00007fa3309ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.876944][ T6971] RAX: ffffffffffffffda RBX: 00007fa32fe15fa0 RCX: 00007fa32fb9c799
[  646.879518][ T6971] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004
[  646.882033][ T6971] RBP: 00007fa32fc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  646.884546][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.887370][ T6971] R13: 00007fa32fe16038 R14: 00007fa32fe15fa0 R15: 00007ffd5b130238
[  646.890551][ T6971]  </TASK>
[  646.891869][ T6971] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  646.894829][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.2.8804 Not tainted syzkaller #0 PREEMPT(full) 
[  646.898523][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.902248][ T6971] Call Trace:
[  646.903353][ T6971]  <TASK>
[  646.904305][ T6971]  vpanic+0x56c/0xa60
[  646.905643][ T6971]  ? __pfx__printk+0x10/0x10
[  646.907276][ T6971]  ? __pfx_vpanic+0x10/0x10
[  646.908760][ T6971]  ? is_bpf_text_address+0x292/0x2b0
[  646.910496][ T6971]  ? is_bpf_text_address+0x26/0x2b0
[  646.912195][ T6971]  panic+0xc5/0xd0
[  646.913431][ T6971]  ? __pfx_panic+0x10/0x10
[  646.914942][ T6971]  __warn+0x315/0x4f0
[  646.916314][ T6971]  ? nsim_fib_event_nb+0x1060/0x1210
[  646.918397][ T6971]  ? nsim_fib_event_nb+0x1060/0x1210
[  646.920374][ T6971]  __report_bug+0x29a/0x540
[  646.922290][ T6971]  ? netlink_rcv_skb+0x232/0x4b0
[  646.924397][ T6971]  ? netlink_unicast+0x80f/0x9b0
[  646.926455][ T6971]  ? netlink_sendmsg+0x813/0xb40
[  646.928568][ T6971]  ? nsim_fib_event_nb+0x1060/0x1210
[  646.930684][ T6971]  ? __pfx___report_bug+0x10/0x10
[  646.932686][ T6971]  ? nsim_fib_event_nb+0x1060/0x1210
[  646.934630][ T6971]  report_bug+0x16a/0x220
[  646.936409][ T6971]  ? nsim_fib_event_nb+0x1060/0x1210
[  646.938597][ T6971]  ? nsim_fib_event_nb+0x1062/0x1210
[  646.940818][ T6971]  handle_bug+0x98/0x200
[  646.942619][ T6971]  exc_invalid_op+0x1a/0x50
[  646.944531][ T6971]  asm_exc_invalid_op+0x1a/0x20
[  646.946547][ T6971] RIP: 0010:nsim_fib_event_nb+0x1060/0x1210
[  646.948912][ T6971] Code: 00 00 00 48 89 df e8 2f 1f 8e fd 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 38 4c 8b 64 24 20 e9 1d f3 ff ff e8 81 82 a5 fa 90 <0f> 0b 90 e9 d3 f9 ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c b7 f0
[  646.956798][ T6971] RSP: 0018:ffffc9000f9aefc8 EFLAGS: 00010283
[  646.959328][ T6971] RAX: ffffffff8720092f RBX: 0000000000000001 RCX: 0000000000080000
[  646.962557][ T6971] RDX: ffffc90008425000 RSI: 00000000000009d5 RDI: 00000000000009d6
[  646.965819][ T6971] RBP: ffffc9000f9af160 R08: ffff88817642a82f R09: 1ffff1102ec85505
[  646.968912][ T6971] R10: dffffc0000000000 R11: ffffed102ec85506 R12: ffff88817642a818
[  646.972058][ T6971] R13: 0000000000000000 R14: ffffc9000f9af178 R15: dffffc0000000000
[  646.975117][ T6971]  ? nsim_fib_event_nb+0x105f/0x1210
[  646.977175][ T6971]  ? nsim_fib_event_nb+0x105f/0x1210
[  646.979282][ T6971]  notifier_call_chain+0x1be/0x400
[  646.981406][ T6971]  ? atomic_notifier_call_chain+0x26/0x180
[  646.983878][ T6971]  atomic_notifier_call_chain+0xda/0x180
[  646.986246][ T6971]  call_fib_notifiers+0x31/0x60
[  646.988307][ T6971]  call_fib6_multipath_entry_notifiers+0xf5/0x160
[  646.990941][ T6971]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  646.993768][ T6971]  ? inet6_rtm_newroute+0xfb8/0x19e0
