last executing test programs:

2.511552035s ago: executing program 0 (id=3316):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6403f800000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

2.509496759s ago: executing program 0 (id=3317):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x4008af60, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000240)={0x1, 0x3e, '\x00', [@generic={0x6, 0xe7, "0547d7ad9bd8851b4e6edbd8def69d453afd88313ea303ca8de1114d4894e88ee8cf9bfb7f3a6620ac11641c3a583bd2f1e0b54694018447df8950cbdf105d307f716f77a99475d709fe5f165ccbf9f6dab809abbf43328ba13ce4bff335b8230be5427a7b996195eecaf7ff2b165b68f840e1d5185cff52560894e105f68baa29b8ab827fc5e45422d98da735a65c173fc674cde48a7eeca9e8e155c1b52e8549a07426ba5a701cd0b5c90b1cf597adf72528598e0570a64fdf178f75b98478ee2cfa6ac98734728f809124639425c8a42a592b5bdcb2d2943630f69cda2b71c497a2707bda85"}, @enc_lim={0x4, 0x1, 0x75}, @jumbo={0xc2, 0x4, 0x8001}, @generic={0xc, 0x4d, "e1aefacfa5ccd6c56fdb5771e825df6818ff6b0a1a0982801f59060db2cc3c91b6fbd8ee85ddf84ef45bb4a23115912ff4670b78ce1d0d8e5c2369b38895a6c8b3082bc64ac3fb66dfb1a09e27"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x400, [0x86]}}, @ra={0x5, 0x2, 0xc063}, @generic={0x60, 0x9b, "2ec4c3a9fdfe34ac7f8f37f3e3b04d1e0fd4cc3107923fa1c127fbc1f01f8ea47d93c8933679ef4282adcac45fccc167c4f3ca077759c85208557b58dc348068f2496b20c837418dbdf2ff7265f1da61fa287bab2ab8da8a12436b643327f17d69d48d16c97d8ef8fcaf8a1b349186137b5fcbef72274dd6f8e356ea78fb31ae48c332ada875f326b8c6cb5a72b1a8a603e8d6a023d636fd482866"}, @pad1]}, 0x200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x17, r4, 0x1, 0x87, 0x6, @multicast}, 0x14)
close(0x3)

1.641187387s ago: executing program 0 (id=3322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x200, 0x6, 0x5, 0x6, 0x800, 0x8e, 0xfff, 0x0, 0x1ff, 0xe2, 0x2]})
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, r4}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x805)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf250bcbb70000000c00018008000300000000000c00018008000300000000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0xffffff07, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x40890)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x2000}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0)

1.639087458s ago: executing program 0 (id=3324):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe8a) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x1, 0xb, 0x1, 0x3, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)

1.22013399s ago: executing program 0 (id=3333):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x6, 0x2, 0xff, 0xb, 0x1000, 0x3}, 0x20)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/37, 0x25}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x10003)
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4)
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000480)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r12=>0x0, 0x700, 0x1, 0x6, 0x10000, {{0xd, 0x4, 0x3, 0x21, 0x34, 0x66, 0x0, 0xa, 0x2f, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x93, [@dev={0xac, 0x14, 0x14, 0x34}, @local]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x81}, {@local, 0x2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r12, 0x2f, 0x1, 0x2, 0x7fffffff, 0x25, @dev={0xfe, 0x80, '\x00', 0x28}, @empty, 0x40, 0x80, 0x6, 0xf}})
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000000640)={0x1, 0x5}, 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r11, 0x8905, &(0x7f0000000680))
r14 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route(r14, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_dellink={0x28, 0x11, 0x10, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x100, 0x10}, [@IFLA_LINKMODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c015}, 0x24004000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x4)
connect$pppl2tp(r8, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e20, @local}, 0x2, 0x4, 0x3, 0x4}}, 0x2e)
ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, &(0x7f0000000800)=0xb2)
ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000840)=0x80)
unshare(0x60030000)
sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x464, 0x106, 0x70bd29, 0x25dfdbff, "d64d01ab72dfea74af2cff1d59aae227b6ddae729da86a05ee3526ee5f91584461bd69d2e1362e91013f40810abea0167dffabd167", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r15 = accept4$x25(r6, &(0x7f00000009c0)={0x9, @remote}, &(0x7f0000000a00)=0x12, 0x80800)
ioctl$sock_x25_SIOCDELRT(r15, 0x890c, &(0x7f0000000a40)={@null, 0x4, 'wlan0\x00'})
socket$inet_mptcp(0x2, 0x1, 0x106)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x204, r16, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xe, 0xf, 0x8001, 0x35a7, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x1}, {0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x8}, {0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x6, 0x2]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x6}, {0x5}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x7}, {0x6, 0x4}, {0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x6}, {0x4}, {0x2, 0x5}, {0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x6}, {0x4}, {0x7, 0xa}, {}, {0x1, 0x4}, {0x7, 0x2}, {0x5}, {0x3, 0x7}, {0x1}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x200, 0x8, 0x9, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x2, 0x8}, {0x1}, {0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa9b9, 0x9, 0xc02, 0x2, 0x8001, 0x60, 0x70]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x16, 0x36, 0x3, 0x2, 0x16, 0x6c, 0x5, 0x1, 0x12, 0x12, 0xc, 0x24, 0x36, 0x1b, 0xc, 0x5, 0x60, 0x24, 0x18, 0x60, 0x1, 0xb, 0x11, 0x1b, 0x6, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x97}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)
recvfrom$unix(r9, &(0x7f0000000ec0)=""/76, 0x4c, 0x40000040, &(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

1.140327905s ago: executing program 0 (id=3335):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000ff800000000000000033"], 0xfdef)

1.001344459s ago: executing program 1 (id=3340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1}, 0x14f}], 0x1}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800fa1294bb69cf27b359af818d0000000000003c0000003c00000004ff792031537ff1d61d000000000000000000000003000000000000000000000000000002000000000000000000000006020000000000"], 0x0, 0x56}, 0x28)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r13, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x3c, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r15, {0x9}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8045}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35, 0x8183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x49}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x80)

941.736115ms ago: executing program 1 (id=3341):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0x1ff, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x3, &(0x7f0000000040)=[{0x80, 0x5, 0x4f, 0x6}, {0x1, 0x2, 0x3, 0x5a795689}, {0x2, 0x59, 0x5, 0x9}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005000000080000000981f3d5aacb310f0000000000eac1000018d6c3f576dbc6d91a5e195f52b15b9cd46eb152890b11fc5b5c20dc373d2bcbbb572fd14849e73c8287ddf75a53323d8d8fbf71fd7156290935533d25cf72ca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES16=r1, @ANYBLOB="00000000000e0000b7080000000000007b8af8ff000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0xfffffffffffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00')
r5 = socket(0x26, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x1000)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f0000000500))

940.378452ms ago: executing program 1 (id=3342):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900acb571e5b3c92a9fc39cc00000000500"/31, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4)
writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1)
recvmmsg(r1, &(0x7f0000000080), 0x0, 0x2002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r2, &(0x7f0000000080)=0xade5, r2, &(0x7f0000000040)=0x5, 0x0, 0x9)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newtaction={0x170, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x15c, 0x1, [@m_mirred={0x158, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x8, 0x10001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x4, 0x2, 0x5c44}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x20000000, 0x4, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x0, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffffb, 0x7, 0x0, 0x3c1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x7, 0x401, 0x8}, 0x4}}]}, {0x69, 0x6, "8609a7caed660df5fb33b80c07de399919ede7667cd659d7d2b19029900629b4cd9d710c6bc4d70c094892ade21bb07a5cd85addb2890f0d5d18163265221f54a311b04d8913023d46609cefd29a26fc2bc9932b107aab7cecdd50f53c4f88cd04e7a0bf80"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x170}, 0x1, 0x2b1e}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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"/430, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r7=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x2, 0x6}, 0xfffffffffffffdd9)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r8, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
r10 = socket$inet(0x10, 0x5, 0xa)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r3, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, 0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x32}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5c}]}}]}, 0x4c}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000200e142cb62abd7000fedbdf2508000100000000000800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x10)

881.160052ms ago: executing program 1 (id=3343):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000880)={0x8, &(0x7f0000001a40)=[{@none}, {}, {}, {@fixed}, {}, {@none}, {}, {}]}) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001fc0), r3)
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000084) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r8=>0x0})
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r8, 0x4}}]}, 0xc4}}, 0x0) (async)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x3, {0x0, 0x1, 0x3}, {0x0, 0xf0}, 0x385928e23dcb00e4, 0x1}, {0x2, 0x0, {0x1, 0xff, 0x3}, {0x2, 0xff, 0x2}, 0x1, 0x2}, {0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2}, 0xfd}], 0x60) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x0, 0xf08, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) (async)
pwritev(r5, &(0x7f0000000840)=[{&(0x7f0000000680)="f6013e990ecc50461f0e290b30f4fc190740a86687f60f348f9b20813676b4dfd681fbfb3b39a8d7e7f4679f539bd44f3dae8f91a05dcf2cf90cfb66e42c74955c5e48b11adf5a9436ead7e6f0ae", 0x4e}, {&(0x7f0000000740)="588e4f1a1ddfb2121679f6b0a09aea14e0fb192dee8fe6763dd339389d94bd9a29cc4314f2bf495d9c0d3c07710e5445a4ac4a972a268a7de877dc37ef83bf4ac70d2147bc1affca0e0de0132da5006b2ee328a1ec2b9ac4c129a54d7a8cb2448dd817c244ffdd97078cba2f6aa49dd3f96401e0442fe03605d62bae7ac30c2e988b1253006b8ceb87bcfddbe1ca2825a8dbd8f83d2141dc531ddde25ae8e9696d93d95395f0412556e83dd3d33c8b684867e3945f8c209d579a3d55d646631a5612e9a732b3b06cd1bb8e", 0xcb}, {&(0x7f0000000a40)="80691d9ddb5399714951723fad8e47897ab2cab0ff5ec65f2f64041646473fa4c041f2911413576aa5d69a4d0f16f70e87606152e80e5f7c5d02c3d0b99b32ecddda643f9b5290f55910e769793377a9fb63c51184f5eabd4a3f6ebbf1ab79c770735a820d266b40c7a99e6fc94b8b67f52a1327ae2d0e81afe237091bb7507c99791988f1ffde48b558c4ed3dc489f43cfaa62a1fbef700eaf4642f34558deb75e0482320cf4ade84cc8ada98fdd689468415bab4d59dd4a5657ecdf00732e25a05355493373ccbc6203d9db1ca1cde7ee8e60ed148760432d0ae679b655c9d4ec0ed967e36e3bb1db0743cd4c5e11c72d7397def7b96258aaffb2380e5d0dc2c72ff4568d349d8915d7968fa0d52178d74064e197a0dd4e76942310f9995a08583c073423ca5adff2740ea0d8b4ad10c6bd7277cbb17b19878d2eb5e3d894505889ffb61b55fa69b6c2cce00ad974bf41e82cac69161c585f430699fefe8567f7c5fc04cbe9ec1a53fa70e0f8d80c8041e02eb226bf59839d4a50453f5c020c45472c5428d87a2b899b91ef9caabc848f20768a30ede905bccd1bb9ede5e73081df5c0570d4ddd7727c79d68d2e94a869fad8c38138e933c20dac6e20a0b2aceeb315f52defc28528edc5a05e08bf22c2113569b50523c95d52e1db1df6f1c4aaccb0fafbd7310c9f4f954b515f20ee1dc990559c335c152243c2f6c3f6a7ef06c3b3a5e34aa775b908627d2fba9dc0bc5fd1198683fd6c3191a7744dcd87a3c3550de47569b4eb03a871f1369817e0af2169ac7d82ce7d3550f7ebde0c7d63955d2babcdc47384ef01310413584ed5f5b9a88a294680f136c27baf7457318b511bb5e1e5f03ab16f733def7e67962094a2d5e1f131dcd26aa55ee554e31410af6b017ff7ad59b6ed422b41b4b04478025a75ad3a209e5a57b6973b92bb789a2ad32a3ba330438a043354aee168759d7cd2e7ab542cb981de5e3b849e1995abde021bab2a353563ddb90a3126d710154e213df8c6160ab0a8a97f812555d256b45aa0456799907945ac36be23ad3ac17f0d6ebcda7bd5d052d232ea9420168ef29ffb9d4a4a2ba8edcffd42c42c8b0030527ef0ffb0850dcda5e762f05dd03e241199149d53306f700b6cb4161ba566323432127be5bce1e5fa223856f06d03ff78995d1aa9349974791e4449ffd3aad72d2c2355201d2e74a1494f61112b15f5ea0025cec6df96d8cd522c8495c018dbc60d5d82b34ea15592843788c87fee5cabd709bc5c11cf4669463799f203eace11e2cd3172c6e1441bf80f1a59009cf1f21090f3349a551d1496a205077aba72477f8341cf9892cd1acd539d66d07d6368e7b38530471d8c4f4f245caaa9d78c0cc4425a83b8d2ae3dfe499d28d3555c6a7556c14031844c4a890c3bd1da51873ad4d133509f4d36515614a40addbc90db02ef91a843585cccb8b00938d87079db537cd6338dfdb68a3e1de386c979c346579ce0b235bdeb9356357baf70925f698b4e19b11c9db251e67aab17e04032e32f3de9ace24c218b45738787ee8add8fce359076ce56ed376fe23ae1deda7e9ad30f6e0c95d636d72e68f9fee1e765c70396b9bc2311287031afea0c49936dd9aa82b737ae5259d793cacfa0b91f0fc658548c7ac947204e5514441765a937f9bda091b4f7b5e275101b67692f0656aa8c39d78435c12798c40af94692dbd6282965838c8108060b0a3bcb33976510395ad8f55212a1b2db24940770bb49429d7cbbffa44aa614d97fb2f9e1a0d5bfc217bf776faa994ae3762bb7a46bf524a166881176daa3709b00377d29a85a8f8876670c5b3a11b6885146d99ed4a68295768db20ba75ba6c0cb54e503ac17aaf13f2da2fb62ee575b147b9b4df634ed0faef2d7aa2a6249e9100a27e5d96f5da1a009a9cf8d452e5465d9a3ae06e11ac92d187fbc1fac26da8a340ec5f20f3cfd9bc2cff31a637c1e4a1eb6da3d15f8fedba0f9fa1b932c953457bb8f727bc7afec16687419945c7c0feabb3ca4a897a923630db1143db04e929f0417c24cd6642d12d0aed36c572bb4813c827f24f066d05af0a71b0e8e89b548a0c96f6e91d375ac18c23dd69a9a3283044b11f410f74307350721691af912be961b6b895b356aae2eb6859eb21cd89a0bfa7ea2d7c0631af401c4b7ade1958b23326eee4ca434b847ba09a7be3dfeadae4d971bc3774c0b974368b660f5bcbde1837660a346e7d1117aee5599a50a688db868f8821048007de48fbf28d067504d659f8d7fc1e0e24376f760b3900db414f5a26a3a608141b1fd27da11d7147f027c1e80bc7e45f35bfda9d62654e87dcac84fb545848a8c8505a0f606c253b5be376c9c7f743cf5521697ddf5031fdf6fabdfa56ef6ddd5c35ac03b1f91ef9772a9c7722865deb3d9cc1801752020dd80e2e240d7a9638b2f76751a437584be801e69d4ebf40d9a0723b8438ec0299f54ea5ccd384c563ce3c72487be2e550223bd6a21ca694bcf81fe4e51a7601d56d5fbb4a38318d5fc53166c7803d2284ff33af0d55d640a3aaf29d2ec4061fc9ed1b60e35066609c834c8b21fb2b879b9d145b2b7552e50316da9e51b918589c43eacccb8fe2ff2d7755c10f32f1957f44a3e9e28ca99dfcf70188dcaa2aefc2f04b96ac42ed64a02592e1a680bc3d78addcd5031f2b0c78d9cec1ede62732dee0dd722a12622fbf7ff03595096f1b9dd7166dfeaa684a23d77f7e3f8512b3deef3b47c599c2e7714af8c78d1b7051d37c5390b3d470ef077a5409fee9f856b9335898ad24b458e4e7ff9683eec0f642f9372f21f3e637c338e39e9e1289d844b88bd3462c3c794f78422c6d4e8b317e52ec766147d2462cea0fd5b7103be19104ed865f1caeddc4980a63c0e904a0f216e98488b07a03bb6ab3682c393c85354d2625fe13c2dbf0ae1ba38517605ba9d583124a0188c12229a72af5ca9f54b8df4e339d3ae982585388f02f004a4442fdf9a2627ee68de119e0afac30007a363fec8d175f92db4c3d134c02bac483a2f516397a778638e81bc62d5d8a5fa6175d874d913a93ebc6ed105a27fd41f210f617437d5e80e041d62ed58e2f5a15a4795ea6f520afe851021f7b71cd8b87b8b549331ec2b7d00ca9b96fd3c61c4c9323d67a3459dd840a274dd2aa1c5a3f47e1f540a37509148ea4c19cf9e93c47d3ef7e3283793c8e001393f3fe0b38c434282f559a3e700bcf70e1bf0bbe8089277910e7cc51b4b0a261961386b02f3458bba065a8e67a9a1a61598b7a13ec117800450e910347b3b5b2d2040c6492876d3734c374be539b7c62e9a0db711af951f87a50e5cfc7ec8f5e9befa5d8b0ef76f4b5f04f44cfa57b77386d0ba60220b2a2b843da930c45521380a72fe953857a69eff9e3ed9f36863fda421109d98d70be56fa8ae1d822bc35a7e8288812fa432cb9b2c2e31f9601a18c61133f55de35fbc3e3d35f5ead5897983d087fc4d959476240329fbdabdf528afb269bbd4d77034bf6760c2658f69e8b60ef8f0495f96ff9d9995f66565ed8e83ab8d14e392025531f5206a5c9947ed956a66805da1fe95d7cdcecc460667f91d37810be17b46f70f5ee5c25e255c8376edb7b0f53057b09c3bc3d40bc2bf76a95fc7f07e868b1534e8a5d3f5e8119f8dd793b0a2e0baf2f6701783a0aeb98517117953cd740f90a7af0b038a214be8f57ef66a3994b3d6edc97b815f3d69f3452ffe0ba41f4647a150cfe21943d86dbf9570f47f4379c2641f35596c7b0067bace16c6f88d2a18eee0ca5c98fe4a2e2605971658362f3d0a1fb13a3fb4b635f9db2c7dccada915f56edac6677ea8a92bc625e8498db2f9d2561b9ec3fc73846446e09fafb1945d57a9fc57b0ae9f39f8db6ea1e5f438d3dc66dfc450f73bdcce8ea4e351cf281bd8a132c4a2d436e320f37fac45f303869d17ed3e6e6a0c2546886007ea9537d90539c8cd5156285fb02a0049777ccfda38eb7a62d318b0f370a35f8c7a377dbf53e1d99c14ae378c915b157bf4fc95ef1f6c39371cd0343b6f1c6b682dd1e89e2b3e13d063a1d7e8c4f7c505a71ff6f4fa5b860bc0813f67e9a156fefcb125b253a2d4b69b8546cb3ba032f1513fc95c923fc86983cf59711560c4421c0f47caab7443a084c7a820b881074f4ddc0066503ac604145f2ce42bed2746bb67bdd44b670c2ff3359e653057663b753be9082af9bbc51e2ef23f89e62647e363a947278b96eff3f5347e0762ec18e7464083eb8673efb0149c435b1978f778f1e9a87c7a7451e01451ba5f471fd497948ac33806e32c34ccecfd0464f8dd8fa5af31b3d30dc803e7d38ff5de74bdad7f1b6bdc3f25a38b568ed81219e5e520f7a17f3199bdefe24d0166f279a398dc11270b58e9d83ef2023cbb382e70090df741d7d44fd695d054cdc9a5c5acc90a1c77b06bf9fa59d6cbaaf51045f3b670fe16f653e02de4312d04a645a1625c3f5461c1fe1776d0894afbf02af3a0b177ec44fe353803be51a55ed748a9116722c7024e4ab2f7e45f3e5cbf3221e4d4b34d6ca8055b3e503560481253224750db7f4e9b9db6f85b6d5d28d3953e630a4acb739a58fadbc508f68ca1c4faeaa59b6d260d566cd5035af46cef4c2e29d4a6016f3f64b5e30cee0a32b248f23fc12da83ee3b83db4b406a65a5b858bc4dc7230ba702202cd5aaadd6608b33a5d426b429f8197df61d1c4777c47d6e66e246f31dc7305c886e6421a8087b370bbdbd959cb8de6115e0ee72e19cff5a76cf568042d0fbc8bbe8b0338f56dbeb7dab5fc018deeefc17e44ffdc7a045205cd976e31f57cea24b75bb00f2b5b1f209f7b2330c84fe1ce42f10ce2108559a52dec83ad13c5a3c7b39b8eb0d79d4b306f95ae1dcb646a7e7f208e95d0cdf3b4014f491b652d7c5e836b96372711b6f7278bf4ba4257039b670ed164c821c3ba114401f131924e727d83d0a4285483d82fc44a041815ca21646f845267a212993cf6a4d327c1819a1d59cb03251570536d77a0b667bf6a3aca076c1aee6e9f6038eb38eb7c7a5ab46da7e9a50b8aa2fbb74a186b48d569ddc7eb89ad0ceffee98240a60489b71d3ebf65d6f8f583aab30f457aafc5c7f989b8470ade6deb912c6824cdc2f248086a734e1338e87917057bf489e2c76506afb7f347f035f9d2a7956a6bab4331b1fd89823cd35c7fd2c6b36b06799dc1ac1fd832a23ed73d750505b062d4b009e99fbe354e0e5902fefd4e09fdbab86cbf8c06b5adbb7c1fcbcb397d9cffe5afb441044f754c6f8683a07d0b5bb0dbc11776b85a37412c4767aabda87a0bb09647218f982be61b1dd32606409873b32fb9c542f6dedc9443583489a7a08f025d5ddddfc604e329b04b23f06fcda7217284898e6c9817b25747552820c51d5e7d1aa88aff67a43d3180e6c1045a77871a21431fcaf51288a0c915f5f2058bf5a1c045a2d0e2065ed1dad98f1daddc11d013e2321a6a43e831a1d497b546d9ef2a7dec86a6414d90a6ddc0fd95dcfcb6ba75bd1e79e47d946df4ebe1ee354452f967d40a62c0ae08f9342fe9f0acfb2cdb1123df4e09a91b236630eb22acd2ec939a33061a5d22c68aae20d0ef1a3e52962b37ae956357de4eba5bf2a61e2aca74e86e0719fe93292ad79681357f1aded5613286041bff50b18c5137db4d513db5f5dec2685952ac4b77f725d0d9425b92648a228c8a3c6b74c3010299fdac3966e77d60d1a7b669ef83c7ca37b57bf36ccbccfe6e5be5a11d645c63398b22c49dc107f", 0x1000}, {&(0x7f0000000400)="f39795e7ee12cdb0774521871a76c643fd5f0fb922ad2f58c19c58c9ed6f06f2d771c88f8da40062da1bfc334a5272359b8616b17c033f0d5ada36a2", 0x3c}], 0x4, 0x0, 0x7fffffff) (async)
sendmsg$802154_raw(r3, &(0x7f0000001f40)={&(0x7f00000008c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000001f00)={&(0x7f0000000900)="8d58fd114a0514f0a248cfbd26cf0ece0c25c90c2eab4b2d7787f33784fcc3e54db22d9d5ce1174a7309011408db788a5895c353222cf609ad34f5a62010b0054a608f8e2fe230e9d13c635bacd455737ab1bb7bdd01c73aabb6c24cdd167cefa56f3ec1479623c65b00691140c176b289badbb83a809c3427f4da92701e2c356b8abc39adf85a5cd0370cf4102908adf087aff9d92faba1a5d09f3956b879ddb1248223cf89de424dfe6a0bdbd300165ca2b93f1f0374b96fe613d16d81b069df85398547eae5a0", 0xc8}, 0x1, 0x0, 0x0, 0x20004050}, 0x8084) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x54, r9, 0x649, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x23}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0xc0)

