last executing test programs:

1.731568341s ago: executing program 2 (id=4022):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000380)=0x3fa, 0x4)
listen(r0, 0x50)
listen(r0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f, 0x5f, 0x7, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x5}, @datasec={0xa, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x3, 0x7}, {0x2, 0x7fffffff, 0x4}], "4c34a5"}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x9}, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30, 0x0]}}, &(0x7f00000006c0)=""/123, 0x7f, 0x7b, 0x0, 0x8, 0x10000}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000100000000000000002000400180100002020732500000000002020207b1af8ff00000000bfa100000000000407010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000004eab80d354291331af040c0002000100000004000000343e8d540fa938d79d9c043227517c1ae8a8c73fc34ec10426105b5ee2e4abe3ab7890c1780967d3956416a84e0c5b5552edd342f472cb6b839f3e28717832c1874958ff8dcc70e423b2509f9b72d89989ea82619372da0bca17a7852783cd878057e98ed2caeb20586640b62c3b85daef14177921b74e891f50bf0266156115eac987f964525693c5537dd4c121423cdd8f29fdf1c07a020e74acaaa38ac5b7aba49090938c15fc08277071520abc692e943e63ec376dbbd85b29fb64092c0587e90b"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x61, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x400, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24e100006800000100000000000000000a00000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

868.04374ms ago: executing program 2 (id=4034):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4091)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

863.790063ms ago: executing program 2 (id=4035):
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

732.215583ms ago: executing program 1 (id=4036):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="82022100907800000402fe0af999f13a71b0e371"], 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf2501000000080001009d03a17733a236def7f2c41797390f5ec4fee065d5b4fb72c0cc268af6b5142368de4d3866f873d1326ca0b4384df75cefc51f1c18a78ee362fd3949e73c9a1430b295ea46347b0b060a5554023f4dca53bb3c2d76ba3e1361206fb0168358b2e96e3f0e6b257a613e8e8972dc2c2b8560e58523ecccb8372c482a5dd651cb61a65fdac19f575fbd724f4c475be753cf09af46018322213d07970e32954705a990cd6d8ef16f8371213c0a2e227b3090e691f14ce7631732026e93a61fa032124a2ca09e0207e0ae193ded07dce21c33b8804d0813572555", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x10, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf0, 0x1, [@m_ctinfo={0xb8, 0x15, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x6, 0xea, 0xfffffff8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100000}]}, {0x54, 0x6, "eb6917253c99599037a725da02a011187610a14bb6ef8305eb24ac42a0e2f434e0621dc27aa82989bb063eb14b303ba2677b7cb48a7161b6ba6606014982cabc7796f3211a21d07e73ca860a472f1a6f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/69, 0x4d}, {0x0, 0x4f}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2c000000000b010300000000000000d7b80d04d50462b10000000d000100727066696c7465726f162a75ac33f099d7355cbebe37a1b435655ea18e1b3ec53174530ce32ed5c18a0dd7e40789ae3f31f072682f09f9adf90e355a5718f522beef5829f1bd6c05b9b9c051efe674b3ef9ca79dcfdf7775e3419bf73df534adccfbf0031f352a32a5681335dbe5e8760fe8f61f97a8765a2ccff5046ee932c54807b39dedeea96766d1d1b1d9e69326ac88e728a425343d14007323ae8603cb360829341b333881185b8034e5114f3d9a3c1f4ec1fe70ca4519aec65975390ea5b4ac7184f409088da8b5b274729e5fa89fc7f4a74cd13310a8528dca2ccaf0253c9ace69dd56e5e4157c5a458f7d5f9a9a80acee3826b99efc86f1a797dd57cf8b27e34a43e83ef22f966dc188040359df61a5c80106d73d34eb5df01d07a96db2c18ae80d1cdebf4425875dca0771a1b5a8b528b1f084320e61a0a2edeb625b6348e0042dcc327b46221e82b1b0e9af0ce2714eab3f4f3ecf334e549af655ebc62918d2"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000009356f70f00000a0000000000000000000000140005"], 0x30}}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4)
socket$netlink(0x10, 0x3, 0x9)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$netlink(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183300000100000000000000000000009500000000000000b7854000f0ffffff183300000300000000000000000000000d392000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000e40)=""/153, 0x40f00, 0x12, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r10, 0x6, &(0x7f00000009c0)=[0xffffffffffffffff, r8, r8, r7, r8, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xd, 0xc}, {0x2, 0x5, 0xe, 0x1}, {0x3, 0x2, 0xb, 0x2}, {0x13, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94)

681.298541ms ago: executing program 0 (id=4037):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020305100100000000000008001002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x22, 0x800, 0x1ae4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0xc}}, 0x0, 0x8}, 0x90)
unshare(0x8000400)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={<r8=>r2, @in={{0x2, 0x4e20, @broadcast}}, 0x80000000, 0xffffffff, 0x0, 0xffff48d9, 0x10}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r8, 0x6)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x7f, 0x30}, 0xc)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)

680.991225ms ago: executing program 2 (id=4038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x4000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$alg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="12bc98bacbf2da4b7ce9c069a05978a3848f040be8ca46e373c3f52a7b814ebf9fbdbc25c0232f9a3c6ad2572bc3ff28d0a660c6fc9704f8d0e2b7f47eb3b9a95f40bf80bcb7dce15a71", 0x4a}, {&(0x7f0000000300)="aa4cff3b20b7f02030f57d149b68d28ab35918a1eabe36e56f41c685ea1383ef7209f5c0256428576cca6ab56a1ad868880e280886fa241a56c3f2005fbc65389c8c351d762512e5e53963d2159c54aa046eb45544c9b293dfbaa293e158c2229a9579e52e2968fa627c764ef3288abdcd3fb1b8cde3c043f457b29b93ebe3109e7f5fb81805ccc48bf105772d15c22ffc738677e70f6c442f7286d676c22099cf852f32c8b98561d0920d4a1c08aaece0c58926d573df0ccecf5b4dc842162ad93bdfeb3c209c9ccc0d407d5e7b866f697ba68eed7f37b4f378b0765658c711cdbdbc2f6d745f416b0d46ab7eac9b921009b3b16e19a7", 0xf7}, {&(0x7f00000006c0)="7e781ec899e5cad50777db5ebc04d46256888da546c2bc1a328f3faa7df4e6f9f71b14954a0375a1891fe4b4d490b8957c9f429ed25223ad372b87236b55d055ab1f7ea848d678386a5b76e22622b5de54c18a42466a1cc8619009c13d98063a55c43f3ce8a00c262e5cb9b6df728a1889163777cd1f963cfebda226a3232183b7321a44247bbddd752600fe07f4501ec776a2290e448903407789ceed2d6c0e1b90180b48aaaac3457b62cdccb01bfd5e0ec9d4f1b9bded589198b8124b761aa65352facc75b5437e45e8694802fc3be516273f1ae0950e76ba5ef74a", 0xdd}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000540)="7ad457d40eeaf759ddb4b52717c1ecd3b67d13a0e222206773c1e3c0fa4a99b81b9843efc556f3d1b0998813d237b945c86d82ff1698df431e07dacfaa7c207dff92caac2b7a285b35495d734529a103ff5cbdf7af7f0589e7bc51402706420d23916f01fe4e47d432f77f361fb633d548d1a8955c35c3cdeaae7ba1df3ef4405364904012fc47c9d453d04d4c330cb9b30d14231ce85fe39f6afe1adcc197e7cbc4d49ea9df638aa4e62b715384732cea4e002eba4a214429b22b8929b9", 0xbe}, {&(0x7f00000007c0)="fca910ded59dd54d944403a21afe3abd3d3ceddbee5c5980156c3b9ac494bb4fe8e82cc1951a43303c7b410cd52b096fc6ff469feae2710b17c84f0836d3d20d9706374fee36fc752de206d794f2142e7dffba7cd65353a86b9a0a353ac009543fb286c1ae380957b6f985302cd144ff660d07c34fedc68720d30f2ebd7f97f2016a39feda49da01563afde310eb5718867f08bc89b5599f3efef5949484d93f78bbbcf5e24287b65e42192ad86d00db7d52057c82a4daa7f53a6d7e29fa3bba5b786f5af5f35d771127dbc44c8911501c06f7ddf2313ec7d2ef906875", 0xdd}, {&(0x7f00000008c0)="d0222521e6b7c16656a0eb4199d1b72c07ee8dc8d74a03ba4749a15f438b0edf59621ec0c2862b2bc07ecfd12afb960c7b9894d475bcb38b14d270ed30da481fb86ddccd52c8be9a987c56a75262b80851db6f0e2d43c0b677293ff475914357f12ee44b5965c94b31d0c5b94ff982512c937bf9630c5458a85cabe944e94ac28da070cbd61b8e41fdaa137b227d71eb737d0fe1219a9d227ec1278f4abdeb32cd5483aebc14af8f51fb2039462127f1696688ec99a80ef0a92d08d55dce652c6f5a8df2b3e3920d546516b681673b5753199edf164ab648991e3d63c49189981f6c185b6f545473", 0xe8}, {&(0x7f0000000200)="a5376fc2a83d5a8e0839391265", 0xd}, {&(0x7f00000009c0)="58e5ca88a31ac93171054d6787254634ba09797fa3a5c7d2a527709f7db897c8f184a7f5489b08eddc10ac7cfb3a7e68579218d3df88efbf54848f70d9a6615d0ec66a4ffa9cbcab911c3f91075c611ea4faea8d5534dc89c52c36672898b359173f3a2d7cdcef854f72b8e7a6e2e97cc468a27c915820e82f6d9e8e7c77bbfa7f5d11d77efb3c715097385ae99cacfec6e87fa787ff7a7b5f27309ca4ae3944d70fdecc59d49f3fa5fb64cad99ec0cefdba542cb23114f46e902d20c758a004560c182fbef7a0b67723951e3bd3af059dc7", 0xd2}], 0x9, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x2f0, 0x400c000}, 0x20040000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b0404000000000005001280080001a7736963000600080029000000391e74397af802d09e87871b8bd58a87765b4181e9200be2cf606f4ec0ca52e600cb752a6569c0c0577fae33b44ce4302ac4501cfc0acc5cc4dc3fdbe323f7a4cd59132debb25c97eebf2ed614cbafd2496cc7380b40c920b648497410df7048f4f5ebde61827260c09db28f26456a7b1e1cb71f171382f2627ef2f6fa02ccb716a9a07aad21db38b01561acb450d100bdd7fe9039fd4468f97c44c74a59edcf3f8d4698fb04"], 0x40}}, 0x0)

392.220462ms ago: executing program 0 (id=4039):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000740)=0x4)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x20)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bd", 0x8d}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e100", 0xb5}, {0x0}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4", 0x8f}, {0x0}], 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000fffc14000780080011400000000005001500080000000500010006000000050005000a00000005000400000000000900020073797a30000000000d000300686173683a6e6574000000007af9c7bf14617cadddf36d8d7c75913bb64bfa5b0cee7838b891a46c579a8d504895bd4421cc802f46abcca388c9c3557555d422601a5772bc05716652ed396fe5cf1f7f217adab5dccafddbfcd705b8908cb9820520d9f6ad629c5b2ee5ff51a3858a0c305f2758cc426d49959cfdb7dc3777a9540333d096fc1ecfc04955768b1a1e4de405af33400433f293e6d2810dbf5e2d782b9d435fb127b4d2999d8514ebf47fa1cc6fa7db70c802012ffddcba9d96f116249ea56c56cf01a47c218ed69f841810a3e31fcfc02e7984016f6e1f7b1195499b190dd461a174ecd13cacb3f0f203c3a0e64cac454a70f323009392eaa5989eb0c1405e97ecafa95925a1b8ba85efb24ee176f3519eaed11912fa26aeee4d215f7551735d898ba7ffd87ba31051ff51d109fc93654bd9f2487821a3e14382c5fda61a"], 0x5c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f0000000300)='[', 0x1, 0x4090, &(0x7f0000000000)={0xa, 0x0, 0x8a3, @loopback, 0xb}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000001240)=""/4092, &(0x7f0000000240)=0xffc)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x28, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x2, 0x2, 0x40}, @jmp={0x5, 0x1, 0x3, 0x7, 0xb, 0xfffffffffffffff3, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x6, 0x5, 0x7, 0x6e, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)

321.218423ms ago: executing program 2 (id=4040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, <r3=>0xea60})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xf4e54000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x38}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="5300000010000108000000000000000800000000", @ANYRES16=r0, @ANYBLOB="80400100028001000c002b8008000100", @ANYRES32=r5, @ANYRESDEC=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0xc014)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000000701080000000008000000000000003c000780080001400000000208000240000000060800014000000006080002400000000808000140000000030800024000400000000200"/88], 0x58}, 0x1, 0x0, 0x0, 0x200040d0}, 0x40010)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4008, r4}, 0x18)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
r12 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r9, 0x58, &(0x7f00000005c0)}, 0x10)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r7, @ANYRESDEC=0x0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

