last executing test programs:

1m57.148068857s ago: executing program 1 (id=727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1, 0x0, 0x0, 0x801}, 0x300)

1m56.805100604s ago: executing program 1 (id=732):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008050)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x745)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000040), 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000080))
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16=r9], 0x44}}, 0x40011)

1m56.68736586s ago: executing program 1 (id=733):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r1=>0xffffffffffffffff}, 0xfffffffffffffd2f)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2, r1}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff)
unshare(0x24020400)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, 0x0, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x64, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '*\xc2}{'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'syzkaller\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'syzkaller\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '@##.'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '.'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, ',&'}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x800)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f00000000c0)={0x52})

1m55.82613616s ago: executing program 1 (id=739):
r0 = socket$kcm(0x2, 0x5, 0x2)
socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}})

1m55.680695242s ago: executing program 1 (id=742):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4008054)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_deladdr={0x0, 0x15, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x38, 0xac, 0xfe, r4}, [@IFA_TARGET_NETNSID={0x0, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_CACHEINFO={0x0, 0x6, {0xd, 0x11, 0xfffffff7, 0x7}}, @IFA_RT_PRIORITY={0x0, 0x9, 0x1}, @IFA_LOCAL={0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @IFA_FLAGS={0x0, 0x8, 0x420}, @IFA_LOCAL={0x0, 0x2, @private0}]}, 0xfffffffffffffed8}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

1m55.507393789s ago: executing program 1 (id=745):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002600)=0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502102000000000000000000005001b000600000008000400", @ANYRES32=0x0, @ANYBLOB="7856044318c6da0f6dad20b7f5acd2a7d73d"], 0x2c}}, 0x20004000)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4008081)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x7, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002600)=0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502102000000000000000000005001b000600000008000400", @ANYRES32=0x0, @ANYBLOB="7856044318c6da0f6dad20b7f5acd2a7d73d"], 0x2c}}, 0x20004000) (async)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4008081) (async)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x7, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

1m40.304872772s ago: executing program 32 (id=745):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002600)=0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502102000000000000000000005001b000600000008000400", @ANYRES32=0x0, @ANYBLOB="7856044318c6da0f6dad20b7f5acd2a7d73d"], 0x2c}}, 0x20004000)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4008081)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x7, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002600)=0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async)
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000fedbdf2502102000000000000000000005001b000600000008000400", @ANYRES32=0x0, @ANYBLOB="7856044318c6da0f6dad20b7f5acd2a7d73d"], 0x2c}}, 0x20004000) (async)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4008081) (async)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x7, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

1.570703973s ago: executing program 2 (id=2124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r5, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r2, 0x0, 0x0, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010026bd700000000000a197"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.385626134s ago: executing program 0 (id=2126):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async)
unshare(0x42040000) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) (async)
r4 = socket(0x15, 0x3, 0xa052)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c010000100013072dbd700000000000ffffffff0000000000000000000000007f00000100000cadce5d00000000000000000007001b82000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000feffffffffffffff07000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff000000000000000000000000000000000800000000000000000000000a00000000000000000000004c001400686d6163286d643529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
unshare(0x22020600)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) (async)
setsockopt$sock_attach_bpf(r8, 0x107, 0x17, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
ioctl$int_in(r1, 0x5421, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa6280"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='scmi_xfer_response_wait\x00'}, 0x18) (rerun: 32)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1.065171007s ago: executing program 3 (id=2128):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, 0xffffffffffffffff, 0x7f, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

874.712727ms ago: executing program 3 (id=2129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r7, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r11, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000024c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x1, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffeb}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x8000010)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

872.514895ms ago: executing program 3 (id=2130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000065f40cf273caf534767da51a9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x14, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)
ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@default, @bcast, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]})
r3 = socket$netlink(0x10, 0x3, 0x2d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r4, 0x0, 0x2b)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6gre0\x00'})
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100", @ANYRES32=0x0, @ANYBLOB="0c774621dfac6e15c6e21655057e05a09d043548fee7a049d97d30b51858710f431db4e335fc18f03b7a7220cd6d2430db5809eba5d98bb01ac0b9040699b2e57e161ba8d2c5f6323e2f4e48e13e26b66ee252cfa34f656452dce8e8b13647554d43d2fc3847bf23780f219752a9c37ae97562f86982fab075acbb361a7f58f79e37b39f90fe1d8a01cf"], 0x1c}}, 0x800)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@ipv4_getnetconf={0xffffffffffffffc4, 0x52, 0x400, 0x70bd2f, 0x25dfdbfb}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4041)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000400)=0x1, 0x4)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0)

636.430636ms ago: executing program 2 (id=2131):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009) (async)
accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 32)
connect$l2tp6(r1, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

566.002992ms ago: executing program 3 (id=2132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
bind$inet6(r1, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x49ca, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000080)="40e8bc6e5d5f27e98a050c12e4ae36944399", 0x12)
recvmmsg(r1, &(0x7f0000000080), 0x5e2, 0x2001, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000000000200000000001d00", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c000580080025000a000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000014)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'veth1_to_bond\x00'}, 0x4})

505.543298ms ago: executing program 0 (id=2133):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x41448000)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r2=>0x0, 0x5}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x2, 0x0, 0x5, 0x1, 0x2}, &(0x7f0000000100)=0x14)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

504.844773ms ago: executing program 2 (id=2134):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xf}]}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x400)
unshare(0x6a040000)
socket(0x2, 0x3, 0xff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3a1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0xc}, 0x1c)
socket$inet(0x2, 0x1, 0x100)
listen(r2, 0xfffefffd)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

434.03861ms ago: executing program 0 (id=2135):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200007700a48900000000efffffff850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003f000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xfe2b, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESOCT=r5, @ANYRESOCT=r7], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x20044080)

386.003649ms ago: executing program 0 (id=2136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000010000100fdff00000000001a0000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002320000c800e000100636f6e6e6c696d69740000000c0002800800014000000000140000001000010000000000000000000000000ab0e5092e7c14a724f5425a71f4ded9f11918771b39f2c407b929120aec2ea000eea396b6fe7153b6be9026a8d807555227a26de747aaf6d5c00b07571016f2d588716e8a27c2e5501e51266e7124404f7d1d34a09001e909b2ada388a73aa09099e9fc1e2527db87c56662abe58b87b0e094816cfdf6e3b2b5aee0df2f99e3f7c0978f6a6e0d77c4f000359c048f9bc675cdc0c7e7003383cacf33610970191191dc2e367cad216308e45030717d5a395374bc201af1978a045e5db9e9d7f7787e4009b5d21023610aa1473f3d9d9e9c6382ce4a9daac0da545403083dbe816729ef239249f9d3676816b8811b6e656e1675ff9c893421589c"], 0xa4}}, 0x4)

276.205232ms ago: executing program 0 (id=2137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r7, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r11, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000024c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x1, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffeb}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x8000010)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

204.815598ms ago: executing program 0 (id=2138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x1, 0xb0e6, 0xfffffffe, 0x0, 0x0, 0x7, 0x8094, 0x445}})
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x1, 0xb0e6, 0xfffffffe, 0x0, 0x0, 0x7, 0x8094, 0x445}}) (async)

204.099327ms ago: executing program 3 (id=2139):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, 0xffffffffffffffff, 0x7f, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

203.765765ms ago: executing program 2 (id=2140):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$l2tp6(0xa, 0x2, 0x73)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$netlink(0x10, 0x3, 0xb)
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14)

86.088128ms ago: executing program 2 (id=2141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0a00ff0000000071108b000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)

64.908124ms ago: executing program 2 (id=2142):
socket(0x8, 0x3, 0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (rerun: 64)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000180)=0x5, 0x4) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60) (async, rerun: 32)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0xfff}, 0x4}) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
close(r0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x3ff, {{0xb, 0x4, 0x1, 0x1b, 0x2c, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x83, 0x3, 'x'}, @timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x7, [{@loopback}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x11}]}]}}}}}) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) (async)
accept4(r6, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7}], 0x1) (async)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000440)={r9, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

0s ago: executing program 3 (id=2143):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1ff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x93f6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x44c, 0x3f3, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x1, 0x27, [0x2, 0x0, 0x46e8, 0xe, 0x2, 0x3531, 0x14, 0x8, 0x9, 0x7, 0x518e, 0x2, 0x3ff, 0x2, 0x7, 0x0, 0xfffffffa, 0x8, 0x3, 0x3, 0xdc, 0xd0000000, 0x5, 0x4, 0x2, 0xb, 0xa, 0x6, 0x7, 0x81, 0x1, 0x0, 0x9, 0xfff, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x2, 0x8, 0x9, 0x8, 0x2a7b1904, 0x1, 0x1, 0x3, 0x8, 0x7ff, 0x4, 0x81, 0x10001, 0x1, 0x0, 0x3, 0xffffffff, 0x3, 0x9b5, 0xecd, 0xce8a, 0x4, 0x0, 0x1ff], [0x0, 0x101, 0x9, 0x17, 0x1, 0x3, 0x10001, 0x6, 0x9, 0x7, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x4, 0x5, 0x9, 0x7, 0x1ff, 0x3, 0x4, 0x0, 0x100, 0x1000, 0xfd1, 0x3, 0x7fffffff, 0x6, 0x200, 0x4, 0x0, 0x8, 0x8, 0x8, 0x8000, 0x1, 0x6, 0x3, 0x7ff, 0x8, 0x81, 0xc, 0xffff, 0x9, 0x0, 0xfffffffe, 0x7, 0x7, 0x3, 0x6, 0x0, 0xbc44, 0x0, 0x2, 0x1, 0x800000, 0x5, 0x8, 0x1, 0xad, 0x3, 0x200, 0x6], [0x3, 0xffff, 0x80, 0x9, 0x1, 0x0, 0xf, 0x3, 0x88b, 0x3, 0x2, 0x4, 0x8, 0x7ff, 0x3, 0x5, 0x7, 0x4, 0x3, 0x1, 0x8, 0x6, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x9, 0x55b0000, 0x3, 0x5, 0x10000, 0x0, 0x2, 0x7f, 0x9, 0x8, 0xb7b, 0x200, 0xcc58, 0x762, 0xee66, 0x4, 0x7, 0x1, 0xb, 0x2, 0x1, 0x1, 0x7, 0x200, 0xfffffff9, 0xfffffffe, 0x1, 0x112, 0x8, 0x0, 0x1, 0x4, 0x81, 0x3, 0xffffffff, 0x8, 0xc1], [0x4, 0x6, 0x1200, 0x99c3, 0x0, 0x81, 0x9a, 0x6, 0x0, 0x50c3, 0x6, 0x8, 0xfffffff8, 0xb, 0xffffffff, 0x1, 0x1, 0x4, 0xe, 0x904c, 0xff0, 0x2, 0x2, 0x9, 0x6, 0x1, 0x0, 0x2, 0x7, 0x7, 0x2, 0x8, 0x247, 0x8, 0x5, 0x6, 0xdc4f, 0x51a, 0xfffffff7, 0x8, 0x0, 0x9, 0x35c, 0x8000, 0x4, 0xffffffff, 0xffffff00, 0xb, 0x40, 0x3, 0xfa3, 0x6, 0x7f, 0x9, 0x800, 0x7fffffff, 0x0, 0x659, 0x7, 0x400, 0xffff, 0x3, 0x10, 0x2d3], 0x29, ['l2tp\x00', 'l2tp\x00', 'l2tp\x00', '^,!+#\x1d\x00', '*)\xe1\x00', 'l2tp\x00', 'l2tp\x00', 'l2tp\x00']}, ["", "", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={@loopback, 0x1, 0x0, 0x50, 0x0, [{@empty}, {@loopback}, {}, {@dev}, {@multicast2}]}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4800040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x30e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc8a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1334}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x794}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1229}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x8, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x3}, 0x2b, 0x5, 0xa, 0x0, 0x1a, 'syz1\x00', "428a436c79c868f18add1500eb45ea7342dc6b03e6a828f97ae56681940f784a", "1c9eecaefe90cc943072862b4bed2c011e7b49a6819b29fca98123c1044a4203", [{0x1, 0xd4b, {0x2}}, {0x2, 0x7ff, {0x0, 0xffffff02}}, {0x3, 0x2, {0x0, 0x28000000}}, {0x1000, 0x7, {0x1}}, {0x7, 0x1ff, {0x3, 0x838e}}, {0x5, 0x2, {0x3, 0x85e0}}, {0x9, 0x8, {0x3, 0x1}}, {0x5, 0x8, {0x2, 0x8}}, {0x4, 0x5c, {0x1, 0x2}}, {0x9, 0x0, {0x1, 0xffff}}, {0x7, 0xba75, {0x1, 0x60000}}, {0x7ff, 0x9, {0x2, 0x10000}}, {0x5, 0x8, {0x2, 0x8}}, {0x2, 0x3, {0x1, 0x3}}, {0x6, 0x880, {0x3, 0x7f}}, {0x9, 0x1, {0x2}}, {0x100, 0x0, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x5}}, {0x1, 0x5, {0x3, 0x7}}, {0x3, 0x5, {0x1, 0x7}}, {0xfffd, 0x4, {0x1, 0x8000}}, {0x9, 0x5, {0x2, 0x58}}, {0x80, 0xff, {0x1, 0x7}}, {0x2, 0xa, {0x1}}, {0x7f, 0x1000, {0x1, 0x7}}, {0xe7, 0xabb, {0x3, 0xd26}}, {0x9, 0x7, {0x3, 0xb20}}, {0x800, 0x1, {0x3, 0x5}}, {0x3, 0x200, {0x3, 0x2}}, {0x2e, 0x4, {0x3, 0x6}}, {0x6, 0x7, {0x0, 0x3}}, {0x3, 0x2, {0x2, 0x2}}, {0x3, 0x9, {0x2, 0x1}}, {0x6845, 0xb, {0x2, 0x1c9a4957}}, {0xbc, 0x533e, {0x1, 0x2}}, {0x7fff, 0x1, {0x1, 0x622a}}, {0x8, 0x91, {0x0, 0xfffffffa}}, {0x2, 0x1, {0x1, 0xce}}, {0x6, 0x60, {0x1, 0x1}}, {0x20, 0x4, {0x3, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
sendfile(r4, r4, 0x0, 0x8000000000000)
r5 = socket(0x11, 0xa, 0x7fffffff)
ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000d80)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e40), r5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e80)={'gretap0\x00', <r8=>0x0, 0x10, 0x7800, 0xb, 0xfff, {{0x7, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x7, 0x57, [@broadcast]}]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x95}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x74}, 0x1, 0x0, 0x0, 0x48851}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8001, 0xb}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8051)
r9 = socket$inet(0x2, 0x6, 0x3)
r10 = accept4(r9, &(0x7f0000001100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000001180)=0x80, 0x80000)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r5)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001300)={&(0x7f00000011c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x94}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x12, r2, 0xc8930000)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x14, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='GPL\x00', 0xc467, 0x1000, &(0x7f0000001440)=""/4096, 0x41000, 0x11, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002480)={0x2, 0x9, 0x6, 0xdfb}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000024c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000002500)=[{0x2, 0x4, 0xa, 0x9}], 0x10, 0x8}, 0x94)
poll(&(0x7f0000002600)=[{r4, 0x4}, {r9, 0x4080}, {r12, 0x9020}, {r13}, {r5, 0x1200}], 0x5, 0x10001)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000026c0)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000002800)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000027c0)={&(0x7f0000002700)={0x8c, r14, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x40, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x7, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0xf, 0x5}, {0x5, 0x1}, {0xf, 0x7}, {0xa, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x9}, {0x3, 0x5}, {0xb, 0x5}, {0x4, 0x1}, {0x6, 0x1}, {0xd9, 0x7}, {0x0, 0x4}, {0xdf, 0x5}, {0x8}, {0x2, 0x1}], "fba761b80dd4115c"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x3}, {0x7f, 0x5}, {0x2, 0x5}, {0x6}, {0x6, 0x4}, {0x7}, {0x5, 0x5}, {0xb, 0x1}, {0x30, 0x5}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x84, 0x2}, {0xb}], "46ee32c978a0c5a8"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c814)

kernel console output (not intermixed with test programs):