821.759914ms ago: executing program 1 (id=3345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000400000000000a808000000000070000000014000200fc02000000000000000000000000000114dbf0928b690e6cac0000000000000000000001"], 0x44}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000062cdd03c1a78d100000000000114000200fc020000000000000000000000000001"], 0x5c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x5) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) (rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYBLOB="c288b52c0bad405e3a2827d4e63e642b9e8729aa6842792e01a95638ba909bbaca7a090382f2e9cd06c72afdddd582fd74f814c1964dfa52e04911d4d2d2a566476a76fbd15a1df830e6d12472ebea7944fe79be218d655f569d626985a6bf8ae0cb0d59", @ANYRESDEC=r2], 0x50) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2}, {0xcb29, 0x6, 0x20053e5, 0x20}, 0x20000000, 0xfffffffd, 0x1, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x1502, 0x4, 0x1, 0x0, 0x0, 0x6}}, 0xe8) (async, rerun: 32)
r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$sock_int(r7, 0x1, 0x3, 0x0, &(0x7f00000000c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r4, @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x8001}, 0x18)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r9 = socket(0x10, 0x3, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r11}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r12, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r9, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x5, 0xbe, 0xfe75, &(0x7f0000000540)="000000000000000000000001e3700f95149a647eb6cafe982a3e7642e89482e0e9da9ce4390cd23832f27fb5f9dc91e3aacea2e6c0bd2e41b32f41f0a2c223633710d28457cdc1606a047a1958ccb5dca624bdecabc30539af772cc8d7a6041165e0e43acec76b21065de71ed46e1ad120afd0f6257237a1fd78833dfe255e3b5bd10a2a7ac738de16068e3c14e5bce33746999398c5f62019895c9a0f5a48714ba589f31eaecf79ca1b7de00c95114d14be314d245c879fc0b775718b11", 0x0, 0x74a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}, 0x50) (async)
socket$inet6(0xa, 0x3, 0x5) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0xb) (rerun: 64)

821.331092ms ago: executing program 1 (id=3346):
r0 = socket$inet(0x2, 0x3, 0x33)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000280), 0x6d, 0x81)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x7)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
sendmmsg$inet(r6, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001440)="2f233fb00f34cdbb95b143d1530d162e133350202242db7f72b071a56567e0594678eb9b8b27947e823a36085213e4bcf9fe3fe6770f993ea8bfcd83054f097adcdaa6cf67611ed4daa0a735ac65458eee2198f6ab27038b3f8b870b59f743ffe5e70492a6fce900f50b3b6d225a3ac2f6d54b4764bb63ad67a16f5f12d9b66ccfd950d741513bb5ccf303447e9cff42061896780ba7efd699fe8069c53fe617a2bda4b44a4a60a54fa7b2c0782fb2e034fee378a7415a06e6b3b1d6e44b2b517dd865e5fc6a86d48ad53de819483474bd78ae39ce0bde1eef04fc6016e885cc098ce9b8bf8aa5d23b806bec4e76413f8efa719ff426cdd42cee3f31af297fee023e25ffbcd32baadf10262081dbd982cc2ef2be4084f5389e6e9a2f3203873c2c618c21819415189a4208c0c29a900ede97bf622ce87d9faf8b733b80f8c94e4091aee2a16e3f8dd90f815093909c00644cba5146f1445f57c7120b0b16e23450d94cf79188092c595ca156bd0986fe5f050d21aecbe9d4b60ace9910dcf5b71ac678c05c405bb2a9d3714bae080e3b42a142dd3f38d1a2588f8c11e1735a86201d095577fb5c03ee3eaaf0466e0524b0c9b109007d6c31da5be476b8d2d3205a621cf45234e8eaa8afbc94077ddf9b9db9c002cbe30dd50a2c1605e17b66b53d6721c76504b058b8cb3440692a18f137386571a9515ee56652c1bda2ba26a7e446f7bdbffa5f3ee0ffa5482de09f214cdb0ab650502fec2aa84954ce54d45c6d96f713419bc38f6b8af5693208c7faa737ef04e40f9713c6c3bba7b6c6182ae17fb8ee21b514e9af1e7f32cd4ddbea04d5d4ae38c49e41d45dada66bd222cb24a3fdc98513acd9119a9965182144f667a1f96f3a6c087cdcca0206be9e63cc764aa09949424a6b0eed1321adf598efb65aadf0cff67f03727656769bb783eb16e871a93e5d0dab42ffc43977260148a8b913b57c7a869c8f754904e78a6eea0bb55c5705e97e623d16c807d0f295caf6a5aa81afb5e2508b170ece6ebeeaae75ed9102530699d9c90d7194a2e0bd6dced3df2d6e55db49573934f97f5041baaedbecafbb09f6ad8d181339ed549a5aa5c7be9eff1a0145f292d58a9458321cfab1c10621d624b9c26891629d03c992d51bd0c61f1fb9b39468ea0b51b8d5d18690efaf8f89e1d29431af091df805a724521fac15ef8941d7ef502f5b4c3bde2929d49181646e7d51fa7e2e824455eefa17623d4e7b4b4b48abcacb699f5d7157f4c37b045085a2bfe58ac4a14ead426436adcc81c6e1f9f68228941a7643d980643c4f5e0f845812f3c7ea0738b8e738d13ab79a82bc6473550acf4f595b5221f4b1a43e86a6e0f930cc070e6e89cdef19d70a23eebe356c0bb0d9e4c6a9af906e6606c20b678b24fc63bdd77dfa2c50b7cad03b25a8f268551f5207fc67de8bd7295728ca58c98801297a678474f28360e5ed2d283bd108728ecb0cc075f5bdc2bc10d3e704a9f5ae27dd0873f4cfd5bab48cea2eac2fe6d96d72de03b806f9f6e235cacf78727ec8a8543569aa0d09ec029800ed6f472455ee52c3449fe9ee1b10dea7742d6a407d387d0ffa6d88b933e024e1b15199259a4e4c8357a0c285f12ba3d9120bb7d53d14fdd4319905a847f9a78b9b644b657a8d418bb9788ec21c25ce8196b0911876b5f5e1f56147ae54127513fd5158b6c09a32bd2904dd8a359abfcb475ccdff0dbb23f1944fc2f41b64eb11460383aafb368aa6723b00188fb2204d6d59cc22802d5dce7cb560093e5f35fd410ed9017b73ff745a691015c161092d49d0ebf12c8e967909450f979f8da5d1af67e73ed1061105d66e80a7dfb7ead7ac8a78e7d1795fbea18b6b9b67436bc6b53790c1037d959cf32169bd66bd07938407753d576d0f539c7186dad924508aa619d0abb3c128a4772359e9f69cbda1f79bfc60388fdca75e9f44b1acba0ff9a9ba1ffd1608ccd6421667397a3a01fb066a1301b6fdeb4f4ce975de55b84ac293c59f20bf4965b5aa02209598f688316c6df87d1583aa3990619de1e1c93bbe0bd8888168a510421dd38b7183e693da817aa35234ee1c761217fef5ec73e93a1792a478c9d824c34f06a7b7b897693b96e9c26834c0d7d953b49f36c55b34e72e66504f4b1447d4115535c4468dbe45819a21ccc8657a372d41a1e24f79fc8beaad4440fcfcdef0d45c67044943cb2c788f60170ad9147f8ea35e9a7eeadad995e1f78497ab5d2568501bda016e06762d405c8c24c15413962071218837f82c3c7670cb5caa750bba7afc5e03304d1be36fa1d2d52d29ad1969a7b9cee3c9e6ddc8a46eef039b9d1c535c066dbd8df6fd52b0cd24f4113fca11ec22ed072430a83551ec6e29dbef0852e36cc08a83193b054467c8147ecf60b70c0d9730f776a0b4924e6c6847efd87a4fb9f1c071b0ec751906bae6b50aafa58dbe51a8c8442c1ba03ea181727417d59cf0208f4dfb45ce67e28dc7ad555d54aeeeb05f2204a0e24e3df5754b9152e177bc5c94ddcb97c07ec60441f63c3559048ad6bca0bb97da50e167fb23a43b0bccd77c0f4543e8b7ad51fb20ed7240975182693455112ffb3a5b4e957f86ba8ebced4c9f374833620477b1f579dadbc85a5939376b47850742d7002436af7ca7353382916441fd27689d59f3237f50c9129ceba901fd82caae73d8e632ff1b9a118770b9bb767055b076e84ec13c2887efc44ad984422e8e14b44ab990046134ce53dff59aa8371d72a85a7d7c77618f2dbc91111529330cb1f728f1b8f5f3b9a002a955d2ee129c15cadd480fa58e1d2cfc7300b91a6a0b732f0e86bcf72117df07f952a3ceaf3f1c573b8dd1be5d8db3f1a86a52e0c1e4ef272bf37d58587de947e539908f72985f64c1a0afdcf3f0c358869752e9a32042e66b15831310c1ca87716a9622363a2c85d0837136bb3a00b84b66495cd68d30762a20e33d78e74f091ad270ecfaf2646e1c266ed33b5ac58149818666ae83b1508cf8c98b30108ca1e7f77dede2a6d40b3c7b5c63f01e8985ad7e1c4fef4268649937e4f8dcb7ce5be0b6d57a8de2e2b84ced66c1a37a3490714b92505867d948214674298d4362f0325050b1838a1a38759fcd2724d356568ad822d71fa7e8cf53d08937f25eee30ecde2cf898d4de8625529ed25f9a726fe6733bafb7b60b04ce79e52cf9eb2499b901f7b76c1bd9972420c687080e3acd0f1d824b04012c8b81177dda1141f9747c2c838ee6054cb73caac2dd0f648a8177dcb0304404e7cbcd0890885742aab419f7473f5fbc26fccc201f33b89d7f1c2f39afc33dd678ce0642f8880b582b204898618f2b3e6fbe3dd876409127d6ff693cd611ce492f5ae467b8c1b4b2172115274c1e262c49b6918235ffe5349b625d88b214c733883b06601f976fbdf50694f2c205079c93648487aa24902e3a379035c80576c73e314dcc74214f5f68812fa993c5b35cdf8a3d9b204ff2e89d9b289e98d5b9c5621b5dab4e49ce5a06d9e8ef191ffe874442c37750da0104fad9daeedbafc24648b66d5851ba6c7022e328a2e9ac05682df35390b60db4e8af6f733e43264581cf2451b52428bcd7611ac2aac6ba6977a98709fe8fde693efd8b859155b79a97fc75a9f4a0b596b06734d74acbc2cd59cfc513ddae1fa6833e1eb5d311b24ad2ec35838917414b98a5796ed3085f025a2eb45cd8005616be4ad48a9b7922741a669bb1ba30cebe7b6ebb39f9cc48a92daef0fa9444abb1770b9db96810f03e6913b5cb159545c0b0bb0cccf4aae84ef4b858bf7896dbd26f76416cde4e99923713be8468c4230cdf3855090121c3f7da365b58bc9faf7b15e0b103b60f424865ad6b83072750607e8a8593a58b7b7c8dd19e97b90f3f6758e0b458053e086167ecde7aa76f2d92cf60da90b0696892a5ff95a4d319f534a100942ebaf24114deb14e3ac7ba445116d9e1c0c3efc6b160b944c31edc49fb132eebf2e481e6625247fd589235813d576fea69b289ee8b781d22c747c7ff50081f4ea713fa8379d95d9e3ef809a80aca1df81fac8a7ecd24691055491020508565b496f11e0d602fe5afcbd9b211971032c6000e295f27c0d2a2457398403348fde698e92a104d91f87bf98b1c9bee5b2c249400a76fac6465e0d6eb494ee240ccea467cb7e8bfc7c3bf9bb701a133fd8fbed9cd6e79d801f65196faa8564ae3dfa192e012ef0d27351bc3117e54629237f6", 0xbc1}], 0x13}}], 0x2, 0x40080c0)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x50}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4081)

348.263163ms ago: executing program 2 (id=3360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000854}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}})
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r4, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000440)={<r8=>0x0, @in6={{0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x400, 0x7}, &(0x7f00000003c0)=0x90)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000600)={r8, @in6={{0xa, 0x4e21, 0x1200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, [0x1, 0x4, 0x7, 0xfffffffffffffbff, 0xf, 0xfffffffffffffff7, 0xc9, 0x7fffffff, 0x6, 0x0, 0xffffffff7fffffff, 0x9, 0xff, 0xfffffffffffffffa, 0x3]}, &(0x7f0000000580)=0x100)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="dbdf367a688e65fcbad63a9cc91b", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$int_in(r6, 0x5452, &(0x7f0000000500)=0xd0)
sendmsg$alg(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000540)="2c9cc39f56", 0x5}], 0x1, 0x0, 0x0, 0x4011}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r3, 0x2f, 0x0, 0x4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x6c, 0xf8, &(0x7f0000000000)="2a42430a6b497f65453e909c68d0a59ef6bd7e6134a2f3ce7a0c1f6d51d2a9a7bdba62b99073168aa0797c5b27c78615ce74c5d34b2e26bb2853050123b6fd0d4ca3ba5164febf746498c8a7551df9ca246cd1aa520ba7d98df83e8385769942a49f39df0414098ab065d5c4", &(0x7f0000000080)=""/248, 0xe, 0x0, 0xe, 0x64, &(0x7f0000000180)="160fcaa5e8c1f512cf3f686c2fb3", &(0x7f00000001c0)="7c5de51a0d743691918feb58c0067d7ef67520a6c72a54bd386d6bd8408191375fe619c64f7f13b07608f4915d77769c901cce493182b8005f979c91a7616aa9d9b40efbc93292db3aed5a1dfdffec40e3cb9f9f71c3cc6800247a15cfc47a298c53e64d", 0x4, 0x0, 0x80000000}, 0x50)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000700))

210.525644ms ago: executing program 2 (id=3361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x90)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r15, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r16 = socket(0x1, 0x803, 0x0)
getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

141.72961ms ago: executing program 2 (id=3362):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0xff05, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r4, r8, 0x5, 0x1, 0x1}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10)
r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r11, 0x401, 0x70bd28, 0x10002, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

70.717572ms ago: executing program 2 (id=3363):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7e, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x40, 0x20, 0x5, 0x5}}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="d85e5a7acf9c6ab7fa9b09a30af30c91a6688fcd2d65517ecf4475204b33928fa9b0876c29d90b9712b13c0b308b74c429be936ca65cda91909fdbce832061084a28a4ba077558d76675b8b1667f9bd32ff950157c12e6b1c8e1e80cea808ab4e1d30c27aefba076ac8a3168d8d57afc801a31104bf0ade3d3a3e02d35a633b9ea6640c51bd0da30ed1e2e55b53e46adad75156a7b80751252c31078ba899abaf321d5b3fcade9548ee29998616836e61d1bcdc74a770f3a529b80488a17e9432b6a455456fac4bba3b2b6f227c00ae17e2ed3ec04dd7bb430718fbbec1b142f359129d9cdbd293a4f4c48afbe7a183951305d5bc0"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xb, 0x0, &(0x7f00000002c0)="f80c48c8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000085000000610000008500000007000000950000007557b200000000", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', <r6=>0x0}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0) (async)
r7 = socket$inet6(0xa, 0x3, 0x3c) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000700)={r8, r3, 0x9, 0x34, &(0x7f00000003c0)="0603d60c2bb2160c8a9023fd4391d05e0c763912e24d9dc28817268f7c864c8e900a2d3f0d8f4009400c238423f1596bd447bda6", 0xc, 0x6, 0xfffa, 0x1, 0x9, 0x1, 0x1, 'syz1\x00'})
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r7, 0x0, 0x0) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x4c, 0x12, 0x1, 0x70bd29, 0x25dfdc01, {0xb, 0xa3, 0x4, 0x9b, {0x4e20, 0x4e1f, [0x7, 0x0, 0x3ffffffe, 0x7], [0xd, 0x4, 0x6, 0xbd6], 0x0, [0x4, 0x7]}, 0x4, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r12=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r12], 0x20, 0x6044}, 0x6)

