last executing test programs:

2m5.848295018s ago: executing program 2 (id=974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x88, 0x30, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0xe4ffffff}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x81, 0x1, 0x7, 0x52}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

2m5.847452681s ago: executing program 2 (id=975):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$isdn(0x22, 0x2, 0x11)
close(r1) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xfbfb}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local, @loopback, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @dev={0xfe, 0x80, '\x00', 0x1c}}}, 0x38) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) (async)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendfile(r9, r8, 0x0, 0x800) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200006279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601ffffffff18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"], 0x9f)

2m5.722283358s ago: executing program 2 (id=977):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000005c0)={'ip6tnl0\x00', 0xffff})
shutdown(r0, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000005c0)={'ip6tnl0\x00', 0xffff}) (async)
shutdown(r0, 0x1) (async)

2m5.613932212s ago: executing program 2 (id=979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async, rerun: 64)
r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
socket(0x22, 0x2, 0x4)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0}) (async)
r9 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000040)={r9}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, <r11=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10)

2m5.453714656s ago: executing program 2 (id=984):
unshare(0x8000400) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
recvmmsg(r1, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000040)) (async)
r2 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x124, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x44041)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @var={0xb, 0x0, 0x0, 0xe, 0x4}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000000580)=""/197, 0x46, 0xc5, 0x1, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0xe, '\x00', r5, r8, 0x0, 0x5, 0x2}, 0x50) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001000300000014000480050003000100000005000300070000fc07000200"], 0x38}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b00"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)

2m5.451911827s ago: executing program 2 (id=985):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c)
pread64(r1, 0x0, 0x0, 0x869)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "6ad2a3"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff4}, {0x4}}}, 0x24}}, 0x24048018)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @loopback}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1600000}, @in6={0xa, 0x4e21, 0x3, @local, 0x3}], 0x64)
sendto$inet6(r11, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(r11, &(0x7f00000007c0)="87", 0xfed9, 0x0, 0x0, 0x0)
shutdown(r11, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000140)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)

1m50.172199851s ago: executing program 32 (id=985):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c)
pread64(r1, 0x0, 0x0, 0x869)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "6ad2a3"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff4}, {0x4}}}, 0x24}}, 0x24048018)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @loopback}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1600000}, @in6={0xa, 0x4e21, 0x3, @local, 0x3}], 0x64)
sendto$inet6(r11, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(r11, &(0x7f00000007c0)="87", 0xfed9, 0x0, 0x0, 0x0)
shutdown(r11, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000140)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)

2.053823834s ago: executing program 0 (id=3243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x2, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae, 0x80}}, 0x20}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0xc000)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r9, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94)

1.213197904s ago: executing program 1 (id=3254):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24008054)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x1c}], 0x1}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1e4, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a33000000003dab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19ed6b6f2429ae2d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="56737e126934561c448f79dd29df4c979ebd7e64bb4c107cb71ecf924d5d2c7e"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8090}, 0x805)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
pipe(&(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r9], &(0x7f0000000140)='GPL\x00', 0x0, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002100)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x450, 0x8, 0x7f02ae, 0x450, 0x200, 0x520, 0x2e8, 0x2e8, 0x520, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x410, 0x450, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r10}}, @common=@rt={{0x138}, {0x6, [0x8, 0x9], 0x73e, 0x1, 0x2, [@private0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @empty}, @empty], 0xd}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [0x0, 0x0, 0xff], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x0, 0x58}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
socket$nl_route(0x10, 0x3, 0x0)

1.144863796s ago: executing program 1 (id=3257):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050424bd7000fe5b60250100000008000100", @ANYRES32=r10], 0x64}, 0x1, 0x0, 0x0, 0x400c481}, 0x44084)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001480)={0x258, r10, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000014}, 0x10801)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)

1.14427174s ago: executing program 0 (id=3258):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x3}}, 0x10)
r2 = socket(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000007c0)=0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) (async)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) (async)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000100)={0x3ff, "8fdf6d"}, 0x6) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000100)={0x3ff, "8fdf6d"}, 0x6)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x4) (async)
close(0x4)

1.02809834s ago: executing program 3 (id=3260):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040))
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000024511505ebfe96d500"/28], 0x50)
listen(r0, 0x9)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r11}, 0x38)
socket(0x25, 0x4, 0x6)

874.767953ms ago: executing program 3 (id=3261):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8004)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x40000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80)
sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0xb8, 0x10, 0x1, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_VF_PORTS={0x84, 0x18, 0x0, 0x1, [{0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x0, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f9db537afa204b7e0f8021c2e9669f18"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\\\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d940f30000cae0002ffffffff7ffffff"}, @IFLA_PORT_PROFILE={0x8, 0x2, '()]bZtq))\x8d\x97:\a\xdbQDK\x8eX\x15\x19\xce\x1b\xcbg\x87\xa5\xd1r0\t\xe1G\x0e\x12\xfe\x03\xe8\'W\x8c\xaf\r\x18W]\xccn\xacc\xa7\xdd\xc2\xcf\xf8kG\xdeG\xfai\xad+\xc4\xb9)\xb4;s5d\x11~\t\xe4\x8a\xa8pC\x1a[O]J\x9cf\xae\xe0\xf4\xed\x82\xa0\xce\tS\xb9\xdd!\xe8\xd6$\xca\xfc\xaa\xc5\xa1=\xa4\r\xfc8$\x00\xb9\x9c\x95\xc0lP\f\x9a#\xb8i\a\xe5\x8f\x7ft=\xe9\x1adz5!\x1b\xb4KD\xcc\x13v\xbf\x05\x00\x90\x00'/163}, @IFLA_PORT_VF={0x0, 0x1, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x4b, 0x4, "72b74377a707441be69a014e9962c919"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5bd65df2c65fd8fd9707aa62fe649316"}]}]}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x6}}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40801}, 0x4090)
r4 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

874.174757ms ago: executing program 3 (id=3262):
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r5, 0x7c13, 0x98d, 0x5})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003cc0)={0x3, 0x13, &(0x7f0000003800)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x3, 0x0, 0x1, 0x0, 0x8, 0x100, 0x10}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40)={<r9=>0x0, <r10=>0x0})
r11 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x8d43}], 0x1c)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r12, 0x400448e6, &(0x7f0000000080)="fc")
ioctl$sock_bt_hci(r12, 0x400448e7, &(0x7f0000000080))
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {0x0}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r9, r10+10000000})

664.027394ms ago: executing program 3 (id=3263):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x400})
r3 = epoll_create(0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})
r6 = socket(0x22, 0x2, 0x23)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000040))
getpid()
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
r10 = socket(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='0%\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000feffffff01000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c000200fcffffffffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00"/30, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4000)

663.466956ms ago: executing program 3 (id=3264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30314, 0x40148}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x20000014}, 0x40080)

584.727157ms ago: executing program 3 (id=3265):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={<r2=>0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={r2, 0x10001, 0x10000, 0xb}, 0x10)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0)
r12 = accept4(r11, 0x0, 0x0, 0x80800)
sendmmsg$alg(r12, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)

265.16779ms ago: executing program 1 (id=3266):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_int(r3, 0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
r5 = socket(0x2000000000000021, 0x2, 0x2)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfe46, '\x00', r2, r7, 0x2, 0x2, 0x1}, 0x50)
shutdown(r5, 0x2)
shutdown(r5, 0x2)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r13=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10)
bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r11}, 0x60)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c0019800800010002070000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x8040041}, 0x24008854)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="f4b1f09ff38bed42b5617ff47d16c9ca1e7884170c8aa1b9d66df8640343b1423375c9049ad2e14328246a1c86efce1a19d4a29b81191ca7dabc2fe047b1eff86ffed55ce7d199c2d5a82474ec8e418df3cf2124dc87af7d63d14f3aae49564d18d5eb1672e6f7a0f0abd3750d963bd96d4d1c0000ec06b2310aa65907b4ccd51add13a81ed08481b333c56e9a034db7cf0624c0f8f22c28f72796d3dd8191bc3c8f3f9459f08d29c9ead4c6d989d260754023269196550786e87490b92806fd78dec9318d9cfa1020f5318a60ffe986800c7f0dd87ee1b247abfe69a6421a416f33", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)

215.133841ms ago: executing program 0 (id=3267):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x2}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f00000008c0)=""/4096, 0x10c8}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {0x0}], 0x7}, 0x7ffffffd}], 0x4, 0x4022, 0x0)

213.483859ms ago: executing program 0 (id=3268):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'ip6erspan0\x00', 0x575})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1b, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x2, 0x5, 0x1, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x25}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xc2, &(0x7f0000000240)=""/194, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xc, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x2, 0x10, 0x5}, {0x2, 0x5, 0x2, 0x4}, {0x0, 0x5, 0x7, 0x8}, {0x0, 0x4, 0x9, 0x5}, {0x3, 0x4, 0x8, 0x8}], 0x10, 0xb30}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000540)=r2}, 0x20)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_flash={0x33, 0x8}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x7, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfe, 0xfe, 0x6, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x10}, {0x6, 0x4}, {0xf}, {0x1, 0x1}, {0x2, 0x4}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xa, 0x2}]}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @datasec={0xc, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x100, 0xff}, {0x3, 0x875e, 0xfff}, {0x4, 0x3, 0xf}, {0x4, 0x2, 0x7fff}], "5d01"}, @volatile={0x10}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000000b00)=""/116, 0x11e, 0x74, 0x1, 0x5}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r2, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x25, &(0x7f0000000d00)=[{}, {}], 0x10, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x1f, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0xff, 0x9, 0xe, 0x7, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x47, 0xeb, &(0x7f00000008c0)=""/235, 0x41100, 0x23, '\x00', 0x0, @fallback=0x24, r6, 0x8, &(0x7f0000000bc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x9, 0x6, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000001000)=[r8, r1, r9], &(0x7f0000001040)=[{0x0, 0x3, 0x10, 0x8}, {0x1, 0x5, 0xf, 0xa}, {0x5, 0x1, 0x9, 0x3}], 0x10, 0x7}, 0x94)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r11, &(0x7f0000001180), 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000011c0)={<r13=>0x0, 0x8}, &(0x7f0000001200)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000001240)={<r14=>r13, 0xe}, &(0x7f0000001280)=0x8)
r15 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000001300)={<r16=>r14, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x4e22, 0x876, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}]}, &(0x7f0000001340)=0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, 0x0, 0x800, 0x70bd29, 0x9, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r10, 0x0, 0xfd, 0x8d, &(0x7f0000001480)="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", &(0x7f0000001580)=""/141, 0x9b06, 0x0, 0x12, 0x1000, &(0x7f0000001640)="b7be50abb6a6c295c9b00cafa45686873b27", &(0x7f0000001680)="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", 0x2, 0x0, 0xffff0001}, 0x50)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000002700)={r16, 0xffffffff}, &(0x7f0000002740)=0x8)
r17 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002780), 0x80000)
readv(r17, &(0x7f0000003900)=[{&(0x7f00000027c0)=""/49, 0x31}, {&(0x7f0000002800)=""/140, 0x8c}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)}], 0x4)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000003980), r15)
sendmsg$DEVLINK_CMD_RATE_NEW(r18, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x98, r19, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3ea7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004884}, 0x0)

154.684089ms ago: executing program 0 (id=3269):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x7, 0x1, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5f)

152.26794ms ago: executing program 1 (id=3270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x400})
r3 = epoll_create(0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})
r6 = socket(0x22, 0x2, 0x23)
r7 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000040))
getpid()
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
r10 = socket(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='0%\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000feffffff01000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c000200fcffffffffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00"/30, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4000)

147.048638ms ago: executing program 0 (id=3271):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x18}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xd}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x8, 0x70bd28, 0x6, {0x0, 0x0, 0x0, r5, {0x7, 0x5}, {0x4, 0xffff}, {0xa, 0xc}}, [{0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc0}]}, 0x44}}, 0x1)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$isdn_base(0x22, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x800, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
ioctl$sock_bt_hci(r7, 0x400448ca, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r8, 0x8}, &(0x7f00000001c0)=0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000001780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)={0x124c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6d}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d76}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55cf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa94d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x88e}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20048040)
sendto$packet(r1, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0xfb}, 0x14)

4.266834ms ago: executing program 1 (id=3272):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000fffffff5b70532000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90)

0s ago: executing program 1 (id=3273):
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40))
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x8d43}], 0x1c)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)="fc")
ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080))
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000003800)=""/133, 0x85}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000003cc0)=""/189, 0xbd}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x5, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x3, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {0x0}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={0x0, 0x989680})

kernel console output (not intermixed with test programs):