413]  ? ieee80211_register_hw+0x14c1/0x4100
[  149.824481][ T9413]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  149.824504][ T9413]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.824526][ T9413]  ? __hrtimer_setup+0x187/0x210
[  149.824540][ T9413]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  149.824566][ T9413]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  149.824623][ T9413]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  149.824644][ T9413]  ? trace_kmalloc+0x1f/0xd0
[  149.824663][ T9413]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  149.824685][ T9413]  ? kstrndup+0xbf/0x160
[  149.824710][ T9413]  hwsim_new_radio_nl+0xea4/0x1b10
[  149.824732][ T9413]  ? __pfx___nla_validate_parse+0x10/0x10
[  149.824767][ T9413]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.824798][ T9413]  ? __nla_parse+0x40/0x60
[  149.824814][ T9413]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  149.824843][ T9413]  genl_family_rcv_msg_doit+0x215/0x300
[  149.824868][ T9413]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  149.824898][ T9413]  ? bpf_lsm_capable+0x9/0x20
[  149.824916][ T9413]  ? security_capable+0x7e/0x2e0
[  149.824943][ T9413]  genl_rcv_msg+0x60e/0x790
[  149.825000][ T9413]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.825020][ T9413]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.825054][ T9413]  netlink_rcv_skb+0x208/0x470
[  149.825086][ T9413]  ? __lock_acquire+0xab9/0xd20
[  149.825110][ T9413]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.825131][ T9413]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  149.825163][ T9413]  ? down_read+0x1ad/0x2e0
[  149.825183][ T9413]  genl_rcv+0x28/0x40
[  149.825200][ T9413]  netlink_unicast+0x82f/0x9e0
[  149.825230][ T9413]  ? __pfx_netlink_unicast+0x10/0x10
[  149.825254][ T9413]  ? netlink_sendmsg+0x642/0xb30
[  149.825267][ T9413]  ? skb_put+0x11b/0x210
[  149.825285][ T9413]  netlink_sendmsg+0x805/0xb30
[  149.825309][ T9413]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.825327][ T9413]  ? aa_sock_msg_perm+0xf1/0x1d0
[  149.825343][ T9413]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.825359][ T9413]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.825374][ T9413]  __sock_sendmsg+0x21c/0x270
[  149.825399][ T9413]  ____sys_sendmsg+0x505/0x830
[  149.825422][ T9413]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.825447][ T9413]  ? import_iovec+0x74/0xa0
[  149.825467][ T9413]  ___sys_sendmsg+0x21f/0x2a0
[  149.825487][ T9413]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.825537][ T9413]  ? __fget_files+0x2a/0x420
[  149.825549][ T9413]  ? __fget_files+0x3a0/0x420
[  149.825570][ T9413]  __x64_sys_sendmsg+0x19b/0x260
[  149.825591][ T9413]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.825624][ T9413]  ? rcu_is_watching+0x15/0xb0
[  149.825644][ T9413]  ? do_syscall_64+0xbe/0x3b0
[  149.825665][ T9413]  do_syscall_64+0xfa/0x3b0
[  149.825681][ T9413]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.825696][ T9413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.825710][ T9413]  ? exc_page_fault+0x9f/0xf0
[  149.825727][ T9413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.825741][ T9413] RIP: 0033:0x7f1f33f8eba9
[  149.825754][ T9413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.825766][ T9413] RSP: 002b:00007f1f34e31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.825781][ T9413] RAX: ffffffffffffffda RBX: 00007f1f341d5fa0 RCX: 00007f1f33f8eba9
[  149.825793][ T9413] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  149.825802][ T9413] RBP: 00007f1f34011e19 R08: 0000000000000000 R09: 0000000000000000
[  149.825812][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.825820][ T9413] R13: 00007f1f341d6038 R14: 00007f1f341d5fa0 R15: 00007ffe0ba7b418
[  149.825847][ T9413]  </TASK>
[  150.113000][ T9416] wg1 speed is unknown, defaulting to 1000
[  150.288368][ T9423] netlink: 'syz.2.1098': attribute type 13 has an invalid length.
[  150.291639][ T9423] netlink: 'syz.2.1098': attribute type 17 has an invalid length.
[  150.635878][ T9434] netlink: 'syz.2.1100': attribute type 1 has an invalid length.
[  150.642790][ T9434] bond24: (slave vcan0): The slave device specified does not support setting the MAC address
[  150.656785][ T9434] bond24: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  150.663043][ T9434] bond24: (slave vcan0): making interface the new active one
[  150.668534][ T9434] bond24: (slave vcan0): Enslaving as an active interface with an up link
[  150.719690][ T9436] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.725321][ T9434] bond24: (slave vcan1): The slave device specified does not support setting the MAC address
[  150.735063][ T9434] bond24: (slave vcan1): Enslaving as a backup interface with an up link
[  150.743316][ T9432] wg1 speed is unknown, defaulting to 1000
[  150.751053][ T9436] vlan2: entered allmulticast mode
[  150.752858][ T9436] batadv0: entered allmulticast mode
[  150.758354][ T9436] bond4: (slave vlan2): making interface the new active one
[  150.761696][ T9436] bond4: (slave vlan2): Enslaving as an active interface with an up link
[  150.765586][ T9434] 8021q: adding VLAN 0 to HW filter on device bond24
[  150.964612][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'.
[  150.982459][ T9446] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.093993][ T9454] bridge0: port 2(batadv2) entered blocking state
[  151.096823][ T9454] bridge0: port 2(batadv2) entered disabled state
[  151.099508][ T9454] batadv2: entered allmulticast mode
[  151.103200][ T9454] batadv2: entered promiscuous mode
[  151.404113][ T9463] : entered promiscuous mode
[  151.588413][ T7037] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  151.592307][ T7037] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  151.636980][ T9488] bridge0: port 3(batadv3) entered blocking state
[  151.639712][ T9488] bridge0: port 3(batadv3) entered disabled state
[  151.643590][ T9488] batadv3: entered allmulticast mode
[  151.647345][ T9488] batadv3: entered promiscuous mode
[  151.664630][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  151.668604][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  151.800483][ T9500] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  151.804814][ T9500] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  151.947921][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.044720][ T9516] 8021q: adding VLAN 0 to HW filter on device bond23
[  152.049116][ T9514] pimreg: left allmulticast mode
[  152.140715][ T5715] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  152.144530][ T5715] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  152.268452][ T9532] NCSI netlink: No device for ifindex 246
[  152.351372][ T9539] macvtap1: entered allmulticast mode
[  152.354549][ T9539] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  152.364087][ T9539] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  152.666998][ T7085] net_ratelimit: 36 callbacks suppressed
[  152.667016][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  152.776055][ T9559] __nla_validate_parse: 5 callbacks suppressed
[  152.776067][ T9559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1140'.
[  152.788118][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  152.844864][ T9567] validate_nla: 9 callbacks suppressed
[  152.844880][ T9567] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  152.853708][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'.
[  152.879511][ T9567] 8021q: adding VLAN 0 to HW filter on device bond5
[  152.891583][ T9567] bond5: entered promiscuous mode
[  152.976706][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  153.086456][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  153.158451][ T9583] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  153.169200][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'.
[  153.182182][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'.
[  153.206582][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  153.229106][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'.
[  153.238672][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'.
[  153.304004][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'.
[  153.344076][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.349711][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.357164][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  153.366466][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.466802][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  153.578219][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  153.625703][ T9624] netlink: 'syz.0.1158': attribute type 12 has an invalid length.
[  153.686607][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  153.797421][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  153.828107][ T9630] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  153.832716][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.2.1160 Not tainted syzkaller #0 PREEMPT(full) 
[  153.832736][ T9630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.832747][ T9630] Call Trace:
[  153.832755][ T9630]  <TASK>
[  153.832763][ T9630]  dump_stack_lvl+0x189/0x250
[  153.832788][ T9630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.832809][ T9630]  ? __pfx__printk+0x10/0x10
[  153.832834][ T9630]  ? kernfs_path_from_node+0x2f/0x290
[  153.832849][ T9630]  ? kernfs_path_from_node+0x250/0x290
[  153.832861][ T9630]  ? kernfs_path_from_node+0x2f/0x290
[  153.832878][ T9630]  sysfs_warn_dup+0x8e/0xa0
[  153.832892][ T9630]  sysfs_do_create_link_sd+0xc0/0x110
[  153.832910][ T9630]  device_add_class_symlinks+0x1cf/0x240
[  153.832931][ T9630]  device_add+0x475/0xb50
[  153.832950][ T9630]  wiphy_register+0x1ba6/0x28d0
[  153.832981][ T9630]  ? __pfx_wiphy_register+0x10/0x10
[  153.832996][ T9630]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  153.833020][ T9630]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  153.833039][ T9630]  ieee80211_register_hw+0x3484/0x4100
[  153.833064][ T9630]  ? ieee80211_register_hw+0x14c1/0x4100
[  153.833084][ T9630]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  153.833104][ T9630]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.833126][ T9630]  ? __hrtimer_setup+0x187/0x210
[  153.833139][ T9630]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  153.833163][ T9630]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  153.833205][ T9630]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  153.833221][ T9630]  ? trace_kmalloc+0x1f/0xd0
[  153.833236][ T9630]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  153.833256][ T9630]  ? kstrndup+0xbf/0x160
[  153.833280][ T9630]  hwsim_new_radio_nl+0xea4/0x1b10
[  153.833302][ T9630]  ? __pfx___nla_validate_parse+0x10/0x10
[  153.833333][ T9630]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  153.833363][ T9630]  ? __nla_parse+0x40/0x60
[  153.833380][ T9630]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  153.833408][ T9630]  genl_family_rcv_msg_doit+0x215/0x300
[  153.833433][ T9630]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  153.833471][ T9630]  ? bpf_lsm_capable+0x9/0x20
[  153.833491][ T9630]  ? security_capable+0x7e/0x2e0
[  153.833520][ T9630]  genl_rcv_msg+0x60e/0x790
[  153.833546][ T9630]  ? __pfx_genl_rcv_msg+0x10/0x10
[  153.833564][ T9630]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  153.833626][ T9630]  netlink_rcv_skb+0x208/0x470
[  153.833640][ T9630]  ? __lock_acquire+0xab9/0xd20
[  153.833662][ T9630]  ? __pfx_genl_rcv_msg+0x10/0x10
[  153.833683][ T9630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  153.833716][ T9630]  ? down_read+0x1ad/0x2e0
[  153.833737][ T9630]  genl_rcv+0x28/0x40
[  153.833773][ T9630]  netlink_unicast+0x82f/0x9e0
[  153.833804][ T9630]  ? __pfx_netlink_unicast+0x10/0x10
[  153.833828][ T9630]  ? netlink_sendmsg+0x642/0xb30
[  153.833842][ T9630]  ? skb_put+0x11b/0x210
[  153.833862][ T9630]  netlink_sendmsg+0x805/0xb30
[  153.833886][ T9630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.833904][ T9630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  153.833920][ T9630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.833936][ T9630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.833952][ T9630]  __sock_sendmsg+0x21c/0x270
[  153.833976][ T9630]  ____sys_sendmsg+0x505/0x830
[  153.833998][ T9630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.834025][ T9630]  ? import_iovec+0x74/0xa0
[  153.834045][ T9630]  ___sys_sendmsg+0x21f/0x2a0
[  153.834065][ T9630]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.834114][ T9630]  ? __fget_files+0x2a/0x420
[  153.834127][ T9630]  ? __fget_files+0x3a0/0x420
[  153.834148][ T9630]  __x64_sys_sendmsg+0x19b/0x260
[  153.834168][ T9630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.834195][ T9630]  ? rcu_is_watching+0x15/0xb0
[  153.834214][ T9630]  ? do_syscall_64+0xbe/0x3b0
[  153.834235][ T9630]  do_syscall_64+0xfa/0x3b0
[  153.834249][ T9630]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.834264][ T9630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.834277][ T9630]  ? exc_page_fault+0x9f/0xf0
[  153.834294][ T9630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.834308][ T9630] RIP: 0033:0x7f7402b8eba9
[  153.834321][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.834334][ T9630] RSP: 002b:00007f7403ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.834350][ T9630] RAX: ffffffffffffffda RBX: 00007f7402dd5fa0 RCX: 00007f7402b8eba9
[  153.834361][ T9630] RDX: 00000000000003e4 RSI: 0000200000000040 RDI: 0000000000000004
[  153.834371][ T9630] RBP: 00007f7402c11e19 R08: 0000000000000000 R09: 0000000000000000
[  153.834380][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.834389][ T9630] R13: 00007f7402dd6038 R14: 00007f7402dd5fa0 R15: 00007ffecfbd1828
[  153.834415][ T9630]  </TASK>
[  154.014521][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.034436][ T9633] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1161'.
[  154.117100][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.142868][ T9644] netlink: 'syz.3.1165': attribute type 13 has an invalid length.
[  154.155639][ T9642] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1163'.
[  154.165240][ T9644] netlink: 'syz.3.1165': attribute type 17 has an invalid length.
[  154.224769][ T9644] 8021q: adding VLAN 0 to HW filter on device team0
[  154.312304][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.390756][ T9656] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  154.395266][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.3.1169 Not tainted syzkaller #0 PREEMPT(full) 
[  154.395288][ T9656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.395298][ T9656] Call Trace:
[  154.395307][ T9656]  <TASK>
[  154.395315][ T9656]  dump_stack_lvl+0x189/0x250
[  154.395344][ T9656]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.395361][ T9656]  ? __pfx__printk+0x10/0x10
[  154.395388][ T9656]  ? kernfs_path_from_node+0x2f/0x290
[  154.395405][ T9656]  ? kernfs_path_from_node+0x250/0x290
[  154.395418][ T9656]  ? kernfs_path_from_node+0x2f/0x290
[  154.395437][ T9656]  sysfs_warn_dup+0x8e/0xa0
[  154.395453][ T9656]  sysfs_do_create_link_sd+0xc0/0x110
[  154.395469][ T9656]  device_add_class_symlinks+0x1cf/0x240
[  154.395488][ T9656]  device_add+0x475/0xb50
[  154.395507][ T9656]  wiphy_register+0x1ba6/0x28d0
[  154.395572][ T9656]  ? __pfx_wiphy_register+0x10/0x10
[  154.395587][ T9656]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  154.395613][ T9656]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  154.395636][ T9656]  ieee80211_register_hw+0x3484/0x4100
[  154.395667][ T9656]  ? ieee80211_register_hw+0x14c1/0x4100
[  154.395693][ T9656]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  154.395715][ T9656]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  154.395738][ T9656]  ? __hrtimer_setup+0x187/0x210
[  154.395752][ T9656]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  154.395777][ T9656]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  154.395816][ T9656]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  154.395832][ T9656]  ? trace_kmalloc+0x1f/0xd0
[  154.395846][ T9656]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  154.395865][ T9656]  ? kstrndup+0xbf/0x160
[  154.395886][ T9656]  hwsim_new_radio_nl+0xea4/0x1b10
[  154.395907][ T9656]  ? __pfx___nla_validate_parse+0x10/0x10
[  154.395939][ T9656]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.395971][ T9656]  ? __nla_parse+0x40/0x60
[  154.395985][ T9656]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  154.396013][ T9656]  genl_family_rcv_msg_doit+0x215/0x300
[  154.396038][ T9656]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  154.396075][ T9656]  ? bpf_lsm_capable+0x9/0x20
[  154.396098][ T9656]  ? security_capable+0x7e/0x2e0
[  154.396127][ T9656]  genl_rcv_msg+0x60e/0x790
[  154.396151][ T9656]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.396169][ T9656]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.396222][ T9656]  netlink_rcv_skb+0x208/0x470