319.675754ms ago: executing program 1 (id=4041):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000010000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402fe0af989f16d73c0e798"], 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x20000040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004d40)=@newchain={0x192c, 0x64, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0xfff1}, {0xe, 0x1}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x60fa}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1bd75}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xd656}, @filter_kind_options=@f_flow={{0x9}, {0x186c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xf}}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x874, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f00000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x8, 0x9, 0xffffffff, 0x6, {0x2, 0x1, 0x6, 0x1000, 0x2, 0x101}, {0x6, 0x0, 0x0, 0x3, 0x6, 0xb}, 0x4, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9f80, 0x6, 0x8, 0x6, 0x2, 0x401, 0x88000000, 0xa0, 0x0, 0x6, 0x4, 0x7dfdfe1f, 0x200, 0x200, 0x9, 0xffffffc0, 0x0, 0x5, 0xfffffffd, 0x0, 0x20, 0x0, 0x8, 0x5, 0xc31, 0x0, 0x30d, 0xcb, 0x9, 0x5, 0xb2, 0x7f, 0x8291, 0x9, 0x3, 0x3, 0x7d, 0x2, 0x0, 0x3, 0x8, 0x8, 0x7, 0x9, 0x0, 0x8, 0x85, 0xa, 0x1, 0x7, 0x8, 0x400, 0x5, 0x101, 0x4, 0x1, 0x1ff, 0x3, 0x7, 0x3, 0x1, 0x3, 0xd, 0x5, 0xf, 0x3, 0xffffffff, 0x9, 0x0, 0x4f39, 0xe1, 0x8, 0xfffffff9, 0x8, 0x7f, 0x7f, 0x2, 0x3, 0x8, 0x7fff, 0x3, 0xffff, 0x80000000, 0x0, 0xb2, 0xfff, 0x8, 0x8, 0x8000000, 0x7ff, 0xffff, 0x0, 0x30e69ca5, 0x9, 0xfffffffb, 0x1, 0x3, 0x0, 0x0, 0x6, 0x32, 0x0, 0x3, 0x2, 0x80, 0x200, 0x2e, 0x8fb, 0xffffffff, 0x0, 0x218f, 0x4, 0x3, 0x10, 0x9, 0x0, 0x5a5, 0x0, 0x2, 0xc0000, 0x5, 0x80000001, 0x80000001, 0x7fffffff, 0xe, 0x344, 0x4, 0x7, 0x60, 0x1, 0x3, 0xffffff35, 0x7, 0xa6e, 0x288, 0x9, 0x10000, 0xffff8001, 0xe, 0xffffa2ab, 0x80080, 0x4, 0x8, 0x2, 0x7, 0x5, 0x4, 0x2, 0x7, 0x7, 0x7, 0x3, 0x4, 0x0, 0xff, 0x6, 0xfffffffb, 0x2, 0x6, 0x0, 0x0, 0x40, 0x3, 0x62e3, 0x42, 0x6, 0x5, 0xffff, 0x71a, 0x6, 0x0, 0xfffffffb, 0x101, 0x6, 0x2, 0x8ff, 0x8000, 0x0, 0x1, 0x2, 0x1, 0x3, 0x2, 0x99c0, 0x9, 0x5, 0x8000, 0x4, 0x1f4f, 0x0, 0xfffffffe, 0xcfe031fb, 0x7, 0xffffffff, 0x1000, 0x55e9, 0x80000001, 0xfffffffd, 0x7c20bdad, 0x1, 0x80000001, 0x8, 0xe, 0x6e, 0x4, 0x9, 0x25b, 0x7a9, 0x0, 0x326, 0x6, 0x1b8, 0xc07, 0xd, 0x1, 0x8000, 0x9, 0x2, 0x0, 0x1, 0x4, 0x3, 0xff, 0x2, 0x6, 0x7fff, 0x40, 0x1, 0x70e, 0x8, 0xf3, 0x4, 0x10000, 0x7, 0x8, 0x8, 0x2, 0x4, 0x2, 0xfffffff8, 0x9, 0x3d, 0x6, 0xffff8000, 0x8, 0x3, 0x4, 0x0, 0x10820, 0x200, 0x8, 0x3, 0xfffffff8, 0xac1, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81cc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0xb, 0x7, 0xa2, 0x1, 0x1, 0x3, 0x1, 0xe, 0x7, 0x0, 0xff, 0x1, 0x81, 0x2, 0x31f8e6ca, 0x160, 0x5, 0x1, 0xffffffc1, 0x1, 0xe, 0xffffffb1, 0x1, 0x8, 0x7ff, 0x8, 0x4, 0x4, 0x3, 0x6, 0x10, 0x3, 0xf, 0x80, 0x6, 0x7, 0x1, 0x4, 0x5, 0x80000001, 0x2, 0x8000, 0x8, 0x5, 0xe, 0x52, 0x3, 0x0, 0x6, 0x10001, 0x3, 0x5, 0xd92f, 0x401, 0x4, 0x0, 0x6, 0x7, 0x9, 0x5, 0x800, 0xff, 0x7ff, 0x2, 0x3, 0x1, 0xb1884386, 0x1, 0x2, 0x4, 0xfe47, 0x1ff, 0x7fff, 0x101, 0x0, 0x6, 0x2a1, 0x1, 0x9, 0x4, 0x4db3, 0xffffffff, 0xfffffffc, 0x4, 0x5, 0x3ff, 0x8, 0x44, 0x200, 0x1, 0x767, 0x4, 0x40, 0x101, 0x7, 0x720, 0x1000, 0xea6d, 0x10, 0xe, 0x0, 0xfff, 0x9, 0xfbc0, 0x6, 0xfffffff8, 0xffffffff, 0xfff, 0xfffffff9, 0x8e, 0x800000, 0x7, 0x401, 0x2, 0x400, 0xfffffbff, 0x1, 0x9, 0x200, 0x2, 0x7, 0x0, 0xffffffff, 0x123b, 0x3, 0x2, 0xfffffffc, 0x9f0, 0x0, 0xffffffff, 0x6, 0x0, 0x8, 0x0, 0x10, 0x7b7, 0x4, 0x8, 0x80000000, 0x40, 0x5, 0x4, 0x10, 0x7, 0x8, 0x3, 0x1, 0x5, 0x80000000, 0x7fff, 0xb, 0x19e, 0xffffffff, 0x6, 0xff, 0x0, 0x7f, 0xfffffff1, 0x7ff, 0x1, 0x9, 0x10001, 0x100, 0x7, 0x7, 0x10000, 0x5, 0x1, 0x5, 0x8000, 0x9, 0x0, 0x6, 0x80000000, 0xd, 0x80, 0x73, 0xfd, 0x7, 0x123, 0xff, 0x9, 0x7, 0xffffffff, 0x23b, 0xffffffff, 0x5, 0xfff, 0x6, 0x2771, 0x11f, 0x0, 0xe5, 0xff, 0x80000000, 0xd8b, 0x6, 0x5, 0xcabe, 0x7, 0x5b, 0x9, 0x4, 0x9, 0x943, 0x1, 0x101, 0x4, 0xda74, 0x6, 0x7ff, 0x3, 0x10000, 0x9, 0x9, 0x9, 0x0, 0x1, 0x27b, 0x5, 0x1000, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x7, 0x5, 0x200, 0x2, 0x7fff, 0x7, 0x850b, 0x5, 0x7, 0xd00, 0xfffffff6, 0xffff, 0x0, 0xa3, 0xc7, 0x4, 0x8000, 0x2, 0x1, 0xffffffff, 0x8000, 0x2, 0x8000, 0x9, 0x1, 0xc, 0xdace, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FLOW_ACT={0xfbc, 0x9, 0x0, 0x1, [@m_skbmod={0xe8, 0x20, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xfff, 0x6, 0xa, 0x8}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfa00, 0xfff, 0x8, 0x4, 0xffffffff}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xe, 0x0, 0x0, 0x5}, 0xb}}]}, {0x34, 0x6, "55d9b36598f0106f3027a49b8e6fc1612d251f6b3ae2a507d03b479bbc452eefca642efc0e44ba682970c8815b7d6893"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0xdb8, 0x19, 0x0, 0x0, {{0xb}, {0xccc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9442}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x4, 0x1, 0x4, 0x1, {0xf, 0x2, 0x6, 0x67, 0x5, 0xffffff01}, {0x3, 0x0, 0x8e, 0x3, 0x3, 0x2}, 0x3ff, 0x45, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5e, 0x3, 0x4, 0x5, 0x6, 0x1, 0x5, 0x9000000, 0xfffffff7, 0xc, 0x3, 0x2, 0x2, 0x9, 0x2, 0x2, 0x8, 0x2, 0x4, 0x2, 0x800, 0x4, 0x8, 0x4, 0x200, 0x8, 0x1, 0xac200000, 0x2a3, 0x2, 0x5, 0x200, 0x65a4, 0x4, 0x5, 0x8001, 0x8, 0x81, 0xd, 0x1, 0x3, 0xe5b2, 0x4, 0x101, 0x7, 0x101, 0x0, 0x1, 0x7f, 0x3, 0x8, 0x5, 0x10000, 0x0, 0x1000, 0x3, 0xff, 0xa5, 0x4, 0xfffffff9, 0x8, 0x7, 0x4, 0x8, 0x2, 0x2, 0x7e3634a0, 0x0, 0xdfd, 0x9dc4, 0xfffffffe, 0x0, 0x400, 0x5, 0x43222359, 0x0, 0x1ffc, 0x0, 0x9, 0x7, 0x0, 0x0, 0x6, 0x2c63, 0x40, 0xffff, 0x9, 0x1, 0x0, 0x7f, 0xfffffffd, 0x6, 0x3ff, 0x8, 0x0, 0x401, 0x1, 0x3, 0x1, 0xcbd8, 0x80000001, 0x3, 0x5, 0x9, 0x1000, 0x2, 0x7, 0x80, 0x8, 0x8, 0x80000000, 0x4, 0x8000, 0xd, 0x0, 0x9, 0x5, 0x79e2, 0x8, 0x10001, 0x0, 0x10, 0x2, 0x3cb4ccbd, 0x4, 0x401, 0x7f, 0x81, 0x7, 0x3, 0x2, 0x7, 0x8, 0x7, 0x1, 0x40, 0x0, 0x7, 0x0, 0xff, 0x8, 0x0, 0xff, 0x7f, 0x7, 0x7, 0xfffffff9, 0x4, 0xa97d, 0xa, 0x4, 0x100, 0x82, 0x6, 0x76e1, 0x5, 0x9, 0xe0a4, 0x3, 0x7, 0x7f, 0xffff, 0x2, 0x6, 0x8, 0x4, 0xff, 0xfffffffa, 0xbf06, 0xfffffffa, 0x9, 0x8, 0x8, 0x10000, 0x81, 0xe4, 0x9, 0x5, 0x9, 0x4828, 0x7, 0x7, 0x8a, 0xfffffffa, 0x3, 0x81, 0x3, 0xfffffffe, 0x8, 0x9fd, 0x1ff, 0x7ff, 0xc0000000, 0x4, 0xba, 0x4, 0x3, 0xab4, 0x7f, 0xf, 0x8, 0x2, 0x7d7fc1cb, 0x7, 0x9, 0x9, 0x5, 0x841, 0x4, 0xff, 0x91, 0x2c17df9, 0x10, 0xd, 0x1ff, 0x5, 0xb, 0x6, 0x2, 0x3, 0x74, 0xfe9, 0x3, 0x1ff, 0x5, 0x1000, 0x0, 0x2, 0x400, 0xfffffff9, 0xfffffffe, 0xa5d, 0x37fd, 0x80000000, 0x2ef, 0x77d7, 0x3, 0xf3f, 0x5, 0x1, 0x7, 0x9, 0x4, 0xffff, 0x3, 0x81, 0x1, 0x10, 0x1, 0x4, 0x8, 0x10, 0xfffffff7, 0x0, 0x7fff, 0x2]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x40, 0xaba0, 0x8, 0x4, 0x4, 0x5, 0x7, 0xd04, 0xa, 0x5, 0x3, 0x6628, 0x40, 0x81, 0x80000001, 0x1, 0x4, 0x29c, 0x22c46877, 0x7, 0xfffffffb, 0x9, 0xcf6e, 0x2, 0x101, 0xc5e, 0x47, 0xb6f, 0x4b, 0x7, 0x4, 0x6, 0x7fff, 0xfffffffe, 0x5, 0x0, 0xa, 0xe6f, 0x6, 0x0, 0x3c, 0x10000, 0x2bfc6b21, 0x7f, 0x7, 0x5d6f, 0x1800000, 0x0, 0xb543, 0x1, 0x3, 0xf23, 0x97bb, 0x1, 0x4, 0x4, 0x1, 0x7, 0xfffffffc, 0x5, 0x80000000, 0x5, 0x4, 0x200001, 0x4, 0x4, 0x5, 0x1, 0x1, 0xb, 0x9, 0x1, 0x3, 0xb60, 0x4, 0x9, 0x1, 0x5c, 0x1, 0xfffffffc, 0xb, 0x593, 0x1, 0x7, 0xffffffff, 0x44, 0x10, 0x9, 0x8000, 0x6, 0x1000, 0x6a, 0xacaa, 0xa, 0x7, 0x6, 0x8, 0x7, 0x0, 0x5, 0x3b0, 0x2, 0x8, 0x8, 0xd, 0xffffffff, 0x9de3, 0x9, 0x57, 0x8, 0x0, 0x7, 0xa, 0xe6, 0x6, 0x8001, 0x1, 0x7, 0x8, 0xdce6, 0x6, 0x2, 0x0, 0x3, 0x0, 0x7f, 0x7, 0x0, 0xc27, 0x907d, 0x0, 0x7, 0x7, 0x1, 0x3, 0xa000, 0x7, 0x80000000, 0x0, 0x80000001, 0x4568, 0x100, 0x21, 0x4c69, 0xffffffc3, 0x6, 0x0, 0x0, 0xe6, 0x0, 0xff, 0xef, 0x4, 0x40, 0x2, 0x9, 0x7, 0x2, 0x6, 0x9, 0xd52, 0x7, 0x421, 0x7, 0x3, 0xea4, 0x6, 0x0, 0xffffffff, 0x24000, 0x7, 0x7, 0xc5, 0x62f, 0x0, 0xb3e, 0x401, 0x0, 0x7, 0x26, 0x0, 0xffffff14, 0x3, 0x1, 0x54, 0x4, 0x400, 0xc2cd, 0x8, 0x8, 0x3ff, 0x7, 0x4, 0x7fff, 0x80000000, 0x713b5d5f, 0xd, 0xcd, 0x10001, 0x3, 0x64, 0x4, 0x7, 0x7, 0x5, 0xf1a, 0x8, 0x5, 0x8, 0x7, 0x10001, 0x1, 0x1, 0x9, 0x6, 0xf, 0x7, 0x4, 0x6, 0x0, 0x7f, 0x6, 0x1400, 0xc915, 0x2b7d8f34, 0x8, 0x7, 0xee6, 0x6, 0x8, 0x1, 0x5, 0x7, 0x10000, 0x0, 0x5, 0x400, 0x8, 0x5, 0xfffffff7, 0x7, 0x8, 0xfffffffc, 0x7ff, 0x4, 0x9, 0xffff, 0x7, 0x7, 0x7, 0x3, 0x8, 0x5, 0x3, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x5, 0xffffac6a, 0xc, 0x1, {0x5b, 0x1, 0x7, 0x1, 0x2, 0xfffffff8}, {0x4, 0x2, 0x3, 0x400, 0x6, 0x4}, 0x7f, 0x3400000, 0x4c86}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x79b4, 0x1, 0xaff2, 0x401, 0x9, 0x80000001, 0x2, 0x8, 0x1, 0x7, 0x7, 0x8, 0x3, 0x10, 0x5, 0x0, 0x1, 0x7, 0xe, 0x0, 0x1, 0x2, 0x925, 0x1800, 0x7, 0x1ff, 0x9, 0x2256, 0x3ff, 0x79df, 0x7, 0xa0, 0x9, 0x5, 0x3, 0xc38f, 0x5, 0x800, 0x186, 0xa, 0x7ff, 0x7fffffff, 0x6, 0x801, 0x8865, 0x3, 0xdb, 0x2, 0x3, 0xfdb8, 0x8, 0x2, 0x0, 0x7, 0x200, 0x9, 0x1, 0x0, 0x4, 0x7, 0x6, 0x5, 0x5, 0xaf43, 0xa, 0x8, 0x7, 0x52bfb3c2, 0x4, 0x3785, 0x6, 0x8, 0x855d, 0x5, 0x6, 0xd, 0x2, 0x1, 0x1ff, 0x2, 0x8, 0x4, 0x1, 0x3, 0x3b6, 0xc, 0x8c87, 0x9, 0xff, 0xffff, 0xbec9, 0x0, 0x9, 0xe, 0x4, 0x7fffffff, 0x1ff, 0x401, 0x6, 0x7, 0x405, 0x9340, 0x200, 0x10001, 0x6, 0x400, 0x80000001, 0x5, 0x4, 0x80000000, 0x2, 0x3, 0x401, 0x5, 0xf66b, 0x3, 0x18a17be8, 0xffffa669, 0x2, 0x800, 0xc65, 0x7, 0x68, 0x5cfb, 0x9, 0x3, 0x80, 0x4, 0x2, 0x2, 0x2ee5, 0x9, 0x9, 0x9, 0x8, 0xa30d, 0x5, 0x8a, 0x1, 0x5, 0x6a, 0x4, 0xb4, 0x5, 0x2, 0x7, 0x2, 0x10, 0x41fd, 0x10, 0x80000000, 0x9, 0x7, 0xfff, 0x7, 0x4, 0x3, 0x4, 0x200, 0x4, 0x51b, 0x40, 0x8, 0x400, 0x4, 0x10, 0x24000000, 0xfffffffb, 0x8, 0x0, 0x1, 0x6, 0x2, 0x7, 0xd, 0x9, 0x4, 0x5c860660, 0x891c, 0x7, 0x0, 0x1, 0x1, 0xffff, 0x7fffffff, 0x6, 0x9, 0x8, 0x263, 0xa0000000, 0x6, 0x100, 0x5, 0x4, 0x4, 0x0, 0xfffffffb, 0xcb8, 0x3, 0x9, 0x8, 0x88f, 0xfffffff7, 0x2, 0x6, 0x1d77, 0xffff, 0x1, 0xff, 0x31, 0x80000000, 0x9, 0x7, 0x5, 0x4, 0x9, 0x3, 0x7, 0xf, 0x5, 0x7, 0x1, 0xd63c, 0x6, 0x101, 0x2, 0x2, 0x2, 0x8, 0x17, 0x5, 0x200, 0x40000, 0x6, 0x4, 0x2, 0x2b3, 0x400, 0x6, 0x3, 0xffffffff, 0x7, 0x0, 0x8, 0xe8, 0x81, 0xc, 0x9, 0x9, 0x3, 0x347, 0x80, 0x7fff, 0x1, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xc1, 0x6, "11f3d449fe847f5e13f707ca54ad7db3f3ef9fc8fb18e33ce9a64b152f3152a5966aafe12abfddedb4436098a72307dc3ac61c296d88190944d35caa59c8a89b0e84bf03049989bcb9f5d640d83fb2e9b61995af1417e6e8eff0d6a960abc8520374f1dd3f8a0cb896bb38a3da5fb853528bc2389a2bfe3dd1b9c10c2647c1dc36cc8ef619fb0a4931e84b872d34788a82003d853035e9c454ebe893b22a7775586e8bcc0f2d0634056591c24d75b7f6315c84004785daba2a7ec1c44f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x118, 0x10, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xc5, 0x6, {0x200, 'raw\x00', 0x1, 0x0, "733ca66f50f50dee7e5e2d7eaf807b3849eacc9f99d3cfeb4094352a1e851db2bb37ce8c390b4258edfaa2ed0b571c374ef3f644d62d36a3a07c18a7e0059a359a6900ee8121b4178a2172c34911dcd814175607ae5963ca0a96faef56c48fac014ce8726021692051db812aaaa58ba1dd2abd660ed7f3d8d273630be857c5aa691c0a27cd8946bb2f44aec0c762a75301994344f4263efd6920f9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}]}, {0x15, 0x6, "de122734b6eb42521ee0795313e5940c40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FLOW_POLICE={0x1c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x700000}, @TCA_RATE={0x6, 0x5, {0xf8}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}]}, 0x192c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000160000000000000000de00000000000000100200"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0x3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, 0x0, 0x0)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

251.574882ms ago: executing program 1 (id=4042):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='qdisc_enqueue\x00', r0}, 0xf)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r4, 0x2, 0x20}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2c04060}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffb90}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffeffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001600010000000000400000000a0000fd", @ANYRES32, @ANYBLOB="1400010000000000000000000000000000000000140002"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
close(r7)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

250.913085ms ago: executing program 2 (id=4043):
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00040000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c3000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)

179.372191ms ago: executing program 1 (id=4044):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000002c0)={0x0, &(0x7f0000000280)})
sendto$inet6(r0, &(0x7f0000000280)="bc387e1700b9c403e972e6ca3acadc863d2c1ad3b223a062f16fed908bff1aee7f94481d81936ec5", 0x28, 0x2400c000, &(0x7f0000000500)={0xa, 0x4e20, 0x8001, @private0}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20050800)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}, [@NDTA_NAME={0xd, 0x1, 'BATMAN_IV'}]}, 0x24}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r4=>0x0, 0x0}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)

178.885809ms ago: executing program 0 (id=4045):
socket$kcm(0x10, 0x5, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000bc30102008000000950000000000000015668de70db46a4d95e2"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600)
r3 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8947, &(0x7f0000000580)={'bond0\x00', 0xfffd})
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='ip6gre0\x00')
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="91ac25c7d38d1b0f044f89e3b0c7bb5174a6e73ad3728b93e8a738bc23035b36410f0e00edb60cada5c32d83202e79012eeca213fac8eea467cb2d00303ef233251ca29fec2f91d52bbcd470", @ANYRES32, @ANYRESDEC=r6, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0xc000811}, 0x4004)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffffffffffff07000000000000000200000000000000"], 0xb8}}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0x9, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

