last executing test programs:

2m20.372896915s ago: executing program 2 (id=920):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000190001010000000000000000021800000000ff010008000100ac1414000800060007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r1, 0x0, 0x1000000}, 0x38)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x5d4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0080000000e4000008051b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
write(r8, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf00)

2m20.172536308s ago: executing program 2 (id=924):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xcd, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494e84e35fe93ff248cd58762e1ca3a5ba1c51a336b72632c46bcf08d87929e1c80497d9e0782"]}]}, 0xe0}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m20.074771301s ago: executing program 2 (id=925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x5}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40051}, 0x20040054)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2m19.98400866s ago: executing program 2 (id=927):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async, rerun: 32)
r2 = socket(0x18, 0x3, 0x7) (async, rerun: 32)
socket(0x22, 0x2, 0x4) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0xbc, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ead1349a1bab0e82b656d93b1d89e3b134a21965f1172baafbddbc2a6aa93386"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000a40)="94581856ec2143a6244cc71ccb2f31f5adeae5ad26e64eeb92941bc9fddf976d31529d2c6109548151b615bb0c088bb307ba44409f1909dcd061d486afca6cdc4ad0b634ce630b7b1317ffaf774f67a5eb8e21239903dd8e5fe3ce598c20dbe2e26e9c5bea7741e8f7b5d7b451e3a352cac2163b2b59d37a1c39e22e1bd943ce6b12d5", &(0x7f0000000b00)=""/159, 0x4}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0x123}]}]}]}, 0x28}], 0x1}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x26c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @nested={0x240, 0x11f, 0x0, 0x1, [@nested={0x23b, 0x6f, 0x0, 0x1, [@generic="e1eb4f56bd7beef10c736871d3c1a721f7690a2e16c58b98f902857f78e2eee73521f028f550e4d3fd70ae4126e04a7d15b0e1cf47b4b1b3b9558337d462b080e57cef45679ec1356c94127f98a2", @generic="f7a762ae7a4c88c577bf751c41321d8fdb667c6cff51f2cfa1c392c2bfd66aefe54a29c18a5af06c52ed21592cf6eb2f36eb2c270b86d431b3571b9eae2a06cdae59fc2dee95c5d7894595e99e8bc4787c2a60e5e1ab54260651e33764ee36459b5646bcaeb468c2cdf1c26fd80c530475a2fdd5595beeec", @generic="b751aba75d73e6dca1b574fe80168bd9f034eaede3d425149dc87caf657ad475ab38814a5a38f14efa1431716515c762e6071265a433f56a4fb0d92843c2756bd85496f2504e190157d73dbc11fd51b956f999e53987034694dfae665cc5933c71ac7e61cda6f98418302c65311f82e8482caf0f68d439dde692ed3b9f44adc0ad0451a5e3103291eec10847b3ee898a798b8ba56413bc1f06a23ed4723f5927eb", @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x401}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x15}, @typed={0x8, 0xa3, 0x0, 0x0, @u32=0xf3e1}, @generic="098ade9132c31c08ad06e0e0d1eaa4a1802023aaacc256f63bae005fea376ddcd1078ab11b0271812db8dba0ed01ee4a525332de4d6fbbfa05c705499a11cb73f2cfc712dbdc38a1dee034cc3a27e2e35b0580e833a2e972b5918021b57de1ca1e7eb7d20b65796da0bcc8b462313bf197c1154fe667e7ba44fc751d97b67421da2dc210be6462ba3bbc1eb29c7406ee0ddcc53e1ce43ff12c11421f151c7fd719f96e75eea7f9f0c126e653", @nested={0x4, 0xb4}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018", @ANYRES32, @ANYRES16=r7, @ANYRES32=r0, @ANYBLOB="e4003121df35d895a2a068a967fb63620d"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r14}, 0x10)

2m19.982534385s ago: executing program 2 (id=929):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x4f83, 0xffffffff}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000010426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0064c104427c72e2010059727354f1"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x60000002)

2m19.904459512s ago: executing program 2 (id=930):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, 0x0, 0x0, 0x20000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x10, 0x0, 0x0)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003480)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x6}}}]}]}]}}]}, 0x54}}, 0x20040054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0800180000000000000028000000280000000400000002000000000000110300000000000000000000000000000d0000000002000000000000080200000000006100"], 0x0, 0x44}, 0x28)
unshare(0x8040480)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r10, &(0x7f0000000540)}, 0x20)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

2m4.910152652s ago: executing program 32 (id=930):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, 0x0, 0x0, 0x20000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
r5 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x10, 0x0, 0x0)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003480)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x6}}}]}]}]}}]}, 0x54}}, 0x20040054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0800180000000000000028000000280000000400000002000000000000110300000000000000000000000000000d0000000002000000000000080200000000006100"], 0x0, 0x44}, 0x28)
unshare(0x8040480)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r10, &(0x7f0000000540)}, 0x20)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

1.769086535s ago: executing program 1 (id=3368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x1b, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x29, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_delneigh={0x30, 0x1d, 0x300, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x80, 0x22, 0x6}, [@NDA_PROTOCOL={0x5, 0xc, 0x32}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x20004002)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@mpls_delroute={0xa8, 0x19, 0x72a, 0x70bd2d, 0x25dfdbff, {0x1c, 0x0, 0x10, 0x3, 0xff, 0x1, 0xfe, 0x5, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0x1ff, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x8}, {}, {0x9, 0x0, 0x1}, {0x5}, {0x7}, {0x1000}, {0x7ff}, {0x10}, {0x7}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xbde6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x7}, {0x8000, 0x0, 0x1}, {0x91b, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x81}, {0x2ed, 0x0, 0x1}, {0x40}, {0x6}]}, @RTA_DST={0x8, 0x1, {0x7}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x40}, 0x8)
close(r4)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

1.650175919s ago: executing program 1 (id=3369):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0xe3, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendfile(r1, r0, 0x0, 0xfff)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0xa, 0x1, 0x1, 0x0, 0x0, [{{r0}, 0x800}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000030701020000000000000000050000060900010073797a3100000000ff0102400000000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010)