[  154.396238][ T9656]  ? __lock_acquire+0xab9/0xd20
[  154.396262][ T9656]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.396282][ T9656]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.396312][ T9656]  ? down_read+0x1ad/0x2e0
[  154.396335][ T9656]  genl_rcv+0x28/0x40
[  154.396352][ T9656]  netlink_unicast+0x82f/0x9e0
[  154.396382][ T9656]  ? __pfx_netlink_unicast+0x10/0x10
[  154.396405][ T9656]  ? netlink_sendmsg+0x642/0xb30
[  154.396417][ T9656]  ? skb_put+0x11b/0x210
[  154.396435][ T9656]  netlink_sendmsg+0x805/0xb30
[  154.396459][ T9656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.396477][ T9656]  ? aa_sock_msg_perm+0xf1/0x1d0
[  154.396493][ T9656]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.396509][ T9656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.396559][ T9656]  __sock_sendmsg+0x21c/0x270
[  154.396587][ T9656]  ____sys_sendmsg+0x505/0x830
[  154.396610][ T9656]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.396638][ T9656]  ? import_iovec+0x74/0xa0
[  154.396658][ T9656]  ___sys_sendmsg+0x21f/0x2a0
[  154.396678][ T9656]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.396725][ T9656]  ? __fget_files+0x2a/0x420
[  154.396738][ T9656]  ? __fget_files+0x3a0/0x420
[  154.396760][ T9656]  __x64_sys_sendmsg+0x19b/0x260
[  154.396779][ T9656]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.396806][ T9656]  ? rcu_is_watching+0x15/0xb0
[  154.396826][ T9656]  ? do_syscall_64+0xbe/0x3b0
[  154.396845][ T9656]  do_syscall_64+0xfa/0x3b0
[  154.396859][ T9656]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.396872][ T9656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.396888][ T9656]  ? exc_page_fault+0x9f/0xf0
[  154.396903][ T9656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.396916][ T9656] RIP: 0033:0x7f1f33f8eba9
[  154.396931][ T9656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.396944][ T9656] RSP: 002b:00007f1f34e31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.396960][ T9656] RAX: ffffffffffffffda RBX: 00007f1f341d5fa0 RCX: 00007f1f33f8eba9
[  154.396972][ T9656] RDX: 00000000000003f0 RSI: 0000200000000040 RDI: 0000000000000004
[  154.396983][ T9656] RBP: 00007f1f34011e19 R08: 0000000000000000 R09: 0000000000000000
[  154.396992][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.397001][ T9656] R13: 00007f1f341d6038 R14: 00007f1f341d5fa0 R15: 00007ffe0ba7b418
[  154.397049][ T9656]  </TASK>
[  154.731386][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'.
[  154.996995][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.210116][ T9685] wg1 speed is unknown, defaulting to 1000
[  155.237112][ T5854] Bluetooth: hci0: command tx timeout
[  155.242758][ T9687] netlink: 'syz.3.1179': attribute type 10 has an invalid length.
[  155.251710][ T9687] 8021q: adding VLAN 0 to HW filter on device team0
[  155.263629][ T9687] bond0: (slave team0): Enslaving as an active interface with an up link
[  155.272113][ T9687] netlink: 'syz.3.1179': attribute type 10 has an invalid length.
[  155.283208][ T9687] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  155.334250][ T9687] 8021q: adding VLAN 0 to HW filter on device bond6
[  155.350530][ T9687] ip6gretap1: entered promiscuous mode
[  155.353182][ T9687] syz_tun: entered promiscuous mode
[  155.361656][ T9687] bond6: (slave macvlan3): Enslaving as a backup interface with an up link
[  155.462317][ T9690] netlink: 'syz.0.1180': attribute type 1 has an invalid length.
[  155.472646][ T9690] netlink: 'syz.0.1180': attribute type 3 has an invalid length.
[  155.475740][ T9690] NCSI netlink: No device for ifindex 246
[  155.633470][ T9698] lo: entered promiscuous mode
[  155.635166][ T9698] lo: entered allmulticast mode
[  155.649423][ T9698] tunl0: entered promiscuous mode
[  155.651174][ T9698] tunl0: entered allmulticast mode
[  155.657528][ T9698] gre0: entered promiscuous mode
[  155.670492][ T9698] gre0: entered allmulticast mode
[  155.679291][ T9698] gretap0: entered allmulticast mode
[  155.689416][ T9698] erspan0: entered promiscuous mode
[  155.691229][ T9698] erspan0: entered allmulticast mode
[  155.693735][ T9698] ip_vti0: entered promiscuous mode
[  155.701342][ T9701] siw: device registration error -23
[  155.706746][ T9698] ip_vti0: entered allmulticast mode
[  155.710362][ T9698] ip6_vti0: entered promiscuous mode
[  155.712895][ T9698] ip6_vti0: entered allmulticast mode
[  155.715996][ T9698] sit0: entered promiscuous mode
[  155.720868][ T9698] sit0: entered allmulticast mode
[  155.723737][ T9698] ip6tnl0: entered promiscuous mode
[  155.725851][ T9698] ip6tnl0: entered allmulticast mode
[  155.730539][ T9698] ip6gre0: entered promiscuous mode
[  155.732789][ T9698] ip6gre0: entered allmulticast mode
[  155.735660][ T9698] syz_tun: entered allmulticast mode
[  155.744976][ T9698] bond0: (slave syz_tun): Releasing backup interface
[  155.745764][ T9704] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  155.754669][ T9698] ip6gretap0: entered promiscuous mode
[  155.758215][ T9698] ip6gretap0: entered allmulticast mode
[  155.761331][ T9698] bridge0: entered promiscuous mode
[  155.763558][ T9698] bridge0: entered allmulticast mode
[  155.766767][ T9698] vcan0: entered promiscuous mode
[  155.768953][ T9698] vcan0: entered allmulticast mode
[  155.771507][ T9698] bond0: entered promiscuous mode
[  155.773882][ T9698] bond1: entered promiscuous mode
[  155.778192][ T9698] team0: entered promiscuous mode
[  155.780343][ T9698] bond0: entered allmulticast mode
[  155.782512][ T9698] ip6gretap1: entered allmulticast mode
[  155.784804][ T9698] bond1: entered allmulticast mode
[  155.787564][ T9698] team0: entered allmulticast mode
[  155.792524][ T9698] bond0: (slave team0): Releasing backup interface
[  155.799679][ T9698] dummy0: entered promiscuous mode
[  155.801700][ T9698] dummy0: entered allmulticast mode
[  155.804477][ T9698] nlmon0: entered promiscuous mode
[  155.810428][ T9698] nlmon0: entered allmulticast mode
[  155.813572][ T9698] caif0: entered promiscuous mode
[  155.816676][ T9698] caif0: entered allmulticast mode
[  155.905276][ T9704] bond31: entered promiscuous mode
[  155.919792][ T9704] 8021q: adding VLAN 0 to HW filter on device bond31
[  156.072187][ T9706] 8021q: adding VLAN 0 to HW filter on device bond32
[  156.075635][ T9706] bond31: (slave bond32): making interface the new active one
[  156.083416][ T9706] bond32: entered promiscuous mode
[  156.087202][ T9706] bond31: (slave bond32): Enslaving as an active interface with an up link
[  156.122748][ T9714] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  156.125740][ T9712] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  156.475648][ T9732] ipvlan3: entered promiscuous mode
[  156.484353][ T9732] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  156.963145][ T9754] wg1 speed is unknown, defaulting to 1000
[  157.156446][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.220490][ T9759] netlink: 'syz.2.1199': attribute type 17 has an invalid length.
[  157.655766][ T9785] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  157.662783][ T9785] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  157.698415][ T9794] gretap3: entered promiscuous mode
[  157.711088][ T9794] bond7: (slave gretap3): making interface the new active one
[  157.713750][ T9794] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  157.743768][ T9792] 8021q: adding VLAN 0 to HW filter on device bond24
[  157.785162][ T9794] __nla_validate_parse: 14 callbacks suppressed
[  157.785207][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1210'.
[  157.886057][ T9799] bond24: (slave veth17): Enslaving as an active interface with a down link
[  157.903107][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv4
[  157.905861][ T9792] bond24: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  157.961574][ T9804] dvmrp1: entered allmulticast mode
[  157.969861][ T9804] dvmrp1: left allmulticast mode
[  157.971019][ T9806] validate_nla: 4 callbacks suppressed
[  157.971031][ T9806] netlink: 'syz.2.1217': attribute type 1 has an invalid length.
[  158.013435][ T9806] vlan4: entered allmulticast mode
[  158.015597][ T9806] bond33: entered allmulticast mode
[  158.036917][ T7037] net_ratelimit: 26 callbacks suppressed
[  158.036929][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  158.186473][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  158.290047][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1225'.
[  158.330614][ T9834] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1221'.
[  158.416512][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  158.526514][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  158.646616][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  158.776666][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  158.886855][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  158.996786][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  159.055002][ T9838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  159.068278][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1226'.
[  159.121226][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  159.138786][ T9845] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1229'.
[  159.145412][ T9845] netlink: 'syz.0.1229': attribute type 1 has an invalid length.
[  159.172396][ T9845] 8021q: adding VLAN 0 to HW filter on device bond25
[  159.202118][ T9840] wg1 speed is unknown, defaulting to 1000
[  159.266570][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  159.409837][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  159.451965][ T9868] netlink: 'syz.2.1233': attribute type 4 has an invalid length.
[  159.454321][ T9868] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1233'.
[  159.465540][ T9870] netlink: 'syz.0.1234': attribute type 12 has an invalid length.
[  159.664900][ T9878] wg1 speed is unknown, defaulting to 1000
[  160.025950][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'.
[  160.040479][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'.
[  160.172396][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'.
[  160.914144][ T9894] netlink: 'syz.0.1241': attribute type 12 has an invalid length.
[  161.300474][ T9916] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  161.327090][ T9916] 8021q: adding VLAN 0 to HW filter on device bond34
[  161.346094][ T9916] bond34: (slave gretap4): making interface the new active one
[  161.350705][ T9916] bond34: (slave gretap4): Enslaving as an active interface with an up link
[  161.397074][ T9919] netlink: 'syz.2.1247': attribute type 10 has an invalid length.
[  161.784689][ T9927] netlink: 'syz.3.1250': attribute type 17 has an invalid length.
[  161.894232][ T9932] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  161.898891][ T9932] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  162.008631][ T9940] syzkaller0: entered promiscuous mode
[  162.630918][ T9968] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  162.633731][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.2.1262 Not tainted syzkaller #0 PREEMPT(full) 
[  162.633743][ T9968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.633749][ T9968] Call Trace:
[  162.633754][ T9968]  <TASK>
[  162.633758][ T9968]  dump_stack_lvl+0x189/0x250
[  162.633777][ T9968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.633788][ T9968]  ? __pfx__printk+0x10/0x10
[  162.633804][ T9968]  ? kernfs_path_from_node+0x2f/0x290
[  162.633814][ T9968]  ? kernfs_path_from_node+0x250/0x290
[  162.633822][ T9968]  ? kernfs_path_from_node+0x2f/0x290
[  162.633832][ T9968]  sysfs_warn_dup+0x8e/0xa0
[  162.633841][ T9968]  sysfs_do_create_link_sd+0xc0/0x110
[  162.633851][ T9968]  device_add_class_symlinks+0x1cf/0x240
[  162.633863][ T9968]  device_add+0x475/0xb50
[  162.633874][ T9968]  wiphy_register+0x1ba6/0x28d0
[  162.633892][ T9968]  ? __pfx_wiphy_register+0x10/0x10
[  162.633901][ T9968]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  162.633919][ T9968]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  162.633934][ T9968]  ieee80211_register_hw+0x3484/0x4100
[  162.633954][ T9968]  ? ieee80211_register_hw+0x14c1/0x4100
[  162.633970][ T9968]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  162.633982][ T9968]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.633995][ T9968]  ? __hrtimer_setup+0x187/0x210
[  162.634004][ T9968]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  162.634020][ T9968]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  162.634046][ T9968]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  162.634056][ T9968]  ? trace_kmalloc+0x1f/0xd0
[  162.634067][ T9968]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  162.634078][ T9968]  ? kstrndup+0xbf/0x160
[  162.634093][ T9968]  hwsim_new_radio_nl+0xea4/0x1b10
[  162.634105][ T9968]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.634126][ T9968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.634143][ T9968]  ? __nla_parse+0x40/0x60
[  162.634152][ T9968]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  162.634169][ T9968]  genl_family_rcv_msg_doit+0x215/0x300
[  162.634184][ T9968]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  162.634201][ T9968]  ? bpf_lsm_capable+0x9/0x20
[  162.634213][ T9968]  ? security_capable+0x7e/0x2e0
[  162.634228][ T9968]  genl_rcv_msg+0x60e/0x790
[  162.634242][ T9968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.634252][ T9968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.634269][ T9968]  netlink_rcv_skb+0x208/0x470
[  162.634277][ T9968]  ? __lock_acquire+0xab9/0xd20
[  162.634289][ T9968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.634300][ T9968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.634318][ T9968]  ? down_read+0x1ad/0x2e0
[  162.634328][ T9968]  genl_rcv+0x28/0x40
[  162.634338][ T9968]  netlink_unicast+0x82f/0x9e0
[  162.634356][ T9968]  ? __pfx_netlink_unicast+0x10/0x10
[  162.634369][ T9968]  ? netlink_sendmsg+0x642/0xb30
[  162.634377][ T9968]  ? skb_put+0x11b/0x210
[  162.634388][ T9968]  netlink_sendmsg+0x805/0xb30
[  162.634401][ T9968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.634411][ T9968]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.634421][ T9968]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.634430][ T9968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.634438][ T9968]  __sock_sendmsg+0x21c/0x270
[  162.634452][ T9968]  ____sys_sendmsg+0x505/0x830
[  162.634465][ T9968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.634479][ T9968]  ? import_iovec+0x74/0xa0
[  162.634491][ T9968]  ___sys_sendmsg+0x21f/0x2a0
[  162.634502][ T9968]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.634529][ T9968]  ? __fget_files+0x2a/0x420
[  162.634537][ T9968]  ? __fget_files+0x3a0/0x420
[  162.634549][ T9968]  __x64_sys_sendmsg+0x19b/0x260
[  162.634559][ T9968]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.634574][ T9968]  ? rcu_is_watching+0x15/0xb0
[  162.634585][ T9968]  ? do_syscall_64+0xbe/0x3b0
[  162.634605][ T9968]  do_syscall_64+0xfa/0x3b0
[  162.634613][ T9968]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.634622][ T9968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.634631][ T9968]  ? exc_page_fault+0x9f/0xf0
[  162.634641][ T9968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.634650][ T9968] RIP: 0033:0x7f7402b8eba9
[  162.634659][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.634666][ T9968] RSP: 002b:00007f7403ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.634675][ T9968] RAX: ffffffffffffffda RBX: 00007f7402dd5fa0 RCX: 00007f7402b8eba9
[  162.634681][ T9968] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  162.634686][ T9968] RBP: 00007f7402c11e19 R08: 0000000000000000 R09: 0000000000000000
[  162.634692][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.634721][ T9968] R13: 00007f7402dd6038 R14: 00007f7402dd5fa0 R15: 00007ffecfbd1828
[  162.634737][ T9968]  </TASK>
[  162.972843][ T9985] __nla_validate_parse: 5 callbacks suppressed
[  162.972859][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'.
[  162.978155][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'.
[  162.981859][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'.
[  163.027960][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'.
[  163.031162][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'.
[  163.051716][ T9985] 8021q: adding VLAN 0 to HW filter on device bond35
[  163.055002][ T9985] bond35: entered allmulticast mode
[  163.057022][ T9985] bond0: (slave bond35): Enslaving as an active interface with an up link
[  163.086950][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1266'.
[  163.114339][ T9995] wg1 speed is unknown, defaulting to 1000
[  163.126096][ T9989] netlink: 'syz.3.1266': attribute type 3 has an invalid length.
[  163.132239][ T5715] net_ratelimit: 30 callbacks suppressed
[  163.132253][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  163.140055][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'.
