last executing test programs:

2.33948836s ago: executing program 1 (id=5200):
r0 = socket(0x10, 0x3, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
close(0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8905, &(0x7f0000000100)={'veth1_vlan\x00', 0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="5ec9ec78d9e209151c1dafce94bc245ab5d5df3bfe5abfbaee795cfa2ee4a2c8293cea5d079db7d40cde46a7d7d42d5568c1140d6f7ed4bfdefbcfdbf52fd184156305a1769c002ff664c7549f2a633276c76d9bf103916033b8c797bf9fd66bbca0d9bd241fae1a6521135603b4d94e3a3dbb90d5d1df57f334fe5b174544e15354497ab901b5c7"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040001)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="726177faff00000000000000000000000000000000000000bddd52ea43db86e700000000001e01000000050000008950c1ec67bc33d40564f68afcfd000000000000000000000000004000"/96], 0x58)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x0, 0x5, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x10, 0x6, 0x6}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r8, 0x4)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4000)
syz_emit_ethernet(0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000d6c7e300000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f008400000000110000c01733f3fa7e44eab810fd784a2cceb04ea91c7d3507f8c8a2215fc18a9b15e167244a356a21d39bc3d76bab6725d806972b24e0f82b2dc60200bf3695ad18c4b1eb02af937c6fb4f9641ffd7418e5370884e14b13a5810475c5640be83b26c1eb0b0a8d1dc90a14dce8"], 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', r7, 0x0, 0xa000, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0xfd, 0x2f, 0x0, @multicast1, @rand_addr=0x3, {[@lsrr={0x83, 0x1f, 0x7f, [@private=0xa010102, @rand_addr=0x64010101, @broadcast, @local, @multicast2, @private=0xa010101, @private=0xa010002]}]}}}}})

1.394536207s ago: executing program 1 (id=5217):
unshare(0x2a020480)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000080000000070000009622e6aac2cfdf"], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x30, r0, 0x9f0fc000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000700000008000110965ddc0001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f00000004c0)="4c363184973af0179e02fc4ffe73ac6d2b049ba48105f5486b66cc9c1790ea7936c6d14ec8b0ede2fe3bf29be0652662362f5392b8eb1d0cb0d5ad7c3bf024906b6682f6fdc77ab6a0f5e9a34c9c70bf94e1ccec129d8cc08ee859975c59f091a89766c524a713f24d45903017fe4ead4637108c5945fa2ebbcd4663ab1f4fa8f63eadea33ab2873c0aad6da4ac82e06e9c07967b6fc829d4717ccfe2ac430bec26142e81a5f013872944f1377dad59100b5d6890ae5aafb5699", &(0x7f0000000800)=""/135}, 0x20)
r5 = socket$packet(0x11, 0xa, 0x300)
r6 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3cff00000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300ac141416"], 0x3c}, 0x1, 0x2}, 0x0)
recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
socket(0x2, 0x80805, 0x0)

1.117365132s ago: executing program 0 (id=5220):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x14, 0x401, 0x70bd2b, 0x25dfdbfc, {0x10, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880)
shutdown(r6, 0x1) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffffff, 0x20}, 0xc) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10) (async, rerun: 64)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x18) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) (rerun: 64)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x800)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r12, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0)

986.493769ms ago: executing program 0 (id=5222):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000006b2ce5535aec79314511424efb900000007000000e50a000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000100000001000000166c00"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r9, r10, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1f, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffd7}, {}, {}, [@exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @tail_call, @cb_func, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0xaf, &(0x7f0000000700)=""/175, 0x40f00, 0x6, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xd, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r10, 0xffffffffffffffff, r11], &(0x7f0000000ac0)=[{0x3, 0x5, 0x4, 0x2}, {0x2, 0x1, 0x0, 0xb}, {0x4, 0x3, 0x10, 0xb}, {0x0, 0x2, 0xe, 0xa}, {0x3, 0x1, 0x0, 0xc}, {0x4, 0x1, 0x8, 0x3}], 0x10, 0x6}, 0x94)
r12 = socket(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r16], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

576.058627ms ago: executing program 2 (id=5224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980080001000d09"], 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100006000128009000100766c616e0000000050000280340004800c00010001000000020000000c000100cc090000060000000c00010027060000080000000c00010005000000050000000600010000000000100003800c003900040500008b00000008000500", @ANYRES32=r1], 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)

575.539527ms ago: executing program 0 (id=5225):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x8, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000080)={0x0, 0x1000})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)

407.472521ms ago: executing program 0 (id=5226):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000300)='memory.min\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f0000000080)=0x30000000, 0x12)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000038000380"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc0, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3add}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7232}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="31050000000000000000000005000400018004050680019d7c5cee5bd68095506fbd97234dd3f104080cf024fe9c155a84dbd0035d"], 0x1c}}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @remote, 0x7}, 0x1c)
listen(r10, 0x39c)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r3, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r11 = socket(0x10, 0x3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r12, &(0x7f0000000040), 0x0}, 0x20)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)

407.261259ms ago: executing program 2 (id=5227):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r5], 0x30}}, 0x40000)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0x0, 0xc80c4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c)
sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x2000, 0xab00, 0x6, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1}}}})

396.535038ms ago: executing program 1 (id=5228):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x3, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x2, 0x2, 0xdacc0a1e35267352, 0x9, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88, 0xfffffffffffffffb}], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000002600)}, 0x10)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffd80}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='y', 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x6c84, @local, 0x3}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1}}], 0x2, 0x0)
ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e804db9321ed9a0d3b0d49aa2ac2a3f14")
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000100001002abd7000000000000000ce58f2a3037e03a5f2fe8dec2c0000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016802c0001802800010009000000b33ccef3b17500"/84], 0x6c}}, 0x0)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

207.329111ms ago: executing program 0 (id=5229):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd, 0x9}, {0xf, 0x9}, {0x0, 0xfff2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd, 0x9}, {0xf, 0x9}, {0x0, 0xfff2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x5, 0x0)
write(r4, &(0x7f0000000240)="94", 0x1)
close(r7)
tee(r3, r8, 0x900000000000000, 0x0)
write(r5, 0x0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0x9, 0x78}) (async)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0x9, 0x78})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket(0x1d, 0x2, 0x6)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0) (async)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0)
bind$can_j1939(r9, &(0x7f0000000040)={0x1d, 0x0, 0x7fffffffffffffff}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790008000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
shutdown(r2, 0x0) (async)
shutdown(r2, 0x0)

199.157703ms ago: executing program 2 (id=5230):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

197.762141ms ago: executing program 1 (id=5231):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000002400)={&(0x7f0000000080), 0xc, &(0x7f00000023c0)={&(0x7f0000002380)=@ipv4_deladdr={0x20, 0x15, 0x8, 0x70bd2c, 0x25dfdbfc, {0x2, 0x8, 0xd991559ef0f229b9, 0xfe, r3}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000014)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000380)={{<r5=>0x0, 0x4, 0x898, 0x4, 0x8, 0x3, 0xd, 0xff, 0x40, 0xaf7, 0x4f4, 0x8, 0x0, 0x7ed, 0x7}})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001380)={r4, r5, "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", "db50e5e6e95a4af7d6cb8b8e96513d4aab274feb1efbaa5358c14535caa0ad2857d30ced926df3e8430e60a62006dad5e3a04e9f077c8b618eaf1395fd30ad209db9153f76f9ee9189b7a728cab48b8d852b527415f554d93ba28f4580684817dc09cdea085994659ef1db6e0048b8da8344428fa146a055c324291c8d0edab22128d97d9a16bc3647e1453358b3b6e21327e121aadceb926f45969cd45795933d01803977232e526377c75ea17f8e6859f1af74480ea68350f4744ba0161bd2c14ba59a15e083c14cd0153a4b53c75e13557ac6004faace6b26cd4d009004886fed1cd7421c801f3027d964e06725d5235f06079ee8d7deaf6748f8b901e743e02824a796f4fd6c7239c267d0700c651a3fedb9c95807afa3938093146f7c8c9d1abbb290a802de601683a2f559f7404eca75bbdec789251bd77c612ecb9937caf873e01796d8383058caa20f78aa487cb992d716547407dce9c98ffd0401bd6556fdef60f68b424b0e54a68cd58cc961953f4e76ad248b8fba05ba700e91ed6096f185c8a1ef2f25b4b92f760c4608edacf86038fceaa8c9634be90c8e2ed5175363356dceb7dd795c9f4a894793d074534171f56d9779aad1a25388cba107cfb0b866884f31dc111ce8230e205c9b0a52fd675038d1868c24e061583745427a10f94d48fe04d52543b1feca3b8cf1f011a98baa5764d08f337db9b4ac5e8ed73ccbc75c33bd8f6cba90aa5d3f16e004568552349ff41b72d3bf949e9c73d8826243cdbdb11302ddb1426cefefe2d88397821877e2176e905a696d05b472b04a49e1d9bef8d5edc302066934b0f8e13188d6b43176b92554e4e930f99514869962a07c32614b4ad3687760e13a4face4b5421bea0a4ae40491441e473afde49c6d82d2bc6a966899f06025c14ae4758eaf35f80253037dde394ab65f232de3c203ec6e5a268d745f718b169e981cb30169c8782bc1a8f37f09a220b3d25e70da423e49ca89d2366b863fa39c41a6254c12405aad28a5f4003b397531e8d27ec3e3d0987d0d6e1867d15739140e1a59695c31a42a3391731abcdf85565fcfc9f2704b20aed8a9c84856921e384314b87f87b014d603b70e83e10630c07911d82ca9f09a33b76040eb870d0be765fa872dfd29441c68807e29abfe42fdf37851c69f6ec434f701489669bf4ad42b89950f50517fc296d684550bfbc06a1cf3d809562f6ca92ee32c5f174bb9a106fa2fc5861b6ad43a10efdd53fb8cd05dc7ecc6a067d2c3ede9aafb873339783e7a4baf11296099468fb23f15518ff15a81af6d018f4d8edb8b33d6a9db592e096ca99c54db03c2ce2e695d2900881a9f55820afe59286fb703f302d3b02ff5409bbf051990b4f7ef1562f07040afb12e2f07bc3d9708fb9c57caa9ba6aaf8277f1c02bbb43089468b5387bb2bb63c743e431adcd929f72e2110bd0b90769ccea30431c34e2408d46525499eaaa1beada4be46937ed396307e0c82a6c0414511d141b2a2a1041d2043eec65cbe965422da77597274b7143203da6c1daaac97e89e469636f2a191c99c7917c132373f732b960d2db18adb38026433ee6b559ff81fdf82f8ea8640b9d4956ff1eace95514de7d910953d81be83deea01fc0eb7bb3364a8448b8deb4db5c7a0464f539edebefc49490ebe8596e3452b5467f863fea3cb33743b6c1c44800e018bfdad5ee438f050b3dd00d640e1901d1d58ae1c36a4c3a374c1a4433b99b078446f2f869f224372d87eb4d1e8e57ae52509601fa96a3bdb6f1359a5cfe1a3604f370c9d3b05ab3c3172a9e2f21dc14a907c959fbe3f6e59a7546be601ad5901473d9ba3b2b5b0a865b7dadc9607cbddad98d465c90ff97f7a9919b6108fce10463e136fd239bd8fffac28e4e401da5bebc05fd745c8610d2c9cb75a5d5945762a16000294d52d7daae8fd9f1c56110e70e325cb60beb38e783efeeb16a8ea924441775d2115929a21f29dc1b6bde35dd0d29934e509c0b7bba4e70409c6666999f62bddff405fdeaf30decd6b623f3e4c3afc9647780ff15e510ae7f2ff2895eb006eaa232c2450967af60f0a87460f863797cdbe972548c27a7a54774fef655cd615a3f8a5613da9f1fde311d64968fb8806b36e43ed34957e88493ae4097c4a3df875c7c4510be453fc475e732f1e0df4d9fd23f59f7089e1aed6d5d8b3a3ea98fe3f9516600e4f39db575640ed864c5a2cffad7eb6024170f759cdec26d2e1a893f758b97bbd58fb28d37b9d3a69b6e1263aeefe3c694430256f6047999587920cc40588e34de64683e57b6e06511690a2deb5a916f0bbcee1d1f431afbfa92291c3701f05470d5bc53f69133b81529596892e72d8353b261fbe15a584301c6726cc0f6c53433c62c92917e4228414369e046c45d686c150c29869e479f070837a6fc1ed852da2d93c32ea5723170130a066b9f2bf1d4b2cbbafe3afe737fa44dcf91b967045edfffc38d85629e1615b9dd0e75d4db5c937ed4b98e9769fb84f16e5726a9d364354042f2c701f5dd432a1f7198307d537507040c76c84ab1bab53ce361456535d9ac7efc865e5d0fc88a524d458c9d4dff37d06f116c931e57bd0cc11f0f19e80f642e04f38d14bdc51c83d618484ead0b290e8b52efd7990c37e51309a2a7debee13277d31922a022d31cb0373e28a92423c9592d47f5d8eb244659466417ca8969b87d9b01f4d488d885ad3799e7fd02711d5bf272371cf75f578c2ec02c7e1541b03cfe00160006c4e7c9470798fdff3bd16725d6a5caa244922e999c3717fceefdefe7ae2fad3965edb2e756bfd5ca1c442ebd4f97768789dc18c5c9cd11fe8fe726dc6fdc81a9389c202dc5e2beac50405ff4ebfc3e78d298d11373bece6980548add827b2caa4e56e5d725beb975e3bf71e5515fa6e42dcc5234de3ae403d5f7ac81d6c1ae2a37902555b6d18ddc7ef3f3fa7db32b7123c9dca459663d6cdd69edd3a8fc4b9fc3f4f100f35870d194f7dd448b51b89d4d79001c290794edcf9ef6bd43d0b7e7ac0a256d01aa45f9ac4e8f030e57cc2f05cc6d1638231c47da982e6805acba7bbb1e1d44a6882edaff05973f09300f5ec84e1145f26e77b08fa8d62f980da52f5b0e4670f5546f816c38b4b698599020d30540577be5fc663d9388478be70ed4cf2fecbf08a7f406190d410ae2a8c1d7569cefa23bc695911e13d6617665c0d0f01cc445491d8073f970417f2070a2f315f892e661f8a8eb3ee1bea21d2d3fa759185d2f7cdfd3da9306f2d27c898464514a74bd2a00ec4c381264e417c172b0eb996c7d26b3edb0bed331aaf55566fbfac84a8d5a15b18da00c78559993c8e44f323fb180b5fabb4097f8853ca4813d0d1a1b9ad3578eb01387bfde3a6895e2bcbf1230997d7d9bf1dc14bf07f58b6c238f6b6ad33683f178a8d5ee601e2056815312f9b48622531749aa9afb240378887c3d2c5d8f98930903f92553c6f52ce19f665993a079a0be1afbc606321add156f17e817d41351b3e30ccdd8387b633c833d7e802509202f97c0d03c63d3321b297551d7d3315dbf97a943feb7319a5c03d3888a39c906af7a064898925c20277c4b8472c733c123366f4296217767dbdf40997e5ff8e4bda5079447e7cf843987b2f96793dcc2d883eda0022ac2e9510332cb7d00cb099167cfb37b8d49fc8c035e364a38b17c97e5b0a18676fe9e971af50f6f19c101cdff016451d70c9b7d2045b26f4e1f7a10cb747a01694fcf93f3f140598ccd7170846c103de04dc2af0ff3f06a7e8052929d5deb80b51fc2fd49e5223b601302e56ba252a28b8f44205ef86b60f2f2ffbd051d529646c3c66d797d3085ce602c8ae64884770b6442a5e2bb8f61278d483fb4d83f97be1ac6e73adc18935ccdbfa043e71a25a4688130aa9a75a19c6ce4b85dffc67cf7de8e51386d1cda06ad316357d6b2730e15fae96d48c6f602e958af86a99e563ec1b72e6dec40d8e1499ffad8ec079b26414a6d1b37bb7e7bc5367745ed927c56bc9fb32646bba15b9af6d01a8ed049c401198541a66e921392e91c68c845183c5d3a185149a753cbababedd964d112296a149629005608180400e38ca21f91917e65b4da50c1924329b281039ef10485cda01a08b01c4146d90584d46984d2b090385c1b8c1aa4572e3f26c4485240e6b11a8a47d63f37edeeb30f5ec03be56b6fde76600f79205bad3397b68a5af61884d1e188145088137f73b34ac482ed0cee2101b812550ddec37f255374e034222a3d5653a5b04f174e45687532473846fbead543a44ffbc4f0832e62f8fbea806f670b8f65cbac7299b7355c7c2a79683bf7994fc7dc6670a2a873aa4db0d1711bd62745560414ec32fc8306a6c540168a7eceaa9ab7e0889bf5cd38152af65089d7c829771e8ed3b8598d7a5d8c887b5f5e1c59c931a75b19416422b161d8755c85b663d5bb6f868dcfe25c1bfbf2899145f4d7c37eb600fcc1a6ea21e9066116b8ec66d3b7556f0601366fa4a01cc76e1fa34cd32d1c0d4f6b6d5388e5111cac1d3bba52d75256d4c624d665cfc93f84483580574658f9eebcb310c21213f206edffbc137fc73fd6beff0b308bc445e718c4d2c96ddd5585eff8205b02623acf9d30f5a97cd38d31551d823ef49554e427863b75e111621a33b00ac7d4d2c88a1c48cdae0541eec3ad894cb58f42ae46dce088c0ea9a0c9f249d7de1f336deabe1d954df2803f4b8e15d4be9e46eeb370311045ee960e2abd2406a20cb6aa897bb2969203b544c6c5353cdfe9221d5dfdb10364652243c041bb0642cd19b9e7548cc641fc03391b3c9c80dc1089f992d8bf2a3a4ae9cb82687a7ce64b62234d4fe612b9241f97b367407947d9e40c300cadf33217512ef66d61cc43fee651ee0f36049ba6540aef66cd33599a0226f56c56e8562a5a2fe01c1a089a877f933531b7235d75f5e5cfad148552f54a49157bac7507da6c2f0f257c19dfc341091e6012074ef0ab3b75b09c461a42db3f3722bb9bc0f4dd402cc571a65d57fdb476e6f6f5d7badceff1629917146ac3f42a7017d5747cf60ef225a6413a6aca7c67f2765f4d948fd1980536e61ffce0025ffac99ecaaec07c773de35d12b1d0699298e56b6b4ad01ae27144772b1591165926cfeceb91cff44d09bb64bc8e812913cea6a7501f2c5bdf339782d8fa63ad6960f9893418630d53a267415bd9379bb7054d148a7b99acfb5a98d4e94a5ccacb3a2a9fbe373ca957004ac1dbe73efc99bc9f35751b048cb49f3507951c869c47cfc4c297a62c15af05a8e849671157ef50d294440d22c2fcde31ebc849a008b7948f336b48d605b1ea0bc6a3f36b6bb4a44209b07d316c9f229c6653e19fc7eb1894ef4a20b1703"})