1.478282188s ago: executing program 1 (id=3374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r2, 0x1d20b000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff})
getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x18, r3, 0x4, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004850}, 0x20040040)

1.399098841s ago: executing program 1 (id=3376):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x1771, 'syz1\x00'})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404e0d0}, 0x404c845)
sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28c0}, 0x20000000)
accept4$ax25(r3, 0x0, &(0x7f0000000040), 0x80000)

1.180192942s ago: executing program 3 (id=3380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x24}, 0x1, 0x0, 0x0, 0x44005}, 0x0)

1.179671284s ago: executing program 3 (id=3381):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002100)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001500)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0xe}, 0x5, 0x7, 0xe99, 0x0, 0x25, 'syz0\x00', "fdd16555daff7d30b438d9e67ec53ed941f42285cacecc70d917f42737c06404", "a9f12ef4bae62461adbe590d6b46ce267602531fac341453e32fb72aa9abbea5", [{0xe, 0x1, {0x3}}, {0x228, 0x2, {0x2, 0x8}}, {0x6, 0x49, {0x1, 0x6}}, {0x800, 0x40, {0x1, 0x15000000}}, {0x3, 0xffff, {0x1, 0x2}}, {0x9, 0x48, {0x0, 0x4}}, {0x0, 0x1, {0x1, 0x3}}, {0x4, 0x6, {0x1, 0x7fff}}, {0x2, 0x0, {0x3, 0x97b}}, {0x6, 0x9, {0x1, 0x6}}, {0xd704, 0xb40, {0x0, 0xd49}}, {0x7, 0xa3, {0x0, 0x1}}, {0x8de9, 0x80, {0x2, 0x53d}}, {0x8, 0x2, {0x0, 0x1}}, {0x7, 0x5, {0x1, 0x5}}, {0x8, 0xd, {0x2}}, {0x4, 0x1, {0x2}}, {0x0, 0x7fff, {0x3, 0xa}}, {0x81, 0x1000, {0x2, 0x7f}}, {0xd, 0x6, {0x0, 0x1}}, {0x2, 0x8, {0x2, 0x1}}, {0x6, 0x6, {0x0, 0x7fff}}, {0x7, 0x0, {0x2, 0x9}}, {0x5, 0x8, {0x3, 0xffff}}, {0xa614, 0x3, {0x1, 0x7}}, {0x6, 0x7, {0x1, 0x4}}, {0xb4a8, 0xb3, {0x3, 0x6}}, {0x9, 0x8, {0x2, 0x6}}, {0x1, 0x3}, {0xffff, 0x1, {0x7, 0x5}}, {0x1, 0xe5e8, {0x2, 0x5}}, {0x9, 0x9, {0x3, 0x8}}, {0x8, 0x3, {0x0, 0x6}}, {0xba39, 0x3, {0x2, 0x9}}, {0x3, 0x3, {0x2, 0x7ff}}, {0x4, 0x5, {0x3, 0x800}}, {0x0, 0xffff, {0x3, 0xa56}}, {0x977, 0x3, {0x2, 0xa2a}}, {0xe7c, 0x9271, {0x1, 0x6}}, {0x81, 0x1000, {0x3, 0x1000}}]}}}, {{0x254, 0x1, {{0xf89feeac4b5e1d79, 0x6}, 0x9, 0x6, 0x2e88, 0x4, 0x17, 'syz1\x00', "b5caddc81385420294bc80cc58aa7dc95e42c66010e2ee8673676d05f8053592", "a66ff07458f8fee73279de3b64f24a3acb6874cafa7409ee0305b8359db1f907", [{0xbc, 0x8, {0x3, 0x1aed}}, {0x5, 0x2, {0x2, 0x7f}}, {0x82, 0xdb7d, {0x1, 0x8}}, {0x1, 0x8, {0x3, 0x1ff}}, {0x5, 0x3, {0x0, 0x2}}, {0x3, 0xd, {0x0, 0x7}}, {0x9, 0xc, {0x2, 0xc0}}, {0x8, 0xfff8, {0x0, 0x10}}, {0x4, 0x9, {0x1, 0x1}}, {0x0, 0x2, {0x3, 0x7fffffff}}, {0x84d, 0x2, {0x1, 0x3}}, {0x101, 0x91dd, {0x0, 0x401}}, {0x1, 0x7f, {0x1, 0x4}}, {0xa, 0x4, {0x0, 0x6}}, {0x33e, 0x8, {0x3, 0x4}}, {0x10, 0xc, {0x0, 0xfffffff8}}, {0x8, 0xcf10, {0x2, 0xfffffff8}}, {0x22a, 0xe6, {0x2, 0x4}}, {0x2, 0x80, {0x3, 0x6}}, {0x1, 0x6, {0x3, 0x8}}, {0x9, 0xe, {0x1, 0x71}}, {0x7, 0x5, {0x2, 0x80}}, {0x9c3b, 0x6, {0x1, 0x9}}, {0x200, 0x1, {0x2, 0x800}}, {0xfffc, 0x9, {0x0, 0x2}}, {0x10, 0x6, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x1}}, {0xf104, 0x2, {0x3, 0xa7f7}}, {0x8, 0x9, {0x0, 0x800}}, {0x7, 0x6e, {0x1, 0x8}}, {0x10, 0x3, {0x2}}, {0x4, 0x4, {0x1, 0xed4e139}}, {0x4, 0x3, {0x1, 0x5}}, {0x8, 0x5, {0x1, 0x7}}, {0xcf8, 0x6, {0x2, 0x3}}, {0x8000, 0xfff0, {0x3, 0x7fff}}, {0xe1, 0x7fff, {0x2, 0x80}}, {0x5, 0x2, {0x0, 0xd8}}, {0x8000, 0x8, {0x3, 0x7fff}}, {0x8001, 0x2, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff9}, 0xd, 0x59, 0x3, 0x1dc, 0x6, 'syz1\x00', "313b0cc9faf9b74d9c818f52189fe4d3edb2ad74c3005ecb46235f1035d9ba56", "f8efeb1fbeaafc858a8dd1922b0013a94b2ed10b4395933ea65aed77da55d50c", [{0x0, 