[  163.239572][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.330919][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  163.446858][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  163.566839][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  163.621735][T10003] ip6gre3: entered promiscuous mode
[  163.677045][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  163.797239][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  163.858449][T10014] netlink: 'syz.2.1273': attribute type 12 has an invalid length.
[  163.900719][T10016] netlink: 'syz.2.1274': attribute type 2 has an invalid length.
[  163.916426][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  163.958430][T10016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1274'.
[  164.026827][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  164.145270][T10032] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  164.166836][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  164.276831][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  164.373768][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'.
[  164.410804][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  164.476154][T10041] tap0: tun_chr_ioctl cmd 1074025678
[  164.480332][T10041] tap0: group set to 0
[  164.880916][T10055] wg1 speed is unknown, defaulting to 1000
[  165.156436][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  165.450594][T10082] netlink: 'syz.2.1290': attribute type 17 has an invalid length.
[  165.546130][T10086] netlink: 'syz.2.1292': attribute type 13 has an invalid length.
[  165.550319][T10086] netlink: 'syz.2.1292': attribute type 17 has an invalid length.
[  165.626055][T10089] bond24: (slave vcan0): Releasing backup interface
[  165.630180][T10089] bond24: (slave vcan1): making interface the new active one
[  165.644663][T10089] bond24: (slave vcan1): Releasing backup interface
[  165.655987][T10089] bond31: (slave bond32): Releasing backup interface
[  165.659418][T10089] bond32: left promiscuous mode
[  165.667613][T10089] bond34: (slave gretap4): Releasing active interface
[  165.678805][T10089] bond0: (slave bond35): Releasing backup interface
[  165.682264][T10089] bond35: left allmulticast mode
[  165.745616][T10096] sctp: [Deprecated]: syz.2.1295 (pid 10096) Use of int in max_burst socket option deprecated.
[  165.745616][T10096] Use struct sctp_assoc_value instead
[  165.885690][T10104] netlink: 'syz.3.1298': attribute type 17 has an invalid length.
[  165.940184][T10106] trusted_key: syz.3.1299 sent an empty control message without MSG_MORE.
[  165.959482][T10106] bridge6: entered promiscuous mode
[  165.961603][T10106] bridge6: entered allmulticast mode
[  165.965458][T10106] team0: Port device bridge6 added
[  166.249752][T10119] macvlan1: entered allmulticast mode
[  166.251974][T10119] veth1_vlan: entered allmulticast mode
[  166.259975][T10119] IPv6: sit2: Disabled Multicast RS
[  166.262887][T10119] sit2: entered allmulticast mode
[  166.314526][T10121] netlink: 'syz.0.1305': attribute type 1 has an invalid length.
[  166.371444][T10121] bond26: (slave bridge13): making interface the new active one
[  166.375088][T10121] bond26: (slave bridge13): Enslaving as an active interface with an up link
[  166.436462][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.594946][T10141] netlink: 'syz.0.1309': attribute type 13 has an invalid length.
[  166.744938][T10148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.832534][T10148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.913718][T10148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.005077][T10148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.063214][T10161] 8021q: adding VLAN 0 to HW filter on device bond36
[  167.077551][T10164] vlan4: entered allmulticast mode
[  167.091475][T10164] bond36: (slave vlan4): making interface the new active one
[  167.107676][T10164] bond36: (slave vlan4): Enslaving as an active interface with an up link
[  167.205843][ T7037] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.232466][ T5876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.242033][T10168] wg1 speed is unknown, defaulting to 1000
[  167.275155][ T5876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.281659][ T5876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.474173][T10182] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  167.486158][T10182] bond36: (slave vlan4): Releasing active interface
[  167.488528][T10176] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  167.512399][T10182] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  167.517107][T10182] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  167.519898][T10182] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.533191][T10182] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.536722][T10182] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.678328][T10188] wg1 speed is unknown, defaulting to 1000
[  167.686789][T10190] lo: left promiscuous mode
[  167.688622][T10190] lo: left allmulticast mode
[  167.691366][T10190] tunl0: left promiscuous mode
[  167.693278][T10190] tunl0: left allmulticast mode
[  167.695948][T10190] gre0: left promiscuous mode
[  167.699729][T10190] gre0: left allmulticast mode
[  167.703704][T10190] gretap0: left allmulticast mode
[  167.705638][T10190] erspan0: left promiscuous mode
[  167.707971][T10190] erspan0: left allmulticast mode
[  167.710152][T10190] ip_vti0: left promiscuous mode
[  167.712335][T10190] ip_vti0: left allmulticast mode
[  167.715568][T10190] ip6_vti0: left promiscuous mode
[  167.718151][T10190] ip6_vti0: left allmulticast mode
[  167.723073][T10190] sit0: left promiscuous mode
[  167.725108][T10190] sit0: left allmulticast mode
[  167.728845][T10190] ip6tnl0: left promiscuous mode
[  167.730866][T10190] ip6tnl0: left allmulticast mode
[  167.733456][T10190] ip6gre0: left promiscuous mode
[  167.735581][T10190] ip6gre0: left allmulticast mode
[  167.738760][T10190] syz_tun: left promiscuous mode
[  167.740643][T10190] syz_tun: left allmulticast mode
[  167.742883][T10190] ip6gretap0: left promiscuous mode
[  167.745065][T10190] ip6gretap0: left allmulticast mode
[  167.748161][T10190] bridge0: left promiscuous mode
[  167.749939][T10190] bridge0: left allmulticast mode
[  167.752481][T10190] vcan0: left promiscuous mode
[  167.754464][T10190] vcan0: left allmulticast mode
[  167.757431][T10190] bond0: left promiscuous mode
[  167.759322][T10190] bond1: left promiscuous mode
[  167.761552][T10190] bond0: left allmulticast mode
[  167.763622][T10190] ip6gretap1: left allmulticast mode
[  167.765844][T10190] bond1: left allmulticast mode
[  167.769345][T10190] team0: left promiscuous mode
[  167.771467][T10190] team0: left allmulticast mode
[  167.773913][T10190] dummy0: left promiscuous mode
[  167.777470][T10190] dummy0: left allmulticast mode
[  167.780214][T10190] nlmon0: left promiscuous mode
[  167.782418][T10190] nlmon0: left allmulticast mode
[  167.785837][T10190] caif0: left promiscuous mode
[  167.788348][T10190] caif0: left allmulticast mode
[  168.132452][T10201] validate_nla: 4 callbacks suppressed
[  168.132463][T10201] netlink: 'syz.0.1327': attribute type 10 has an invalid length.
[  168.139563][ T5909] net_ratelimit: 29 callbacks suppressed
[  168.139579][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  168.166598][T10201] __nla_validate_parse: 12 callbacks suppressed
[  168.166613][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  168.252240][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  168.309858][T10182] syz.2.1322 (10182) used greatest stack depth: 19608 bytes left
[  168.368331][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  168.383182][T10211] netlink: 'syz.3.1330': attribute type 1 has an invalid length.
[  168.396716][T10211] netlink: 'syz.3.1330': attribute type 11 has an invalid length.
[  168.399900][T10211] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1330'.
[  168.412951][T10211] netlink: 'syz.3.1330': attribute type 1 has an invalid length.
[  168.487332][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  168.504972][T10217] netlink: 'syz.2.1332': attribute type 1 has an invalid length.
[  168.532820][T10217] 8021q: adding VLAN 0 to HW filter on device bond37
[  168.582954][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1335'.
[  168.624080][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  168.673400][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'.
[  168.676395][T10231] netlink: 'syz.2.1337': attribute type 17 has an invalid length.
[  168.738784][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  168.748170][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'.
[  168.792010][T10240] netlink: 'syz.3.1339': attribute type 12 has an invalid length.
[  168.839935][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'.
[  168.877995][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  168.986480][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  169.097944][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  169.227234][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  169.250987][T10267] netlink: 'syz.2.1347': attribute type 1 has an invalid length.
[  169.293165][T10265] netlink: 'syz.3.1345': attribute type 12 has an invalid length.
[  169.295929][T10265] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1345'.
[  169.304507][T10267] bond38: (slave vxcan3): The slave device specified does not support setting the MAC address
[  169.310533][T10267] bond38: (slave vxcan3): Error -95 calling set_mac_address
[  169.375895][T10269] can: request_module (can-proto-0) failed.
[  169.521976][T10272] ip6gretap1: left promiscuous mode
[  169.670701][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'.
[  169.671328][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'.
[  170.593892][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'.
[  170.684374][T10307] bridge0: entered promiscuous mode
[  170.686874][T10307] vlan0: entered promiscuous mode
[  170.690474][T10307] bridge0: port 4(vlan0) entered blocking state
[  170.692841][T10307] bridge0: port 4(vlan0) entered disabled state
[  170.695087][T10307] vlan0: entered allmulticast mode
[  170.698471][T10307] bridge0: entered allmulticast mode
[  170.712218][T10307] vlan0: left allmulticast mode
[  170.715376][T10307] bridge0: left allmulticast mode
[  170.838426][T10315] netlink: 'syz.0.1362': attribute type 17 has an invalid length.
[  170.899199][T10318] 8021q: adding VLAN 0 to HW filter on device bond39
[  170.975405][T10324] veth15: entered promiscuous mode
[  170.985542][T10324] bond39: (slave veth15): Enslaving as an active interface with an up link
[  171.017665][T10328] wg1 speed is unknown, defaulting to 1000
[  171.044257][T10326] batadv0: left promiscuous mode
[  171.048829][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.051933][T10326] batadv0: entered promiscuous mode
[  171.063515][T10326] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  171.068803][T10327] bond0: (slave batadv0): Releasing backup interface
[  171.466453][T10334] 8021q: adding VLAN 0 to HW filter on device bond8
[  171.510698][T10336] 8021q: adding VLAN 0 to HW filter on device bond8
[  171.513529][T10336] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  171.521447][T10336] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  171.745055][T10343] rdma_rxe: rxe_newlink: failed to add lo
[  172.379077][T10366] veth0_vlan: left promiscuous mode
[  172.381210][T10366] veth0_vlan: entered promiscuous mode
[  172.383359][T10366] veth0_vlan: entered allmulticast mode
[  172.582952][T10374] 8021q: adding VLAN 0 to HW filter on device bond9
[  172.813089][T10383] gretap4: entered allmulticast mode
[  172.819568][T10383] bond27: (slave gretap4): making interface the new active one
[  172.823084][T10383] bond27: (slave gretap4): Enslaving as an active interface with an up link
[  172.884181][T10394] 8021q: adding VLAN 0 to HW filter on device bond28
[  173.075371][T10408] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.089690][T10410] tc_dump_action: action bad kind
[  173.113983][T10411] veth19: entered promiscuous mode
[  173.148617][T10412] veth19: entered promiscuous mode
[  173.167010][ T5876] net_ratelimit: 38 callbacks suppressed
[  173.167029][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  173.174693][T10414] macvlan1: left allmulticast mode
[  173.177004][T10414] veth1_vlan: left allmulticast mode
[  173.221196][T10420] validate_nla: 14 callbacks suppressed
[  173.221212][T10420] netlink: 'syz.3.1393': attribute type 13 has an invalid length.
[  173.228034][T10420] netlink: 'syz.3.1393': attribute type 17 has an invalid length.
[  173.283917][T10420] ip6gretap1: entered promiscuous mode
[  173.290812][T10420] 8021q: adding VLAN 0 to HW filter on device team0
[  173.299761][T10420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.327982][T10423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.337389][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  173.512668][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  173.599173][T10452] __nla_validate_parse: 14 callbacks suppressed
[  173.599187][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'.
[  173.606752][ T5909] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  173.618940][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  173.619855][T10454] netlink: 'syz.0.1403': attribute type 13 has an invalid length.
[  173.624892][T10454] netlink: 'syz.0.1403': attribute type 17 has an invalid length.
[  173.638381][T10454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.646996][T10455] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1402'.
[  173.710229][T10457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.727105][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  173.836490][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  174.410596][T10461] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1404'.
[  174.414324][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1404'.
[  174.435186][T10461] wg1 speed is unknown, defaulting to 1000
[  174.727391][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'.
[  174.818864][T10489] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1413'.
[  174.888672][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.002621][T10505] netlink: 'syz.2.1417': attribute type 2 has an invalid length.
[  175.218943][T10520] netlink: 'syz.3.1420': attribute type 12 has an invalid length.
[  175.335755][T10527] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1419'.
[  175.369052][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'.
[  175.412902][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'.
[  175.604235][T10529] bond6: (slave macvlan3): speed changed to 0 on port 1
[  175.627322][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.705139][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.764291][T10542] wg1 speed is unknown, defaulting to 1000
[  176.161491][T10560] vxcan1: entered allmulticast mode
[  176.332926][T10563] batadv0: left promiscuous mode
[  176.345151][T10563] veth0_vlan: left allmulticast mode
[  176.375673][T10563] bond0: (slave wlan1): Releasing backup interface
[  176.380589][T10563] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  176.394654][T10563] vlan3: left allmulticast mode
[  176.398127][T10563] bond0: left allmulticast mode
[  176.422094][T10563] bond31: left promiscuous mode
[  176.460938][T10563] vlan4: left allmulticast mode
[  176.482292][T10563] veth15: left promiscuous mode
[  176.489785][T10563] bond39: (slave veth15): Releasing backup interface
[  176.642673][T10576] can: request_module (can-proto-0) failed.
[  176.648555][T10576] netlink: 'syz.2.1433': attribute type 10 has an invalid length.
[  176.653460][T10576] netlink: 'syz.2.1433': attribute type 10 has an invalid length.
[  176.674536][T10576] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  176.685040][T10581] netlink: 'syz.0.1435': attribute type 12 has an invalid length.
[  176.746132][T10586] netlink: 'syz.0.1437': attribute type 1 has an invalid length.
[  176.950363][T10598] wg1 speed is unknown, defaulting to 1000
[  177.156429][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  177.217759][T10606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1440'.
[  177.222873][T10606] NCSI netlink: No device for ifindex 246
[  177.928720][T10652] wg1 speed is unknown, defaulting to 1000
[  178.204008][T10662] bond0: (slave dummy0): Releasing backup interface
[  178.227620][ T7085] net_ratelimit: 57 callbacks suppressed
[  178.227635][ T7085] bond6: (slave macvlan3): failed to get link speed/duplex
[  178.247558][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  178.347424][ T7037] bond6: (slave macvlan3): failed to get link speed/duplex
[  178.356614][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  178.506833][ T5876] bond6: (slave macvlan3): failed to get link speed/duplex