[  646.995863][ T6971]  ? inet6_rtm_newroute+0xfb8/0x19e0
[  646.998109][ T6971]  inet6_rtm_newroute+0x14a2/0x19e0
[  647.000284][ T6971]  ? kasan_quarantine_put+0xbb/0x1f0
[  647.002471][ T6971]  ? lockdep_hardirqs_on+0x7a/0x110
[  647.004654][ T6971]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  647.006817][ T6971]  ? kmem_cache_free+0x187/0x630
[  647.008770][ T6971]  ? nlmon_xmit+0xb0/0x100
[  647.010586][ T6971]  ? lockdep_hardirqs_on+0x7a/0x110
[  647.012719][ T6971]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  647.014871][ T6971]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  647.016891][ T6971]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  647.018994][ T6971]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  647.021225][ T6971]  ? ref_tracker_free+0x693/0x840
[  647.023196][ T6971]  ? __copy_skb_header+0xa3/0x4a0
[  647.025163][ T6971]  ? __pfx_ref_tracker_free+0x10/0x10
[  647.027361][ T6971]  netlink_rcv_skb+0x232/0x4b0
[  647.029311][ T6971]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  647.031486][ T6971]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  647.033612][ T6971]  ? netlink_deliver_tap+0x2e/0x1b0
[  647.035724][ T6971]  netlink_unicast+0x80f/0x9b0
[  647.037601][ T6971]  ? __pfx_netlink_unicast+0x10/0x10
[  647.039818][ T6971]  ? netlink_sendmsg+0x650/0xb40
[  647.041790][ T6971]  ? skb_put+0x11b/0x210
[  647.043476][ T6971]  netlink_sendmsg+0x813/0xb40
[  647.045423][ T6971]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.047554][ T6971]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  647.049919][ T6971]  ? aa_sock_msg_perm+0xf1/0x1b0
[  647.051514][ T6971]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  647.053185][ T6971]  ____sys_sendmsg+0x972/0x9f0
[  647.054703][ T6971]  ? __pfx_____sys_sendmsg+0x10/0x10
[  647.056469][ T6971]  ? import_iovec+0x73/0xa0
[  647.057923][ T6971]  ___sys_sendmsg+0x2a5/0x360
[  647.059700][ T6971]  ? __pfx____sys_sendmsg+0x10/0x10
[  647.061866][ T6971]  ? futex_wake+0x4ac/0x580
[  647.063794][ T6971]  ? __fget_files+0x2a/0x420
[  647.065712][ T6971]  ? __fget_files+0x3a0/0x420
[  647.067634][ T6971]  __x64_sys_sendmsg+0x1bd/0x2a0
[  647.069644][ T6971]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  647.071895][ T6971]  ? rcu_is_watching+0x15/0xb0
[  647.073929][ T6971]  do_syscall_64+0x14d/0xf80
[  647.075824][ T6971]  ? trace_irq_disable+0x3b/0x150
[  647.077867][ T6971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.080189][ T6971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.082019][ T6971] RIP: 0033:0x7fa32fb9c799
[  647.083373][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.090889][ T6971] RSP: 002b:00007fa3309ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  647.094285][ T6971] RAX: ffffffffffffffda RBX: 00007fa32fe15fa0 RCX: 00007fa32fb9c799
[  647.097329][ T6971] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004
[  647.100157][ T6971] RBP: 00007fa32fc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  647.102952][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.105986][ T6971] R13: 00007fa32fe16038 R14: 00007fa32fe15fa0 R15: 00007ffd5b130238
[  647.108931][ T6971]  </TASK>
[  647.110830][ T6971] Kernel Offset: disabled
[  647.112490][ T6971] Rebooting in 86400 seconds..