0x9, {0x1}}, {0xfffa, 0xc0, {0x0, 0x101}}, {0x8, 0x2, {0x0, 0x5}}, {0x1, 0x8, {0x2, 0xb51c}}, {0x100, 0x6, {0x0, 0x7}}, {0x400, 0x2, {0x1, 0x1c}}, {0x8, 0x3, {0x0, 0x7}}, {0x7, 0x6, {0x1, 0x3}}, {0xd, 0x7, {0x2, 0xfffffffb}}, {0x4, 0x1ff, {0x0, 0x7}}, {0x1, 0x5, {0x3, 0x7fff}}, {0x0, 0x6, {0x2, 0x4}}, {0x7468, 0x1, {0x2, 0x3}}, {0x1000, 0x0, {0x7ea723bb9f0f5249, 0x7}}, {0x36e, 0x3, {0x1, 0x7fff}}, {0x2, 0x9, {0x3, 0xfffffff9}}, {0x7, 0x12, {0x0, 0x10000}}, {0x24, 0x0, {0x2, 0xfffff534}}, {0x4, 0x1, {0x0, 0x26c}}, {0xe36, 0x93b, {0x2, 0x5bd1}}, {0x7b, 0x8c28, {0x0, 0x3}}, {0x8, 0x9, {0x1}}, {0xc32, 0x5, {0x3, 0x1}}, {0x3ff, 0x5, {0x1, 0xc}}, {0xc9, 0x5, {0x2, 0x8}}, {0x4, 0x94, {0x3, 0x7}}, {0x4, 0x1, {0x3}}, {0xfff9, 0x7, {0x2, 0x8001}}, {0xfff, 0x9, {0x1, 0x4e60}}, {0xd6, 0x7, {0x3, 0xc7d4}}, {0x6, 0x345d, {0x3, 0x99}}, {0x4, 0x2, {0x0, 0x4}}, {0x3, 0x0, {0x0, 0x4}}, {0x3, 0x200, {0x1, 0x6}}, {0x2c4, 0x4, {0x3, 0x1}}, {0x8, 0x0, {0x0, 0x1}}, {0x7, 0x813, {0x1}}, {0x81, 0x7, {0x0, 0x7}}, {0x298, 0x2, {0x3, 0x3}}, {0xf, 0x3, {0x2, 0x101}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x10, 0x4, 0x9, 0x2, 0x22, 'syz1\x00', "436249006f9c8847efd525906c34da399b9c94adc2d86d2a705c17bd97d56b8f", "9ee55e72b2d5a4bc986f32d209785bd01571c1f73fab7e12deb093b138fae453", [{0x0, 0xffc0, {0x0, 0x6}}, {0x1, 0xc, {0x0, 0x100}}, {0x5, 0x7, {0x3, 0x9}}, {0xddb4, 0x2, {0x1, 0x9}}, {0xf448, 0x9, {0x0, 0x3}}, {0x6, 0xe6, {0x0, 0x4}}, {0x5, 0x0, {0x2, 0x2e}}, {0x800, 0xfffb, {0x2, 0x7}}, {0xd305, 0x0, {0x2, 0x7286}}, {0x6, 0x9, {0x1, 0x7f}}, {0x9, 0xc, {0x2, 0x1b4f}}, {0xfff9, 0x3, {0x1, 0x4}}, {0x2, 0x9, {0xf49707805175ef5a, 0x4}}, {0x7f, 0xf000, {0x2, 0xc}}, {0x1, 0x3d4, {0x1, 0x101}}, {0x2, 0xfff, {0x0, 0x4}}, {0x7, 0x8, {0x3}}, {0xfffb, 0x3ff, {0x0, 0x4}}, {0x8, 0x7, {0x1, 0x1}}, {0x7, 0x8, {0x3, 0xf3}}, {0x6, 0x3, {0x1, 0x2}}, {0x4, 0x8, {0x3}}, {0x7, 0x3, {0x1, 0x3}}, {0x8, 0x2, {0x1, 0x9}}, {0x4, 0x81, {0x0, 0x32}}, {0x6, 0x50, {0x2, 0x80000001}}, {0x8000, 0x3, {0x0, 0x2}}, {0x100, 0xaf24, {0x3, 0x101}}, {0x5, 0xe20, {0x1, 0x67b1}}, {0x6, 0x88f, {0x2, 0x1c9c}}, {0x1, 0x4, {0x1, 0x9}}, {0x4, 0xf2, {0x1, 0xbd4}}, {0xb700, 0xfff9, {0x2, 0x5}}, {0x3, 0xfff9, {0x0, 0xffffffff}}, {0xfff, 0x35, {0x1, 0x1}}, {0xf, 0x7fff, {0x2, 0x4}}, {0x5, 0x3ff, {0x2, 0xe7}}, {0xff, 0x9138, {0x3, 0x3}}, {0x3, 0x3, {0x3, 0xb}}, {0x8, 0x5, {0x0, 0x1ba}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x7, 0x3, 0x6, 0x21, 'syz1\x00', "ed8dfde8f613b84d11954ba5cae21431a48dd8a146bbf35b43ac7a40818f67a7", "725398c02147712b06d484c7e691eb503b514d17bb7c8e2023da80967df2e83f", [{0x401, 0x5, {0x1, 0x8}}, {0x80, 0x2, {0x1, 0x1000}}, {0x5, 0x2, {0x2, 0x9}}, {0xf, 0x56, {0x0, 0x3}}, {0x2, 0x8, {0x0, 0xa8}}, {0x6, 0x10, {0x1, 0x4}}, {0x7, 0xda1, {0x2, 0x2}}, {0x0, 0x7, {0x1, 0x6}}, {0x3, 0xb4, {0x0, 0x2be90822}}, {0x1ff, 0x1, {0x0, 0x2}}, {0x0, 0x5, {0x3, 0x10}}, {0x8000, 0xfc00, {0x3, 0xfffffffe}}, {0x1e, 0x6, {0x0, 0x4}}, {0x0, 0xc7ff, {0x1, 0x4}}, {0x2, 0x7, {0x2, 0x7}}, {0x3, 0x4, {0x1, 0x1ff}}, {0x5, 0x0, {0x3, 0x1}}, {0x4, 0x10, {0x2, 0x3}}, {0xf3, 0x5, {0x0, 0x800}}, {0x4, 0x28, {0x2, 0x7}}, {0x9, 0xb, {0x1, 0x5}}, {0x4, 0x95eb, {0x1, 0x8001}}, {0x9, 0x6674, {0x1, 0x5}}, {0x0, 0x1, {0x3, 0x86f}}, {0xdc0, 0x3, {0x3, 0x4}}, {0x0, 0x5, {0x2, 0x7f}}, {0x72e1, 0x0, {0x1, 0x2}}, {0x368a, 0x6, {0x0, 0x1}}, {0x9, 0x7, {0x0, 0x5}}, {0x7, 0xf2e3, {0x1, 0x4}}, {0xbf, 0x9d0, {0x1, 0xff}}, {0xe1, 0x5, {0x1, 0xe}}, {0x4a, 0x4, {0x1, 0x1}}, {0xf, 0xb93, {0x2}}, {0x6, 0x52d, {0x2, 0x7fff}}, {0x0, 0x1, {0x1, 0x7}}, {0x7, 0x1ff, {0x3, 0x2}}, {0x101, 0x8000, {0x3, 0x6}}, {0x4, 0xf8d1, {0x3, 0x6}}, {0x0, 0x2, {0x2, 0x9}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