[  178.531962][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  178.621687][   T14] bond6: (slave macvlan3): failed to get link speed/duplex
[  178.656655][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  178.692403][T10675] wg1 speed is unknown, defaulting to 1000
[  178.730257][ T7085] bond6: (slave macvlan3): failed to get link speed/duplex
[  178.768133][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  178.892318][T10685] __nla_validate_parse: 3 callbacks suppressed
[  178.892413][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1461'.
[  179.808473][T10702] validate_nla: 4 callbacks suppressed
[  179.808501][T10702] netlink: 'syz.3.1467': attribute type 13 has an invalid length.
[  179.816548][T10702] netlink: 'syz.3.1467': attribute type 17 has an invalid length.
[  179.876411][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.457675][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1470'.
[  182.469136][T10715] netlink: 'syz.0.1471': attribute type 1 has an invalid length.
[  182.525883][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'.
[  182.590956][T10717] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  182.598321][T10717] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  182.671744][T10725] wg1 speed is unknown, defaulting to 1000
[  182.786861][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'.
[  182.863136][T10730] block nbd0: server does not support multiple connections per device.
[  182.879798][T10730] block nbd0: shutting down sockets
[  182.963654][T10737] netlink: 'syz.3.1477': attribute type 10 has an invalid length.
[  182.983933][T10737] 8021q: adding VLAN 0 to HW filter on device team0
[  183.009379][T10737] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.019938][T10741] netlink: 'syz.3.1477': attribute type 10 has an invalid length.
[  183.041038][T10741] syz_tun: entered promiscuous mode
[  183.044066][T10741] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  183.047715][T10743] netlink: 'syz.0.1480': attribute type 6 has an invalid length.
[  183.048078][T10744] netlink: 'syz.0.1480': attribute type 6 has an invalid length.
[  183.064019][T10737] bond6: option mode: unable to set because the bond device has slaves
[  183.101397][ T7037] bond6: (slave macvlan3): link status definitely up, 10000 Mbps full duplex
[  183.104792][ T7037] bond6: active interface up!
[  183.125952][T10744] netlink: 'syz.0.1480': attribute type 12 has an invalid length.
[  183.149233][T10744] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1480'.
[  183.306812][ T5715] net_ratelimit: 31 callbacks suppressed
[  183.306824][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  183.323912][T10753] netlink: 'syz.0.1483': attribute type 2 has an invalid length.
[  183.328955][T10754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'.
[  183.344233][T10753] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.371386][T10753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.379130][T10759] netlink: 'syz.3.1484': attribute type 1 has an invalid length.
[  183.417507][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  183.420423][T10753] veth0_to_team: entered promiscuous mode
[  183.422236][T10753] veth0_to_team: entered allmulticast mode
[  183.432853][T10759] bond10: (slave bridge8): making interface the new active one
[  183.435752][T10759] bond10: (slave bridge8): Enslaving as an active interface with an up link
[  183.479312][T10762] wg1 speed is unknown, defaulting to 1000
[  183.529327][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  183.578509][T10769] can: request_module (can-proto-0) failed.
[  183.585944][T10769] dummy0: entered promiscuous mode
[  183.591310][T10769] team0: Port device dummy0 added
[  183.594841][T10769] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  183.605735][T10769] team0: Failed to send options change via netlink (err -105)
[  183.613444][T10769] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  183.617432][T10769] team0: Port device dummy0 removed
[  183.620507][T10769] dummy0: left promiscuous mode
[  183.625197][T10769] dummy0: entered promiscuous mode
[  183.630776][T10769] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  183.666187][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  183.691496][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'.
[  183.788676][T10779] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  183.793874][T10779] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  183.812999][T10785] bond11: entered promiscuous mode
[  183.842963][T10784] wg1 speed is unknown, defaulting to 1000
[  183.846675][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  183.913986][T10788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1490'.
[  183.961350][T10790] 8021q: adding VLAN 0 to HW filter on device bond12
[  183.979859][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1491'.
[  183.982951][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'.
[  183.988114][T10790] bond0: (slave team0): Releasing backup interface
[  183.994216][T10790] bridge0: port 1(team0) entered blocking state
[  183.998222][T10790] bridge0: port 1(team0) entered disabled state
[  184.001901][T10790] team0: entered allmulticast mode
[  184.005848][T10790] team0: entered promiscuous mode
[  184.109317][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  184.151447][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'.
[  184.207879][T10801] 8021q: adding VLAN 0 to HW filter on device team0
[  184.212241][T10801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.228711][T10801] bond0: (slave syz_tun): Releasing backup interface
[  184.231243][T10801] syz_tun: left promiscuous mode
[  184.237068][T10801] team0: left allmulticast mode
[  184.239547][T10801] team0: left promiscuous mode
[  184.241800][T10801] bridge0: port 1(team0) entered disabled state
[  184.246511][T10801] bond0: (slave dummy0): Releasing backup interface
[  184.249043][T10801] dummy0: left promiscuous mode
[  184.252142][T10801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  184.370267][T10803] bond13: (slave bridge9): making interface the new active one
[  184.373175][T10803] bond13: (slave bridge9): Enslaving as an active interface with an up link
[  184.387116][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  184.403315][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'.
[  184.408580][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'.
[  184.412851][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'.
[  184.416053][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'.
[  184.603939][T10821] wg1 speed is unknown, defaulting to 1000
[  185.245941][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  185.313179][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  185.545744][T10881] validate_nla: 9 callbacks suppressed
[  185.545757][T10881] netlink: 'syz.0.1510': attribute type 7 has an invalid length.
[  185.643502][T10885] wg1 speed is unknown, defaulting to 1000
[  186.172382][T10897] netlink: 'syz.0.1515': attribute type 10 has an invalid length.
[  186.177562][T10897] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  186.180437][T10897] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.187193][T10897] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  186.190301][T10897] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  186.452971][T10913] netlink: 'syz.3.1520': attribute type 1 has an invalid length.
[  186.490690][T10913] bond14: (slave geneve0): making interface the new active one
[  186.494789][T10913] bond14: (slave geneve0): Enslaving as an active interface with an up link
[  186.498372][ T5909] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  186.502066][ T5909] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  186.513739][T10913] 8021q: adding VLAN 0 to HW filter on device bond14
[  186.521040][ T5909] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  186.525357][ T5909] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  186.565690][T10916] netlink: 'syz.3.1521': attribute type 13 has an invalid length.
[  186.569395][T10916] netlink: 'syz.3.1521': attribute type 17 has an invalid length.
[  186.752823][T10918] veth1_macvtap: left promiscuous mode
[  186.873370][T10923] netlink: 'syz.0.1524': attribute type 1 has an invalid length.
[  187.137290][T10937] syzkaller0: entered allmulticast mode
[  187.191462][T10937] syzkaller0 (unregistering): left allmulticast mode
[  187.279354][T10946] bond6: (slave macvlan3): speed changed to 0 on port 1
[  187.317200][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.322935][T10945] wg1 speed is unknown, defaulting to 1000
[  187.637668][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.800434][T10978] netlink: 'syz.0.1535': attribute type 17 has an invalid length.
[  187.841631][T10982] wg1 speed is unknown, defaulting to 1000
[  188.189787][T10999] wg1 speed is unknown, defaulting to 1000
[  188.345416][T11006] 8021q: adding VLAN 0 to HW filter on device bond42
[  188.356843][ T7085] net_ratelimit: 42 callbacks suppressed
[  188.356853][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  188.437621][ T7085] bond6: (slave macvlan3): failed to get link speed/duplex
[  188.485312][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  188.502978][T11015] netlink: 'syz.2.1545': attribute type 1 has an invalid length.
[  188.560679][T11015] 8021q: adding VLAN 0 to HW filter on device bond43
[  188.616179][T11017] vlan7: entered promiscuous mode
[  188.620687][T11017] bond43: entered promiscuous mode
[  188.622463][T11017] vlan7: entered allmulticast mode
[  188.624292][T11017] bond43: entered allmulticast mode
[  188.675236][T11015] bond43: (slave gretap5): making interface the new active one
[  188.681243][T11015] gretap5: entered promiscuous mode
[  188.683074][T11015] gretap5: entered allmulticast mode
[  188.687623][T11015] bond43: (slave gretap5): Enslaving as an active interface with an up link
[  188.693238][T11015] syz.2.1545 (11015) used greatest stack depth: 19400 bytes left
[  188.718007][ T5715] bond6: (slave macvlan3): failed to get link speed/duplex
[  188.720404][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  188.826906][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  188.863677][ T5909] bond6: (slave macvlan3): failed to get link speed/duplex
[  188.939862][T11025] netlink: 'syz.2.1549': attribute type 13 has an invalid length.
[  188.942666][T11025] netlink: 'syz.2.1549': attribute type 17 has an invalid length.
[  188.962526][T11025] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.968266][T11025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.976627][ T7037] bond6: (slave macvlan3): failed to get link speed/duplex
[  188.987446][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  189.020652][T11025] bond43: (slave gretap5): Releasing active interface
[  189.023414][T11025] gretap5: left promiscuous mode
[  189.025482][T11025] gretap5: left allmulticast mode
[  189.155946][T11034] __nla_validate_parse: 14 callbacks suppressed
[  189.155962][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'.
[  189.351443][T11041] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1556'.
[  189.355118][T11041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'.
[  189.473447][T11047] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  189.506805][T11047] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  189.512602][T11047] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  189.588171][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1562'.
[  189.592308][T11057] dvmrp0: entered allmulticast mode
[  189.594118][T11057] dvmrp0: left allmulticast mode
[  189.610660][T11054] veth0_vlan: left promiscuous mode
[  189.612591][T11054] veth0_vlan: entered promiscuous mode
[  189.614480][T11054] veth0_vlan: entered allmulticast mode
[  189.643101][T11057] dvmrp0: entered allmulticast mode
[  189.645010][T11059] dvmrp0: left allmulticast mode
[  189.763348][T11064] bond0: (slave wlan1): Releasing backup interface
[  190.057211][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'.
[  190.172923][T11106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'.
[  190.248759][T11113] 8021q: adding VLAN 0 to HW filter on device bond16
[  190.354722][T11113] bond16 (unregistering): Released all slaves
[  190.378895][T11125] vlan8: entered allmulticast mode
[  190.381076][T11125] bridge0: entered allmulticast mode
[  190.695878][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.734518][T11153] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1594'.
[  190.734538][T11154] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1594'.
[  190.740629][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'.
[  190.746127][T11153] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1594'.
[  190.760360][T11153] validate_nla: 7 callbacks suppressed
[  190.760373][T11153] netlink: 'syz.2.1594': attribute type 3 has an invalid length.
[  190.780186][T11153] netlink: 'syz.2.1594': attribute type 2 has an invalid length.
[  190.792594][T11154] netlink: 'syz.2.1594': attribute type 3 has an invalid length.
[  190.806751][T11154] netlink: 'syz.2.1594': attribute type 2 has an invalid length.
[  190.848416][T11160] bridge10: entered promiscuous mode
[  190.850850][T11160] macsec1: entered promiscuous mode
[  190.853234][T11160] macsec1: entered allmulticast mode
[  190.855312][T11160] bridge10: entered allmulticast mode
[  190.862134][T11160] bridge10: port 1(macsec1) entered blocking state
[  190.876840][T11160] bridge10: port 1(macsec1) entered disabled state
[  190.888853][T11160] bridge10: left allmulticast mode
[  190.891118][T11160] bridge10: left promiscuous mode
[  190.916562][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  190.919024][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  190.937466][T11162] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  190.969838][T11162] bond0 (unregistering): Released all slaves
[  191.115760][T11170] netlink: 'syz.2.1601': attribute type 2 has an invalid length.
[  191.133720][T11170] : entered promiscuous mode
[  191.265782][T11184] netlink: 'syz.2.1607': attribute type 3 has an invalid length.
[  191.277434][T11186] pimreg: entered allmulticast mode
[  191.289939][T11186] dvmrp8: entered allmulticast mode
[  191.292290][T11186] pimreg: left allmulticast mode
[  191.294184][T11186] dvmrp8: left allmulticast mode
[  192.275173][T11210] netlink: 'syz.2.1612': attribute type 10 has an invalid length.
[  192.324060][T11201] netlink: 'syz.3.1610': attribute type 12 has an invalid length.
[  192.338101][T11210] 8021q: adding VLAN 0 to HW filter on device bond24
[  192.405099][T11214] bridge16: entered allmulticast mode
[  192.503496][T11216] wg1 speed is unknown, defaulting to 1000
[  192.540652][T11227] netlink: 'syz.3.1614': attribute type 10 has an invalid length.
[  192.552586][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.562189][T11227] batadv0: entered promiscuous mode
[  192.569681][T11227] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  192.587567][T11227] netlink: 'syz.3.1614': attribute type 10 has an invalid length.
[  192.598634][T11227] bond0: (slave batadv0): Releasing backup interface
[  192.618159][T11227] bridge0: port 1(batadv0) entered blocking state
[  192.627016][T11227] bridge0: port 1(batadv0) entered disabled state
[  192.847403][ T5909] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  192.851072][ T5909] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  193.215067][T11254] bridge0: port 1(batadv0) entered disabled state
[  193.398314][ T5909] net_ratelimit: 74 callbacks suppressed
[  193.398327][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  193.417131][ T5909] bond6: (slave macvlan3): failed to get link speed/duplex
[  193.501476][T11266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.524861][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  193.627133][ T7037] bond6: (slave macvlan3): failed to get link speed/duplex
[  193.636588][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  193.684539][T11275] ip6gretap1: left promiscuous mode
[  193.811451][T11276] geneve3: entered promiscuous mode
[  193.813804][T11276] geneve3: entered allmulticast mode
[  193.854462][T11279] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.866725][ T5715] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.870013][ T5715] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.873169][ T5715] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  193.878123][ T5715] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.883715][ T5715] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.887518][ T5715] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  193.891233][ T5715] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.894115][ T5715] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.898496][ T5715] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  193.903001][ T5715] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.907051][ T5715] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.910557][ T5715] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 19999 - 0