178.411852ms ago: executing program 1 (id=4046):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) (async, rerun: 32)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xad356f19b320d40b) (async, rerun: 32)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x81, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000c40)="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")
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) (rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000001540)="6bc6fac63eebb754b76e778ce17a34e8310ad235691208514cc4094e6f411ebe76bb8c5caebe0ed764fcd1dddec9dfab0eaa83e4b13fd32d458e5678c33e1391a13bec8d243c0f62c304a40faa6702c8a801f4da8588cb2f9dee0df5f046c8cbd5481618b0646590c1a8dbc282fb3ded2f78c53650668fcdbe30667f616a73149dfa20680412a37956ab5f50d849fbf0d04b88b3405e356eb2beac46e17643145ceebff18bf01c73a4520cde9b0b61b0c0f761cc1a403e6d596002c76fe832d5f625dccc2db90c5e2bcae28313d3020661d754d643099aa1040413e82963f505ebfdf37f382c9f7b9461590b05ee1bfddeff72218ea744c5033894dc6085c610a603dfa5b1a09d256fd66531d158c128b2016c70f06cb7b516460e8399784bc3a733c0d06f947f00855bbedf92848c415c367380feb7dc79a8c86c94c04315b452c49438cb77c391b43a837ed342d39e95010b529aa653e8b38f8547c29c615640614ac1e011bfc6d76980a6c0a30cd8e7115bb21ffbf0d26cadf1400c3d602aaaeaa17a44abcc52e6073d4af2fe7392dd8ae888f1fedc0270628c83769fac6cd378c05ae0e6de3e7432fef27fd9bfeb76766e8976bef98d55502c60830d8142b2872bc946b722142a818f95a127a413671b74d0b69dd44fec497df80b8f9e062b2a5cead365bac820e23bfcd41b14a948ef16faa0ff207856144afc0774958ddc8be186985469b853bcf4cb52c96535af082fe7b7c73c41c2c01bbaa93c7570b49394956fc019a67216d98860f72e1db72b1cdedc6b98ca49cd70d3c4fc8cf24ee344a96f8910dc4e4fd3ad731ae0d075214f8978e3a4ec3ef072c6d780633f6590c8493d52fa0b562a1b66c2f78592601397b4d3e9620b8ae1b8efe7de628393736e0a702ed254ce3d8acf09ece96fd42dce52ba17d911e03d7f0088069014ceca170dc501609f07157136eb7968546dc85346e3ab167b2c8127ef3847a594348c8e1eeddc4fba353013af5cc1fab1bb78be7c30d685e1449101f0ff143b420e888379e35a162afb4c9a554106806e52b4dd9d4809d36c86cc291d721730709707e0a2eabd73c4ca62f3e608692456843e57fbc6d7c2c319568464b4859f5c5a8bd45ca1c426670ca5442e8eab43d6470969d79e0a621eab86ff02eb55fc1a1baaaa540a7ce62c2ca2d976c2dffa6af2c004d351b34e1414e32b3433392b87d354c70029160913c2a321431f99a91641d100b8b6f407115164aeb5de0dbb2cc620e3074953e9e76648c14b747320bfba07f46dc14da87b1c3ad14b131fa03b3369669aca7ea88d4b64bc52435ca42516d91cb2b319e9142e8c5d34d34cd0a9b6b8893457a272eee5ac28e89244208da68f3eae19deaebb68277120edbdeba49b5df20228fc286ce882dbf3ef72a719ccf7107577bf5c878d87d010f5ed7253e7120ebe842747479f84bfa8f73103a6e705905760e44bc815f7c377f38aacd7deb0089eb3e9ebed45a8eb268c59990677ce5c8bf9751413b1899d4fbe2cb16e01a4f33d3d58d28300e782d31e00fe440932a44b532bf53d41779fe1ea576dd7f6d3469c27ba6ca1d109af7efe986fdb8f023c7fc86557ccd4dd5ecb8094095da9d5667079cf9b7a282bed0eac0c2b7257e3fec072e11e32b4d71c854700666ea2feb063f6d229f7cbf0e84566f3ef155c83f2df7e6e6ae77dbe2b93d3a69b09b5de235a04ae243f3f4af31f2c58de30bc4e6d5d1db9adfdcf9d9b0fc7f5c8b4001599afddec327df8f2f77a0cd62cc0d26ab0ac1a010d09a9678364fa7f8675e4e404d676d85f649dffbebb8a5e42e01b3a59f16a9aa373c9c673f7f09dc6373276237e33b09e80f928a72038ed3b684f9c2c387439ca307e4699eb3ac89ba78efb483fe510a00f5f4cdfdf563e9b0323df423c4611c558502a05f5eb4e71964cead48f08c6efc0a0345da84a0eaef1154dcf0c74ea7e86f7566e63039ef4c967645fdd43eecd6471190ced76c36a506613ac057adced4700272ed964a827471c0237093d590d4bd58e4ddf65426a582ea7d2011744e73edaf6251b7e917ac26a24841bf587822c8b9e014a2c7cbcdcdbb597d94f0cc076a4ed00d12de785a5519f55b6b107a1144590e80f83e8b582bbf5825bfc85684fb7ca3e0a99ad11602939047a2ac28e596d65bac6c09fa59d4e0097b8ef5fec8ef1fa3391075a07f999a56eb093dc898820f2af063c112a6dc670243d5ce26b06a86a4994dd2492d7c5419f55349ca5b2b35a3a895de2e2689f9f70bfff42972d97305dd5ccc9928216319dc6648e5964dd0fd2fc26eef5589bdd413573548f05b864ac5032f7e58ca21eeb82f65fd7c42fe37cfabc9ca46c98c3ef585258027fed0e69ca1a28326cf55a51e95e4c5fee2e83fa4dd963ed3079c04d8b3432964ec2746f3737d219612c7543fabc84e5b948897524b3ed6d0ac5a6a34c814d53560aea6a82de35da66b1412611a9eb86e8a192fcacde5859dd88505fc897cf3a56eb6216300fea5757816c58782e267c333fa00fa4fe89c36ee41c1883e895aa0b1798f88e6d5ca95a7b725b9c67149f2cd9e41960eae68bc44706028b6a41d95826bb0277fc05c52b826020022a8f6064f99fe5556a0ae5654175eeb95642a54f1a36be3508e457c64ca376e6985ea6352c55ebe7330fa9aebd6f2208610701222b5007c39aed2627cebf5c75e512d4882d5f84e43e6e5f3528cf5660bbc190560ac8ceb6c257443367e003d568f26862cbcdedbf09b62c554b389798fb23a4af193378e59b4af93a1a4e4f565224f23783201cba46e5c42faefb81b7e43b0add0fb6ed78c2a8b7d46e2483e73b4fb1c57016d7e0454986407a5e47a0ed97338710d06b6154059f75dfc05a9c21a51a0fe438417b737a4386fe536e70bc1565572a65bb8e36794c2e9268380e0a6ac135aa19e2250a2a398410134baaa8278a4419d9b64747708cdc639cbdb3920b551fe90fcb855fb187812004bb1d8793de182e37aa7f037c6b0f9e46f0197be49b13b4d5fd7fd4ae81a6c6e35c654685ec982f5fe7f2413a0843532b20b6e5ea902115db5744d4c45aed98f3fdb95851197df276f36209d1452577c8248bfc607444b045522b98a4c0e3d3d7a00218001fff9229a2ba889c394287e8fefb26548881bfeb309fd491a395175b84c3aae129ab9b2f704fb12b71664d9a7d7817bbff39c08bb1a91567144f985e7dd63f3ecf9fd3d9e1f20978b57c9bcc48a5ec4d86610a0b1d45c4423519362c4c8fcfb8f4dd84536f784d8cdb6ffb424d2af4a2ceaee19f896f7ba38312d435b5b95b5ec1cc1f149bc15ae491ebc63624f5962f102cd61685959fa04d142dc3645583cc624082ff40db70b60808ed797de94404c71eb83edca808c6ea4f2bb6c9d8ae26f0b2acad636bdb7d09fd18227fc379e6b1c57c49bfd2d9ccfe4f4a55b78bf7bf43b6dd1752534999f0dc4db8f52748b8b5121dd7cc5d6cee36879b65817acda2b08e7a6f7a5b10f06a0c8749be3860bf354b557d10d6c9324af6b2aaf160022877b3d2c6afca8cfab8715474d169d57f6a570a2014afbe11619a36a3fa3939a8120a028e417301599a7c2f9c34e6c8a7a09a6dc198eba835cd00b4326443c891fc9f9583f0b890be7c506785839eb3c2ef78fda10db55e11bb8a6a7dfa3166fe7fdd64ce184c183378f236581cf1090d2331e3f7f5e00ae0250c490dd7118cc9b721fc4277da9a3f162dd5876086fb9edc4679c47ab356b33c075c5be939ffaa5cf18374cc122254f47db863c5d442705b9bcb8ed26e961502191064cd28eb042acb9e3390074265a962ec07094a974dde2cc6a99db104d01a10e109d67dbb26d0e34ac756d0d9d7fdd5ce8b7ffd5f68b6646478ee4e09919631f0e3af05bd4d5764ab3d705211d2769d21d360d64b934a8c8f2a0a838fe6e75165512d29baeefc5ccefd821d800337d8625a2ef79aadecc25054bada18c13d6e53d09e4ce6e8a732c4107c2187e27855e9b22d8b975113bb8bc622c54a335394acec482d80dd6d8ba86ef0bfe1cf780824e8f512ed66383f6916782db32d821051b42e5c2fd8acf70ac4eaff59bf5cc1d892b2c35e132bc12c19873c1cd0594c5a21172f3eef7b6099e93cc83f3223374aa986dddcce583d910de348b6a566c9b36d1d2032043c7bb066502d532700c85035596357fc3000e123c830a7907ad726515d8d17f98e612c06840d680dd9088a5ef31a828244892126705f97c426298c98642d234f1a6212c8e3cacc128faf5470a728eb6e12d4ae6b0f4a1f1021c0f3d95e58958e4927a3e17d541d7fc3350a5b7975e26f0019349a5bef0cb78bd23de4d5fc994a3c6732caafcacb83cec4b71208ff0b1c34fcb0d4e64654d2d82bffda1330b40e05e5823a91aec002a5a7087d551dacea3477acbc1daed1426aaeac1e212fbbff713aceab897a874da9b2ac859af704cf731ab8a3b0933427bf10f33dd57b555bb2c1451dd218fa9921c1d2ddbfcaf22e677901a79f9bd9fbbc8eb445dbecdc5bacbd0baa59fc7b2e989d21d05e262e56351f73a5475a0d793349d62847e62d0e1d2c4259fe636fbebd4f5e87d7582bf33f0825a7b9dac1a41535637398f2c4de74c8fdee3992b38c42de8d516ca79d7febe6f1e43679dfce2ca0132198932c153ab0073e7251afc8720dc8fd23f6a674bb10d1409282243890a53ee0d9349cb3534be18b6b35c6098c5a5ebde134644faea0e02119b95c61b5bea86617c64c6281e0392027f718ca70fafe60b05ec3fe9a940f8dbd2095a7530bf835a6100ca94702752fda9eb2081bcd09db15bbdca8c2c18f8885a23bc5bcfd824bd180dfab02372a35c53875ad7ca9c321c86dcc68173d8767e21c4c4d2dcdad1a0a40a85fba10e7f267816b5204e176aa58c852149b15d384d70c29fd3fe951502c8dfedb4d40e45da4a01a6a3a0cdb88eba5fa58d04a45ca951a34c80a177076b71647a754d9f1626ff90de5dc60dfe95174c11d1c06d5e136ef381a55f54caa729fabdafa9b4c411289a1df977dd56d85f08f5d161bd4d06e1ae2299f995e258a3bef35d5e816554dfa8ffe401a0432fb5bb7e13c757151ea02faed3318f2c2ea05847fb1c168c3ece6cbeb11092f508f03355f362f4b496b4607398a64d35db946ed0d263e758de1daa059dd5d6672ab88800dc27c9dd01ee6553edb58b2ded7af05190ff58c3f5250250a8a730f8b4bdd9c14a8b20b107b190a4ed97b83d7527d7cd14e9a771816a21ef2f5354a0238b72bdcd767cc05a039c4d500b0ff97d913c8c44f69c05dfe5f5ad2b0ec6fec47305d71f506e494f0d9c7d97b2d49b1044101ac19166717e38fb45589dcf43040a944af20568190fd49f4c97391a5bad62dd06dda28b02fddb11ed0b877c5aad0a0f6e1fa6d40949b1f03d5296da51c54b2ffad895874d234ded99f79fe20367eb52f2f3dfa8fcf300f9fa533a48e9d25bf3a2ca93963abe49e8e3cccc0695f6988846f65a3a69f3dcbb5f78b252ac8e3bc186f0f3e6ebe9b1a0e7a475361f7535fbaa81df77e070f061331fe1b3e40a7473bd358a3070806e4f0e1983a1593133bffb4baef16a5f8aeb2dac932da2751973f1ef4e2d3330893e47b48d8dc3435167b17655e273539ac4a72fdee6bf113446073df4c96a7a35341dfa3098c1553b6bb8b85dff246ff392416d03238416d27dc5fa8203ba9cd668743833f4f121fd0a919e9a17d4a332fdde12236f7ff71e908ffc00848e812689cf9aae9", 0x1000}, {&(0x7f0000000280)="29426b82adac883c06af5eba0ac8f238cf7b4321decbe534b58a3de105f691c24e0ad0f8ce230aed68a7e3b7e974d74cc65d83082e5cffc93df47c05138edf12e6dc57337f1a999a1cb8e432186adcfe14637e0bb2e4b829dfab4c756192afb873192f8ae40fddd97d44ae14a679eb3342948f90344dcc029f04534c034e399b5f2878", 0x83}, {&(0x7f0000000440)="f20b00d223fa8afc009897bbb17523b3028cc39ac4e4f883692a86f6764d3f2b3e7910cd6fdf1c35957a2224a255daeb0810da0527d064601679935223ef7d1db48df8911d3855e863c458cfcb80111e45972544af8ae0bd831e0a3b8511b431b7c3d8b460bf0616a18f9ba2f7b361b994ec5221d2176d3930b69cc5df668d0de921d63e9daaaa8115114bed92d5430aaae897d95f4b29f610239541714a0573bcbefc8f066b2ab7fad2c4fb24e65fe60699a1be31c0ab1ab58091757dda89bf5949be07670eabcd640de253b77fe3aff74bb9ed715bf8c33b7cf5f65dec4c4680d82cb4d5ba1a7de762b821a288ffb743bbb21dbd", 0xf5}, {&(0x7f00000005c0)="f7a16271d18920047edca24538f7daa073f9d68bd2b1ac75da90993d9ee464e966891c0720541bc2f1ce41bb26e90fc0662643f506b5bbfec659878b14c2411489f534cb4199d3e2fb0e230b04430ea4075eb567aac7f78624997eda29574ee9fb9fc30d89bb96b717f44a000de165070f1b5e283067e4e8394aa753fc389b3a4cb70bb20756da96f34037c51fc0825e4d75170fa52cfd34b13c63b5e1a636bfd4cccdd77271c8890ae40daea992836a633800f4ea9186af4022463f1245ba3dd6cb7cdde4c564a919367783e168b7ab8b9e899036862272d1c1e5b7", 0xdc}], 0x4, 0x401, 0x6) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001500)={r10}, 0x8)

82.40624ms ago: executing program 0 (id=4047):
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000000008e25c37ab76cae"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x3}}], 0x1, 0x8000)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x28, {0x2, 0x4e22, @rand_addr=0x64010100}, 'bridge0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="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"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000140)=""/192, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000b00)={0x100, {{0x2, 0x4e22, @local}}, 0x0, 0x4, [{{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}]}, 0x290)
r5 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000280), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfbf, &(0x7f0000001e00)=""/4031, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

2.045601ms ago: executing program 0 (id=4048):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091", @ANYRESDEC], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x8, 0x40000000, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRESDEC=r4, @ANYBLOB="c700a754ac000000282112800b000100697036746e6c000018000280060015004e2400000400130006000f0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094)

1.835629ms ago: executing program 1 (id=4049):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910710000000000040000ffff0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

0s ago: executing program 0 (id=4050):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32)
r3 = socket(0x2a, 0x2, 0x0) (rerun: 32)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}]}, 0x44}}, 0x2000c800) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x3, 0x10}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