allbacks suppressed
[  153.752589][T13129] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  153.791196][T13128] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  153.797795][T13128] netlink: 'syz.0.1918': attribute type 4 has an invalid length.
[  153.805052][T13135] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1921'.
[  153.819256][T13135] 0X: renamed from caif0
[  153.823911][T13135] 0X: entered allmulticast mode
[  153.827403][T13135] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  153.844295][T13137] vti0: entered promiscuous mode
[  153.939864][T13149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.943241][T13149] syzkaller0: entered promiscuous mode
[  153.945179][T13149] syzkaller0: entered allmulticast mode
[  153.973032][T13152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.124356][T13158] Unsupported ieee802154 address type: 0
[  154.209799][ T8998] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.213150][ T8998] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.219186][ T8998] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.222604][ T8998] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.387668][T13172] netlink: 'syz.3.1932': attribute type 1 has an invalid length.
[  154.454928][T13179] tap0: tun_chr_ioctl cmd 1074025677
[  154.459094][T13179] tap0: linktype set to 768
[  154.740369][T10325] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.744768][T10325] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.749151][T10325] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.749721][T13191] netlink: 'syz.0.1939': attribute type 1 has an invalid length.
[  154.752587][T10325] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.784055][T13191] 8021q: adding VLAN 0 to HW filter on device bond27
[  154.805235][T13191] veth13: entered promiscuous mode
[  154.811183][T13191] bond27: (slave veth13): Enslaving as an active interface with a down link
[  154.874968][T13205] netlink: 'syz.3.1942': attribute type 1 has an invalid length.
[  154.892388][T13205] 8021q: adding VLAN 0 to HW filter on device bond12
[  154.907828][T13205] bond12: (slave geneve2): making interface the new active one
[  154.913123][T13205] bond12: (slave geneve2): Enslaving as an active interface with an up link
[  154.917462][ T5870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.921407][ T5870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.932264][ T5870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.935606][ T5870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.967956][T13212] tipc: Resetting bearer <eth:gre0>
[  155.057599][ T8998] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.061337][ T8998] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.064586][ T8998] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.068670][ T8998] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.110039][T13220] pimreg: entered allmulticast mode
[  155.112988][T13220] pimreg: left allmulticast mode
[  155.150590][T13222] netlink: 'syz.1.1947': attribute type 58 has an invalid length.
[  155.399156][T13238] netlink: 'syz.3.1952': attribute type 5 has an invalid length.
[  155.402992][T13238] openvswitch: : Dropping previously announced user features
[  155.504452][T13248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.676821][T13255] 8021q: adding VLAN 0 to HW filter on device bond13
[  155.680719][T13255] bond0: (slave bond13): Enslaving as an active interface with a down link
[  155.754353][T13258] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.791792][T13265] tc_dump_action: action bad kind
[  155.794927][T13267] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  156.126870][T13293] 8021q: adding VLAN 0 to HW filter on device bond29
[  156.131000][T13293] bond28: (slave bond29): making interface the new active one
[  156.134187][T13293] bond28: (slave bond29): Enslaving as an active interface with an up link
[  156.242154][T13310] openvswitch: : Dropping previously announced user features
[  156.545644][T13334] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  156.561346][T13334] bond27: (slave veth13): Releasing active interface
[  156.564465][T13334] bond28: (slave bond29): Releasing backup interface
[  156.624903][T13337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.652438][T13338] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  156.760805][T13347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.783304][T13347] syzkaller0: entered promiscuous mode
[  156.785260][T13347] syzkaller0: entered allmulticast mode
[  156.843024][T13344] tipc: Resetting bearer <eth:syzkaller0>
[  156.940199][T13344] tipc: Disabling bearer <eth:syzkaller0>
[  157.372463][T13366] __nla_validate_parse: 19 callbacks suppressed
[  157.372480][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'.
[  157.380782][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'.
[  157.383854][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1989'.
[  157.394799][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'.
[  157.532886][T13374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'.
[  157.686840][T13384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1994'.
[  157.773512][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  158.169882][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'.
[  158.172929][T13396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2000'.
[  158.176457][T13396] tipc: Invalid UDP bearer configuration
[  158.176478][T13396] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  158.181874][T13398] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1998'.
[  158.190107][T13398] IPVS: Error connecting to the multicast addr
[  158.293297][T13408] 0X: left allmulticast mode
[  158.297009][T13408] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  158.548954][T13416] 8021q: adding VLAN 0 to HW filter on device bond34
[  158.551615][T13416] bridge0: port 1(bond34) entered blocking state
[  158.553855][T13416] bridge0: port 1(bond34) entered disabled state
[  158.557383][T13416] bond34: entered allmulticast mode
[  158.560040][T13416] bond34: entered promiscuous mode
[  158.630617][T13423] pim6reg1: entered promiscuous mode
[  158.632833][T13423] pim6reg1: entered allmulticast mode
[  158.695725][T13435] tap0: tun_chr_ioctl cmd 1074025680
[  158.700819][T13435] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.705719][T13435] D: renamed from syzkaller0 (while UP)
[  158.711555][T13435] tipc: Disabling bearer <eth:syzkaller0>
[  158.717415][T13435] tap0: tun_chr_ioctl cmd 1074025673
[  158.724370][T13437] tap0: tun_chr_ioctl cmd 1074025680
[  158.795181][T13442] bond35 (unregistering): Released all slaves
[  158.835269][T13441] validate_nla: 10 callbacks suppressed
[  158.835286][T13441] netlink: 'syz.3.2014': attribute type 13 has an invalid length.
[  158.841353][T13441] netlink: 'syz.3.2014': attribute type 17 has an invalid length.
[  159.011870][T13450] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.015664][T13450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.079025][T13450] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.083032][T13450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.129137][T13450] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.133137][T13450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.209621][T13450] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.213615][T13450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.225122][T13458] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.324286][ T5904] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.334789][ T5904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.342724][ T5904] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.359082][ T5904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.367350][ T5904] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.370519][ T5904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.378689][T10325] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.381634][T10325] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.572420][T13485] team0: Device ip6tnl4 is of different type
[  159.585641][T13487] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.632409][T13491] netlink: 'syz.0.2029': attribute type 2 has an invalid length.
[  159.650398][T13491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.747995][T13499] netlink: 'syz.0.2032': attribute type 2 has an invalid length.
[  159.828632][T13502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.020898][T13519] bridge0: port 1(erspan0) entered blocking state
[  160.023172][T13519] bridge0: port 1(erspan0) entered disabled state
[  160.025482][T13519] erspan0: entered allmulticast mode
[  160.029926][T13519] erspan0: left allmulticast mode
[  160.132630][T13526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.234306][T13531] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.242726][T13531] netlink: 'syz.0.2039': attribute type 58 has an invalid length.
[  160.601631][T13550] syzkaller0: entered promiscuous mode
[  160.603408][T13550] syzkaller0: entered allmulticast mode
[  160.752542][T13552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.756724][T13552] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  160.760344][T13552] tipc: Resetting bearer <eth:syzkaller0>
[  160.763673][T13551] tipc: Disabling bearer <eth:syzkaller0>
[  160.820439][T13554] netlink: 'syz.1.2048': attribute type 5 has an invalid length.
[  160.822928][T13554] netlink: 'syz.1.2048': attribute type 7 has an invalid length.
[  160.825726][T13554] openvswitch: : Dropping previously announced user features
[  160.847868][T13556] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.909180][T13556] bond31: (slave bridge15): Releasing active interface
[  160.913976][T13556] bond32: (slave bridge17): Releasing active interface
[  160.918156][T13556] bond34: left allmulticast mode
[  160.919887][T13556] bond34: left promiscuous mode
[  160.921634][T13556] bridge0: port 1(bond34) entered disabled state
[  160.944714][T13559] netlink: 'syz.1.2050': attribute type 1 has an invalid length.
[  160.961661][T13559] 8021q: adding VLAN 0 to HW filter on device bond35
[  160.971660][T13559] bond35 (unregistering): Released all slaves
[  161.073326][T13570] netlink: 'syz.3.2055': attribute type 5 has an invalid length.
[  161.075786][T13570] netlink: 'syz.3.2055': attribute type 7 has an invalid length.
[  161.079991][T13570] openvswitch: : Dropping previously announced user features
[  161.331527][T13599] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  161.561895][T13626] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  161.572538][T13626] tipc: Resetting bearer <eth:gre0>
[  161.851039][T13656] pimreg: left allmulticast mode
[  161.879326][T13656] rdma_rxe: rxe_newlink: failed to add lo
[  161.882784][T13656] gretap0: entered promiscuous mode
[  161.890163][T13656] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  161.939333][T13660] syzkaller1: entered promiscuous mode
[  161.941072][T13660] syzkaller1: entered allmulticast mode
[  161.943414][T13660] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  162.494220][T13678] __nla_validate_parse: 25 callbacks suppressed
[  162.494242][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'.
[  162.614552][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'.
[  162.618275][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2091'.
[  162.671023][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'.
[  162.674669][T13690] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2092'.
[  162.679032][T13690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.819085][T13699] lo: entered promiscuous mode
[  162.821061][T13699] lo: entered allmulticast mode
[  162.827450][T13699] tunl0: entered promiscuous mode
[  162.830739][T13699] tunl0: entered allmulticast mode
[  162.833831][T13699] gre0: entered promiscuous mode
[  162.837645][T13699] gre0: entered allmulticast mode
[  162.840559][T13699] gretap0: entered promiscuous mode
[  162.842175][T13699] gretap0: entered allmulticast mode
[  162.844760][T13699] erspan0: entered promiscuous mode
[  162.847040][T13699] erspan0: entered allmulticast mode
[  162.849531][T13699] ip_vti0: entered promiscuous mode
[  162.851406][T13699] ip_vti0: entered allmulticast mode
[  162.853998][T13699] ip6_vti0: entered promiscuous mode
[  162.857622][T13699] ip6_vti0: entered allmulticast mode
[  162.861407][T13699] sit0: entered promiscuous mode
[  162.863504][T13699] sit0: entered allmulticast mode
[  162.869047][T13699] ip6tnl0: entered promiscuous mode
[  162.871244][T13699] ip6tnl0: entered allmulticast mode
[  162.874414][T13699] ip6gre0: entered promiscuous mode
[  162.877076][T13699] ip6gre0: entered allmulticast mode
[  162.880368][T13699] vcan0: entered promiscuous mode
[  162.882490][T13699] vcan0: entered allmulticast mode
[  162.885018][T13699] !: entered promiscuous mode
[  162.890656][T13699] !: entered allmulticast mode
[  162.894029][T13699] nlmon0: entered promiscuous mode
[  162.897003][T13699] nlmon0: entered allmulticast mode
[  162.900015][T13699] caif0: entered promiscuous mode
[  162.902021][T13699] caif0: entered allmulticast mode
[  162.904065][T13699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.948785][ T2304] hid-generic 0005:046D:8002.0002: collection stack underflow
[  162.953589][ T2304] hid-generic 0005:046D:8002.0002: item 0 0 0 12 parsing failed
[  162.957205][ T2304] hid-generic 0005:046D:8002.0002: probe with driver hid-generic failed with error -22
[  163.117257][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2096'.
[  163.143512][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'.
[  163.147970][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'.
[  163.345130][T13734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2102'.
[  163.389370][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'.
[  163.394940][T13737] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  163.398098][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.0.2103 Not tainted syzkaller #0 PREEMPT(full) 
[  163.398117][T13737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.398128][T13737] Call Trace:
[  163.398154][T13737]  <TASK>
[  163.398161][T13737]  dump_stack_lvl+0x189/0x250
[  163.398190][T13737]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.398208][T13737]  ? __pfx__printk+0x10/0x10
[  163.398230][T13737]  ? kernfs_root+0x1c/0x230
[  163.398248][T13737]  ? kernfs_path_from_node+0x2f/0x290
[  163.398263][T13737]  ? kernfs_path_from_node+0x250/0x290
[  163.398277][T13737]  ? kernfs_path_from_node+0x2f/0x290
[  163.398293][T13737]  sysfs_warn_dup+0x8e/0xa0
[  163.398308][T13737]  sysfs_do_create_link_sd+0xc0/0x110
[  163.398324][T13737]  device_add_class_symlinks+0x1cf/0x240
[  163.398342][T13737]  device_add+0x475/0xb50
[  163.398356][T13737]  wiphy_register+0x1ba6/0x28d0
[  163.398385][T13737]  ? __pfx_wiphy_register+0x10/0x10
[  163.398405][T13737]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  163.398425][T13737]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  163.398444][T13737]  ieee80211_register_hw+0x3425/0x4080
[  163.398467][T13737]  ? ieee80211_register_hw+0x1481/0x4080
[  163.398486][T13737]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  163.398501][T13737]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.398527][T13737]  ? __hrtimer_setup+0x187/0x210
[  163.398542][T13737]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  163.398568][T13737]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  163.398595][T13737]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  163.398611][T13737]  ? trace_kmalloc+0x1f/0xd0
[  163.398629][T13737]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  163.398648][T13737]  ? kstrndup+0xbf/0x160
[  163.398663][T13737]  hwsim_new_radio_nl+0xea4/0x1b10
[  163.398680][T13737]  ? __pfx___nla_validate_parse+0x10/0x10
[  163.398707][T13737]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  163.398728][T13737]  ? __nla_parse+0x40/0x60
[  163.398747][T13737]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  163.398768][T13737]  genl_family_rcv_msg_doit+0x215/0x300
[  163.398786][T13737]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  163.398806][T13737]  ? bpf_lsm_capable+0x9/0x20
[  163.398826][T13737]  ? security_capable+0x7e/0x2e0
[  163.398850][T13737]  genl_rcv_msg+0x60e/0x790
[  163.398907][T13737]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.398925][T13737]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  163.398945][T13737]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  163.398969][T13737]  netlink_rcv_skb+0x208/0x470
[  163.398987][T13737]  ? rcu_is_watching+0x15/0xb0
[  163.399000][T13737]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.399013][T13737]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.399028][T13737]  ? lock_release+0x4b/0x3e0
[  163.399043][T13737]  ? down_read+0x1ad/0x2e0
[  163.399051][T13737]  genl_rcv+0x28/0x40
[  163.399059][T13737]  netlink_unicast+0x82f/0x9e0
[  163.399071][T13737]  ? __pfx_netlink_unicast+0x10/0x10