69.409561ms ago: executing program 2 (id=3364):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r5=>r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r7, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) (async)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r7, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008044)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x2000001, 0x40a8011, r8, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=<r10=>0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r10, @ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0)

0s ago: executing program 2 (id=3365):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), 0x4)
r1 = socket(0xa, 0x2, 0x8fa7)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xd1, 0x0, 0x4)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x59, 0x6, "040a94ad046341ab6f7614984970c7b6ad57aec882433707738b8cd8b7028815001a1243528e610a8b88b0f540e9f05a2c2813d6b0015a8cc6517a8e91d87c05352b023655e02be996d55664ae631628f66164011a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x318, 0x9, 0xa, 0x6907920b1b86415c, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x2d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd464}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6f6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x244}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x452}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc58a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffb6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c8e87dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e0}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}]}, @NFT_MSG_NEWRULE={0x2d4, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0x66, 0x7, 0x1, 0x0, "a6a91ba47d33d37706fb47c8f0525ddf52f6a096949d062048c263e66fd946b83c5b29b0937c2d2995fd35ca20a25075373970714228019445611b5342221976585c29aedd723e8269aa95416cd484471797989a895593514e823569167b9c962eb2"}, @NFTA_RULE_EXPRESSIONS={0x258, 0x4, 0x0, 0x1, [{0x244, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x230, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x43, 0x1, "85f16d2fb8479eda11f096518bdb21212a448f0f0b79f1e21b5fc80d9b1259f2e77c482119ae4c513cf7dfd3b761368f7cde63c46ad7c8c2c6c32a5c6eb62f"}, @NFTA_DATA_VALUE={0xa3, 0x1, "56ceffd05c6ea511a4b5afc2866088e541cd56416da0712aed643cc2814b9df2ca45d4e06ca5b1a2d01bfddefba42f2858f679fc8683c8f09817c8fb3f8f5f43c4c179bba015d0b6cede51e23750a5e58dc47af0a17ac53262c233e108d8820a0a87b61a051e0dfb2cd0d588b60c2202304b672e19ef7bbe4f44cfbb29c2bf2514619bb1bbf32b5625caf7881e8b61dc001a0e7402960baafd4b8dcb0656cb"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x848}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x42000084)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

kernel console output (not intermixed with test programs):