aller0>
[  228.161889][T16181] tipc: Disabling bearer <eth:syzkaller0>
[  228.350255][T16213] netlink: 'syz.1.2770': attribute type 1 has an invalid length.
[  228.386176][T16218] netlink: 'syz.2.2771': attribute type 1 has an invalid length.
[  228.422062][T16218] workqueue: Failed to create a rescuer kthread for wq "bond40": -EINTR
[  228.432305][T16226] bond51: (slave vcan0): The slave device specified does not support setting the MAC address
[  228.449236][T16226] bond51: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  228.453658][T16226] bond51: (slave vcan0): making interface the new active one
[  228.465461][T16226] bond51: (slave vcan0): Enslaving as an active interface with an up link
[  228.490954][T16213] bond51: (slave vcan1): The slave device specified does not support setting the MAC address
[  228.500938][T16213] bond51: (slave vcan1): Enslaving as a backup interface with an up link
[  228.509649][T16213] 8021q: adding VLAN 0 to HW filter on device bond28
[  228.539061][T16238] IPv6: sit2: Disabled Multicast RS
[  228.562935][T16244] batadv0: entered promiscuous mode
[  228.564674][T16244] batadv0: entered allmulticast mode
[  228.576983][T16243] batadv0: entered promiscuous mode
[  228.578923][T16243] batadv0: entered allmulticast mode
[  228.582992][T16241] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  229.206291][T16272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.508844][T16326] syz_tun (unregistering): left allmulticast mode
[  229.549264][T16330] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.580953][T16330] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.636023][T16339] bond52: (slave bridge23): making interface the new active one
[  229.642588][T16339] bond52: (slave bridge23): Enslaving as an active interface with an up link
[  229.661366][T16330] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.746613][T16330] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.922398][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.932887][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.941665][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.949578][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.081207][T16367] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  230.164536][T16376] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.341566][T16392] __nla_validate_parse: 114 callbacks suppressed
[  230.341578][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2804'.
[  230.415384][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2806'.
[  230.445808][T16404] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  230.549575][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2809'.
[  230.552268][T16419] validate_nla: 5 callbacks suppressed
[  230.552276][T16419] netlink: 'syz.1.2809': attribute type 7 has an invalid length.
[  230.557883][T16419] netlink: 'syz.1.2809': attribute type 8 has an invalid length.
[  230.560805][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'.
[  230.655112][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2811'.
[  230.695076][T16438] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2812'.
[  230.701636][T16438] batadv5: entered promiscuous mode
[  230.703405][T16438] batadv5: entered allmulticast mode
[  230.809819][T16438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2812'.
[  230.849917][T16451] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  230.886234][    C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  230.891110][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'.
[  230.897772][T16454] bond51: (slave vcan0): Releasing backup interface
[  230.899924][T16454] bond51: (slave vcan1): making interface the new active one
[  231.252572][T16458] syzkaller1: entered promiscuous mode
[  231.254643][T16458] syzkaller1: entered allmulticast mode
[  231.448080][T16469] netlink: 'syz.0.2817': attribute type 13 has an invalid length.
[  231.451244][T16469] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2817'.
[  231.589708][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  231.712820][T16479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.718778][T16479] netlink: 'syz.2.2822': attribute type 2 has an invalid length.
[  231.722039][T16479] netlink: 'syz.2.2822': attribute type 1 has an invalid length.
[  231.726038][T16479] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  231.738031][T16479] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  231.909478][T16495] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  231.914407][T16495] bond4: (slave vcan3): The slave device specified does not support setting the MAC address
[  231.918902][T16495] bond4: (slave vcan3): Error -95 calling set_mac_address
[  231.919336][T16497] netlink: 'syz.1.2830': attribute type 3 has an invalid length.
[  231.933253][T16498] netlink: 'syz.2.2826': attribute type 1 has an invalid length.
[  231.949963][T16498] 8021q: adding VLAN 0 to HW filter on device bond40
[  231.975407][T16501] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  231.980016][T16501] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.985287][T16503] netlink: 'syz.1.2830': attribute type 16 has an invalid length.
[  231.988601][T16503] netlink: 'syz.1.2830': attribute type 17 has an invalid length.
[  232.249757][T16523] bond4: option mode: unable to set because the bond device is up
[  232.256144][T16523] 8021q: adding VLAN 0 to HW filter on device macvlan32
[  232.262073][T16523] bond4: (slave macvlan32): Enslaving as a backup interface with a down link
[  232.271705][T16523] bond4: (slave macvlan32): Releasing backup interface
[  232.590346][T16538] pimreg: entered allmulticast mode
[  232.592423][T16538] pimreg: left allmulticast mode
[  232.753666][T16556] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20001
[  232.844592][T16563] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  232.849764][T16563] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  233.101014][T16580] 8021q: adding VLAN 0 to HW filter on device bond42
[  233.109546][T16580] bridge0: port 1(bond42) entered blocking state
[  233.111806][T16580] bridge0: port 1(bond42) entered disabled state
[  233.114583][T16580] bond42: entered allmulticast mode
[  233.118365][T16580] bond42: entered promiscuous mode
[  233.125174][T16580] : entered promiscuous mode
[  233.158698][T16585] gretap0: left promiscuous mode
[  233.189991][T16585] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.196782][T16585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  233.729206][T16629] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.735378][T16629] syzkaller0: entered promiscuous mode
[  233.746517][T16629] syzkaller0: entered allmulticast mode
[  233.923546][T16629] tipc: Resetting bearer <eth:syzkaller0>
[  233.929673][T16628] tipc: Resetting bearer <eth:syzkaller0>
[  233.941032][T16628] tipc: Disabling bearer <eth:syzkaller0>
[  234.327176][T16639] siw: device registration error -23
[  234.645472][T16648] 8021q: VLANs not supported on ip6gre0
[  235.294691][T16651] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.373342][T16659] syzkaller1: entered promiscuous mode
[  235.375728][T16659] syzkaller1: entered allmulticast mode
[  235.382117][T16659] __nla_validate_parse: 12 callbacks suppressed
[  235.382132][T16659] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2883'.
[  235.463908][T16670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2886'.
[  235.497796][T16673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2887'.
[  235.507275][T16676] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  235.521179][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'.
[  235.542254][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'.
[  235.548284][T16681] IPVS: set_ctl: invalid protocol: 47 172.20.20.62:20002
[  235.589802][T16688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.593508][T16688] syzkaller0: entered promiscuous mode
[  235.595308][T16688] syzkaller0: entered allmulticast mode
[  235.611049][T16688] tipc: Resetting bearer <eth:syzkaller0>
[  235.613629][T16692] validate_nla: 15 callbacks suppressed
[  235.613643][T16692] netlink: 'syz.2.2893': attribute type 13 has an invalid length.
[  235.747512][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'.
[  235.750665][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'.
[  235.770212][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  235.794682][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  235.797992][ T5739] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.798348][ T5739] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.809628][ T5739] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.814101][ T5739] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.888961][T16731] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  235.950278][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'.
[  235.954565][T16738] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.963304][T16742] netlink: 'syz.1.2909': attribute type 4 has an invalid length.
[  235.977938][T16742] dvmrp0: entered allmulticast mode
[  235.985875][T16744] netlink: 'syz.2.2906': attribute type 5 has an invalid length.
[  235.990908][T16736] netlink: 'syz.0.2907': attribute type 4 has an invalid length.
[  236.000008][T16744] geneve6: entered promiscuous mode
[  236.001995][T16744] geneve6: entered allmulticast mode
[  236.004790][ T5865] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  236.007876][ T5865] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  236.011606][ T5865] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  236.021702][T16738] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.024682][T16738] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  236.062746][T16738] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.072168][T16750] netlink: 'syz.0.2912': attribute type 4 has an invalid length.
[  236.073018][T16738] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  236.124566][T16738] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.130612][T16738] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  236.198843][ T5739] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.201673][ T5739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  236.208665][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.211962][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  236.265361][ T5739] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.271203][ T5739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  236.279735][ T5739] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.283055][ T5739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  236.335645][T16759] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  236.363878][T16759] mac80211_hwsim hwsim32 wlan1: left allmulticast mode
[  236.371208][T16759] bond41: left promiscuous mode
[  236.372937][T16759] bond41: left allmulticast mode
[  236.375634][T16759] vlan3: left promiscuous mode
[  236.378748][T16759] bond0: left promiscuous mode
[  236.380681][T16759] vlan3: left allmulticast mode
[  236.382415][T16759] bond0: left allmulticast mode
[  236.384337][T16759] veth21: left promiscuous mode
[  236.387826][T16759] geneve4: left promiscuous mode
[  236.404951][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.409513][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.412331][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.415146][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.504099][T16773] geneve0: entered promiscuous mode
[  236.513580][T16773] geneve0: entered allmulticast mode
[  236.525686][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.533736][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.542869][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.546082][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.751854][T16796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.809578][T16796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.872108][T16796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.931699][T16796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.099643][T16812] bond42: left allmulticast mode
[  237.104046][T16812] bond42: left promiscuous mode
[  237.109688][T16812] bridge0: port 1(bond42) entered disabled state
[  237.179976][ T5739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.193733][ T5739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.205189][ T5739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.222686][T16819] bridge0: port 1(erspan0) entered blocking state
[  237.224788][T16819] bridge0: port 1(erspan0) entered disabled state
[  237.227172][T16819] erspan0: entered allmulticast mode
[  237.229346][T16819] erspan0: entered promiscuous mode
[  237.239858][ T5739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.243955][T16819] erspan0: left allmulticast mode
[  237.246751][T16819] erspan0: left promiscuous mode
[  237.248821][T16819] bridge0: port 1(erspan0) entered disabled state
[  237.344215][T16831] netlink: 'syz.1.2933': attribute type 14 has an invalid length.
[  237.349274][T16831] netlink: 'syz.1.2933': attribute type 14 has an invalid length.
[  237.355554][T16833] netlink: 'syz.0.2935': attribute type 9 has an invalid length.
[  237.405917][T16842] netlink: 'syz.2.2937': attribute type 1 has an invalid length.
[  237.410661][T16845] dvmrp1: entered allmulticast mode
[  237.426099][T16842] 8021q: adding VLAN 0 to HW filter on device bond43
[  237.469415][T16853] veth22: entered allmulticast mode
[  237.495996][T16860] netlink: 'syz.2.2942': attribute type 58 has an invalid length.
[  237.580591][T16867] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.748883][T16884] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  237.751972][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.0.2947 Not tainted syzkaller #0 PREEMPT(full) 
[  237.751992][T16884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.752002][T16884] Call Trace:
[  237.752008][T16884]  <TASK>
[  237.752016][T16884]  dump_stack_lvl+0x189/0x250
[  237.752040][T16884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.752058][T16884]  ? __pfx__printk+0x10/0x10
[  237.752076][T16884]  ? kernfs_root+0x1c/0x230
[  237.752094][T16884]  ? kernfs_path_from_node+0x2f/0x290
[  237.752109][T16884]  ? kernfs_path_from_node+0x250/0x290
[  237.752123][T16884]  ? kernfs_path_from_node+0x2f/0x290
[  237.752140][T16884]  sysfs_warn_dup+0x8e/0xa0
[  237.752154][T16884]  sysfs_do_create_link_sd+0xc0/0x110
[  237.752169][T16884]  device_add_class_symlinks+0x1cf/0x240
[  237.752187][T16884]  device_add+0x475/0xb50
[  237.752202][T16884]  wiphy_register+0x1ba6/0x28d0
[  237.752230][T16884]  ? __pfx_wiphy_register+0x10/0x10
[  237.752250][T16884]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  237.752269][T16884]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  237.752286][T16884]  ieee80211_register_hw+0x3425/0x4080
[  237.752308][T16884]  ? ieee80211_register_hw+0x1411/0x4080
[  237.752328][T16884]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  237.752345][T16884]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.752368][T16884]  ? __hrtimer_setup+0x187/0x210
[  237.752382][T16884]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  237.752404][T16884]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  237.752434][T16884]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  237.752452][T16884]  ? trace_kmalloc+0x1f/0xd0
[  237.752469][T16884]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  237.752489][T16884]  ? kstrndup+0xbf/0x160
[  237.752506][T16884]  hwsim_new_radio_nl+0xea4/0x1b10
[  237.752525][T16884]  ? __pfx___nla_validate_parse+0x10/0x10
[  237.752552][T16884]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  237.752583][T16884]  ? __nla_parse+0x40/0x60
[  237.752605][T16884]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  237.752628][T16884]  genl_family_rcv_msg_doit+0x215/0x300
[  237.752647][T16884]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  237.752698][T16884]  ? bpf_lsm_capable+0x9/0x20
[  237.752719][T16884]  ? security_capable+0x7e/0x2e0
[  237.752743][T16884]  genl_rcv_msg+0x60e/0x790
[  237.752762][T16884]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.752777][T16884]  ? __kasan_slab_alloc+0x6c/0x80
[  237.752796][T16884]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  237.752813][T16884]  ? __netlink_lookup+0xbd/0x810
[  237.752825][T16884]  ? rcu_is_watching+0x15/0xb0
[  237.752842][T16884]  netlink_rcv_skb+0x208/0x470
[  237.752863][T16884]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.752877][T16884]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  237.752900][T16884]  ? lock_release+0x4b/0x3e0
[  237.752920][T16884]  ? down_read+0x1ad/0x2e0
[  237.752935][T16884]  genl_rcv+0x28/0x40
[  237.752949][T16884]  netlink_unicast+0x82f/0x9e0
[  237.752971][T16884]  ? __pfx_netlink_unicast+0x10/0x10
[  237.752991][T16884]  ? netlink_sendmsg+0x642/0xb30
[  237.753004][T16884]  ? skb_put+0x11b/0x210
[  237.753019][T16884]  netlink_sendmsg+0x805/0xb30
[  237.753036][T16884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.753049][T16884]  ? aa_sock_msg_perm+0xf1/0x1d0
[  237.753063][T16884]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  237.753078][T16884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.753091][T16884]  __sock_sendmsg+0x21c/0x270
[  237.753110][T16884]  ____sys_sendmsg+0x505/0x830
[  237.753127][T16884]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.753145][T16884]  ? import_iovec+0x74/0xa0
[  237.753162][T16884]  ___sys_sendmsg+0x21f/0x2a0
[  237.753177][T16884]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.753194][T16884]  ? futex_wake+0x4b2/0x560
[  237.753223][T16884]  ? __fget_files+0x2a/0x420
[  237.753235][T16884]  ? __fget_files+0x3a0/0x420
[  237.753251][T16884]  __x64_sys_sendmsg+0x19b/0x260
[  237.753266][T16884]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.753285][T16884]  ? rcu_is_watching+0x15/0xb0
[  237.753300][T16884]  ? rcu_is_watching+0x15/0xb0
[  237.753314][T16884]  do_syscall_64+0xfa/0x3b0
[  237.753328][T16884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.753342][T16884]  ? exc_page_fault+0x9f/0xf0
[  237.753363][T16884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.753378][T16884] RIP: 0033:0x7f0e53f8ebe9
[  237.753391][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.753405][T16884] RSP: 002b:00007f0e54d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.753422][T16884] RAX: ffffffffffffffda RBX: 00007f0e541c5fa0 RCX: 00007f0e53f8ebe9
[  237.753433][T16884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  237.753443][T16884] RBP: 00007f0e54011e19 R08: 0000000000000000 R09: 0000000000000000
[  237.753453][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.753462][T16884] R13: 00007f0e541c6038 R14: 00007f0e541c5fa0 R15: 00007fff41076478
[  237.753478][T16884]  </TASK>
[  237.981437][T16898] sctp: [Deprecated]: syz.0.2951 (pid 16898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.981437][T16898] Use struct sctp_sack_info instead
[  238.154058][T16918] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  238.212600][T16922] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.305627][T16931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.435857][T16939] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.441701][T16939] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  238.486999][T16939] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.490949][T16939] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  238.511856][T16941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.559653][T16939] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.563791][T16939] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  238.593321][T16950] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.630165][T16939] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.634191][T16939] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  238.677728][T16954] 8021q: adding VLAN 0 to HW filter on device bond47
[  238.693164][T16954] veth23: entered promiscuous mode
[  238.785905][T16966] 8021q: adding VLAN 0 to HW filter on device bond48
[  238.945703][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.949280][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  238.955101][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.959727][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  238.965543][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.969164][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  238.975563][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.983599][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  239.010047][T16995] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.032285][T17001] veth0: entered promiscuous mode
[  239.040458][T17001] veth0 (unregistering): left promiscuous mode
[  239.058734][T16995] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.130416][T16995] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.200898][T16995] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.222991][T17012] 8021q: adding VLAN 0 to HW filter on device bond53
[  239.277902][ T5739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.295199][ T5739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.306722][ T5739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.314933][ T5739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.321509][T17026] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  239.589257][T17046] IPVS: Unknown mcast interface: vcan0
[  239.592237][T17046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.601844][T17047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.660896][T17056] 8021q: adding VLAN 0 to HW filter on device bond28
[  239.702135][T17058] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  239.765867][T17060] C: renamed from team_slave_0
[  240.444209][T17118] __nla_validate_parse: 45 callbacks suppressed
[  240.444223][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'.
[  240.452910][T17118] sit3: entered promiscuous mode
[  240.457157][T17118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3012'.
[  240.505041][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3013'.
[  240.744952][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'.
[  240.759202][T17140] vlan2: entered allmulticast mode
[  240.760899][T17140] bridge0: entered allmulticast mode
[  240.762761][T17140] bridge0: port 1(vlan2) entered blocking state
[  240.764804][T17140] bridge0: port 1(vlan2) entered disabled state
[  240.811272][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'.
[  240.837578][T17147] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  240.949759][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3019'.
[  241.040516][T17155] veth1: left promiscuous mode
[  241.042133][T17155] veth9: left promiscuous mode
[  241.043988][T17155] tipc: Resetting bearer <eth:syzkaller0>
[  241.046082][T17155] syzkaller0: left promiscuous mode
[  241.049111][T17155] syzkaller0: left allmulticast mode
[  241.219716][T17174] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  241.293202][T17183] validate_nla: 14 callbacks suppressed
[  241.293214][T17183] netlink: 'syz.2.3030': attribute type 1 has an invalid length.
[  241.299243][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'.
[  241.302506][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'.
[  241.305037][T17183] 8021q: adding VLAN 0 to HW filter on device bond45
[  241.305933][T17184] netlink: 'syz.0.3031': attribute type 5 has an invalid length.
[  241.313623][T17184] netlink: 'syz.0.3031': attribute type 6 has an invalid length.
[  241.318265][T17183] 8021q: adding VLAN 0 to HW filter on device bond45
[  241.324151][T17183] bond45: (slave vcan0): The slave device specified does not support setting the MAC address
[  241.328917][T17183] bond45: (slave vcan0): Error -95 calling set_mac_address
[  241.420034][T17192] siw: device registration error -23
[  241.428528][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3033'.
[  241.465533][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'.
[  241.477769][T17194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.732752][T17225] syzkaller0: entered promiscuous mode
[  241.734917][T17225] syzkaller0: entered allmulticast mode
[  241.741311][T17225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.744883][T17226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.997753][T17247] bridge0: port 1(batadv5) entered blocking state
[  242.000513][T17247] bridge0: port 1(batadv5) entered disabled state
[  242.003279][T17247] batadv5: entered allmulticast mode
[  242.007015][T17247] batadv5: entered promiscuous mode
[  242.225220][T17269] vlan3: entered promiscuous mode
[  242.228258][T17269] bridge0: entered promiscuous mode
[  242.290720][T17274] bridge0: port 1(vlan2) entered blocking state
[  242.293377][T17274] bridge0: port 1(vlan2) entered disabled state
[  242.295514][T17274] vlan2: entered allmulticast mode
[  242.298082][T17274] vlan2: left allmulticast mode
[  242.366251][T17286] dvmrp1: left allmulticast mode
[  242.459195][T17284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.489614][T17285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.499200][   T13] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  242.502985][   T13] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  242.531587][T17296] netlink: 'syz.2.3065': attribute type 5 has an invalid length.
[  242.539943][T17296] geneve7: entered promiscuous mode
[  242.541719][T17296] geneve7: entered allmulticast mode
[  242.560593][T17288] vlan3: entered allmulticast mode
[  242.562682][T17288] bridge_slave_0: entered allmulticast mode
[  242.587999][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.591229][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.596217][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.599967][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.690747][T17310] netlink: 'syz.2.3070': attribute type 8 has an invalid length.
[  242.856048][T17319] netlink: 'syz.1.3072': attribute type 14 has an invalid length.
[  242.861756][T17319] netlink: 'syz.1.3072': attribute type 13 has an invalid length.
[  242.921418][T17323] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  243.038517][T17327] bond28: option mode: unable to set because the bond device has slaves
[  243.121840][T17335] netlink: 'syz.0.3077': attribute type 1 has an invalid length.
[  243.162495][T17335] bond49: (slave vxcan1): The slave device specified does not support setting the MAC address