[  163.399082][T13737]  ? netlink_sendmsg+0x642/0xb30
[  163.399089][T13737]  ? skb_put+0x11b/0x210
[  163.399097][T13737]  netlink_sendmsg+0x805/0xb30
[  163.399107][T13737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.399114][T13737]  ? futex_unqueue+0x22/0x240
[  163.399123][T13737]  ? aa_sock_msg_perm+0xf1/0x1d0
[  163.399148][T13737]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.399158][T13737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.399165][T13737]  __sock_sendmsg+0x21c/0x270
[  163.399179][T13737]  ____sys_sendmsg+0x505/0x830
[  163.399189][T13737]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.399200][T13737]  ? import_iovec+0x74/0xa0
[  163.399210][T13737]  ___sys_sendmsg+0x21f/0x2a0
[  163.399218][T13737]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.399227][T13737]  ? futex_wait+0x285/0x360
[  163.399243][T13737]  ? __fget_files+0x2a/0x420
[  163.399250][T13737]  ? __fget_files+0x3a0/0x420
[  163.399259][T13737]  __x64_sys_sendmsg+0x19b/0x260
[  163.399268][T13737]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.399280][T13737]  ? rcu_is_watching+0x15/0xb0
[  163.399288][T13737]  do_syscall_64+0xfa/0x3b0
[  163.399296][T13737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.399305][T13737]  ? exc_page_fault+0x9f/0xf0
[  163.399315][T13737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.399322][T13737] RIP: 0033:0x7f09bed8ebe9
[  163.399332][T13737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.399339][T13737] RSP: 002b:00007f09bfbce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.399348][T13737] RAX: ffffffffffffffda RBX: 00007f09befb5fa0 RCX: 00007f09bed8ebe9
[  163.399356][T13737] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  163.399361][T13737] RBP: 00007f09bee11e19 R08: 0000000000000000 R09: 0000000000000000
[  163.399367][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.399372][T13737] R13: 00007f09befb6038 R14: 00007f09befb5fa0 R15: 00007fffab360638
[  163.399381][T13737]  </TASK>
[  163.667874][T13747] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  163.751438][T13757] 8021q: adding VLAN 0 to HW filter on device bond30
[  163.976049][T13786] validate_nla: 7 callbacks suppressed
[  163.976062][T13786] netlink: 'syz.1.2120': attribute type 10 has an invalid length.
[  164.014652][T13793] netlink: 'syz.3.2122': attribute type 1 has an invalid length.
[  164.034137][T13791] netlink: 'syz.1.2121': attribute type 22 has an invalid length.
[  164.037712][T13791] netlink: 'syz.1.2121': attribute type 22 has an invalid length.
[  164.044548][T13793] 8021q: adding VLAN 0 to HW filter on device bond16
[  164.048152][T13793] bond15: (slave bond16): making interface the new active one
[  164.050871][T13793] bond15: (slave bond16): Enslaving as an active interface with an up link
[  164.134402][T13811] vlan0: entered allmulticast mode
[  164.137637][T13811] veth1: entered allmulticast mode
[  164.263200][T13820] batadv_slave_0: entered promiscuous mode
[  164.270572][T13826] netlink: 'syz.1.2131': attribute type 1 has an invalid length.
[  164.284963][T13826] bond35: (slave ipvlan67): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  164.289691][T13826] bond35: (slave ipvlan67): The slave device specified does not support setting the MAC address
[  164.293071][T13826] bond35: (slave ipvlan67): Setting fail_over_mac to active for active-backup mode
[  164.482693][T13861] netlink: 'syz.0.2140': attribute type 10 has an invalid length.
[  164.492857][T13861] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  164.495212][T13861] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  164.528194][T13865] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  164.551255][T13865] bond31: entered promiscuous mode
[  164.553132][T13865] 8021q: adding VLAN 0 to HW filter on device bond31
[  164.563003][T13865] 8021q: adding VLAN 0 to HW filter on device bond31
[  164.565485][T13865] bond31: (slave wireguard0): The slave device specified does not support setting the MAC address
[  164.570163][T13865] bond31: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  164.575715][T13865] bond31: (slave wireguard0): making interface the new active one
[  164.579455][T13865] wireguard0: entered promiscuous mode
[  164.582314][T13865] bond31: (slave wireguard0): Enslaving as an active interface with an up link
[  164.590240][T13865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.593045][T13865] IPv6: NLM_F_CREATE should be set when creating new route
[  164.595705][T13865] IPv6: NLM_F_CREATE should be set when creating new route
[  164.599501][T13865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.608611][T13865] bond31: (slave wireguard1): The slave device specified does not support setting the MAC address
[  164.614486][T13865] bond31: (slave wireguard1): Enslaving as a backup interface with an up link
[  164.668197][ T5847] Bluetooth: hci3: command 0x0405 tx timeout
[  164.697213][T13880] netlink: 'syz.0.2143': attribute type 22 has an invalid length.
[  164.703399][T13880] netlink: 'syz.0.2143': attribute type 22 has an invalid length.
[  164.849655][T13902] gtp2: entered promiscuous mode
[  164.851675][T13902] gtp2: entered allmulticast mode
[  164.870939][T13907] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  164.875574][T13907] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  164.887321][T13911] netlink: 'syz.3.2153': attribute type 5 has an invalid length.
[  164.898555][T13911] openvswitch: : Dropping previously announced user features
[  164.930270][T13916] Bluetooth: MGMT ver 1.23
[  164.939064][T13914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.941651][T13919] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  164.949464][T13914] syzkaller0: entered promiscuous mode
[  164.951615][T13914] syzkaller0: entered allmulticast mode
[  164.982038][T13926] veth0_to_bond: entered allmulticast mode
[  165.015178][T13932] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  165.019348][T13932] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  165.052802][T13934] tipc: Resetting bearer <eth:syzkaller0>
[  165.080006][T13939] 8021q: adding VLAN 0 to HW filter on device bond32
[  165.082566][T13942] openvswitch: : Dropping previously announced user features
[  165.091566][T13939] bond32: (slave gretap4): making interface the new active one
[  165.094536][T13939] bond32: (slave gretap4): Enslaving as an active interface with an up link
[  165.250096][T13948] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  165.255340][T13948] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  165.603421][T13969] openvswitch: : Dropping previously announced user features
[  165.695204][ T5844] Bluetooth: hci3: link tx timeout
[  165.697602][ T5844] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.700251][ T5844] Bluetooth: hci3: link tx timeout
[  165.702100][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.704776][ T5844] Bluetooth: hci3: link tx timeout
[  165.709625][ T5844] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.712137][ T5844] Bluetooth: hci3: link tx timeout
[  165.713748][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.755165][T13913] tipc: Resetting bearer <eth:syzkaller0>
[  165.761196][T13913] tipc: Disabling bearer <eth:syzkaller0>
[  165.810171][T13995] ip6gre1: entered allmulticast mode
[  166.960025][T14065] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  166.962288][T14065] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  167.049622][T14074] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.052937][T14074] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  167.055535][T14074] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  167.061545][T14075] siw: device registration error -23
[  167.148096][T14079] lo: left promiscuous mode
[  167.150885][T14079] lo: left allmulticast mode
[  167.158243][T14079] tunl0: left promiscuous mode
[  167.160129][T14079] tunl0: left allmulticast mode
[  167.162361][T14079] gre0: left promiscuous mode
[  167.164220][T14079] gre0: left allmulticast mode
[  167.170868][T14079] gretap0: left promiscuous mode
[  167.173050][T14079] gretap0: left allmulticast mode
[  167.175552][T14079] erspan0: left promiscuous mode
[  167.178246][T14079] erspan0: left allmulticast mode
[  167.180781][T14079] ip_vti0: left promiscuous mode
[  167.182898][T14079] ip_vti0: left allmulticast mode
[  167.185271][T14079] ip6_vti0: left promiscuous mode
[  167.189241][T14079] ip6_vti0: left allmulticast mode
[  167.191693][T14079] sit0: left promiscuous mode
[  167.193174][T14079] sit0: left allmulticast mode
[  167.195391][T14079] ip6tnl0: left promiscuous mode
[  167.199060][T14079] ip6tnl0: left allmulticast mode
[  167.201042][T14079] ip6gre0: left promiscuous mode
[  167.202711][T14079] ip6gre0: left allmulticast mode
[  167.204642][T14079] vcan0: left promiscuous mode
[  167.207402][T14079] vcan0: left allmulticast mode
[  167.209632][T14079] !: left promiscuous mode
[  167.211391][T14079] !: left allmulticast mode
[  167.213455][T14079] nlmon0: left promiscuous mode
[  167.215377][T14079] nlmon0: left allmulticast mode
[  167.218932][T14079] caif0: left promiscuous mode
[  167.220803][T14079] caif0: left allmulticast mode
[  167.222678][T14079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.231417][T14089] : renamed from wg2
[  167.265445][T14088] delete_channel: no stack
[  167.543767][T14130] __nla_validate_parse: 29 callbacks suppressed
[  167.543779][T14130] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2219'.
[  167.697833][T14142] syzkaller1: entered promiscuous mode
[  167.700335][T14142] syzkaller1: entered allmulticast mode
[  167.707147][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  167.709911][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  167.716625][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  167.719780][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  167.722439][   T60] block nbd0: Dead connection, failed to find a fallback
[  167.725136][   T60] block nbd0: shutting down sockets
[  167.727922][   T60] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.731422][   T60] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.734606][   T60] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.740675][   T60] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.743654][   T60] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.747838][   T60] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.750917][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.754676][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.758311][T10498] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.763200][T10498] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.767197][T10498] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.770310][T10498] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.772803][T10498] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.776678][T10498] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.779399][T10498] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.782760][T10498] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.785618][T10498] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.788852][ T5844] Bluetooth: hci3: command 0x0405 tx timeout
[  167.791005][T10498] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.793463][T10498] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.797042][T10498] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.800477][T10498] ldm_validate_partition_table(): Disk read failed.
[  167.813339][T10498] Dev nbd0: unable to read RDB block 0
[  167.815789][T10498]  nbd0: unable to read partition table
[  167.822246][T14157] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2222'.
[  167.824088][T10498] ldm_validate_partition_table(): Disk read failed.
[  167.830776][T10498] Dev nbd0: unable to read RDB block 0
[  167.833329][T10498]  nbd0: unable to read partition table
[  167.848108][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'.
[  167.853622][T14157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2222'.
[  167.875103][T14157] 8021q: VLANs not supported on vxcan1
[  167.967943][T14166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2227'.
[  168.001425][T14180] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2228'.
[  168.008264][T14176] sctp: [Deprecated]: syz.1.2229 (pid 14176) Use of int in max_burst socket option.
[  168.008264][T14176] Use struct sctp_assoc_value instead
[  168.115157][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'.
[  168.166415][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'.
[  168.198610][T14204] 8021q: adding VLAN 0 to HW filter on device bond37
[  168.210170][T14204] bond37 (unregistering): Released all slaves
[  168.282589][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'.
[  168.372774][T14221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2242'.
[  168.404112][T14225] vlan4: entered allmulticast mode
[  168.413561][T14220] bridge0: failed insert local address into bridge forwarding table
[  168.538747][T14229] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.582108][T14231] sctp: [Deprecated]: syz.1.2245 (pid 14231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.582108][T14231] Use struct sctp_sack_info instead
[  169.208944][T14249] syzkaller0: entered promiscuous mode
[  169.211389][T14249] syzkaller0: entered allmulticast mode
[  169.215566][T14249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.222706][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  169.228104][T14248] tipc: Resetting bearer <eth:syzkaller0>
[  169.232305][T14248] tipc: Disabling bearer <eth:syzkaller0>
[  169.499552][T14265] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  169.708856][T14295] batadv_slave_1: entered promiscuous mode
[  169.720631][T14294] batadv_slave_1: left promiscuous mode
[  169.795197][T14305] validate_nla: 20 callbacks suppressed
[  169.795212][T14305] netlink: 'syz.0.2265': attribute type 10 has an invalid length.
[  169.866098][ T5844] Bluetooth: hci3: command 0x0405 tx timeout
[  169.941836][T14328] netlink: 'syz.3.2268': attribute type 30 has an invalid length.
[  169.956859][T14305] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  169.959440][T14305] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  170.110502][T14347] netlink: 'syz.3.2273': attribute type 13 has an invalid length.
[  170.113396][T14347] netlink: 'syz.3.2273': attribute type 17 has an invalid length.
[  170.126689][T14347] gretap0: refused to change device tx_queue_len
[  170.129021][T14347] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  170.357240][T14370] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  170.403939][    T9] syz2: Port: 1 Link DOWN
[  170.412795][ T8998] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.417955][ T8998] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.420806][ T8998] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.423555][ T8998] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.428942][ T8998] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.431664][ T8998] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.434222][ T8998] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.436600][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  170.438886][ T8998] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.480705][T14379] netlink: 'syz.1.2284': attribute type 1 has an invalid length.
[  170.519750][T14384] lo: entered allmulticast mode
[  170.524621][T14384] lo: left allmulticast mode
[  171.131891][T14418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.290495][T14432] netlink: 'syz.3.2301': attribute type 1 has an invalid length.
[  171.305208][T14432] 8021q: adding VLAN 0 to HW filter on device bond18
[  171.550602][T14460] netlink: 'syz.1.2308': attribute type 17 has an invalid length.
[  171.554395][T14460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.652702][T14465] rdma_rxe: rxe_newlink: failed to add lo
[  171.718317][T14470] lo: entered allmulticast mode
[  171.721135][T14470] tunl0: entered allmulticast mode
[  171.723637][T14470] gre0: entered allmulticast mode
[  171.729487][T14470] gretap0: entered allmulticast mode
[  171.732496][T14470] erspan0: entered allmulticast mode
[  171.736014][T14470] ip_vti0: entered allmulticast mode
[  171.738557][T14470] ip6_vti0: entered allmulticast mode
[  171.740773][T14470] sit0: entered allmulticast mode
[  171.744503][T14470] ip6tnl0: entered allmulticast mode
[  171.749871][T14470] ip6gre0: entered allmulticast mode
[  171.753091][T14470] ip6gretap0: entered allmulticast mode
[  171.856517][T14476] netlink: 'syz.1.2314': attribute type 4 has an invalid length.
[  171.878404][T14478] netlink: 'syz.0.2315': attribute type 1 has an invalid length.
[  171.882158][T14478] sctp: [Deprecated]: syz.0.2315 (pid 14478) Use of int in max_burst socket option.
[  171.882158][T14478] Use struct sctp_assoc_value instead
[  171.940663][T14484] syzkaller1: entered promiscuous mode
[  171.942827][T14484] syzkaller1: entered allmulticast mode
[  172.295036][T14490] bridge0: failed insert local address into bridge forwarding table