[  193.919690][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  194.005626][T11290] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  194.047011][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  194.156644][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  194.210732][T11297] IPVS: lc: FWM 3 0x00000003 - no destination available
[  194.213798][   T95] IPVS: starting estimator thread 0...
[  194.307381][T11298] IPVS: using max 64 ests per chain, 153600 per kthread
[  194.620749][T11309] __nla_validate_parse: 15 callbacks suppressed
[  194.620761][T11309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1641'.
[  194.820907][T11321] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1645'.
[  194.827611][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'.
[  195.089756][T11346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.108778][T11346] gretap0: left promiscuous mode
[  195.127393][T11346] 8021q: adding VLAN 0 to HW filter on device team0
[  195.157326][T11343] wg1 speed is unknown, defaulting to 1000
[  195.250672][T11354] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  195.255643][T11354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1654'.
[  195.369104][T11354] bond6: (slave macvlan3): Removing an active aggregator
[  195.372880][T11354] bond6: (slave macvlan3): Releasing backup interface
[  195.384540][T11354] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface
[  195.390016][T11354] bond0 (unregistering): (slave bond1): Releasing backup interface
[  195.393991][T11354] bond0 (unregistering): Released all slaves
[  195.789241][T11366] validate_nla: 10 callbacks suppressed
[  195.789258][T11366] netlink: 'syz.2.1659': attribute type 1 has an invalid length.
[  195.833635][T11366] 8021q: adding VLAN 0 to HW filter on device bond44
[  195.887581][T11367] 8021q: adding VLAN 0 to HW filter on device bond44
[  195.890550][T11367] bond44: (slave vxcan3): The slave device specified does not support setting the MAC address
[  195.895847][T11367] bond44: (slave vxcan3): Error -95 calling set_mac_address
[  195.930126][T11378] netlink: 'syz.3.1660': attribute type 12 has an invalid length.
[  196.064893][T11373] wg1 speed is unknown, defaulting to 1000
[  196.220418][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1664'.
[  196.409142][T11411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'.
[  196.640628][T11418] macvlan3: entered allmulticast mode
[  196.642670][T11418] veth1_vlan: entered allmulticast mode
[  196.652647][T11418] veth1_vlan: left allmulticast mode
[  196.820396][T11428] netlink: 1716 bytes leftover after parsing attributes in process `syz.3.1675'.
[  196.836955][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  196.912325][T11433] netlink: 'syz.3.1677': attribute type 17 has an invalid length.
[  197.059711][T11446] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1681'.
[  197.406794][T11467] netlink: 'syz.2.1689': attribute type 1 has an invalid length.
[  197.422354][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1690'.
[  197.459831][T11467] bond45: (slave vxcan3): The slave device specified does not support setting the MAC address
[  197.465418][T11467] bond45: (slave vxcan3): Error -95 calling set_mac_address
[  197.499742][T11476] netlink: 'syz.3.1691': attribute type 12 has an invalid length.
[  197.590303][T11426] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  197.641538][T11482] netlink: 'syz.0.1694': attribute type 1 has an invalid length.
[  197.680760][T11482] 8021q: adding VLAN 0 to HW filter on device bond31
[  197.711954][T11482] bond31: (slave veth21): Enslaving as an active interface with a down link
[  197.747573][T11482] macvlan0: entered promiscuous mode
[  197.749480][T11482] macvlan0: entered allmulticast mode
[  197.751739][T11482] bond31: entered promiscuous mode
[  197.754590][T11482] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  197.760873][T11482] bond31: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  197.777242][T11482] bond31: left promiscuous mode
[  197.835854][T11486] macvlan0: entered promiscuous mode
[  197.857023][T11486] macvlan0: entered allmulticast mode
[  197.860237][T11486] bond31: entered promiscuous mode
[  197.862985][T11486] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  197.866549][T11486] bond31: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  197.873784][T11486] bond31: left promiscuous mode
[  197.949095][T11499] netlink: 'syz.2.1698': attribute type 1 has an invalid length.
[  198.191651][T11513] wg1 speed is unknown, defaulting to 1000
[  198.234908][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1706'.
[  198.507684][   T14] net_ratelimit: 38 callbacks suppressed
[  198.507702][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  198.612245][T11537] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  198.652987][T11537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  198.683068][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  198.810825][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  198.895856][T11555] netlink: 'syz.2.1715': attribute type 1 has an invalid length.
[  198.955079][T11555] 8021q: adding VLAN 0 to HW filter on device bond47
[  198.982999][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  199.083354][T11564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  199.105857][T11565] netlink: 'syz.0.1718': attribute type 10 has an invalid length.
[  199.109605][T11565] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  199.131929][T11564] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  199.137918][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  199.147532][T11564] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  199.222969][T11581] team0: No ports can be present during mode change
[  199.246640][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  199.356933][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  199.466581][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  199.694161][T11593] macvlan0: entered promiscuous mode
[  199.696169][T11593] vlan0: entered promiscuous mode
[  199.935714][T11602] __nla_validate_parse: 4 callbacks suppressed
[  199.935732][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'.
[  199.948083][T11602] batman_adv: batadv0: Adding interface: dummy0
[  199.950569][T11602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.969479][T11602] batman_adv: batadv0: Interface activated: dummy0
[  200.041653][T11602] batman_adv: batadv0: Adding interface: ip6gretap5
[  200.044371][T11602] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.054664][T11602] batman_adv: batadv0: Interface activated: ip6gretap5
[  200.154850][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'.
[  200.517715][T11643] netlink: 'syz.2.1740': attribute type 10 has an invalid length.
[  200.523717][T11643] bond24: option mode: unable to set because the bond device is up
[  200.536496][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'.
[  200.552575][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1741'.
[  200.557284][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'.
[  200.604066][T11645] bond4: (slave vlan2): Releasing active interface
[  200.935493][T11670] validate_nla: 2 callbacks suppressed
[  200.935508][T11670] netlink: 'syz.3.1751': attribute type 1 has an invalid length.
[  200.969029][T11670] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.985996][T11670] bond0: (slave ip6gretap3): making interface the new active one
[  200.990771][T11670] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link
[  201.004641][T11673] tap0: tun_chr_ioctl cmd 1074025678
[  201.007255][T11673] tap0: group set to 0
[  201.010190][T11673] tap0: tun_chr_ioctl cmd 35092
[  201.016169][T11670] erspan0: entered allmulticast mode
[  201.024394][T11670] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  201.065198][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'.
[  201.121279][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'.
[  201.133349][T11680] vlan0: entered promiscuous mode
[  201.139819][T11680] tipc: Started in network mode
[  201.141760][T11680] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  201.144648][T11680] tipc: Enabled bearer <eth:team0>, priority 0
[  201.237123][T11687] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  201.237171][T11688] netlink: 'syz.2.1757': attribute type 1 has an invalid length.
[  201.255011][T11688] bond24: (slave vcan3): The slave device specified does not support setting the MAC address
[  201.261294][T11688] bond24: (slave vcan3): Error -95 calling set_mac_address
[  201.274245][T11687] erspan0: left allmulticast mode
[  201.280717][T11687] tipc: Resetting bearer <eth:team0>
[  201.288178][T11689] tipc: Resetting bearer <eth:team0>
[  201.329029][T11688] bond24: (slave vcan3): The slave device specified does not support setting the MAC address
[  201.332891][T11688] bond24: (slave vcan3): Error -95 calling set_mac_address
[  201.352589][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1760'.
[  201.356174][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1760'.
[  201.374476][T11697] 8021q: adding VLAN 0 to HW filter on device bond24
[  201.462540][T11707] netlink: 'syz.3.1764': attribute type 10 has an invalid length.
[  201.467504][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'.
[  201.533504][T11712] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  201.536508][T11712] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:1024
[  201.580632][T11714] netlink: 'syz.0.1766': attribute type 10 has an invalid length.
[  201.652153][T11722] pim6reg99999999: entered allmulticast mode
[  201.711866][T11728] bond0: (slave erspan0): Releasing active interface
[  201.714010][T11728] ip6gretap3: entered promiscuous mode
[  201.720946][T11732] netlink: 'syz.0.1772': attribute type 12 has an invalid length.
[  201.741354][T11728] tipc: Resetting bearer <eth:team0>
[  202.035756][T11755] netlink: 'syz.3.1782': attribute type 17 has an invalid length.
[  202.077361][T11759] netlink: 'syz.3.1784': attribute type 1 has an invalid length.
[  202.094123][T11759] 8021q: adding VLAN 0 to HW filter on device bond16
[  202.118242][T11759] bond16: (slave veth11): Enslaving as an active interface with a down link
[  202.178543][   T47] tipc: Node number set to 11578026
[  202.205196][T11766] syz_tun: entered allmulticast mode
[  202.217963][T11767] dvmrp8: entered allmulticast mode
[  202.235586][T11767] syz_tun: left allmulticast mode
[  202.238454][T11767] dvmrp8: left allmulticast mode
[  202.340720][T11772] geneve4: entered promiscuous mode
[  202.342699][T11772] geneve4: entered allmulticast mode
[  202.346127][ T7037] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.349652][ T7037] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.356139][ T7037] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.369107][ T7037] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.396145][T11778] wg1 speed is unknown, defaulting to 1000
[  202.405216][T11776] wg1 speed is unknown, defaulting to 1000
[  202.439290][ T2182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.441954][ T2182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.751100][T11786] siw: device registration error -23
[  203.054999][T11757] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  203.281206][T11812] netlink: 'syz.0.1796': attribute type 1 has an invalid length.
[  203.535920][T11827] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  203.581400][T11827] 8021q: adding VLAN 0 to HW filter on device bond32
[  203.589370][T11827] vlan0: entered promiscuous mode
[  203.590979][T11827] bond32: entered promiscuous mode
[  203.592524][T11827] vlan0: entered allmulticast mode
[  203.594392][T11827] bond32: entered allmulticast mode
[  203.616803][ T7037] net_ratelimit: 75 callbacks suppressed
[  203.616823][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  203.732805][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  203.774781][T11834] wg1 speed is unknown, defaulting to 1000
[  203.831912][T11848] netlink: 'syz.3.1806': attribute type 1 has an invalid length.
[  203.839146][T11850] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[  203.843712][T11850] bond6: (slave vcan0): Error -95 calling set_mac_address
[  203.860149][T11848] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[  203.864201][T11848] bond6: (slave vcan0): Error -95 calling set_mac_address
[  203.915585][T11849] batman_adv: batadv0: Interface deactivated: dummy0
[  203.974086][T11849] bond0: left promiscuous mode
[  203.976082][T11849] ip6gretap1: left promiscuous mode
[  204.055579][T11849] batman_adv: batadv0: Interface deactivated: ip6gretap5
[  204.084242][T11850] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[  204.090287][T11850] bond6: (slave vcan0): Error -95 calling set_mac_address
[  204.098399][ T5909] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  204.101721][ T5909] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  204.104956][ T5909] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  204.112036][ T5909] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  204.202324][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  204.317079][ T5715] bond15: (slave wlan0): failed to get link speed/duplex
[  204.445979][T11876] 8021q: adding VLAN 0 to HW filter on device bond6
[  204.459505][T11876] bond6: (slave macvlan3): Enslaving as a backup interface with a down link
[  204.479891][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  204.587623][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  204.634324][T11884] wg1 speed is unknown, defaulting to 1000
[  204.737272][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  204.769787][T11887] geneve5: entered promiscuous mode
[  204.772083][T11887] geneve5: entered allmulticast mode
[  204.775630][ T5909] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 53551 - 0
[  204.782266][ T5909] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 36548 - 0
[  204.787889][ T7085] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 53551 - 0
[  204.791151][ T7085] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 36548 - 0
[  204.796356][ T7085] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 53551 - 0
[  204.802659][ T7085] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 36548 - 0
[  204.807955][ T7085] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 53551 - 0
[  204.811114][ T7085] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 36548 - 0
[  204.847293][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  205.124558][T11896] wg1 speed is unknown, defaulting to 1000
[  205.137044][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  205.247696][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  205.526031][T11912] __nla_validate_parse: 16 callbacks suppressed
[  205.526052][T11912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1822'.
[  205.791104][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'.
[  205.808257][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'.
[  206.113970][T11945] validate_nla: 6 callbacks suppressed
[  206.113984][T11945] netlink: 'syz.3.1833': attribute type 30 has an invalid length.
[  206.165698][T11945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1833'.
[  206.177005][T11945] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  206.285658][T11957] xt_time: invalid argument - start or stop time greater than 23:59:59
[  206.328563][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'.
[  206.332006][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'.
[  206.335393][T11957] netlink: 'syz.3.1836': attribute type 18 has an invalid length.
[  206.717898][T11976] veth0_vlan: left allmulticast mode
[  206.743561][T11976] vlan7: left promiscuous mode
[  206.745542][T11976] bond43: left promiscuous mode
[  206.748691][T11976] vlan7: left allmulticast mode
[  206.751261][T11976] bond43: left allmulticast mode
[  206.754911][T11976] bridge16: left allmulticast mode
[  206.760017][T11976] vlan0: left promiscuous mode
[  206.762021][T11976] macvlan0: left promiscuous mode
[  206.765537][T11976] geneve5: left promiscuous mode
[  206.770506][T11976] geneve5: left allmulticast mode
[  206.778528][   T14] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 53551 - 0
[  206.782238][   T14] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 36548 - 0
[  206.786708][ T7085] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 53551 - 0
[  206.789910][ T7085] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 36548 - 0
[  206.793762][ T7085] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 53551 - 0
[  206.798644][ T7085] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 36548 - 0
[  206.802014][ T7085] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 53551 - 0
[  206.806024][ T7085] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 36548 - 0
[  206.850891][ T7085] syzkaller0: tun_net_xmit 76
[  206.854088][ T7085] syzkaller0: tun_net_xmit 48