[  243.182593][T17335] bond49: (slave vxcan1): Error -95 calling set_mac_address
[  243.565638][T17358] netlink: 'syz.0.3084': attribute type 1 has an invalid length.
[  244.135454][T17364] bond54 (unregistering): Released all slaves
[  244.192935][T17373] bond50: (slave bridge86): Enslaving as a backup interface with an up link
[  244.255687][T17378] syzkaller1: entered allmulticast mode
[  244.294326][T17384] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  244.313386][T17384] bond46: entered promiscuous mode
[  244.315037][T17384] bond46: entered allmulticast mode
[  244.318155][T17384] 8021q: adding VLAN 0 to HW filter on device bond46
[  244.428323][T17391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.442039][T17391] syzkaller0: entered promiscuous mode
[  244.443720][T17391] syzkaller0: entered allmulticast mode
[  244.486257][T17391] tipc: Resetting bearer <eth:syzkaller0>
[  244.494767][T17390] tipc: Resetting bearer <eth:syzkaller0>
[  244.504056][T17390] tipc: Disabling bearer <eth:syzkaller0>
[  244.674856][T17400] bridge87: entered allmulticast mode
[  245.094816][T17423] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  245.728123][T17428] bond0: (slave 0!): Releasing backup interface
[  245.736714][T17428] bond44: (slave bond45): Releasing backup interface
[  245.739959][T17428] batman_adv: batadv0: Removing interface: ip6gretap2
[  245.743399][T17428] bond46: (slave batadv3): Releasing active interface
[  245.747481][T17432] __nla_validate_parse: 45 callbacks suppressed
[  245.747492][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'.
[  245.753879][T17428] bond28: (slave macvlan19): Releasing backup interface
[  245.757465][T17428] bond51: (slave vcan1): Releasing backup interface
[  245.760881][T17428] bond52: (slave bridge23): Releasing active interface
[  245.764462][T17428] batadv5: left allmulticast mode
[  245.766976][T17428] batadv5: left promiscuous mode
[  245.769094][T17428] bridge0: port 1(batadv5) entered disabled state
[  245.775775][T17432] vlan2: entered promiscuous mode
[  245.779341][T17432] bridge0: entered promiscuous mode
[  246.411659][T17453] validate_nla: 5 callbacks suppressed
[  246.411674][T17453] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  246.430294][T17452] veth25: entered promiscuous mode
[  246.542860][T17462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3116'.
[  246.550997][T17460] netlink: 'syz.0.3116': attribute type 10 has an invalid length.
[  246.551534][T17461] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  246.588221][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'.
[  246.749618][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'.
[  246.793361][T17486] geneve8: entered promiscuous mode
[  246.797401][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'.
[  246.801217][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'.
[  246.820281][ T5739] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  246.823345][ T5739] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  246.826069][ T5739] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  246.837491][ T5739] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  246.850289][T17481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3122'.
[  246.951577][T17497] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.979366][T17497] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  247.052231][T17506] netlink: 'syz.1.3129': attribute type 1 has an invalid length.
[  247.075052][T17506] 8021q: adding VLAN 0 to HW filter on device bond54
[  247.135271][T17517] netlink: 'syz.2.3133': attribute type 2 has an invalid length.
[  247.145388][T17517] k*]: entered promiscuous mode
[  247.160922][T17517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.169039][T17517] veth0_to_team: entered promiscuous mode
[  247.171290][T17517] veth0_to_team: entered allmulticast mode
[  247.361688][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.364376][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  247.368653][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  247.372021][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.374864][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  247.378514][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  247.383871][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.387050][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  247.395692][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  247.401438][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.404765][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  247.414187][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  247.419701][T17541] 8021q: adding VLAN 0 to HW filter on device bond4
[  247.455144][T17549] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  247.458784][T17548] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  247.518386][T17559] sctp: [Deprecated]: syz.0.3143 (pid 17559) Use of int in max_burst socket option.
[  247.518386][T17559] Use struct sctp_assoc_value instead
[  247.640361][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  247.643795][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'.
[  248.460524][T17577] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3150'.
[  248.514369][T17577] syzkaller0: left promiscuous mode
[  248.516026][T17577] syzkaller0: left allmulticast mode
[  248.560330][T17587] netlink: 'syz.2.3152': attribute type 10 has an invalid length.
[  248.819962][T17619] netlink: 'syz.0.3161': attribute type 10 has an invalid length.
[  248.824165][T17619] netlink: 'syz.0.3161': attribute type 10 has an invalid length.
[  248.992498][T17628] netlink: 'syz.0.3165': attribute type 10 has an invalid length.
[  249.060955][T17643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.230003][T17647] netlink: 'syz.0.3168': attribute type 1 has an invalid length.
[  249.499260][T17680] netlink: 'syz.0.3179': attribute type 3 has an invalid length.
[  249.503410][T17680] siw: device registration error -23
[  249.509906][T17680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.578082][T17685] nbd: couldn't find device at index 536870912
[  249.607225][T17678] ip6gretap3: entered promiscuous mode
[  249.784236][T17706] bond0: Device is already in use.
[  249.812694][T17709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.815832][T17709] syzkaller0: entered promiscuous mode
[  249.819761][T17709] syzkaller0: entered allmulticast mode
[  249.829688][T17709] tipc: Resetting bearer <eth:syzkaller0>
[  249.832929][T17708] tipc: Resetting bearer <eth:syzkaller0>
[  249.837427][T17708] tipc: Disabling bearer <eth:syzkaller0>
[  249.895912][T17712] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  250.619022][T17734] 8021q: adding VLAN 0 to HW filter on device bond55
[  250.632019][T17734] 8021q: adding VLAN 0 to HW filter on device bond55
[  250.635087][T17734] bond55: (slave vxcan5): The slave device specified does not support setting the MAC address
[  250.640300][T17734] bond55: (slave vxcan5): Error -95 calling set_mac_address
[  250.685170][T17735] veth15: entered promiscuous mode
[  250.694026][T17735] bond55: (slave veth15): Enslaving as an active interface with a down link
[  250.703927][T17737] veth17: entered promiscuous mode
[  250.708385][T17737] bond55: (slave veth17): Enslaving as an active interface with a down link
[  250.729634][T17735] erspan0: entered allmulticast mode
[  250.778693][T17745] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  250.848239][T17748] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  250.864052][T17748] __nla_validate_parse: 17 callbacks suppressed
[  250.864069][T17748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3201'.
[  250.874225][T17748] veth0_to_team: entered promiscuous mode
[  250.877957][T17748] veth0_to_team: entered allmulticast mode
[  251.037957][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'.
[  251.190003][T17771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3209'.
[  251.194174][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'.
[  251.243949][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'.
[  251.324140][T17776] bond50: (slave bridge86): Releasing backup interface
[  251.340631][T17776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'.
[  251.509871][T17783] pim6reg1: entered promiscuous mode
[  251.511765][T17783] pim6reg1: entered allmulticast mode
[  252.227929][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[  252.233691][T17806] ip6gretap4: entered promiscuous mode
[  252.456133][T17829] : renamed from bond_slave_0
[  252.995235][T17850] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  252.998188][T17850] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  253.181418][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3231'.
[  253.185249][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3231'.
[  253.201341][T17855] veth19: entered promiscuous mode
[  253.224732][T17858] bridge0: port 1(erspan0) entered blocking state
[  253.227592][T17858] bridge0: port 1(erspan0) entered disabled state
[  253.230213][T17858] erspan0: entered allmulticast mode
[  253.233344][T17858] erspan0: entered promiscuous mode
[  253.236144][T17858] bridge0: port 1(erspan0) entered blocking state
[  253.238915][T17858] bridge0: port 1(erspan0) entered forwarding state
[  253.241870][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3231'.
[  253.243297][T17858] erspan0: left allmulticast mode
[  253.248998][T17858] erspan0: left promiscuous mode
[  253.251286][T17858] bridge0: port 1(erspan0) entered disabled state
[  253.261244][T17860] bridge0: port 1(erspan0) entered blocking state
[  253.265253][T17860] bridge0: port 1(erspan0) entered disabled state
[  253.268353][T17860] erspan0: entered allmulticast mode
[  253.271346][T17860] erspan0: entered promiscuous mode
[  253.274077][T17860] bridge0: port 1(erspan0) entered blocking state
[  253.276764][T17860] bridge0: port 1(erspan0) entered forwarding state
[  253.299767][T17863] validate_nla: 7 callbacks suppressed
[  253.299782][T17863] netlink: 'syz.1.3233': attribute type 8 has an invalid length.
[  253.305379][T17863] tipc: Resetting bearer <eth:syzkaller0>
[  253.436015][T17871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.588823][T17887] bridge0: port 1(erspan0) entered disabled state
[  253.615196][T17887] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  253.621554][T17887] mac80211_hwsim hwsim32 wlan1: left allmulticast mode
[  253.625582][T17887] veth23: left promiscuous mode
[  253.629987][T17887] sit3: left promiscuous mode
[  253.636283][T17887] bridge87: left allmulticast mode
[  253.646251][T17887] ip6gretap4: left promiscuous mode
[  253.708392][T17894] syzkaller0: entered promiscuous mode
[  253.710300][T17894] syzkaller0: entered allmulticast mode
[  253.712778][T17893] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.128955][T17921] netlink: 'syz.1.3250': attribute type 1 has an invalid length.
[  254.595272][T17943] netlink: 'syz.0.3257': attribute type 4 has an invalid length.
[  254.599981][T17943] netlink: 'syz.0.3257': attribute type 4 has an invalid length.
[  254.669248][T17952] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  254.671855][T17952] tipc: Enabled bearer <udp:s>, priority 10
[  254.841549][T17958] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  255.624246][T17972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.628810][T17972] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  255.631607][T17972] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  255.667621][ T5879] tipc: Node number set to 3152935176
[  255.686241][T17980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.822447][T18001] svc: failed to register nfsdv3 RPC service (errno 111).
[  255.825664][T18001] svc: failed to register nfsaclv3 RPC service (errno 111).
[  255.842023][T18008] netlink: 'syz.0.3277': attribute type 1 has an invalid length.
[  255.845218][T18008] workqueue: Failed to create a rescuer kthread for wq "bond51": -EINTR
[  255.872800][T18019] netlink: 'syz.0.3278': attribute type 1 has an invalid length.
[  255.880201][T18019] netlink: 'syz.0.3278': attribute type 4 has an invalid length.
[  255.882579][T18019] __nla_validate_parse: 19 callbacks suppressed
[  255.882677][T18019] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3278'.
[  255.888228][T18019] NCSI netlink: No device for ifindex 3321692160
[  255.909456][T18013] netlink: 'syz.2.3275': attribute type 4 has an invalid length.
[  256.053615][T18028] syzkaller1: entered allmulticast mode
[  256.262372][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'.
[  256.265928][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'.
[  256.269215][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'.
[  256.272496][T18037] netlink: 'syz.2.3282': attribute type 5 has an invalid length.
[  256.275171][T18037] netlink: 'syz.2.3282': attribute type 6 has an invalid length.
[  256.825168][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3287'.
[  257.107604][T18083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3295'.
[  257.180759][T18083] 8021q: adding VLAN 0 to HW filter on device bond51
[  257.227378][T18093] 8021q: adding VLAN 0 to HW filter on device bond47
[  257.230594][T18096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3299'.
[  257.241120][T18093] 8021q: adding VLAN 0 to HW filter on device bond47
[  257.244253][T18093] bond47: (slave vxcan1): The slave device specified does not support setting the MAC address
[  257.249932][T18093] bond47: (slave vxcan1): Error -95 calling set_mac_address
[  257.259987][T18096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3299'.
[  257.300255][T18097] veth23: entered promiscuous mode
[  257.304443][T18097] bond47: (slave veth23): Enslaving as an active interface with a down link
[  257.312873][T18093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3298'.
[  257.318420][T18093] 8021q: adding VLAN 0 to HW filter on device bond47
[  257.663811][T18116] sctp: [Deprecated]: syz.1.3305 (pid 18116) Use of int in maxseg socket option.
[  257.663811][T18116] Use struct sctp_assoc_value instead
[  257.691512][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'.
[  257.882943][T18136] syzkaller1: entered allmulticast mode
[  257.890508][T18136] syzkaller1: left allmulticast mode
[  258.317736][T18164] sctp: [Deprecated]: syz.2.3318 (pid 18164) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.317736][T18164] Use struct sctp_sack_info instead
[  258.389223][T18177] tipc: Resetting bearer <eth:syzkaller0>
[  258.391688][T18176] tipc: Resetting bearer <eth:syzkaller0>
[  258.470529][T18181] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  258.514248][T18181] bridge27: entered promiscuous mode
[  258.516012][T18181] bridge27: entered allmulticast mode
[  258.612140][T18185] validate_nla: 7 callbacks suppressed
[  258.612150][T18185] netlink: 'syz.1.3324': attribute type 10 has an invalid length.
[  258.617306][T18185] bond0: (slave wlan1): Opening slave failed
[  258.620256][T18185] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  258.760650][T18196] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  259.144255][T18223] netlink: 'syz.2.3332': attribute type 1 has an invalid length.
[  259.226519][T18234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.241585][T18233] tipc: Disabling bearer <eth:syzkaller0>
[  259.252401][T18242] vlan0: entered promiscuous mode
[  259.360711][T18251] netlink: 'syz.0.3340': attribute type 10 has an invalid length.
[  259.365015][T18251] netlink: 'syz.0.3340': attribute type 10 has an invalid length.
[  259.483730][T18256] veth0_to_team: left promiscuous mode
[  259.485620][T18256] veth0_to_team: left allmulticast mode
[  259.490411][T18256] vlan0: left promiscuous mode
[  259.493203][T18256] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  259.495733][T18256] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  259.504028][T18256] veth15: left promiscuous mode
[  259.505862][T18256] bond30: left promiscuous mode
[  259.509923][T18256] geneve5: left allmulticast mode
[  259.511975][T18256] mac80211_hwsim hwsim49 wlan1: left allmulticast mode
[  259.514601][T18256] bond35: left promiscuous mode
[  259.517423][T18256] bond35: left allmulticast mode
[  259.519205][T18256] ipvlan2: left promiscuous mode
[  259.522999][T18256] vlan3: left promiscuous mode
[  259.524867][T18256] bond37: left promiscuous mode
[  259.528180][T18256] vlan3: left allmulticast mode
[  259.529765][T18256] bond37: left allmulticast mode
[  259.531704][T18256] veth19: left promiscuous mode
[  259.533507][T18256] macsec3: left promiscuous mode
[  259.535191][T18256] macsec3: left allmulticast mode
[  259.537774][T18256] macsec4: left promiscuous mode
[  259.539437][T18256] macsec4: left allmulticast mode
[  259.541710][T18256] geneve6: left promiscuous mode
[  259.543368][T18256] geneve6: left allmulticast mode
[  259.545713][T18256] geneve7: left promiscuous mode
[  259.548967][T18256] geneve7: left allmulticast mode
[  259.550933][T18256] bond46: left promiscuous mode
[  259.553073][T18256] bond46: left allmulticast mode
[  259.555153][T18256] geneve8: left promiscuous mode
[  259.559727][T18256] veth23: left promiscuous mode
[  260.110531][T18271] pimreg: entered allmulticast mode
[  260.145696][T18273] netlink: 'syz.2.3346': attribute type 1 has an invalid length.
[  260.225961][T18282] netlink: 'syz.2.3348': attribute type 1 has an invalid length.
[  260.284022][T18285] netlink: 'syz.2.3349': attribute type 1 has an invalid length.
[  260.355573][T18294] netlink: 'syz.2.3353': attribute type 21 has an invalid length.
[  260.591582][T18311] erspan0: left allmulticast mode
[  260.593610][T18311] erspan0: left promiscuous mode
[  260.595341][T18311] bridge0: port 1(erspan0) entered disabled state
[  260.612212][T18311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.219508][T18328] netlink: 'syz.0.3363': attribute type 5 has an invalid length.
[  261.222695][T18328] __nla_validate_parse: 18 callbacks suppressed
[  261.222708][T18328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3363'.
[  261.235469][T18328] geneve0: entered promiscuous mode
[  261.239700][T18328] geneve0: entered allmulticast mode
[  261.242227][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  261.245668][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  261.258111][T18327] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  261.320377][T18327] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  261.411640][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3366'.
[  261.429051][ T5739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  261.432476][ T5739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  261.447111][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  261.454345][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  261.916138][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'.
[  261.920294][T18349] (unnamed net_device) (uninitialized): option use_carrier: invalid value (255)
[  261.944793][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[  261.948324][T18347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'.
[  261.951524][T18347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3369'.
[  261.954722][T18347] netlink: 540 bytes leftover after parsing attributes in process `syz.1.3369'.
[  261.959206][T18347] netlink: 'syz.1.3369': attribute type 10 has an invalid length.
[  262.336131][T18367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3376'.
[  262.423349][T18376] 8021q: adding VLAN 0 to HW filter on device bond51
[  262.439631][T18376] bond51 (unregistering): Released all slaves
[  262.504673][T18385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3380'.
[  262.555059][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3383'.
[  262.714451][T18402] wireguard3: entered promiscuous mode
[  262.724050][T18402] wireguard3: entered allmulticast mode
[  262.856573][T18417] vlan4: entered promiscuous mode
[  262.858135][T18417] bridge0: entered promiscuous mode
[  263.133704][T18456] pimreg: left allmulticast mode
[  263.209449][T18461] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.213272][T18461] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  263.216292][T18461] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  263.412068][T18472] pim6reg1: entered promiscuous mode
[  263.414416][T18472] pim6reg1: entered allmulticast mode
[  263.543780][T18477] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  263.546270][T18477] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  263.557654][T18477] bond51 (unregistering): Released all slaves
[  263.679046][T18493] validate_nla: 10 callbacks suppressed
[  263.679056][T18493] netlink: 'syz.1.3412': attribute type 2 has an invalid length.
[  264.011661][T18515] netlink: 'syz.2.3417': attribute type 7 has an invalid length.
[  264.014273][T18515] netlink: 'syz.2.3417': attribute type 8 has an invalid length.
[  264.018777][T18517] netlink: 'syz.0.3418': attribute type 1 has an invalid length.
[  264.027833][T18517] bond52: entered promiscuous mode
[  264.029681][T18517] 8021q: adding VLAN 0 to HW filter on device bond52
[  264.038975][T18520] bridge0: entered allmulticast mode
[  264.153596][T18525] syzkaller1: entered promiscuous mode
[  264.155620][T18525] syzkaller1: entered allmulticast mode
[  264.159290][T18525] wg1: entered promiscuous mode
[  264.161157][T18525] wg1: entered allmulticast mode
[  264.223904][T18529] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.228593][T18529] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  264.232048][T18529] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  264.241850][T18531] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  264.247049][T18529] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  264.292888][T18533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.296000][T18532] tipc: Resetting bearer <eth:syzkaller0>
[  264.335584][T18532] tipc: Disabling bearer <eth:syzkaller0>
[  264.480109][T18553] netlink: 'syz.2.3431': attribute type 7 has an invalid length.
[  264.482875][T18553] netlink: 'syz.2.3431': attribute type 8 has an invalid length.
[  264.505308][T18556] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  264.508298][T18556] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  264.544075][T18562] openvswitch: netlink: Missing key (keys=40, expected=80)
[  264.650868][T18562] netlink: 'syz.0.3434': attribute type 4 has an invalid length.
[  264.662388][T18562] netlink: 'syz.0.3434': attribute type 4 has an invalid length.
[  264.678830][   T33] audit: type=1800 audit(1756638678.508:3): pid=18568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3436" name="memory.events" dev="tmpfs" ino=6075 res=0 errno=0
[  264.713164][T18576] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  264.755903][T18580] netlink: 'syz.1.3440': attribute type 7 has an invalid length.
[  264.758692][T18580] netlink: 'syz.1.3440': attribute type 8 has an invalid length.
[  265.554634][T18658] wg1: left promiscuous mode
[  265.556125][T18658] wg1: left allmulticast mode
[  265.740503][T18665] pimreg: entered allmulticast mode
[  265.747201][T18664] pimreg: left allmulticast mode
[  265.914060][T18678] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  265.944343][T18682] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  266.036676][T18685] bridge0: port 1(ipvlan1) entered blocking state
[  266.040385][T18685] bridge0: port 1(ipvlan1) entered disabled state
[  266.042545][T18685] ipvlan1: entered allmulticast mode
[  266.044169][T18685] bridge0: entered allmulticast mode
[  266.046256][T18685] ipvlan1: left allmulticast mode
[  266.049021][T18685] bridge0: left allmulticast mode
[  266.114843][T18680] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  266.372644][T18705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.403402][T18708] __nla_validate_parse: 46 callbacks suppressed
[  266.403417][T18708] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3475'.
[  266.415279][T18710] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3475'.
[  266.460460][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'.
[  266.464357][T18713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3476'.
[  266.470494][T18713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3476'.
[  266.533822][T18717] 8021q: adding VLAN 0 to HW filter on device bond56
[  266.789202][T18739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3481'.
[  266.800151][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'.
[  266.864816][T18743] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.162430][T18757] openvswitch: netlink: IP tunnel dst address not specified
[  267.163006][T18759] openvswitch: netlink: IP tunnel dst address not specified
[  267.171779][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'.
[  267.211332][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3484'.
[  267.248201][T18749] erspan0: left allmulticast mode
[  267.290091][T18749] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.296297][T18749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.365221][T18762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.633766][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'.
[  267.780399][T18796] batadv6: entered promiscuous mode
[  267.782289][T18796] batadv6: entered allmulticast mode
[  268.174492][ T5869] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.185094][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.199900][ T5869] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.203220][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.219248][ T5865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.222133][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.229025][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.232041][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.427569][T18814] 8021q: adding VLAN 0 to HW filter on device bond51
[  268.623984][T18839] bridge91: entered allmulticast mode
[  268.663158][T18842] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.665859][T18842] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.733655][T18851] validate_nla: 18 callbacks suppressed
[  268.733667][T18851] netlink: 'syz.0.3514': attribute type 1 has an invalid length.
[  268.748329][T18851] veth27: entered promiscuous mode
[  269.481854][T18896] bridge92: entered promiscuous mode
[  269.483655][T18896] bridge92: entered allmulticast mode
[  269.552837][T18910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.556028][T18909] syzkaller0: entered promiscuous mode
[  269.559064][T18909] syzkaller0: entered allmulticast mode