[  172.494787][T14505] 8021q: adding VLAN 0 to HW filter on device bond38
[  172.502555][T14505] bond38 (unregistering): Released all slaves
[  172.578774][T14507] batadv_slave_1: entered promiscuous mode
[  172.580258][T14511] __nla_validate_parse: 49 callbacks suppressed
[  172.580276][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[  172.581838][T14504] batadv_slave_1: left promiscuous mode
[  172.616575][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'.
[  172.620503][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'.
[  172.627558][T14514] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  172.638019][T14514] syzkaller0: entered promiscuous mode
[  172.640730][T14514] syzkaller0: entered allmulticast mode
[  172.649570][T14514] syzkaller0: mtu less than device minimum
[  173.213412][T14544] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  173.242572][T14548] tap0: tun_chr_ioctl cmd 1074025677
[  173.244783][T14548] tap0: linktype set to 0
[  173.295071][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'.
[  173.320213][T14557] netlink: 'syz.1.2338': attribute type 4 has an invalid length.
[  173.418253][T14564] sctp: [Deprecated]: syz.1.2339 (pid 14564) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.418253][T14564] Use struct sctp_sack_info instead
[  173.444404][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'.
[  173.444534][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'.
[  173.458013][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'.
[  173.461819][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'.
[  173.502816][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'.
[  173.692014][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'.
[  173.839791][T14593] pimreg: entered allmulticast mode
[  173.842032][T14593] pimreg: left allmulticast mode
[  174.229599][T14605] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.237135][T14605] macvlan3: entered allmulticast mode
[  174.259864][   T33] audit: type=1800 audit(1756317125.875:3): pid=14609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2353" name=CB dev="tmpfs" ino=4304 res=0 errno=0
[  174.342832][T14617] syzkaller1: entered allmulticast mode
[  174.393911][T14621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.470385][T14629] syzkaller0: entered promiscuous mode
[  174.472512][T14629] syzkaller0: entered allmulticast mode
[  174.558292][T14640] 8021q: adding VLAN 0 to HW filter on device team0
[  174.576467][T14640] 0X: left allmulticast mode
[  174.578629][T14640] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  174.836995][T14658] validate_nla: 1 callbacks suppressed
[  174.837044][T14658] netlink: 'syz.3.2371': attribute type 10 has an invalid length.
[  174.843163][T14658] netlink: 'syz.3.2371': attribute type 10 has an invalid length.
[  174.847812][T14658] batadv0: entered promiscuous mode
[  174.849887][T14658] batadv0: entered allmulticast mode
[  174.852108][T14658] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  174.887379][T14660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.890586][T14660] syzkaller0: entered promiscuous mode
[  174.892750][T14660] syzkaller0: entered allmulticast mode
[  174.899680][T14660] tipc: Resetting bearer <eth:syzkaller0>
[  174.902890][T14659] tipc: Resetting bearer <eth:syzkaller0>
[  174.911896][T14659] tipc: Disabling bearer <eth:syzkaller0>
[  175.050065][T14662] batadv0: left promiscuous mode
[  175.052094][T14662] batadv0: left allmulticast mode
[  175.058460][T14662] mac80211_hwsim hwsim40 wlan0: left promiscuous mode
[  175.061276][T14662] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  175.065236][T14662] D: left promiscuous mode
[  175.068267][T14662] D: left allmulticast mode
[  175.072236][T14662] xfrm1: left promiscuous mode
[  175.074158][T14662] xfrm1: left allmulticast mode
[  175.077249][T14662] bond11: left promiscuous mode
[  175.080668][T14662] gtp2: left promiscuous mode
[  175.082568][T14662] gtp2: left allmulticast mode
[  175.699075][T14686] netlink: 'syz.0.2379': attribute type 6 has an invalid length.
[  175.862884][T14700] siw: device registration error -23
[  175.865168][T14701] siw: device registration error -23
[  176.278492][T14751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.301583][T14751] syzkaller0: entered promiscuous mode
[  176.303506][T14751] syzkaller0: entered allmulticast mode
[  176.364168][T14751] tipc: Resetting bearer <eth:syzkaller0>
[  176.372193][T14750] tipc: Resetting bearer <eth:syzkaller0>
[  176.388285][T14750] tipc: Disabling bearer <eth:syzkaller0>
[  176.663044][T14788] netlink: 'syz.0.2398': attribute type 10 has an invalid length.
[  176.691278][T14789] lo: left allmulticast mode
[  176.693037][T14789] tunl0: left allmulticast mode
[  176.694680][T14789] gre0: left allmulticast mode
[  176.698177][T14789] gretap0: left allmulticast mode
[  176.699841][T14789] erspan0: left allmulticast mode
[  176.701536][T14789] ip_vti0: left allmulticast mode
[  176.703221][T14789] ip6_vti0: left allmulticast mode
[  176.704834][T14789] sit0: left allmulticast mode
[  176.707115][T14789] ip6tnl0: left allmulticast mode
[  176.708793][T14789] ip6gre0: left allmulticast mode
[  176.710367][T14789] ip6gretap0: left allmulticast mode
[  176.728245][T14789] ip6gre1: left allmulticast mode
[  176.735704][T14789] macvlan3: left allmulticast mode
[  176.805049][T14795] netlink: 'syz.0.2400': attribute type 7 has an invalid length.
[  176.834510][T14795] 8021q: adding VLAN 0 to HW filter on device bond34
[  176.838690][T14795] bridge21: port 1(bond34) entered blocking state
[  176.841436][T14795] bridge21: port 1(bond34) entered disabled state
[  176.844222][T14795] bond34: entered allmulticast mode
[  176.848648][T14795] bridge21: port 1(bond34) entered blocking state
[  176.850907][T14795] bridge21: port 1(bond34) entered forwarding state
[  177.010715][   T26] bridge21: port 1(bond34) entered disabled state
[  177.542947][T14827] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  177.711947][T14834] 8021q: VLANs not supported on syzkaller1
[  177.716706][T14834] veth0: entered promiscuous mode
[  177.718701][T14836] __nla_validate_parse: 12 callbacks suppressed
[  177.718709][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'.
[  177.723899][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'.
[  177.738582][T14834] veth0 (unregistering): left promiscuous mode
[  177.892175][T14840] tun0: tun_chr_ioctl cmd 1074025681
[  177.895315][T14840] tun0: tun_chr_ioctl cmd 1074025673
[  177.964266][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  178.010875][T14859] sctp: [Deprecated]: syz.1.2417 (pid 14859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.010875][T14859] Use struct sctp_sack_info instead
[  178.023056][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'.
[  178.071625][T14869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2418'.
[  178.608170][T14941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.640526][T14941] tipc: Disabling bearer <eth:syzkaller0>
[  178.742560][T14954] netlink: 'syz.1.2436': attribute type 1 has an invalid length.
[  178.778827][T14962] netlink: 'syz.0.2438': attribute type 1 has an invalid length.
[  178.785183][T14954] 8021q: adding VLAN 0 to HW filter on device bond39
[  178.788778][T14954] bond38: (slave bond39): making interface the new active one
[  178.791323][T14954] bond38: (slave bond39): Enslaving as an active interface with an up link
[  178.803380][T14962] 8021q: adding VLAN 0 to HW filter on device bond35
[  178.810243][T14965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.828964][T14965] syzkaller0: entered promiscuous mode
[  178.830651][T14965] syzkaller0: entered allmulticast mode
[  178.835093][T14962] vlan0: entered promiscuous mode
[  178.838166][T14962] bond35: entered promiscuous mode
[  178.839817][T14962] vlan0: entered allmulticast mode
[  178.841386][T14962] bond35: entered allmulticast mode
[  178.901205][T14975] netlink: 'syz.1.2440': attribute type 1 has an invalid length.
[  178.912291][T14978] netlink: 'syz.0.2441': attribute type 10 has an invalid length.
[  178.915766][T14978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2441'.
[  178.943806][T14965] tipc: Resetting bearer <eth:syzkaller0>
[  178.950505][T14964] tipc: Resetting bearer <eth:syzkaller0>
[  179.014162][T14964] tipc: Disabling bearer <eth:syzkaller0>
[  179.251566][T14993] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2445'.
[  179.315065][T15001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.323170][T15001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.330277][T15001] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  179.333435][T15001] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  179.393451][T15006] netlink: 'syz.0.2448': attribute type 83 has an invalid length.
[  179.404267][T15006] tap0: tun_chr_ioctl cmd 1074025677
[  179.407056][T15006] tap0: linktype set to 823
[  179.950469][T15018] batadv_slave_1: entered promiscuous mode
[  179.963917][T15018] batadv_slave_1: left promiscuous mode
[  180.003220][T15025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2454'.
[  180.013684][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'.
[  180.084942][T15027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2455'.
[  180.135017][T15030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.087844][T15093] validate_nla: 3 callbacks suppressed
[  181.087856][T15093] netlink: 'syz.1.2471': attribute type 39 has an invalid length.
[  181.138735][T15097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.175391][T15097] syzkaller0: entered promiscuous mode
[  181.177787][T15097] syzkaller0: entered allmulticast mode
[  181.320772][T15109] tipc: Resetting bearer <eth:syzkaller0>
[  181.332688][T15096] tipc: Resetting bearer <eth:syzkaller0>
[  181.427324][T15096] tipc: Disabling bearer <eth:syzkaller0>
[  181.434466][T15116] macvlan5: entered allmulticast mode
[  181.438943][T15116] veth1_vlan: entered allmulticast mode
[  181.441671][T15116] veth1_vlan: left allmulticast mode
[  181.455574][T15117] macvlan5: entered allmulticast mode
[  181.458837][T15117] veth1_vlan: entered allmulticast mode
[  181.461731][T15117] veth1_vlan: left allmulticast mode
[  181.710653][T15121] netlink: 'syz.1.2478': attribute type 11 has an invalid length.
[  181.799806][T15139] bond8: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  181.877442][T15141] 8021q: adding VLAN 0 to HW filter on device bond19
[  181.939301][T15145] netlink: 'syz.3.2484': attribute type 1 has an invalid length.
[  182.098629][T15154] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  182.468942][T15184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.482559][T15184] tipc: Resetting bearer <eth:gre0>
[  182.857224][T15197] __nla_validate_parse: 17 callbacks suppressed
[  182.857243][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'.
[  183.180744][T15202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2502'.
[  183.191667][T15202] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  183.196651][T15202] CPU: 0 UID: 0 PID: 15202 Comm: syz.3.2502 Not tainted syzkaller #0 PREEMPT(full) 
[  183.196667][T15202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.196673][T15202] Call Trace:
[  183.196677][T15202]  <TASK>
[  183.196682][T15202]  dump_stack_lvl+0x189/0x250
[  183.196701][T15202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.196711][T15202]  ? __pfx__printk+0x10/0x10
[  183.196724][T15202]  ? kernfs_root+0x1c/0x230
[  183.196738][T15202]  ? kernfs_path_from_node+0x2f/0x290
[  183.196747][T15202]  ? kernfs_path_from_node+0x250/0x290
[  183.196757][T15202]  ? kernfs_path_from_node+0x2f/0x290
[  183.196766][T15202]  sysfs_warn_dup+0x8e/0xa0
[  183.196775][T15202]  sysfs_do_create_link_sd+0xc0/0x110
[  183.196783][T15202]  device_add_class_symlinks+0x1cf/0x240
[  183.196795][T15202]  device_add+0x475/0xb50
[  183.196803][T15202]  wiphy_register+0x1ba6/0x28d0
[  183.196822][T15202]  ? __pfx_wiphy_register+0x10/0x10
[  183.196832][T15202]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  183.196843][T15202]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  183.196855][T15202]  ieee80211_register_hw+0x3425/0x4080
[  183.196876][T15202]  ? ieee80211_register_hw+0x1481/0x4080
[  183.196888][T15202]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  183.196900][T15202]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.196916][T15202]  ? __hrtimer_setup+0x187/0x210
[  183.196924][T15202]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  183.196936][T15202]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  183.196953][T15202]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  183.196964][T15202]  ? trace_kmalloc+0x1f/0xd0
[  183.196975][T15202]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  183.196987][T15202]  ? kstrndup+0xbf/0x160
[  183.196997][T15202]  hwsim_new_radio_nl+0xea4/0x1b10
[  183.197007][T15202]  ? __pfx___nla_validate_parse+0x10/0x10
[  183.197023][T15202]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  183.197034][T15202]  ? __nla_parse+0x40/0x60
[  183.197046][T15202]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  183.197059][T15202]  genl_family_rcv_msg_doit+0x215/0x300
[  183.197069][T15202]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  183.197081][T15202]  ? bpf_lsm_capable+0x9/0x20
[  183.197092][T15202]  ? security_capable+0x7e/0x2e0
[  183.197105][T15202]  genl_rcv_msg+0x60e/0x790
[  183.197115][T15202]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.197125][T15202]  ? __kasan_slab_alloc+0x6c/0x80
[  183.197136][T15202]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  183.197146][T15202]  ? __netlink_lookup+0xbd/0x810
[  183.197152][T15202]  ? rcu_is_watching+0x15/0xb0
[  183.197163][T15202]  netlink_rcv_skb+0x208/0x470
[  183.197175][T15202]  ? __pfx_genl_rcv_msg+0x10/0x10
[  183.197186][T15202]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.197200][T15202]  ? lock_release+0x4b/0x3e0
[  183.197213][T15202]  ? down_read+0x1ad/0x2e0
[  183.197221][T15202]  genl_rcv+0x28/0x40
[  183.197228][T15202]  netlink_unicast+0x82f/0x9e0
[  183.197240][T15202]  ? __pfx_netlink_unicast+0x10/0x10
[  183.197250][T15202]  ? netlink_sendmsg+0x642/0xb30
[  183.197256][T15202]  ? skb_put+0x11b/0x210
[  183.197264][T15202]  netlink_sendmsg+0x805/0xb30
[  183.197273][T15202]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.197280][T15202]  ? aa_sock_msg_perm+0xf1/0x1d0
[  183.197289][T15202]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.197297][T15202]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.197304][T15202]  __sock_sendmsg+0x21c/0x270
[  183.197315][T15202]  ____sys_sendmsg+0x505/0x830
[  183.197324][T15202]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.197334][T15202]  ? import_iovec+0x74/0xa0
[  183.197343][T15202]  ___sys_sendmsg+0x21f/0x2a0
[  183.197352][T15202]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.197361][T15202]  ? futex_wake+0x4b2/0x560
[  183.197407][T15202]  ? __fget_files+0x2a/0x420
[  183.197414][T15202]  ? __fget_files+0x3a0/0x420
[  183.197424][T15202]  __x64_sys_sendmsg+0x19b/0x260
[  183.197433][T15202]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.197445][T15202]  ? rcu_is_watching+0x15/0xb0
[  183.197457][T15202]  ? rcu_is_watching+0x15/0xb0
[  183.197465][T15202]  do_syscall_64+0xfa/0x3b0
[  183.197472][T15202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.197481][T15202]  ? exc_page_fault+0x9f/0xf0
[  183.197493][T15202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.197500][T15202] RIP: 0033:0x7f2fe878ebe9
[  183.197509][T15202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.197517][T15202] RSP: 002b:00007f2fe69ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.197528][T15202] RAX: ffffffffffffffda RBX: 00007f2fe89b5fa0 RCX: 00007f2fe878ebe9
[  183.197534][T15202] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  183.197540][T15202] RBP: 00007f2fe8811e19 R08: 0000000000000000 R09: 0000000000000000
[  183.197546][T15202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.197551][T15202] R13: 00007f2fe89b6038 R14: 00007f2fe89b5fa0 R15: 00007ffe0e555b98
[  183.197561][T15202]  </TASK>
[  183.198170][T15203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'.
[  183.458572][T15212] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  183.461925][T15214] netlink: 'syz.3.2505': attribute type 1 has an invalid length.
[  183.462149][T15212] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  183.479634][T15214] 8021q: adding VLAN 0 to HW filter on device bond21
[  183.518393][T15217] netlink: 'syz.1.2506': attribute type 12 has an invalid length.
[  183.521050][T15217] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2506'.
[  183.606712][T15225] bond8: option mode: unable to set because the bond device has slaves
[  183.615069][T15225] batman_adv: batadv0: Removing interface: ip6gretap2
[  183.627011][T15227] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  183.635135][T15225] team0: Port device bond9 removed
[  183.639673][T15225] bond12: (slave geneve2): Releasing active interface