193.224035ms ago: executing program 2 (id=5232):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'batadv_slave_1\x00', @random="01320136b1ff"}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'batadv_slave_1\x00', @random="01320136b1ff"})

137.387985ms ago: executing program 1 (id=5233):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe000000006910bd000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

63.69938ms ago: executing program 2 (id=5234):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4)
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x55}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x0)

62.469888ms ago: executing program 1 (id=5235):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
r2 = epoll_create1(0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000780)="e0564d0b2175aab35d1b1b158490f6c97c080ff176d14deb98161336649f74520d1e83bab6911258a16001422cd756a46e2812e45db16f67e44bf98ba5db89f564ec2e982a1727990371b9b03e1a918712f9d5f62a40db504186a1c6d070d9cb3f7216717d", 0x65}, {&(0x7f0000000800)="ec7293a57d3d6fd0e4d37b47e5d1a6f70b65aa5b0797ade1cfc6fac0e16a47f368830d570dd178f5a1987da9baa4b18a12ee80c48cb5d0576afa72fc107c817cda596967d8fa3f42febc8d5d55f2517388e9ed3614005c", 0x57}, {&(0x7f0000000a00)="5d2be6284db8ae10f38d67e9c326fcce1dddfcb5f70d32ac7ee76c39efd7c56601bff8190f1aaf20ad552b1fa1b646cd946a2e6c631b39ed3fb037f45c3df620f70c3af5ad4bab55eb9eae8a8baedfeacbe7ef804447b782aa5db549a8fe0b2fae5ae8b04a280b336e5c0cd47ea61d5a72a21a6d258333ae1eef67d58d8b2e2df1db44dbd195ebe2836cf7b707d59ecec689e579b63b5e2c68110c91ede1a8d0ad669745c05dcc457f5a702cc1710363df419ce1100d8818", 0xb8}], 0x3, &(0x7f0000000200)=[@cred={{0x1c}}], 0x20, 0x41}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000340)="fce1d5f4231fa5eab7b87a9829b198f0777bfd4fca3eb411706ee4543a34d67da41dd8122bcaceab72c250e2af8497a3cc64df69be5c530b0e3d23c421", 0x3d}, {&(0x7f0000000b40)="caf77cacb8f5d4c37cb386f6eb46baa9e1a5ae1c5d1eb1222cc3b1f222022d4fdd91baaad1e7eaaa0b8af85461bbed3b9a0ce12997d7c91781f1eea5898269f3202bb4772c677be351760762aaa0f5aeb729bbededf7f62d3cb72c1b70dc747afd941adf6c43448fa61c40cac81ce72becd9e7fe902d13567a42eca2025a6ae9b7c22337e4315974df7be3fae57fcf8f871d96d2af3ab16d895b58e5979765dbe16a484d36ecd64a47b73df9a85e6a31bbadddecfa47dbb44e1e8820c39211f2d35b096279608896dd904b091cc58c10536d5e6fa07b0b177e5d35b708f9966c", 0xe0}, {&(0x7f0000000c40)="cff5c24a1abbcb757b011b039c7864fe425a1f3351b8cacf225ba4263020761f841b486f428cd2cad995784ee352c707f92e35d02d2ce38b80362d4476373ffaa06dd1a69b0f63d8b14e257ee6ad0877e2f78995fb9e98f1e21787b7bc59770897", 0x61}, {&(0x7f0000000480)="7595685d28956048cff4", 0xa}, {&(0x7f0000000cc0)="8646169c90a7a1260361e7c242215828510931e36decee2078add2957209ce0f8cb7ef997a44cacb5676fcd2f7d3c86842d8e59600d8f7364b01669a9812aad4810c3d8ce23b88b8798b9c29012a3703f7336d608c79c22e7323c593cdbdae241eccd8b8cdb4aff5007efd39f7449257a335a5081c602a190da43ae29f39f24f23d72dcd15380177cb8ec9efef950a4080ae0324448c9e28aebcc91c560886e7c0f31076b2d8eadf8146a7194e4d36ac1b9db3a09bbefbd92054a28b0f42142fcb2a8538bc2515c42533b64ac528", 0xce}, {&(0x7f0000000dc0)="d42087e6a67cb532ce1dbcf1348ec5de22e21609f3b712e5", 0x18}], 0x6, &(0x7f0000000e80), 0x0, 0x800}}], 0x2, 0x8000)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async)
epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0xc9) (async)
ioctl$int_in(r1, 0x5452, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 64)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64)
ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x400007fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0)
write(r6, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
recvmsg(r9, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000880)=""/259, 0x103}], 0x1}, 0x3f00)

1.157723ms ago: executing program 0 (id=5236):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x63}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

0s ago: executing program 2 (id=5237):
r0 = socket(0x2, 0x80805, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x228, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff34}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a50b8e30ceb994cc9f553091985371744c92ab4a"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x1}, 0x400d0)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="70040000", @ANYRES16=r7, @ANYBLOB="00022abd7000fbdbdf25110000005c0002802c000380080001000000000008000100010100000800020068ab000008000100ff010000080001000400000004000400080002001f2affff0800020006000000040004000800020004000000040004000800020009000000"], 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x8004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r8, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21635aec8f3c117d}, 0xffffff78, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c439fd1c398ddc68ccd06c503c25049c7bb032cd80e6f0bb48a2e11626daa0718ca9c2f6bf4d5fd9449b2bb0008e4de7f3a132cfa762c9604d3da62bf82fac0bccd60e37e79a391ba0b86f33648e56e3d24cf07a26a0a2db1146dfb040b442cea0553cae592f6fe750e670eef14ffffffffffffffff85f18d9f", @ANYRES16=r5, @ANYBLOB="00022bbd7000fedbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000800000060011000400000008001300ff7f000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b007900000006001100ff03000008001300000004000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b0035000000060011000200000008001300020000000500140000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x20001040)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
socket$phonet_pipe(0x23, 0x5, 0x2)

kernel console output (not intermixed with test programs):