_tun: entered allmulticast mode
[  160.265382][T13668] dvmrp8: left allmulticast mode
[  160.318145][T13671] siw: device registration error -23
[  160.368582][T13667] syz_tun: left allmulticast mode
[  160.448635][T13681] 8021q: adding VLAN 0 to HW filter on device bond39
[  160.526169][ T9460] erspan0: left promiscuous mode
[  160.975466][T13735] validate_nla: 5 callbacks suppressed
[  160.975478][T13735] netlink: 'syz.1.2052': attribute type 10 has an invalid length.
[  160.983754][T13735] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  160.987006][T13735] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  160.990639][T13735] tipc: Resetting bearer <eth:syzkaller0>
[  161.015155][T13737] netlink: 'syz.1.2053': attribute type 1 has an invalid length.
[  161.034640][T13737] 8021q: adding VLAN 0 to HW filter on device bond26
[  161.039717][T13737] bond25: (slave bond26): making interface the new active one
[  161.042872][T13737] bond25: (slave bond26): Enslaving as an active interface with an up link
[  161.050364][T13737] bond25: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  161.054690][T13737] bond25: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  161.208736][T13749] wg1 speed is unknown, defaulting to 1000
[  161.211696][T13749] lo speed is unknown, defaulting to 1000
[  161.457871][T13775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.460761][T13775] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  161.463263][T13775] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  161.466456][T13775] tipc: Resetting bearer <eth:syzkaller0>
[  161.494675][T13778] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.503020][T13778] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  161.507093][T13778] CPU: 0 UID: 0 PID: 13778 Comm: syz.1.2065 Not tainted syzkaller #0 PREEMPT(full) 
[  161.507114][T13778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.507124][T13778] Call Trace:
[  161.507130][T13778]  <TASK>
[  161.507137][T13778]  dump_stack_lvl+0x189/0x250
[  161.507160][T13778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.507177][T13778]  ? __pfx__printk+0x10/0x10
[  161.507195][T13778]  ? kernfs_root+0x1c/0x230
[  161.507213][T13778]  ? kernfs_path_from_node+0x2f/0x290
[  161.507227][T13778]  ? kernfs_path_from_node+0x250/0x290
[  161.507242][T13778]  ? kernfs_path_from_node+0x2f/0x290
[  161.507258][T13778]  sysfs_warn_dup+0x8e/0xa0
[  161.507273][T13778]  sysfs_do_create_link_sd+0xc0/0x110
[  161.507288][T13778]  device_add_class_symlinks+0x1cf/0x240
[  161.507306][T13778]  device_add+0x475/0xb50
[  161.507320][T13778]  wiphy_register+0x1ba6/0x28d0
[  161.507348][T13778]  ? __pfx_wiphy_register+0x10/0x10
[  161.507368][T13778]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  161.507420][T13778]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  161.507440][T13778]  ieee80211_register_hw+0x3425/0x4080
[  161.507464][T13778]  ? ieee80211_register_hw+0x14e1/0x4080
[  161.507482][T13778]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  161.507500][T13778]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.507522][T13778]  ? __hrtimer_setup+0x187/0x210
[  161.507535][T13778]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  161.507557][T13778]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  161.507587][T13778]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  161.507605][T13778]  ? trace_kmalloc+0x1f/0xd0
[  161.507622][T13778]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  161.507642][T13778]  ? kstrndup+0xbf/0x160
[  161.507659][T13778]  hwsim_new_radio_nl+0xea4/0x1b10
[  161.507677][T13778]  ? __pfx___nla_validate_parse+0x10/0x10
[  161.507703][T13778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.507725][T13778]  ? __nla_parse+0x40/0x60
[  161.507747][T13778]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  161.507768][T13778]  genl_family_rcv_msg_doit+0x215/0x300
[  161.507787][T13778]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.507807][T13778]  ? bpf_lsm_capable+0x9/0x20
[  161.507826][T13778]  ? security_capable+0x7e/0x2e0
[  161.507849][T13778]  genl_rcv_msg+0x60e/0x790
[  161.507867][T13778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.507882][T13778]  ? __kasan_slab_alloc+0x6c/0x80
[  161.507899][T13778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.507916][T13778]  ? __netlink_lookup+0xbd/0x810
[  161.507929][T13778]  ? rcu_is_watching+0x15/0xb0
[  161.507945][T13778]  netlink_rcv_skb+0x208/0x470
[  161.507966][T13778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.507982][T13778]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.508005][T13778]  ? lock_release+0x4b/0x3e0
[  161.508025][T13778]  ? down_read+0x1ad/0x2e0
[  161.508048][T13778]  genl_rcv+0x28/0x40
[  161.508064][T13778]  netlink_unicast+0x82f/0x9e0
[  161.508086][T13778]  ? __pfx_netlink_unicast+0x10/0x10
[  161.508105][T13778]  ? netlink_sendmsg+0x642/0xb30
[  161.508117][T13778]  ? skb_put+0x11b/0x210
[  161.508131][T13778]  netlink_sendmsg+0x805/0xb30
[  161.508146][T13778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.508159][T13778]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.508174][T13778]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.508189][T13778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.508202][T13778]  __sock_sendmsg+0x21c/0x270
[  161.508222][T13778]  ____sys_sendmsg+0x505/0x830
[  161.508237][T13778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.508255][T13778]  ? import_iovec+0x74/0xa0
[  161.508273][T13778]  ___sys_sendmsg+0x21f/0x2a0
[  161.508288][T13778]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.508306][T13778]  ? futex_wake+0x4b2/0x560
[  161.508335][T13778]  ? __fget_files+0x2a/0x420
[  161.508347][T13778]  ? __fget_files+0x3a0/0x420
[  161.508362][T13778]  __x64_sys_sendmsg+0x19b/0x260
[  161.508378][T13778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.508431][T13778]  ? rcu_is_watching+0x15/0xb0
[  161.508446][T13778]  ? rcu_is_watching+0x15/0xb0
[  161.508461][T13778]  do_syscall_64+0xfa/0x3b0
[  161.508474][T13778]  ? rcu_is_watching+0x15/0xb0
[  161.508487][T13778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.508503][T13778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.508518][T13778] RIP: 0033:0x7f733eb8ebe9
[  161.508531][T13778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.508545][T13778] RSP: 002b:00007f733f9e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.508560][T13778] RAX: ffffffffffffffda RBX: 00007f733edb5fa0 RCX: 00007f733eb8ebe9
[  161.508572][T13778] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  161.508581][T13778] RBP: 00007f733ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  161.508591][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.508599][T13778] R13: 00007f733edb6038 R14: 00007f733edb5fa0 R15: 00007ffc28087818
[  161.508616][T13778]  </TASK>
[  161.858701][T13796] tipc: Resetting bearer <eth:syzkaller0>
[  161.917662][T13800] bridge0: port 2(vlan1) entered blocking state
[  161.920161][T13800] bridge0: port 2(vlan1) entered disabled state
[  161.922650][T13800] vlan1: entered allmulticast mode
[  161.924710][T13800] bridge0: entered allmulticast mode
[  161.929434][T13800] vlan1: left allmulticast mode
[  161.931352][T13800] bridge0: left allmulticast mode
[  161.939495][T13799] bridge0: port 2(vlan1) entered blocking state
[  161.941896][T13799] bridge0: port 2(vlan1) entered disabled state
[  161.944574][T13799] vlan1: entered allmulticast mode
[  161.947953][T13799] bridge0: entered allmulticast mode
[  161.950977][T13799] vlan1: left allmulticast mode
[  161.952922][T13799] bridge0: left allmulticast mode
[  162.066228][T13804] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.126549][T13813] siw: device registration error -23
[  162.251200][T13822] wg1 speed is unknown, defaulting to 1000
[  162.256580][T13822] lo speed is unknown, defaulting to 1000
[  162.427865][T13833] __nla_validate_parse: 22 callbacks suppressed
[  162.427881][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2081'.
[  162.525000][T13838] syzkaller0: entered promiscuous mode
[  162.530741][T13838] syzkaller0: entered allmulticast mode
[  162.562221][T13843] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2084'.
[  162.573200][T13843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.579599][T13843] tipc: Resetting bearer <eth:syzkaller0>
[  162.638061][T13850] wg1 speed is unknown, defaulting to 1000
[  162.640888][T13850] lo speed is unknown, defaulting to 1000
[  162.712628][T13859] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  162.719063][T13859] CPU: 1 UID: 0 PID: 13859 Comm: syz.1.2088 Not tainted syzkaller #0 PREEMPT(full) 
[  162.719077][T13859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.719084][T13859] Call Trace:
[  162.719087][T13859]  <TASK>
[  162.719091][T13859]  dump_stack_lvl+0x189/0x250
[  162.719107][T13859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.719117][T13859]  ? __pfx__printk+0x10/0x10
[  162.719128][T13859]  ? kernfs_root+0x1c/0x230
[  162.719138][T13859]  ? kernfs_path_from_node+0x2f/0x290
[  162.719147][T13859]  ? kernfs_path_from_node+0x250/0x290
[  162.719155][T13859]  ? kernfs_path_from_node+0x2f/0x290
[  162.719164][T13859]  sysfs_warn_dup+0x8e/0xa0
[  162.719173][T13859]  sysfs_do_create_link_sd+0xc0/0x110
[  162.719181][T13859]  device_add_class_symlinks+0x1cf/0x240
[  162.719191][T13859]  device_add+0x475/0xb50
[  162.719199][T13859]  wiphy_register+0x1ba6/0x28d0
[  162.719214][T13859]  ? __pfx_wiphy_register+0x10/0x10
[  162.719224][T13859]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  162.719234][T13859]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  162.719243][T13859]  ieee80211_register_hw+0x3425/0x4080
[  162.719255][T13859]  ? ieee80211_register_hw+0x14e1/0x4080
[  162.719265][T13859]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  162.719274][T13859]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.719286][T13859]  ? __hrtimer_setup+0x187/0x210
[  162.719293][T13859]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  162.719338][T13859]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  162.719355][T13859]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  162.719365][T13859]  ? trace_kmalloc+0x1f/0xd0
[  162.719375][T13859]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  162.719386][T13859]  ? kstrndup+0xbf/0x160
[  162.719396][T13859]  hwsim_new_radio_nl+0xea4/0x1b10
[  162.719406][T13859]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.719420][T13859]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.719432][T13859]  ? __nla_parse+0x40/0x60
[  162.719443][T13859]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  162.719455][T13859]  genl_family_rcv_msg_doit+0x215/0x300
[  162.719465][T13859]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  162.719477][T13859]  ? bpf_lsm_capable+0x9/0x20
[  162.719487][T13859]  ? security_capable+0x7e/0x2e0
[  162.719501][T13859]  genl_rcv_msg+0x60e/0x790
[  162.719510][T13859]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.719518][T13859]  ? __kasan_slab_alloc+0x6c/0x80
[  162.719528][T13859]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.719538][T13859]  ? __netlink_lookup+0xbd/0x810
[  162.719544][T13859]  ? rcu_is_watching+0x15/0xb0
[  162.719554][T13859]  netlink_rcv_skb+0x208/0x470
[  162.719565][T13859]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.719573][T13859]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.719586][T13859]  ? lock_release+0x4b/0x3e0
[  162.719597][T13859]  ? down_read+0x1ad/0x2e0
[  162.719605][T13859]  genl_rcv+0x28/0x40
[  162.719613][T13859]  netlink_unicast+0x82f/0x9e0
[  162.719625][T13859]  ? __pfx_netlink_unicast+0x10/0x10
[  162.719635][T13859]  ? netlink_sendmsg+0x642/0xb30
[  162.719641][T13859]  ? skb_put+0x11b/0x210
[  162.719649][T13859]  netlink_sendmsg+0x805/0xb30
[  162.719657][T13859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.719665][T13859]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.719672][T13859]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.719680][T13859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.719687][T13859]  __sock_sendmsg+0x21c/0x270
[  162.719698][T13859]  ____sys_sendmsg+0x505/0x830
[  162.719706][T13859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.719716][T13859]  ? import_iovec+0x74/0xa0
[  162.719725][T13859]  ___sys_sendmsg+0x21f/0x2a0
[  162.719735][T13859]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.719744][T13859]  ? futex_wake+0x4b2/0x560
[  162.719759][T13859]  ? __fget_files+0x2a/0x420
[  162.719766][T13859]  ? __fget_files+0x3a0/0x420
[  162.719774][T13859]  __x64_sys_sendmsg+0x19b/0x260
[  162.719783][T13859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.719792][T13859]  ? rcu_is_watching+0x15/0xb0
[  162.719800][T13859]  ? rcu_is_watching+0x15/0xb0
[  162.719808][T13859]  do_syscall_64+0xfa/0x3b0
[  162.719816][T13859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.719823][T13859]  ? exc_page_fault+0x9f/0xf0
[  162.719834][T13859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.719841][T13859] RIP: 0033:0x7f733eb8ebe9
[  162.719850][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.719857][T13859] RSP: 002b:00007f733f9e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.719867][T13859] RAX: ffffffffffffffda RBX: 00007f733edb5fa0 RCX: 00007f733eb8ebe9
[  162.719873][T13859] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  162.719878][T13859] RBP: 00007f733ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  162.719883][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.719888][T13859] R13: 00007f733edb6038 R14: 00007f733edb5fa0 R15: 00007ffc28087818
[  162.719897][T13859]  </TASK>
[  162.756166][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'.
[  162.807067][T13864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2090'.
[  162.836193][T13850] netlink: 'syz.2.2086': attribute type 13 has an invalid length.
[  162.901117][T13850] netlink: 'syz.2.2086': attribute type 17 has an invalid length.
[  162.908709][T13850] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.912085][T13850] 8021q: adding VLAN 0 to HW filter on device team0
[  162.914484][T13850] tipc: Resetting bearer <eth:team0>
[  162.957102][T13869] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2091'.
[  162.972219][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'.
[  163.083551][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'.
[  163.127039][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'.
[  163.199127][T13892] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2098'.
[  164.234347][T13929] bond21: (slave veth21): Releasing backup interface
[  164.251248][T13929] bond25: (slave bond26): Releasing backup interface
[  164.289736][T13938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'.
[  164.317074][T13939] netlink: 'syz.0.2112': attribute type 12 has an invalid length.
[  164.321427][T13933] netlink: 'syz.0.2112': attribute type 12 has an invalid length.
[  164.324859][T13943] netlink: 'syz.2.2114': attribute type 4 has an invalid length.
[  164.331099][T13943] sctp: [Deprecated]: syz.2.2114 (pid 13943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.331099][T13943] Use struct sctp_sack_info instead
[  164.338749][T13943] sctp: [Deprecated]: syz.2.2114 (pid 13943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.338749][T13943] Use struct sctp_sack_info instead
[  164.536542][T13948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.550283][T13947] tipc: Disabling bearer <eth:syzkaller0>
[  164.788030][T13959] bond26: (slave erspan0): Releasing active interface
[  164.793388][T13959] bond0: (slave gretap5): Releasing active interface
[  164.795751][T13959] bond0: (slave gretap5): the permanent HWaddr of slave - ba:da:c5:68:b3:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  164.801652][T13959] bond0: (slave gretap6): making interface the new active one
[  164.806458][T13959] bond0: (slave gretap6): Releasing active interface
[  164.812414][T13959] bond26: (slave veth21): Releasing active interface
[  164.823752][T13960] net_ratelimit: 9 callbacks suppressed
[  164.823772][T13960] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  164.953006][T13967] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  164.966558][T13967] veth23: entered promiscuous mode
[  165.101474][T13977] wg1 speed is unknown, defaulting to 1000
[  165.101906][T13971] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  165.106869][T13977] lo speed is unknown, defaulting to 1000
[  165.110083][T13971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  165.114085][T13971] gretap5: entered promiscuous mode
[  165.200153][T13982] syzkaller1: entered promiscuous mode
[  165.202000][T13982] syzkaller1: entered allmulticast mode
[  165.255204][T13989] netlink: 'syz.2.2127': attribute type 1 has an invalid length.
[  165.268191][T13989] 8021q: adding VLAN 0 to HW filter on device bond40
[  165.280224][T13989] bond40: (slave bridge28): making interface the new active one
[  165.284152][T13989] bond40: (slave bridge28): Enslaving as an active interface with an up link
[  165.324686][T13989] tipc: Resetting bearer <eth:team0>
[  165.329172][T13989] tipc: Resetting bearer <eth:syzkaller0>
[  165.352580][T13992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.360647][T13992] tipc: Resetting bearer <eth:syzkaller0>
[  165.520797][T14009] veth23: entered promiscuous mode
[  165.530482][T14009] bond33: (slave veth23): Enslaving as a backup interface with a down link
[  166.339219][T14048] wg1 speed is unknown, defaulting to 1000
[  166.342268][T14048] lo speed is unknown, defaulting to 1000
[  166.385495][T14053] wg1: entered allmulticast mode
[  166.388841][T14053] tipc: Resetting bearer <eth:syzkaller0>
[  166.393586][T14053] validate_nla: 4 callbacks suppressed
[  166.393595][T14053] netlink: 'syz.1.2146': attribute type 10 has an invalid length.
[  166.399300][T14053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.402346][T14053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.507780][T14055] netlink: 'syz.2.2147': attribute type 9 has an invalid length.
[  166.694292][T14073] netlink: 'syz.2.2152': attribute type 1 has an invalid length.
[  166.703624][T14073] bond41: entered promiscuous mode
[  166.705524][T14073] 8021q: adding VLAN 0 to HW filter on device bond41
[  166.886534][T14079] netlink: 'syz.2.2154': attribute type 1 has an invalid length.
[  166.903928][T14079] 8021q: adding VLAN 0 to HW filter on device bond43
[  166.907526][T14079] bond42: (slave bond43): making interface the new active one
[  166.910166][T14079] bond42: (slave bond43): Enslaving as an active interface with an up link
[  166.915417][T14079] 8021q: adding VLAN 0 to HW filter on device bond42
[  166.941299][T14083] netlink: 'syz.2.2155': attribute type 1 has an invalid length.
[  166.950407][T14083] 8021q: adding VLAN 0 to HW filter on device bond44
[  166.976897][T14086] netlink: 'syz.2.2156': attribute type 11 has an invalid length.
[  167.311281][T14131] netlink: 'syz.2.2168': attribute type 1 has an invalid length.
[  167.490737][T14149] __nla_validate_parse: 20 callbacks suppressed
[  167.490753][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2172'.
[  167.679200][T14155] netlink: 'syz.2.2175': attribute type 4 has an invalid length.
[  167.682561][T14155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2175'.
[  168.162375][T14162] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2178'.
[  168.248594][T14164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.347647][T14175] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.454132][T14182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.456754][T14182] syzkaller0: entered promiscuous mode
[  168.457606][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'.
[  168.458525][T14182] syzkaller0: entered allmulticast mode
[  168.472832][T14182] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  168.475773][T14182] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  168.480166][T14182] tipc: Resetting bearer <eth:syzkaller0>
[  168.482676][T14181] tipc: Resetting bearer <eth:syzkaller0>
[  168.485771][T14181] tipc: Disabling bearer <eth:syzkaller0>
[  168.531659][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'.
[  168.534368][T14196] openvswitch: netlink: Unknown nsh attribute 0
[  168.536505][T14196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.598610][T14199] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2190'.
[  168.686501][T14200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2188'.
[  168.832378][T14217] netlink: 'syz.0.2196': attribute type 9 has an invalid length.
[  168.835376][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'.
[  168.859126][T14225] netlink: 'syz.0.2198': attribute type 1 has an invalid length.
[  168.876517][T14225] veth25: entered promiscuous mode
[  168.879422][T14225] bond34: (slave veth25): Enslaving as a backup interface with a down link
[  168.883549][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'.
[  168.887493][T14225] 8021q: adding VLAN 0 to HW filter on device bond34
[  169.019021][T14244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2201'.
[  169.032711][T14247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.035336][T14247] IPv6: NLM_F_CREATE should be set when creating new route
[  169.037703][T14247] IPv6: NLM_F_CREATE should be set when creating new route
[  169.040764][T14247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.153132][ T5885] hid-generic 0005:0B57:0000.0001: collection stack underflow
[  169.156951][ T5885] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed
[  169.160866][ T5885] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22
[  169.228678][T14267] netlink: 'syz.0.2209': attribute type 10 has an invalid length.
[  169.350547][T14282] 8021q: adding VLAN 0 to HW filter on device bond22
[  169.365160][T14282] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  169.369642][T14282] bond22: (slave macvlan4): Enslaving as a backup interface with a down link
[  169.419176][T14287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.428081][T14287] syzkaller0: entered promiscuous mode
[  169.432613][T14287] syzkaller0: entered allmulticast mode
[  169.452640][T14287] wg1 speed is unknown, defaulting to 1000
[  169.455819][T14287] lo speed is unknown, defaulting to 1000
[  169.587981][T14287] tipc: Resetting bearer <eth:syzkaller0>
[  169.592260][T14287] tipc: Disabling bearer <eth:syzkaller0>
[  169.665493][T14295] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  169.929501][T14298] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  169.934369][T14298] CPU: 0 UID: 0 PID: 14298 Comm: syz.0.2218 Not tainted syzkaller #0 PREEMPT(full) 
[  169.934387][T14298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.934397][T14298] Call Trace:
[  169.934403][T14298]  <TASK>
[  169.934409][T14298]  dump_stack_lvl+0x189/0x250
[  169.934433][T14298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.934448][T14298]  ? __pfx__printk+0x10/0x10
[  169.934463][T14298]  ? kernfs_root+0x1c/0x230
[  169.934481][T14298]  ? kernfs_path_from_node+0x2f/0x290
[  169.934495][T14298]  ? kernfs_path_from_node+0x250/0x290
[  169.934509][T14298]  ? kernfs_path_from_node+0x2f/0x290
[  169.934524][T14298]  sysfs_warn_dup+0x8e/0xa0
[  169.934538][T14298]  sysfs_do_create_link_sd+0xc0/0x110
[  169.934554][T14298]  device_add_class_symlinks+0x1cf/0x240
[  169.934571][T14298]  device_add+0x475/0xb50
[  169.934585][T14298]  wiphy_register+0x1ba6/0x28d0
[  169.934614][T14298]  ? __pfx_wiphy_register+0x10/0x10
[  169.934634][T14298]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  169.934654][T14298]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  169.934672][T14298]  ieee80211_register_hw+0x3425/0x4080
[  169.934696][T14298]  ? ieee80211_register_hw+0x14e1/0x4080
[  169.934714][T14298]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  169.934732][T14298]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.934786][T14298]  ? __hrtimer_setup+0x187/0x210
[  169.934801][T14298]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.934823][T14298]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  169.934851][T14298]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  169.934868][T14298]  ? trace_kmalloc+0x1f/0xd0
[  169.934887][T14298]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  169.934906][T14298]  ? kstrndup+0xbf/0x160
[  169.934924][T14298]  hwsim_new_radio_nl+0xea4/0x1b10
[  169.934943][T14298]  ? __pfx___nla_validate_parse+0x10/0x10
[  169.934969][T14298]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.934991][T14298]  ? __nla_parse+0x40/0x60
[  169.935013][T14298]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  169.935033][T14298]  genl_family_rcv_msg_doit+0x215/0x300
[  169.935052][T14298]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  169.935074][T14298]  ? bpf_lsm_capable+0x9/0x20
[  169.935092][T14298]  ? security_capable+0x7e/0x2e0
[  169.935114][T14298]  genl_rcv_msg+0x60e/0x790
[  169.935132][T14298]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.935146][T14298]  ? __kasan_slab_alloc+0x6c/0x80
[  169.935163][T14298]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.935181][T14298]  ? __netlink_lookup+0xbd/0x810
[  169.935200][T14298]  ? rcu_is_watching+0x15/0xb0
[  169.935219][T14298]  netlink_rcv_skb+0x208/0x470
[  169.935242][T14298]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.935258][T14298]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.935283][T14298]  ? lock_release+0x4b/0x3e0
[  169.935304][T14298]  ? down_read+0x1ad/0x2e0
[  169.935318][T14298]  genl_rcv+0x28/0x40
[  169.935331][T14298]  netlink_unicast+0x82f/0x9e0
[  169.935353][T14298]  ? __pfx_netlink_unicast+0x10/0x10
[  169.935372][T14298]  ? netlink_sendmsg+0x642/0xb30
[  169.935384][T14298]  ? skb_put+0x11b/0x210
[  169.935397][T14298]  netlink_sendmsg+0x805/0xb30
[  169.935412][T14298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.935425][T14298]  ? futex_unqueue+0x22/0x240