1.178296258s ago: executing program 3 (id=3383):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0019800800018004"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @void, @ipv6=@tipc_packet={0x9, 0x6, "b8f32c", 0x1241, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[@hopopts={0x3a}, @dstopts={0x3a, 0x4, '\x00', [@ra, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x100, [0x6]}}, @ra={0x5, 0x2, 0x10}, @jumbo={0xc2, 0x4, 0x3}]}, @dstopts={0x62, 0x2d, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x0, 0x1f, "2b4d9d4dc795c5b6db71dbeb4ab15a699eb28b81098159024838a97357f6ed"}, @generic={0xd, 0xf5, "a8bcceff5a0e29ba24fbb0f4517701cff95ef007bd1a19e3d6b4f603b1b2e3e59780be85e0ec7b27945981144da4b111fe758ad10e832837b72843ed3757c96047bd30f5b9c677c9fca0361bb62385800e86ad08c6001be118115d39c8484c527819263f47383e26d2076d73b6931785aa1edbd24d15cd0c42636d672e7aa2334b9f9ae82c600df935ee64ee806ec8a868fe977770d8b8b629b278083cff698e8bb695af024031b8a85b3d18db7e6241b33636d38d4888b001bdba2cd2a35af022daa8a5e0138c97d4ceb44d34f44d62d66031b7f0adb846f9db764fb57f3dc7ab761aa2affc7b91969d19745c95df58d0d09ad950"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x2, [0x3, 0x8000000000000001, 0x401, 0x1ff, 0x5e61]}}, @pad1, @ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x2f, 0x20b, '\x00', [@ra={0x5, 0x2, 0x1ff}, @jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @empty}, @generic={0xba}, @jumbo={0xc2, 0x4, 0x7fffffff}, @generic={0xf3, 0x1000, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xf8, 0x714, [0x2, 0x3351, 0x8, 0xd, 0x88]}}]}, @fragment={0x62, 0x0, 0x5, 0x0, 0x0, 0xe, 0x67}, @fragment={0x21, 0x0, 0x3, 0x0, 0x0, 0x9, 0x65}], @payload_direct={{{{0x29, 0x0, 0x1, 0x1, 0x1, 0x8, 0x3, 0x2, 0x0, 0x0, 0x3, 0xf, 0x5, 0x3, 0x3, 0x1, 0x4, 0x4e20, 0x4e22}, 0x4, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x126d)

1.089765563s ago: executing program 0 (id=3384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x15, 0x5, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
socket$phonet(0x23, 0x2, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000080)="09000200010005", 0x7)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000100)={0x1, 0x401, @status={[0x4, 0x45, 0xa3, 0xfffffffffffffffb, 0x101, 0x101]}, [0x3, 0x6, 0x2, 0xe51b, 0x1, 0x4, 0x3f5, 0xa, 0x3, 0xffffffff80000000, 0x800, 0x8, 0x9, 0x7, 0x8d, 0x4, 0x1, 0xc, 0x4, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa7, 0x7, 0xbc, 0x0, 0x8000, 0x6, 0x4, 0x2, 0x200, 0x1, 0x402, 0x2c6, 0x6, 0xffffffffffffffff, 0x8, 0xbb8, 0x1, 0x3, 0x8, 0x7fe000000000000, 0x8, 0x10001, 0xffffffff, 0x5, 0x30, 0x8, 0x100, 0x9, 0x80000000, 0x7, 0xde20, 0x6, 0x6e, 0x8, 0x6, 0x7, 0x9, 0x6, 0xffffffbffffffe01, 0x80, 0xa, 0xe7f3]})
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000bc0)='page_pool_state_hold\x00', r3, 0x0, 0x7}, 0x66)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r5, 0x325}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000005060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000b40)=0x1)