56484kB managed:830956kB mlocked:48kB bounce:0kB free_pcp:34996kB local_pcp:16540kB free_cma:0kB
[  362.882528][T19890] lowmem_reserve[]: 0 0 0 0 0
[  362.884131][T19890] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  362.894197][T19890] lowmem_reserve[]: 0 0 854 854 854
[  362.895272][T19905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3831'.
[  362.896050][T19890] Node 1 Normal free:144024kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45092kB inactive_anon:0kB active_file:1668kB inactive_file:97088kB unevictable:3536kB writepending:244kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48332kB local_pcp:20296kB free_cma:0kB
[  362.896081][T19890] lowmem_reserve[]: 0 0 0 0 0
[  362.896099][T19890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  362.916027][T19890] Node 0 DMA32: 789*4kB (UME) 171*8kB (UME) 134*16kB (UME) 469*32kB (UME) 97*64kB (UME) 19*128kB (UME) 9*256kB (UM) 1*512kB (U) 2*1024kB (ME) 6*2048kB (UME) 53*4096kB (UM) = 264556kB
[  362.922799][T19890] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  362.929047][T19890] Node 1 Normal: 908*4kB (U) 23*8kB (UME) 3*16kB (UM) 278*32kB (UME) 85*64kB (UME) 23*128kB (ME) 8*256kB (M) 6*512kB (UM) 1*1024kB (U) 1*2048kB (M) 28*4096kB (UM) = 144024kB
[  362.935621][T19890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.945705][T19890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  362.948929][T19890] 42445 total pagecache pages
[  362.950399][T19890] 0 pages in swap cache
[  362.951736][T19890] Free swap  = 124996kB
[  362.952995][T19890] Total swap = 124996kB
[  362.954261][T19890] 786301 pages RAM
[  362.955408][T19890] 0 pages HighMem/MovableOnly
[  362.957248][T19890] 241330 pages reserved
[  362.958702][T19890] 0 pages cma reserved
[  363.015597][T19905] bridge0: entered promiscuous mode
[  363.092815][T19916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3833'.
[  363.101213][T19915] netlink: 'syz.0.3832': attribute type 10 has an invalid length.
[  363.133498][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3834'.
[  363.150071][T19918] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3834'.
[  363.215056][T19925] netlink: 'syz.0.3837': attribute type 1 has an invalid length.
[  363.216822][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  363.225794][T19921] openvswitch: netlink: Actions may not be safe on all matching packets
[  363.248743][T19925] bond89: (slave vxcan3): The slave device specified does not support setting the MAC address
[  363.253018][T19925] bond89: (slave vxcan3): Error -95 calling set_mac_address
[  363.264391][T19928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.267445][T19928] syzkaller0: entered promiscuous mode
[  363.269282][T19928] syzkaller0: entered allmulticast mode
[  363.345091][T19933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3839'.
[  363.354308][T19935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3838'.
[  363.374154][T19935] macsec2: entered promiscuous mode
[  363.376156][T19935] team0: entered promiscuous mode
[  363.592273][T19949] macvtap0: entered allmulticast mode
[  363.595244][T19949] batadv0: entered allmulticast mode
[  363.599959][T19949] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  363.605878][T19949] batadv0: left allmulticast mode
[  363.694684][T19952] netlink: 'syz.0.3843': attribute type 16 has an invalid length.
[  363.712084][T19956] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3846'.
[  363.715579][T19956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3846'.
[  363.716578][T19952] netlink: 'syz.0.3843': attribute type 17 has an invalid length.
[  363.738530][T19952] tipc: Resetting bearer <eth:syzkaller0>
[  363.832112][T19956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.846906][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.051305][T19976] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  364.256817][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  364.327349][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.580582][T20001] ip6tnl9: entered promiscuous mode
[  364.582610][T20001] ip6tnl9: entered allmulticast mode
[  364.586103][T20001] team0: Device ip6tnl9 is up. Set it down before adding it as a team port
[  364.602358][T20003] netlink: 'syz.1.3862': attribute type 1 has an invalid length.
[  364.794482][T20016] netlink: 'syz.0.3865': attribute type 1 has an invalid length.
[  364.847001][T20017] IPv6: Can't replace route, no match found
[  364.890525][T20016] 8021q: adding VLAN 0 to HW filter on device bond90
[  364.934775][T20024] netlink: 'syz.0.3867': attribute type 1 has an invalid length.
[  364.961790][T20024] 8021q: adding VLAN 0 to HW filter on device bond91
[  364.990288][T20024] ipvlan0: entered allmulticast mode
[  364.992599][T20024] bond91: entered allmulticast mode
[  365.042677][T20027] netlink: 'syz.2.3868': attribute type 21 has an invalid length.
[  365.296871][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  365.361478][T20041] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) !
[  365.541399][T20049] netlink: 'syz.0.3873': attribute type 1 has an invalid length.
[  365.568211][T20049] 8021q: adding VLAN 0 to HW filter on device bond92
[  365.591028][T20050] 8021q: adding VLAN 0 to HW filter on device bond92
[  365.594063][T20050] bond92: (slave vcan1): The slave device specified does not support setting the MAC address
[  365.599743][T20050] bond92: (slave vcan1): Error -95 calling set_mac_address
[  365.614740][T20049] bond92: (slave vcan1): The slave device specified does not support setting the MAC address
[  365.621227][T20049] bond92: (slave vcan1): Error -95 calling set_mac_address
[  365.734178][T20055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.738821][T20055] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  365.742311][T20055] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  366.184601][T20081] can: request_module (can-proto-4) failed.
[  366.256388][T20086] dvmrp0: entered allmulticast mode
[  366.336833][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  366.565363][T20092] netlink: 'syz.1.3885': attribute type 1 has an invalid length.
[  366.579080][T20092] netlink: 'syz.1.3885': attribute type 1 has an invalid length.
[  366.614240][T20097] netlink: 'syz.1.3885': attribute type 1 has an invalid length.
[  366.650916][T20097] netlink: 'syz.1.3885': attribute type 1 has an invalid length.
[  367.161701][T20119] 8021q: VLANs not supported on nlmon0
[  367.196059][T20127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.376849][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  367.458321][T20142] bridge0: port 1(vlan4) entered blocking state
[  367.460830][T20142] bridge0: port 1(vlan4) entered disabled state
[  367.471492][T20142] vlan4: entered allmulticast mode
[  367.476013][T20142] vlan4: left allmulticast mode
[  367.889854][T20149] __nla_validate_parse: 18 callbacks suppressed
[  367.889872][T20149] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3900'.
[  367.976145][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'.
[  368.016656][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.080334][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'.
[  368.083998][T20172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3907'.
[  368.212811][T20180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.310686][T20183] netlink: 'syz.1.3911': attribute type 58 has an invalid length.
[  368.313650][T20183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3911'.
[  368.416796][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  369.157835][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3916'.
[  369.161259][T20203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3916'.
[  369.164681][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3916'.
[  369.168586][T20203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3916'.
[  369.220687][T20202] 0{X: refused to change device tx_queue_len
[  369.224845][T20202] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  369.429394][T20210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.455519][T20210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.458964][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  369.616051][T20213] 8021q: adding VLAN 0 to HW filter on device bond93
[  369.632009][T20213] bond0: (slave bond93): Enslaving as an active interface with a down link
[  369.764190][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'.
[  369.803696][T20235] validate_nla: 1 callbacks suppressed
[  369.803708][T20235] netlink: 'syz.0.3926': attribute type 2 has an invalid length.
[  369.873812][T20237] netlink: 'syz.1.3927': attribute type 12 has an invalid length.
[  369.994322][T20245] bridge60: entered promiscuous mode
[  369.996700][T20245] bridge60: entered allmulticast mode
[  370.135106][T20260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.240278][T20269] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  370.381791][T20276] netlink: 'syz.1.3939': attribute type 3 has an invalid length.
[  370.392443][T20276] dvmrp0: left allmulticast mode
[  370.394106][T20276] pimreg: left allmulticast mode
[  370.451782][T20276] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  370.463179][T20276] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  370.496732][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  370.591636][T20282] team0 (unregistering): left promiscuous mode
[  370.710296][T20290] unknown channel width for channel at 909000KHz?
[  370.822932][T20296] netlink: 'syz.0.3945': attribute type 1 has an invalid length.
[  370.879131][T20296] 8021q: adding VLAN 0 to HW filter on device bond94
[  370.965726][T20301] gretap0: entered promiscuous mode
[  371.112100][T20320] macvlan5: entered promiscuous mode
[  371.113817][T20320] macvlan5: entered allmulticast mode
[  371.116165][T20320] bond86: (slave macvlan5): Opening slave failed
[  371.168011][T20323] macvlan0: entered promiscuous mode
[  371.171217][T20323] bond0: entered promiscuous mode
[  371.383438][T20335] netlink: 'syz.2.3955': attribute type 1 has an invalid length.
[  371.536868][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  372.155003][T20365] syzkaller1: entered promiscuous mode
[  372.160114][T20365] syzkaller1: entered allmulticast mode
[  372.173417][T20365] netlink: 'syz.1.3963': attribute type 1 has an invalid length.
[  372.253583][T20376] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20002
[  372.316343][T20376] netlink: 'syz.0.3965': attribute type 7 has an invalid length.
[  372.576783][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  372.955233][T20398] __nla_validate_parse: 16 callbacks suppressed
[  372.955252][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3972'.
[  372.985174][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3972'.
[  373.081015][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3974'.
[  373.160683][T20415] netlink: 'syz.0.3975': attribute type 1 has an invalid length.
[  373.190011][T20415] 8021q: adding VLAN 0 to HW filter on device bond95
[  373.235731][T20415] 8021q: adding VLAN 0 to HW filter on device bond95
[  373.240888][T20415] bond95: (slave vxcan1): The slave device specified does not support setting the MAC address
[  373.252500][T20415] bond95: (slave vxcan1): Error -95 calling set_mac_address
[  373.284618][T20425] bond95: (slave bridge62): Enslaving as an active interface with a down link
[  373.495742][T20430] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.3980'.
[  373.503806][T20430] IPv6: sit6: Disabled Multicast RS
[  373.616715][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  373.741848][T20436] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3983'.
[  373.810609][T20451] netlink: 'syz.1.3984': attribute type 1 has an invalid length.
[  373.872028][T20455] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3986'.
[  373.905991][T20460] bond0: (slave bond93): Releasing active interface
[  373.914019][T20460] bond95: (slave bridge62): Releasing active interface
[  374.190008][T20466] netlink: 'syz.1.3989': attribute type 1 has an invalid length.
[  374.272838][T20470] bond88: (slave bridge62): making interface the new active one
[  374.289741][T20470] bond88: (slave bridge62): Enslaving as an active interface with an up link
[  374.305607][T20469] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  374.309285][T20469] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  374.369276][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'.
[  374.427800][T20475] 8021q: adding VLAN 0 to HW filter on device bond90
[  374.533605][T20485] veth49: entered promiscuous mode
[  374.539968][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'.
[  374.583436][T20490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3997'.
[  374.614534][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'.
[  374.656736][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  374.711876][T20493] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  374.714752][T20493] tipc: Resetting bearer <eth:syzkaller0>
[  374.717331][T20493] syzkaller0: left promiscuous mode
[  374.719378][T20493] syzkaller0: left allmulticast mode
[  374.724209][T20493] bridge40: left allmulticast mode
[  374.740006][T20493] bridge41: left allmulticast mode
[  374.742492][T20493] bond78: left promiscuous mode
[  374.747180][T20493] bond79: left promiscuous mode
[  374.755234][T20493] bond79: left allmulticast mode
[  374.758198][T20493] veth45: left promiscuous mode
[  374.760910][T20493] bridge43: left allmulticast mode
[  374.763239][T20493] vlan0: left promiscuous mode
[  374.766308][T20493] 0{X: left promiscuous mode
[  374.774944][T20493] bridge44: left allmulticast mode
[  374.777461][T20493] bridge45: left allmulticast mode
[  374.779820][T20493] bridge46: left allmulticast mode
[  374.804112][T20493] veth47: left promiscuous mode
[  374.822961][T20507] validate_nla: 4 callbacks suppressed
[  374.822986][T20507] netlink: 'syz.1.3999': attribute type 10 has an invalid length.
[  374.829371][T20493] vxcan1: left allmulticast mode
[  374.835374][T20493] bridge0: left promiscuous mode
[  374.860606][T20493] bond0: left promiscuous mode
[  374.869275][T20493] macvlan0: left promiscuous mode
[  374.882546][T20493] veth49: left promiscuous mode
[  374.939767][T20509] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  375.005800][T20514] netlink: 'syz.2.4002': attribute type 13 has an invalid length.
[  375.144357][T20517] netlink: 'syz.0.4003': attribute type 9 has an invalid length.
[  375.209761][T20522] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  375.293489][T20526] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  375.696731][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.723131][T20552] netlink: 'syz.2.4012': attribute type 1 has an invalid length.
[  375.828540][T20552] veth51: entered promiscuous mode
[  375.858394][T20561] erspan0: entered allmulticast mode
[  375.950777][T20573] netlink: 'syz.0.4015': attribute type 10 has an invalid length.
[  376.047598][T20579] netlink: 'syz.2.4017': attribute type 12 has an invalid length.
[  376.591701][T20605] bridge0: entered allmulticast mode
[  376.736684][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  376.872193][T20628] netlink: 'syz.0.4031': attribute type 9 has an invalid length.
[  376.960406][T20633] 8021q: adding VLAN 0 to HW filter on device bond97
[  377.046039][T20644] syzkaller0: entered promiscuous mode
[  377.048443][T20644] syzkaller0: entered allmulticast mode
[  377.776924][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  377.928058][T20672] gretap0: entered promiscuous mode
[  377.931669][T20672] gretap0: left promiscuous mode
[  378.098671][T20681] __nla_validate_parse: 15 callbacks suppressed
[  378.098690][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4047'.
[  378.126192][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'.
[  378.272502][T20683] netlink: 'syz.0.4048': attribute type 8 has an invalid length.
[  378.310304][T20687] netlink: 'syz.0.4049': attribute type 4 has an invalid length.
[  378.541517][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'.
[  378.614378][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4054'.
[  378.618750][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4054'.
[  378.622357][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4054'.
[  378.740420][T20717] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4057'.
[  378.826812][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  378.973507][T20731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  379.020565][T20733] netlink: 'syz.0.4061': attribute type 2 has an invalid length.
[  379.031309][T20733] : entered promiscuous mode
[  379.423613][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4063'.
[  379.432017][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'.
[  379.588951][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'.
[  379.605683][T20749] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  379.853813][T20771] pim6reg1: entered promiscuous mode
[  379.855624][T20771] pim6reg1: entered allmulticast mode
[  379.857685][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  379.951197][T20767] validate_nla: 1 callbacks suppressed
[  379.951213][T20767] netlink: 'syz.0.4067': attribute type 10 has an invalid length.
[  379.969742][T20777] dvmrp1: tun_chr_ioctl cmd 1074025677
[  379.971815][T20777] dvmrp1: linktype set to 773
[  380.016289][T20758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.024269][T20758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  380.075606][T20784] bond90: entered promiscuous mode
[  380.077901][T20784] 8021q: adding VLAN 0 to HW filter on device bond90
[  380.184577][T20784] bond90 (unregistering): Released all slaves
[  380.211146][T20787] bridge49: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  380.350653][T20798] bridge50: the hash_elasticity option has been deprecated and is always 16
[  380.354076][T20798] bridge50: entered allmulticast mode
[  380.631825][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.897069][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  380.996138][T20822] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.999876][T20822] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  381.401046][T20832] netlink: 'syz.1.4088': attribute type 1 has an invalid length.
[  381.454667][T20836] syzkaller0: Caught tx_queue_len zero misconfig
[  381.553150][T20841] netlink: 'syz.2.4091': attribute type 1 has an invalid length.
[  381.619778][T20841] 8021q: adding VLAN 0 to HW filter on device bond91
[  381.697920][T20849] ip6_vti0: Caught tx_queue_len zero misconfig
[  381.753767][T20851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  381.908305][T20862] ip6gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue
[  381.936967][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  382.155984][T20886] netlink: 'syz.0.4103': attribute type 83 has an invalid length.
[  382.245940][T20887] netlink: 'syz.1.4104': attribute type 1 has an invalid length.
[  382.293121][T20887] bond91: (slave bridge63): making interface the new active one
[  382.297178][T20887] bond91: (slave bridge63): Enslaving as an active interface with an up link
[  382.375363][T20903] netlink: 'syz.1.4107': attribute type 1 has an invalid length.
[  382.379021][T20903] netlink: 'syz.1.4107': attribute type 1 has an invalid length.
[  382.620711][T20923] netlink: 'syz.2.4112': attribute type 1 has an invalid length.
[  382.620728][T20922] netlink: 'syz.2.4112': attribute type 1 has an invalid length.
[  382.673547][T20929] netlink: 'syz.1.4114': attribute type 1 has an invalid length.
[  382.688477][T20923] 8021q: adding VLAN 0 to HW filter on device bond92
[  382.828397][T20943] macsec0: entered allmulticast mode
[  382.831175][T20943] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  382.836101][T20943] macsec0: left allmulticast mode
[  382.846594][T20943] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  382.976796][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  383.106986][T20971] __nla_validate_parse: 26 callbacks suppressed
[  383.106999][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4127'.
[  383.123781][T20971] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  383.176775][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'.
[  383.213708][T20980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4130'.
[  383.263476][T20983] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4132'.
[  383.353809][T20989] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  383.373770][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'.
[  383.486257][T21005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4139'.
[  383.518795][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'.
[  383.524874][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4141'.
[  383.531333][T21009] bond0: entered promiscuous mode
[  383.533564][T21009] bond0: entered allmulticast mode
[  383.615837][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4143'.
[  383.634037][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  383.727086][T21022] 8021q: adding VLAN 0 to HW filter on device bond98
[  383.836146][T21030] geneve9: entered promiscuous mode
[  383.838617][T21030] geneve9: entered allmulticast mode
[  383.851579][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  383.855794][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  384.017319][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  384.799107][T21070] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  384.989286][T21074] bond0 (unregistering): Released all slaves
[  385.056869][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  385.296323][T21087] validate_nla: 5 callbacks suppressed
[  385.296335][T21087] netlink: 'syz.2.4165': attribute type 4 has an invalid length.
[  385.345070][T21089] syzkaller1: entered allmulticast mode
[  385.352980][T21089] syzkaller1: left allmulticast mode
[  385.451252][T21028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  385.512420][T21028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  385.552043][T21092] delete_channel: no stack