[  183.645216][T15225] bond0: (slave bond13): Releasing active interface
[  183.652476][T15225] bond15: (slave bond16): Releasing backup interface
[  183.657880][T15225] bond8: (slave ip6gretap0): Releasing backup interface
[  183.682196][T15227] 8021q: adding VLAN 0 to HW filter on device bond37
[  183.732534][T15229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.735592][T15229] syzkaller0: entered promiscuous mode
[  183.738373][T15229] syzkaller0: entered allmulticast mode
[  183.745542][T15229] tipc: Resetting bearer <eth:syzkaller0>
[  183.751525][T15228] tipc: Resetting bearer <eth:syzkaller0>
[  183.765168][T15228] tipc: Disabling bearer <eth:syzkaller0>
[  183.834611][T15244] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2514'.
[  183.842430][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'.
[  183.846939][T15244] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2514'.
[  183.888883][T15252] netlink: 'syz.1.2516': attribute type 1 has an invalid length.
[  183.918297][T15252] bond41: entered promiscuous mode
[  183.921074][T15252] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.959690][T15252] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.968420][T15252] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  183.973050][T15252] bond41: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  183.982227][T15252] bond41: (slave vxcan1): making interface the new active one
[  183.984975][T15252] vxcan1: entered promiscuous mode
[  183.991679][T15252] bond41: (slave vxcan1): Enslaving as an active interface with an up link
[  183.995444][T15262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2517'.
[  184.216917][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2519'.
[  184.420480][T15298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.423777][T15298] syzkaller0: entered promiscuous mode
[  184.425782][T15298] syzkaller0: entered allmulticast mode
[  184.433538][T15298] tipc: Resetting bearer <eth:syzkaller0>
[  184.467733][T15303] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  184.723333][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'.
[  184.729766][T15324] tipc: Resetting bearer <eth:syzkaller0>
[  184.733670][T15324] syzkaller0: left promiscuous mode
[  184.735674][T15324] syzkaller0: left allmulticast mode
[  184.813357][T15335] dvmrp1: tun_chr_ioctl cmd 1074025677
[  184.815723][T15335] dvmrp1: linktype set to 773
[  184.965399][T15354] ip6gretap0: entered promiscuous mode
[  184.967822][T15354] ip6gretap0: entered allmulticast mode
[  185.011431][T15349] netlink: 'syz.0.2532': attribute type 1 has an invalid length.
[  185.044804][T15349] 8021q: adding VLAN 0 to HW filter on device bond38
[  185.148603][T15365] sctp: [Deprecated]: syz.0.2537 (pid 15365) Use of int in max_burst socket option.
[  185.148603][T15365] Use struct sctp_assoc_value instead
[  185.269718][T15369] macsec0: entered promiscuous mode
[  185.271951][T15369] !: entered promiscuous mode
[  185.274056][T15369] macsec0: entered allmulticast mode
[  185.297586][T15369] !: entered allmulticast mode
[  185.301436][T15369] !: left allmulticast mode
[  185.303351][T15369] !: left promiscuous mode
[  185.742105][T15382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.745365][T15382] syzkaller0: entered promiscuous mode
[  185.748293][T15382] syzkaller0: entered allmulticast mode
[  185.807636][T15381] tipc: Resetting bearer <eth:syzkaller0>
[  185.816286][T15381] tipc: Disabling bearer <eth:syzkaller0>
[  186.276692][T15394] bond42: entered promiscuous mode
[  186.278560][T15394] 8021q: adding VLAN 0 to HW filter on device bond42
[  186.342387][T15324] Set syz1 is full, maxelem 65536 reached
[  186.363019][T15399] netlink: 'syz.3.2547': attribute type 7 has an invalid length.
[  186.375167][T15399] netlink: 'syz.3.2547': attribute type 10 has an invalid length.
[  186.455779][T15406] lo: entered promiscuous mode
[  186.457597][T15406] lo: entered allmulticast mode
[  186.459210][T15406] tunl0: entered promiscuous mode
[  186.460945][T15406] tunl0: entered allmulticast mode
[  186.463036][T15406] gre0: entered promiscuous mode
[  186.465069][T15406] gre0: entered allmulticast mode
[  186.468084][T15406] gretap0: entered allmulticast mode
[  186.470150][T15406] erspan0: entered promiscuous mode
[  186.471769][T15406] erspan0: entered allmulticast mode
[  186.473441][T15406] ip_vti0: entered promiscuous mode
[  186.475026][T15406] ip_vti0: entered allmulticast mode
[  186.478468][T15406] ip6_vti0: entered promiscuous mode
[  186.480378][T15406] ip6_vti0: entered allmulticast mode
[  186.482264][T15406] sit0: entered promiscuous mode
[  186.483815][T15406] sit0: entered allmulticast mode
[  186.485355][T15406] ip6tnl0: entered promiscuous mode
[  186.487318][T15406] ip6tnl0: entered allmulticast mode
[  186.489197][T15406] ip6gre0: entered promiscuous mode
[  186.490847][T15406] ip6gre0: entered allmulticast mode
[  186.493584][T15406] vcan0: entered promiscuous mode
[  186.495362][T15406] vcan0: entered allmulticast mode
[  186.498823][T15406] nlmon0: entered promiscuous mode
[  186.500713][T15406] nlmon0: entered allmulticast mode
[  186.502562][T15406] 0X: entered promiscuous mode
[  186.504461][T15406] 0X: entered allmulticast mode
[  186.517020][T15406] wg1: entered promiscuous mode
[  186.518757][T15406] wg1: entered allmulticast mode
[  186.520749][T15406] : entered promiscuous mode
[  186.522536][T15406] : entered allmulticast mode
[  186.524366][T15406] veth0_to_bridge: entered promiscuous mode
[  186.534008][T15406] veth0_to_bridge: entered allmulticast mode
[  186.536884][T15406] bridge_slave_0: entered promiscuous mode
[  186.539104][T15406] veth1_to_bridge: entered promiscuous mode
[  186.541574][T15406] veth1_to_bridge: entered allmulticast mode
[  186.544312][T15406] bridge_slave_1: entered promiscuous mode
[  186.548652][T15406] bridge_slave_1: entered allmulticast mode
[  186.550854][T15406] veth0_to_bond: entered promiscuous mode
[  186.552736][T15406] veth0_to_bond: entered allmulticast mode
[  186.554928][T15406] bond_slave_0: entered promiscuous mode
[  186.559169][T15406] bond_slave_0: entered allmulticast mode
[  186.561679][T15406] veth1_to_bond: entered promiscuous mode
[  186.564139][T15406] veth1_to_bond: entered allmulticast mode
[  186.569405][T15406] bond_slave_1: entered promiscuous mode
[  186.571265][T15406] bond_slave_1: entered allmulticast mode
[  186.573575][T15406] veth0_to_team: entered promiscuous mode
[  186.575708][T15406] veth0_to_team: entered allmulticast mode
[  186.582012][T15406] team_slave_0: entered promiscuous mode
[  186.584334][T15406] team_slave_0: entered allmulticast mode
[  186.588719][T15406] veth1_to_team: entered promiscuous mode
[  186.591016][T15406] veth1_to_team: entered allmulticast mode
[  186.593531][T15406] team_slave_1: entered promiscuous mode
[  186.595749][T15406] team_slave_1: entered allmulticast mode
[  186.599001][T15406] veth0_to_batadv: entered promiscuous mode
[  186.601447][T15406] veth0_to_batadv: entered allmulticast mode
[  186.603995][T15406] batadv_slave_0: entered promiscuous mode
[  186.608144][T15406] batadv_slave_0: entered allmulticast mode
[  186.610694][T15406] xfrm0: entered promiscuous mode
[  186.612703][T15406] xfrm0: entered allmulticast mode
[  186.614929][T15406] veth0_to_hsr: entered promiscuous mode
[  186.618151][T15406] veth0_to_hsr: entered allmulticast mode
[  186.620452][T15406] hsr_slave_0: entered promiscuous mode
[  186.622732][T15406] hsr_slave_0: entered allmulticast mode
[  186.625030][T15406] veth1_virt_wifi: entered promiscuous mode
[  186.627925][T15406] veth1_virt_wifi: entered allmulticast mode
[  186.630439][T15406] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  186.743324][T15415] syzkaller1: entered promiscuous mode
[  186.745641][T15415] syzkaller1: entered allmulticast mode
[  186.994039][T15422] netlink: 'syz.0.2553': attribute type 10 has an invalid length.
[  187.110842][T15435] netlink: 'syz.0.2557': attribute type 10 has an invalid length.
[  187.114375][T15435] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  187.114875][T15436] netlink: 'syz.0.2557': attribute type 10 has an invalid length.
[  187.124269][T15436] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  187.213123][T15443] netlink: 'syz.0.2559': attribute type 58 has an invalid length.
[  187.427941][T15448] netlink: 'syz.3.2561': attribute type 1 has an invalid length.
[  187.452675][T15448] bond22: (slave bridge15): making interface the new active one
[  187.456295][T15448] bond22: (slave bridge15): Enslaving as an active interface with an up link
[  187.569666][T15459] netlink: 'syz.3.2565': attribute type 13 has an invalid length.
[  187.573007][T15459] netlink: 'syz.3.2565': attribute type 17 has an invalid length.
[  187.609148][T15461] syzkaller0: entered promiscuous mode
[  187.611450][T15461] syzkaller0: entered allmulticast mode
[  187.727323][T15466] macvlan5: entered allmulticast mode
[  187.729520][T15466] veth1_vlan: entered allmulticast mode
[  187.731923][T15466] bridge14: port 1(macvlan5) entered blocking state
[  187.734286][T15466] bridge14: port 1(macvlan5) entered disabled state
[  187.738286][T15466] macvlan5: entered promiscuous mode
[  187.792759][T15470] 8021q: adding VLAN 0 to HW filter on device bond23
[  187.831244][T15473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.899232][T15479] __nla_validate_parse: 29 callbacks suppressed
[  187.899252][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2573'.
[  187.967691][T15438] Bluetooth: hci0: Opcode 0x080f failed: -4
[  187.970461][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'.
[  187.997340][T15482] dvmrp1: tun_chr_ioctl cmd 1074025678
[  187.999628][T15482] dvmrp1: group set to 0
[  188.001961][T15482] dvmrp1: tun_chr_ioctl cmd 1074025677
[  188.004116][T15482] dvmrp1: linktype set to 769
[  188.032042][T15484] veth0_to_bond: left allmulticast mode
[  188.034884][T15484] batadv_slave_0: left promiscuous mode
[  188.048840][T15484] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  188.051703][T15484] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  188.055139][T15484] vti0: left promiscuous mode
[  188.058599][T15484] veth13: left promiscuous mode
[  188.061225][T15484] bond31: left promiscuous mode
[  188.063281][T15484] wireguard0: left promiscuous mode
[  188.068387][T15484] vlan0: left promiscuous mode
[  188.070446][T15484] bond35: left promiscuous mode
[  188.072718][T15484] vlan0: left allmulticast mode
[  188.074716][T15484] bond35: left allmulticast mode
[  188.132513][T15489] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2576'.
[  188.243422][T15507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.248374][T15508] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.252418][T15507] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  188.255500][T15507] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  188.294335][T15511] netlink: 'syz.0.2583': attribute type 1 has an invalid length.
[  188.310394][T15511] 8021q: adding VLAN 0 to HW filter on device bond39
[  188.417520][T15518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2585'.
[  188.463162][T15520] bond0: Device is already in use.
[  188.542254][T15528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'.
[  188.549344][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'.
[  188.553025][T15528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2588'.
[  188.599688][T15530] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  188.604380][T15530] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  188.664738][T15533] openvswitch: netlink: Duplicate or invalid key (type 0).
[  188.669626][T15533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.682040][T15533] : entered promiscuous mode
[  188.920103][T15548] bond41: entered promiscuous mode
[  188.943762][T15552] sctp: [Deprecated]: syz.3.2596 (pid 15552) Use of int in max_burst socket option.
[  188.943762][T15552] Use struct sctp_assoc_value instead
[  189.040887][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'.
[  189.063329][T15554] 8021q: adding VLAN 0 to HW filter on device bond24
[  189.073305][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'.
[  189.228768][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2604'.
[  189.238220][T15581] geneve3: entered promiscuous mode
[  189.240276][T15581] geneve3: entered allmulticast mode
[  189.242692][ T5904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 36480 - 0
[  189.245385][ T5904] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 38247 - 0
[  189.251518][ T5904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 36480 - 0
[  189.261370][ T5904] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 38247 - 0
[  189.264622][ T5904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 36480 - 0
[  189.271037][ T5904] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 38247 - 0
[  189.282633][ T5904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 36480 - 0
[  189.285756][ T5904] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 38247 - 0
[  189.382655][T15598] veth1_vlan (unregistering): left allmulticast mode
[  189.393057][T15598] macvlan5 (unregistering): left promiscuous mode
[  189.400295][T15598] bridge14: port 1(macvlan5) entered disabled state
[  190.210568][T15681] bond25: entered promiscuous mode
[  190.212393][T15681] 8021q: adding VLAN 0 to HW filter on device bond25
[  190.219755][T15680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.246943][T15680] syzkaller0: entered promiscuous mode
[  190.248956][T15680] syzkaller0: entered allmulticast mode
[  190.257615][T15686] tipc: Resetting bearer <eth:gre0>
[  190.259893][T15686] tipc: Resetting bearer <eth:gre0>
[  190.268225][T15686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.343234][T15692] tipc: Resetting bearer <eth:syzkaller0>
[  190.359438][T15679] tipc: Resetting bearer <eth:syzkaller0>
[  190.363239][T15679] tipc: Disabling bearer <eth:syzkaller0>
[  190.370210][T15694] bond42: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  190.374334][T15694] bond42: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  190.378231][T15694] bond42: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  190.510508][T15708] 8021q: adding VLAN 0 to HW filter on device bond44
[  190.519298][T15709] 8021q: adding VLAN 0 to HW filter on device bond44
[  190.521846][T15709] bond44: (slave vcan0): The slave device specified does not support setting the MAC address
[  190.527525][T15709] bond44: (slave vcan0): Error -95 calling set_mac_address
[  191.266040][T15749] macsec0: entered promiscuous mode
[  191.268105][T15749] macsec0: entered allmulticast mode
[  191.270869][T15749] veth1_macvtap: entered allmulticast mode
[  191.273540][T15749] macsec0: left promiscuous mode
[  191.275720][T15749] macsec0: left allmulticast mode
[  191.278561][T15749] veth1_macvtap: left allmulticast mode
[  191.291822][T15749] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  191.297844][T15749] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.490034][T15754] tipc: Resetting bearer <eth:gre0>
[  191.495478][T15754] bond31: (slave wireguard0): Releasing backup interface
[  191.500282][T15754] bond31: (slave wireguard1): making interface the new active one
[  191.508055][T15754] bond31: (slave wireguard1): Releasing backup interface
[  191.513406][T15754] bond32: (slave gretap4): Releasing active interface
[  191.519185][T15754] bond34: left allmulticast mode
[  191.521570][T15754] bridge21: port 1(bond34) entered disabled state
[  191.605017][T15763] syzkaller1: entered promiscuous mode
[  191.610150][T15763] syzkaller1: entered allmulticast mode
[  191.886315][T15784] tipc: Resetting bearer <eth:gre0>
[  192.166253][T15807] validate_nla: 14 callbacks suppressed
[  192.166274][T15807] netlink: 'syz.1.2665': attribute type 16 has an invalid length.
[  192.171641][T15807] netlink: 'syz.1.2665': attribute type 17 has an invalid length.
[  192.370410][T15822] syzkaller1: entered promiscuous mode
[  192.372647][T15822] syzkaller1: entered allmulticast mode
[  192.471057][T15830] netlink: 'syz.3.2672': attribute type 10 has an invalid length.
[  192.546988][T15836] pimreg: entered allmulticast mode
[  192.642844][T15842] tap0: tun_chr_ioctl cmd 1074025680
[  192.649259][T15842] netlink: 'syz.3.2676': attribute type 30 has an invalid length.
[  192.693211][T15851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.712626][T15854] tipc: Disabling bearer <eth:syzkaller0>
[  192.720714][T15856] _Z`Ԁ@S: entered promiscuous mode
[  192.751778][T15858] netlink: 'syz.0.2682': attribute type 7 has an invalid length.
[  192.754890][T15858] netlink: 'syz.0.2682': attribute type 8 has an invalid length.
[  192.762740][T15858] gretap0: entered promiscuous mode
[  192.765311][T15858] batadv_slave_0: entered promiscuous mode
[  192.770610][T15858] batadv_slave_0: left promiscuous mode
[  192.773399][T15858] gretap0: left promiscuous mode
[  192.909334][T15868] __nla_validate_parse: 40 callbacks suppressed
[  192.909349][T15868] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2685'.
[  192.929372][T15868] 8021q: adding VLAN 0 to HW filter on device bond43