[  206.877710][   T24] syzkaller0: tun_net_xmit 76
[  206.941807][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1844'.
[  207.057515][T11991] netlink: 'syz.2.1844': attribute type 10 has an invalid length.
[  208.132499][T11995] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  208.422776][T12001] netlink: 'syz.0.1847': attribute type 17 has an invalid length.
[  208.465834][T12003] netlink: 'syz.3.1849': attribute type 12 has an invalid length.
[  208.496133][T12009] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1846'.
[  208.551939][T12013] netlink: 'syz.0.1851': attribute type 17 has an invalid length.
[  208.554719][T12012] wg1 speed is unknown, defaulting to 1000
[  208.617656][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'.
[  208.697269][ T7085] net_ratelimit: 15 callbacks suppressed
[  208.697287][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  208.835263][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'.
[  208.847368][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  208.956365][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  209.066825][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  209.083838][T12040] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  209.087422][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.0.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  209.087435][T12040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.087440][T12040] Call Trace:
[  209.087445][T12040]  <TASK>
[  209.087450][T12040]  dump_stack_lvl+0x189/0x250
[  209.087467][T12040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.087477][T12040]  ? __pfx__printk+0x10/0x10
[  209.087492][T12040]  ? kernfs_path_from_node+0x2f/0x290
[  209.087501][T12040]  ? kernfs_path_from_node+0x250/0x290
[  209.087509][T12040]  ? kernfs_path_from_node+0x2f/0x290
[  209.087519][T12040]  sysfs_warn_dup+0x8e/0xa0
[  209.087529][T12040]  sysfs_do_create_link_sd+0xc0/0x110
[  209.087539][T12040]  device_add_class_symlinks+0x1cf/0x240
[  209.087550][T12040]  device_add+0x475/0xb50
[  209.087560][T12040]  wiphy_register+0x1ba6/0x28d0
[  209.087578][T12040]  ? __pfx_wiphy_register+0x10/0x10
[  209.087586][T12040]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  209.087601][T12040]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  209.087615][T12040]  ieee80211_register_hw+0x3484/0x4100
[  209.087635][T12040]  ? ieee80211_register_hw+0x14c1/0x4100
[  209.087650][T12040]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  209.087663][T12040]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  209.087675][T12040]  ? __hrtimer_setup+0x187/0x210
[  209.087682][T12040]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  209.087696][T12040]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  209.087722][T12040]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  209.087732][T12040]  ? trace_kmalloc+0x1f/0xd0
[  209.087742][T12040]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  209.087753][T12040]  ? kstrndup+0xbf/0x160
[  209.087766][T12040]  hwsim_new_radio_nl+0xea4/0x1b10
[  209.087780][T12040]  ? __pfx___nla_validate_parse+0x10/0x10
[  209.087816][T12040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  209.087839][T12040]  ? __nla_parse+0x40/0x60
[  209.087853][T12040]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  209.087877][T12040]  genl_family_rcv_msg_doit+0x215/0x300
[  209.087903][T12040]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  209.087931][T12040]  ? bpf_lsm_capable+0x9/0x20
[  209.087949][T12040]  ? security_capable+0x7e/0x2e0
[  209.087975][T12040]  genl_rcv_msg+0x60e/0x790
[  209.087996][T12040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.088014][T12040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  209.088053][T12040]  netlink_rcv_skb+0x208/0x470
[  209.088065][T12040]  ? __lock_acquire+0xab9/0xd20
[  209.088111][T12040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.088130][T12040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.088162][T12040]  ? down_read+0x1ad/0x2e0
[  209.088177][T12040]  genl_rcv+0x28/0x40
[  209.088193][T12040]  netlink_unicast+0x82f/0x9e0
[  209.088221][T12040]  ? __pfx_netlink_unicast+0x10/0x10
[  209.088240][T12040]  ? netlink_sendmsg+0x642/0xb30
[  209.088254][T12040]  ? skb_put+0x11b/0x210
[  209.088272][T12040]  netlink_sendmsg+0x805/0xb30
[  209.088295][T12040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.088313][T12040]  ? aa_sock_msg_perm+0xf1/0x1d0
[  209.088328][T12040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.088344][T12040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.088358][T12040]  __sock_sendmsg+0x21c/0x270
[  209.088380][T12040]  ____sys_sendmsg+0x505/0x830
[  209.088402][T12040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.088428][T12040]  ? import_iovec+0x74/0xa0
[  209.088448][T12040]  ___sys_sendmsg+0x21f/0x2a0
[  209.088465][T12040]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.088512][T12040]  ? __fget_files+0x2a/0x420
[  209.088524][T12040]  ? __fget_files+0x3a0/0x420
[  209.088546][T12040]  __x64_sys_sendmsg+0x19b/0x260
[  209.088565][T12040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.088591][T12040]  ? rcu_is_watching+0x15/0xb0
[  209.088609][T12040]  ? do_syscall_64+0xbe/0x3b0
[  209.088630][T12040]  do_syscall_64+0xfa/0x3b0
[  209.088645][T12040]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.088660][T12040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.088674][T12040]  ? exc_page_fault+0x9f/0xf0
[  209.088690][T12040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.088704][T12040] RIP: 0033:0x7f500158eba9
[  209.088719][T12040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.088732][T12040] RSP: 002b:00007f500237a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.088747][T12040] RAX: ffffffffffffffda RBX: 00007f50017d5fa0 RCX: 00007f500158eba9
[  209.088758][T12040] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  209.088767][T12040] RBP: 00007f5001611e19 R08: 0000000000000000 R09: 0000000000000000
[  209.088776][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.088784][T12040] R13: 00007f50017d6038 R14: 00007f50017d5fa0 R15: 00007fff60417678
[  209.088811][T12040]  </TASK>
[  209.263152][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  209.376868][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  209.526907][ T5909] bond15: (slave wlan0): failed to get link speed/duplex
[  209.636434][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  209.661932][T12060] netlink: 'syz.2.1864': attribute type 12 has an invalid length.
[  209.732751][T12062] netlink: 'syz.2.1866': attribute type 4 has an invalid length.
[  209.746983][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  209.751293][T12064] netlink: 'syz.3.1865': attribute type 1 has an invalid length.
[  209.805122][T12066] netlink: 'syz.2.1866': attribute type 4 has an invalid length.
[  209.857038][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  209.925759][T12068] macvtap1: entered promiscuous mode
[  209.928620][T12068] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[  210.431608][T12087] bond0: (slave vlan1): Opening slave failed
[  210.529763][T12090] __nla_validate_parse: 4 callbacks suppressed
[  210.529774][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1873'.
[  210.584052][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1874'.
[  210.766161][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'.
[  210.770166][T12096] batadv0: entered promiscuous mode
[  210.787957][T12099] wg1 speed is unknown, defaulting to 1000
[  210.824369][T12097] wg1 speed is unknown, defaulting to 1000
[  211.275349][T12085] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  211.453630][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'.
[  211.519352][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'.
[  211.550294][T12113] syzkaller1: entered promiscuous mode
[  211.553072][T12113] syzkaller1: entered allmulticast mode
[  211.600403][T12119] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1881'.
[  211.639049][T12119] : entered promiscuous mode
[  211.643117][T12119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1881'.
[  211.752814][T12123] bridge0: port 4(batadv4) entered blocking state
[  211.755713][T12123] bridge0: port 4(batadv4) entered disabled state
[  211.761488][T12123] batadv4: entered allmulticast mode
[  211.766101][T12123] batadv4: entered promiscuous mode
[  211.861056][T12125] validate_nla: 2 callbacks suppressed
[  211.861077][T12125] netlink: 'syz.0.1884': attribute type 17 has an invalid length.
[  212.138377][T12137] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  212.212515][T12137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'.
[  212.219061][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'.
[  212.229359][   T12] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  212.232629][   T12] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  212.233859][T12137] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1890'.
[  212.420347][T12142] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  212.502481][T12142] batadv_slave_0: entered promiscuous mode
[  212.635705][T12155] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  212.641614][T12155] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  212.641661][T12156] netlink: 'syz.2.1898': attribute type 10 has an invalid length.
[  212.674821][T12155] 8021q: adding VLAN 0 to HW filter on device bond24
[  212.691272][T12155] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  212.695617][T12155] bond24: (slave macvlan4): Enslaving as a backup interface with a down link
[  213.067627][T12178] netlink: 'syz.0.1901': attribute type 17 has an invalid length.
[  213.116559][T12175] netlink: 'syz.2.1900': attribute type 10 has an invalid length.
[  213.154565][   T12] ip6gretap3: left promiscuous mode
[  213.221298][T12189] netlink: 'syz.2.1905': attribute type 10 has an invalid length.
[  213.297955][T12185] pimreg: left allmulticast mode
[  213.339229][T12193] rdma_rxe: rxe_newlink: failed to add lo
[  213.404071][T12195] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  213.463586][T12195] 8021q: adding VLAN 0 to HW filter on device bond48
[  213.708527][T12214] netlink: 'syz.3.1912': attribute type 1 has an invalid length.
[  213.712428][T12211] "syz.3.1912" (12211) uses obsolete ecb(arc4) skcipher
[  213.772096][T12211] vlan2: entered allmulticast mode
[  213.773790][T12211] bond18: entered allmulticast mode
[  213.797559][ T7037] net_ratelimit: 26 callbacks suppressed
[  213.797579][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  213.916753][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  214.068717][T12234] batadv4: left allmulticast mode
[  214.072722][T12234] batadv4: left promiscuous mode
[  214.078550][T12234] bridge0: port 4(batadv4) entered disabled state
[  214.084979][T12234] batadv3: left allmulticast mode
[  214.087562][T12234] batadv3: left promiscuous mode
[  214.089889][T12234] bridge0: port 3(batadv3) entered disabled state
[  214.095811][T12234] batadv2: left allmulticast mode
[  214.098247][T12234] batadv2: left promiscuous mode
[  214.100561][T12234] bridge0: port 2(batadv2) entered disabled state
[  214.105893][T12234] batadv1: left allmulticast mode
[  214.109009][T12234] batadv1: left promiscuous mode
[  214.111292][T12234] bridge0: port 1(batadv1) entered disabled state
[  214.266788][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  214.377709][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  214.449906][T12248] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.454622][T12248] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  214.489515][T12258] netlink: 'syz.3.1923': attribute type 5 has an invalid length.
[  214.508771][T12258] geneve5: entered promiscuous mode
[  214.510929][T12258] geneve5: entered allmulticast mode
[  214.520109][ T7037] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  214.523374][ T7037] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  214.533962][ T7037] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  214.552088][T12248] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.555885][T12248] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  214.560700][T12248] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  214.577430][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  214.620081][T12248] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.627417][T12248] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  214.630596][T12248] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  214.641736][T12264] rdma_rxe: rxe_newlink: failed to add lo
[  214.724752][T12248] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.732004][T12248] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  214.735803][T12248] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  214.766576][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  214.833169][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  214.840789][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  214.843929][   T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  214.860273][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  214.864842][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  214.871784][   T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  214.892403][ T5876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  214.895755][ T5876] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  214.900734][ T5876] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  214.909820][ T5876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  214.913280][ T5876] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  214.920287][ T5876] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 19999 - 0
[  214.928186][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  215.020665][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.024625][T12281] team0: Failed to send options change via netlink (err -105)
[  215.028557][T12281] team0: Port device batadv0 added
[  215.031262][T12279] wg1 speed is unknown, defaulting to 1000
[  215.037552][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  215.157330][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  215.175966][T12290] bridge0: entered allmulticast mode
[  215.186987][T12290] pim6reg: entered allmulticast mode
[  215.234146][T12292] veth0_vlan: entered allmulticast mode
[  215.241951][T12292] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  215.482597][T12303] wg1 speed is unknown, defaulting to 1000
[  215.603890][T12316] __nla_validate_parse: 30 callbacks suppressed
[  215.603903][T12316] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1944'.
[  215.729950][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1945'.
[  215.806889][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'.
[  216.026920][T12331] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1949'.
[  216.037970][T12331] batadv5: entered promiscuous mode
[  216.040229][T12331] batadv5: entered allmulticast mode
[  216.209244][T12296] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  216.747770][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'.
[  216.814720][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'.
[  216.868096][T12377] 8021q: adding VLAN 0 to HW filter on device bond19
[  216.906477][T12378] 8021q: adding VLAN 0 to HW filter on device bond19
[  216.909757][T12378] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  216.915028][T12378] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  216.935792][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'.
[  216.956660][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'.
[  216.965747][T12379] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  216.973011][T12379] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  216.992999][T12377] veth13: entered promiscuous mode
[  216.998393][T12377] bond19: (slave veth13): Enslaving as an active interface with a down link
[  217.100895][T12400] validate_nla: 7 callbacks suppressed
[  217.100919][T12400] netlink: 'syz.2.1967': attribute type 7 has an invalid length.
[  217.170387][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'.
[  217.300770][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'.
[  217.530802][T12427] netlink: 'syz.3.1974': attribute type 17 has an invalid length.
[  217.570135][T12431] netlink: 'syz.3.1975': attribute type 1 has an invalid length.
[  217.653966][T12434] netlink: 'syz.3.1976': attribute type 12 has an invalid length.
[  217.685023][T12436] netlink: 'syz.3.1977': attribute type 10 has an invalid length.
[  217.692826][T12436] team0: Port device dummy0 added
[  217.700540][T12436] netlink: 'syz.3.1977': attribute type 10 has an invalid length.
[  217.709514][T12436] team0: Port device dummy0 removed
[  217.773290][T12438] 8021q: adding VLAN 0 to HW filter on device team0
[  217.874602][T12443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  218.061091][T12448] siw: device registration error -23