[  385.555976][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  385.576363][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  385.610438][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  385.619481][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  385.648572][T21098] netlink: 'syz.0.4170': attribute type 21 has an invalid length.
[  385.899589][T21120] vlan4: entered allmulticast mode
[  385.901834][T21120] veth1: entered allmulticast mode
[  386.096863][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  386.155911][T21140] netlink: 'syz.0.4181': attribute type 1 has an invalid length.
[  386.199471][T21140] 8021q: adding VLAN 0 to HW filter on device bond99
[  386.228177][T21140] 8021q: adding VLAN 0 to HW filter on device bond99
[  386.231722][T21140] bond99: (slave vxcan3): The slave device specified does not support setting the MAC address
[  386.236116][T21140] bond99: (slave vxcan3): Error -95 calling set_mac_address
[  386.253148][T21146] bond99: (slave vxcan3): The slave device specified does not support setting the MAC address
[  386.257459][T21146] bond99: (slave vxcan3): Error -95 calling set_mac_address
[  386.278116][T21151] veth39: entered promiscuous mode
[  386.294016][T21150] netlink: 'syz.2.4184': attribute type 10 has an invalid length.
[  386.455842][T21165] netlink: 'syz.1.4188': attribute type 30 has an invalid length.
[  386.716043][T21180] netlink: 'syz.1.4193': attribute type 2 has an invalid length.
[  386.982095][T21197] netlink: 'syz.0.4198': attribute type 10 has an invalid length.
[  387.084071][T21199] veth0: entered promiscuous mode
[  387.097844][T21198] veth0: left promiscuous mode
[  387.136924][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  387.352983][T21211] netlink: 'syz.2.4203': attribute type 1 has an invalid length.
[  387.661611][T21231] macsec1: entered promiscuous mode
[  387.663478][T21231] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  387.665976][T21231] macsec1: entered allmulticast mode
[  387.670082][T21231] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  387.673300][T21232] netlink: 'syz.2.4207': attribute type 13 has an invalid length.
[  387.683441][T21232] netlink: 'syz.2.4207': attribute type 17 has an invalid length.
[  387.715234][T21232] erspan0: left allmulticast mode
[  387.792707][T21232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.807038][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.859662][T21246] 8021q: adding VLAN 0 to HW filter on device bond93
[  388.144663][T21261] __nla_validate_parse: 24 callbacks suppressed
[  388.144681][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[  388.176939][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  388.287138][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4220'.
[  388.300209][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4220'.
[  388.440742][T21273] 8021q: adding VLAN 0 to HW filter on device bond100
[  388.489260][T21267] macvlan0: entered promiscuous mode
[  388.493030][T21267] macvlan0: entered allmulticast mode
[  388.501387][T21267] bond0: (slave macvlan0): Opening slave failed
[  388.529617][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4222'.
[  388.623069][T21277] ipvlan0: entered allmulticast mode
[  388.630137][T21277] bond100: entered allmulticast mode
[  388.711990][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.715142][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.816783][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.824143][T21298] syzkaller1: entered promiscuous mode
[  388.827473][T21298] syzkaller1: entered allmulticast mode
[  388.944042][T21314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4231'.
[  388.971365][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'.
[  389.002287][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4232'.
[  389.005248][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4231'.
[  389.088986][T21327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4235'.
[  389.138726][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.228256][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  389.249546][T21338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.255292][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4239'.
[  389.400758][T21332] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  389.776737][T21362] 8021q: adding VLAN 0 to HW filter on device bond93
[  389.824440][T21365] 8021q: adding VLAN 0 to HW filter on device bond94
[  389.854312][T21365] 8021q: adding VLAN 0 to HW filter on device bond94
[  389.858616][T21365] bond94: (slave vxcan5): The slave device specified does not support setting the MAC address
[  389.864055][T21365] bond94: (slave vxcan5): Error -95 calling set_mac_address
[  389.905676][T21370] bond94: (slave bridge51): Enslaving as an active interface with a down link
[  389.955496][T21373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.178398][T21383] batadv0: entered promiscuous mode
[  390.256997][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  390.355222][T21398] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.413133][T21399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  391.173971][T21420] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  391.252863][T21423] erspan0: entered promiscuous mode
[  391.255159][T21423] erspan0: left allmulticast mode
[  391.280888][T21423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.304154][T21420] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  391.308201][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  391.362314][T21420] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  391.471928][T21420] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  391.698786][T21447] validate_nla: 10 callbacks suppressed
[  391.698800][T21447] netlink: 'syz.1.4272': attribute type 2 has an invalid length.
[  391.708928][T21448] gretap0: left promiscuous mode
[  391.733363][T21448] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  391.754246][ T7157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  391.768906][ T5866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  391.787588][ T5852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  391.790887][ T5852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  391.799275][T21452] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.859616][T21454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.923636][T21467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.957084][T21466] bond94: (slave bridge51): Releasing active interface
[  391.979366][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.021820][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.063102][T21466] tap0: tun_chr_ioctl cmd 1074025677
[  392.065532][T21466] tap0: linktype set to 270
[  392.096794][T21466] netlink: 'syz.2.4277': attribute type 10 has an invalid length.
[  392.110434][T21466] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.114326][T21466] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.177444][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.212220][T21482] netlink: 'syz.1.4282': attribute type 4 has an invalid length.
[  392.337304][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  392.340953][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.656853][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.897552][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.934754][T21500] syzkaller1: entered promiscuous mode
[  392.937723][T21500] syzkaller1: entered allmulticast mode
[  393.039752][T21509] netlink: 'syz.2.4291': attribute type 1 has an invalid length.
[  393.066124][T21509] 8021q: adding VLAN 0 to HW filter on device bond95
[  393.080903][T21509] veth51: entered promiscuous mode
[  393.086121][T21509] bond95: (slave veth51): Enslaving as an active interface with a down link
[  393.167943][T21517] vlan1: entered promiscuous mode
[  393.169895][T21517] bridge0: entered promiscuous mode
[  393.179152][T21519] __nla_validate_parse: 81 callbacks suppressed
[  393.179165][T21519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4293'.
[  393.186126][T21519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4293'.
[  393.207767][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4295'.
[  393.276209][T21525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4296'.
[  393.377301][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  393.465633][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'.
[  393.466425][T21534] veth1_to_team: left promiscuous mode
[  393.473979][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'.
[  393.477490][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'.
[  393.481646][T21542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4300'.
[  393.485444][T21534] veth1_to_team: left allmulticast mode
[  393.489343][T21534] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  393.492202][T21534] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  393.503954][T21534] bond0: left allmulticast mode
[  393.514822][T21534] veth23: left promiscuous mode
[  393.517016][T21534] veth27: left promiscuous mode
[  393.518827][T21534] bridge49: left allmulticast mode
[  393.520568][T21534] veth29: left allmulticast mode
[  393.523398][T21534] veth33: left promiscuous mode
[  393.525404][T21534] gretap5: left allmulticast mode
[  393.527743][T21534] bond73: left promiscuous mode
[  393.530224][T21534] bridge52: left allmulticast mode
[  393.533845][T21534] bridge55: left allmulticast mode
[  393.535697][T21534] veth37: left promiscuous mode
[  393.538012][T21534] veth39: left promiscuous mode
[  393.539667][T21534] hsr2: left promiscuous mode
[  393.541346][T21534] bond80: left promiscuous mode
[  393.542893][T21534] bond80: left allmulticast mode
[  393.544973][T21534] veth41: left promiscuous mode
[  393.547556][T21534] bond83: left promiscuous mode
[  393.549588][T21534] bond83: left allmulticast mode
[  393.551895][T21534] vlan0: left allmulticast mode
[  393.553617][T21534] gretap0: left allmulticast mode
[  393.555656][T21534] bond85: left promiscuous mode
[  393.557871][T21534] bridge59: left promiscuous mode
[  393.559718][T21534] bond85: left allmulticast mode
[  393.561249][T21534] bridge59: left allmulticast mode
[  393.563859][T21534] vti2: left promiscuous mode
[  393.565776][T21534] vti2: left allmulticast mode
[  393.569406][T21534] bond0: left promiscuous mode
[  393.571748][T21534] macvlan0: left promiscuous mode
[  393.577984][T21534] bridge60: left promiscuous mode
[  393.580044][T21534] bridge60: left allmulticast mode
[  393.597576][T21534] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  393.599790][T21534] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  393.601961][T21534] macsec1: left promiscuous mode
[  393.603531][T21534] macsec1: left allmulticast mode
[  393.609518][T21543] tc_dump_action: action bad kind
[  393.674059][T21549] netlink: 'syz.1.4301': attribute type 12 has an invalid length.
[  393.683487][T21549] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4301'.
[  393.813356][T21553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4303'.
[  393.824862][T21552] netlink: 'syz.1.4302': attribute type 13 has an invalid length.
[  393.831048][T21552] netlink: 'syz.1.4302': attribute type 17 has an invalid length.
[  393.886018][T21552] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  393.985922][T21563] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  394.462238][T21597] netlink: 'syz.0.4315': attribute type 1 has an invalid length.
[  394.494095][T21597] 8021q: adding VLAN 0 to HW filter on device bond101
[  394.511838][T21598] 8021q: adding VLAN 0 to HW filter on device bond101
[  394.514244][T21598] bond101: (slave vxcan3): The slave device specified does not support setting the MAC address
[  394.521273][T21598] bond101: (slave vxcan3): Error -95 calling set_mac_address
[  394.539648][T21597] veth45: entered promiscuous mode
[  394.543259][T21597] bond101: (slave veth45): Enslaving as an active interface with a down link
[  394.547122][ T5852] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.629928][T21607] netlink: 'syz.0.4317': attribute type 1 has an invalid length.
[  394.659695][T21607] 8021q: adding VLAN 0 to HW filter on device bond102
[  398.060740][T21645] netlink: 'syz.1.4326': attribute type 1 has an invalid length.
[  398.162097][T21652] bridge67: entered promiscuous mode
[  398.163781][T21652] bridge67: entered allmulticast mode
[  398.259958][T21660] __nla_validate_parse: 11 callbacks suppressed
[  398.259975][T21660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4330'.
[  398.402856][T21674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4334'.
[  398.414314][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'.
[  398.472108][T21684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4337'.
[  398.475333][T21684] bond0: left promiscuous mode
[  398.494116][T21684] bond0: left allmulticast mode
[  398.530932][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4340'.
[  398.575778][T21695] netlink: 'syz.0.4341': attribute type 1 has an invalid length.
[  398.586841][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  398.621753][T21695] bond103: entered promiscuous mode
[  398.624389][T21695] 8021q: adding VLAN 0 to HW filter on device bond103
[  398.676419][T21696] 8021q: adding VLAN 0 to HW filter on device bond103
[  398.680314][T21696] bond103: (slave wireguard4): The slave device specified does not support setting the MAC address
[  398.685395][T21696] bond103: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  398.704108][T21696] bond103: (slave wireguard4): making interface the new active one
[  398.707759][T21696] wireguard4: entered promiscuous mode
[  398.711118][T21696] bond103: (slave wireguard4): Enslaving as an active interface with an up link
[  398.721000][T21702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4342'.
[  398.734309][T21695] bond103: (slave wireguard5): The slave device specified does not support setting the MAC address
[  398.742500][T21695] bond103: (slave wireguard5): Enslaving as a backup interface with an up link
[  398.843280][T21706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.860743][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4343'.
[  398.873312][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4344'.
[  398.939997][T21713] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4344'.
[  399.030010][T21715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.060700][T21717] vlan1: entered promiscuous mode
[  399.096242][T21718] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4348'.
[  399.112028][T21718] vlan1: entered promiscuous mode
[  399.122733][T21720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.133215][T21721] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  399.135925][T21721] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  399.422055][T21739] mac80211_hwsim hwsim5 ": renamed from wlan0
[  399.446871][T21731] netlink: 'syz.0.4351': attribute type 13 has an invalid length.
[  399.450028][T21731] netlink: 'syz.0.4351': attribute type 5 has an invalid length.
[  399.697765][T21758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.702650][T21758] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  400.092775][T21793] netlink: 'syz.2.4371': attribute type 1 has an invalid length.
[  400.190824][T21793] 8021q: adding VLAN 0 to HW filter on device bond97
[  400.195683][T21793] bond96: (slave bond97): making interface the new active one
[  400.214530][T21793] bond96: (slave bond97): Enslaving as an active interface with an up link
[  400.364739][T21811] bond95: (slave veth51): Releasing active interface
[  400.373737][T21811] bond96: (slave bond97): Releasing backup interface
[  400.389430][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  400.493865][T21816] netlink: 'syz.1.4375': attribute type 1 has an invalid length.
[  400.524700][T21816] 8021q: adding VLAN 0 to HW filter on device bond97
[  400.656785][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  400.784458][T21839] netlink: zone id is out of range
[  401.017401][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.215938][T21867] netlink: 'syz.1.4388': attribute type 4 has an invalid length.
[  401.617357][T21885] tap0: tun_chr_ioctl cmd 1074025677
[  401.619305][T21885] tap0: linktype set to 270
[  402.083007][T21912] vlan2: entered allmulticast mode
[  402.139527][T21912] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  402.502781][T21943] sock: sock_set_timeout: `syz.1.4415' (pid 21943) tries to set negative timeout
[  402.567411][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.627414][T21952] netlink: 'syz.2.4419': attribute type 25 has an invalid length.
[  402.881236][T21966] netlink: 'syz.0.4418': attribute type 1 has an invalid length.
[  403.211659][T21982] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  403.304978][T21986] __nla_validate_parse: 31 callbacks suppressed
[  403.304999][T21986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4423'.
[  403.463101][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  403.522928][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'.
[  403.632738][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'.
[  403.835283][T22005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4427'.
[  403.888550][T22005] bond104: entered promiscuous mode
[  403.889624][T22008] netlink: 'syz.2.4430': attribute type 1 has an invalid length.
[  403.891049][T22005] 8021q: adding VLAN 0 to HW filter on device bond104
[  404.029362][T22005] bond104 (unregistering): Released all slaves
[  404.121863][T22012] 8021q: adding VLAN 0 to HW filter on device bond98
[  404.166836][T22016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4432'.
[  404.181744][T22014] veth53: entered promiscuous mode
[  404.190361][T22014] bond98: (slave veth53): Enslaving as a backup interface with a down link
[  404.204931][T22008] bond98: (slave veth53): Releasing backup interface
[  404.215690][T22016] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4432'.
[  404.227908][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  404.344934][T22027] 8021q: adding VLAN 0 to HW filter on device bond104
[  404.470144][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'.
[  404.479433][T22035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  404.484820][T22035] netem: change failed
[  404.491095][T22035] netem: change failed
[  405.143324][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  405.675817][T22075] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4447'.
[  406.239016][T22105] netlink: 'syz.2.4453': attribute type 39 has an invalid length.
[  406.416673][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  406.426963][T22109] bond85: (slave bridge59): Releasing backup interface
[  406.432246][T22109] bond88: (slave bridge62): Releasing active interface
[  406.449249][T22109] bond91: (slave bridge63): Releasing active interface
[  406.486084][T22109] netlink: 'syz.1.4454': attribute type 10 has an invalid length.
[  406.492720][T22109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.496345][T22109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.770735][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4456'.
[  406.829900][T22122] netlink: 'syz.0.4457': attribute type 1 has an invalid length.
[  406.883246][T22122] 8021q: adding VLAN 0 to HW filter on device bond106
[  406.893332][T22122] bond105: (slave bond106): making interface the new active one
[  406.896113][T22122] bond105: (slave bond106): Enslaving as an active interface with an up link
[  407.355900][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4465'.
[  407.368866][T22155] netlink: 'syz.0.4464': attribute type 39 has an invalid length.
[  407.398985][T22157] pim6reg: entered allmulticast mode
[  407.416191][T22157] pim6reg: left allmulticast mode
[  407.465941][T22159] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  407.470861][T22159] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  407.965574][T22182] batadv4: entered promiscuous mode
[  408.539942][T22209] __nla_validate_parse: 3 callbacks suppressed
[  408.539960][T22209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4481'.
[  408.556328][T22211] netlink: 'syz.0.4480': attribute type 1 has an invalid length.
[  408.609687][T22211] bond107: (slave bridge68): making interface the new active one
[  408.613434][T22211] bond107: (slave bridge68): Enslaving as an active interface with an up link
[  408.817644][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'.
[  408.909608][T22232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  408.968447][T22223] netlink: 'syz.2.4484': attribute type 1 has an invalid length.
[  409.018579][T22234] bridge0: failed insert local address into bridge forwarding table
[  409.032668][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4486'.
[  409.101554][T22241] tipc: Trying to set illegal importance in message
[  409.105481][T22241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4488'.
[  409.191843][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4491'.
[  409.197715][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4491'.
[  409.200832][T22249] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  409.203695][T22249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.209595][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4491'.
[  409.361976][T22259] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4496'.
[  409.362946][T22262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4496'.
[  409.376143][T22263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4497'.
[  409.378841][T22264] pim6reg1: entered promiscuous mode
[  409.381797][T22264] pim6reg1: entered allmulticast mode
[  409.643930][T22285] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  409.813335][T22303] netlink: 'syz.0.4507': attribute type 1 has an invalid length.
[  409.837562][T22303] 8021q: adding VLAN 0 to HW filter on device bond108
[  409.844709][T22303] netlink: 'syz.0.4507': attribute type 1 has an invalid length.