[  269.590821][T18908] tipc: Resetting bearer <eth:syzkaller0>
[  269.596990][T18908] tipc: Disabling bearer <eth:syzkaller0>
[  269.829252][T18924] netem: change failed
[  269.849193][T18924] vlan2: entered allmulticast mode
[  269.850876][T18924] bridge0: entered allmulticast mode
[  269.852786][T18924] bridge59: port 1(vlan2) entered blocking state
[  269.854938][T18924] bridge59: port 1(vlan2) entered disabled state
[  269.869829][T18924] vlan2: entered promiscuous mode
[  269.871467][T18924] bridge0: entered promiscuous mode
[  269.883464][T18927] netlink: 'syz.1.3532': attribute type 20 has an invalid length.
[  269.885987][T18927] netlink: 'syz.1.3532': attribute type 20 has an invalid length.
[  269.887604][T18924] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  270.329348][T18942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.337308][T18942] tipc: Resetting bearer <eth:syzkaller0>
[  270.365161][T18944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.451045][T18953] 8021q: adding VLAN 0 to HW filter on device macvlan27
[  270.454920][T18953] bond28: (slave macvlan27): Enslaving as a backup interface with a down link
[  270.478427][T18953] bond55: (slave veth15): Releasing active interface
[  270.484408][T18953] bond55: (slave veth17): Releasing active interface
[  270.491788][T18953] bond28: (slave macvlan27): Releasing backup interface
[  270.584651][T18955] netlink: 'syz.1.3543': attribute type 2 has an invalid length.
[  270.612013][T18955] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  270.734963][T18963] netlink: 'syz.1.3547': attribute type 10 has an invalid length.
[  270.740850][T18963] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  270.789784][T18965] netlink: 'syz.1.3548': attribute type 5 has an invalid length.
[  271.292290][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.367825][T18982] netlink: 'syz.2.3552': attribute type 7 has an invalid length.
[  271.372128][T18982] netlink: 'syz.2.3552': attribute type 8 has an invalid length.
[  271.402136][T18985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.405127][T18985] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  271.408652][T18985] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  271.418806][T18979] __nla_validate_parse: 66 callbacks suppressed
[  271.418823][T18979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3551'.
[  271.508541][T18993] netlink: 'syz.2.3555': attribute type 1 has an invalid length.
[  271.527768][T18993] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  271.581274][T18998] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  271.585943][T18998] CPU: 0 UID: 0 PID: 18998 Comm: syz.0.3556 Not tainted syzkaller #0 PREEMPT(full) 
[  271.585964][T18998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.585972][T18998] Call Trace:
[  271.585977][T18998]  <TASK>
[  271.585984][T18998]  dump_stack_lvl+0x189/0x250
[  271.586007][T18998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.586024][T18998]  ? __pfx__printk+0x10/0x10
[  271.586049][T18998]  ? kernfs_root+0x1c/0x230
[  271.586066][T18998]  ? kernfs_path_from_node+0x2f/0x290
[  271.586079][T18998]  ? kernfs_path_from_node+0x250/0x290
[  271.586092][T18998]  ? kernfs_path_from_node+0x2f/0x290
[  271.586111][T18998]  sysfs_warn_dup+0x8e/0xa0
[  271.586125][T18998]  sysfs_do_create_link_sd+0xc0/0x110
[  271.586140][T18998]  device_add_class_symlinks+0x1cf/0x240
[  271.586187][T18998]  device_add+0x475/0xb50
[  271.586201][T18998]  wiphy_register+0x1ba6/0x28d0
[  271.586227][T18998]  ? __pfx_wiphy_register+0x10/0x10
[  271.586245][T18998]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  271.586262][T18998]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  271.586279][T18998]  ieee80211_register_hw+0x3425/0x4080
[  271.586317][T18998]  ? ieee80211_register_hw+0x1411/0x4080
[  271.586341][T18998]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  271.586366][T18998]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.586385][T18998]  ? __hrtimer_setup+0x187/0x210
[  271.586401][T18998]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  271.586421][T18998]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  271.586447][T18998]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  271.586464][T18998]  ? trace_kmalloc+0x1f/0xd0
[  271.586501][T18998]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  271.586519][T18998]  ? kstrndup+0xbf/0x160
[  271.586535][T18998]  hwsim_new_radio_nl+0xea4/0x1b10
[  271.586553][T18998]  ? __pfx___nla_validate_parse+0x10/0x10
[  271.586576][T18998]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.586596][T18998]  ? __nla_parse+0x40/0x60
[  271.586617][T18998]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  271.586636][T18998]  genl_family_rcv_msg_doit+0x215/0x300
[  271.586652][T18998]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  271.586669][T18998]  ? bpf_lsm_capable+0x9/0x20
[  271.586684][T18998]  ? security_capable+0x7e/0x2e0
[  271.586703][T18998]  genl_rcv_msg+0x60e/0x790
[  271.586716][T18998]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.586727][T18998]  ? __kasan_slab_alloc+0x6c/0x80
[  271.586740][T18998]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.586753][T18998]  ? __netlink_lookup+0xbd/0x810
[  271.586762][T18998]  ? rcu_is_watching+0x15/0xb0
[  271.586775][T18998]  netlink_rcv_skb+0x208/0x470
[  271.586791][T18998]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.586803][T18998]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.586821][T18998]  ? lock_release+0x4b/0x3e0
[  271.586836][T18998]  ? down_read+0x1ad/0x2e0
[  271.586847][T18998]  genl_rcv+0x28/0x40
[  271.586858][T18998]  netlink_unicast+0x82f/0x9e0
[  271.586874][T18998]  ? __pfx_netlink_unicast+0x10/0x10
[  271.586888][T18998]  ? netlink_sendmsg+0x642/0xb30
[  271.586896][T18998]  ? skb_put+0x11b/0x210
[  271.586907][T18998]  netlink_sendmsg+0x805/0xb30
[  271.586919][T18998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.586929][T18998]  ? futex_unqueue+0x22/0x240
[  271.586940][T18998]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.586950][T18998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.586961][T18998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.586970][T18998]  __sock_sendmsg+0x21c/0x270
[  271.586985][T18998]  ____sys_sendmsg+0x505/0x830
[  271.586997][T18998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.587009][T18998]  ? import_iovec+0x74/0xa0
[  271.587022][T18998]  ___sys_sendmsg+0x21f/0x2a0
[  271.587032][T18998]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.587044][T18998]  ? futex_wait+0x285/0x360
[  271.587065][T18998]  ? __fget_files+0x2a/0x420
[  271.587074][T18998]  ? __fget_files+0x3a0/0x420
[  271.587085][T18998]  __x64_sys_sendmsg+0x19b/0x260
[  271.587097][T18998]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.587114][T18998]  ? rcu_is_watching+0x15/0xb0
[  271.587124][T18998]  do_syscall_64+0xfa/0x3b0
[  271.587134][T18998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.587174][T18998]  ? exc_page_fault+0x9f/0xf0
[  271.587192][T18998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.587203][T18998] RIP: 0033:0x7f0e53f8ebe9
[  271.587215][T18998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.587226][T18998] RSP: 002b:00007f0e54d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.587240][T18998] RAX: ffffffffffffffda RBX: 00007f0e541c5fa0 RCX: 00007f0e53f8ebe9
[  271.587248][T18998] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  271.587255][T18998] RBP: 00007f0e54011e19 R08: 0000000000000000 R09: 0000000000000000
[  271.587262][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.587269][T18998] R13: 00007f0e541c6038 R14: 00007f0e541c5fa0 R15: 00007fff41076478
[  271.587282][T18998]  </TASK>
[  271.791636][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'.
[  271.795315][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'.
[  271.801097][T19001] netlink: 'syz.1.3557': attribute type 11 has an invalid length.
[  271.851773][T19003] netlink: 884 bytes leftover after parsing attributes in process `syz.0.3559'.
[  271.862551][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'.
[  271.868951][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'.
[  271.918240][T19018] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3562'.
[  271.929710][T19019] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  271.956741][T19021] bridge0: port 1(erspan0) entered blocking state
[  271.959419][T19021] bridge0: port 1(erspan0) entered disabled state
[  271.962093][T19021] erspan0: entered allmulticast mode
[  271.965286][T19021] erspan0: entered promiscuous mode
[  271.975319][T19021] erspan0: left allmulticast mode
[  271.979264][T19021] erspan0: left promiscuous mode
[  271.981367][T19021] bridge0: port 1(erspan0) entered disabled state
[  271.999689][T19019] batadv_slave_0: entered promiscuous mode
[  272.003562][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3563'.
[  272.020616][T19019] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3563'.
[  272.021898][T19025] syzkaller1: tun_chr_ioctl cmd 1074025677
[  272.026291][T19025] syzkaller1: linktype set to 778
[  272.030419][T19019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3563'.
[  272.194205][T19044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  272.200342][T19044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.203619][T19044] syzkaller0: entered promiscuous mode
[  272.205903][T19044] syzkaller0: entered allmulticast mode
[  272.212872][T19044] tipc: Resetting bearer <eth:syzkaller0>
[  272.216061][T19043] tipc: Resetting bearer <eth:syzkaller0>
[  272.224354][T19043] tipc: Disabling bearer <eth:syzkaller0>
[  272.376397][T19057] pimreg: entered allmulticast mode
[  272.379483][T19057] pimreg: left allmulticast mode
[  272.425891][T19057] bond53: entered promiscuous mode
[  272.428696][T19057] bond53: entered allmulticast mode
[  272.430820][T19057] 8021q: adding VLAN 0 to HW filter on device bond53
[  272.597173][T19071] 8021q: adding VLAN 0 to HW filter on device bond57
[  272.606567][T19071] veth19: entered promiscuous mode
[  272.610285][T19071] bond57: (slave veth19): Enslaving as an active interface with a down link
[  272.614512][T19071] erspan0: entered allmulticast mode
[  272.838768][T19084] openvswitch: netlink: IP tunnel TTL not specified.
[  273.448605][T19093] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  273.564720][T19099] syzkaller1: entered promiscuous mode
[  273.567083][T19099] syzkaller1: entered allmulticast mode
[  273.681048][T19104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.683722][T19104] syzkaller0: entered promiscuous mode
[  273.685604][T19104] syzkaller0: entered allmulticast mode
[  273.691316][T19104] tipc: Resetting bearer <eth:syzkaller0>
[  273.698162][T19104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  273.701632][T19104] gretap6: entered promiscuous mode
[  273.703465][T19104] gretap6: entered allmulticast mode
[  273.708271][T19102] tipc: Resetting bearer <eth:syzkaller0>
[  273.713922][T19102] tipc: Disabling bearer <eth:syzkaller0>
[  273.811880][T19109] validate_nla: 8 callbacks suppressed
[  273.811897][T19109] netlink: 'syz.2.3596': attribute type 7 has an invalid length.
[  273.836626][T19109] netlink: 'syz.2.3596': attribute type 8 has an invalid length.
[  274.163183][T19125] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  274.363729][T19140] sctp: [Deprecated]: syz.2.3603 (pid 19140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.363729][T19140] Use struct sctp_sack_info instead
[  274.370669][T19138] sctp: [Deprecated]: syz.2.3603 (pid 19138) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.370669][T19138] Use struct sctp_sack_info instead
[  274.412512][T19144] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  274.490712][T19140] sctp: [Deprecated]: syz.2.3603 (pid 19140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.490712][T19140] Use struct sctp_sack_info instead
[  274.531332][T19153] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  274.586761][T19158] openvswitch: netlink: IP tunnel TTL not specified.
[  274.723804][T19171] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.730879][T19173] netlink: 'syz.1.3612': attribute type 1 has an invalid length.
[  274.749645][T19173] 8021q: adding VLAN 0 to HW filter on device bond58
[  274.769427][T19173] veth21: entered promiscuous mode
[  274.778965][T19178] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  274.800659][T19171] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.849820][T19171] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.908639][T19171] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.937081][T19184] delete_channel: no stack
[  275.001854][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  275.009701][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  275.016192][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  275.023353][ T5739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  275.133157][ T5739] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.135797][ T5739] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.146470][ T5739] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.149395][ T5739] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.395955][T19231] tun0: tun_chr_ioctl cmd 2147767520
[  275.490818][T19233] netlink: 'syz.2.3631': attribute type 1 has an invalid length.
[  275.499502][T19233] 8021q: adding VLAN 0 to HW filter on device bond53
[  275.507826][T19233] 8021q: adding VLAN 0 to HW filter on device bond53
[  275.510152][T19233] bond53: (slave vxcan1): The slave device specified does not support setting the MAC address
[  275.514280][T19233] bond53: (slave vxcan1): Error -95 calling set_mac_address
[  275.584291][T19233] erspan0: entered allmulticast mode
[  275.590562][T19233] bond53: (slave erspan0): making interface the new active one
[  275.593699][T19233] bond53: (slave erspan0): Enslaving as an active interface with an up link
[  275.631751][T19239] bond0: default FDB implementation only supports local addresses
[  275.824300][T19259] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  275.829729][T19259] CPU: 0 UID: 0 PID: 19259 Comm: syz.1.3639 Not tainted syzkaller #0 PREEMPT(full) 
[  275.829741][T19259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  275.829747][T19259] Call Trace:
[  275.829750][T19259]  <TASK>
[  275.829754][T19259]  dump_stack_lvl+0x189/0x250
[  275.829768][T19259]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.829777][T19259]  ? __pfx__printk+0x10/0x10
[  275.829790][T19259]  ? kernfs_root+0x1c/0x230
[  275.829803][T19259]  ? kernfs_path_from_node+0x2f/0x290
[  275.829816][T19259]  ? kernfs_path_from_node+0x250/0x290
[  275.829861][T19259]  ? kernfs_path_from_node+0x2f/0x290
[  275.829878][T19259]  sysfs_warn_dup+0x8e/0xa0
[  275.829892][T19259]  sysfs_do_create_link_sd+0xc0/0x110
[  275.829906][T19259]  device_add_class_symlinks+0x1cf/0x240
[  275.829921][T19259]  device_add+0x475/0xb50
[  275.829930][T19259]  wiphy_register+0x1ba6/0x28d0
[  275.829945][T19259]  ? __pfx_wiphy_register+0x10/0x10
[  275.829955][T19259]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  275.829966][T19259]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  275.829975][T19259]  ieee80211_register_hw+0x3425/0x4080
[  275.829993][T19259]  ? ieee80211_register_hw+0x1411/0x4080
[  275.830011][T19259]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  275.830034][T19259]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  275.830055][T19259]  ? __hrtimer_setup+0x187/0x210
[  275.830066][T19259]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  275.830078][T19259]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  275.830093][T19259]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  275.830102][T19259]  ? trace_kmalloc+0x1f/0xd0
[  275.830111][T19259]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  275.830121][T19259]  ? kstrndup+0xbf/0x160
[  275.830131][T19259]  hwsim_new_radio_nl+0xea4/0x1b10
[  275.830140][T19259]  ? __pfx___nla_validate_parse+0x10/0x10
[  275.830155][T19259]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  275.830166][T19259]  ? __nla_parse+0x40/0x60
[  275.830177][T19259]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  275.830189][T19259]  genl_family_rcv_msg_doit+0x215/0x300
[  275.830199][T19259]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  275.830211][T19259]  ? bpf_lsm_capable+0x9/0x20
[  275.830221][T19259]  ? security_capable+0x7e/0x2e0
[  275.830233][T19259]  genl_rcv_msg+0x60e/0x790
[  275.830243][T19259]  ? __pfx_genl_rcv_msg+0x10/0x10
[  275.830251][T19259]  ? __kasan_slab_alloc+0x6c/0x80
[  275.830261][T19259]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  275.830270][T19259]  ? __netlink_lookup+0xbd/0x810
[  275.830276][T19259]  ? rcu_is_watching+0x15/0xb0
[  275.830286][T19259]  netlink_rcv_skb+0x208/0x470
[  275.830298][T19259]  ? __pfx_genl_rcv_msg+0x10/0x10
[  275.830313][T19259]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  275.830332][T19259]  ? lock_release+0x4b/0x3e0
[  275.830344][T19259]  ? down_read+0x1ad/0x2e0
[  275.830351][T19259]  genl_rcv+0x28/0x40
[  275.830359][T19259]  netlink_unicast+0x82f/0x9e0
[  275.830370][T19259]  ? __pfx_netlink_unicast+0x10/0x10
[  275.830380][T19259]  ? netlink_sendmsg+0x642/0xb30
[  275.830386][T19259]  ? skb_put+0x11b/0x210
[  275.830394][T19259]  netlink_sendmsg+0x805/0xb30
[  275.830402][T19259]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.830409][T19259]  ? aa_sock_msg_perm+0xf1/0x1d0
[  275.830417][T19259]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  275.830428][T19259]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.830440][T19259]  __sock_sendmsg+0x21c/0x270
[  275.830459][T19259]  ____sys_sendmsg+0x505/0x830
[  275.830468][T19259]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.830478][T19259]  ? import_iovec+0x74/0xa0
[  275.830487][T19259]  ___sys_sendmsg+0x21f/0x2a0
[  275.830495][T19259]  ? __pfx____sys_sendmsg+0x10/0x10
[  275.830509][T19259]  ? __fget_files+0x2a/0x420
[  275.830515][T19259]  ? __fget_files+0x3a0/0x420
[  275.830523][T19259]  __x64_sys_sendmsg+0x19b/0x260
[  275.830531][T19259]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  275.830538][T19259]  ? rcu_is_watching+0x15/0xb0
[  275.830551][T19259]  ? do_user_addr_fault+0xc8a/0x1390
[  275.830573][T19259]  ? rcu_is_watching+0x15/0xb0
[  275.830604][T19259]  do_syscall_64+0xfa/0x3b0
[  275.830611][T19259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.830619][T19259]  ? exc_page_fault+0x9f/0xf0
[  275.830630][T19259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.830637][T19259] RIP: 0033:0x7fba5338ebe9
[  275.830648][T19259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.830659][T19259] RSP: 002b:00007fba542b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.830671][T19259] RAX: ffffffffffffffda RBX: 00007fba535c6180 RCX: 00007fba5338ebe9
[  275.830680][T19259] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  275.830688][T19259] RBP: 00007fba53411e19 R08: 0000000000000000 R09: 0000000000000000
[  275.830695][T19259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.830703][T19259] R13: 00007fba535c6218 R14: 00007fba535c6180 R15: 00007ffef4e9a9c8
[  275.830715][T19259]  </TASK>
[  276.701210][T19269] netlink: 'syz.2.3641': attribute type 13 has an invalid length.
[  276.704316][T19269] netlink: 'syz.2.3641': attribute type 17 has an invalid length.
[  276.719538][T19269] erspan0: left allmulticast mode
[  276.752751][T19269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.902572][T19271] __nla_validate_parse: 20 callbacks suppressed
[  276.902584][T19271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3642'.
[  276.936474][T19271] netlink: 'syz.0.3642': attribute type 7 has an invalid length.
[  276.946932][T19271] netlink: 'syz.0.3642': attribute type 8 has an invalid length.
[  276.949831][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3642'.
[  277.681607][T19282] pim6reg1: entered promiscuous mode
[  277.683243][T19282] pim6reg1: entered allmulticast mode
[  277.736181][T19285] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3646'.
[  277.773540][T19295] netlink: 'syz.2.3649': attribute type 5 has an invalid length.
[  277.776100][T19295] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3649'.
[  277.787903][T19295] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3649'.
[  277.893421][T19308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.950958][T19312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.962096][T19315] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.966177][T19315] netlink: 'syz.1.3656': attribute type 9 has an invalid length.
[  278.004102][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  278.013511][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3658'.
[  278.019445][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  278.023654][T19320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3658'.
[  278.029874][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  278.589736][T19341] tipc: Resetting bearer <eth:syzkaller0>
[  278.666167][ T7135] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.676983][ T7135] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.680167][ T7135] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.684013][ T7135] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.696117][ T7135] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.700643][ T7135] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.706262][ T7135] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.711667][ T7135] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.003111][T19391] bond0: entered promiscuous mode
[  279.006143][T19391] bond0: left promiscuous mode
[  279.743898][T19413] openvswitch: netlink: Missing key (keys=40, expected=80)
[  279.930483][T19423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.042780][T19440] syzkaller1: entered promiscuous mode
[  280.044555][T19440] syzkaller1: entered allmulticast mode
[  281.155203][T19461] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  282.021046][T19483] validate_nla: 2 callbacks suppressed
[  282.021064][T19483] netlink: 'syz.2.3698': attribute type 1 has an invalid length.
[  282.047741][T19483] 8021q: adding VLAN 0 to HW filter on device bond55
[  282.059834][T19483] bond55: (slave ip6gretap5): making interface the new active one
[  282.063347][T19483] bond55: (slave ip6gretap5): Enslaving as an active interface with an up link
[  282.085937][T19483] veth27: entered promiscuous mode
[  282.090818][T19483] bond55: (slave veth27): Enslaving as an active interface with a down link
[  282.108379][T19483] erspan0: entered allmulticast mode
[  282.111920][T19483] bond53: (slave erspan0): Releasing active interface
[  282.121093][T19483] bond55: (slave erspan0): Enslaving as an active interface with an up link
[  282.248822][T19490] __nla_validate_parse: 9 callbacks suppressed
[  282.248834][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'.
[  282.259875][T19490] netlink: 'syz.1.3700': attribute type 7 has an invalid length.
[  282.266798][T19490] netlink: 'syz.1.3700': attribute type 8 has an invalid length.
[  282.269570][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3700'.
[  282.454109][T19506] netlink: 'syz.1.3706': attribute type 13 has an invalid length.
[  282.459560][T19506] netlink: 'syz.1.3706': attribute type 17 has an invalid length.
[  282.489422][T19506] erspan0: left allmulticast mode
[  282.515984][T19506] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.534800][T19506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.308607][T19532] geneve5: entered promiscuous mode
[  283.362046][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  283.491094][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'.
[  283.526164][T19548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3719'.
[  283.587953][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3720'.
[  283.632786][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'.
[  283.635756][T19553] netlink: 'syz.0.3722': attribute type 14 has an invalid length.
[  283.640441][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'.
[  283.643906][T19553] netlink: 'syz.0.3722': attribute type 14 has an invalid length.
[  283.731551][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3723'.
[  283.748643][T19564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'.
[  283.812494][T19568] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  283.824000][T19568] CPU: 1 UID: 0 PID: 19568 Comm: syz.1.3725 Not tainted syzkaller #0 PREEMPT(full) 
[  283.824024][T19568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.824034][T19568] Call Trace:
[  283.824039][T19568]  <TASK>
[  283.824047][T19568]  dump_stack_lvl+0x189/0x250
[  283.824071][T19568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.824088][T19568]  ? __pfx__printk+0x10/0x10
[  283.824107][T19568]  ? kernfs_root+0x1c/0x230
[  283.824124][T19568]  ? kernfs_path_from_node+0x2f/0x290
[  283.824139][T19568]  ? kernfs_path_from_node+0x250/0x290
[  283.824154][T19568]  ? kernfs_path_from_node+0x2f/0x290
[  283.824181][T19568]  sysfs_warn_dup+0x8e/0xa0
[  283.824196][T19568]  sysfs_do_create_link_sd+0xc0/0x110
[  283.824213][T19568]  device_add_class_symlinks+0x1cf/0x240
[  283.824258][T19568]  device_add+0x475/0xb50
[  283.824276][T19568]  wiphy_register+0x1ba6/0x28d0
[  283.824305][T19568]  ? __pfx_wiphy_register+0x10/0x10
[  283.824324][T19568]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  283.824343][T19568]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  283.824358][T19568]  ieee80211_register_hw+0x3425/0x4080
[  283.824379][T19568]  ? ieee80211_register_hw+0x1411/0x4080
[  283.824398][T19568]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  283.824414][T19568]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.824437][T19568]  ? __hrtimer_setup+0x187/0x210
[  283.824451][T19568]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  283.824466][T19568]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  283.824483][T19568]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  283.824493][T19568]  ? trace_kmalloc+0x1f/0xd0
[  283.824504][T19568]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.824514][T19568]  ? kstrndup+0xbf/0x160
[  283.824524][T19568]  hwsim_new_radio_nl+0xea4/0x1b10
[  283.824534][T19568]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.824549][T19568]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.824561][T19568]  ? __nla_parse+0x40/0x60
[  283.824572][T19568]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.824585][T19568]  genl_family_rcv_msg_doit+0x215/0x300