[  169.935439][T14298]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.935451][T14298]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.935466][T14298]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.935479][T14298]  __sock_sendmsg+0x21c/0x270
[  169.935497][T14298]  ____sys_sendmsg+0x505/0x830
[  169.935513][T14298]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.935531][T14298]  ? import_iovec+0x74/0xa0
[  169.935547][T14298]  ___sys_sendmsg+0x21f/0x2a0
[  169.935562][T14298]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.935578][T14298]  ? futex_wait+0x285/0x360
[  169.935607][T14298]  ? __fget_files+0x2a/0x420
[  169.935618][T14298]  ? __fget_files+0x3a0/0x420
[  169.935633][T14298]  __x64_sys_sendmsg+0x19b/0x260
[  169.935649][T14298]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.935668][T14298]  ? rcu_is_watching+0x15/0xb0
[  169.935681][T14298]  do_syscall_64+0xfa/0x3b0
[  169.935697][T14298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.935710][T14298]  ? exc_page_fault+0x9f/0xf0
[  169.935730][T14298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.935745][T14298] RIP: 0033:0x7f5dd998ebe9
[  169.935788][T14298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.935803][T14298] RSP: 002b:00007f5dda886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.935819][T14298] RAX: ffffffffffffffda RBX: 00007f5dd9bb6090 RCX: 00007f5dd998ebe9
[  169.935831][T14298] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  169.935840][T14298] RBP: 00007f5dd9a11e19 R08: 0000000000000000 R09: 0000000000000000
[  169.935849][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.935858][T14298] R13: 00007f5dd9bb6128 R14: 00007f5dd9bb6090 R15: 00007ffe1edeeba8
[  169.935893][T14298]  </TASK>
[  170.232525][T14301] tipc: Resetting bearer <eth:syzkaller0>
[  170.244148][T14305] 0X: renamed from caif0
[  170.248785][T14305] 0X: entered allmulticast mode
[  170.250459][T14305] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  170.423766][T14331] IPv6: NLM_F_CREATE should be specified when creating new route
[  170.425756][T14329] macsec2: entered allmulticast mode
[  170.427970][T14329] ip6gretap0: entered allmulticast mode
[  170.431007][T14329] ip6gretap0: left allmulticast mode
[  170.476188][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  170.478298][ T5233] Bluetooth: hci0: command 0x0406 tx timeout
[  170.631303][T14364] wg1 speed is unknown, defaulting to 1000
[  170.638363][T14364] lo speed is unknown, defaulting to 1000
[  170.737667][T14377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.740198][T14377] syzkaller0: entered promiscuous mode
[  170.742013][T14377] syzkaller0: entered allmulticast mode
[  170.768949][T14377] tipc: Resetting bearer <eth:syzkaller0>
[  170.771520][T14375] tipc: Resetting bearer <eth:syzkaller0>
[  170.774130][T14375] tipc: Disabling bearer <eth:syzkaller0>
[  170.879288][T14385] 8021q: VLANs not supported on gre0
[  171.506921][T14398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.711665][T14407] veth27: entered promiscuous mode
[  171.882652][T14414] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  171.919910][T14420] validate_nla: 5 callbacks suppressed
[  171.919924][T14420] netlink: 'syz.1.2254': attribute type 1 has an invalid length.
[  171.934238][T14420] 8021q: adding VLAN 0 to HW filter on device bond27
[  171.951162][T14420] 8021q: adding VLAN 0 to HW filter on device bond27
[  171.957561][T14420] bond27: (slave vcan0): The slave device specified does not support setting the MAC address
[  171.966979][T14420] bond27: (slave vcan0): Error -95 calling set_mac_address
[  172.014577][T14424] macvlan8: entered promiscuous mode
[  172.017889][T14424] macvlan8: entered allmulticast mode
[  172.019977][T14424] bond27: entered promiscuous mode
[  172.021892][T14424] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  172.024812][T14424] bond27: left promiscuous mode
[  172.058313][T14431] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.622827][T14440] __nla_validate_parse: 22 callbacks suppressed
[  172.622839][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'.
[  172.636011][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  172.669854][T14446] bond0: Device is already in use.
[  172.693711][T14449] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  172.725501][T14453] netlink: 'syz.1.2264': attribute type 1 has an invalid length.
[  172.729402][T14453] netlink: 'syz.1.2264': attribute type 83 has an invalid length.
[  172.754513][T14455] delete_channel: no stack
[  172.761518][T14455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.817867][T14462] wg1 speed is unknown, defaulting to 1000
[  172.818472][T14467] bridge0: failed insert local address into bridge forwarding table
[  172.822900][T14462] lo speed is unknown, defaulting to 1000
[  172.864166][T14469] wg1 speed is unknown, defaulting to 1000
[  172.867083][T14469] lo speed is unknown, defaulting to 1000
[  172.926140][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'.
[  172.967584][T14486] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  172.980922][T14486] bond36: entered promiscuous mode
[  172.982719][T14486] 8021q: adding VLAN 0 to HW filter on device bond36
[  173.009757][T14486] 8021q: adding VLAN 0 to HW filter on device bond36
[  173.012174][T14486] bond36: (slave wireguard0): The slave device specified does not support setting the MAC address
[  173.017956][T14486] bond36: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  173.034305][T14486] bond36: (slave wireguard0): making interface the new active one
[  173.036943][T14486] wireguard0: entered promiscuous mode
[  173.039920][T14486] bond36: (slave wireguard0): Enslaving as an active interface with an up link
[  173.064559][T14486] bond36: (slave wireguard1): The slave device specified does not support setting the MAC address
[  173.069682][T14486] bond36: (slave wireguard1): Enslaving as a backup interface with an up link
[  173.176096][T14498] wireguard1: entered promiscuous mode
[  173.177963][T14498] wireguard1: entered allmulticast mode
[  173.435757][T14509] netlink: 'syz.0.2279': attribute type 39 has an invalid length.
[  173.685453][T14518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.703667][T14518] syzkaller0: entered promiscuous mode
[  173.705594][T14518] syzkaller0: entered allmulticast mode
[  173.711913][T14518] tipc: Resetting bearer <eth:syzkaller0>
[  173.714527][T14518] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2281'.
[  173.721784][T14517] tipc: Resetting bearer <eth:syzkaller0>
[  173.754866][T14517] tipc: Disabling bearer <eth:syzkaller0>
[  173.802166][T14520] pimreg: entered allmulticast mode
[  173.851392][T14522] netlink: 'syz.0.2283': attribute type 5 has an invalid length.
[  173.858650][T14522] netlink: 'syz.0.2283': attribute type 7 has an invalid length.
[  173.901883][T14528] syzkaller1: entered promiscuous mode
[  173.904083][T14528] syzkaller1: entered allmulticast mode
[  173.920640][T14528] wg1 speed is unknown, defaulting to 1000
[  173.923506][T14528] lo speed is unknown, defaulting to 1000
[  174.008735][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'.
[  174.012015][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'.
[  174.382019][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'.
[  174.413398][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'.
[  174.461869][T14579] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.499097][T14583] wg1 speed is unknown, defaulting to 1000
[  174.501826][T14583] lo speed is unknown, defaulting to 1000
[  174.502207][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  174.540351][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'.
[  174.608609][T14594] Set syz0 is full, maxelem 0 reached
[  174.692615][T14598] veth0_to_bond: left allmulticast mode
[  174.694491][T14598] veth0_to_bond: left promiscuous mode
[  174.698439][T14598] bridge27: port 1(veth0_to_bond) entered disabled state
[  174.703456][T14598] bond34: left allmulticast mode
[  174.705338][T14598] bridge0: port 1(bond34) entered disabled state
[  174.712143][T14598] bond38: (slave gretap3): Releasing active interface
[  174.714246][T14598] bond38: (slave gretap3): the permanent HWaddr of slave - 32:f2:4b:4f:2b:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  174.720501][T14598] bond38: (slave gretap4): making interface the new active one
[  174.724301][T14598] bond38: (slave gretap4): Releasing active interface
[  174.730719][T14598] bond40: (slave bridge28): Releasing active interface
[  174.734923][T14598] bond42: (slave bond43): Releasing backup interface
[  174.965229][T14621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2310'.
[  174.974636][T14621] tipc: Disabling bearer <eth:team0>
[  175.128569][T14630] virt_wifi0: mtu less than device minimum
[  175.163715][T14636] gtp0: entered promiscuous mode
[  175.202673][T14643] netlink: 'syz.2.2316': attribute type 29 has an invalid length.
[  175.301290][T14657] netlink: 'syz.1.2321': attribute type 4 has an invalid length.
[  175.343402][T14664] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  175.399871][T14667] wg1 speed is unknown, defaulting to 1000
[  175.402313][T14667] lo speed is unknown, defaulting to 1000
[  175.530826][T14681] geneve0: entered promiscuous mode
[  175.532555][T14681] geneve0: entered allmulticast mode
[  175.541474][ T7116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 32936 - 0
[  175.544996][ T7116] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45199 - 0
[  175.552941][ T7116] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 32936 - 0
[  175.560426][ T7116] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45199 - 0
[  175.566979][ T7116] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 32936 - 0
[  175.569609][ T7116] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45199 - 0
[  175.572216][ T7116] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 32936 - 0
[  175.574892][ T7116] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45199 - 0
[  175.793624][T14694] netlink: 'syz.1.2331': attribute type 28 has an invalid length.
[  175.931457][T14704] bond29: entered promiscuous mode
[  175.933130][T14704] bond29: entered allmulticast mode
[  175.935015][T14704] 8021q: adding VLAN 0 to HW filter on device bond29
[  176.187793][T14719] bond45: (slave bridge32): making interface the new active one
[  176.191066][T14719] bond45: (slave bridge32): Enslaving as an active interface with an up link
[  176.473196][T14748] vlan0: entered promiscuous mode
[  176.475454][T14748] rdma_rxe: rxe_newlink: failed to add lo
[  176.614603][T14776] wg1: entered promiscuous mode
[  176.617342][T14776] wg1: entered allmulticast mode
[  176.918107][T14782] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  176.920496][T14782] macsec2: entered promiscuous mode
[  176.922343][T14782] macsec2: entered allmulticast mode
[  176.924340][T14782] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  177.503794][T14796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.578718][T14803] block nbd0: not configured, cannot reconfigure
[  177.650515][T14811] validate_nla: 5 callbacks suppressed
[  177.650526][T14811] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  177.670430][T14811] 8021q: adding VLAN 0 to HW filter on device bond37
[  177.680081][T14811] 8021q: adding VLAN 0 to HW filter on device bond37
[  177.682690][T14811] bond37: (slave vxcan1): The slave device specified does not support setting the MAC address
[  177.687282][T14811] bond37: (slave vxcan1): Error -95 calling set_mac_address
[  177.733976][T14820] bond37: (slave bridge23): Enslaving as an active interface with a down link
[  177.742723][T14811] __nla_validate_parse: 25 callbacks suppressed
[  177.742738][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'.
[  177.760203][T14821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.770575][T14821] netem: change failed
[  177.944080][T14831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2359'.
[  177.992990][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'.
[  178.012663][T14840] macvlan9: entered promiscuous mode
[  178.014971][T14840] macvlan9: entered allmulticast mode
[  178.020212][T14840] bond30: (slave macvlan9): Opening slave failed
[  178.060107][T14843] wg1 speed is unknown, defaulting to 1000
[  178.062982][T14843] lo speed is unknown, defaulting to 1000
[  178.106879][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.110734][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.114438][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.118989][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.123010][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.129119][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.133018][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'.
[  178.235742][T14851] wg1 speed is unknown, defaulting to 1000
[  178.240795][T14851] lo speed is unknown, defaulting to 1000
[  178.265029][T14843] netlink: 'syz.0.2362': attribute type 9 has an invalid length.
[  178.390649][T14864] netlink: 'syz.0.2366': attribute type 4 has an invalid length.
[  178.394910][T14864] netlink: 'syz.0.2366': attribute type 4 has an invalid length.
[  178.400589][  T794] lo speed is unknown, defaulting to 1000
[  178.402905][  T794] syz1: Port: 1 Link ACTIVE
[  178.414159][T14864] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  178.480619][T14864] 8021q: adding VLAN 0 to HW filter on device bond38
[  178.541562][T14866] netlink: 'syz.2.2367': attribute type 1 has an invalid length.
[  178.558457][T14866] 8021q: adding VLAN 0 to HW filter on device bond46
[  178.625013][T14882] wg1 speed is unknown, defaulting to 1000
[  178.627840][T14882] lo speed is unknown, defaulting to 1000
[  178.754629][T14895] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.759978][T14894] netlink: 'syz.2.2377': attribute type 5 has an invalid length.
[  179.250553][T14911] wg1 speed is unknown, defaulting to 1000
[  179.252892][T14911] lo speed is unknown, defaulting to 1000
[  179.641873][T14918] wg1 speed is unknown, defaulting to 1000
[  179.644760][T14918] lo speed is unknown, defaulting to 1000
[  179.879930][T14938] syzkaller0: entered promiscuous mode
[  179.881807][T14938] syzkaller0: entered allmulticast mode
[  180.028574][T14946] wg1 speed is unknown, defaulting to 1000
[  180.031369][T14946] lo speed is unknown, defaulting to 1000
[  180.074929][T14951] wg1 speed is unknown, defaulting to 1000
[  180.078462][T14951] lo speed is unknown, defaulting to 1000
[  180.189875][T14959] pim6reg1: entered promiscuous mode
[  180.191798][T14959] pim6reg1: entered allmulticast mode
[  180.198950][T14959] netlink: 'syz.0.2397': attribute type 2 has an invalid length.
[  180.272481][T14963] netlink: 'syz.1.2399': attribute type 4 has an invalid length.
[  180.334725][T14967] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.346211][T14967] netlink: 'syz.1.2401': attribute type 1 has an invalid length.
[  180.350352][T14968] gretap6: entered allmulticast mode
[  180.447812][T14977] pimreg: entered allmulticast mode
[  180.781710][T15001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.982073][T15028] netlink: 'syz.0.2418': attribute type 11 has an invalid length.
[  180.982381][T15027] bond0: entered promiscuous mode
[  180.986821][T15027] bond0: left promiscuous mode
[  181.056980][T15036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.061196][T15036] syzkaller0: entered promiscuous mode
[  181.062937][T15036] syzkaller0: entered allmulticast mode
[  181.069034][T15036] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.070097][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.074113][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.078424][T15036] tipc: Resetting bearer <eth:syzkaller0>
[  181.080228][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.082642][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.092157][T15035] tipc: Resetting bearer <eth:syzkaller0>
[  181.097102][T15035] tipc: Disabling bearer <eth:syzkaller0>
[  181.399510][T15100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.401991][T15091] tipc: Resetting bearer <eth:syzkaller0>
[  181.405712][T15091] tipc: Disabling bearer <eth:syzkaller0>
[  181.592869][T15130] wg1 speed is unknown, defaulting to 1000
[  181.595849][T15130] lo speed is unknown, defaulting to 1000
[  181.788107][T15145] 8021q: adding VLAN 0 to HW filter on device bond32
[  181.791183][T15145] bond31: (slave bond32): making interface the new active one
[  181.794334][T15145] bond31: (slave bond32): Enslaving as an active interface with an up link
[  181.821352][T15145] bridge0: Device is already in use.
[  182.073335][   T33] audit: type=1107 audit(1756401999.819:3): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ΓI\i5H
[  182.073335][   T33] ?:_>#[o.=u$]Qn1iŦ p;'
[  182.275025][T15192] wg1: entered promiscuous mode
[  182.277215][T15192] wg1: entered allmulticast mode
[  182.663293][T15217] veth25: entered promiscuous mode
[  182.703274][T15217] erspan0: entered allmulticast mode
[  182.730952][T15220] validate_nla: 9 callbacks suppressed
[  182.730962][T15220] netlink: 'syz.1.2469': attribute type 1 has an invalid length.
[  182.767041][T15220] 8021q: adding VLAN 0 to HW filter on device bond34
[  182.770316][T15220] bond33: (slave bond34): making interface the new active one
[  182.772952][T15220] bond33: (slave bond34): Enslaving as an active interface with an up link
[  182.778231][T15220] bridge0: Device is already in use.
[  183.024029][T15233] __nla_validate_parse: 63 callbacks suppressed
[  183.024040][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'.
[  183.047710][T15235] bond0: (slave gretap0): Error: Device type is different from other slaves
[  183.154316][T15242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2476'.
[  183.157798][T15242] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2476'.
[  183.160827][T15242] netlink: 'syz.1.2476': attribute type 5 has an invalid length.
[  183.163609][T15242] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2476'.
[  183.315845][T15259] bridge21: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  183.328857][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'.
[  183.371323][T15262] wg1 speed is unknown, defaulting to 1000
[  183.374322][T15262] lo speed is unknown, defaulting to 1000
[  183.377875][T15263] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2481'.
[  183.384255][T15263] syzkaller1: entered allmulticast mode
[  183.395017][T15267] netlink: 'syz.0.2482': attribute type 1 has an invalid length.
[  183.410848][T15267] 8021q: adding VLAN 0 to HW filter on device bond40
[  183.419860][T15267] veth29: entered promiscuous mode
[  183.550781][T15281] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2485'.
[  183.572832][T15283] syzkaller0: entered promiscuous mode
[  183.574621][T15283] syzkaller0: entered allmulticast mode
[  183.597382][T15280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2485'.
[  183.652467][T15289] netlink: 'syz.0.2488': attribute type 10 has an invalid length.
[  183.655265][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'.
[  183.685350][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2489'.
[  183.695427][T15293] bridge22: port 1(veth0_to_bond) entered blocking state
[  183.698123][T15293] bridge22: port 1(veth0_to_bond) entered disabled state
[  183.700477][T15293] veth0_to_bond: entered allmulticast mode
[  183.703066][T15293] veth0_to_bond: entered promiscuous mode
[  183.804569][T15300] bond35 (unregistering): Released all slaves
[  183.844515][T15304] bridge0: Device is already in use.
[  183.951758][T15322] macvlan9: entered promiscuous mode
[  183.953973][T15322] bond0: entered promiscuous mode
[  183.957630][T15322] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  183.964909][T15320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.003153][T15320] tipc: Resetting bearer <eth:syzkaller0>
[  184.008059][T15319] tipc: Disabling bearer <eth:syzkaller0>
[  184.104086][T15332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.106647][T15332] syzkaller0: entered promiscuous mode
[  184.108583][T15332] syzkaller0: entered allmulticast mode
[  184.114450][T15332] tipc: Resetting bearer <eth:syzkaller0>
[  184.121061][T15331] tipc: Resetting bearer <eth:syzkaller0>
[  184.124922][T15331] tipc: Disabling bearer <eth:syzkaller0>
[  184.292233][T15336] bridge0: failed insert local address into bridge forwarding table
[  184.324514][T15344] Only authenc() type AEADs are supported by ESSIV
[  184.330623][T15341] netlink: 'syz.1.2505': attribute type 1 has an invalid length.
[  184.362435][T15348] netlink: 'syz.2.2506': attribute type 1 has an invalid length.
[  184.372390][T15348] 8021q: adding VLAN 0 to HW filter on device bond47
[  184.375189][T15351] netlink: 'syz.1.2507': attribute type 2 has an invalid length.
[  184.386888][T15351] k*]: entered promiscuous mode
[  184.401885][T15351] erspan0: entered promiscuous mode
[  184.403548][T15351] erspan0: left allmulticast mode
[  184.413014][T15351] 8021q: adding VLAN 0 to HW filter on device team0
[  184.418453][T15351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.428681][T15351] veth0_to_team: entered promiscuous mode
[  184.430577][T15351] veth0_to_team: entered allmulticast mode
[  184.519334][T15365] netlink: 'syz.1.2509': attribute type 7 has an invalid length.
[  184.522140][T15365] netlink: 'syz.1.2509': attribute type 8 has an invalid length.
[  184.580508][T15368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.630719][T15361] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  184.711809][T15376] v: renamed from ip6_vti0 (while UP)
[  185.336583][T15380] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.461159][T15388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.498551][T15390] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  185.501643][T15390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.574269][T15392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.585279][T15392] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  185.704210][T15403] vlan3: entered promiscuous mode
[  185.752198][T15403] netlink: 'syz.0.2523': attribute type 10 has an invalid length.
[  185.803655][T15412] 8021q: adding VLAN 0 to HW filter on device bond41
[  185.817457][T15412] 8021q: adding VLAN 0 to HW filter on device bond41
[  185.819970][T15412] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  185.824106][T15412] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  185.839541][   T54] Bluetooth: hci2: link tx timeout
[  185.841652][T15414] veth0_to_bond: left allmulticast mode
[  185.843714][T15414] veth0_to_bond: left promiscuous mode
[  185.845783][T15414] bridge22: port 1(veth0_to_bond) entered disabled state
[  185.846073][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  185.854334][T15414] tipc: Resetting bearer <eth:syzkaller0>
[  185.859076][T15414] bond31: (slave bond32): Releasing backup interface
[  185.867994][T15414] bond33: (slave bond34): Releasing backup interface
[  185.885021][T15417] veth29: entered promiscuous mode
[  185.890219][T15417] bond41: (slave veth29): Enslaving as an active interface with a down link
[  185.900437][T15412] 8021q: adding VLAN 0 to HW filter on device bond41
[  186.044743][T15432] can: request_module (can-proto-0) failed.
[  186.084142][T15437] 8021q: adding VLAN 0 to HW filter on device bond42
[  186.095780][T15437] 8021q: adding VLAN 0 to HW filter on device bond42
[  186.100097][T15437] bond42: (slave vcan0): The slave device specified does not support setting the MAC address
[  186.104446][T15437] bond42: (slave vcan0): Error -95 calling set_mac_address
[  186.248447][T15458] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2)
[  186.379749][T15465] vlan0: entered allmulticast mode
[  186.381329][T15465] gretap0: entered allmulticast mode
[  186.519098][T15482] pim6reg: entered allmulticast mode
[  186.522805][T15483] pim6reg: left allmulticast mode
[  186.627278][T15491] bond45: (slave bridge32): Releasing active interface
[  186.635259][T15493] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  186.641252][T15493] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.705276][T15499] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  186.710305][T15499] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  186.715019][T15499] tipc: Resetting bearer <eth:syzkaller0>
[  186.723550][T15497] IPVS: length: 49 != 24
[  186.969667][T15514] tipc: Resetting bearer <eth:syzkaller0>
[  187.135323][   T54] Bluetooth: hci2: link tx timeout
[  187.137508][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  187.500909][T15554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.511134][T15554] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  187.516351][T15554] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  187.789265][T15560] : renamed from bond_slave_0
[  187.849792][T15562] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.861741][T15562] tipc: Resetting bearer <eth:syzkaller0>
[  187.926219][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  187.972522][T15579] validate_nla: 9 callbacks suppressed
[  187.972538][T15579] netlink: 'syz.1.2570': attribute type 1 has an invalid length.
[  188.057720][T15584] __nla_validate_parse: 36 callbacks suppressed
[  188.057738][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2570'.
[  188.064749][T15579] veth25: entered promiscuous mode
[  188.069420][T15579] bond35: (slave veth25): Enslaving as a backup interface with a down link
[  188.073658][T15584] 8021q: adding VLAN 0 to HW filter on device bond35
[  188.078069][T15582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.178931][T15594] nbd: must specify a size in bytes for the device
[  188.194956][T15603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.236229][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'.
[  188.242953][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'.
[  188.255942][T15608] netlink: 'syz.1.2577': attribute type 14 has an invalid length.
[  188.258738][T15608] netlink: 'syz.1.2577': attribute type 13 has an invalid length.
[  188.283809][T15613] IPv6: sit9: Disabled Multicast RS