[  409.874753][T22303] veth47: entered promiscuous mode
[  409.891405][T22303] bond108: (slave veth47): Enslaving as an active interface with a down link
[  409.905005][T22303] erspan0: entered allmulticast mode
[  410.652670][T22333] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  410.741938][T22337] netlink: 'syz.2.4515': attribute type 11 has an invalid length.
[  410.744703][T22337] netlink: 'syz.2.4515': attribute type 11 has an invalid length.
[  411.420483][T22371] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  411.747234][T22374] netlink: 'syz.1.4526': attribute type 13 has an invalid length.
[  411.753790][T22374] netlink: 'syz.1.4526': attribute type 17 has an invalid length.
[  411.772827][T22374] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  411.878767][T22384] syzkaller1: entered allmulticast mode
[  412.002560][T22387] geneve0: entered promiscuous mode
[  412.011811][ T5852] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  412.026693][ T5852] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  412.029306][ T5852] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  412.031876][ T5852] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  412.145517][T22389] bond0: entered promiscuous mode
[  412.152995][T22389] bond0: left promiscuous mode
[  412.165027][T22390] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  412.444422][T22402] bridge0: entered allmulticast mode
[  412.650555][T22410] bond100: entered promiscuous mode
[  412.652597][T22410] 8021q: adding VLAN 0 to HW filter on device bond100
[  412.784120][T22410] bond100 (unregistering): Released all slaves
[  413.218928][T22430] netlink: 'syz.0.4542': attribute type 10 has an invalid length.
[  413.476026][T22441] netlink: 'syz.0.4547': attribute type 1 has an invalid length.
[  413.485825][T22441] workqueue: Failed to create a rescuer kthread for wq "bond109": -EINTR
[  413.723032][T22452] netlink: 'syz.1.4549': attribute type 1 has an invalid length.
[  413.759470][T22452] 8021q: adding VLAN 0 to HW filter on device bond100
[  414.069117][T22463] bridge71: entered allmulticast mode
[  414.156377][T22470] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.179461][T22466] __nla_validate_parse: 30 callbacks suppressed
[  414.179475][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4555'.
[  414.187949][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4555'.
[  414.205808][T22466] bridge0: port 1(vlan1) entered blocking state
[  414.215944][T22466] bridge0: port 1(vlan1) entered disabled state
[  414.219487][T22466] vlan1: entered allmulticast mode
[  414.221347][T22466] bridge0: entered allmulticast mode
[  414.224775][T22466] vlan1: left allmulticast mode
[  414.226409][T22466] bridge0: left allmulticast mode
[  414.233881][T22480] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4556'.
[  414.245635][T22480] gretap0: entered promiscuous mode
[  414.251534][T22480] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4556'.
[  414.255269][T22480] 0{X: renamed from gretap0
[  414.266194][T22480] 0{X: left promiscuous mode
[  414.271360][T22480] 0{X: entered allmulticast mode
[  414.274177][T22480] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  414.380585][T22490] netlink: 'syz.1.4559': attribute type 4 has an invalid length.
[  414.416055][T22492] bridge72: entered allmulticast mode
[  414.508905][T22498] netlink: 'syz.1.4562': attribute type 10 has an invalid length.
[  414.514048][T22502] bond101: (slave veth45): Releasing active interface
[  414.520747][T22498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4562'.
[  414.534344][T22502] bond103: (slave wireguard4): Releasing backup interface
[  414.537772][T22502] wireguard4: left promiscuous mode
[  414.539590][T22502] bond103: (slave wireguard5): making interface the new active one
[  414.542312][T22502] wireguard5: entered promiscuous mode
[  414.550905][T22502] bond103: (slave wireguard5): Releasing backup interface
[  414.553198][T22502] wireguard5: left promiscuous mode
[  414.563048][T22502] bond105: (slave bond106): Releasing backup interface
[  414.570077][T22502] bond107: (slave bridge68): Releasing active interface
[  414.575870][T22502] bond108: (slave veth47): Releasing active interface
[  414.585414][T22498] !: entered promiscuous mode
[  414.588264][T22498] !: entered allmulticast mode
[  414.591126][T22498] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  414.668117][T22515] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  414.740418][T22525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  414.909112][T22534] veth0: entered promiscuous mode
[  414.913857][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'.
[  414.933035][T22534] veth0 (unregistering): left promiscuous mode
[  414.943346][T22534] veth1 (unregistering): left promiscuous mode
[  415.053398][T22549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.061746][T22549] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  415.065416][T22542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4572'.
[  415.072262][T22542] netlink: 'syz.1.4572': attribute type 7 has an invalid length.
[  415.075292][T22542] netlink: 'syz.1.4572': attribute type 8 has an invalid length.
[  415.103041][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4572'.
[  415.159137][T22559] bridge53: entered allmulticast mode
[  415.163256][T22560] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.171789][T22560] netem: change failed
[  415.241405][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4580'.
[  415.313528][T22568] netlink: 'syz.2.4581': attribute type 10 has an invalid length.
[  415.317086][T22568] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4581'.
[  415.414889][T22578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.472418][T22582] bridge73: entered allmulticast mode
[  415.618918][T22596] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.622910][T22596] netlink: 'syz.0.4589': attribute type 3 has an invalid length.
[  415.719328][T22604] netlink: 'syz.2.4591': attribute type 2 has an invalid length.
[  415.731724][T22604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  415.771906][T22607] netlink: 'syz.0.4592': attribute type 13 has an invalid length.
[  415.782218][T22607] netlink: 'syz.0.4592': attribute type 17 has an invalid length.
[  415.796011][T22607] 0{X: left allmulticast mode
[  415.809392][T22607] erspan0: left allmulticast mode
[  415.832861][T22607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.002949][T22616] bridge54: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  416.241139][T22628] netlink: 'syz.0.4597': attribute type 11 has an invalid length.
[  416.392189][T22631] delete_channel: no stack
[  416.576104][T22645] bridge0: left allmulticast mode
[  416.583415][T22645] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  416.689540][T22653] netlink: 'syz.1.4605': attribute type 1 has an invalid length.
[  416.784996][T22656] !: left promiscuous mode
[  416.787695][T22656] !: left allmulticast mode
[  416.799004][T22656] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  416.803389][T22656] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  416.806317][T22656] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  416.894332][T22660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  416.917766][T22665] bridge74: entered allmulticast mode
[  416.967023][T22669] IPVS: length: 49 != 24
[  416.977130][T22670] IPVS: length: 49 != 24
[  416.984196][T22669] gretap0: entered promiscuous mode
[  416.990719][T22669] 0{X: renamed from gretap0
[  417.000542][T22669] 0{X: left promiscuous mode
[  417.002682][T22669] 0{X: entered allmulticast mode
[  417.017420][T22669] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  417.227064][T22680] 8021q: adding VLAN 0 to HW filter on device bond110
[  417.862017][T22700] 0{X: entered promiscuous mode
[  417.882304][T22700] 1{X: renamed from 30{X
[  417.926156][T22700] 1{X: left promiscuous mode
[  417.936772][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  417.940427][T22700] 1{X: entered allmulticast mode
[  417.985975][T22700] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  418.253729][T22718] tipc: Resetting bearer <eth:syzkaller0>
[  418.639881][T22749] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  418.717866][T22746] veth55: entered promiscuous mode
[  418.880415][T22764] tipc: New replicast peer: 255.255.255.255
[  418.883068][T22764] tipc: Enabled bearer <udp:s>, priority 10
[  419.118158][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  419.122193][T22787] bridge0: port 1(erspan0) entered blocking state
[  419.124983][T22787] bridge0: port 1(erspan0) entered disabled state
[  419.129597][T22787] erspan0: entered allmulticast mode
[  419.134123][T22787] erspan0: entered promiscuous mode
[  419.141250][T22787] erspan0: left allmulticast mode
[  419.143143][T22787] erspan0: left promiscuous mode
[  419.145708][T22787] bridge0: port 1(erspan0) entered disabled state
[  419.442213][T22800] validate_nla: 6 callbacks suppressed
[  419.442228][T22800] netlink: 'syz.0.4645': attribute type 4 has an invalid length.
[  419.451171][T22800] __nla_validate_parse: 33 callbacks suppressed
[  419.451187][T22800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'.
[  419.462545][T22800] macsec0: entered promiscuous mode
[  419.464145][T22800] macvlan1: entered promiscuous mode
[  419.469588][T22800] macvlan1: left promiscuous mode
[  419.590227][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4646'.
[  419.702879][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4646'.
[  419.717544][T22802] bridge0: Device is already in use.
[  419.720522][T22808] bridge0: Device is already in use.
[  419.959381][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4651'.
[  419.964135][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4651'.
[  420.007970][T22819] bridge0: port 1(vlan1) entered blocking state
[  420.010638][T22819] bridge0: port 1(vlan1) entered disabled state
[  420.013790][T22819] vlan1: entered allmulticast mode
[  420.015952][T22819] bridge0: entered allmulticast mode
[  420.044376][T22819] vlan1: left allmulticast mode
[  420.046346][T22819] bridge0: left allmulticast mode
[  420.129652][T22829] netlink: 'syz.1.4655': attribute type 3 has an invalid length.
[  420.135597][T22829] bridge66: entered allmulticast mode
[  420.151373][T22829] 0{X: left allmulticast mode
[  420.180666][T22829] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  420.201095][T22828] bridge66: left allmulticast mode
[  420.217591][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.365919][T22845] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  420.378858][T22845] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  420.418882][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.489036][T22856] netlink: 'syz.2.4662': attribute type 1 has an invalid length.
[  420.516822][T22856] 8021q: adding VLAN 0 to HW filter on device bond101
[  420.532708][T22859] netlink: 'syz.0.4663': attribute type 2 has an invalid length.
[  420.538887][T22859] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4663'.
[  420.542630][T22859] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4663'.
[  420.567079][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'.
[  420.672841][T22871] netlink: 'syz.0.4667': attribute type 1 has an invalid length.
[  420.675537][T22871] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4667'.
[  420.680379][T22871] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  420.776133][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'.
[  421.138378][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.234132][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  421.246249][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  421.254571][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  421.258678][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  421.380897][T22903] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.395030][T22903] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  421.399342][T22903] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  421.485707][T22911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.593123][T22916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  421.620372][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.187575][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.192240][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.259789][T22932] syzkaller1: entered promiscuous mode
[  422.260109][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.262030][T22932] syzkaller1: entered allmulticast mode
[  422.296809][T22932] syzkaller0: left promiscuous mode
[  422.298576][T22932] syzkaller0: left allmulticast mode
[  422.314473][T22932] tipc: Resetting bearer <eth:syzkaller0>
[  422.521949][T22939] netlink: 'syz.0.4688': attribute type 10 has an invalid length.
[  422.548380][T22941] netlink: 'syz.2.4689': attribute type 2 has an invalid length.
[  422.578192][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.599929][T22941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.625933][T22944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  422.626880][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.726228][T22950] netlink: 'syz.0.4691': attribute type 13 has an invalid length.
[  422.739163][T22950] netlink: 'syz.0.4691': attribute type 17 has an invalid length.
[  422.911608][T22963] netlink: 'syz.1.4695': attribute type 3 has an invalid length.
[  422.979641][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.133168][T22975] _Z`Ԁ@: entered promiscuous mode
[  423.156076][T22977] Bluetooth: MGMT ver 1.23
[  423.536105][ T5907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.538927][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  423.826041][T23013] bridge73: entered allmulticast mode
[  423.842904][T23010] macvlan0: entered promiscuous mode
[  423.847082][T23010] macvlan0: entered allmulticast mode
[  423.850267][T23010] bond102: (slave macvlan0): Opening slave failed
[  423.988538][T23018] nbd: must specify at least one socket
[  424.018775][T23020] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  424.036911][T23020] syzkaller0: entered promiscuous mode
[  424.041723][T23020] syzkaller0: entered allmulticast mode
[  424.063991][T23022] tipc: Resetting bearer <eth:syzkaller0>
[  424.156027][T23027] tipc: Resetting bearer <eth:syzkaller0>
[  424.283168][T23033] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  424.334874][ T5907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  424.339844][ T5907] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  424.343210][ T5907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  424.346438][ T5907] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  424.356783][ T5907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  424.360080][ T5907] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  424.363357][ T5907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  424.377404][ T5907] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  424.495081][T23046] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  424.577006][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  424.589070][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.592329][ T7157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  424.793729][T23058] validate_nla: 3 callbacks suppressed
[  424.793742][T23058] netlink: 'syz.1.4723': attribute type 1 has an invalid length.
[  424.856123][T23062] __nla_validate_parse: 18 callbacks suppressed
[  424.856139][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'.
[  424.864637][T23062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4723'.
[  424.874166][T23062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4723'.
[  425.028568][T23068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4725'.
[  425.039321][T23070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.048237][T23070] dvmrp1: entered allmulticast mode
[  425.053257][T23068] netlink: 'syz.0.4725': attribute type 1 has an invalid length.
[  425.085585][T23068] 8021q: adding VLAN 0 to HW filter on device bond111
[  425.150504][T23073] vxcan0: entered promiscuous mode
[  425.171187][T23076] bridge77: entered allmulticast mode
[  425.268055][T23078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4729'.
[  425.297565][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.345049][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'.
[  425.364791][T23090] pimreg: entered allmulticast mode
[  425.376119][T23090] dvmrp8: entered allmulticast mode
[  425.380256][T23088] pimreg: left allmulticast mode
[  425.382698][T23088] dvmrp8: left allmulticast mode
[  425.489211][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'.
[  425.496620][T23100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4735'.
[  425.533635][T23107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4736'.
[  425.544011][T23100] netlink: 'syz.0.4735': attribute type 10 has an invalid length.
[  425.616976][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  425.673966][T23122] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4741'.
[  425.741432][T23126] netlink: 'syz.1.4741': attribute type 21 has an invalid length.
[  425.745181][T23126] netlink: 'syz.1.4741': attribute type 4 has an invalid length.
[  425.882884][T23130] netlink: 'syz.1.4741': attribute type 21 has an invalid length.
[  425.904906][T23129] ip6tnl10: entered promiscuous mode
[  425.948420][T23132] netlink: 'syz.2.4744': attribute type 1 has an invalid length.
[  426.024378][T23132] bond104: (slave vxcan1): The slave device specified does not support setting the MAC address
[  426.038096][T23132] bond104: (slave vxcan1): Error -95 calling set_mac_address
[  426.243615][T23145] syzkaller0: left promiscuous mode
[  426.302881][T23153] bridge0: port 1(vlan1) entered blocking state
[  426.312777][T23153] bridge0: port 1(vlan1) entered disabled state
[  426.315470][T23153] vlan1: entered allmulticast mode
[  426.318497][T23153] bridge0: entered allmulticast mode
[  426.325258][T23153] vlan1: left allmulticast mode
[  426.327844][T23153] bridge0: left allmulticast mode
[  426.576910][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.656926][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  426.833402][T23184] tipc: MTU too low for tipc bearer
[  426.908077][T23186] netlink: 'syz.1.4756': attribute type 1 has an invalid length.
[  426.996319][T23186] bond101: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  427.013116][T23186] veth1: entered promiscuous mode
[  427.021773][T23190] netlink: 'syz.0.4757': attribute type 1 has an invalid length.
[  427.022533][T23186] bond101: (slave veth1): Enslaving as a backup interface with a down link
[  427.052666][T23190] bond112: entered promiscuous mode
[  427.054803][T23190] 8021q: adding VLAN 0 to HW filter on device bond112
[  427.059523][T23186] 8021q: adding VLAN 0 to HW filter on device bond101
[  427.063320][ T7157] bond101: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  427.082176][T23190] bond112: (slave bridge78): making interface the new active one
[  427.084776][T23190] bridge78: entered promiscuous mode
[  427.087255][T23190] bond112: (slave bridge78): Enslaving as an active interface with an up link
[  427.143247][T23193] bridge0: port 1(veth0_to_bridge) entered blocking state
[  427.145643][T23193] bridge0: port 1(veth0_to_bridge) entered disabled state
[  427.148972][T23193] veth0_to_bridge: entered allmulticast mode
[  427.153697][T23193] veth0_to_bridge: entered promiscuous mode
[  427.188303][ T7157] bond101: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  427.252257][T23204] bridge79: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  427.351466][T23213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  427.362747][T23213] netlink: 'syz.1.4762': attribute type 1 has an invalid length.
[  427.399962][T23213] bond102 (unregistering): Released all slaves
[  427.531114][T23228] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  427.535462][T23228] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  427.643870][T23232] pim6reg1: entered promiscuous mode
[  427.645904][T23232] pim6reg1: entered allmulticast mode
[  427.696713][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  427.761574][T23249] bridge75: port 1(veth0_to_bond) entered blocking state
[  427.763889][T23249] bridge75: port 1(veth0_to_bond) entered disabled state
[  427.768049][T23249] veth0_to_bond: entered allmulticast mode
[  427.771233][T23249] veth0_to_bond: entered promiscuous mode
[  427.795118][T23249] vlan2: entered allmulticast mode
[  427.798349][T23249] veth1: entered allmulticast mode
[  428.005140][T23262] bond102: entered promiscuous mode
[  428.013406][T23262] bond102: entered allmulticast mode
[  428.017295][T23262] 8021q: adding VLAN 0 to HW filter on device bond102
[  428.041920][T23262] bridge76: entered promiscuous mode
[  428.043958][T23262] bridge76: entered allmulticast mode
[  428.576842][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.736915][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  429.144415][T23291] bridge80: entered allmulticast mode
[  429.267886][T23298] bond103: entered promiscuous mode
[  429.270409][T23298] 8021q: adding VLAN 0 to HW filter on device bond103
[  429.287847][T23302] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20007
[  429.304145][T23298] 8021q: adding VLAN 0 to HW filter on device bond103
[  429.307639][T23302] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  429.321155][T23298] bond103: (slave wireguard3): The slave device specified does not support setting the MAC address
[  429.326668][T23298] bond103: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  429.334519][T23298] bond103: (slave wireguard3): making interface the new active one
[  429.341089][T23298] wireguard3: entered promiscuous mode
[  429.343735][T23298] bond103: (slave wireguard3): Enslaving as an active interface with an up link
[  429.349723][T23308] IPv6: NLM_F_CREATE should be specified when creating new route