[  192.935021][T15867] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  192.997336][T15881] netlink: zone id is out of range
[  192.999716][T15881] netlink: zone id is out of range
[  193.001819][T15881] netlink: zone id is out of range
[  193.003931][T15881] netlink: zone id is out of range
[  193.007947][T15881] netlink: zone id is out of range
[  193.010099][T15881] netlink: zone id is out of range
[  193.012126][T15881] netlink: zone id is out of range
[  193.078021][T15881] C: renamed from team_slave_0
[  193.108101][T15885] netlink: 'syz.0.2688': attribute type 10 has an invalid length.
[  193.456204][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'.
[  193.615112][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'.
[  193.620880][T15894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2691'.
[  193.626484][T15893] delete_channel: no stack
[  193.721886][T15903] netlink: 'syz.3.2694': attribute type 10 has an invalid length.
[  193.966319][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'.
[  193.972868][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2697'.
[  193.984159][T15907] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  193.989746][T15915] netlink: 'syz.3.2696': attribute type 4 has an invalid length.
[  194.006115][T15907] tipc: Resetting bearer <eth:syzkaller0>
[  194.008581][T15919] siw: device registration error -23
[  194.024529][T10325] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 36480 - 0
[  194.028405][T10325] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 38247 - 0
[  194.031112][T10325] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 36480 - 0
[  194.033924][T10325] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 38247 - 0
[  194.040538][T10325] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 36480 - 0
[  194.043293][T10325] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 38247 - 0
[  194.067746][T15917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.070254][T10325] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 36480 - 0
[  194.084938][T10325] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 38247 - 0
[  194.115062][T15917] syzkaller0: entered promiscuous mode
[  194.118155][T15917] syzkaller0: entered allmulticast mode
[  194.120459][T15917] tipc: Resetting bearer <eth:syzkaller0>
[  194.139934][T15917] netlink: 'syz.1.2698': attribute type 1 has an invalid length.
[  194.142331][T15931] syzkaller1: entered promiscuous mode
[  194.142345][T15931] syzkaller1: entered allmulticast mode
[  194.153661][T15917] 8021q: adding VLAN 0 to HW filter on device bond45
[  194.160796][T15917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2698'.
[  194.170989][T15916] tipc: Resetting bearer <eth:syzkaller0>
[  194.208175][T15916] tipc: Disabling bearer <eth:syzkaller0>
[  194.253698][T15936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.257037][T15936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.271066][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'.
[  194.302008][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'.
[  194.364220][T15951] net_ratelimit: 2 callbacks suppressed
[  194.364231][T15951] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  194.382456][T15949] pim6reg1: entered promiscuous mode
[  194.384249][T15949] pim6reg1: entered allmulticast mode
[  194.486383][T15955] geneve0: entered promiscuous mode
[  194.488912][T15955] geneve0: entered allmulticast mode
[  195.060947][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  195.145506][T15974] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  195.315984][T15982] siw: device registration error -23
[  195.318900][T15983] siw: device registration error -23
[  195.749705][T16018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.093175][T16054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.168289][T16057] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  196.282659][T16068] batman_adv: batadv0: Adding interface: ip6gretap0
[  196.284878][T16068] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.295411][T16068] batman_adv: batadv0: Interface activated: ip6gretap0
[  196.303979][T16070] tap0: tun_chr_ioctl cmd 1074025677
[  196.314525][T16070] tap0: linktype set to 0
[  196.733115][T16082] veth0_to_bond: left promiscuous mode
[  196.735198][T16082] veth0_to_bond: left allmulticast mode
[  196.957594][T16106] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  197.004460][T16091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  197.084439][T16113] tipc: Started in network mode
[  197.086972][T16113] tipc: Node identity 8601c9f3c27f, cluster identity 4711
[  197.089333][T16113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.114249][T16113] syzkaller0: entered promiscuous mode
[  197.122253][T16113] syzkaller0: entered allmulticast mode
[  197.124529][T16113] tipc: Resetting bearer <eth:syzkaller0>
[  197.168419][T16112] tipc: Resetting bearer <eth:syzkaller0>
[  197.187289][T16112] tipc: Disabling bearer <eth:syzkaller0>
[  197.206361][T16123] validate_nla: 7 callbacks suppressed
[  197.206378][T16123] netlink: 'syz.1.2756': attribute type 1 has an invalid length.
[  197.223559][T16123] 8021q: adding VLAN 0 to HW filter on device bond46
[  197.250163][T16127] netlink: 'syz.0.2757': attribute type 6 has an invalid length.
[  197.257630][T16123] veth1: entered promiscuous mode
[  197.264993][T16127] netlink: 'syz.0.2757': attribute type 12 has an invalid length.
[  197.400316][T10325] tipc: Left network mode
[  197.413476][T16143] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  197.454617][T16151] netlink: 'syz.3.2764': attribute type 1 has an invalid length.
[  197.457688][T16152] netlink: 'syz.3.2764': attribute type 1 has an invalid length.
[  197.463816][T16152] 8021q: adding VLAN 0 to HW filter on device bond26
[  197.714089][T16169] netlink: 'syz.1.2768': attribute type 10 has an invalid length.
[  198.242399][T16183] __nla_validate_parse: 19 callbacks suppressed
[  198.242415][T16183] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2771'.
[  198.252070][T16183] batadv3: entered promiscuous mode
[  198.253858][T16183] batadv3: entered allmulticast mode
[  198.431465][T16190] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  198.434061][T16190] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  198.499542][T16190] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  198.978859][T16229] syzkaller1: entered promiscuous mode
[  198.981267][T16229] syzkaller1: entered allmulticast mode
[  198.994682][T16229] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2783'.
[  199.002063][T16229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2783'.
[  199.005672][T16229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2783'.
[  199.057501][T16232] IPv6: sit4: Disabled Multicast RS
[  199.316635][T16248] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  199.319637][T16248] batman_adv: batadv0: Removing interface: ip6gretap0
[  199.403270][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[  199.429112][T16264] openvswitch: : Dropping previously announced user features
[  199.457984][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'.
[  199.457988][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'.
[  199.469934][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'.
[  199.485195][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2793'.
[  199.489773][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2793'.
[  199.522644][T16277] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  199.529172][T16277] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  199.536176][T16277] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  199.685643][T16295] geneve0: entered promiscuous mode
[  199.765092][T16300] batadv3: entered promiscuous mode
[  199.768418][T16300] batadv3: entered allmulticast mode
[  199.985686][T16324] vlan0: entered promiscuous mode
[  199.988424][T16324] bridge0: entered promiscuous mode
[  200.089210][T16328] batadv1: entered promiscuous mode
[  200.091214][T16328] batadv1: entered allmulticast mode
[  200.109388][T16330] 8021q: adding VLAN 0 to HW filter on device bond47
[  200.116949][T16330] ipvlan68: entered allmulticast mode
[  200.119028][T16330] bond47: entered allmulticast mode
[  200.123853][T16330] ipvlan69: entered allmulticast mode
[  200.135183][T16330] ipvlan70: entered allmulticast mode
[  200.139602][T16330] ipvlan71: entered allmulticast mode
[  200.150113][T16330] ipvlan72: entered allmulticast mode
[  200.160106][T16330] ipvlan73: entered allmulticast mode
[  200.166010][T16330] ipvlan74: entered allmulticast mode
[  200.173031][T16330] ipvlan75: entered allmulticast mode
[  200.180898][T16330] ipvlan76: entered allmulticast mode
[  200.187662][T16330] ipvlan77: entered allmulticast mode
[  200.198909][T16330] ipvlan78: entered allmulticast mode
[  200.207263][T16330] ipvlan79: entered allmulticast mode
[  200.218192][T16330] ipvlan80: entered allmulticast mode
[  200.228109][T16330] ipvlan81: entered allmulticast mode
[  200.236350][T16330] ipvlan82: entered allmulticast mode
[  200.255586][T16330] ipvlan83: entered allmulticast mode
[  200.263177][T16330] ipvlan84: entered allmulticast mode
[  200.268031][T16330] ipvlan85: entered allmulticast mode
[  200.272379][T16330] ipvlan86: entered allmulticast mode
[  200.279025][T16330] ipvlan87: entered allmulticast mode
[  200.284914][T16330] ipvlan88: entered allmulticast mode
[  200.296114][T16330] ipvlan89: entered allmulticast mode
[  200.302931][T16330] ipvlan90: entered allmulticast mode
[  200.311376][T16330] ipvlan91: entered allmulticast mode
[  200.327476][T16330] ipvlan92: entered allmulticast mode
[  200.333473][T16330] ipvlan93: entered allmulticast mode
[  200.347277][T16330] ipvlan94: entered allmulticast mode
[  200.359199][T16330] ipvlan95: entered allmulticast mode
[  200.369461][T16330] ipvlan96: entered allmulticast mode
[  200.400498][T16330] ipvlan97: entered allmulticast mode
[  200.413829][T16330] ipvlan98: entered allmulticast mode
[  200.431345][T16330] ipvlan99: entered allmulticast mode
[  200.435359][T16330] ipvlan100: entered allmulticast mode
[  200.440149][T16330] ipvlan101: entered allmulticast mode
[  200.444034][T16330] ipvlan102: entered allmulticast mode
[  200.456771][T16330] ipvlan103: entered allmulticast mode
[  200.464497][T16330] ipvlan104: entered allmulticast mode
[  200.474656][T16330] ipvlan105: entered allmulticast mode
[  200.481132][T16330] ipvlan106: entered allmulticast mode
[  200.495485][T16330] ipvlan107: entered allmulticast mode
[  200.503041][T16330] ipvlan108: entered allmulticast mode
[  200.509955][T16330] ipvlan109: entered allmulticast mode
[  200.520129][T16330] ipvlan110: entered allmulticast mode
[  200.540442][T16330] ipvlan111: entered allmulticast mode
[  200.578788][T16330] ipvlan112: entered allmulticast mode
[  200.583750][T16330] ipvlan113: entered allmulticast mode
[  200.586759][T16356] openvswitch: : Dropping previously announced user features
[  200.592133][T16330] ipvlan114: entered allmulticast mode
[  200.605630][T16330] ipvlan115: entered allmulticast mode
[  200.616304][T16330] ipvlan116: entered allmulticast mode
[  200.621039][T16330] ipvlan117: entered allmulticast mode
[  200.625997][T16330] ipvlan118: entered allmulticast mode
[  200.630589][T16330] ipvlan119: entered allmulticast mode
[  200.638362][T16358] macsec0: entered promiscuous mode
[  200.640306][T16358] !: entered promiscuous mode
[  200.642201][T16358] macsec0: entered allmulticast mode
[  200.644246][T16358] !: entered allmulticast mode
[  200.647641][T16358] !: left allmulticast mode
[  200.649314][T16358] !: left promiscuous mode
[  200.661164][T16330] ipvlan120: entered allmulticast mode
[  200.667268][T16330] ipvlan121: entered allmulticast mode
[  200.676669][T16330] ipvlan122: entered allmulticast mode
[  200.681992][T16330] ipvlan123: entered allmulticast mode
[  200.689492][T16330] ipvlan124: entered allmulticast mode
[  200.694555][T16354] macsec3: entered promiscuous mode
[  200.697808][T16354] batman_adv: batadv0: Adding interface: macsec3
[  200.700236][T16354] batman_adv: batadv0: The MTU of interface macsec3 is too small (267) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.709457][T16354] batman_adv: batadv0: Interface activated: macsec3
[  200.717775][T16330] ipvlan125: entered allmulticast mode
[  200.728029][T16330] ipvlan126: entered allmulticast mode
[  200.738122][T16330] ipvlan127: entered allmulticast mode
[  200.748583][T16330] ipvlan128: entered allmulticast mode
[  200.753550][T16330] ipvlan129: entered allmulticast mode
[  200.771886][T16330] ipvlan130: entered allmulticast mode
[  200.780879][T16362] geneve0: entered promiscuous mode
[  200.788222][T16330] ipvlan131: entered allmulticast mode
[  200.792993][T16330] ipvlan132: entered allmulticast mode
[  200.833112][T16362] geneve0: entered promiscuous mode
[  200.946318][T16382] openvswitch: : Dropping previously announced user features
[  201.274536][T16410] delete_channel: no stack
[  201.286632][T16412] openvswitch: : Dropping previously announced user features
[  201.400011][T16420] syzkaller1: entered allmulticast mode
[  201.956509][T16446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.958851][T16446] IPv6: NLM_F_CREATE should be set when creating new route
[  201.961147][T16446] IPv6: NLM_F_CREATE should be set when creating new route
[  201.963422][T16446] IPv6: NLM_F_CREATE should be set when creating new route
[  201.968252][T16446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  201.978820][T16448] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.982541][T16448] tunl0: mtu less than device minimum
[  202.045441][T16453] 8021q: adding VLAN 0 to HW filter on device bond49
[  202.054477][T16453] bond49: (slave batadv3): Opening slave failed
[  202.060601][T16456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.064604][T16456] veth1_virt_wifi: entered promiscuous mode
[  202.067921][T16456] veth1_virt_wifi: entered allmulticast mode
[  202.168511][T16463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.170857][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.193263][T16464] syzkaller0: entered promiscuous mode
[  202.195218][T16464] syzkaller0: entered allmulticast mode
[  202.197862][T16464] tipc: Resetting bearer <eth:syzkaller0>
[  202.200101][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.204239][ T1091] tipc: Resetting bearer <eth:syzkaller0>
[  202.207307][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.210832][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.213783][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.217473][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.221258][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.224806][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.229766][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.239428][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.243068][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.246779][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.250837][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.254489][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.259894][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.263588][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.269911][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.273800][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.278176][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.281732][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.285247][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.290394][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.294014][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.298062][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.301583][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.305126][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.309114][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.312660][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.317058][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.322879][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.326531][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.330173][T16463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.335496][T16462] tipc: Resetting bearer <eth:syzkaller0>
[  202.381126][T16462] tipc: Disabling bearer <eth:syzkaller0>
[  202.403791][T16481] tun1: tun_chr_ioctl cmd 1074025672
[  202.407297][T16481] tun1: ignored: set checksum disabled
[  202.477896][T16486] validate_nla: 13 callbacks suppressed
[  202.477937][T16486] netlink: 'syz.1.2853': attribute type 1 has an invalid length.
[  202.489700][T16486] 8021q: adding VLAN 0 to HW filter on device bond50
[  202.500357][T16486] bond50: (slave veth23): Enslaving as an active interface with a down link
[  202.508483][T16486] 8021q: adding VLAN 0 to HW filter on device batadv3
[  202.510998][T16486] bond50: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  203.034558][T16503] netlink: 'syz.3.2858': attribute type 2 has an invalid length.