1.087550951s ago: executing program 0 (id=3385):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffb, 0x1}, 0x13) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x80002, 0x88)
r4 = epoll_create1(0x0) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
bind$vsock_stream(r5, &(0x7f0000000940), 0x10) (async)
close(0x3) (async)
listen(r5, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) (async)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0xa0000004}) (async)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001280)={0x5a4, 0x64, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1e}, [@typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x507, 0x2f, 0x0, 0x1, [@nested={0x398, 0x14a, 0x0, 0x1, [@typed={0xc4, 0xc8, 0x0, 0x0, @binary="1c04dac1418c7acf870fa4e20aa0f50fb69fb17f9ff5b8bd36c5ffe73332bde73335543054683dfd056bb1019a553e0caaf9fb0dffd98a9f47dcdbe38eb01fcc31c81f0a850bec51362b6b350e7a3ab3dc2f946d25b44bc2262b1b8b7794e3ad51cccf59eb439ad2e6e62bb8e6e60dcf841883f1125506b36974758089dc4d667c39a720b30b2ffec304f50a3112a84a56d5b8b51ae666ea3fb3fc5ea03a69f634d5b51ceb224e3caac00f62e03122d810527464474f31664854a733110afaaa"}, @generic="8c815d3fb48426bfd644d87694830f57d204cf85065ee1650be8bc3c50826db28e1e10987d379beadd25a8395014b82e439502902592341ab1b8dbf1b975604740ec98b9095c30feb588ee71d11f95df1a441c80733a3808b789e4e71d46908f2a600e2c0905a1c3e7b46ef29d1abc4e6ef596a9829a144ebbaa", @generic="9d06e88564d7dc91af1d6e733ba3b452b07efdbe4ac1b43cb5ca04295618c8", @generic="e75881b360683b92ab3ea0ecee538a6237db4e7472a4353f80e8b31ab0e25f3cddf7411fea1bc5d0e1749ebbd3528b1248a2982dd92c5dd132da70d1f1ee543efb20a015d6b4404bbd536f9615c38467d7c98e596b5390e63d2355cbe8d98f0872f59e1a872e29eeca9d0f437522f5fa052968e1c25e06a97554388b4d0ad4ec2a685b3436e31cbab0a0ef49599258f93440aee40aa2ba2e763cc7e02db817f33d7d209c4645d85a9c4210933f319982ba840205de52424f6a12f8795dba0beadc888dde6cbd1d40f33484750cd7e287b7fdd1fb7b198dd1e62605f03a3fd1944fb13907d49bfec6a8065690e3674d57e2865117a33396", @nested={0x140, 0xb7, 0x0, 0x1, [@nested={0x139, 0x12a, 0x0, 0x1, [@nested={0xda, 0x64, 0x0, 0x1, [@generic="444bca0b2f50a8201b00e7f907ff0f98456e11788cbaa458c444cacd50d27880ab93cf6919831aa228da709e57b569606a3d4edad963f125ba62942fb881092ca9647862432fed5c6806e6513315623fc22f3c38371ab66bb155bd1305ad6f825de774b6ce5ff42ee913b816d51d9277ef01adc0cac608c5e86b8c01f5fb1d83515580371a214438f57df852ea1f6e70d05d094e174da9e6c74bb514a417c395711f49c1a5d04f74a1599d50fea431d4feaaccbbc2c5256d1080e63634bed97671bdb25b63f5bbb248631af0790fe3a27a2efa011f6b"]}, @generic="c65603a0ad6e0be08fbf5f66931056528a10d635f52b7b741f590c0ba425f64c67759203596e128c94d235c2b02af0f335daad5be357a7ac313a54da1d853c7e94797741a75b06a33d1d79f0765096e72ea02096cc554588cf"]}]}]}, @generic="5830dd7811f116a5c5b18e6562323bbc25d810a4b647ba632381bf5216d9ed3f24cc5f5c7e2c3bcd3d552818ae93851c30eed44703c14d8ae32de9237f344ca2a5e4471bf34d64bc06d0c114", @typed={0x36, 0x95, 0x0, 0x0, @binary="f63a86981ecc908ce534f23b7daec4fa8a0529f2da78a1fd2b54a87f76a35d42b512e4824ea565ec1b734c2dc6e241e00dd8"}, @typed={0xa, 0x115, 0x0, 0x0, @str='wlan1\x00'}, @generic="e1b3f0719ebb732e466e5b64d9182282aa47c644d138d6697a63df087388a72eeaec0571c93bb9a798b73db4faeafb8468c3e446e31e2791cb7a43f01b878cdb9a90be0284aeac78f4bea838e746afc06d44e1dae1a8f55e08e76b07a4dd16ddc738eae8999f39c7b329c5335c8fa71363b91e2bb683d7a4d8061c4ffe4cd9bd3a26c74a530c790251729c5ee2eb23e36d12b0d9da0e81d26aa1413e9857874f16729579ffbb149292d3c61910815dbb548910f96fbcecbaf449864de40fc035d66d7f03191ddba46ba2c790db5b5d54bb2186f5cec1922e7c736b"]}, @generic="b892f8a6e90a89d93daf38a6e003b4b681934ac2d1776468bf1ea8348cb0b483bdbf7c8b1a24b4a4125fa87b5c2ab52fd7d1ff2c5505989783fca2fc4e622f4f24a72fded1335f54379b82b825146cf7a45884aebe7f5e42c2cf819065dad6741ef1f03065f86b4046c0ebdcf1a618feab"]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4000d}, 0x240008d4) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r11, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
connect$bt_l2cap(r11, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe)
connect$bt_l2cap(r11, &(0x7f0000000100)={0x1f, 0x16e3, @any, 0x4}, 0xe) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000075a0b2289871c599cbfd6bc00000b4ea273158e9f94c0137058a87548eaef957c6753b8faf244375937a708b84d4e6ec00d058f4ffac7a5ff8f5d85f490911cc0aae197aa8c6dc7083d602fd886dd979b2ee99e82fd3eea6d87bbe13dea4e3a12c5cea7d5cfe8605dd9812df639a1f87856f51fb34040cf3c198bd8dbac66f23c37e526fd963d1ecc32e8be2831bcbc430c3e5538b64b625510ac99376fbebb85c66a30d135be2260a0431fc6a3b969b7278310f169891c590be4c1e8b511c614f4e1d4ca9b1b86669c6ee9fca197c02ee11f0b7016c", @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000800150097be03000500160001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) (async)
socket$kcm(0x10, 0x2, 0x0)