[  429.352900][T23308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.355287][T23308] IPv6: NLM_F_CREATE should be set when creating new route
[  429.357621][T23308] IPv6: NLM_F_CREATE should be set when creating new route
[  429.362344][T23308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  429.426911][T23310] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  429.449673][T23310] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  429.467874][T23313] rdma_rxe: rxe_newlink: failed to add lo
[  429.492722][T23312] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  429.515715][T23316] bridge57: entered allmulticast mode
[  429.518187][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.600777][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  429.663185][T23327] 8021q: adding VLAN 0 to HW filter on device bond104
[  429.678865][T23327] bond104: entered promiscuous mode
[  429.710042][T23337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.776708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  429.780707][T23342] 8021q: adding VLAN 0 to HW filter on device bond106
[  429.784164][T23342] bond105: (slave bond106): making interface the new active one
[  429.787403][T23342] bond105: (slave bond106): Enslaving as an active interface with an up link
[  429.794608][T23342] 8021q: adding VLAN 0 to HW filter on device bond105
[  429.876396][T23351] IPv6: Can't replace route, no match found
[  429.892497][T23355] __nla_validate_parse: 57 callbacks suppressed
[  429.892509][T23355] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4807'.
[  429.900824][T23355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4807'.
[  429.924756][T23355] bond106: entered promiscuous mode
[  429.927529][T23355] bond106: entered allmulticast mode
[  429.930816][T23355] 8021q: adding VLAN 0 to HW filter on device bond106
[  430.022496][T23362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4809'.
[  430.219176][T23374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4813'.
[  430.222484][T23374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4813'.
[  430.225607][T23374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4813'.
[  430.229246][T23374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4813'.
[  430.301035][T23379] syzkaller0: left allmulticast mode
[  430.389893][T23381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4815'.
[  430.612619][T23411] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  430.653625][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4822'.
[  430.672992][T23416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4824'.
[  430.706031][T23421] validate_nla: 31 callbacks suppressed
[  430.706046][T23421] netlink: 'syz.2.4826': attribute type 1 has an invalid length.
[  430.742392][T23421] veth55: entered promiscuous mode
[  430.750824][T23421] bond107: (slave veth55): Enslaving as a backup interface with a down link
[  430.763359][T23421] 8021q: adding VLAN 0 to HW filter on device bond107
[  430.816746][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  430.824933][T23428] tap0: tun_chr_ioctl cmd 1074025677
[  430.829145][T23428] tap0: linktype set to 270
[  430.948626][T23431] team_slave_1: Caught tx_queue_len zero misconfig
[  431.068190][T23431] tipc: Resetting bearer <eth:syzkaller0>
[  431.179923][T23442] IPv6: NLM_F_REPLACE set, but no existing node found!
[  431.200051][T23444] bond0: entered promiscuous mode
[  431.201666][T23444] bond0: entered allmulticast mode
[  431.203488][T23444] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.652841][T23481] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  431.675337][T23481] CPU: 1 UID: 0 PID: 23481 Comm: syz.2.4842 Not tainted syzkaller #0 PREEMPT(full) 
[  431.675363][T23481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  431.675373][T23481] Call Trace:
[  431.675380][T23481]  <TASK>
[  431.675388][T23481]  dump_stack_lvl+0x189/0x250
[  431.675415][T23481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  431.675434][T23481]  ? __pfx__printk+0x10/0x10
[  431.675457][T23481]  ? kernfs_path_from_node+0x2f/0x290
[  431.675473][T23481]  ? kernfs_path_from_node+0x250/0x290
[  431.675488][T23481]  ? kernfs_path_from_node+0x2f/0x290
[  431.675507][T23481]  sysfs_warn_dup+0x8e/0xa0
[  431.675524][T23481]  sysfs_do_create_link_sd+0xc0/0x110
[  431.675541][T23481]  device_add_class_symlinks+0x1cf/0x240
[  431.675562][T23481]  device_add+0x475/0xb50
[  431.675581][T23481]  wiphy_register+0x1ba6/0x28d0
[  431.675618][T23481]  ? __pfx_wiphy_register+0x10/0x10
[  431.675638][T23481]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  431.675661][T23481]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  431.675690][T23481]  ieee80211_register_hw+0x3425/0x4080
[  431.675721][T23481]  ? ieee80211_register_hw+0x14a1/0x4080
[  431.675744][T23481]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  431.675763][T23481]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  431.675789][T23481]  ? __hrtimer_setup+0x187/0x210
[  431.675802][T23481]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  431.675836][T23481]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  431.675880][T23481]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  431.675898][T23481]  ? trace_kmalloc+0x1f/0xd0
[  431.675915][T23481]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  431.675937][T23481]  ? kstrndup+0xbf/0x160
[  431.675960][T23481]  hwsim_new_radio_nl+0xea4/0x1b10
[  431.675982][T23481]  ? __pfx___nla_validate_parse+0x10/0x10
[  431.676017][T23481]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  431.676045][T23481]  ? __nla_parse+0x40/0x60
[  431.676070][T23481]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  431.676097][T23481]  genl_family_rcv_msg_doit+0x215/0x300
[  431.676122][T23481]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  431.676178][T23481]  ? bpf_lsm_capable+0x9/0x20
[  431.676200][T23481]  ? security_capable+0x7e/0x2e0
[  431.676231][T23481]  genl_rcv_msg+0x60e/0x790
[  431.676255][T23481]  ? __pfx_genl_rcv_msg+0x10/0x10
[  431.676271][T23481]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  431.676304][T23481]  netlink_rcv_skb+0x208/0x470
[  431.676323][T23481]  ? __lock_acquire+0xab9/0xd20
[  431.676345][T23481]  ? __pfx_genl_rcv_msg+0x10/0x10
[  431.676363][T23481]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  431.676402][T23481]  ? down_read+0x1ad/0x2e0
[  431.676428][T23481]  genl_rcv+0x28/0x40
[  431.676443][T23481]  netlink_unicast+0x82f/0x9e0
[  431.676490][T23481]  ? __pfx_netlink_unicast+0x10/0x10
[  431.676514][T23481]  ? netlink_sendmsg+0x642/0xb30
[  431.676534][T23481]  ? skb_put+0x11b/0x210
[  431.676562][T23481]  netlink_sendmsg+0x805/0xb30
[  431.676594][T23481]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.676619][T23481]  ? aa_sock_msg_perm+0xf1/0x1d0
[  431.676644][T23481]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  431.676661][T23481]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.676684][T23481]  __sock_sendmsg+0x21c/0x270
[  431.676706][T23481]  ____sys_sendmsg+0x505/0x830
[  431.676728][T23481]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.676753][T23481]  ? import_iovec+0x74/0xa0
[  431.676773][T23481]  ___sys_sendmsg+0x21f/0x2a0
[  431.676791][T23481]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.676848][T23481]  ? __fget_files+0x2a/0x420
[  431.676872][T23481]  ? __fget_files+0x3a0/0x420
[  431.676905][T23481]  __x64_sys_sendmsg+0x19b/0x260
[  431.676925][T23481]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.676960][T23481]  ? do_syscall_64+0xbe/0x3b0
[  431.676986][T23481]  do_syscall_64+0xfa/0x3b0
[  431.677006][T23481]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.677025][T23481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.677041][T23481]  ? exc_page_fault+0x9f/0xf0
[  431.677063][T23481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.677077][T23481] RIP: 0033:0x7f5cf2d8ebe9
[  431.677093][T23481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.677107][T23481] RSP: 002b:00007f5cf3c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.677124][T23481] RAX: ffffffffffffffda RBX: 00007f5cf2fb6090 RCX: 00007f5cf2d8ebe9
[  431.677136][T23481] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  431.677147][T23481] RBP: 00007f5cf2e11e19 R08: 0000000000000000 R09: 0000000000000000
[  431.677184][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.677194][T23481] R13: 00007f5cf2fb6128 R14: 00007f5cf2fb6090 R15: 00007ffd0f903108
[  431.677221][T23481]  </TASK>
[  431.856781][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  431.940273][T23496] bond112: (slave bridge78): Releasing backup interface
[  431.943983][T23496] bridge78: left promiscuous mode
[  432.072988][T23507] pim6reg: entered allmulticast mode
[  432.089195][T23511] pim6reg: left allmulticast mode
[  432.149964][T23513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.276454][T23528] pim6reg: entered allmulticast mode
[  432.288296][T23528] pim6reg: left allmulticast mode
[  432.583513][T23538] nbd: must specify at least one socket
[  432.906788][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  433.443933][T23552] tipc: Resetting bearer <eth:syzkaller0>
[  433.533709][T23556] netlink: 'syz.1.4863': attribute type 1 has an invalid length.
[  433.726190][T23561] bridge77: entered allmulticast mode
[  433.936996][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  434.003332][T23566] netlink: 'syz.1.4868': attribute type 10 has an invalid length.
[  434.104819][T23570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.114122][T23570] veth0_to_team: entered promiscuous mode
[  434.116299][T23570] veth0_to_team: entered allmulticast mode
[  434.187234][T23572] 8021q: adding VLAN 0 to HW filter on device bond108
[  434.214113][T23572] netlink: 'syz.1.4870': attribute type 1 has an invalid length.
[  434.348613][T23581] sctp: [Deprecated]: syz.1.4872 (pid 23581) Use of int in max_burst socket option deprecated.
[  434.348613][T23581] Use struct sctp_assoc_value instead
[  434.357370][T23582] nbd: must specify at least one socket
[  434.826016][T23609] netlink: 'syz.0.4879': attribute type 10 has an invalid length.
[  434.829195][T23609] netlink: 'syz.0.4879': attribute type 10 has an invalid length.
[  434.918961][T23621] netlink: 'syz.1.4881': attribute type 142 has an invalid length.
[  434.957363][T23623] netlink: 'syz.0.4880': attribute type 10 has an invalid length.
[  434.960118][T23623] __nla_validate_parse: 20 callbacks suppressed
[  434.960131][T23623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4880'.
[  434.976760][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  435.193765][T23628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4883'.
[  435.216996][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  435.306063][T23635] netlink: 'syz.0.4885': attribute type 10 has an invalid length.
[  435.310684][T23635] netlink: 'syz.0.4885': attribute type 10 has an invalid length.
[  435.425155][T23640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.432124][T23640] syzkaller0: entered promiscuous mode
[  435.434083][T23640] syzkaller0: entered allmulticast mode
[  435.523866][T23642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4888'.
[  435.552249][T23642] netlink: 316 bytes leftover after parsing attributes in process `syz.0.4888'.
[  435.554952][T23644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.662933][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4891'.
[  435.672129][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'.
[  435.938649][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4898'.
[  435.942841][T23679] validate_nla: 2 callbacks suppressed
[  435.942854][T23679] netlink: 'syz.1.4899': attribute type 1 has an invalid length.
[  435.946269][ T5907] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.963689][ T5907] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.967287][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4898'.
[  435.999037][T23679] 8021q: adding VLAN 0 to HW filter on device bond109
[  436.003684][ T5907] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.012665][ T5907] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.024084][T23684] tap0: tun_chr_ioctl cmd 1074025680
[  436.026900][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  436.028149][T23684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.043723][T23684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.318719][T23699] netlink: 'syz.1.4905': attribute type 5 has an invalid length.
[  436.322008][T23706] netlink: 'syz.1.4905': attribute type 5 has an invalid length.
[  436.325062][T23706] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4905'.
[  436.337319][T23699] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4905'.
[  436.403920][T23699] sctp: [Deprecated]: syz.1.4905 (pid 23699) Use of int in max_burst socket option deprecated.
[  436.403920][T23699] Use struct sctp_assoc_value instead
[  436.528456][T23715] bridge82: entered allmulticast mode
[  436.571824][T23717] 1{X: left allmulticast mode
[  436.574369][T23717] wg1: left promiscuous mode
[  436.575893][T23717] wg1: left allmulticast mode
[  436.580735][T23717] tipc: Resetting bearer <eth:syzkaller0>
[  436.583554][T23717] syzkaller0: left promiscuous mode
[  436.585873][T23717] syzkaller0: left allmulticast mode
[  436.601048][T23717] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  436.617003][T23717] bridge58: left allmulticast mode
[  436.619603][T23717] vlan3: left promiscuous mode
[  436.621479][T23717] bridge0: left promiscuous mode
[  436.624579][T23717] veth29: left promiscuous mode
[  436.632433][T23717] geneve9: left promiscuous mode
[  436.635202][T23717] geneve9: left allmulticast mode
[  436.637987][T23717] veth39: left promiscuous mode
[  436.640225][T23717] ipvlan0: left allmulticast mode
[  436.642235][T23717] bond100: left allmulticast mode
[  436.645463][T23717] veth45: left promiscuous mode
[  436.648100][T23717] bridge67: left promiscuous mode
[  436.650069][T23717] bridge67: left allmulticast mode
[  436.652181][T23717] bond103: left promiscuous mode
[  436.655631][T23717] veth47: left promiscuous mode
[  436.658097][T23717] geneve0: left promiscuous mode
[  436.660335][T23717] bridge71: left allmulticast mode
[  436.662431][T23717] bridge72: left allmulticast mode
[  436.664631][T23717] bridge73: left allmulticast mode
[  436.667202][T23717] bridge74: left allmulticast mode
[  436.670290][T23717] bridge77: left allmulticast mode
[  436.672357][T23717] ip6tnl10: left promiscuous mode
[  436.674366][T23717] bond112: left promiscuous mode
[  436.680757][T23717] bridge80: left allmulticast mode
[  436.693044][T23717] bridge82: left allmulticast mode
[  436.695617][ T5907] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  436.702661][ T5907] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  436.712309][ T5907] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  436.720884][ T5907] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  436.810660][T23723] 8021q: adding VLAN 0 to HW filter on device bond113
[  436.829139][T23723] bond113: (slave bridge83): Enslaving as an active interface with an up link
[  436.890464][T23723] netlink: 'syz.0.4910': attribute type 1 has an invalid length.
[  437.066853][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  437.083178][T23732] netlink: 'syz.2.4913': attribute type 11 has an invalid length.
[  437.163636][T23738] pim6reg: entered allmulticast mode
[  437.173519][T23738] pim6reg: left allmulticast mode
[  437.253417][T23742] veth0_to_bridge: left allmulticast mode
[  437.255490][T23742] veth0_to_bridge: left promiscuous mode
[  437.268743][T23742] bridge0: port 1(veth0_to_bridge) entered disabled state
[  437.277362][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  437.293840][T23742] veth0_to_bond: left allmulticast mode
[  437.296125][T23742] veth0_to_bond: left promiscuous mode
[  437.305518][T23742] bridge75: port 1(veth0_to_bond) entered disabled state
[  437.319440][T23742] bond101: (slave ip6gretap2): Removing an active aggregator
[  437.333635][T23742] bond101: (slave ip6gretap2): Releasing backup interface
[  437.339694][T23742] bond101: (slave ip6gretap2): the permanent HWaddr of slave - 62:8f:b0:2e:f5:2f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  437.361830][T23742] bond101: (slave veth1): Releasing backup interface
[  437.385940][T23742] bond103: (slave wireguard3): Releasing backup interface
[  437.390331][T23742] wireguard3: left promiscuous mode
[  437.403610][T23742] bond105: (slave bond106): Releasing backup interface
[  437.532249][T23764] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  437.645799][T23772] tap0: tun_chr_ioctl cmd 1074025677
[  437.648221][T23772] tap0: linktype set to 780
[  437.717197][T23762] block nbd0: server does not support multiple connections per device.
[  437.723210][T23762] block nbd0: shutting down sockets
[  437.890539][T23778] netlink: 'syz.1.4926': attribute type 39 has an invalid length.
[  437.916889][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  437.980165][T23789] netlink: 'syz.0.4929': attribute type 1 has an invalid length.
[  438.038899][T23793] netlink: 'syz.0.4929': attribute type 10 has an invalid length.
[  438.097037][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  438.120308][T23798] pim6reg: entered allmulticast mode
[  438.122732][T23798] pim6reg: left allmulticast mode
[  438.467228][T23813] netlink: 'syz.1.4936': attribute type 5 has an invalid length.
[  438.474387][T23813] geneve5: entered promiscuous mode
[  438.476268][T23813] geneve5: entered allmulticast mode
[  438.480758][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  438.483898][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  438.503420][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  438.510304][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  438.519497][T23816] netlink: 'syz.1.4937': attribute type 11 has an invalid length.
[  438.632121][T23820] bridge78: entered allmulticast mode
[  438.686101][T23822] pim6reg1: entered promiscuous mode
[  438.692142][T23822] pim6reg1: entered allmulticast mode
[  438.741962][T23826] chnl_net:caif_netlink_parms(): no params data found
[  438.936289][T23836] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  438.944493][T23836] CPU: 0 UID: 0 PID: 23836 Comm: syz.0.4943 Not tainted syzkaller #0 PREEMPT(full) 
[  438.944545][T23836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.944557][T23836] Call Trace:
[  438.944564][T23836]  <TASK>
[  438.944572][T23836]  dump_stack_lvl+0x189/0x250
[  438.944599][T23836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.944618][T23836]  ? __pfx__printk+0x10/0x10
[  438.944647][T23836]  ? kernfs_path_from_node+0x2f/0x290
[  438.944665][T23836]  ? kernfs_path_from_node+0x250/0x290
[  438.944680][T23836]  ? kernfs_path_from_node+0x2f/0x290
[  438.944701][T23836]  sysfs_warn_dup+0x8e/0xa0
[  438.944719][T23836]  sysfs_do_create_link_sd+0xc0/0x110
[  438.944738][T23836]  device_add_class_symlinks+0x1cf/0x240
[  438.944758][T23836]  device_add+0x475/0xb50
[  438.944777][T23836]  wiphy_register+0x1ba6/0x28d0
[  438.944815][T23836]  ? __pfx_wiphy_register+0x10/0x10
[  438.944835][T23836]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  438.944857][T23836]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  438.944887][T23836]  ieee80211_register_hw+0x3425/0x4080
[  438.944920][T23836]  ? ieee80211_register_hw+0x14a1/0x4080
[  438.944944][T23836]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  438.944964][T23836]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  438.944991][T23836]  ? __hrtimer_setup+0x187/0x210
[  438.945005][T23836]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  438.945030][T23836]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  438.945077][T23836]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  438.945095][T23836]  ? trace_kmalloc+0x1f/0xd0
[  438.945114][T23836]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  438.945133][T23836]  ? kstrndup+0xbf/0x160
[  438.945159][T23836]  hwsim_new_radio_nl+0xea4/0x1b10
[  438.945181][T23836]  ? __pfx___nla_validate_parse+0x10/0x10
[  438.945217][T23836]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  438.945248][T23836]  ? __nla_parse+0x40/0x60
[  438.945274][T23836]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  438.945300][T23836]  genl_family_rcv_msg_doit+0x215/0x300
[  438.945325][T23836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  438.945351][T23836]  ? bpf_lsm_capable+0x9/0x20
[  438.945377][T23836]  ? security_capable+0x7e/0x2e0
[  438.945407][T23836]  genl_rcv_msg+0x60e/0x790
[  438.945431][T23836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.945448][T23836]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  438.945481][T23836]  netlink_rcv_skb+0x208/0x470
[  438.945528][T23836]  ? __lock_acquire+0xab9/0xd20
[  438.945553][T23836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.945572][T23836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  438.945611][T23836]  ? down_read+0x1ad/0x2e0
[  438.945636][T23836]  genl_rcv+0x28/0x40
[  438.945650][T23836]  netlink_unicast+0x82f/0x9e0
[  438.945679][T23836]  ? __pfx_netlink_unicast+0x10/0x10
[  438.945700][T23836]  ? netlink_sendmsg+0x642/0xb30
[  438.945720][T23836]  ? skb_put+0x11b/0x210
[  438.945747][T23836]  netlink_sendmsg+0x805/0xb30
[  438.945777][T23836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.945802][T23836]  ? aa_sock_msg_perm+0xf1/0x1d0
[  438.945827][T23836]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  438.945844][T23836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.945866][T23836]  __sock_sendmsg+0x21c/0x270
[  438.945889][T23836]  ____sys_sendmsg+0x505/0x830
[  438.945910][T23836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  438.945935][T23836]  ? import_iovec+0x74/0xa0
[  438.945957][T23836]  ___sys_sendmsg+0x21f/0x2a0
[  438.945975][T23836]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.946025][T23836]  ? __fget_files+0x2a/0x420
[  438.946047][T23836]  ? __fget_files+0x3a0/0x420
[  438.946099][T23836]  __x64_sys_sendmsg+0x19b/0x260