[  188.309454][T15615] netlink: 'syz.1.2579': attribute type 1 has an invalid length.
[  188.315317][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  188.320896][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  188.373963][T15624] netlink: 'syz.2.2583': attribute type 1 has an invalid length.
[  188.391027][T15624] 8021q: adding VLAN 0 to HW filter on device bond48
[  188.410252][T15624] ipvlan0: entered allmulticast mode
[  188.419607][T15624] bond48: entered allmulticast mode
[  188.433765][T15635] netlink: 'syz.0.2586': attribute type 2 has an invalid length.
[  188.452526][T15635] : entered promiscuous mode
[  188.531915][T15646] netlink: 'syz.1.2590': attribute type 1 has an invalid length.
[  188.580242][T15646] 8021q: adding VLAN 0 to HW filter on device bond37
[  188.584236][T15646] bond36: (slave bond37): making interface the new active one
[  188.589337][T15646] bond36: (slave bond37): Enslaving as an active interface with an up link
[  188.607105][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'.
[  188.618147][T15646] bridge0: Device is already in use.
[  188.662290][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  188.783147][T15668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.800955][T15668] syzkaller0: entered promiscuous mode
[  188.803121][T15668] syzkaller0: entered allmulticast mode
[  188.862759][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'.
[  188.902303][T15675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.941097][T15663] tipc: Resetting bearer <eth:syzkaller0>
[  188.945461][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2597'.
[  188.950119][T15663] tipc: Disabling bearer <eth:syzkaller0>
[  189.024479][T15687] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.040510][T15687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.111622][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2603'.
[  189.171138][T15703] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 32936 - 0
[  189.185266][T15703] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 45199 - 0
[  189.246288][T15705] 0X: left allmulticast mode
[  189.248280][T15705] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  189.259286][T15703] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 32936 - 0
[  189.266044][T15703] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 45199 - 0
[  189.298693][T15703] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 32936 - 0
[  189.303188][T15703] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 45199 - 0
[  189.389488][T15703] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 32936 - 0
[  189.393348][T15703] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 45199 - 0
[  189.443094][T15718] tipc: Resetting bearer <eth:syzkaller0>
[  189.491377][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 45199 - 0
[  189.494245][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 32936 - 0
[  189.513027][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 45199 - 0
[  189.518190][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 32936 - 0
[  189.525549][T15731] vlan0: entered promiscuous mode
[  189.527994][T15731] vlan0: entered allmulticast mode
[  189.532728][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 45199 - 0
[  189.535860][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 32936 - 0
[  189.542126][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 45199 - 0
[  189.552872][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 32936 - 0
[  189.692822][T15749] netlink: 'syz.0.2619': attribute type 1 has an invalid length.
[  189.704961][T15749] workqueue: Failed to create a rescuer kthread for wq "bond43": -EINTR
[  189.752184][T15756] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.914774][T15770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.920510][T15769] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.951931][T15781] netlink: 'syz.0.2625': attribute type 13 has an invalid length.
[  189.957625][T15781] netlink: 'syz.0.2625': attribute type 17 has an invalid length.
[  189.987904][T15781] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  190.006969][T15782] wg1 speed is unknown, defaulting to 1000
[  190.010944][T15782] lo speed is unknown, defaulting to 1000
[  190.049496][T15773] wg1 speed is unknown, defaulting to 1000
[  190.054708][T15773] lo speed is unknown, defaulting to 1000
[  190.080195][T15786] batadv_slave_0: entered promiscuous mode
[  190.112892][T15791] 8021q: adding VLAN 0 to HW filter on device bond26
[  190.129091][T15791] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  190.133344][T15791] bond26: (slave macvlan0): Enslaving as a backup interface with a down link
[  190.140081][T15791] bond26: (slave macvlan0): Releasing backup interface
[  190.267098][T15795] veth0: entered promiscuous mode
[  190.269081][T15794] veth0: left promiscuous mode
[  190.336878][T15807] atomic_op ffff88803c1ae198 conn xmit_atomic 0000000000000000
[  190.340562][T15807] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  190.399706][T15808] tipc: Resetting bearer <eth:syzkaller0>
[  190.416527][T15808] bond0: left promiscuous mode
[  190.423091][T15808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.705075][T15827] bond35: (slave veth25): Releasing backup interface
[  190.709980][T15827] bond36: (slave bond37): Releasing backup interface
[  190.743095][T15827] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  190.906849][T15847] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  191.225124][T15863] xt_limit: Overflow, try lower: 271964/0
[  191.267945][T15866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.270518][T15866] syzkaller0: entered promiscuous mode
[  191.272467][T15866] syzkaller0: entered allmulticast mode
[  191.279499][T15866] tipc: Resetting bearer <eth:syzkaller0>
[  191.282318][T15865] tipc: Resetting bearer <eth:syzkaller0>
[  191.285589][T15865] tipc: Disabling bearer <eth:syzkaller0>
[  191.470160][T15877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.473542][T15877] syzkaller0: entered promiscuous mode
[  191.475793][T15877] syzkaller0: entered allmulticast mode
[  191.482650][T15877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  191.488744][T15877] tipc: Resetting bearer <eth:syzkaller0>
[  191.492528][T15877] tipc: Resetting bearer <eth:syzkaller0>
[  191.495555][T15877] tipc: Disabling bearer <eth:syzkaller0>
[  191.624849][T15881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.631694][T15881] syzkaller0: entered promiscuous mode
[  191.633669][T15881] syzkaller0: entered allmulticast mode
[  191.711575][T15879] tipc: Resetting bearer <eth:syzkaller0>
[  191.716324][T15879] tipc: Disabling bearer <eth:syzkaller0>
[  191.849550][T15886] geneve5: entered promiscuous mode
[  191.984082][T15899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.084266][T15912] 8021q: adding VLAN 0 to HW filter on device bond51
[  192.397251][T15931] wg1 speed is unknown, defaulting to 1000
[  192.400392][T15931] lo speed is unknown, defaulting to 1000
[  192.523011][T15943] geneve5: entered promiscuous mode
[  192.533146][ T7116] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  192.542013][ T7116] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  192.546326][ T7116] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  192.549557][ T7116] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  192.613818][T15949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.618940][T15949] syzkaller0: entered promiscuous mode
[  192.621229][T15949] syzkaller0: entered allmulticast mode
[  192.635730][T15948] tipc: Resetting bearer <eth:syzkaller0>
[  192.643560][T15948] tipc: Disabling bearer <eth:syzkaller0>
[  192.691507][T15953] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  192.725329][T15956] 8021q: adding VLAN 0 to HW filter on device bond44
[  192.835473][T15965] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  192.838571][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.894465][T15970] dvmrp8: entered allmulticast mode
[  192.910418][T15970] wg1 speed is unknown, defaulting to 1000
[  192.913437][T15970] lo speed is unknown, defaulting to 1000
[  193.105260][T15983] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.109546][T15983] tipc: Resetting bearer <eth:syzkaller0>
[  193.353078][T16009] __nla_validate_parse: 31 callbacks suppressed
[  193.353089][T16009] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2693'.
[  193.360202][T16010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2692'.
[  193.380647][T16012] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2694'.
[  193.383612][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2694'.
[  193.413095][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2696'.
[  193.469778][T16021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.582079][T16031] validate_nla: 6 callbacks suppressed
[  193.582091][T16031] netlink: 'syz.2.2701': attribute type 4 has an invalid length.
[  193.582136][T16030] netlink: 'syz.2.2701': attribute type 4 has an invalid length.
[  193.627389][T16033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2702'.
[  193.657063][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'.
[  193.688808][T16037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.722207][T16039] netlink: 'syz.2.2705': attribute type 2 has an invalid length.
[  193.725193][T16039] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2705'.
[  193.838097][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  193.841376][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  194.341426][T16054] team0: entered promiscuous mode
[  194.380473][T16054] team0 (unregistering): left promiscuous mode
[  194.514082][T16059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.539842][T16065] netlink: 'syz.1.2712': attribute type 1 has an invalid length.
[  194.642161][T16077] wg1 speed is unknown, defaulting to 1000
[  194.644968][T16077] lo speed is unknown, defaulting to 1000
[  194.716182][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  194.753925][T16090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.757675][T16089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.761095][T16089] syzkaller0: entered promiscuous mode
[  194.767728][T16089] syzkaller0: entered allmulticast mode
[  194.821634][T16089] tipc: Resetting bearer <eth:syzkaller0>
[  194.827850][T16088] tipc: Resetting bearer <eth:syzkaller0>
[  194.832134][T16088] tipc: Disabling bearer <eth:syzkaller0>
[  194.885379][T16108] tipc: Resetting bearer <eth:syzkaller0>
[  194.912490][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.915044][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.970618][T16108] vlan0: entered promiscuous mode
[  194.972470][T16108] bond0: entered promiscuous mode
[  194.974847][T16108] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  195.031343][T16124] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  195.037561][T16119] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  195.043550][T16119] netlink: 'syz.2.2728': attribute type 2 has an invalid length.
[  195.204161][T16150] netlink: 'syz.0.2734': attribute type 39 has an invalid length.
[  195.258980][T16162] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004
[  195.284454][T16167] netlink: 'syz.2.2738': attribute type 30 has an invalid length.
[  195.293403][T16167] netlink: 'syz.2.2738': attribute type 30 has an invalid length.
[  195.299874][ T9460] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.302596][ T9460] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.309787][ T9460] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.312407][ T9460] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.343147][T16173] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  195.405149][T16179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.408802][T16184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.418905][T16178] syzkaller0: entered promiscuous mode
[  195.421159][T16178] syzkaller0: entered allmulticast mode
[  195.431023][T16179] tipc: Resetting bearer <eth:syzkaller0>
[  195.434145][T16177] tipc: Resetting bearer <eth:syzkaller0>
[  195.440186][T16177] tipc: Disabling bearer <eth:syzkaller0>
[  195.855484][T16221] syzkaller1: entered promiscuous mode
[  195.857642][T16221] syzkaller1: entered allmulticast mode
[  195.864964][T16223] tipc: Resetting bearer <eth:syzkaller0>
[  196.023524][T16232] erspan0: left promiscuous mode
[  196.034667][T16232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.083615][T16238] wg1: left promiscuous mode
[  196.087193][T16238] vlan0: left promiscuous mode
[  196.101264][T16238] bond25: left promiscuous mode
[  196.104443][T16238] veth21: left promiscuous mode
[  196.110361][T16238] bond30: left promiscuous mode
[  196.114035][T16238] veth23: left promiscuous mode
[  196.117053][T16238] veth25: left promiscuous mode
[  196.120122][T16238] veth27: left promiscuous mode
[  196.121896][T16238] bond36: left promiscuous mode
[  196.123496][T16238] wireguard0: left promiscuous mode
[  196.126632][T16238] gtp0: left promiscuous mode
[  196.128275][T16238] geneve0: left promiscuous mode
[  196.130385][T16238] macsec2: left promiscuous mode
[  196.132127][T16239] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  196.137155][T16238] veth29: left promiscuous mode
[  196.140367][T16238] geneve5: left promiscuous mode
[  196.365332][T16277] tap0: tun_chr_ioctl cmd 1074025680
[  196.368906][T16277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.398929][T16282] wg1 speed is unknown, defaulting to 1000
[  196.401854][T16282] lo speed is unknown, defaulting to 1000
[  196.532372][T16291] 8021q: adding VLAN 0 to HW filter on device bond45
[  196.544209][T16291] veth31: entered promiscuous mode
[  196.548971][T16291] bond45: (slave veth31): Enslaving as a backup interface with a down link
[  196.560586][T16291] bond33: (slave veth23): Releasing backup interface
[  196.565640][T16291] bond34: (slave veth25): Releasing backup interface
[  196.578388][T16291] bond22: (slave macvlan4): Releasing backup interface
[  196.583974][T16291] bond36: (slave wireguard0): Releasing backup interface
[  196.587231][T16291] bond36: (slave wireguard1): making interface the new active one
[  196.593572][T16291] bond36: (slave wireguard1): Releasing backup interface
[  196.599642][T16291] bond37: (slave bridge23): Releasing active interface
[  196.605585][T16291] bond41: (slave veth29): Releasing active interface
[  196.611640][T16291] bond45: (slave veth31): Releasing backup interface
[  196.622326][T16295] pimreg: left allmulticast mode
[  196.689107][T16299] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.693430][T16299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.701888][T16297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.727251][T16297] syzkaller0: entered promiscuous mode
[  196.729039][T16297] syzkaller0: entered allmulticast mode
[  196.738567][T16296] tipc: Resetting bearer <eth:syzkaller0>
[  196.759256][T16296] tipc: Disabling bearer <eth:syzkaller0>
[  197.211915][T16350] 8021q: adding VLAN 0 to HW filter on device bond47
[  197.216013][T16350] bond46: (slave bond47): making interface the new active one
[  197.219349][T16350] bond46: (slave bond47): Enslaving as an active interface with an up link
[  197.272830][T16354] tipc: Resetting bearer <eth:syzkaller0>
[  197.310276][T16357] wg1 speed is unknown, defaulting to 1000
[  197.313170][T16357] lo speed is unknown, defaulting to 1000
[  197.361940][T16360] sctp: [Deprecated]: syz.1.2791 (pid 16360) Use of int in max_burst socket option deprecated.
[  197.361940][T16360] Use struct sctp_assoc_value instead
[  197.411402][T16362] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  197.493002][T16368] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  197.698165][T16380] wg1 speed is unknown, defaulting to 1000
[  197.701220][T16380] lo speed is unknown, defaulting to 1000
[  197.833109][T16386] syzkaller1: tun_chr_ioctl cmd 1074025677
[  197.835311][T16386] syzkaller1: linktype set to 6
[  197.917178][T16402] bridge0: failed insert local address into bridge forwarding table
[  197.987830][T16408] wg1 speed is unknown, defaulting to 1000
[  197.990272][T16408] lo speed is unknown, defaulting to 1000
[  198.049014][T16417] tipc: Resetting bearer <eth:syzkaller0>
[  198.442527][T16463] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  198.442785][T16462] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  198.470710][T16462] __nla_validate_parse: 36 callbacks suppressed
[  198.470723][T16462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2821'.
[  198.472143][T16457] wg1 speed is unknown, defaulting to 1000
[  198.481289][T16457] lo speed is unknown, defaulting to 1000
[  198.481655][T16460] wg1 speed is unknown, defaulting to 1000
[  198.491503][T16460] lo speed is unknown, defaulting to 1000
[  198.656070][T16476] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2824'.
[  198.702249][T16479] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2825'.
[  198.707985][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'.
[  198.750549][T16486] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2827'.
[  198.753860][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'.
[  198.898854][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'.
[  198.903439][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'.
[  198.907473][T16503] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2832'.
[  198.910538][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'.
[  198.916698][T16501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  198.991491][T16514] validate_nla: 16 callbacks suppressed
[  198.991505][T16514] netlink: 'syz.2.2836': attribute type 9 has an invalid length.
[  199.020109][T16521] netlink: 'syz.1.2838': attribute type 2 has an invalid length.
[  199.134471][T16540] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  199.139572][T16540] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  199.173896][T16545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.181747][T16545] netem: change failed
[  199.184445][T16546] Can't find ip_set type bitmap:ip,mac
[  199.423605][T16568] netlink: 'syz.1.2851': attribute type 17 has an invalid length.
[  199.450914][T16568] tipc: Resetting bearer <eth:syzkaller0>
[  199.515914][T16576] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.521422][T16576] tipc: Resetting bearer <eth:syzkaller0>
[  199.613863][T16580] netlink: 'syz.2.2856': attribute type 29 has an invalid length.
[  199.707267][T16598] netlink: 'syz.1.2858': attribute type 41 has an invalid length.
[  199.785220][T16607] netlink: 'syz.2.2860': attribute type 178 has an invalid length.
[  199.804943][T16607] netlink: 'syz.2.2860': attribute type 2 has an invalid length.
[  199.811671][T16610] netlink: 'syz.0.2861': attribute type 1 has an invalid length.
[  199.825763][T16610] bond48: entered promiscuous mode
[  199.829148][T16610] 8021q: adding VLAN 0 to HW filter on device bond48
[  199.841304][T16614] netlink: 'syz.2.2862': attribute type 1 has an invalid length.
[  199.865613][T16618] wg1 speed is unknown, defaulting to 1000
[  199.869159][T16618] lo speed is unknown, defaulting to 1000
[  199.873705][T16620] netlink: 'syz.2.2864': attribute type 1 has an invalid length.
[  199.891023][T16620] 8021q: adding VLAN 0 to HW filter on device bond52
[  199.905656][T16620] 8021q: adding VLAN 0 to HW filter on device bond52
[  199.909429][T16620] bond52: (slave vcan0): The slave device specified does not support setting the MAC address
[  199.914212][T16620] bond52: (slave vcan0): Error -95 calling set_mac_address
[  199.941468][T16622] wg1 speed is unknown, defaulting to 1000
[  199.944559][T16622] lo speed is unknown, defaulting to 1000
[  199.964153][T16620] macvlan1: entered promiscuous mode
[  199.967314][T16620] macvlan1: entered allmulticast mode
[  199.970085][T16620] bond52: entered promiscuous mode
[  199.972453][T16620] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  199.976361][T16620] bond52: left promiscuous mode
[  200.288622][T16649] 8021q: adding VLAN 0 to HW filter on device bond54
[  200.398882][T16656] 8021q: adding VLAN 0 to HW filter on device bond55
[  200.551221][T16671] wg1 speed is unknown, defaulting to 1000
[  200.554057][T16671] lo speed is unknown, defaulting to 1000
[  200.898986][T16689] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  200.958781][  T794] lo speed is unknown, defaulting to 1000
[  200.965607][  T794] syz1: Port: 1 Link DOWN
[  200.968831][T16702] syzkaller1: entered promiscuous mode
[  200.971011][T16702] syzkaller1: entered allmulticast mode
[  200.977397][ T5870] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 45199 - 0
[  200.981623][ T5870] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 32936 - 0
[  200.985213][ T5870] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  200.992397][T16708] wg1 speed is unknown, defaulting to 1000
[  200.995325][T16708] lo speed is unknown, defaulting to 1000
[  201.031645][ T5870] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 45199 - 0
[  201.036089][ T5870] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 32936 - 0
[  201.039352][ T5870] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  201.055773][ T5870] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 45199 - 0
[  201.062224][ T5870] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 32936 - 0
[  201.065851][ T5870] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  201.071091][ T5870] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 45199 - 0
[  201.074291][ T5870] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 32936 - 0
[  201.077771][ T5870] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  201.160831][T16727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.258059][T16736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.264504][T16736] syzkaller0: entered promiscuous mode
[  201.268674][T16736] syzkaller0: entered allmulticast mode
[  201.281963][ T1092] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  201.384690][T16744] x9: renamed from bridge_slave_0
[  201.446223][T16728] tipc: Resetting bearer <eth:syzkaller0>
[  201.452020][T16728] tipc: Disabling bearer <eth:syzkaller0>
[  201.458057][T16748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.599862][T16762] wg1 speed is unknown, defaulting to 1000
[  201.603343][T16762] lo speed is unknown, defaulting to 1000
[  201.771139][T16780] wg1 speed is unknown, defaulting to 1000
[  201.774294][T16780] lo speed is unknown, defaulting to 1000
[  201.812638][T16785] wg1 speed is unknown, defaulting to 1000
[  201.815589][T16785] lo speed is unknown, defaulting to 1000
[  201.818935][T16790] siw: device registration error -23
[  201.819007][T16791] siw: device registration error -23
[  202.511977][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.514807][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.517758][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.520387][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.962829][T16868] tipc: Enabled bearer <eth:vlan0>, priority 18
[  202.981126][T16868] bond40 (unregistering): Released all slaves
[  203.021287][T16871] 8021q: adding VLAN 0 to HW filter on device bond56
[  203.048235][T16874] wg1 speed is unknown, defaulting to 1000
[  203.050537][T16874] lo speed is unknown, defaulting to 1000
[  203.063018][T16876] tipc: Resetting bearer <eth:syzkaller0>
[  203.131846][T16883] 8021q: adding VLAN 0 to HW filter on device bond40
[  203.294858][T16897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.430729][T16913] wg1 speed is unknown, defaulting to 1000
[  203.433290][T16913] lo speed is unknown, defaulting to 1000
[  203.444533][T16915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.476329][T16915] bridge_slave_0: mtu less than device minimum
[  203.491377][T16913] wg1 speed is unknown, defaulting to 1000
[  203.495255][T16913] lo speed is unknown, defaulting to 1000
[  203.548140][T16924] __nla_validate_parse: 88 callbacks suppressed
[  203.548153][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2946'.
[  203.623340][T16929] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2948'.
[  203.633886][T16929] vlan1: entered allmulticast mode
[  203.640283][T16929] gretap0: entered allmulticast mode
[  203.690307][T16934] wg1 speed is unknown, defaulting to 1000
[  203.693251][T16934] lo speed is unknown, defaulting to 1000
[  203.737255][T16934] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2950'.
[  203.759672][T16937] 8021q: adding VLAN 0 to HW filter on device bond41
[  203.765497][T16934] wg1 speed is unknown, defaulting to 1000
[  203.774029][T16934] lo speed is unknown, defaulting to 1000
[  203.793474][T16943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2952'.
[  203.797604][T16944] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  203.803075][T16943] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  203.918990][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'.
[  203.944902][T16958] 8021q: adding VLAN 0 to HW filter on device bond42
[  203.949654][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'.
[  203.959001][T16947] vxcan4: entered promiscuous mode
[  203.962461][T16947] vxcan5: entered allmulticast mode
[  203.968486][T16958] macvlan10: entered promiscuous mode
[  203.970210][T16958] macvlan10: entered allmulticast mode
[  203.973338][T16958] bond42: entered promiscuous mode
[  203.975152][T16958] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  203.978892][T16958] bond42: left promiscuous mode
[  204.038062][T16964] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  204.221866][T16981] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  204.326073][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  204.400452][T16990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'.
[  204.415040][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2965'.
[  204.444406][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'.
[  204.452644][T17000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2967'.
[  204.455677][T17000] 8021q: VLANs not supported on ipvlan1