1.020609243s ago: executing program 0 (id=3386):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000400000080001"], 0xc0}}, 0xc0)

1.019988147s ago: executing program 0 (id=3387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

950.062042ms ago: executing program 3 (id=3388):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x44, 0x3b, 0x300, 0x70bd2b, 0x25dfdbfd, {0x8}, [@generic="4be2dabbfefd7816715b3dde6943cea9c10759764c0ed7eb65ace90551abbd2fd7556b2546cb15e48279fe1910086c"]}, 0x44}}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x100000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

519.760755ms ago: executing program 1 (id=3389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendmsg$inet6(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="dd", 0x1}], 0x1}, 0x24008800) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340), 0x4) (async, rerun: 64)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0x1001, 0x1, 0x0, 0xffffffffffffff71}, &(0x7f00000000c0)=0x40) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/42, 0x2}) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_TOS={0x5, 0x9, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

468.273495ms ago: executing program 1 (id=3390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000500)=0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58)
close(0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r6, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

467.891323ms ago: executing program 0 (id=3391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0}) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000000201040000000000000000020000002400028014000180080001000000000008000000000000000c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010001000000040001"], 0x60}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (rerun: 64)
socket$packet(0x11, 0x2, 0x300) (async)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async, rerun: 64)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140b, 0x800, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) (async)
syz_80211_inject_frame(0x0, 0x0, 0x7b) (async, rerun: 32)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 32)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

457.269881ms ago: executing program 0 (id=3392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d00090027bd70000000000004000000040019000c00090000000080"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

86.930849ms ago: executing program 3 (id=3393):
syz_80211_join_ibss(&(0x7f0000000280)='wlan1\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={<r4=>0x0, 0x11, "d89184027cfe33fbbfd7a45e2dbccc362f"}, &(0x7f0000000180)=0x19)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0xab1}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70002b31adb25cc7a8cd08000300", @ANYRES32=r5, @ANYBLOB="080005000b0000000500530000000000"], 0x2c}}, 0x0)

0s ago: executing program 3 (id=3394):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000d9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d711867000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0x4, 0x80, 0xe4a6, 0xd, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x20, 0x0, 0xe68}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x6, <r4=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd44}], &(0x7f00000006c0)='GPL\x00', 0x5, 0x8e, &(0x7f0000000700)=""/142, 0x40f00, 0x70, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x2, 0x7}, 0x10, r4, 0x0, 0x1, &(0x7f00000009c0)=[r2, r2, r2, r2], &(0x7f0000000a00)=[{0x1, 0x2, 0xa, 0x6}], 0x10, 0x2573}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r5, &(0x7f0000000180)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000002bc0)=""/4112, 0x1010}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r15 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r16=>0x0})
bind$can_j1939(r15, &(0x7f0000000340)={0x1d, r16, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xc, 0xb, 0x8, 0x40, 0xffffffffffffffff}]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x45, '\x00', r16, 0x25, r9, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0xffffffff, 0x420}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r7, r8, r11, r6, r10, r2], &(0x7f0000000580)=[{0x1, 0x4, 0xd, 0xa}, {0x3, 0x5, 0x6, 0xc}, {0x0, 0x3, 0x0, 0x4}, {0x3, 0x4, 0x0, 0x9}], 0x10, 0x400}, 0x94)
writev(r14, &(0x7f0000000900)=[{&(0x7f0000000540)="78e89346", 0x4}], 0x1)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10)
write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)=ANY=[], 0x3e)

kernel console output (not intermixed with test programs):