[  438.946118][T23836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.946146][T23836]  ? rcu_is_watching+0x15/0xb0
[  438.946167][T23836]  ? do_syscall_64+0xbe/0x3b0
[  438.946194][T23836]  do_syscall_64+0xfa/0x3b0
[  438.946215][T23836]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.946235][T23836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.946251][T23836]  ? exc_page_fault+0x9f/0xf0
[  438.946272][T23836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.946288][T23836] RIP: 0033:0x7f176d58ebe9
[  438.946303][T23836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.946318][T23836] RSP: 002b:00007f176e455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.946336][T23836] RAX: ffffffffffffffda RBX: 00007f176d7b6090 RCX: 00007f176d58ebe9
[  438.946348][T23836] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  438.946358][T23836] RBP: 00007f176d611e19 R08: 0000000000000000 R09: 0000000000000000
[  438.946373][T23836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.946382][T23836] R13: 00007f176d7b6128 R14: 00007f176d7b6090 R15: 00007ffe83d04958
[  438.946410][T23836]  </TASK>
[  439.146895][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  439.281885][T23847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.285299][T23847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.290613][T23847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.690584][T23874] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  439.756775][T23881] tipc: MTU too low for tipc bearer
[  440.037558][T23887] __nla_validate_parse: 17 callbacks suppressed
[  440.037579][T23887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4958'.
[  440.044118][T23887] syz_tun: entered allmulticast mode
[  440.186743][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  440.521411][T23900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4962'.
[  440.595442][T23905] netlink: 'syz.0.4964': attribute type 10 has an invalid length.
[  440.744592][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4967'.
[  440.811309][T23920] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.853420][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4968'.
[  440.892787][T23924] 8021q: adding VLAN 0 to HW filter on device bond111
[  440.898840][T23924] bond0: (slave bond111): Enslaving as a backup interface with a down link
[  440.913535][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'.
[  441.050909][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4972'.
[  441.075859][T23941] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4975'.
[  441.079279][T23939] dvmrp0: entered allmulticast mode
[  441.135072][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'.
[  441.143209][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'.
[  441.152145][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'.
[  441.188874][T23945] veth0_to_team: left promiscuous mode
[  441.191110][T23945] veth0_to_team: left allmulticast mode
[  441.196290][T23945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  441.216834][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  441.235257][T23943] 8021q: adding VLAN 0 to HW filter on device bond108
[  441.239761][T23943] bond108: entered promiscuous mode
[  441.242122][T23943] bond108: entered allmulticast mode
[  441.244451][T23943] bond0: (slave bond108): Enslaving as an active interface with an up link
[  441.331790][T23959] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  441.422720][T23969] netlink: 'syz.2.4979': attribute type 8 has an invalid length.
[  441.482667][T23973] bridge79: entered allmulticast mode
[  441.798611][T23990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.900567][T24011] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  441.949033][T24018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  442.266851][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  442.354398][T24047] netlink: 'syz.2.4998': attribute type 9 has an invalid length.
[  442.529902][T24061] netlink: 'syz.2.5001': attribute type 1 has an invalid length.
[  442.536128][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.539524][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  442.542424][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.545196][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  442.547856][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.550574][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  442.563595][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.575548][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  442.628573][T24063] bridge80: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  442.649220][T24065] netlink: 'syz.0.5002': attribute type 1 has an invalid length.
[  442.653309][T24065] netlink: 'syz.0.5002': attribute type 1 has an invalid length.
[  442.703238][T24072] netlink: 'syz.0.5005': attribute type 30 has an invalid length.
[  442.877694][T24087] netlink: 'syz.2.5009': attribute type 10 has an invalid length.
[  442.932892][T24093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  443.006340][T24100] netlink: 'syz.2.5014': attribute type 1 has an invalid length.
[  443.054062][T24100] 8021q: adding VLAN 0 to HW filter on device bond109
[  443.084918][T24107] bond109: (slave gretap5): making interface the new active one
[  443.093209][T24107] bond109: (slave gretap5): Enslaving as an active interface with an up link
[  443.213678][T24112] netlink: 'syz.2.5018': attribute type 11 has an invalid length.
[  443.296826][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  443.313063][T24121] IPVS: Unknown mcast interface: bridge_slave_0
[  443.355571][T24125] pim6reg: entered allmulticast mode
[  443.359681][T24125] pim6reg: left allmulticast mode
[  443.463748][T24131] bond0: (slave bond111): Releasing backup interface
[  443.470682][T24130] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.336965][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  444.631258][T24179] netlink: 'syz.1.5034': attribute type 30 has an invalid length.
[  444.646741][T24178] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.704958][T24177] syzkaller0: entered promiscuous mode
[  444.707767][T24177] syzkaller0: entered allmulticast mode
[  445.275959][T24197] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[  445.376786][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  445.472863][T24210] __nla_validate_parse: 43 callbacks suppressed
[  445.472879][T24210] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5043'.
[  445.570192][T24214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5045'.
[  445.604655][T24214] bond117: entered promiscuous mode
[  445.607430][T24214] 8021q: adding VLAN 0 to HW filter on device bond117
[  445.807938][T24214] bond117 (unregistering): Released all slaves
[  445.830212][T24219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  446.087627][T24234] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  446.195600][T24243] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5051'.
[  446.229641][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5053'.
[  446.233882][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5053'.
[  446.244595][T24248] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  446.248919][T24248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.267381][T24250] netlink: 'syz.1.5052': attribute type 1 has an invalid length.
[  446.310780][T24250] 8021q: adding VLAN 0 to HW filter on device bond113
[  446.334523][T24250] bond113: (slave bridge82): making interface the new active one
[  446.337784][T24250] bond113: (slave bridge82): Enslaving as an active interface with an up link
[  446.348399][T24250] bond113: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  446.422167][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  446.451008][T24261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5056'.
[  446.502489][T24263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5057'.
[  446.963450][T24284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5062'.
[  447.017876][T24286] sit10: entered promiscuous mode
[  447.071013][T24288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5064'.
[  447.128295][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5065'.
[  447.273338][T24299] netlink: 'syz.2.5068': attribute type 1 has an invalid length.
[  447.316387][T24299] bond110: entered promiscuous mode
[  447.327377][T24299] bond110: entered allmulticast mode
[  447.342035][T24299] 8021q: adding VLAN 0 to HW filter on device bond110
[  447.375361][T24299] bridge0: entered promiscuous mode
[  447.382406][T24299] bridge0: entered allmulticast mode
[  447.385129][T24299] bond110: (slave bridge0): Enslaving as a backup interface with an up link
[  447.417039][ T5907] bond110: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  447.420836][T24299] tipc: Resetting bearer <eth:syzkaller0>
[  447.456815][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  447.476357][T24308] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  447.573993][T24313] netlink: 'syz.2.5071': attribute type 5 has an invalid length.
[  447.585515][T24313] geneve10: entered promiscuous mode
[  447.590418][T24313] geneve10: entered allmulticast mode
[  447.594644][ T7157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  447.599219][ T7157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  447.602385][ T7157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  447.605933][T24319] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  447.611255][T24319] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  447.623131][ T7157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  447.674237][T24323] netlink: 'syz.2.5074': attribute type 13 has an invalid length.
[  447.678697][T24323] 0{X: refused to change device tx_queue_len
[  447.681914][T24323] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  447.925672][ T7157] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.932790][ T7157] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.942396][ T7157] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  447.950407][T24342] netlink: 'syz.2.5079': attribute type 10 has an invalid length.
[  447.952252][ T7157] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  448.130137][T24356] netlink: 'syz.0.5082': attribute type 1 has an invalid length.
[  448.192940][T24360] batadv0: entered promiscuous mode
[  448.195078][T24360] batadv0: entered allmulticast mode
[  448.232567][T24359] netlink: 'syz.2.5083': attribute type 10 has an invalid length.
[  448.455861][T24367] syzkaller0: left promiscuous mode
[  448.458407][T24367] syzkaller0: left allmulticast mode
[  448.499187][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  448.563789][T24374] netlink: 'syz.2.5087': attribute type 1 has an invalid length.
[  448.634291][T24374] 8021q: adding VLAN 0 to HW filter on device bond111
[  448.684369][T24374] bond111: entered promiscuous mode
[  448.706780][T24379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.249915][T24410] netlink: 'syz.1.5096': attribute type 1 has an invalid length.
[  449.273436][T24410] bond114: (slave vxcan1): The slave device specified does not support setting the MAC address
[  449.281804][T24410] bond114: (slave vxcan1): Error -95 calling set_mac_address
[  449.540125][T24423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.547037][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  449.551912][T24422] netlink: 'syz.1.5099': attribute type 12 has an invalid length.
[  449.568463][T24423] netlink: 'syz.1.5099': attribute type 12 has an invalid length.
[  449.989923][T24452] vlan4: entered allmulticast mode
[  450.432834][T24475] bridge59: entered allmulticast mode
[  450.457319][T24473] macsec2: entered promiscuous mode
[  450.459001][T24473] ip6gretap0: entered promiscuous mode
[  450.460779][T24473] macsec2: entered allmulticast mode
[  450.462642][T24473] ip6gretap0: entered allmulticast mode
[  450.480134][T24478] bridge60: entered promiscuous mode
[  450.485604][T24478] bridge60: entered allmulticast mode
[  450.576888][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  450.814233][T24494] workqueue: Failed to create a rescuer kthread for wq "bond119": -EINTR
[  451.001625][T24509] bridge85: entered allmulticast mode
[  451.043115][T24511] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  451.232863][T24513] __nla_validate_parse: 30 callbacks suppressed
[  451.232878][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'.
[  451.240740][T24513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5120'.
[  451.350747][T24515] 8021q: adding VLAN 0 to HW filter on device bond30
[  451.364799][T24515] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  451.380699][T24515] bond30: (slave macvlan0): Enslaving as a backup interface with an up link
[  451.410421][T24515] bond107: (slave veth55): Releasing backup interface
[  451.420681][T24515] bond0: (slave bond108): Releasing backup interface
[  451.424281][T24515] bond108: left promiscuous mode
[  451.426002][T24515] bond108: left allmulticast mode
[  451.435145][T24515] bond109: (slave gretap5): Releasing active interface
[  451.455297][T24515] bond110: (slave bridge0): Removing an active aggregator
[  451.459161][ T5907] bond30: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  451.471760][T24515] bond110: (slave bridge0): Releasing backup interface
[  451.475338][T24515] bridge0: left promiscuous mode
[  451.480011][ T5907] bond30: (slave macvlan0): link status up again after 0 ms
[  451.484350][T24515] bridge0: left allmulticast mode
[  451.495047][T24515] bond30: (slave macvlan0): Removing an active aggregator
[  451.499624][ T5907] bond30: (slave macvlan0): link status up again after 0 ms
[  451.504197][T24515] bond30: (slave macvlan0): Releasing backup interface
[  451.599813][T24523] tipc: Resetting bearer <eth:syzkaller0>
[  451.611641][T24523] bridge50: left allmulticast mode
[  451.614224][T24523] bond0: left promiscuous mode
[  451.616046][T24523] bond0: left allmulticast mode
[  451.618234][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  451.621583][T24523] veth51: left promiscuous mode
[  451.626693][T24523] veth53: left promiscuous mode
[  451.628901][T24523] bridge53: left allmulticast mode
[  451.631831][T24523] bridge57: left allmulticast mode
[  451.633799][T24523] bond106: left promiscuous mode
[  451.635690][T24523] bond106: left allmulticast mode
[  451.638481][T24523] veth55: left promiscuous mode
[  451.641329][T24523] bond110: left promiscuous mode
[  451.643273][T24523] bond110: left allmulticast mode
[  451.647430][T24523] geneve10: left promiscuous mode
[  451.649294][T24523] geneve10: left allmulticast mode
[  451.655878][T24523] bond111: left promiscuous mode
[  451.658290][T24523] bridge59: left allmulticast mode
[  451.660262][T24523] bridge60: left promiscuous mode
[  451.662045][T24523] bridge60: left allmulticast mode
[  451.670575][ T5907] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  451.673674][ T5907] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  451.684603][ T5907] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  451.694233][ T5907] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  451.721586][T24527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5124'.
[  451.776422][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'.
[  451.796132][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5127'.
[  451.805074][T24532] geneve0: entered promiscuous mode
[  451.807088][T24532] geneve0: entered allmulticast mode
[  451.811817][ T5866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.847458][ T5866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.852213][ T5866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.855760][ T5866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.897282][T24544] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  451.961965][T24548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  451.966054][T24548] syzkaller0: entered promiscuous mode
[  451.968509][T24548] syzkaller0: entered allmulticast mode
[  452.145214][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'.
[  452.145610][T24566] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.237967][T24566] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.295176][T24566] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.354354][T24566] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.436160][ T5866] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.442133][ T5866] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.454039][ T5866] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.472664][ T5866] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.534181][T24576] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5138'.
[  452.603493][T24579] validate_nla: 3 callbacks suppressed
[  452.603509][T24579] netlink: 'syz.0.5138': attribute type 1 has an invalid length.
[  452.656898][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  452.769760][T24591] netlink: 'syz.1.5142': attribute type 1 has an invalid length.
[  452.851820][T24591] 8021q: adding VLAN 0 to HW filter on device bond115
[  452.898143][T24597] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5144'.
[  452.931266][T24592] bond115: (slave veth45): Enslaving as an active interface with a down link
[  452.939492][T24591] 8021q: adding VLAN 0 to HW filter on device batadv5
[  452.941991][T24591] bond115: (slave batadv5): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  453.147367][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5145'.
[  453.152909][T24608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.157512][T24608] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  453.160562][T24608] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  453.183006][T24610] 8021q: adding VLAN 0 to HW filter on device bond30
[  453.390044][T24621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5152'.
[  453.453034][T24624] IPv6: NLM_F_CREATE should be specified when creating new route
[  453.522060][T24624] netlink: 'syz.2.5152': attribute type 1 has an invalid length.
[  453.706942][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  453.839049][T24648] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.888613][T24651] netlink: 'syz.1.5159': attribute type 1 has an invalid length.
[  453.891912][T24651] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  454.038106][T24657] netlink: 'syz.0.5162': attribute type 1 has an invalid length.
[  454.187318][T24669] netlink: 'syz.0.5165': attribute type 13 has an invalid length.
[  454.192454][T24669] 1{X: refused to change device tx_queue_len
[  454.195166][T24669] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  454.411376][T24677] macvlan5: entered promiscuous mode
[  454.413555][T24677] bond0: entered promiscuous mode
[  454.713822][T24692] netlink: 'syz.0.5173': attribute type 1 has an invalid length.
[  454.730413][T24692] bond119: entered promiscuous mode
[  454.732328][T24692] 8021q: adding VLAN 0 to HW filter on device bond119
[  454.736764][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  454.766364][T24692] 8021q: adding VLAN 0 to HW filter on device bond119
[  454.770206][T24692] bond119: (slave wireguard6): The slave device specified does not support setting the MAC address
[  454.774684][T24692] bond119: (slave wireguard6): Setting fail_over_mac to active for active-backup mode
[  454.786273][T24692] bond119: (slave wireguard6): making interface the new active one
[  454.790322][T24692] wireguard6: entered promiscuous mode
[  454.794382][T24692] bond119: (slave wireguard6): Enslaving as an active interface with an up link
[  454.859756][T24695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.862762][T24695] IPv6: NLM_F_CREATE should be set when creating new route
[  454.865716][T24695] IPv6: NLM_F_CREATE should be set when creating new route
[  454.871005][T24695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.006123][T24699] syzkaller0: left promiscuous mode
[  455.009684][T24699] syzkaller0: left allmulticast mode
[  455.064124][T24713] bridge61: entered allmulticast mode
[  455.292298][T24732] netlink: 'syz.2.5182': attribute type 4 has an invalid length.
[  455.301513][T24733] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  455.304479][T24733] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  455.311919][T24733] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  455.343332][T24737] netlink: 'syz.2.5182': attribute type 4 has an invalid length.
[  455.347498][T24733] syz_tun: left allmulticast mode
[  455.350475][T24733] bridge73: left allmulticast mode
[  455.352690][T24733] veth1: left promiscuous mode
[  455.354429][T24733] vlan2: left allmulticast mode
[  455.356037][T24733] veth1: left allmulticast mode
[  455.359892][T24733] bond102: left promiscuous mode
[  455.364197][T24733] bond102: left allmulticast mode
[  455.365829][T24733] bridge76: left promiscuous mode
[  455.367497][T24733] bridge76: left allmulticast mode
[  455.369254][T24733] bond103: left promiscuous mode
[  455.371098][T24733] bond104: left promiscuous mode
[  455.373240][T24733] bridge77: left allmulticast mode
[  455.375250][T24733] geneve5: left promiscuous mode
[  455.380470][T24733] geneve5: left allmulticast mode
[  455.382348][T24733] bridge78: left allmulticast mode
[  455.384698][T24733] bridge79: left allmulticast mode
[  455.401261][T24733] sit10: left promiscuous mode
[  455.407139][T24733] ip6gretap0: left allmulticast mode
[  455.408943][T24733] ip6gretap0: left promiscuous mode
[  455.410673][T24733] macsec2: left promiscuous mode
[  455.412540][T24733] macsec2: left allmulticast mode
[  455.425971][ T7157] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.429050][ T7157] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.442999][ T7157] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.446368][ T7157] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.512721][T24745] bond113: (slave bridge82): Releasing active interface
[  455.520420][T24745] bond115: (slave veth45): Releasing active interface
[  455.584193][T24747] netlink: 'syz.2.5185': attribute type 11 has an invalid length.