[  204.666618][T17024] tipc: Resetting bearer <eth:syzkaller0>
[  204.773970][T17036] validate_nla: 15 callbacks suppressed
[  204.773984][T17036] netlink: 'syz.0.2978': attribute type 4 has an invalid length.
[  204.774427][T17041] netlink: 'syz.0.2978': attribute type 4 has an invalid length.
[  204.789209][ T5877] lo speed is unknown, defaulting to 1000
[  204.791436][ T5877] syz1: Port: 1 Link ACTIVE
[  204.863296][T17053] netlink: 'syz.1.2983': attribute type 2 has an invalid length.
[  204.887263][T17053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.900273][T17051] syzkaller1: entered promiscuous mode
[  204.902326][T17051] syzkaller1: entered allmulticast mode
[  204.971294][T17070] netlink: 'syz.1.2987': attribute type 4 has an invalid length.
[  204.982478][T17070] netlink: 'syz.1.2987': attribute type 4 has an invalid length.
[  205.040031][T17074] wg1 speed is unknown, defaulting to 1000
[  205.046575][T17074] lo speed is unknown, defaulting to 1000
[  205.107947][T17080] netlink: 'syz.0.2991': attribute type 1 has an invalid length.
[  205.123757][T17080] 8021q: adding VLAN 0 to HW filter on device bond49
[  205.367866][T17095] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.444108][T17100] pimreg: left allmulticast mode
[  205.447396][T17100] dvmrp8: left allmulticast mode
[  205.498516][T17101] rdma_rxe: rxe_newlink: failed to add lo
[  205.536870][T17104] netlink: 'syz.1.2997': attribute type 1 has an invalid length.
[  205.546903][T17104] 8021q: adding VLAN 0 to HW filter on device bond43
[  205.573750][T17109] netlink: 'syz.1.2998': attribute type 1 has an invalid length.
[  205.594576][T17109] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  205.979905][T17116] netlink: 'syz.2.3000': attribute type 1 has an invalid length.
[  205.999513][T17116] wg1: left promiscuous mode
[  206.001327][T17116] wg1: left allmulticast mode
[  206.003507][T17116] batadv_slave_0: left promiscuous mode
[  206.008540][T17116] tipc: Resetting bearer <eth:syzkaller0>
[  206.013434][T17116] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  206.015955][T17116] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  206.020890][T17116] geneve4: left promiscuous mode
[  206.022840][T17116] geneve4: left allmulticast mode
[  206.025355][T17116] ip6tnl2: left promiscuous mode
[  206.027954][T17116] ip6tnl2: left allmulticast mode
[  206.029935][T17116] bond18: left promiscuous mode
[  206.031533][T17116] bond18: left allmulticast mode
[  206.033325][T17116] bond21: left promiscuous mode
[  206.037160][T17116] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  206.039907][T17116] vlan4: left promiscuous mode
[  206.041489][T17116] bond23: left promiscuous mode
[  206.043186][T17116] vlan4: left allmulticast mode
[  206.044774][T17116] bond23: left allmulticast mode
[  206.048156][T17116] macsec2: left promiscuous mode
[  206.051675][T17116] veth1: left promiscuous mode
[  206.053384][T17116] macsec3: left promiscuous mode
[  206.055002][T17116] macsec3: left allmulticast mode
[  206.057234][T17116] bond35: left promiscuous mode
[  206.059402][T17116] gretap2: left promiscuous mode
[  206.061998][T17116] bond41: left promiscuous mode
[  206.064934][T17116] ipvlan0: left allmulticast mode
[  206.067852][T17116] bond48: left allmulticast mode
[  206.088130][T17116] vxcan4: left promiscuous mode
[  206.092012][T17116] vxcan5: left allmulticast mode
[  206.095231][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.099844][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.103673][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.108303][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.120333][T17122] netlink: 'syz.0.3001': attribute type 10 has an invalid length.
[  206.206783][T17130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.210352][T17130] syzkaller0: entered promiscuous mode
[  206.212754][T17130] syzkaller0: entered allmulticast mode
[  206.225248][T17130] tipc: Resetting bearer <eth:syzkaller0>
[  206.229438][T17129] tipc: Resetting bearer <eth:syzkaller0>
[  206.234122][T17129] tipc: Disabling bearer <eth:syzkaller0>
[  206.473829][T17138] bond46: (slave bond47): Releasing backup interface
[  206.488367][T17138] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  206.500497][T17142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.735289][T17159] 8021q: adding VLAN 0 to HW filter on device bond51
[  206.763642][T17162] 8021q: adding VLAN 0 to HW filter on device bond52
[  207.212201][T17205] 8021q: adding VLAN 0 to HW filter on device bond53
[  207.343195][T17214] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  207.417581][T17223] bridge0: port 1(batadv1) entered blocking state
[  207.420377][T17223] bridge0: port 1(batadv1) entered disabled state
[  207.428802][T17223] batadv1: entered allmulticast mode
[  207.431150][T17223] batadv1: entered promiscuous mode
[  207.464039][T17227] 8021q: adding VLAN 0 to HW filter on device bond54
[  207.493874][T17233] bpq0: entered promiscuous mode
[  207.505083][T17233] bpq0: left promiscuous mode
[  207.593456][T17244] tipc: Resetting bearer <eth:syzkaller0>
[  207.640322][T17244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.643334][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.656214][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.658732][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.661656][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.916608][ T5870] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  207.920247][ T5870] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  208.311259][T17267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.342713][T17267] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  208.346629][T17267] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  208.350301][T17267] tipc: Resetting bearer <eth:syzkaller0>
[  208.471059][T17283] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  208.572567][T17300] __nla_validate_parse: 75 callbacks suppressed
[  208.572580][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  208.657172][T17313] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3058'.
[  208.679214][T17310] dvmrp0: entered allmulticast mode
[  208.707079][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'.
[  208.929346][T17326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.011848][T17329] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3062'.
[  209.728797][T17345] syzkaller0: entered promiscuous mode
[  209.731225][T17345] syzkaller0: entered allmulticast mode
[  209.809037][T17349] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3067'.
[  209.920495][T17355] validate_nla: 11 callbacks suppressed
[  209.920508][T17355] netlink: 'syz.0.3070': attribute type 1 has an invalid length.
[  209.931131][T17355] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  209.936821][T17355] netlink: 'syz.0.3070': attribute type 8 has an invalid length.
[  209.967604][T17357] netlink: 'syz.0.3071': attribute type 4 has an invalid length.
[  209.970143][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3071'.
[  210.029759][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'.
[  210.033367][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'.
[  210.041607][T17362] vlan3: entered promiscuous mode
[  210.043761][T17362] bond0: entered promiscuous mode
[  210.045643][T17362] vlan3: entered allmulticast mode
[  210.047605][T17362] bond0: entered allmulticast mode
[  210.169835][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'.
[  210.339936][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'.
[  210.576542][T17400] tipc: Resetting bearer <eth:syzkaller0>
[  210.682806][T17411] netlink: 'syz.0.3084': attribute type 7 has an invalid length.
[  210.855272][T17431] netlink: 'syz.2.3089': attribute type 1 has an invalid length.
[  210.867358][T17431] 8021q: adding VLAN 0 to HW filter on device bond57
[  210.957558][T17442] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.068010][T17445] netlink: 'syz.2.3093': attribute type 14 has an invalid length.
[  211.070317][T17445] netlink: 'syz.2.3093': attribute type 18 has an invalid length.
[  211.189586][T17462] dvmrp0: left allmulticast mode
[  211.332543][T17468] netlink: 'syz.2.3100': attribute type 10 has an invalid length.
[  211.332546][T17471] netlink: 'syz.2.3100': attribute type 10 has an invalid length.
[  211.932461][T17492] netlink: 'syz.0.3106': attribute type 1 has an invalid length.
[  211.945515][T17492] bond55: entered promiscuous mode
[  211.947974][T17492] 8021q: adding VLAN 0 to HW filter on device bond55
[  211.956192][T17492] bond55: (slave bridge29): making interface the new active one
[  211.958893][T17492] bridge29: entered promiscuous mode
[  211.961345][T17492] bond55: (slave bridge29): Enslaving as an active interface with an up link
[  212.147714][T17498] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  212.150197][T17498] CPU: 1 UID: 0 PID: 17498 Comm: syz.0.3107 Not tainted syzkaller #0 PREEMPT(full) 
[  212.150210][T17498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.150216][T17498] Call Trace:
[  212.150220][T17498]  <TASK>
[  212.150225][T17498]  dump_stack_lvl+0x189/0x250
[  212.150241][T17498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.150251][T17498]  ? __pfx__printk+0x10/0x10
[  212.150262][T17498]  ? kernfs_root+0x1c/0x230
[  212.150272][T17498]  ? kernfs_path_from_node+0x2f/0x290
[  212.150281][T17498]  ? kernfs_path_from_node+0x250/0x290
[  212.150289][T17498]  ? kernfs_path_from_node+0x2f/0x290
[  212.150298][T17498]  sysfs_warn_dup+0x8e/0xa0
[  212.150306][T17498]  sysfs_do_create_link_sd+0xc0/0x110
[  212.150315][T17498]  device_add_class_symlinks+0x1cf/0x240
[  212.150324][T17498]  device_add+0x475/0xb50
[  212.150332][T17498]  wiphy_register+0x1ba6/0x28d0
[  212.150347][T17498]  ? __pfx_wiphy_register+0x10/0x10
[  212.150358][T17498]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  212.150369][T17498]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  212.150379][T17498]  ieee80211_register_hw+0x3425/0x4080
[  212.150391][T17498]  ? ieee80211_register_hw+0x14e1/0x4080
[  212.150402][T17498]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  212.150417][T17498]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.150438][T17498]  ? __hrtimer_setup+0x187/0x210
[  212.150454][T17498]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  212.150470][T17498]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  212.150493][T17498]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  212.150509][T17498]  ? trace_kmalloc+0x1f/0xd0
[  212.150526][T17498]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  212.150539][T17498]  ? kstrndup+0xbf/0x160
[  212.150548][T17498]  hwsim_new_radio_nl+0xea4/0x1b10
[  212.150558][T17498]  ? __pfx___nla_validate_parse+0x10/0x10
[  212.150611][T17498]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  212.150634][T17498]  ? __nla_parse+0x40/0x60
[  212.150654][T17498]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  212.150665][T17498]  genl_family_rcv_msg_doit+0x215/0x300
[  212.150676][T17498]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  212.150687][T17498]  ? bpf_lsm_capable+0x9/0x20
[  212.150698][T17498]  ? security_capable+0x7e/0x2e0
[  212.150715][T17498]  genl_rcv_msg+0x60e/0x790
[  212.150733][T17498]  ? __pfx_genl_rcv_msg+0x10/0x10
[  212.150747][T17498]  ? __kasan_slab_alloc+0x6c/0x80
[  212.150766][T17498]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  212.150780][T17498]  ? __netlink_lookup+0xbd/0x810
[  212.150786][T17498]  ? rcu_is_watching+0x15/0xb0
[  212.150796][T17498]  netlink_rcv_skb+0x208/0x470
[  212.150807][T17498]  ? __pfx_genl_rcv_msg+0x10/0x10
[  212.150815][T17498]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  212.150828][T17498]  ? lock_release+0x4b/0x3e0
[  212.150840][T17498]  ? down_read+0x1ad/0x2e0
[  212.150847][T17498]  genl_rcv+0x28/0x40
[  212.150855][T17498]  netlink_unicast+0x82f/0x9e0
[  212.150866][T17498]  ? __pfx_netlink_unicast+0x10/0x10
[  212.150876][T17498]  ? netlink_sendmsg+0x642/0xb30
[  212.150882][T17498]  ? skb_put+0x11b/0x210
[  212.150891][T17498]  netlink_sendmsg+0x805/0xb30
[  212.150899][T17498]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.150906][T17498]  ? futex_unqueue+0x22/0x240
[  212.150914][T17498]  ? aa_sock_msg_perm+0xf1/0x1d0
[  212.150922][T17498]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  212.150930][T17498]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.150937][T17498]  __sock_sendmsg+0x21c/0x270
[  212.150949][T17498]  ____sys_sendmsg+0x505/0x830
[  212.150958][T17498]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.150967][T17498]  ? import_iovec+0x74/0xa0
[  212.150976][T17498]  ___sys_sendmsg+0x21f/0x2a0
[  212.150984][T17498]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.150993][T17498]  ? futex_wait+0x285/0x360
[  212.151009][T17498]  ? __fget_files+0x2a/0x420
[  212.151015][T17498]  ? __fget_files+0x3a0/0x420
[  212.151023][T17498]  __x64_sys_sendmsg+0x19b/0x260
[  212.151031][T17498]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.151050][T17498]  ? rcu_is_watching+0x15/0xb0
[  212.151058][T17498]  do_syscall_64+0xfa/0x3b0
[  212.151066][T17498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.151074][T17498]  ? exc_page_fault+0x9f/0xf0
[  212.151086][T17498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.151094][T17498] RIP: 0033:0x7f5dd998ebe9
[  212.151103][T17498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.151111][T17498] RSP: 002b:00007f5dda865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.151121][T17498] RAX: ffffffffffffffda RBX: 00007f5dd9bb6180 RCX: 00007f5dd998ebe9
[  212.151127][T17498] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  212.151133][T17498] RBP: 00007f5dd9a11e19 R08: 0000000000000000 R09: 0000000000000000
[  212.151138][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.151143][T17498] R13: 00007f5dd9bb6218 R14: 00007f5dd9bb6180 R15: 00007ffe1edeeba8
[  212.151153][T17498]  </TASK>
[  212.489005][T17504] siw: device registration error -23
[  212.847955][T17522] syz.2.3115: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  212.854913][T17522] CPU: 0 UID: 0 PID: 17522 Comm: syz.2.3115 Not tainted syzkaller #0 PREEMPT(full) 
[  212.854933][T17522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.854941][T17522] Call Trace:
[  212.854947][T17522]  <TASK>
[  212.854953][T17522]  dump_stack_lvl+0x189/0x250
[  212.854974][T17522]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.854989][T17522]  ? __pfx__printk+0x10/0x10
[  212.855023][T17522]  ? lock_release+0x4b/0x3e0
[  212.855042][T17522]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  212.855058][T17522]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  212.855074][T17522]  warn_alloc+0x214/0x310
[  212.855096][T17522]  ? __pfx_warn_alloc+0x10/0x10
[  212.855116][T17522]  ? __get_vm_area_node+0x28f/0x300
[  212.855132][T17522]  ? xskq_create+0xbf/0x170
[  212.855149][T17522]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  212.855175][T17522]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  212.855191][T17522]  ? xskq_create+0x56/0x170
[  212.855215][T17522]  ? __kasan_kmalloc+0x93/0xb0
[  212.855232][T17522]  vmalloc_user_noprof+0xad/0xf0
[  212.855249][T17522]  ? xskq_create+0xbf/0x170
[  212.855265][T17522]  xskq_create+0xbf/0x170
[  212.855283][T17522]  xsk_init_queue+0xb0/0x110
[  212.855300][T17522]  xsk_setsockopt+0x57b/0x8d0
[  212.855317][T17522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  212.855333][T17522]  ? __pfx_aa_sk_perm+0x10/0x10
[  212.855351][T17522]  ? lock_release+0x4b/0x3e0
[  212.855369][T17522]  ? __se_sys_futex+0x36f/0x400
[  212.855384][T17522]  ? aa_sock_opt_perm+0xff/0x1b0
[  212.855397][T17522]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  212.855411][T17522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  212.855428][T17522]  do_sock_setsockopt+0x17c/0x1b0
[  212.855444][T17522]  __x64_sys_setsockopt+0x13f/0x1b0
[  212.855459][T17522]  do_syscall_64+0xfa/0x3b0
[  212.855471][T17522]  ? rcu_is_watching+0x15/0xb0
[  212.855483][T17522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.855497][T17522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.855539][T17522] RIP: 0033:0x7fe78b18ebe9
[  212.855551][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.855562][T17522] RSP: 002b:00007fe78bf75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  212.855576][T17522] RAX: ffffffffffffffda RBX: 00007fe78b3b6090 RCX: 00007fe78b18ebe9
[  212.855586][T17522] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  212.855593][T17522] RBP: 00007fe78b211e19 R08: 0000000000000004 R09: 0000000000000000
[  212.855601][T17522] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  212.855609][T17522] R13: 00007fe78b3b6128 R14: 00007fe78b3b6090 R15: 00007ffeb42d7238
[  212.855623][T17522]  </TASK>
[  212.855655][T17522] Mem-Info:
[  212.963404][T17522] active_anon:5660 inactive_anon:0 isolated_anon:0
[  212.963404][T17522]  active_file:1468 inactive_file:38271 isolated_file:0
[  212.963404][T17522]  unevictable:1768 dirty:68 writeback:0
[  212.963404][T17522]  slab_reclaimable:12432 slab_unreclaimable:95396
[  212.963404][T17522]  mapped:18269 shmem:2603 pagetables:978
[  212.963404][T17522]  sec_pagetables:0 bounce:0
[  212.963404][T17522]  kernel_misc_reclaimable:0
[  212.963404][T17522]  free:241649 free_pcp:27093 free_cma:0
[  212.980627][T17522] Node 0 active_anon:14792kB inactive_anon:0kB active_file:4060kB inactive_file:22576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42104kB dirty:248kB writeback:0kB shmem:5392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6520kB pagetables:1580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  212.992657][T17522] Node 1 active_anon:7848kB inactive_anon:0kB active_file:1812kB inactive_file:130508kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30972kB dirty:24kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10504kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  213.004677][T17522] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  213.015771][T17522] lowmem_reserve[]: 0 811 811 811 811
[  213.017945][T17522] Node 0 DMA32 free:278080kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14792kB inactive_anon:0kB active_file:4060kB inactive_file:22576kB unevictable:3536kB writepending:248kB present:1556484kB managed:830920kB mlocked:0kB bounce:0kB free_pcp:51520kB local_pcp:32372kB free_cma:0kB
[  213.030152][T17522] lowmem_reserve[]: 0 0 0 0 0
[  213.032044][T17522] Node 1 DMA32 free:449896kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8712kB local_pcp:40kB free_cma:0kB
[  213.043858][T17522] lowmem_reserve[]: 0 0 854 854 854
[  213.046159][T17522] Node 1 Normal free:223260kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7848kB inactive_anon:0kB active_file:1812kB inactive_file:130508kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48220kB local_pcp:15420kB free_cma:0kB
[  213.058138][T17522] lowmem_reserve[]: 0 0 0 0 0
[  213.060087][T17522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  213.064990][T17522] Node 0 DMA32: 884*4kB (UM) 786*8kB (UME) 198*16kB (UME) 558*32kB (UME) 95*64kB (UME) 18*128kB (UM) 21*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 55*4096kB (UM) = 278080kB
[  213.072278][T17522] Node 1 DMA32: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 107*4096kB (M) = 449896kB
[  213.078909][T17522] Node 1 Normal: 687*4kB (UME) 572*8kB (UME) 305*16kB (UM) 713*32kB (UME) 173*64kB (UM) 56*128kB (UME) 18*256kB (UM) 7*512kB (UME) 10*1024kB (M) 4*2048kB (UME) 35*4096kB (UM) = 223244kB
[  213.086233][T17522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.089891][T17522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.093540][T17522] 42342 total pagecache pages
[  213.095384][T17522] 0 pages in swap cache
[  213.097144][T17522] Free swap  = 124996kB
[  213.098750][T17522] Total swap = 124996kB
[  213.100381][T17522] 786301 pages RAM
[  213.101886][T17522] 0 pages HighMem/MovableOnly
[  213.103785][T17522] 241339 pages reserved
[  213.105451][T17522] 0 pages cma reserved
[  213.376772][T17565] syzkaller1: entered promiscuous mode
[  213.378556][T17565] syzkaller1: entered allmulticast mode
[  213.504205][T17561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  213.597446][T17573] netlink: 'syz.2.3127': attribute type 11 has an invalid length.
[  214.142642][T17599] __nla_validate_parse: 11 callbacks suppressed
[  214.142657][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3133'.
[  214.219273][T17603] 8021q: adding VLAN 0 to HW filter on device bond58
[  214.268700][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3137'.
[  214.324681][T17617] tipc: Enabling of bearer <et`:syzkaller0> rejected, media not registered
[  214.328853][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3138'.
[  214.393064][T17627] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3139'.
[  214.451967][T17634] openvswitch: netlink: Duplicate or invalid key (type 0).
[  214.454266][T17634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.501738][T17643] ip6gre4: entered allmulticast mode
[  214.569323][T17645] bond56 (unregistering): Released all slaves
[  214.609742][T17649] C: renamed from lo (while UP)
[  214.612861][T17649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.822130][T17658] gretap6: entered allmulticast mode
[  214.827675][T17658] bond59: (slave gretap6): making interface the new active one
[  214.831938][T17658] bond59: (slave gretap6): Enslaving as an active interface with an up link
[  214.856346][T17666] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3150'.
[  217.814657][T17671] wg1 speed is unknown, defaulting to 1000
[  217.817069][T17671] C speed is unknown, defaulting to 1000
[  217.847916][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'.
[  217.856381][T17682] syzkaller1: entered promiscuous mode
[  217.858545][T17682] syzkaller1: entered allmulticast mode
[  217.918678][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'.
[  217.921726][T17671] validate_nla: 4 callbacks suppressed
[  217.921736][T17671] netlink: 'syz.1.3151': attribute type 13 has an invalid length.
[  217.927565][T17671] netlink: 'syz.1.3151': attribute type 17 has an invalid length.
[  217.935926][T17671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  217.995160][T17696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.017537][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.020348][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.023174][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.026048][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.030511][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.036780][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.040226][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.045067][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.050891][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.055476][T17709] sctp: [Deprecated]: syz.0.3161 (pid 17709) Use of int in maxseg socket option.
[  218.055476][T17709] Use struct sctp_assoc_value instead
[  218.063977][T17703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.263283][T17734] netlink: 'syz.2.3166': attribute type 4 has an invalid length.
[  218.277927][T17734] netlink: 'syz.2.3166': attribute type 4 has an invalid length.
[  218.290318][T17734] netlink: 'syz.2.3166': attribute type 10 has an invalid length.
[  218.294043][T17736] bond55: (slave bridge29): Releasing backup interface
[  218.297612][T17736] bridge29: left promiscuous mode
[  218.351467][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3169'.
[  218.367416][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3169'.
[  218.371878][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3169'.
[  218.478890][T17765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  218.493160][T17765] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  218.519580][T17767] netlink: 'syz.1.3176': attribute type 21 has an invalid length.
[  218.635496][T17776] wg1 speed is unknown, defaulting to 1000
[  218.639157][T17776] C speed is unknown, defaulting to 1000
[  218.760820][T17782] netlink: 'syz.0.3179': attribute type 5 has an invalid length.
[  218.805129][T17783] wg1 speed is unknown, defaulting to 1000
[  218.811334][T17782] wg1 speed is unknown, defaulting to 1000
[  218.814403][T17783] C speed is unknown, defaulting to 1000
[  218.821374][T17782] C speed is unknown, defaulting to 1000
[  218.873818][T17789] netlink: 'syz.0.3180': attribute type 21 has an invalid length.
[  218.876945][T17789] netlink: 'syz.0.3180': attribute type 21 has an invalid length.
[  218.899798][T17791] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  218.944913][T17796] bond56 (unregistering): Released all slaves
[  219.473132][T17818] pim6reg1: entered promiscuous mode
[  219.479982][T17818] pim6reg1: entered allmulticast mode
[  219.706754][T17839] __nla_validate_parse: 20 callbacks suppressed
[  219.706765][T17839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3192'.
[  219.726954][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'.
[  219.730102][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'.
[  219.742449][T17854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3196'.
[  219.787945][T17858] wg1 speed is unknown, defaulting to 1000
[  219.790756][T17858] C speed is unknown, defaulting to 1000
[  219.825403][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3198'.
[  220.078992][T17883] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  220.133381][T17887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.152336][T17894] syzkaller1: entered promiscuous mode
[  220.154274][T17894] syzkaller1: entered allmulticast mode
[  220.167674][ T5877] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.170454][ T9460] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.260938][T17910] bond60 (unregistering): Released all slaves
[  220.316082][T17915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3214'.
[  220.353494][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'.
[  220.393799][T17923] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3216'.