[  203.484105][T16522] netlink: 'syz.0.2861': attribute type 8 has an invalid length.
[  203.488745][T16522] __nla_validate_parse: 91 callbacks suppressed
[  203.488755][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'.
[  203.498552][T16522] bond0: entered promiscuous mode
[  203.501423][T16522] bond0: left promiscuous mode
[  203.545556][T16527] siw: device registration error -23
[  203.597272][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'.
[  203.634615][T16541] netlink: 'syz.3.2869': attribute type 11 has an invalid length.
[  203.677329][T16547] netlink: 'syz.0.2870': attribute type 10 has an invalid length.
[  203.680756][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'.
[  203.723125][T16552] tap0: tun_chr_ioctl cmd 1074025677
[  203.726571][T16552] tap0: linktype set to 0
[  203.761623][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2873'.
[  203.783674][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'.
[  203.832959][T16561] netlink: 'syz.1.2874': attribute type 13 has an invalid length.
[  203.835731][T16561] netlink: 'syz.1.2874': attribute type 17 has an invalid length.
[  203.839139][T16561] lo: left promiscuous mode
[  203.840860][T16561] lo: left allmulticast mode
[  203.843935][T16561] tunl0: left promiscuous mode
[  203.845695][T16561] tunl0: left allmulticast mode
[  203.850483][T16561] gre0: left promiscuous mode
[  203.852209][T16561] gre0: left allmulticast mode
[  203.855464][T16561] gretap0: left promiscuous mode
[  203.858392][T16561] gretap0: left allmulticast mode
[  203.865402][T16561] erspan0: left promiscuous mode
[  203.868180][T16561] erspan0: left allmulticast mode
[  203.874308][T16561] ip_vti0: left promiscuous mode
[  203.876300][T16561] ip_vti0: left allmulticast mode
[  203.879232][T16561] ip6_vti0: left promiscuous mode
[  203.880818][T16561] ip6_vti0: left allmulticast mode
[  203.883240][T16561] sit0: left promiscuous mode
[  203.891421][T16561] sit0: left allmulticast mode
[  203.895293][T16561] ip6tnl0: left promiscuous mode
[  203.897102][T16561] ip6tnl0: left allmulticast mode
[  203.901587][T16561] ip6gre0: left promiscuous mode
[  203.903480][T16561] ip6gre0: left allmulticast mode
[  203.906436][T16561] ip6gretap0: left promiscuous mode
[  203.909300][T16561] ip6gretap0: left allmulticast mode
[  203.913700][T16561] nlmon0: left promiscuous mode
[  203.915548][T16561] nlmon0: left allmulticast mode
[  203.918266][T16561] 0X: left promiscuous mode
[  203.919840][T16561] 0X: left allmulticast mode
[  203.921421][T16561] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  203.958135][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  203.962011][T16572] bond41: (slave vxcan1): Releasing backup interface
[  203.964121][T16572] vxcan1 (unregistering): left promiscuous mode
[  203.966941][T16572] bond41: Destroying bond
[  203.969592][T16572] bond41 (unregistering): Released all slaves
[  203.972127][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2875'.
[  204.055485][T16577] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2879'.
[  204.120660][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2881'.
[  204.199231][T16587] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  204.202340][T16587] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2882'.
[  204.257196][T16591] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  204.352698][T16593] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  204.391045][T16595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.393787][T16595] syzkaller0: entered promiscuous mode
[  204.395643][T16595] syzkaller0: entered allmulticast mode
[  204.399640][T16595] sch_fq: defrate 257 ignored.
[  204.402816][T16595] tipc: Resetting bearer <eth:syzkaller0>
[  204.407040][T16594] tipc: Resetting bearer <eth:syzkaller0>
[  204.410291][T16594] tipc: Disabling bearer <eth:syzkaller0>
[  204.804434][T16641] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  204.815406][T16641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.828260][T16641] openvswitch: netlink: IP tunnel dst address not specified
[  204.837974][T16638] netlink: 'syz.3.2893': attribute type 5 has an invalid length.
[  204.895069][T16653] syzkaller1: entered promiscuous mode
[  204.899267][T16653] syzkaller1: entered allmulticast mode
[  205.058027][T16671] netlink: 'syz.3.2905': attribute type 1 has an invalid length.
[  205.072086][T16671] 8021q: adding VLAN 0 to HW filter on device bond28
[  205.122905][T16678] netlink: 'syz.0.2907': attribute type 4 has an invalid length.
[  205.333607][T16691] ip6gre0: entered allmulticast mode
[  205.336823][T16690] ip6gre0: left allmulticast mode
[  205.391716][T16696] 8021q: adding VLAN 0 to HW filter on device bond45
[  205.405253][T16696] bond45: (slave veth17): Enslaving as an active interface with a down link
[  205.414557][T16699] bridge24: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  205.994989][T16730] bond29: (slave bridge25): making interface the new active one
[  206.000543][T16730] bond29: (slave bridge25): Enslaving as an active interface with an up link
[  206.032445][T16738] 8021q: adding VLAN 0 to HW filter on device bond52
[  206.147197][T16738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.249123][T16753] 8021q: adding VLAN 0 to HW filter on device bond47
[  206.252432][T16753] bond46: (slave bond47): making interface the new active one
[  206.255344][T16753] bond46: (slave bond47): Enslaving as an active interface with an up link
[  206.264823][T16753] 8021q: adding VLAN 0 to HW filter on device bond46
[  206.294740][T16762] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.300970][T16762] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  206.303744][T16762] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  206.307443][T16762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  206.373718][T16772] _Z`Ԁ@S!: entered promiscuous mode
[  206.427840][ T5847] Bluetooth: hci2: command tx timeout
[  206.516881][T16789] 8021q: adding VLAN 0 to HW filter on device bond53
[  206.564698][T16794] 8021q: adding VLAN 0 to HW filter on device bond48
[  206.573429][T16794] veth19: entered promiscuous mode
[  206.577515][T16794] bond48: (slave veth19): Enslaving as a backup interface with a down link
[  206.583587][T16794] bond45: (slave veth17): Releasing active interface
[  206.591961][T16794] bond46: (slave bond47): Releasing backup interface
[  206.601126][T16794] bond48: (slave veth19): Releasing backup interface
[  206.910648][T16821] syzkaller1: entered promiscuous mode
[  206.912940][T16821] syzkaller1: entered allmulticast mode
[  207.610539][T16833] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003
[  207.937863][T16872] validate_nla: 12 callbacks suppressed
[  207.937878][T16872] netlink: 'syz.3.2965': attribute type 1 has an invalid length.
[  208.300106][T16889] netlink: 'syz.0.2971': attribute type 1 has an invalid length.
[  208.544631][T16898] __nla_validate_parse: 31 callbacks suppressed
[  208.544643][T16898] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2975'.
[  208.655596][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2979'.
[  208.660391][T16907] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  208.663118][T16907] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2979'.
[  208.669500][T16902] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2977'.
[  208.691285][T16909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2980'.
[  208.694669][T16909] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2980'.
[  208.719235][T16914] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2981'.
[  208.763510][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'.
[  208.832609][T16927] netlink: 'syz.0.2983': attribute type 16 has an invalid length.
[  208.847528][T16927] netlink: 'syz.0.2983': attribute type 3 has an invalid length.
[  208.857881][T16927] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2983'.
[  208.906650][T16939] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  208.908910][T16939] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  208.981799][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2988'.
[  209.068068][T16955] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  209.071520][T16955] bond0: option all_slaves_active: invalid value (7)
[  209.077808][T16955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.084319][T16955] syzkaller0: entered promiscuous mode
[  209.089271][T16955] syzkaller0: entered allmulticast mode
[  209.110124][T16955] tipc: Resetting bearer <eth:syzkaller0>
[  209.118111][T16952] tipc: Resetting bearer <eth:syzkaller0>
[  209.122883][T16952] tipc: Disabling bearer <eth:syzkaller0>
[  209.126223][T16954] netlink: 'syz.3.2990': attribute type 1 has an invalid length.
[  209.249078][T16970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.252370][T16970] syzkaller0: entered promiscuous mode
[  209.254568][T16970] syzkaller0: entered allmulticast mode
[  209.285175][T16967] tipc: Resetting bearer <eth:syzkaller0>
[  209.303953][T16967] tipc: Disabling bearer <eth:syzkaller0>
[  209.413246][T16984] veth1_virt_wifi: left promiscuous mode
[  209.415777][T16984] veth1_virt_wifi: left allmulticast mode
[  209.427848][T16984] tipc: Resetting bearer <eth:syzkaller0>
[  209.430422][T16984] syzkaller0: left allmulticast mode
[  209.433326][T16984] geneve3: left promiscuous mode
[  209.435084][T16984] geneve3: left allmulticast mode
[  209.437943][T16984] bond25: left promiscuous mode
[  209.440179][T16984] vlan0: left promiscuous mode
[  209.442226][T16984] bridge0: left promiscuous mode
[  209.449852][T16984] batman_adv: batadv0: Interface deactivated: macsec3
[  209.452264][T16984] macsec3: left promiscuous mode
[  209.978698][T16992] netlink: 'syz.0.3000': attribute type 9 has an invalid length.
[  210.017634][T16994] netlink: 'syz.0.3001': attribute type 1 has an invalid length.
[  210.272617][T17015] pim6reg1: entered promiscuous mode
[  210.274682][T17015] pim6reg1: entered allmulticast mode
[  210.320955][T17023] bond38: (slave bond39): Releasing backup interface
[  210.329811][T17023] bond50: (slave veth23): Releasing active interface
[  210.330999][T17021] IPVS: Scheduler module ip_vs_sip not found
[  210.383079][T17015] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  210.385329][T17015] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  210.479938][T17015] bond50 (unregistering): Released all slaves
[  210.521894][T17040] netlink: 'syz.1.3018': attribute type 6 has an invalid length.
[  210.533968][T17040] netlink: 'syz.1.3018': attribute type 12 has an invalid length.
[  210.664459][T17056] macvlan1: entered promiscuous mode
[  210.666533][T17056] macvlan1: entered allmulticast mode
[  210.693826][T17050] bond50 (unregistering): Released all slaves
[  210.707237][T17060] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  210.765143][T17065] pim6reg1: entered promiscuous mode
[  210.769903][T17065] pim6reg1: entered allmulticast mode
[  210.791081][T17071] syzkaller0: entered promiscuous mode
[  210.792841][T17071] syzkaller0: entered allmulticast mode
[  210.981959][T17083] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  211.150438][T17100] netlink: 'syz.1.3036': attribute type 1 has an invalid length.
[  211.170661][T17100] 8021q: adding VLAN 0 to HW filter on device bond54
[  211.183755][T17100] bond54: (slave gretap8): making interface the new active one
[  211.187075][T17100] bond54: (slave gretap8): Enslaving as an active interface with an up link
[  211.224818][T17110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.234121][T17110] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  211.238066][T17110] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  211.402603][T17134] ip6gre0: entered allmulticast mode
[  211.407641][T17134] dvmrp8: entered allmulticast mode
[  211.411151][T17134] ip6gre0: left allmulticast mode
[  211.413683][T17134] dvmrp8: left allmulticast mode
[  211.443627][T17140] syzkaller0: left promiscuous mode
[  211.445340][T17140] syzkaller0: entered promiscuous mode
[  211.447412][T17140] syzkaller0: entered allmulticast mode
[  211.449778][T17139] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.479328][T17144] vlan1: entered promiscuous mode
[  211.619924][T17161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.742019][T17173] delete_channel: no stack
[  211.761920][T17174] delete_channel: no stack
[  212.173316][T17194] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.288070][T17220] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  212.530034][T17235] batman_adv: batadv0: Removing interface: macsec3
[  212.595035][T17238] macvlan5: entered promiscuous mode
[  212.599226][T17238] macvlan5: entered allmulticast mode
[  212.641933][T17246] bond56 (unregistering): Released all slaves
[  213.303439][T17301] validate_nla: 11 callbacks suppressed
[  213.303453][T17301] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  214.250573][T17338] __nla_validate_parse: 38 callbacks suppressed
[  214.250599][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'.
[  214.389417][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'.
[  214.394490][T17345] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  214.404162][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.1.3108 Not tainted syzkaller #0 PREEMPT(full) 
[  214.404177][T17345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.404184][T17345] Call Trace:
[  214.404187][T17345]  <TASK>
[  214.404192][T17345]  dump_stack_lvl+0x189/0x250
[  214.404210][T17345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.404220][T17345]  ? __pfx__printk+0x10/0x10
[  214.404232][T17345]  ? kernfs_root+0x1c/0x230
[  214.404244][T17345]  ? kernfs_path_from_node+0x2f/0x290
[  214.404252][T17345]  ? kernfs_path_from_node+0x250/0x290
[  214.404260][T17345]  ? kernfs_path_from_node+0x2f/0x290
[  214.404270][T17345]  sysfs_warn_dup+0x8e/0xa0
[  214.404278][T17345]  sysfs_do_create_link_sd+0xc0/0x110
[  214.404287][T17345]  device_add_class_symlinks+0x1cf/0x240
[  214.404297][T17345]  device_add+0x475/0xb50
[  214.404306][T17345]  wiphy_register+0x1ba6/0x28d0
[  214.404324][T17345]  ? __pfx_wiphy_register+0x10/0x10
[  214.404336][T17345]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  214.404347][T17345]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  214.404358][T17345]  ieee80211_register_hw+0x3425/0x4080
[  214.404372][T17345]  ? ieee80211_register_hw+0x1481/0x4080
[  214.404382][T17345]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  214.404392][T17345]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.404405][T17345]  ? __hrtimer_setup+0x187/0x210
[  214.404412][T17345]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  214.404428][T17345]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  214.404443][T17345]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  214.404452][T17345]  ? trace_kmalloc+0x1f/0xd0
[  214.404462][T17345]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  214.404473][T17345]  ? kstrndup+0xbf/0x160
[  214.404482][T17345]  hwsim_new_radio_nl+0xea4/0x1b10
[  214.404492][T17345]  ? __pfx___nla_validate_parse+0x10/0x10
[  214.404507][T17345]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.404518][T17345]  ? __nla_parse+0x40/0x60
[  214.404529][T17345]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  214.404541][T17345]  genl_family_rcv_msg_doit+0x215/0x300
[  214.404552][T17345]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  214.404563][T17345]  ? bpf_lsm_capable+0x9/0x20
[  214.404573][T17345]  ? security_capable+0x7e/0x2e0
[  214.404586][T17345]  genl_rcv_msg+0x60e/0x790
[  214.404596][T17345]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.404604][T17345]  ? __kasan_slab_alloc+0x6c/0x80
[  214.404614][T17345]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.404624][T17345]  ? __netlink_lookup+0xbd/0x810
[  214.404630][T17345]  ? rcu_is_watching+0x15/0xb0
[  214.404640][T17345]  netlink_rcv_skb+0x208/0x470
[  214.404651][T17345]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.404660][T17345]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.404680][T17345]  ? lock_release+0x4b/0x3e0
[  214.404693][T17345]  ? down_read+0x1ad/0x2e0
[  214.404701][T17345]  genl_rcv+0x28/0x40
[  214.404709][T17345]  netlink_unicast+0x82f/0x9e0
[  214.404721][T17345]  ? __pfx_netlink_unicast+0x10/0x10
[  214.404732][T17345]  ? netlink_sendmsg+0x642/0xb30
[  214.404738][T17345]  ? skb_put+0x11b/0x210
[  214.404747][T17345]  netlink_sendmsg+0x805/0xb30
[  214.404755][T17345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.404763][T17345]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.404771][T17345]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.404780][T17345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.404786][T17345]  __sock_sendmsg+0x21c/0x270
[  214.404797][T17345]  ____sys_sendmsg+0x505/0x830
[  214.404806][T17345]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.404815][T17345]  ? import_iovec+0x74/0xa0
[  214.404824][T17345]  ___sys_sendmsg+0x21f/0x2a0