75'.
[  153.660832][T12385] lo speed is unknown, defaulting to 1000
[  153.664320][T12385] lo speed is unknown, defaulting to 1000
[  153.712515][T12391] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.738078][T12390] lo speed is unknown, defaulting to 1000
[  153.760496][T12390] lo speed is unknown, defaulting to 1000
[  153.821887][T12391] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  153.830940][T12391] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  153.834800][T12391] tipc: Resetting bearer <eth:syzkaller0>
[  153.879453][T12397] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  153.974901][T12397] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.003833][T12397] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.013461][T12403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.016836][T12403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.052847][T12397] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.107642][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  154.124380][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  154.142275][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  154.158014][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  154.284620][T12407] tipc: Resetting bearer <eth:syzkaller0>
[  154.289406][T12407] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  154.294668][T12407] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  154.308938][   T51] lo speed is unknown, defaulting to 1000
[  154.312977][ T5865] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.316090][   T51] syz0: Port: 1 Link DOWN
[  154.318119][ T5865] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.322293][   T51] lo speed is unknown, defaulting to 1000
[  154.324689][ T5865] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.328008][ T5865] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.340332][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'.
[  154.349981][T12413] tipc: Resetting bearer <eth:syzkaller0>
[  154.525914][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'.
[  154.536400][T12424] bridge0 (unregistering): left allmulticast mode
[  154.672377][T12428] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2190'.
[  154.675387][T12428] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  154.778482][T12436] tipc: New replicast peer: 255.255.255.255
[  154.783056][T12436] tipc: Enabled bearer <udp:s>, priority 26
[  154.861057][T12441] validate_nla: 5 callbacks suppressed
[  154.861070][T12441] netlink: 'syz.3.2196': attribute type 12 has an invalid length.
[  154.918962][T12446] netlink: 'syz.3.2198': attribute type 1 has an invalid length.
[  154.922306][T12446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2198'.
[  154.967604][T12455] openvswitch: netlink: Key type 29 is not supported
[  155.000072][T12456] netlink: 'syz.3.2200': attribute type 13 has an invalid length.
[  155.003235][T12456] netlink: 'syz.3.2200': attribute type 17 has an invalid length.
[  155.018109][T12456] 8021q: adding VLAN 0 to HW filter on device team0
[  155.023422][T12456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.046372][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  155.048592][T12450] lo speed is unknown, defaulting to 1000
[  155.049755][T12457] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  155.057968][T12450] lo speed is unknown, defaulting to 1000
[  155.370342][T12461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.406050][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'.
[  155.431542][T12464] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  155.436409][T12464] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  155.489889][T12466] macvlan2: entered promiscuous mode
[  155.499825][T12466] macvlan2: entered allmulticast mode
[  155.504781][T12466] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  155.642589][T12474] lo speed is unknown, defaulting to 1000
[  155.645972][T12474] lo speed is unknown, defaulting to 1000
[  155.704838][T12479] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  155.707987][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.3.2210 Not tainted syzkaller #0 PREEMPT(full) 
[  155.708008][T12479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.708018][T12479] Call Trace:
[  155.708026][T12479]  <TASK>
[  155.708033][T12479]  dump_stack_lvl+0x189/0x250
[  155.708059][T12479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.708078][T12479]  ? __pfx__printk+0x10/0x10
[  155.708100][T12479]  ? kernfs_root+0x1c/0x230
[  155.708119][T12479]  ? kernfs_path_from_node+0x2f/0x290
[  155.708133][T12479]  ? kernfs_path_from_node+0x250/0x290
[  155.708148][T12479]  ? kernfs_path_from_node+0x2f/0x290
[  155.708164][T12479]  sysfs_warn_dup+0x8e/0xa0
[  155.708180][T12479]  sysfs_do_create_link_sd+0xc0/0x110
[  155.708197][T12479]  device_add_class_symlinks+0x1cf/0x240
[  155.708214][T12479]  device_add+0x475/0xb50
[  155.708230][T12479]  wiphy_register+0x1ba6/0x28d0
[  155.708257][T12479]  ? __pfx_wiphy_register+0x10/0x10
[  155.708276][T12479]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  155.708293][T12479]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  155.708318][T12479]  ieee80211_register_hw+0x3425/0x4080
[  155.708339][T12479]  ? ieee80211_register_hw+0x14a1/0x4080
[  155.708357][T12479]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  155.708373][T12479]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.708395][T12479]  ? __hrtimer_setup+0x187/0x210
[  155.708408][T12479]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  155.708431][T12479]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  155.708461][T12479]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  155.708477][T12479]  ? trace_kmalloc+0x1f/0xd0
[  155.708502][T12479]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  155.708525][T12479]  ? kstrndup+0xbf/0x160
[  155.708545][T12479]  hwsim_new_radio_nl+0xea4/0x1b10
[  155.708563][T12479]  ? __pfx___nla_validate_parse+0x10/0x10
[  155.708590][T12479]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.708612][T12479]  ? __nla_parse+0x40/0x60
[  155.708633][T12479]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  155.708652][T12479]  genl_family_rcv_msg_doit+0x215/0x300
[  155.708671][T12479]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  155.708693][T12479]  ? bpf_lsm_capable+0x9/0x20
[  155.708717][T12479]  ? security_capable+0x7e/0x2e0
[  155.708743][T12479]  genl_rcv_msg+0x60e/0x790
[  155.708760][T12479]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.708774][T12479]  ? __kasan_slab_alloc+0x6c/0x80
[  155.708792][T12479]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.708810][T12479]  ? __netlink_lookup+0xbd/0x810
[  155.708821][T12479]  ? rcu_is_watching+0x15/0xb0
[  155.708839][T12479]  netlink_rcv_skb+0x208/0x470
[  155.708859][T12479]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.708875][T12479]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.708898][T12479]  ? lock_release+0x4b/0x3e0
[  155.708951][T12479]  ? down_read+0x1ad/0x2e0
[  155.708965][T12479]  genl_rcv+0x28/0x40
[  155.708980][T12479]  netlink_unicast+0x82f/0x9e0
[  155.709001][T12479]  ? __pfx_netlink_unicast+0x10/0x10
[  155.709019][T12479]  ? netlink_sendmsg+0x642/0xb30
[  155.709056][T12479]  ? skb_put+0x11b/0x210
[  155.709074][T12479]  netlink_sendmsg+0x805/0xb30
[  155.709100][T12479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.709122][T12479]  ? futex_unqueue+0x22/0x240
[  155.709140][T12479]  ? aa_sock_msg_perm+0xf1/0x1d0
[  155.709154][T12479]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  155.709169][T12479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.709190][T12479]  __sock_sendmsg+0x21c/0x270
[  155.709209][T12479]  ____sys_sendmsg+0x505/0x830
[  155.709225][T12479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.709241][T12479]  ? import_iovec+0x74/0xa0
[  155.709259][T12479]  ___sys_sendmsg+0x21f/0x2a0