[  455.632783][T24752] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  456.340907][T24790] x9: renamed from bridge_slave_0
[  456.343891][T24792] __nla_validate_parse: 40 callbacks suppressed
[  456.343908][T24792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5198'.
[  456.400546][T24795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  456.404168][T24795] syzkaller0: entered promiscuous mode
[  456.406327][T24795] syzkaller0: entered allmulticast mode
[  456.462001][T24799] vlan0: entered promiscuous mode
[  456.464094][T24799] bond18: entered promiscuous mode
[  456.732686][T24810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5205'.
[  456.745793][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5205'.
[  456.812846][T24818] syzkaller0: left allmulticast mode
[  456.816855][    C0] net_ratelimit: 2 callbacks suppressed
[  456.816873][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  457.146300][T24837] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5211'.
[  457.173951][T24840] 0{X: refused to change device tx_queue_len
[  457.182797][T24840] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  457.200289][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5213'.
[  457.233076][T24845] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5214'.
[  457.279478][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5215'.
[  457.332887][T24851] netlink: 788 bytes leftover after parsing attributes in process `syz.1.5217'.
[  457.372686][T24855] bridge86: entered allmulticast mode
[  457.433118][T24859] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  457.455324][T24859] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  457.603363][T24856] 8021q: adding VLAN 0 to HW filter on device bond112
[  457.613397][T24856] bond0: (slave bond112): Enslaving as an active interface with an up link
[  457.797988][T24872] validate_nla: 6 callbacks suppressed
[  457.798005][T24872] netlink: 'syz.0.5222': attribute type 1 has an invalid length.
[  457.834246][T24872] netlink: 'syz.0.5222': attribute type 1 has an invalid length.
[  457.840703][T24872] 8021q: adding VLAN 0 to HW filter on device bond121
[  457.856708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  458.017585][T24872] bond121 (unregistering): Released all slaves
[  458.034951][T24876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.039069][T24877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.323781][T24898] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5226'.
[  458.336438][T24891] netlink: 'syz.0.5226': attribute type 12 has an invalid length.
[  458.340608][T24891] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5226'.
[  458.592201][ T5907] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.595454][ T5907] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.599183][ T5907] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.602332][ T5907] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.619489][T24926] netlink: 'syz.2.5234': attribute type 1 has an invalid length.
[  458.898010][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  459.043271][T24931] netlink: 'syz.0.5236': attribute type 1 has an invalid length.
[  459.463980][   T55] Bluetooth: hci0: command tx timeout
[  459.786450][T24933] 8021q: adding VLAN 0 to HW filter on device bond113
[  459.824892][T24933] bridge0: port 1(bond113) entered blocking state
[  459.904652][T24933] bridge0: port 1(bond113) entered disabled state
[  459.932113][T24933] bond113: entered allmulticast mode
[  459.935231][T24933] bond113: entered promiscuous mode
[  459.939832][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  460.045028][T24938] 8021q: adding VLAN 0 to HW filter on device bond121
[  460.181491][    C1] ==================================================================
[  460.184754][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  460.187936][    C1] Read of size 2 at addr ffff888023f3182a by task syz-executor/5847
[  460.191694][    C1] 
[  460.192930][    C1] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  460.192944][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.192951][    C1] Call Trace:
[  460.192956][    C1]  <IRQ>
[  460.192961][    C1]  dump_stack_lvl+0x189/0x250
[  460.192975][    C1]  ? rcu_is_watching+0x15/0xb0
[  460.192986][    C1]  ? __kasan_check_byte+0x12/0x40
[  460.192998][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.193007][    C1]  ? rcu_is_watching+0x15/0xb0
[  460.193015][    C1]  ? lock_release+0x4b/0x3e0
[  460.193028][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  460.193039][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  460.193049][    C1]  print_report+0xca/0x240
[  460.193058][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  460.193069][    C1]  kasan_report+0x118/0x150
[  460.193080][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  460.193092][    C1]  rose_timer_expiry+0x471/0x4b0
[  460.193103][    C1]  call_timer_fn+0x17e/0x5f0
[  460.193114][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  460.193124][    C1]  ? call_timer_fn+0xbe/0x5f0
[  460.193135][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  460.193148][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.193160][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.193171][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  460.193181][    C1]  __run_timer_base+0x61a/0x860
[  460.193192][    C1]  ? ktime_get+0x3e/0x1f0
[  460.193203][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  460.193213][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  460.193226][    C1]  run_timer_softirq+0xb7/0x180
[  460.193237][    C1]  handle_softirqs+0x286/0x870
[  460.193247][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  460.193256][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  460.193265][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  460.193277][    C1]  __irq_exit_rcu+0xca/0x1f0
[  460.193284][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  460.193294][    C1]  irq_exit_rcu+0x9/0x30
[  460.193302][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  460.193312][    C1]  </IRQ>
[  460.193316][    C1]  <TASK>
[  460.193319][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.193329][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  460.193341][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f c7 ea 09 e8 3a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  460.193349][    C1] RSP: 0018:ffffc9000351f938 EFLAGS: 00000282
[  460.193358][    C1] RAX: 57d912787d34ef00 RBX: 0000000000000000 RCX: 57d912787d34ef00
[  460.193365][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b6a2c RDI: ffffffff8be33300
[  460.193371][    C1] RBP: ffffc9000351f990 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  460.193378][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888106091cc0
[  460.193384][    C1] R13: dffffc0000000000 R14: ffff888021e09cc0 R15: ffff88813663ab58
[  460.193395][    C1]  ? finish_task_switch+0x266/0x950
[  460.193407][    C1]  __schedule+0x17a0/0x4cc0
[  460.193419][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  460.193429][    C1]  ? ktime_get+0x3e/0x1f0
[  460.193444][    C1]  ? __lock_acquire+0xab9/0xd20
[  460.193455][    C1]  ? __pfx___schedule+0x10/0x10
[  460.193468][    C1]  ? schedule+0x91/0x360
[  460.193478][    C1]  schedule+0x165/0x360
[  460.193488][    C1]  do_nanosleep+0x1c7/0x600
[  460.193498][    C1]  ? do_nanosleep+0x7f/0x600
[  460.193522][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  460.193532][    C1]  ? __hrtimer_setup+0x187/0x210
[  460.193540][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  460.193549][    C1]  hrtimer_nanosleep+0x169/0x360
[  460.193558][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  460.193567][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  460.193593][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  460.193606][    C1]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  460.193620][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  460.193633][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  460.193645][    C1]  ? rcu_is_watching+0x15/0xb0
[  460.193654][    C1]  ? do_syscall_64+0xbe/0x3b0
[  460.193666][    C1]  do_syscall_64+0xfa/0x3b0
[  460.193677][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.193688][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.193696][    C1]  ? exc_page_fault+0x9f/0xf0
[  460.193706][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.193714][    C1] RIP: 0033:0x7f5cf2dc14a5
[  460.193723][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  460.193731][    C1] RSP: 002b:00007ffd0f903420 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  460.193740][    C1] RAX: ffffffffffffffda RBX: 00000000000013d9 RCX: 00007f5cf2dc14a5
[  460.193746][    C1] RDX: 00007ffd0f903460 RSI: 0000000000000000 RDI: 0000000000000000
[  460.193752][    C1] RBP: 00007ffd0f9034cc R08: 0000000000000000 R09: 0000000000000000
[  460.193757][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  460.193763][    C1] R13: 00000000000927c0 R14: 00000000000704f1 R15: 00007ffd0f903520
[  460.193772][    C1]  </TASK>
[  460.193775][    C1] 
[  460.385883][    C1] Allocated by task 24618:
[  460.387696][    C1]  kasan_save_track+0x3e/0x80
[  460.389588][    C1]  __kasan_kmalloc+0x93/0xb0
[  460.391452][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  460.393257][    C1]  __ipv6_dev_mc_inc+0x44f/0xa50
[  460.394748][    C1]  ipv6_add_dev+0xe54/0x1370
[  460.396201][    C1]  addrconf_notify+0x794/0x1010
[  460.398070][    C1]  notifier_call_chain+0x1b6/0x3e0
[  460.400030][    C1]  register_netdevice+0x1608/0x1ae0
[  460.402125][    C1]  tun_set_iff+0x844/0xef0
[  460.404086][    C1]  __tun_chr_ioctl+0x788/0x1df0
[  460.406055][    C1]  __se_sys_ioctl+0xfc/0x170
[  460.408075][    C1]  do_syscall_64+0xfa/0x3b0
[  460.410067][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.412647][    C1] 
[  460.413738][    C1] Freed by task 469:
[  460.415427][    C1]  kasan_save_track+0x3e/0x80
[  460.417440][    C1]  kasan_save_free_info+0x46/0x50
[  460.419636][    C1]  __kasan_slab_free+0x5b/0x80
[  460.421727][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  460.423868][    C1]  kvfree_rcu_bulk+0xe5/0x1f0
[  460.425527][    C1]  kfree_rcu_monitor+0x211/0x2a0
[  460.427634][    C1]  process_scheduled_works+0xae1/0x17b0
[  460.430023][    C1]  worker_thread+0x8a0/0xda0
[  460.431859][    C1]  kthread+0x711/0x8a0
[  460.433453][    C1]  ret_from_fork+0x3fc/0x770
[  460.435250][    C1]  ret_from_fork_asm+0x1a/0x30
[  460.437112][    C1] 
[  460.438235][    C1] Last potentially related work creation:
[  460.440481][    C1]  kasan_save_stack+0x3e/0x60
[  460.442371][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  460.444398][    C1]  kvfree_call_rcu+0xbb/0x410
[  460.446197][    C1]  ipv6_mc_destroy_dev+0x3c5/0x5a0
[  460.447838][    C1]  addrconf_ifdown+0x139e/0x1880
[  460.449731][    C1]  addrconf_notify+0x1bc/0x1010
[  460.451680][    C1]  notifier_call_chain+0x1b6/0x3e0
[  460.453729][    C1]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  460.456301][    C1]  unregister_netdevice_queue+0x33c/0x380
[  460.458607][    C1]  __tun_detach+0xda4/0x1560
[  460.460485][    C1]  tun_chr_close+0x10a/0x1c0
[  460.462360][    C1]  __fput+0x44c/0xa70
[  460.463973][    C1]  task_work_run+0x1d4/0x260
[  460.465842][    C1]  exit_to_user_mode_loop+0xec/0x110
[  460.467993][    C1]  do_syscall_64+0x2bd/0x3b0
[  460.469864][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.472241][    C1] 
[  460.473213][    C1] The buggy address belongs to the object at ffff888023f31800
[  460.473213][    C1]  which belongs to the cache kmalloc-512 of size 512
[  460.478698][    C1] The buggy address is located 42 bytes inside of
[  460.478698][    C1]  freed 512-byte region [ffff888023f31800, ffff888023f31a00)
[  460.484068][    C1] 
[  460.485052][    C1] The buggy address belongs to the physical page:
[  460.487585][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23f30
[  460.491019][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  460.494336][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  460.497354][    C1] page_type: f5(slab)
[  460.498999][    C1] raw: 00fff00000000040 ffff88801a441c80 ffffea0000a76600 dead000000000002
[  460.502410][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  460.505846][    C1] head: 00fff00000000040 ffff88801a441c80 ffffea0000a76600 dead000000000002
[  460.509300][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  460.512766][    C1] head: 00fff00000000002 ffffea00008fcc01 00000000ffffffff 00000000ffffffff
[  460.516229][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  460.519676][    C1] page dumped because: kasan: bad access detected
[  460.522251][    C1] page_owner tracks the page as allocated
[  460.524514][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9710, tgid 9709 (syz.2.1023), ts 167489560578, free_ts 152337514899
[  460.532845][    C1]  post_alloc_hook+0x240/0x2a0
[  460.534823][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  460.537051][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  460.539398][    C1]  alloc_pages_mpol+0x232/0x4a0
[  460.541370][    C1]  allocate_slab+0x8a/0x370
[  460.542930][    C1]  ___slab_alloc+0xbeb/0x1410
[  460.544683][    C1]  __kmalloc_cache_noprof+0x296/0x3d0
[  460.546838][    C1]  __genradix_ptr_alloc+0x352/0x4a0
[  460.548925][    C1]  __genradix_prealloc+0x44/0x90
[  460.550859][    C1]  sctp_stream_init+0x14b/0x440
[  460.552783][    C1]  sctp_association_new+0x10dd/0x25f0
[  460.554803][    C1]  sctp_connect_new_asoc+0x2c5/0x690
[  460.556923][    C1]  sctp_sendmsg+0x155c/0x2810
[  460.558835][    C1]  __sock_sendmsg+0x19c/0x270
[  460.560749][    C1]  __sys_sendto+0x3bd/0x520
[  460.562616][    C1]  __x64_sys_sendto+0xde/0x100
[  460.564470][    C1] page last free pid 55 tgid 55 stack trace:
[  460.566831][    C1]  __free_frozen_pages+0xbc4/0xd30
[  460.568907][    C1]  __tlb_remove_table+0x2d2/0x3b0
[  460.570951][    C1]  tlb_remove_table_rcu+0x85/0x100
[  460.573006][    C1]  rcu_core+0xcab/0x1770
[  460.574730][    C1]  handle_softirqs+0x286/0x870
[  460.576578][    C1]  do_softirq+0xec/0x180
[  460.578259][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  460.580339][    C1]  rxrpc_peer_keepalive_worker+0x45a/0xde0
[  460.582619][    C1]  process_scheduled_works+0xae1/0x17b0
[  460.584861][    C1]  worker_thread+0x8a0/0xda0
[  460.586714][    C1]  kthread+0x711/0x8a0
[  460.588364][    C1]  ret_from_fork+0x3fc/0x770
[  460.590229][    C1]  ret_from_fork_asm+0x1a/0x30
[  460.592176][    C1] 
[  460.593167][    C1] Memory state around the buggy address:
[  460.595305][    C1]  ffff888023f31700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  460.598442][    C1]  ffff888023f31780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  460.601651][    C1] >ffff888023f31800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.604768][    C1]                                   ^
[  460.606830][    C1]  ffff888023f31880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.609970][    C1]  ffff888023f31900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.613109][    C1] ==================================================================
[  460.621693][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  460.624638][    C1] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  460.628425][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.632355][    C1] Call Trace:
[  460.633734][    C1]  <IRQ>
[  460.634923][    C1]  dump_stack_lvl+0x99/0x250
[  460.636585][    C1]  ? __asan_memcpy+0x40/0x70
[  460.638189][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.640214][    C1]  ? __pfx__printk+0x10/0x10
[  460.642054][    C1]  vpanic+0x281/0x750
[  460.643625][    C1]  ? __pfx_vpanic+0x10/0x10
[  460.645353][    C1]  ? irqentry_exit+0x74/0x90
[  460.647231][    C1]  panic+0xb9/0xc0
[  460.648759][    C1]  ? __pfx_panic+0x10/0x10
[  460.650571][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  460.652944][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  460.655362][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  460.657364][    C1]  check_panic_on_warn+0x89/0xb0
[  460.659360][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  460.661406][    C1]  end_report+0x78/0x160
[  460.663146][    C1]  kasan_report+0x129/0x150
[  460.664989][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  460.667065][    C1]  rose_timer_expiry+0x471/0x4b0
[  460.669037][    C1]  call_timer_fn+0x17e/0x5f0
[  460.670880][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  460.673003][    C1]  ? call_timer_fn+0xbe/0x5f0
[  460.674939][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  460.676983][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.678978][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.681051][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  460.683171][    C1]  __run_timer_base+0x61a/0x860
[  460.685056][    C1]  ? ktime_get+0x3e/0x1f0
[  460.686792][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  460.688938][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  460.691112][    C1]  run_timer_softirq+0xb7/0x180
[  460.693038][    C1]  handle_softirqs+0x286/0x870
[  460.694889][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  460.696839][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  460.698955][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  460.701051][    C1]  __irq_exit_rcu+0xca/0x1f0
[  460.702942][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  460.705040][    C1]  irq_exit_rcu+0x9/0x30
[  460.706753][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  460.709006][    C1]  </IRQ>
[  460.710216][    C1]  <TASK>
[  460.711422][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.713848][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  460.716191][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 2f c7 ea 09 e8 3a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  460.723850][    C1] RSP: 0018:ffffc9000351f938 EFLAGS: 00000282
[  460.726294][    C1] RAX: 57d912787d34ef00 RBX: 0000000000000000 RCX: 57d912787d34ef00
[  460.729444][    C1] RDX: 0000000000000000 RSI: ffffffff8d9b6a2c RDI: ffffffff8be33300
[  460.732614][    C1] RBP: ffffc9000351f990 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  460.735788][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888106091cc0
[  460.738963][    C1] R13: dffffc0000000000 R14: ffff888021e09cc0 R15: ffff88813663ab58
[  460.742114][    C1]  ? finish_task_switch+0x266/0x950
[  460.744242][    C1]  __schedule+0x17a0/0x4cc0
[  460.746097][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  460.748679][    C1]  ? ktime_get+0x3e/0x1f0
[  460.750337][    C1]  ? __lock_acquire+0xab9/0xd20
[  460.752280][    C1]  ? __pfx___schedule+0x10/0x10
[  460.754269][    C1]  ? schedule+0x91/0x360
[  460.756015][    C1]  schedule+0x165/0x360
[  460.757728][    C1]  do_nanosleep+0x1c7/0x600
[  460.759569][    C1]  ? do_nanosleep+0x7f/0x600
[  460.761399][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  460.763468][    C1]  ? __hrtimer_setup+0x187/0x210
[  460.765457][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  460.767557][    C1]  hrtimer_nanosleep+0x169/0x360
[  460.769562][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  460.771734][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  460.773819][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  460.775882][    C1]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  460.778297][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  460.780555][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  460.783005][    C1]  ? rcu_is_watching+0x15/0xb0
[  460.784945][    C1]  ? do_syscall_64+0xbe/0x3b0
[  460.786863][    C1]  do_syscall_64+0xfa/0x3b0
[  460.788715][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.790826][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.793262][    C1]  ? exc_page_fault+0x9f/0xf0
[  460.795158][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.797555][    C1] RIP: 0033:0x7f5cf2dc14a5
[  460.799340][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  460.807043][    C1] RSP: 002b:00007ffd0f903420 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  460.810482][    C1] RAX: ffffffffffffffda RBX: 00000000000013d9 RCX: 00007f5cf2dc14a5
[  460.813473][    C1] RDX: 00007ffd0f903460 RSI: 0000000000000000 RDI: 0000000000000000
[  460.816010][    C1] RBP: 00007ffd0f9034cc R08: 0000000000000000 R09: 0000000000000000
[  460.818468][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  460.821152][    C1] R13: 00000000000927c0 R14: 00000000000704f1 R15: 00007ffd0f903520
[  460.824116][    C1]  </TASK>
[  460.825763][    C1] Kernel Offset: disabled
[  460.827132][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:04:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b032f98 RCX=353f5e031e79ab00 RDX=0000000000000000
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=ffffffff81cb7f51 RSP=ffffc90000137620
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000137740 R11=fffff52000026eea
R12=0000000000000002 R13=ffffffff8e139ea0 R14=ffffffff8dbded10 R15=dffffc0000000000
RIP=ffffffff81a65e7a RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31924220 CR3=000000002307e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f176d612e53
XMM06=0000000000000000 00007f176d612e4d XMM07=0000000000000000 00007f176d612e61
XMM08=0000000000000000 00007f176d612ee7 XMM09=0000000000000000 00007f176d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888107878237 R9 =1ffff11020f0f046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98cb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555582d0a500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d5cb5 CR3=000000010f2f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdea8a12e53
XMM06=0000000000000000 00007fdea8a12e4d XMM07=0000000000000000 00007fdea8a12e61
XMM08=0000000000000000 00007fdea8a12ee7 XMM09=0000000000000000 00007fdea8a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