[  214.404833][T17345]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.404841][T17345]  ? futex_wake+0x4b2/0x560
[  214.404856][T17345]  ? __fget_files+0x2a/0x420
[  214.404863][T17345]  ? __fget_files+0x3a0/0x420
[  214.404871][T17345]  __x64_sys_sendmsg+0x19b/0x260
[  214.404879][T17345]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.404889][T17345]  ? rcu_is_watching+0x15/0xb0
[  214.404897][T17345]  ? rcu_is_watching+0x15/0xb0
[  214.404904][T17345]  do_syscall_64+0xfa/0x3b0
[  214.404912][T17345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.404920][T17345]  ? exc_page_fault+0x9f/0xf0
[  214.404931][T17345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.404938][T17345] RIP: 0033:0x7f8f3c38ebe9
[  214.404949][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.404957][T17345] RSP: 002b:00007f8f3d191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.404967][T17345] RAX: ffffffffffffffda RBX: 00007f8f3c5b5fa0 RCX: 00007f8f3c38ebe9
[  214.404973][T17345] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  214.404979][T17345] RBP: 00007f8f3c411e19 R08: 0000000000000000 R09: 0000000000000000
[  214.404984][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.404990][T17345] R13: 00007f8f3c5b6038 R14: 00007f8f3c5b5fa0 R15: 00007fff8fa9ffa8
[  214.405024][T17345]  </TASK>
[  214.466325][T17347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.552264][T17352] can: request_module (can-proto-0) failed.
[  214.713830][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3111'.
[  214.718024][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3111'.
[  214.809866][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3113'.
[  215.054317][T17375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3116'.
[  215.058639][T17375] unsupported nlmsg_type 40
[  215.064274][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'.
[  215.068419][T17375] netlink: 'syz.0.3116': attribute type 18 has an invalid length.
[  215.247465][T17379] netlink: 'syz.3.3118': attribute type 3 has an invalid length.
[  215.311296][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3119'.
[  215.505427][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3125'.
[  215.537206][T17407] netlink: 'syz.3.3126': attribute type 6 has an invalid length.
[  215.542276][T17410] netlink: 'syz.1.3127': attribute type 7 has an invalid length.
[  215.545481][T17409] netlink: 'syz.1.3127': attribute type 7 has an invalid length.
[  215.546816][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'.
[  215.559934][T17407] netlink: 'syz.3.3126': attribute type 12 has an invalid length.
[  215.603520][T17409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.731542][T17421] macvlan5: entered promiscuous mode
[  215.732681][T17424] netlink: 'syz.1.3132': attribute type 18 has an invalid length.
[  215.733273][T17421] macvlan5: entered allmulticast mode
[  216.026455][T17466] netlink: 'syz.1.3139': attribute type 1 has an invalid length.
[  216.039214][T17466] 8021q: adding VLAN 0 to HW filter on device bond57
[  216.058464][T17466] veth27: entered promiscuous mode
[  216.076648][T17466] bond57: (slave veth27): Enslaving as a backup interface with a down link
[  216.097817][T17466] bond54: (slave gretap8): Releasing active interface
[  216.106666][T17466] bond57: (slave veth27): Releasing backup interface
[  216.120384][T17473] pim6reg1: entered promiscuous mode
[  216.122453][T17473] pim6reg1: entered allmulticast mode
[  216.170423][T17475] macvlan6: entered promiscuous mode
[  216.172743][T17475] macvlan6: entered allmulticast mode
[  216.235571][T17482] tap0: tun_chr_ioctl cmd 2148553947
[  216.239206][T17482] netlink: 'syz.1.3144': attribute type 1 has an invalid length.
[  216.272089][T17490] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  216.399561][T17501] vlan5: entered promiscuous mode
[  216.506622][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  216.708940][T17518] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  216.928307][T17535] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  216.931533][T17535] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.519582][T17564] openvswitch: netlink: Flow actions attr not present in new flow.
[  217.840875][T17593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.883582][T17599] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.417496][T17627] wg1: left promiscuous mode
[  218.419152][T17627] wg1: left allmulticast mode
[  218.421391][T17627] : left promiscuous mode
[  218.423228][T17627] : left allmulticast mode
[  218.425469][T17627] veth0_to_bridge: left promiscuous mode
[  218.429430][T17627] veth0_to_bridge: left allmulticast mode
[  218.432197][T17627] bridge_slave_0: left promiscuous mode
[  218.434439][T17627] veth1_to_bridge: left promiscuous mode
[  218.436754][T17627] veth1_to_bridge: left allmulticast mode
[  218.439675][T17627] bridge_slave_1: left promiscuous mode
[  218.441483][T17627] bridge_slave_1: left allmulticast mode
[  218.443754][T17627] bond_slave_0: left promiscuous mode
[  218.446224][T17627] bond_slave_0: left allmulticast mode
[  218.449202][T17627] veth0_to_team: left promiscuous mode
[  218.450989][T17627] veth0_to_team: left allmulticast mode
[  218.453674][T17627] team_slave_0: left promiscuous mode
[  218.459784][T17627] team_slave_0: left allmulticast mode
[  218.462296][T17627] veth1_to_team: left promiscuous mode
[  218.464507][T17627] veth1_to_team: left allmulticast mode
[  218.467236][T17627] team_slave_1: left promiscuous mode
[  218.469606][T17627] team_slave_1: left allmulticast mode
[  218.472202][T17627] xfrm0: left promiscuous mode
[  218.474149][T17627] xfrm0: left allmulticast mode
[  218.479319][T17627] veth0_to_hsr: left promiscuous mode
[  218.481371][T17627] veth0_to_hsr: left allmulticast mode
[  218.484366][T17627] hsr_slave_0: left promiscuous mode
[  218.486858][T17627] hsr_slave_0: left allmulticast mode
[  218.489819][T17627] veth1_virt_wifi: left promiscuous mode
[  218.491909][T17627] veth1_virt_wifi: left allmulticast mode
[  218.500404][T17627] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  218.538535][T17627] bond42: left promiscuous mode
[  218.541766][T17627] veth1: left promiscuous mode
[  218.543941][T17627] ipvlan68: left allmulticast mode
[  218.546272][T17627] ipvlan69: left allmulticast mode
[  218.548914][T17627] ipvlan70: left allmulticast mode
[  218.551194][T17627] ipvlan71: left allmulticast mode
[  218.553415][T17627] ipvlan72: left allmulticast mode
[  218.555185][T17627] ipvlan73: left allmulticast mode
[  218.557423][T17627] ipvlan74: left allmulticast mode
[  218.559193][T17627] ipvlan75: left allmulticast mode
[  218.561082][T17627] ipvlan76: left allmulticast mode
[  218.562877][T17627] ipvlan77: left allmulticast mode
[  218.564931][T17627] ipvlan78: left allmulticast mode
[  218.567955][T17627] ipvlan79: left allmulticast mode
[  218.569955][T17627] ipvlan80: left allmulticast mode
[  218.571992][T17627] ipvlan81: left allmulticast mode
[  218.573978][T17627] ipvlan82: left allmulticast mode
[  218.576515][T17627] ipvlan83: left allmulticast mode
[  218.578794][T17627] ipvlan84: left allmulticast mode
[  218.580916][T17627] ipvlan85: left allmulticast mode
[  218.582920][T17627] ipvlan86: left allmulticast mode
[  218.584654][T17627] ipvlan87: left allmulticast mode
[  218.587252][T17627] ipvlan88: left allmulticast mode
[  218.589147][T17627] ipvlan89: left allmulticast mode
[  218.590875][T17627] ipvlan90: left allmulticast mode
[  218.592618][T17627] ipvlan91: left allmulticast mode
[  218.594425][T17627] ipvlan92: left allmulticast mode
[  218.596482][T17627] ipvlan93: left allmulticast mode
[  218.598265][T17627] ipvlan94: left allmulticast mode
[  218.600152][T17627] ipvlan95: left allmulticast mode
[  218.602134][T17627] ipvlan96: left allmulticast mode
[  218.604185][T17627] ipvlan97: left allmulticast mode
[  218.606299][T17627] ipvlan98: left allmulticast mode
[  218.608003][T17627] ipvlan99: left allmulticast mode
[  218.610047][T17627] ipvlan100: left allmulticast mode
[  218.611807][T17627] ipvlan101: left allmulticast mode
[  218.613522][T17627] ipvlan102: left allmulticast mode
[  218.615503][T17627] ipvlan103: left allmulticast mode
[  218.617764][T17627] ipvlan104: left allmulticast mode
[  218.619916][T17627] ipvlan105: left allmulticast mode
[  218.622151][T17627] ipvlan106: left allmulticast mode
[  218.623839][T17627] ipvlan107: left allmulticast mode
[  218.625541][T17627] ipvlan108: left allmulticast mode
[  218.627471][T17627] ipvlan109: left allmulticast mode
[  218.629311][T17627] ipvlan110: left allmulticast mode
[  218.631060][T17627] ipvlan111: left allmulticast mode
[  218.632844][T17627] ipvlan112: left allmulticast mode
[  218.634654][T17627] ipvlan113: left allmulticast mode
[  218.636761][T17627] ipvlan114: left allmulticast mode
[  218.638445][T17627] ipvlan115: left allmulticast mode
[  218.640141][T17627] ipvlan116: left allmulticast mode
[  218.641814][T17627] ipvlan117: left allmulticast mode
[  218.643604][T17627] ipvlan118: left allmulticast mode
[  218.645491][T17627] ipvlan119: left allmulticast mode
[  218.647658][T17627] ipvlan120: left allmulticast mode
[  218.649531][T17627] ipvlan121: left allmulticast mode
[  218.651512][T17627] ipvlan122: left allmulticast mode
[  218.653545][T17627] ipvlan123: left allmulticast mode
[  218.655244][T17627] ipvlan124: left allmulticast mode
[  218.657306][T17627] ipvlan125: left allmulticast mode
[  218.659026][T17627] ipvlan126: left allmulticast mode
[  218.660707][T17627] ipvlan127: left allmulticast mode
[  218.662400][T17627] ipvlan128: left allmulticast mode
[  218.664879][T17627] ipvlan129: left allmulticast mode
[  218.667326][T17627] ipvlan130: left allmulticast mode
[  218.669074][T17627] ipvlan131: left allmulticast mode
[  218.670779][T17627] ipvlan132: left allmulticast mode
[  218.672358][T17627] bond47: left allmulticast mode
[  218.675414][T17627] macvlan5: left promiscuous mode
[  218.677255][T17627] macvlan5: left allmulticast mode
[  218.679521][T17627] veth27: left promiscuous mode
[  218.681335][T17627] macvlan6: left promiscuous mode
[  218.683165][T17627] macvlan6: left allmulticast mode
[  218.714543][T17631] macvlan6: entered promiscuous mode
[  218.717151][T17631] macvlan6: entered allmulticast mode
[  218.725196][T17634] validate_nla: 9 callbacks suppressed
[  218.725208][T17634] netlink: 'syz.1.3186': attribute type 1 has an invalid length.
[  218.757270][T17634] vlan5: entered allmulticast mode
[  218.758931][T17634] bond61: entered allmulticast mode
[  218.902915][T17646] mac80211_hwsim hwsim35 wlan0: left promiscuous mode
[  218.913551][T17646] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  218.917690][T17646] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  218.924190][T17646] bond41: left promiscuous mode
[  218.947071][T17646] veth19: left promiscuous mode
[  219.041374][T17652] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  219.045073][T17652] bond0: option all_slaves_active: invalid value (7)
[  219.115085][T17661] netlink: 'syz.0.3193': attribute type 30 has an invalid length.
[  219.180586][T17663] netlink: 'syz.1.3194': attribute type 3 has an invalid length.
[  219.237506][T17667] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  219.249026][T17667] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  219.329199][T17672] __nla_validate_parse: 35 callbacks suppressed
[  219.329211][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'.
[  219.355019][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'.
[  219.540488][T17693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3201'.
[  219.617901][T17698] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3201'.
[  219.621846][T17698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3201'.
[  219.625057][T17696] netlink: 'syz.3.3202': attribute type 10 has an invalid length.
[  220.459013][T17733] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3213'.
[  220.464772][T17733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.469108][T17733] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  220.471695][T17733] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  220.474416][T17735] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3214'.
[  220.479103][T17733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  220.541697][T17738] netlink: 'syz.0.3215': attribute type 1 has an invalid length.
[  220.573938][T17737] bond50: (slave bridge28): making interface the new active one
[  220.578059][T17737] bond50: (slave bridge28): Enslaving as an active interface with an up link
[  220.720302][T17761] netlink: 'syz.3.3218': attribute type 2 has an invalid length.
[  220.728851][T17763] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3221'.
[  220.745772][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'.
[  220.770725][T17767] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  220.774135][T17759] delete_channel: no stack
[  220.842780][T17769] netlink: get zone limit has 8 unknown bytes
[  220.850109][T17769] syzkaller1: entered promiscuous mode
[  220.851888][T17769] syzkaller1: entered allmulticast mode
[  220.852071][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'.
[  220.891886][T17775] netlink: 'syz.0.3225': attribute type 25 has an invalid length.
[  220.984744][T17781] macvlan7: entered promiscuous mode
[  220.988945][T17781] macvlan7: entered allmulticast mode
[  220.999360][T17779] tipc: Resetting bearer <eth:gre0>
[  221.001700][T17779] tipc: Resetting bearer <eth:gre0>
[  221.012174][T17779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.181854][T17793] netlink: 'syz.0.3232': attribute type 18 has an invalid length.
[  221.199469][T17790] delete_channel: no stack
[  221.245086][T17795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.273773][T17797] gtp3: entered promiscuous mode
[  222.041644][T17846] tipc: Resetting bearer <eth:gre0>
[  222.068613][T17846] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  222.071011][T17846] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  222.078526][T17844] vlan0: entered promiscuous mode
[  222.472819][T17857] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  222.537877][T17861] 8021q: adding VLAN 0 to HW filter on device bond63
[  222.956748][T17889] pim6reg1: entered promiscuous mode
[  222.958730][T17889] pim6reg1: entered allmulticast mode
[  223.013091][T17890] vlan0: left promiscuous mode
[  223.045505][T17890] macvlan7: left promiscuous mode
[  223.047830][T17890] macvlan7: left allmulticast mode
[  223.331517][T17910] : renamed from wg2
[  223.344605][T17909] delete_channel: no stack
[  223.503347][T17915] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  223.962895][T17931] delete_channel: no stack
[  224.276707][T17950] can: request_module (can-proto-0) failed.
[  231.235947][ T6678] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec
[  238.666364][ T9476] unregister_netdevice: waiting for virt_wifi0 to become free. Usage count = 2
[  238.670016][ T9476] ref_tracker: netdev@ffff888111a02610 has 1/1 users at
[  238.670016][ T9476]      batadv_hard_if_event+0xf0f/0x1730
[  238.670016][ T9476]      notifier_call_chain+0x1b6/0x3e0
[  238.670016][ T9476]      register_netdevice+0x1608/0x1ae0
[  238.670016][ T9476]      virt_wifi_newlink+0x428/0x860
[  238.670016][ T9476]      rtnl_newlink_create+0x310/0xb00
[  238.670016][ T9476]      rtnl_newlink+0x16d6/0x1c70
[  238.670016][ T9476]      rtnetlink_rcv_msg+0x7cf/0xb70
[  238.670016][ T9476]      netlink_rcv_skb+0x208/0x470
[  238.670016][ T9476]      netlink_unicast+0x82f/0x9e0
[  238.670016][ T9476]      netlink_sendmsg+0x805/0xb30
[  238.670016][ T9476]      __sock_sendmsg+0x21c/0x270
[  238.670016][ T9476]      __sys_sendto+0x3bd/0x520
[  238.670016][ T9476]      __x64_sys_sendto+0xde/0x100
[  238.670016][ T9476]      do_syscall_64+0xfa/0x3b0
[  238.670016][ T9476]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.670016][ T9476] 

VM DIAGNOSIS:
17:53:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90006916810
R8 =ffff888020860237 R9 =1ffff1100410c046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd904 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc693b616c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556576397d80 CR3=00000000443bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fd440187d20
XMM02=9800020007000800 03a0e00300100003 XMM03=a0100003a0800401 0000060806060159
XMM04=000608060a010b84 0008000389800320 XMM05=01038980040fffff ffffffff04020800
XMM06=0c08000100000608 060a010b84000800 XMM07=0389800320a01000 03a0800401000006
XMM08=0806060159980002 000700080003a0e0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b1002eebcb742f00 RBX=ffffffff819683b8 RCX=b1002eebcb742f00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38630 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005565763a0560 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffff000000 0000000000000000 XMM05=000000000000002f 000055657600302d
XMM06=ffffffffffffff00 ffff000000ff0000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffff000000ff0000 XMM09=0000000000000061 000055657600302d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