[  218.223599][T12455] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  218.228277][T12455] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  218.244250][T12455] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  218.294897][T12455] 8021q: adding VLAN 0 to HW filter on device bond33
[  218.303318][T12457] wg1: entered promiscuous mode
[  218.305475][T12457] wg1: entered allmulticast mode
[  218.319044][T12455] bond33: (slave wlan0): Enslaving as an active interface with a down link
[  218.322595][   T95] wg1 speed is unknown, defaulting to 1000
[  218.324964][   T95] syz0: Port: 1 Link ACTIVE
[  218.432447][T12460] netlink: 'syz.0.1983': attribute type 12 has an invalid length.
[  218.685035][T12464] bond0: entered promiscuous mode
[  218.690997][T12464] ip6gretap1: entered promiscuous mode
[  218.695104][T12464] bond0: left promiscuous mode
[  218.701047][T12464] ip6gretap1: left promiscuous mode
[  218.906722][ T7037] net_ratelimit: 28 callbacks suppressed
[  218.906735][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  219.018140][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  219.085029][T12483] wg1 speed is unknown, defaulting to 1000
[  219.187423][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  219.209350][T12490] 8021q: adding VLAN 0 to HW filter on device bond34
[  219.416011][T12490] bond34 (unregistering): Released all slaves
[  219.467388][T12503] 8021q: adding VLAN 0 to HW filter on device bond49
[  219.512276][T12506] ipvlan3: entered allmulticast mode
[  219.514386][T12506] bond49: entered allmulticast mode
[  219.556862][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  219.588437][ T7037] bond15: (slave wlan0): failed to get link speed/duplex
[  219.685662][T12514] block nbd0: not configured, cannot reconfigure
[  219.702641][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  219.810381][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  219.884710][T12527] workqueue: Failed to create a rescuer kthread for wq "bond50": -EINTR
[  219.947152][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  220.066692][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  220.208104][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  220.251123][T12554] bond24: option mode: unable to set because the bond device has slaves
[  220.326540][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  220.669762][T12576] __nla_validate_parse: 14 callbacks suppressed
[  220.669773][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2017'.
[  220.709319][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'.
[  220.712801][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'.
[  220.716161][T12576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2017'.
[  220.720253][T12576] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2017'.
[  221.252594][T12590] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2022'.
[  221.255579][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'.
[  221.583394][T12599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2024'.
[  221.743949][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'.
[  221.789016][T12606] 8021q: adding VLAN 0 to HW filter on device bond21
[  221.795974][T12606] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2027'.
[  221.803184][T12605] bond34: entered promiscuous mode
[  221.805194][T12605] bond34: entered allmulticast mode
[  221.808407][T12605] 8021q: adding VLAN 0 to HW filter on device bond34
[  221.818298][T12606] macsec1: entered promiscuous mode
[  221.820219][T12606] bond21: entered promiscuous mode
[  221.822035][T12606] macsec1: entered allmulticast mode
[  221.823726][T12606] bond21: entered allmulticast mode
[  221.831526][T12606] bond21: left allmulticast mode
[  221.833318][T12606] bond21: left promiscuous mode
[  221.853634][T12605] bridge22: entered promiscuous mode
[  221.856026][T12605] bridge22: entered allmulticast mode
[  221.858887][T12605] bond34: (slave bridge22): Enslaving as a backup interface with an up link
[  222.177760][T12626] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.252429][T12631] validate_nla: 10 callbacks suppressed
[  222.252451][T12631] netlink: 'syz.0.2034': attribute type 1 has an invalid length.
[  222.262241][T12634] netlink: 'syz.3.2035': attribute type 2 has an invalid length.
[  222.281822][T12631] 8021q: adding VLAN 0 to HW filter on device bond35
[  222.304082][T12634] veth0_to_team: entered promiscuous mode
[  222.310063][T12634] veth0_to_team: entered allmulticast mode
[  222.319296][T12639] netlink: 'syz.0.2036': attribute type 2 has an invalid length.
[  222.442466][T12649] netlink: 'syz.0.2039': attribute type 1 has an invalid length.
[  222.453944][T12652] netlink: 'syz.3.2040': attribute type 1 has an invalid length.
[  222.468612][T12649] 8021q: adding VLAN 0 to HW filter on device bond37
[  222.512985][T12652] 8021q: adding VLAN 0 to HW filter on device bond22
[  222.550852][T12654] bond22: (slave veth15): Enslaving as an active interface with a down link
[  222.575405][T12652] macvlan4: entered promiscuous mode
[  222.578049][T12652] macvlan4: entered allmulticast mode
[  222.580548][T12652] bond22: entered promiscuous mode
[  222.583404][T12652] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  222.586415][T12652] bond22: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  222.597667][T12652] bond22: left promiscuous mode
[  222.620389][T12657] netlink: 'syz.0.2041': attribute type 17 has an invalid length.
[  222.661375][T12659] netlink: 'syz.0.2042': attribute type 1 has an invalid length.
[  222.855923][T12672] gretap0: entered promiscuous mode
[  222.990471][T12681] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  223.022875][T12681] 8021q: adding VLAN 0 to HW filter on device bond38
[  223.045688][T12681] bond38: (slave veth23): Enslaving as an active interface with a down link
[  223.059927][T12681] macvlan0: entered promiscuous mode
[  223.062122][T12681] macvlan0: entered allmulticast mode
[  223.065215][T12681] bond38: entered promiscuous mode
[  223.068104][T12681] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  223.071422][T12681] bond38: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.079266][T12681] bond38: left promiscuous mode
[  223.745782][T12710] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  223.749017][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.0.2056 Not tainted syzkaller #0 PREEMPT(full) 
[  223.749039][T12710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.749051][T12710] Call Trace:
[  223.749058][T12710]  <TASK>
[  223.749065][T12710]  dump_stack_lvl+0x189/0x250
[  223.749095][T12710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.749115][T12710]  ? __pfx__printk+0x10/0x10
[  223.749141][T12710]  ? kernfs_path_from_node+0x2f/0x290
[  223.749157][T12710]  ? kernfs_path_from_node+0x250/0x290
[  223.749172][T12710]  ? kernfs_path_from_node+0x2f/0x290
[  223.749191][T12710]  sysfs_warn_dup+0x8e/0xa0
[  223.749207][T12710]  sysfs_do_create_link_sd+0xc0/0x110
[  223.749226][T12710]  device_add_class_symlinks+0x1cf/0x240
[  223.749246][T12710]  device_add+0x475/0xb50
[  223.749265][T12710]  wiphy_register+0x1ba6/0x28d0
[  223.749296][T12710]  ? __pfx_wiphy_register+0x10/0x10
[  223.749312][T12710]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  223.749341][T12710]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  223.749365][T12710]  ieee80211_register_hw+0x3484/0x4100
[  223.749398][T12710]  ? ieee80211_register_hw+0x14c1/0x4100
[  223.749435][T12710]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  223.749461][T12710]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.749485][T12710]  ? __hrtimer_setup+0x187/0x210
[  223.749499][T12710]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  223.749526][T12710]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  223.749574][T12710]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  223.749593][T12710]  ? trace_kmalloc+0x1f/0xd0
[  223.749610][T12710]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  223.749662][T12710]  ? kstrndup+0xbf/0x160
[  223.749687][T12710]  hwsim_new_radio_nl+0xea4/0x1b10
[  223.749710][T12710]  ? __pfx___nla_validate_parse+0x10/0x10
[  223.749745][T12710]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.749775][T12710]  ? __nla_parse+0x40/0x60
[  223.749791][T12710]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  223.749818][T12710]  genl_family_rcv_msg_doit+0x215/0x300
[  223.749842][T12710]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  223.749873][T12710]  ? bpf_lsm_capable+0x9/0x20
[  223.749892][T12710]  ? security_capable+0x7e/0x2e0
[  223.749919][T12710]  genl_rcv_msg+0x60e/0x790
[  223.749943][T12710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.749961][T12710]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.749994][T12710]  netlink_rcv_skb+0x208/0x470
[  223.750008][T12710]  ? __lock_acquire+0xab9/0xd20
[  223.750029][T12710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.750050][T12710]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.750083][T12710]  ? down_read+0x1ad/0x2e0
[  223.750107][T12710]  genl_rcv+0x28/0x40
[  223.750141][T12710]  netlink_unicast+0x82f/0x9e0
[  223.750175][T12710]  ? __pfx_netlink_unicast+0x10/0x10
[  223.750201][T12710]  ? netlink_sendmsg+0x642/0xb30
[  223.750216][T12710]  ? skb_put+0x11b/0x210
[  223.750237][T12710]  netlink_sendmsg+0x805/0xb30
[  223.750261][T12710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.750280][T12710]  ? aa_sock_msg_perm+0xf1/0x1d0
[  223.750297][T12710]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.750313][T12710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.750329][T12710]  __sock_sendmsg+0x21c/0x270
[  223.750352][T12710]  ____sys_sendmsg+0x505/0x830
[  223.750375][T12710]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.750401][T12710]  ? import_iovec+0x74/0xa0
[  223.750429][T12710]  ___sys_sendmsg+0x21f/0x2a0
[  223.750450][T12710]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.750502][T12710]  ? __fget_files+0x2a/0x420
[  223.750516][T12710]  ? __fget_files+0x3a0/0x420
[  223.750538][T12710]  __x64_sys_sendmsg+0x19b/0x260
[  223.750561][T12710]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.750590][T12710]  ? rcu_is_watching+0x15/0xb0
[  223.750612][T12710]  ? do_syscall_64+0xbe/0x3b0
[  223.750665][T12710]  do_syscall_64+0xfa/0x3b0
[  223.750682][T12710]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.750698][T12710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.750715][T12710]  ? exc_page_fault+0x9f/0xf0
[  223.750733][T12710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.750747][T12710] RIP: 0033:0x7f500158eba9
[  223.750761][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.750775][T12710] RSP: 002b:00007f5002338038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.750792][T12710] RAX: ffffffffffffffda RBX: 00007f50017d6180 RCX: 00007f500158eba9
[  223.750805][T12710] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  223.750815][T12710] RBP: 00007f5001611e19 R08: 0000000000000000 R09: 0000000000000000
[  223.750824][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.750832][T12710] R13: 00007f50017d6218 R14: 00007f50017d6180 R15: 00007fff60417678
[  223.750857][T12710]  </TASK>
[  223.946504][   T14] net_ratelimit: 27 callbacks suppressed
[  223.946526][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  223.970832][T12712] netlink: 'syz.3.2057': attribute type 17 has an invalid length.
[  224.056959][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  224.166764][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  224.276944][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  224.386759][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  224.519241][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  224.627437][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  224.638826][T12729] vlan0: left allmulticast mode
[  224.640761][T12729] bond32: left allmulticast mode
[  224.645948][T12729] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  224.686675][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.747167][ T5876] bond15: (slave wlan0): failed to get link speed/duplex
[  224.831735][T12742] wg1 speed is unknown, defaulting to 1000
[  224.866961][ T7085] bond15: (slave wlan0): failed to get link speed/duplex
[  224.891360][T12745] netlink: 'syz.3.2067': attribute type 12 has an invalid length.
[  224.978876][   T14] bond15: (slave wlan0): failed to get link speed/duplex
[  225.134901][T12749] bond6: (slave macvlan3): Releasing backup interface
[  225.353039][T12756] pimreg: entered allmulticast mode
[  225.422976][T12756] pimreg: left allmulticast mode
[  225.513388][T12754] vlan0: entered allmulticast mode
[  225.521710][T12754] bond23: entered allmulticast mode
[  225.812526][T12789] tipc: Resetting bearer <eth:team0>
[  225.891283][T12793] __nla_validate_parse: 12 callbacks suppressed
[  225.891298][T12793] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2082'.
[  225.905090][T12793] batadv2: entered promiscuous mode
[  225.907717][T12793] batadv2: entered allmulticast mode
[  226.143845][T12814] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2087'.
[  226.181472][T12816] wg1 speed is unknown, defaulting to 1000
[  226.314367][T12825] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  226.582750][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'.
[  226.585923][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'.
[  226.897612][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2100'.
[  227.101593][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'.
[  227.115151][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'.
[  227.429846][T12890] validate_nla: 10 callbacks suppressed
[  227.429865][T12890] netlink: 'syz.0.2112': attribute type 1 has an invalid length.
[  227.465925][T12890] 8021q: adding VLAN 0 to HW filter on device bond39
[  227.482583][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'.
[  227.485656][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'.
[  227.552946][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2114'.
[  227.564974][T12890] veth25: entered promiscuous mode
[  227.575495][T12890] bond39: (slave veth25): Enslaving as an active interface with a down link
[  227.592090][T12899] netlink: 'syz.2.2115': attribute type 5 has an invalid length.
[  227.595181][T12899] netlink: 'syz.2.2115': attribute type 7 has an invalid length.
[  227.629217][T12899] : entered promiscuous mode
[  227.714329][T12907] netlink: 'syz.2.2117': attribute type 5 has an invalid length.
[  227.720791][T12907] netlink: 'syz.2.2117': attribute type 5 has an invalid length.
[  227.818818][T12911] netlink: 'syz.3.2119': attribute type 1 has an invalid length.
[  227.876104][T12911] 8021q: adding VLAN 0 to HW filter on device bond24
[  227.975683][T12917] 8021q: adding VLAN 0 to HW filter on device bond24
[  227.980505][T12917] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  227.988434][T12917] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  228.067710][T12911] veth17: entered promiscuous mode
[  228.079725][T12911] bond24: (slave veth17): Enslaving as an active interface with a down link
[  228.308750][T12931] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  228.431534][T12933] pimreg: entered allmulticast mode
[  228.463658][T12941] erspan0: entered promiscuous mode
[  228.470270][T12941] erspan0: left promiscuous mode
[  228.560126][T12943] wg1 speed is unknown, defaulting to 1000
[  229.069429][T12962] vlan0: entered promiscuous mode
[  229.070978][T12962] macvtap0: entered promiscuous mode
[  229.401851][T12973] wg1 speed is unknown, defaulting to 1000
[  229.448691][   T24] tipc: Node number set to 1742030392
[  229.460615][T12983] netlink: 'syz.0.2136': attribute type 12 has an invalid length.
[  230.032193][T13016] netlink: 'syz.2.2146': attribute type 1 has an invalid length.
[  230.101604][T13022] batman_adv: batadv0: Adding interface: ip6gretap4
[  230.104207][T13022] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.115515][T13022] batman_adv: batadv0: Interface activated: ip6gretap4
[  254.727080][ T8234] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2

VM DIAGNOSIS:
18:34:42  Registers:
info registers vcpu 0

CPU#0
RAX=ed61d838523bbb00 RBX=ffffffff819683f8 RCX=ed61d838523bbb00 RDX=0000000000000001
RSI=ffffffff8d9b9a94 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa74a093ae0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f127f9a7d20
XMM02=23c0030e100023b0 0302c210002ed003 XMM03=00080023e00301d2 100023d003738004
XMM04=0210002380040100 00140806060156ec XMM05=010c08000810004a 1000060170cc0210
XMM06=0023800401000014 0806060156ec0008 XMM07=0023e00301d21000 23d00373800423c0
XMM08=030e100023b00302 c210002ed0037080 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=08a04c82b32d7900 RBX=ffffffff819683f8 RCX=08a04c82b32d7900 RDX=0000000000000001
RSI=ffffffff8d9b9a94 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056465871c7e8 CR3=0000000106dfc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