[  283.824595][T19568]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.824613][T19568]  ? bpf_lsm_capable+0x9/0x20
[  283.824629][T19568]  ? security_capable+0x7e/0x2e0
[  283.824649][T19568]  genl_rcv_msg+0x60e/0x790
[  283.824667][T19568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.824682][T19568]  ? __kasan_slab_alloc+0x6c/0x80
[  283.824700][T19568]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.824716][T19568]  ? __netlink_lookup+0xbd/0x810
[  283.824730][T19568]  ? rcu_is_watching+0x15/0xb0
[  283.824747][T19568]  netlink_rcv_skb+0x208/0x470
[  283.824767][T19568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.824783][T19568]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.824808][T19568]  ? lock_release+0x4b/0x3e0
[  283.824829][T19568]  ? down_read+0x1ad/0x2e0
[  283.824843][T19568]  genl_rcv+0x28/0x40
[  283.824858][T19568]  netlink_unicast+0x82f/0x9e0
[  283.824880][T19568]  ? __pfx_netlink_unicast+0x10/0x10
[  283.824899][T19568]  ? netlink_sendmsg+0x642/0xb30
[  283.824911][T19568]  ? skb_put+0x11b/0x210
[  283.824925][T19568]  netlink_sendmsg+0x805/0xb30
[  283.824942][T19568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.824957][T19568]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.824970][T19568]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.824985][T19568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.824997][T19568]  __sock_sendmsg+0x21c/0x270
[  283.825016][T19568]  ____sys_sendmsg+0x505/0x830
[  283.825033][T19568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.825051][T19568]  ? import_iovec+0x74/0xa0
[  283.825067][T19568]  ___sys_sendmsg+0x21f/0x2a0
[  283.825081][T19568]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.825095][T19568]  ? futex_wake+0x4b2/0x560
[  283.825124][T19568]  ? __fget_files+0x2a/0x420
[  283.825135][T19568]  ? __fget_files+0x3a0/0x420
[  283.825151][T19568]  __x64_sys_sendmsg+0x19b/0x260
[  283.825178][T19568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.825197][T19568]  ? rcu_is_watching+0x15/0xb0
[  283.825210][T19568]  ? rcu_is_watching+0x15/0xb0
[  283.825224][T19568]  do_syscall_64+0xfa/0x3b0
[  283.825271][T19568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.825285][T19568]  ? exc_page_fault+0x9f/0xf0
[  283.825305][T19568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.825318][T19568] RIP: 0033:0x7fba5338ebe9
[  283.825331][T19568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.825344][T19568] RSP: 002b:00007fba542f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.825361][T19568] RAX: ffffffffffffffda RBX: 00007fba535c5fa0 RCX: 00007fba5338ebe9
[  283.825373][T19568] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  283.825382][T19568] RBP: 00007fba53411e19 R08: 0000000000000000 R09: 0000000000000000
[  283.825391][T19568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.825400][T19568] R13: 00007fba535c6038 R14: 00007fba535c5fa0 R15: 00007ffef4e9a9c8
[  283.825415][T19568]  </TASK>
[  284.094899][T19577] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  284.275998][T19587] bond54: entered promiscuous mode
[  284.281672][T19587] bond54: entered allmulticast mode
[  284.284030][T19587] 8021q: adding VLAN 0 to HW filter on device bond54
[  284.359022][T19592] vlan6: entered promiscuous mode
[  284.361050][T19592] bond0: entered promiscuous mode
[  284.371080][T19592] vlan6: entered allmulticast mode
[  284.373033][T19592] bond0: entered allmulticast mode
[  284.514708][ T7135] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.517876][ T7135] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.533981][ T7135] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.547797][ T7135] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.582592][T19602] netlink: 'syz.0.3737': attribute type 18 has an invalid length.
[  284.585218][T19605] netlink: 'syz.0.3737': attribute type 18 has an invalid length.
[  284.832769][T19619] bond57: (slave veth19): Releasing active interface
[  284.902252][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.918187][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.931531][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.939630][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.943269][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.947893][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.952136][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.956045][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.960904][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.174194][T19637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.180447][T19637] syzkaller0: entered promiscuous mode
[  285.182841][T19637] syzkaller0: entered allmulticast mode
[  285.197475][T19634] tipc: Resetting bearer <eth:syzkaller0>
[  285.211897][T19634] tipc: Disabling bearer <eth:syzkaller0>
[  285.343821][T19649] netlink: 'syz.1.3744': attribute type 10 has an invalid length.
[  285.419077][T19649] bond0: (slave 0!): Enslaving as an active interface with an up link
[  285.426628][ T5869] bond0: (slave 0!): interface is now down
[  285.446574][ T5869] bond0: (slave 0!): interface is now down
[  285.449518][ T5869] bond0: now running without any active interface!
[  285.709925][T19658] 8021q: adding VLAN 0 to HW filter on device bond55
[  288.439071][T19658] bond55 (unregistering): Released all slaves
[  288.449660][T19674] dvmrp1: entered allmulticast mode
[  288.549662][T19681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  288.551988][T19681] IPv6: NLM_F_CREATE should be set when creating new route
[  288.554367][T19681] IPv6: NLM_F_CREATE should be set when creating new route
[  288.557077][T19681] IPv6: NLM_F_CREATE should be set when creating new route
[  288.587859][T19683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.591589][T19681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  288.700916][T19692] __nla_validate_parse: 14 callbacks suppressed
[  288.700932][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'.
[  288.732449][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3750'.
[  289.174154][T19704] bond55: (slave geneve5): Opening slave failed
[  289.256574][T19707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3755'.
[  289.332638][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'.
[  290.205673][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'.
[  290.209503][T19729] sctp: [Deprecated]: syz.1.3760 (pid 19729) Use of int in max_burst socket option deprecated.
[  290.209503][T19729] Use struct sctp_assoc_value instead
[  290.807366][T19743] validate_nla: 2 callbacks suppressed
[  290.807381][T19743] netlink: 'syz.2.3762': attribute type 1 has an invalid length.
[  290.858183][T19743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3762'.
[  290.865293][T19745] netlink: 'syz.1.3763': attribute type 1 has an invalid length.
[  290.994209][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'.
[  291.522021][T19768] syzkaller1: entered promiscuous mode
[  291.523825][T19768] syzkaller1: entered allmulticast mode
[  291.529980][T19768] netlink: 'syz.2.3767': attribute type 1 has an invalid length.
[  291.543864][T19768] 8021q: adding VLAN 0 to HW filter on device bond57
[  292.924039][T19783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3771'.
[  292.966425][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3772'.
[  292.972230][T19785] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3772'.
[  292.979145][T19785] netlink: 'syz.2.3772': attribute type 5 has an invalid length.
[  293.234963][T19801] netlink: 'syz.2.3776': attribute type 7 has an invalid length.
[  293.738539][T19806] __nla_validate_parse: 3 callbacks suppressed
[  293.738557][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'.
[  293.944688][T19819] erspan0: left allmulticast mode
[  293.987716][T19819] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  293.992896][T19819] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  293.995168][T19819] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  294.053201][T19819] veth27: left promiscuous mode
[  294.059567][T19819] vlan6: left promiscuous mode
[  294.061277][T19819] bond0: left promiscuous mode
[  294.063037][T19819] vlan6: left allmulticast mode
[  294.064828][T19819] bond0: left allmulticast mode
[  294.095320][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.103367][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.110875][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.114168][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.350589][T19835] nbd: must specify a size in bytes for the device
[  294.354213][T19835] netlink: 'syz.2.3786': attribute type 2 has an invalid length.
[  294.361855][T19835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3786'.
[  294.406614][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'.
[  294.474088][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'.
[  294.807764][T19851] netlink: 'syz.2.3794': attribute type 1 has an invalid length.
[  294.829490][T19851] 8021q: adding VLAN 0 to HW filter on device bond58
[  294.891050][T19851] 8021q: adding VLAN 0 to HW filter on device bond58
[  294.893966][T19851] bond58: (slave vxcan1): The slave device specified does not support setting the MAC address
[  294.898547][T19851] bond58: (slave vxcan1): Error -95 calling set_mac_address
[  294.982352][T19857] veth31: entered promiscuous mode
[  294.986093][T19857] bond58: (slave veth31): Enslaving as an active interface with a down link
[  294.998718][T19859] erspan0: entered allmulticast mode
[  295.007131][T19859] bond55: (slave erspan0): Releasing active interface
[  295.012687][T19859] ip6gretap5: entered promiscuous mode
[  295.023086][T19859] bond58: (slave erspan0): making interface the new active one
[  295.027732][T19859] bond58: (slave erspan0): Enslaving as an active interface with an up link
[  295.131920][T19863] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  295.166185][T19863] geneve0: left promiscuous mode
[  295.168120][T19863] geneve0: left allmulticast mode
[  295.172888][T19863] bond52: left promiscuous mode
[  295.180489][T19863] bridge91: left allmulticast mode
[  295.184568][T19863] bridge92: left promiscuous mode
[  295.190042][T19863] bridge92: left allmulticast mode
[  295.201374][T19863] bond53: left promiscuous mode
[  295.203322][T19863] bond53: left allmulticast mode
[  295.207228][T19863] gretap6: left promiscuous mode
[  295.210584][T19870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'.
[  295.211246][T19863] gretap6: left allmulticast mode
[  295.219084][T19863] bond54: left promiscuous mode
[  295.221413][T19863] bond54: left allmulticast mode
[  295.234901][T18804] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.241786][T18804] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  295.249140][T18804] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.252088][T18804] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  295.255241][T18804] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.259124][T18804] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  295.262614][T18804] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.267170][T18804] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  295.285774][T19872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3797'.
[  295.318001][T19872] netlink: 'syz.2.3797': attribute type 6 has an invalid length.
[  295.424849][T19885] net_ratelimit: 57 callbacks suppressed
[  295.424864][T19885] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  295.614516][T19899] ip6gre1: entered allmulticast mode
[  295.673142][T19901] _Z`Ԁ@: entered promiscuous mode
[  295.698184][T19910] syzkaller0: entered promiscuous mode
[  295.699855][T19910] syzkaller0: entered allmulticast mode
[  295.730818][T19915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.754177][T19911] erspan0: left allmulticast mode
[  295.786110][T19911] veth31: left promiscuous mode
[  295.790943][T19911] ip6gre1: left allmulticast mode
[  295.797999][T19920] netlink: 'syz.1.3814': attribute type 1 has an invalid length.
[  295.801754][T19920] rose1: entered promiscuous mode
[  295.803504][T19920] rose1: entered allmulticast mode
[  295.832874][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'.
[  295.853086][T19922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3815'.
[  295.901290][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'.
[  295.904076][T19928] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3818'.
[  296.065994][T19945] openvswitch: netlink: Key type 29 is not supported
[  296.325531][T19976] rose1: left promiscuous mode
[  296.328719][T19976] rose1: left allmulticast mode
[  296.579830][T19999] netlink: 'syz.1.3838': attribute type 1 has an invalid length.
[  296.830534][T20012] netlink: 'syz.2.3841': attribute type 7 has an invalid length.
[  296.857530][T20012] 8021q: adding VLAN 0 to HW filter on device bond59
[  296.860801][T20012] bridge62: port 1(bond59) entered blocking state
[  296.863555][T20012] bridge62: port 1(bond59) entered disabled state
[  296.866099][T20012] bond59: entered allmulticast mode
[  296.870233][T20012] bridge62: port 1(bond59) entered blocking state
[  296.872420][T20012] bridge62: port 1(bond59) entered forwarding state
[  296.893641][T20016] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  296.939474][T20019] netlink: 'syz.2.3845': attribute type 10 has an invalid length.
[  296.952867][T20017] netlink: 'syz.1.3844': attribute type 10 has an invalid length.
[  297.077403][T20025] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  297.093638][T20031] netlink: 'syz.0.3850': attribute type 1 has an invalid length.
[  297.098532][T20031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.102006][T20031] syzkaller0: entered promiscuous mode
[  297.104280][T20031] syzkaller0: entered allmulticast mode
[  297.121657][T20030] tipc: Resetting bearer <eth:syzkaller0>
[  297.133610][T20030] tipc: Disabling bearer <eth:syzkaller0>
[  297.195188][T20042] openvswitch: netlink: Key 6 has unexpected len 94 expected 2
[  297.204411][T20042] tipc: Failed to remove unknown binding: 66,1,1/791600187:2652751066/2652751068
[  297.209742][T20042] tipc: Failed to remove unknown binding: 66,1,1/791600187:2652751066/2652751068
[  297.213450][T20042] tipc: Failed to remove unknown binding: 66,1,1/791600187:2652751066/2652751068
[  297.272326][T20040] pim6reg1: entered promiscuous mode
[  297.274513][T20040] pim6reg1: entered allmulticast mode
[  297.294394][T20047] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  297.357072][ T9494] bridge62: port 1(bond59) entered disabled state
[  297.435494][T20055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.439807][T20055] syzkaller0: entered promiscuous mode
[  297.441726][T20055] syzkaller0: entered allmulticast mode
[  297.451917][T20055] tipc: Resetting bearer <eth:syzkaller0>
[  297.456821][T20054] tipc: Resetting bearer <eth:syzkaller0>
[  297.462046][T20054] tipc: Disabling bearer <eth:syzkaller0>
[  297.576091][T20058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.579134][T20059] syzkaller0: entered promiscuous mode
[  297.583157][T20059] syzkaller0: entered allmulticast mode
[  297.595957][T20059] tipc: Resetting bearer <eth:syzkaller0>
[  297.603273][T20059] tipc: Disabling bearer <eth:syzkaller0>
[  297.737412][T20065] vlan2 (unregistering): left allmulticast mode
[  297.739865][T20065] bridge0 (unregistering): left allmulticast mode
[  297.742348][T20065] vlan2 (unregistering): left promiscuous mode
[  297.744913][T20065] bridge0 (unregistering): left promiscuous mode
[  297.748151][T20065] bridge59: port 1(vlan2) entered disabled state
[  297.905217][T20077] netlink: 'syz.0.3861': attribute type 30 has an invalid length.
[  297.905262][T20082] netlink: 'syz.0.3861': attribute type 30 has an invalid length.
[  297.919114][T20077] netlink: 'syz.0.3861': attribute type 30 has an invalid length.
[  297.920269][ T5869] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.925291][ T5869] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.934634][ T5869] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.934646][T20082] netlink: 'syz.0.3861': attribute type 30 has an invalid length.
[  297.934690][ T5869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.144725][T20100] 8021q: adding VLAN 0 to HW filter on device bond4
[  298.155895][T20100] 8021q: adding VLAN 0 to HW filter on device macvlan38
[  298.172054][T20100] bond4: (slave macvlan38): Enslaving as a backup interface with a down link
[  298.319660][T20111] bond4: (slave macvlan38): Releasing backup interface
[  298.410431][T20111] vlan0: entered promiscuous mode
[  298.413076][T20111] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  298.880695][T20135] __nla_validate_parse: 33 callbacks suppressed
[  298.880713][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'.
[  298.888404][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3876'.
[  298.967851][T20143] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  298.970375][T20143] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  298.983390][T20145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3879'.
[  299.001637][T20145] rose0: entered promiscuous mode
[  299.039942][T20148] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  299.043737][T20148] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  299.263018][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3891'.
[  299.355750][T20194] vlan0: left promiscuous mode
[  299.409506][T18804] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.412690][T18804] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.415895][T18804] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.427407][T18804] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.445189][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'.
[  299.534237][T20208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3897'.
[  299.545919][T20208] : renamed from bond0
[  299.578777][T20217] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  299.581164][T20217] CPU: 0 UID: 0 PID: 20217 Comm: syz.0.3899 Not tainted syzkaller #0 PREEMPT(full) 
[  299.581175][T20217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.581181][T20217] Call Trace:
[  299.581185][T20217]  <TASK>
[  299.581190][T20217]  dump_stack_lvl+0x189/0x250
[  299.581205][T20217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.581214][T20217]  ? __pfx__printk+0x10/0x10
[  299.581224][T20217]  ? kernfs_root+0x1c/0x230
[  299.581233][T20217]  ? kernfs_path_from_node+0x2f/0x290
[  299.581241][T20217]  ? kernfs_path_from_node+0x250/0x290
[  299.581253][T20217]  ? kernfs_path_from_node+0x2f/0x290
[  299.581262][T20217]  sysfs_warn_dup+0x8e/0xa0
[  299.581270][T20217]  sysfs_do_create_link_sd+0xc0/0x110
[  299.581278][T20217]  device_add_class_symlinks+0x1cf/0x240
[  299.581288][T20217]  device_add+0x475/0xb50
[  299.581295][T20217]  wiphy_register+0x1ba6/0x28d0
[  299.581310][T20217]  ? __pfx_wiphy_register+0x10/0x10
[  299.581320][T20217]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  299.581330][T20217]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  299.581339][T20217]  ieee80211_register_hw+0x3425/0x4080
[  299.581353][T20217]  ? ieee80211_register_hw+0x1411/0x4080
[  299.581362][T20217]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  299.581371][T20217]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.581384][T20217]  ? __hrtimer_setup+0x187/0x210
[  299.581391][T20217]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  299.581403][T20217]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  299.581417][T20217]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  299.581426][T20217]  ? trace_kmalloc+0x1f/0xd0
[  299.581436][T20217]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  299.581446][T20217]  ? kstrndup+0xbf/0x160
[  299.581455][T20217]  hwsim_new_radio_nl+0xea4/0x1b10
[  299.581465][T20217]  ? __pfx___nla_validate_parse+0x10/0x10
[  299.581479][T20217]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.581491][T20217]  ? __nla_parse+0x40/0x60
[  299.581502][T20217]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  299.581513][T20217]  genl_family_rcv_msg_doit+0x215/0x300
[  299.581524][T20217]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  299.581534][T20217]  ? bpf_lsm_capable+0x9/0x20
[  299.581545][T20217]  ? security_capable+0x7e/0x2e0
[  299.581557][T20217]  genl_rcv_msg+0x60e/0x790
[  299.581567][T20217]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.581574][T20217]  ? __kasan_slab_alloc+0x6c/0x80
[  299.581584][T20217]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.581594][T20217]  ? __netlink_lookup+0xbd/0x810
[  299.581600][T20217]  ? rcu_is_watching+0x15/0xb0
[  299.581609][T20217]  netlink_rcv_skb+0x208/0x470
[  299.581621][T20217]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.581629][T20217]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.581641][T20217]  ? lock_release+0x4b/0x3e0
[  299.581653][T20217]  ? down_read+0x1ad/0x2e0
[  299.581660][T20217]  genl_rcv+0x28/0x40
[  299.581668][T20217]  netlink_unicast+0x82f/0x9e0
[  299.581679][T20217]  ? __pfx_netlink_unicast+0x10/0x10
[  299.581694][T20217]  ? netlink_sendmsg+0x642/0xb30
[  299.581700][T20217]  ? skb_put+0x11b/0x210
[  299.581708][T20217]  netlink_sendmsg+0x805/0xb30
[  299.581716][T20217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.581723][T20217]  ? aa_sock_msg_perm+0xf1/0x1d0
[  299.581730][T20217]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.581738][T20217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.581745][T20217]  __sock_sendmsg+0x21c/0x270
[  299.581756][T20217]  ____sys_sendmsg+0x505/0x830
[  299.581764][T20217]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.581773][T20217]  ? import_iovec+0x74/0xa0
[  299.581782][T20217]  ___sys_sendmsg+0x21f/0x2a0
[  299.581790][T20217]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.581799][T20217]  ? futex_wake+0x4b2/0x560
[  299.581815][T20217]  ? __fget_files+0x2a/0x420
[  299.581821][T20217]  ? __fget_files+0x3a0/0x420
[  299.581829][T20217]  __x64_sys_sendmsg+0x19b/0x260
[  299.581837][T20217]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.581847][T20217]  ? rcu_is_watching+0x15/0xb0
[  299.581855][T20217]  ? rcu_is_watching+0x15/0xb0
[  299.581862][T20217]  do_syscall_64+0xfa/0x3b0
[  299.581870][T20217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.581877][T20217]  ? exc_page_fault+0x9f/0xf0
[  299.581888][T20217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.581896][T20217] RIP: 0033:0x7f0e53f8ebe9
[  299.581904][T20217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.581912][T20217] RSP: 002b:00007f0e54d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.581921][T20217] RAX: ffffffffffffffda RBX: 00007f0e541c5fa0 RCX: 00007f0e53f8ebe9
[  299.581927][T20217] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  299.581932][T20217] RBP: 00007f0e54011e19 R08: 0000000000000000 R09: 0000000000000000
[  299.581937][T20217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.581942][T20217] R13: 00007f0e541c6038 R14: 00007f0e541c5fa0 R15: 00007fff41076478
[  299.581950][T20217]  </TASK>
[  299.766587][T20218] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  299.769584][T20218] CPU: 0 UID: 0 PID: 20218 Comm: syz.0.3899 Not tainted syzkaller #0 PREEMPT(full) 
[  299.769603][T20218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.769612][T20218] Call Trace:
[  299.769617][T20218]  <TASK>
[  299.769624][T20218]  dump_stack_lvl+0x189/0x250
[  299.769646][T20218]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.769661][T20218]  ? __pfx__printk+0x10/0x10
[  299.769677][T20218]  ? kernfs_root+0x1c/0x230
[  299.769694][T20218]  ? kernfs_path_from_node+0x2f/0x290
[  299.769708][T20218]  ? kernfs_path_from_node+0x250/0x290
[  299.769722][T20218]  ? kernfs_path_from_node+0x2f/0x290
[  299.769737][T20218]  sysfs_warn_dup+0x8e/0xa0
[  299.769750][T20218]  sysfs_do_create_link_sd+0xc0/0x110
[  299.769764][T20218]  device_add_class_symlinks+0x1cf/0x240
[  299.769780][T20218]  device_add+0x475/0xb50
[  299.769793][T20218]  wiphy_register+0x1ba6/0x28d0
[  299.769817][T20218]  ? __pfx_wiphy_register+0x10/0x10
[  299.769835][T20218]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  299.769851][T20218]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  299.769867][T20218]  ieee80211_register_hw+0x3425/0x4080
[  299.769888][T20218]  ? ieee80211_register_hw+0x1411/0x4080
[  299.769905][T20218]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  299.769920][T20218]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.769941][T20218]  ? __hrtimer_setup+0x187/0x210
[  299.769954][T20218]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  299.769973][T20218]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  299.769998][T20218]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  299.770014][T20218]  ? trace_kmalloc+0x1f/0xd0
[  299.770030][T20218]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  299.770082][T20218]  ? kstrndup+0xbf/0x160
[  299.770099][T20218]  hwsim_new_radio_nl+0xea4/0x1b10
[  299.770117][T20218]  ? __pfx___nla_validate_parse+0x10/0x10
[  299.770142][T20218]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.770163][T20218]  ? __nla_parse+0x40/0x60
[  299.770183][T20218]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  299.770202][T20218]  genl_family_rcv_msg_doit+0x215/0x300
[  299.770221][T20218]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  299.770249][T20218]  ? bpf_lsm_capable+0x9/0x20
[  299.770267][T20218]  ? security_capable+0x7e/0x2e0
[  299.770289][T20218]  genl_rcv_msg+0x60e/0x790
[  299.770307][T20218]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.770321][T20218]  ? __kasan_slab_alloc+0x6c/0x80
[  299.770338][T20218]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.770354][T20218]  ? __netlink_lookup+0xbd/0x810
[  299.770390][T20218]  ? rcu_is_watching+0x15/0xb0
[  299.770407][T20218]  netlink_rcv_skb+0x208/0x470
[  299.770427][T20218]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.770440][T20218]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.770460][T20218]  ? lock_release+0x4b/0x3e0
[  299.770477][T20218]  ? down_read+0x1ad/0x2e0
[  299.770488][T20218]  genl_rcv+0x28/0x40
[  299.770501][T20218]  netlink_unicast+0x82f/0x9e0
[  299.770519][T20218]  ? __pfx_netlink_unicast+0x10/0x10
[  299.770535][T20218]  ? netlink_sendmsg+0x642/0xb30
[  299.770544][T20218]  ? skb_put+0x11b/0x210
[  299.770557][T20218]  netlink_sendmsg+0x805/0xb30
[  299.770572][T20218]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.770584][T20218]  ? futex_unqueue+0x22/0x240