[  220.397619][T17923] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3216'.
[  220.401330][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3216'.
[  220.487311][T17929] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.506473][ T5877] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.594733][T17932] wg1: left allmulticast mode
[  220.596852][T17932] veth0_to_team: left promiscuous mode
[  220.598713][T17932] veth0_to_team: left allmulticast mode
[  220.600881][T17932] batadv_slave_0: left promiscuous mode
[  220.604659][T17932] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  220.607152][T17932] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  220.612631][T17932] vlan0: left promiscuous mode
[  220.614744][T17932] bond0: left promiscuous mode
[  220.620464][T17932] veth21: left promiscuous mode
[  220.623205][T17932] gretap5: left promiscuous mode
[  220.625449][T17932] bond29: left promiscuous mode
[  220.627291][T17932] bond29: left allmulticast mode
[  220.629350][T17932] macvlan9: left promiscuous mode
[  220.631641][T17932] veth25: left promiscuous mode
[  220.933623][T17939] sit0: entered promiscuous mode
[  220.963695][T17938] 8021q: VLANs not supported on gre0
[  220.973524][T17944] bond59: (slave gretap6): Releasing active interface
[  221.484552][T17983] netlink: 'syz.0.3234': attribute type 11 has an invalid length.
[  221.747406][T17992] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001
[  221.823641][T18004] bond56: (slave bridge30): making interface the new active one
[  221.828291][T18004] bond56: (slave bridge30): Enslaving as an active interface with an up link
[  221.892876][T18017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.904173][T18017] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  221.907515][T18017] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  222.073102][T18045] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  222.155177][T18055] batadv1: left allmulticast mode
[  222.165958][T18055] batadv1: left promiscuous mode
[  222.168158][T18055] bridge0: port 1(batadv1) entered disabled state
[  222.218249][T18061] syzkaller0: entered promiscuous mode
[  222.220171][T18061] syzkaller0: entered allmulticast mode
[  222.224882][T18063] sit0: left promiscuous mode
[  222.229735][T18063] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  222.231883][T18063] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  222.244411][T18063] gretap6: left allmulticast mode
[  222.336451][T18071] siw: device registration error -23
[  222.365465][T18076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.369090][T18075] syzkaller0: entered promiscuous mode
[  222.370823][T18075] syzkaller0: entered allmulticast mode
[  222.380459][T18075] tipc: Resetting bearer <eth:syzkaller0>
[  222.389126][T18074] tipc: Resetting bearer <eth:syzkaller0>
[  222.394096][T18074] tipc: Disabling bearer <eth:syzkaller0>
[  222.471050][T18079] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  222.829588][T18098] wg1 speed is unknown, defaulting to 1000
[  222.831931][T18098] C speed is unknown, defaulting to 1000
[  223.009190][T18102] validate_nla: 12 callbacks suppressed
[  223.009208][T18102] netlink: 'syz.1.3269': attribute type 1 has an invalid length.
[  223.019414][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.028879][T18102] 8021q: adding VLAN 0 to HW filter on device bond45
[  223.038879][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.041353][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.043808][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.046521][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.048957][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.051324][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.053845][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.056600][T18106] netlink: 'syz.0.3270': attribute type 1 has an invalid length.
[  223.077026][T18111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.285425][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  223.286317][T18127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.310566][T18124] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.502798][T18139] vlan3: entered promiscuous mode
[  223.509234][T18139] gretap0: entered promiscuous mode
[  223.638642][ T5877] C speed is unknown, defaulting to 1000
[  223.640555][ T5877] syz1: Port: 1 Link DOWN
[  223.644668][ T5877] C speed is unknown, defaulting to 1000
[  223.655724][ T5877] syz1: Port: 1 Link ACTIVE
[  223.858003][T18153] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  224.014332][T18160] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  224.024350][T18160] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  224.033144][T18161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.036880][T18160] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  224.039660][T18160] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  224.042166][T18160] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  224.064357][T18161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.143756][T18184] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  224.151435][T18183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.159547][T18183] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  224.163998][T18183] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  224.354086][T18226] 8021q: adding VLAN 0 to HW filter on device bond46
[  224.359479][T18226] 8021q: adding VLAN 0 to HW filter on device bond46
[  224.361874][T18226] bond46: (slave vcan1): The slave device specified does not support setting the MAC address
[  224.366370][T18226] bond46: (slave vcan1): Error -95 calling set_mac_address
[  224.411464][T18226] macvlan10: entered promiscuous mode
[  224.413207][T18226] macvlan10: entered allmulticast mode
[  224.415461][T18226] bond46: entered promiscuous mode
[  224.417848][T18226] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  224.420581][T18226] bond46: left promiscuous mode
[  224.475576][T18244] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  224.478014][T18244] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  224.672989][T18290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.687287][T18290] syzkaller0: entered promiscuous mode
[  224.689211][T18290] syzkaller0: entered allmulticast mode
[  224.695406][T18290] tipc: Resetting bearer <eth:syzkaller0>
[  224.699500][T18289] tipc: Resetting bearer <eth:syzkaller0>
[  224.735278][T18289] tipc: Disabling bearer <eth:syzkaller0>
[  225.104434][T18306] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  225.108631][T18306] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  225.686995][T18321] __nla_validate_parse: 30 callbacks suppressed
[  225.687005][T18321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3322'.
[  225.702313][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'.
[  225.726379][T18328] bond60 (unregistering): Released all slaves
[  225.800147][T18331] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  225.805463][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'.
[  225.830005][T18340] 8021q: adding VLAN 0 to HW filter on device bond61
[  225.833719][T18340] bond60: (slave bond61): making interface the new active one
[  225.838999][T18340] bond60: (slave bond61): Enslaving as an active interface with an up link
[  225.850156][T18340] bond60: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  225.854980][T18340] bond60: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  225.905319][T18344] siw: device registration error -23
[  226.018791][T18352] 8021q: adding VLAN 0 to HW filter on device bond47
[  226.025570][T18352] 8021q: adding VLAN 0 to HW filter on device bond47
[  226.027983][T18352] bond47: (slave vcan1): The slave device specified does not support setting the MAC address
[  226.031808][T18352] bond47: (slave vcan1): Error -95 calling set_mac_address
[  226.075375][T18355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3331'.
[  226.083897][T18352] macvlan10: entered promiscuous mode
[  226.085778][T18352] macvlan10: entered allmulticast mode
[  226.088018][T18352] bond47: entered promiscuous mode
[  226.089858][T18352] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  226.092896][T18352] bond47: left promiscuous mode
[  226.239292][T18372] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.242397][T18372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3337'.
[  226.245224][T18372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3337'.
[  226.324143][T18381] 8021q: adding VLAN 0 to HW filter on device bond48
[  226.329331][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'.
[  226.338783][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'.
[  226.349793][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'.
[  226.429023][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'.
[  226.713775][T18418] 8021q: adding VLAN 0 to HW filter on device bond62
[  226.725327][T18418] bond62: (slave bridge37): making interface the new active one
[  226.730854][T18418] bond62: (slave bridge37): Enslaving as an active interface with an up link
[  226.738371][T18418] bond62: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  226.893118][T18436] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.897671][T18436] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  226.900145][T18436] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  226.971630][T18446] bridge38: entered promiscuous mode
[  226.992016][T18448] bridge_slave_0: entered promiscuous mode
[  227.071348][T18448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.118257][T18451] 8021q: adding VLAN 0 to HW filter on device bond63
[  227.125840][T18451] veth17: entered promiscuous mode
[  227.129553][T18451] bond63: (slave veth17): Enslaving as a backup interface with a down link
[  227.134484][T18451] bond60: (slave bond61): Releasing backup interface
[  227.142103][T18451] bond62: (slave bridge37): Releasing active interface
[  227.148675][T18451] bond63: (slave veth17): Releasing backup interface
[  227.273231][T18465] 8021q: adding VLAN 0 to HW filter on device bond65
[  227.278522][T18465] bond64: (slave bond65): making interface the new active one
[  227.281629][T18465] bond64: (slave bond65): Enslaving as an active interface with an up link
[  227.292051][T18466] 8021q: adding VLAN 0 to HW filter on device bond66
[  227.295042][T18466] bond64: (slave bond66): Enslaving as a backup interface with an up link
[  227.553706][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.556764][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.559393][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.562423][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.565225][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.568421][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.571135][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.574168][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.577841][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.580936][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.583704][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.586519][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.589593][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.592640][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.595591][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.598821][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.601746][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.604834][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.610021][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.613199][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.627087][T18488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.836001][    C0] ==================================================================
[  229.839226][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  229.842390][    C0] Read of size 2 at addr ffff88810fd5482a by task swapper/0/0
[  229.845963][    C0] 
[  229.847197][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  229.847217][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.847227][    C0] Call Trace:
[  229.847260][    C0]  <IRQ>
[  229.847268][    C0]  dump_stack_lvl+0x189/0x250
[  229.847289][    C0]  ? rcu_is_watching+0x15/0xb0
[  229.847305][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.847320][    C0]  ? rcu_is_watching+0x15/0xb0
[  229.847334][    C0]  ? lock_release+0x4b/0x3e0
[  229.847356][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  229.847374][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  229.847392][    C0]  print_report+0xca/0x240
[  229.847405][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  229.847424][    C0]  kasan_report+0x118/0x150
[  229.847443][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  229.847464][    C0]  rose_timer_expiry+0x471/0x4b0
[  229.847483][    C0]  call_timer_fn+0x17e/0x5f0
[  229.847502][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  229.847520][    C0]  ? call_timer_fn+0xbe/0x5f0
[  229.847538][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  229.847556][    C0]  ? rcu_is_watching+0x15/0xb0
[  229.847566][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  229.847582][    C0]  __run_timer_base+0x61a/0x860
[  229.847598][    C0]  ? ktime_get+0x3e/0x1f0
[  229.847617][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  229.847632][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  229.847653][    C0]  run_timer_softirq+0xb7/0x180
[  229.847668][    C0]  handle_softirqs+0x286/0x870
[  229.847683][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  229.847696][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  229.847710][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  229.847728][    C0]  __irq_exit_rcu+0xca/0x1f0
[  229.847741][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  229.847758][    C0]  irq_exit_rcu+0x9/0x30
[  229.847770][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  229.847792][    C0]  </IRQ>
[  229.847798][    C0]  <TASK>
[  229.847803][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  229.847820][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  229.847841][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  229.847855][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  229.847868][    C0] RAX: 5cfa5528ed84ac00 RBX: ffffffff819683b8 RCX: 5cfa5528ed84ac00
[  229.847880][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  229.847891][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  229.847901][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  229.847920][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  229.847932][    C0]  ? do_idle+0x1e8/0x510
[  229.847948][    C0]  ? do_idle+0x1e8/0x510
[  229.847961][    C0]  default_idle+0x13/0x20
[  229.847975][    C0]  default_idle_call+0x74/0xb0
[  229.847989][    C0]  do_idle+0x1e8/0x510
[  229.848004][    C0]  ? __pfx_do_idle+0x10/0x10
[  229.848023][    C0]  cpu_startup_entry+0x44/0x60
[  229.848036][    C0]  rest_init+0x2de/0x300
[  229.848053][    C0]  start_kernel+0x3a9/0x410
[  229.848073][    C0]  x86_64_start_reservations+0x24/0x30
[  229.848095][    C0]  x86_64_start_kernel+0x143/0x1c0
[  229.848116][    C0]  common_startup_64+0x13e/0x147
[  229.848141][    C0]  </TASK>
[  229.848146][    C0] 
[  229.974635][    C0] Allocated by task 5292:
[  229.976398][    C0]  kasan_save_track+0x3e/0x80
[  229.978300][    C0]  __kasan_kmalloc+0x93/0xb0
[  229.980159][    C0]  __kmalloc_node_noprof+0x276/0x4e0
[  229.982293][    C0]  allocate_slab+0x16a/0x370
[  229.984150][    C0]  ___slab_alloc+0xbeb/0x1410
[  229.986017][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  229.988099][    C0]  __send_signal_locked+0x22a/0xeb0
[  229.989826][    C0]  group_send_sig_info+0x1fd/0x260
[  229.991529][    C0]  do_bpf_send_signal+0xa9/0x1c0
[  229.993178][    C0]  irq_work_single+0xe1/0x240
[  229.994791][    C0]  irq_work_run+0x155/0x2f0
[  229.996325][    C0]  __sysvec_irq_work+0xa8/0x3d0
[  229.998297][    C0]  sysvec_irq_work+0x9e/0xc0
[  229.999850][    C0]  asm_sysvec_irq_work+0x1a/0x20
[  230.001492][    C0] 
[  230.002318][    C0] Freed by task 5877:
[  230.003702][    C0]  kasan_save_track+0x3e/0x80
[  230.005309][    C0]  kasan_save_free_info+0x46/0x50
[  230.007075][    C0]  __kasan_slab_free+0x5b/0x80
[  230.008866][    C0]  kfree+0x18e/0x440
[  230.010149][    C0]  __free_slab+0xb0/0x1a0
[  230.011617][    C0]  __slab_free+0x303/0x3c0
[  230.013112][    C0]  qlist_free_all+0x97/0x140
[  230.014605][    C0]  kasan_quarantine_reduce+0x148/0x160
[  230.016548][    C0]  __kasan_slab_alloc+0x22/0x80
[  230.018336][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  230.020281][    C0]  __alloc_skb+0x112/0x2d0
[  230.021696][    C0]  mld_newpack+0x13c/0xc40
[  230.023245][    C0]  add_grhead+0x5a/0x2a0
[  230.024616][    C0]  add_grec+0x1452/0x1740
[  230.026044][    C0]  mld_ifc_work+0x6ed/0xd60
[  230.027748][    C0]  process_scheduled_works+0xae1/0x17b0
[  230.029533][    C0]  worker_thread+0x8a0/0xda0
[  230.030989][    C0]  kthread+0x711/0x8a0
[  230.032264][    C0]  ret_from_fork+0x3fc/0x770
[  230.033703][    C0]  ret_from_fork_asm+0x1a/0x30
[  230.035199][    C0] 
[  230.035967][    C0] The buggy address belongs to the object at ffff88810fd54800
[  230.035967][    C0]  which belongs to the cache kmalloc-512 of size 512
[  230.040504][    C0] The buggy address is located 42 bytes inside of
[  230.040504][    C0]  freed 512-byte region [ffff88810fd54800, ffff88810fd54a00)
[  230.044881][    C0] 
[  230.045721][    C0] The buggy address belongs to the physical page:
[  230.047979][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810fd55000 pfn:0x10fd54
[  230.051024][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  230.053628][    C0] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  230.056297][    C0] page_type: f5(slab)
[  230.057630][    C0] raw: 057ff00000000240 ffff88801a441c80 ffffea00044b0210 ffffea000497e910
[  230.060330][    C0] raw: ffff88810fd55000 000000000010000d 00000000f5000000 0000000000000000
[  230.063107][    C0] head: 057ff00000000240 ffff88801a441c80 ffffea00044b0210 ffffea000497e910
[  230.065982][    C0] head: ffff88810fd55000 000000000010000d 00000000f5000000 0000000000000000
[  230.069199][    C0] head: 057ff00000000002 ffffea00043f5501 00000000ffffffff 00000000ffffffff
[  230.072454][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  230.075717][    C0] page dumped because: kasan: bad access detected
[  230.078150][    C0] page_owner tracks the page as allocated
[  230.080332][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 46218357004, free_ts 46218187487
[  230.088264][    C0]  post_alloc_hook+0x240/0x2a0
[  230.090112][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  230.092247][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  230.094460][    C0]  alloc_pages_mpol+0x232/0x4a0
[  230.096359][    C0]  allocate_slab+0x8a/0x370
[  230.098100][    C0]  ___slab_alloc+0xbeb/0x1410
[  230.099917][    C0]  __kmalloc_noprof+0x305/0x4f0
[  230.101807][    C0]  fib6_info_alloc+0x30/0xf0
[  230.103592][    C0]  ip6_route_info_create+0x142/0x860
[  230.105651][    C0]  ip6_route_add+0x49/0x1b0
[  230.107430][    C0]  addrconf_add_dev+0x24f/0x340
[  230.109247][    C0]  inet6_addr_add+0x1a1/0xc00
[  230.111043][    C0]  inet6_rtm_newaddr+0x93d/0xd20
[  230.112954][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  230.114892][    C0]  netlink_rcv_skb+0x208/0x470
[  230.116731][    C0]  netlink_unicast+0x82f/0x9e0
[  230.118575][    C0] page last free pid 5840 tgid 5840 stack trace:
[  230.120979][    C0]  __free_frozen_pages+0xbc4/0xd30
[  230.122954][    C0]  stack_depot_save_flags+0x436/0x860
[  230.125168][    C0]  kasan_save_track+0x4f/0x80
[  230.126989][    C0]  __kasan_kmalloc+0x93/0xb0
[  230.128729][    C0]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  230.131064][    C0]  kmemdup_noprof+0x2b/0x70
[  230.132767][    C0]  neigh_sysctl_register+0x9f/0xa80
[  230.134773][    C0]  addrconf_sysctl_register+0xb3/0x1c0
[  230.136830][    C0]  ipv6_add_dev+0xd46/0x1370
[  230.138625][    C0]  ipv6_find_idev+0xc1/0x1d0
[  230.140410][    C0]  inet6_rtm_newaddr+0x734/0xd20
[  230.142312][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  230.144178][    C0]  netlink_rcv_skb+0x208/0x470
[  230.146033][    C0]  netlink_unicast+0x82f/0x9e0
[  230.147862][    C0]  netlink_sendmsg+0x805/0xb30
[  230.149776][    C0]  __sock_sendmsg+0x21c/0x270
[  230.151369][    C0] 
[  230.152118][    C0] Memory state around the buggy address:
[  230.154084][    C0]  ffff88810fd54700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  230.156629][    C0]  ffff88810fd54780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  230.159267][    C0] >ffff88810fd54800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  230.161745][    C0]                                   ^
[  230.163461][    C0]  ffff88810fd54880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  230.165911][    C0]  ffff88810fd54900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  230.168411][    C0] ==================================================================
[  230.170971][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  230.173232][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  230.176145][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.179878][    C0] Call Trace:
[  230.180955][    C0]  <IRQ>
[  230.181885][    C0]  dump_stack_lvl+0x99/0x250
[  230.183368][    C0]  ? __asan_memcpy+0x40/0x70
[  230.184830][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.186489][    C0]  ? __pfx__printk+0x10/0x10
[  230.187982][    C0]  vpanic+0x281/0x750
[  230.189421][    C0]  ? __pfx_vpanic+0x10/0x10
[  230.191069][    C0]  ? ct_nmi_exit+0x14b/0x1d0
[  230.192628][    C0]  panic+0xb9/0xc0
[  230.193920][    C0]  ? __pfx_panic+0x10/0x10
[  230.195406][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  230.197336][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  230.199200][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  230.200919][    C0]  check_panic_on_warn+0x89/0xb0
[  230.202529][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  230.204100][    C0]  end_report+0x78/0x160
[  230.205502][    C0]  kasan_report+0x129/0x150
[  230.206936][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  230.208565][    C0]  rose_timer_expiry+0x471/0x4b0
[  230.210234][    C0]  call_timer_fn+0x17e/0x5f0
[  230.211781][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  230.213488][    C0]  ? call_timer_fn+0xbe/0x5f0
[  230.214981][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  230.216674][    C0]  ? rcu_is_watching+0x15/0xb0
[  230.218276][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  230.220032][    C0]  __run_timer_base+0x61a/0x860
[  230.221599][    C0]  ? ktime_get+0x3e/0x1f0
[  230.222930][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  230.224603][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  230.226549][    C0]  run_timer_softirq+0xb7/0x180
[  230.228101][    C0]  handle_softirqs+0x286/0x870
[  230.229707][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  230.231196][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  230.232918][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  230.234599][    C0]  __irq_exit_rcu+0xca/0x1f0
[  230.236134][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  230.237894][    C0]  irq_exit_rcu+0x9/0x30
[  230.239361][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  230.241095][    C0]  </IRQ>
[  230.242088][    C0]  <TASK>
[  230.243128][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.245127][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  230.246884][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  230.253145][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  230.255056][    C0] RAX: 5cfa5528ed84ac00 RBX: ffffffff819683b8 RCX: 5cfa5528ed84ac00
[  230.257493][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  230.260177][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  230.263333][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  230.266495][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  230.269284][    C0]  ? do_idle+0x1e8/0x510
[  230.270618][    C0]  ? do_idle+0x1e8/0x510
[  230.271949][    C0]  default_idle+0x13/0x20
[  230.273331][    C0]  default_idle_call+0x74/0xb0
[  230.275023][    C0]  do_idle+0x1e8/0x510
[  230.276607][    C0]  ? __pfx_do_idle+0x10/0x10
[  230.278404][    C0]  cpu_startup_entry+0x44/0x60
[  230.280239][    C0]  rest_init+0x2de/0x300
[  230.281867][    C0]  start_kernel+0x3a9/0x410
[  230.283619][    C0]  x86_64_start_reservations+0x24/0x30
[  230.285672][    C0]  x86_64_start_kernel+0x143/0x1c0
[  230.287599][    C0]  common_startup_64+0x13e/0x147
[  230.289503][    C0]  </TASK>
[  230.291310][    C0] Kernel Offset: disabled
[  230.292973][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:27:27  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff888107e18237 R9 =1ffff11020fc3046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb906 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3bca219967 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f3bcc587d20
XMM02=0000010002000600 00bbaaaaaaaaaa00 XMM03=0ec0030005000800 0000000003004400
XMM04=09b00301c8100001 9003010000020806 XMM05=0100100009800401 0000040806060168
XMM06=e000080009e00300 100009d003001000 XMM07=09c00302100009b0 0301c81000019003
XMM08=0100000208060ec0 0300050008000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88812409d1c0 RCX=ffffffff8b7c7dbc RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88812409d1c0 RBP=ffffc900001e0a78 RSP=ffffc900001e0980
R8 =ffff88812409d1c3 R9 =1ffff11024813a38 R10=dffffc0000000000 R11=ffffed1024813a39
R12=1ffff9200003c138 R13=0000000000000001 R14=ffffc900001e09e0 R15=1ffff11024813a38
RIP=ffffffff8b7c7daf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555585be45c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000167 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