[  299.770597][T20218]  ? aa_sock_msg_perm+0xf1/0x1d0
[  299.770609][T20218]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.770623][T20218]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.770636][T20218]  __sock_sendmsg+0x21c/0x270
[  299.770655][T20218]  ____sys_sendmsg+0x505/0x830
[  299.770670][T20218]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.770687][T20218]  ? import_iovec+0x74/0xa0
[  299.770702][T20218]  ___sys_sendmsg+0x21f/0x2a0
[  299.770717][T20218]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.770732][T20218]  ? futex_wait+0x285/0x360
[  299.770758][T20218]  ? __fget_files+0x2a/0x420
[  299.770770][T20218]  ? __fget_files+0x3a0/0x420
[  299.770783][T20218]  __x64_sys_sendmsg+0x19b/0x260
[  299.770798][T20218]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.770815][T20218]  ? rcu_is_watching+0x15/0xb0
[  299.770828][T20218]  ? rcu_is_watching+0x15/0xb0
[  299.770842][T20218]  do_syscall_64+0xfa/0x3b0
[  299.770854][T20218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.770868][T20218]  ? exc_page_fault+0x9f/0xf0
[  299.770887][T20218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.770900][T20218] RIP: 0033:0x7f0e53f8ebe9
[  299.770913][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.770925][T20218] RSP: 002b:00007f0e54d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.770941][T20218] RAX: ffffffffffffffda RBX: 00007f0e541c6090 RCX: 00007f0e53f8ebe9
[  299.770951][T20218] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  299.770960][T20218] RBP: 00007f0e54011e19 R08: 0000000000000000 R09: 0000000000000000
[  299.770968][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.770976][T20218] R13: 00007f0e541c6128 R14: 00007f0e541c6090 R15: 00007fff41076478
[  299.770990][T20218]  </TASK>
[  300.079815][T20236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.082275][T20236] syzkaller0: entered promiscuous mode
[  300.083989][T20236] syzkaller0: entered allmulticast mode
[  300.168778][T20234] tipc: Resetting bearer <eth:syzkaller0>
[  300.810355][T20234] tipc: Disabling bearer <eth:syzkaller0>
[  300.815308][T20237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3901'.
[  300.886459][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'.
[  300.957603][T20251] bond56: entered promiscuous mode
[  300.959548][T20251] 8021q: adding VLAN 0 to HW filter on device bond56
[  301.077167][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3909'.
[  301.113425][T20272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3911'.
[  301.122560][T20275] batadv_slave_0: entered promiscuous mode
[  301.584130][T20311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.588786][T20313] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  301.592519][T20313] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  301.596715][T20311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.059932][T20318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.064347][T20318] tipc: Resetting bearer <eth:syzkaller0>
[  302.076696][T20318] syzkaller0: left promiscuous mode
[  302.078828][T20318] syzkaller0: left allmulticast mode
[  302.370053][T20343] vlan0: entered promiscuous mode
[  302.373366][T20331] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  302.443537][T20348] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  302.482750][T20351] validate_nla: 4 callbacks suppressed
[  302.482766][T20351] netlink: 'syz.0.3926': attribute type 13 has an invalid length.
[  302.487906][T20351] netlink: 'syz.0.3926': attribute type 17 has an invalid length.
[  302.495887][T20351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.762415][T20363] vlan4: entered allmulticast mode
[  302.764479][T20363] bridge0: entered allmulticast mode
[  302.767038][T20363] bridge95: port 1(vlan4) entered blocking state
[  302.769330][T20363] bridge95: port 1(vlan4) entered disabled state
[  302.773073][T20363] vlan4: entered promiscuous mode
[  302.775094][T20363] bridge0: entered promiscuous mode
[  302.783209][T20363] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  302.783493][T20365] netlink: 'syz.2.3934': attribute type 8 has an invalid length.
[  302.799432][T20365] netlink: 'syz.2.3934': attribute type 12 has an invalid length.
[  303.449972][T20393] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (809004142)
[  303.453746][T20393] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  303.640792][T20418] pim6reg: entered allmulticast mode
[  303.644567][T20418] pim6reg: left allmulticast mode
[  303.707506][T20421] netlink: 'syz.2.3947': attribute type 1 has an invalid length.
[  303.919331][T20441] __nla_validate_parse: 13 callbacks suppressed
[  303.919347][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3952'.
[  303.930607][T20441] netem: change failed
[  303.936684][T20441] vlan2: entered allmulticast mode
[  303.939847][T20441] bridge0: entered allmulticast mode
[  303.942136][T20441] bridge64: port 1(vlan2) entered blocking state
[  303.945854][T20441] bridge64: port 1(vlan2) entered disabled state
[  303.949141][T20441] vlan2: entered promiscuous mode
[  303.950909][T20441] bridge0: entered promiscuous mode
[  303.955408][T20441] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  303.969975][T20445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3954'.
[  304.016173][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'.
[  304.019705][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'.
[  304.135001][T20454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.140659][T20454] syzkaller0: entered promiscuous mode
[  304.143233][T20454] syzkaller0: entered allmulticast mode
[  304.154501][T20454] tipc: Resetting bearer <eth:syzkaller0>
[  304.161709][T20453] tipc: Resetting bearer <eth:syzkaller0>
[  304.167365][T20453] tipc: Disabling bearer <eth:syzkaller0>
[  304.240176][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'.
[  304.256868][T20460] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  304.283082][T20464] bridge65: entered allmulticast mode
[  304.356092][T20472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3963'.
[  304.377416][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3963'.
[  304.428525][T20474] smc: net device bond0 applied user defined pnetid SYZ2
[  304.546200][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'.
[  304.773726][T20514] netlink: 'syz.0.3975': attribute type 10 has an invalid length.
[  304.781398][T20514] netlink: 'syz.0.3975': attribute type 10 has an invalid length.
[  304.784519][T20514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3975'.
[  304.810017][T20518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.813836][T20518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  305.128356][T20527] netlink: 'syz.2.3978': attribute type 12 has an invalid length.
[  305.131770][T20527] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3978'.
[  305.573203][T20548] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  305.580398][T20548] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  305.644834][T20552] netlink: 'syz.1.3985': attribute type 1 has an invalid length.
[  305.655825][T20548] bridge65: left allmulticast mode
[  306.112673][T20552] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.133853][T20556] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.136808][T20556] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  306.141105][T20556] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  306.164803][T20557] veth27: entered promiscuous mode
[  306.223828][T20573] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  306.228892][T20573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.445246][T20582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.453047][T20582] veth0_to_bond: entered promiscuous mode
[  306.455442][T20582] veth0_to_bond: entered allmulticast mode
[  306.693897][T20598] netlink: 'syz.2.3999': attribute type 10 has an invalid length.
[  306.778280][T20600] 8021q: adding VLAN 0 to HW filter on device bond4
[  306.807874][T20600] 8021q: adding VLAN 0 to HW filter on device macvlan42
[  306.821936][T20600] bond4: (slave macvlan42): Enslaving as a backup interface with a down link
[  307.048453][T20611] erspan0: entered promiscuous mode
[  307.113918][T20613] pim6reg1: entered promiscuous mode
[  307.116060][T20613] pim6reg1: entered allmulticast mode
[  307.762706][T20628] validate_nla: 1 callbacks suppressed
[  307.762716][T20628] netlink: 'syz.1.4009': attribute type 6 has an invalid length.
[  307.767977][T20628] IPv6: NLM_F_CREATE should be specified when creating new route
[  309.395138][T20681] macsec2: entered promiscuous mode
[  309.398220][T20681] macsec2: entered allmulticast mode
[  309.400514][T20681] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  309.466200][T20685] __nla_validate_parse: 5 callbacks suppressed
[  309.466211][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4020'.
[  309.545050][T20700] netlink: 'syz.2.4022': attribute type 8 has an invalid length.
[  309.550982][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'.
[  309.570402][T20702] syzkaller0: entered promiscuous mode
[  309.572285][T20702] syzkaller0: entered allmulticast mode
[  309.704229][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'.
[  310.018074][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'.
[  310.310910][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'.
[  310.313840][T20731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4034'.
[  310.321609][T20734] veth0_to_bond: entered allmulticast mode
[  310.389651][T20734] ieee80211 phy114: Failed to add default virtual iface
[  310.395208][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'.
[  310.759568][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'.
[  310.819312][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4036'.
[  310.823103][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'.
[  310.945357][T20762] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.248545][    C1] ==================================================================
[  311.251373][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  311.254060][    C1] Write of size 8 at addr ffff888104ec6d30 by task syz-executor/5840
[  311.257926][    C1] 
[  311.258682][    C1] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  311.258694][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.258700][    C1] Call Trace:
[  311.258705][    C1]  <IRQ>
[  311.258709][    C1]  dump_stack_lvl+0x189/0x250
[  311.258722][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  311.258734][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.258742][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.258756][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.258763][    C1]  ? lock_release+0x4b/0x3e0
[  311.258776][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  311.258785][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  311.258795][    C1]  print_report+0xca/0x240
[  311.258803][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  311.258811][    C1]  kasan_report+0x118/0x150
[  311.258824][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  311.258833][    C1]  __xfrm_state_delete+0x696/0xca0
[  311.258843][    C1]  xfrm_timer_handler+0x18f/0xa00
[  311.258852][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.258859][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.258867][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  311.258878][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.258889][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.258896][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.258903][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  311.258914][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  311.258922][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  311.258932][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  311.258941][    C1]  handle_softirqs+0x286/0x870
[  311.258949][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  311.258957][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  311.258967][    C1]  __irq_exit_rcu+0xca/0x1f0
[  311.258974][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  311.258983][    C1]  irq_exit_rcu+0x9/0x30
[  311.258990][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  311.259002][    C1]  </IRQ>
[  311.259005][    C1]  <TASK>
[  311.259008][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.259017][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  311.259029][    C1] Code: 8b 3d c4 59 fe 0b 48 89 de 5b e9 f3 9a 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 60 a0 92 65 8b 15 e8 b4 e0 10 81 e2 00 01 ff 00
[  311.259036][    C1] RSP: 0018:ffffc9000378fc38 EFLAGS: 00000282
[  311.259044][    C1] RAX: ffffffff824f682f RBX: ffff888027e64958 RCX: ffff88810f211cc0
[  311.259051][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888027e64958
[  311.259056][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  311.259061][    C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: dffffc0000000000
[  311.259066][    C1] R13: 1ffff11004fcc95f R14: ffff888027e64af8 R15: 1ffff11004fcc95c
[  311.259074][    C1]  ? locks_free_lock_context+0xf/0x70
[  311.259092][    C1]  locks_free_lock_context+0xf/0x70
[  311.259101][    C1]  __destroy_inode+0x2ea/0x670
[  311.259113][    C1]  evict+0x797/0x9c0
[  311.259124][    C1]  ? __pfx_evict+0x10/0x10
[  311.259133][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  311.259143][    C1]  ? _raw_spin_unlock+0x28/0x50
[  311.259152][    C1]  ? iput+0x6d8/0x9d0
[  311.259160][    C1]  do_unlinkat+0x39f/0x560
[  311.259170][    C1]  ? lock_release+0x4b/0x3e0
[  311.259180][    C1]  ? __might_fault+0xb0/0x130
[  311.259191][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  311.259226][    C1]  ? getname_flags+0x1e5/0x540
[  311.259234][    C1]  __x64_sys_unlink+0x47/0x50
[  311.259244][    C1]  do_syscall_64+0xfa/0x3b0
[  311.259251][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.259258][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.259267][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.259274][    C1] RIP: 0033:0x7f0e53f8e197
[  311.259282][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.259290][    C1] RSP: 002b:00007fff41075708 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  311.259297][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e53f8e197
[  311.259303][    C1] RDX: 00007fff41075730 RSI: 00007fff410757c0 RDI: 00007fff410757c0
[  311.259308][    C1] RBP: 00007fff410757c0 R08: 0000000000000000 R09: 0000000000000000
[  311.259313][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff41076850
[  311.259319][    C1] R13: 00007f0e54011c05 R14: 000000000004bf40 R15: 00007fff41076890
[  311.259327][    C1]  </TASK>
[  311.259330][    C1] 
[  311.407076][    C1] Allocated by task 18387:
[  311.408424][    C1]  kasan_save_track+0x3e/0x80
[  311.409829][    C1]  __kasan_slab_alloc+0x6c/0x80
[  311.411306][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  311.413034][    C1]  xfrm_state_alloc+0x24/0x2f0
[  311.414897][    C1]  __find_acq_core+0x8a7/0x1c00
[  311.416783][    C1]  xfrm_find_acq+0x78/0xa0
[  311.418422][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  311.420097][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  311.421621][    C1]  netlink_rcv_skb+0x208/0x470
[  311.423087][    C1]  xfrm_netlink_rcv+0x79/0x90
[  311.424543][    C1]  netlink_unicast+0x82f/0x9e0
[  311.425976][    C1]  netlink_sendmsg+0x805/0xb30
[  311.427395][    C1]  __sock_sendmsg+0x21c/0x270
[  311.428795][    C1]  ____sys_sendmsg+0x505/0x830
[  311.430223][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  311.431667][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  311.433257][    C1]  do_syscall_64+0xfa/0x3b0
[  311.435076][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.436911][    C1] 
[  311.437662][    C1] Freed by task 47:
[  311.438860][    C1]  kasan_save_track+0x3e/0x80
[  311.440467][    C1]  kasan_save_free_info+0x46/0x50
[  311.442429][    C1]  __kasan_slab_free+0x5b/0x80
[  311.444259][    C1]  kmem_cache_free+0x18f/0x400
[  311.446126][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  311.448213][    C1]  process_scheduled_works+0xae1/0x17b0
[  311.450445][    C1]  worker_thread+0x8a0/0xda0
[  311.452313][    C1]  kthread+0x711/0x8a0
[  311.453884][    C1]  ret_from_fork+0x3fc/0x770
[  311.455685][    C1]  ret_from_fork_asm+0x1a/0x30
[  311.457513][    C1] 
[  311.458235][    C1] The buggy address belongs to the object at ffff888104ec6d00
[  311.458235][    C1]  which belongs to the cache xfrm_state of size 928
[  311.462532][    C1] The buggy address is located 48 bytes inside of
[  311.462532][    C1]  freed 928-byte region [ffff888104ec6d00, ffff888104ec70a0)
[  311.467320][    C1] 
[  311.468286][    C1] The buggy address belongs to the physical page:
[  311.470772][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888104ec6d00 pfn:0x104ec4
[  311.474585][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  311.477280][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  311.479609][    C1] page_type: f5(slab)
[  311.480898][    C1] raw: 057ff00000000040 ffff88801cb963c0 dead000000000122 0000000000000000
[  311.483616][    C1] raw: ffff888104ec6d00 00000000800e0009 00000000f5000000 0000000000000000
[  311.486880][    C1] head: 057ff00000000040 ffff88801cb963c0 dead000000000122 0000000000000000
[  311.490238][    C1] head: ffff888104ec6d00 00000000800e0009 00000000f5000000 0000000000000000
[  311.493571][    C1] head: 057ff00000000002 ffffea000413b101 00000000ffffffff 00000000ffffffff
[  311.496845][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  311.500092][    C1] page dumped because: kasan: bad access detected
[  311.502511][    C1] page_owner tracks the page as allocated
[  311.504686][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6631, tgid 6625 (syz.2.206), ts 69114567655, free_ts 54599683017
[  311.511796][    C1]  post_alloc_hook+0x240/0x2a0
[  311.513596][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  311.515600][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  311.517883][    C1]  alloc_pages_mpol+0x232/0x4a0
[  311.519454][    C1]  allocate_slab+0x8a/0x370
[  311.520902][    C1]  ___slab_alloc+0xbeb/0x1410
[  311.522570][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  311.524614][    C1]  xfrm_state_alloc+0x24/0x2f0
[  311.526540][    C1]  xfrm_state_find+0x37d4/0x5400
[  311.528438][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  311.530476][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  311.532483][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  311.534148][    C1]  udp_sendmsg+0x142e/0x2170
[  311.535737][    C1]  __sock_sendmsg+0x19c/0x270
[  311.537421][    C1]  ____sys_sendmsg+0x52d/0x830
[  311.539216][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  311.541100][    C1] page last free pid 5280 tgid 5280 stack trace:
[  311.543505][    C1]  __free_frozen_pages+0xbc4/0xd30
[  311.545547][    C1]  __slab_free+0x303/0x3c0
[  311.547278][    C1]  qlist_free_all+0x97/0x140
[  311.549038][    C1]  kasan_quarantine_reduce+0x148/0x160
[  311.551249][    C1]  __kasan_slab_alloc+0x22/0x80
[  311.553236][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  311.555565][    C1]  __alloc_skb+0x112/0x2d0
[  311.557301][    C1]  alloc_skb_with_frags+0xca/0x890
[  311.559163][    C1]  sock_alloc_send_pskb+0x857/0x990
[  311.561232][    C1]  unix_dgram_sendmsg+0x461/0x1850
[  311.563161][    C1]  __sock_sendmsg+0x21c/0x270
[  311.564983][    C1]  __sys_sendto+0x3bd/0x520
[  311.566733][    C1]  __x64_sys_sendto+0xde/0x100
[  311.568558][    C1]  do_syscall_64+0xfa/0x3b0
[  311.570276][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.572532][    C1] 
[  311.573473][    C1] Memory state around the buggy address:
[  311.575575][    C1]  ffff888104ec6c00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  311.578262][    C1]  ffff888104ec6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  311.581060][    C1] >ffff888104ec6d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  311.583610][    C1]                                      ^
[  311.585325][    C1]  ffff888104ec6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  311.587734][    C1]  ffff888104ec6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  311.590256][    C1] ==================================================================
[  311.593275][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  311.595712][    C1] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  311.598672][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.602090][    C1] Call Trace:
[  311.603196][    C1]  <IRQ>
[  311.604109][    C1]  dump_stack_lvl+0x99/0x250
[  311.605785][    C1]  ? __asan_memcpy+0x40/0x70
[  311.607341][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.608949][    C1]  ? __pfx__printk+0x10/0x10
[  311.610498][    C1]  vpanic+0x281/0x750
[  311.611980][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  311.614071][    C1]  ? __pfx_vpanic+0x10/0x10
[  311.615903][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.617554][    C1]  panic+0xb9/0xc0
[  311.618729][    C1]  ? __pfx_panic+0x10/0x10
[  311.620113][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  311.622057][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.624025][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  311.625583][    C1]  check_panic_on_warn+0x89/0xb0
[  311.627675][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  311.629611][    C1]  end_report+0x78/0x160
[  311.631038][    C1]  kasan_report+0x129/0x150
[  311.632631][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  311.634423][    C1]  __xfrm_state_delete+0x696/0xca0
[  311.636093][    C1]  xfrm_timer_handler+0x18f/0xa00
[  311.637840][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.639772][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.641439][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  311.643382][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.645370][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.647122][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  311.648969][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  311.650666][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  311.652552][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  311.654570][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  311.656527][    C1]  handle_softirqs+0x286/0x870
[  311.658464][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  311.660192][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  311.661927][    C1]  __irq_exit_rcu+0xca/0x1f0
[  311.663445][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  311.665113][    C1]  irq_exit_rcu+0x9/0x30
[  311.666469][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  311.668261][    C1]  </IRQ>
[  311.669230][    C1]  <TASK>
[  311.670185][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.672297][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  311.674710][    C1] Code: 8b 3d c4 59 fe 0b 48 89 de 5b e9 f3 9a 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 60 a0 92 65 8b 15 e8 b4 e0 10 81 e2 00 01 ff 00
[  311.680850][    C1] RSP: 0018:ffffc9000378fc38 EFLAGS: 00000282
[  311.682823][    C1] RAX: ffffffff824f682f RBX: ffff888027e64958 RCX: ffff88810f211cc0
[  311.685248][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888027e64958
[  311.687743][    C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  311.690046][    C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: dffffc0000000000
[  311.692908][    C1] R13: 1ffff11004fcc95f R14: ffff888027e64af8 R15: 1ffff11004fcc95c
[  311.695942][    C1]  ? locks_free_lock_context+0xf/0x70
[  311.697622][    C1]  locks_free_lock_context+0xf/0x70
[  311.699188][    C1]  __destroy_inode+0x2ea/0x670
[  311.700623][    C1]  evict+0x797/0x9c0
[  311.701957][    C1]  ? __pfx_evict+0x10/0x10
[  311.703309][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  311.704852][    C1]  ? _raw_spin_unlock+0x28/0x50
[  311.706308][    C1]  ? iput+0x6d8/0x9d0
[  311.707496][    C1]  do_unlinkat+0x39f/0x560
[  311.708831][    C1]  ? lock_release+0x4b/0x3e0
[  311.710233][    C1]  ? __might_fault+0xb0/0x130
[  311.711848][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  311.713767][    C1]  ? getname_flags+0x1e5/0x540
[  311.715639][    C1]  __x64_sys_unlink+0x47/0x50
[  311.717137][    C1]  do_syscall_64+0xfa/0x3b0
[  311.718512][    C1]  ? rcu_is_watching+0x15/0xb0
[  311.719901][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.721742][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.723524][    C1] RIP: 0033:0x7f0e53f8e197
[  311.724893][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.730609][    C1] RSP: 002b:00007fff41075708 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  311.733605][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e53f8e197
[  311.736477][    C1] RDX: 00007fff41075730 RSI: 00007fff410757c0 RDI: 00007fff410757c0
[  311.738868][    C1] RBP: 00007fff410757c0 R08: 0000000000000000 R09: 0000000000000000
[  311.741456][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff41076850
[  311.743865][    C1] R13: 00007f0e54011c05 R14: 000000000004bf40 R15: 00007fff41076890
[  311.746548][    C1]  </TASK>
[  311.748108][    C1] Kernel Offset: disabled
[  311.749482][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:12:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000002 RBX=ffffffff8fbf7e58 RCX=ffffffff8fbf7e60 RDX=ffffffff903f85fc
RSI=ffffffff903f85c6 RDI=ffffffff8be33620 RBP=dffffc0000000000 RSP=ffffc90002adee58
R8 =0000000000000010 R9 =0000000000000000 R10=ffffc90002adef78 R11=ffffffff81ac3810
R12=ffffffff903f8600 R13=ffffffff903f8601 R14=ffffc90002adef28 R15=ffffffff8fbf7e5c
RIP=ffffffff8172c485 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f955481f6c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffa60e2dba8 CR3=0000000040706000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df0670 RSP=ffffc900001e0350
R8 =ffff888021290237 R9 =1ffff11004252046 R10=dffffc0000000000 R11=ffffffff854f2270
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f22e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555563515500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff41074f58 CR3=00000000276b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9553a12e53
XMM06=0000000000000000 00007f9553a12e4d XMM07=0000000000000000 00007f9553a12e61
XMM08=0000000000000000 00007f9553a12ee7 XMM09=0000000000000000 00007f9553a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