[  155.709274][T12479]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.709291][T12479]  ? futex_wait+0x285/0x360
[  155.709321][T12479]  ? __fget_files+0x2a/0x420
[  155.709342][T12479]  ? __fget_files+0x3a0/0x420
[  155.709366][T12479]  __x64_sys_sendmsg+0x19b/0x260
[  155.709381][T12479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.709399][T12479]  ? rcu_is_watching+0x15/0xb0
[  155.709414][T12479]  ? rcu_is_watching+0x15/0xb0
[  155.709428][T12479]  do_syscall_64+0xfa/0x3b0
[  155.709450][T12479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.709464][T12479]  ? exc_page_fault+0x9f/0xf0
[  155.709483][T12479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.709505][T12479] RIP: 0033:0x7fe1ab78ebe9
[  155.709518][T12479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.709531][T12479] RSP: 002b:00007fe1a99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.709546][T12479] RAX: ffffffffffffffda RBX: 00007fe1ab9b5fa0 RCX: 00007fe1ab78ebe9
[  155.709559][T12479] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  155.709568][T12479] RBP: 00007fe1ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  155.709578][T12479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.709588][T12479] R13: 00007fe1ab9b6038 R14: 00007fe1ab9b5fa0 R15: 00007ffc0d331678
[  155.709604][T12479]  </TASK>
[  156.260472][T12501] netlink: 'syz.0.2217': attribute type 12 has an invalid length.
[  156.345925][T12503] lo speed is unknown, defaulting to 1000
[  156.349111][T12503] lo speed is unknown, defaulting to 1000
[  156.961689][T12519] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  156.964030][T12519] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  156.969089][T12519] veth1: left promiscuous mode
[  156.971103][T12519] sit3: left promiscuous mode
[  156.973856][ T5313] lo speed is unknown, defaulting to 1000
[  156.975642][ T5313] syz2: Port: 1 Link DOWN
[  157.887220][T12544] netlink: 'syz.3.2233': attribute type 4 has an invalid length.
[  158.033421][T12554] smc: net device bond0 erased user defined pnetid SYZ2
[  158.236505][T12560] geneve2: left promiscuous mode
[  158.239067][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.244773][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.248115][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.252943][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.695213][T12571] __nla_validate_parse: 12 callbacks suppressed
[  158.695224][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'.
[  158.829427][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'.
[  158.835337][T12585] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.839103][T12585] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  158.842436][T12585] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  158.963439][T12596] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.2249'.
[  159.064370][T12604] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2253'.
[  159.113228][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'.
[  159.333385][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'.
[  159.336914][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'.
[  159.487515][T12623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2259'.
[  159.487604][T12622] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  159.524594][T12627] netlink: 'syz.3.2260': attribute type 2 has an invalid length.
[  159.527367][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'.
[  159.531611][T12628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2260'.
[  159.630378][T12640] netlink: 'syz.3.2265': attribute type 23 has an invalid length.
[  159.763144][T12650] netlink: 'syz.1.2267': attribute type 10 has an invalid length.
[  159.854819][T12668] sctp: [Deprecated]: syz.0.2272 (pid 12668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.854819][T12668] Use struct sctp_sack_info instead
[  159.920784][T12677] netlink: 'syz.1.2277': attribute type 15 has an invalid length.
[  159.924088][ T5295] udevd[5295]: worker [5856] terminated by signal 33 (Unknown signal 33)
[  159.953873][ T5882] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.960989][ T5882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.965674][ T5882] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.969215][ T5882] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.978987][T12674] netlink: 'syz.0.2276': attribute type 8 has an invalid length.
[  160.011998][T12684] nbd: couldn't find a device at index 0
[  160.314698][T12701] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  160.317426][T12701] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  160.369298][T12703] netlink: 'syz.0.2288': attribute type 10 has an invalid length.
[  160.662888][T12711] netlink: 'syz.0.2291': attribute type 10 has an invalid length.
[  160.829434][T12731] tipc: Resetting bearer <eth:syzkaller0>
[  160.920754][T12733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.927267][T12733] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  160.929824][T12733] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  160.934291][T12733] tipc: Resetting bearer <eth:syzkaller0>
[  161.002584][T12746] netlink: 'syz.0.2303': attribute type 3 has an invalid length.
[  161.005884][ T5860] Bluetooth: hci2: link tx timeout
[  161.007569][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  161.010021][ T5860] Bluetooth: hci2: link tx timeout
[  161.012154][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.016780][T12746] dvmrp1: left allmulticast mode
[  161.063662][T12753] netlink: 'syz.1.2305': attribute type 7 has an invalid length.
[  161.071094][T12753] netlink: 'syz.1.2305': attribute type 8 has an invalid length.
[  161.156684][T12759] netlink: 'syz.1.2307': attribute type 16 has an invalid length.
[  161.159926][T12759] netlink: 'syz.1.2307': attribute type 17 has an invalid length.
[  161.163637][T12759] tipc: Resetting bearer <eth:syzkaller0>
[  161.178792][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.182695][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.186236][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.192135][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.197337][T12759] IPv6: NLM_F_REPLACE set, but no existing node found!
[  161.280137][T12770] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  161.664273][T12796] net_ratelimit: 1 callbacks suppressed
[  161.664290][T12796] openvswitch: netlink: IPv6 tunnel dst address is zero
[  161.900339][T12848] nbd: couldn't find a device at index 0
[  161.931820][T12855] netlink: 'syz.1.2338': attribute type 3 has an invalid length.
[  161.935713][ T5860] Bluetooth: hci2: link tx timeout
[  161.937915][ T5860] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  161.941234][ T5860] Bluetooth: hci2: link tx timeout
[  161.941320][T12850] sctp: [Deprecated]: syz.3.2337 (pid 12850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.941320][T12850] Use struct sctp_sack_info instead
[  161.943296][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.959338][T12850] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  161.963650][T12850] CPU: 0 UID: 0 PID: 12850 Comm: syz.3.2337 Not tainted syzkaller #0 PREEMPT(full) 
[  161.963662][T12850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.963668][T12850] Call Trace:
[  161.963672][T12850]  <TASK>
[  161.963675][T12850]  dump_stack_lvl+0x189/0x250
[  161.963692][T12850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.963701][T12850]  ? __pfx__printk+0x10/0x10
[  161.963713][T12850]  ? kernfs_root+0x1c/0x230
[  161.963725][T12850]  ? kernfs_path_from_node+0x2f/0x290
[  161.963734][T12850]  ? kernfs_path_from_node+0x250/0x290
[  161.963742][T12850]  ? kernfs_path_from_node+0x2f/0x290
[  161.963750][T12850]  sysfs_warn_dup+0x8e/0xa0
[  161.963758][T12850]  sysfs_do_create_link_sd+0xc0/0x110
[  161.963766][T12850]  device_add_class_symlinks+0x1cf/0x240
[  161.963776][T12850]  device_add+0x475/0xb50
[  161.963783][T12850]  wiphy_register+0x1ba6/0x28d0
[  161.963801][T12850]  ? __pfx_wiphy_register+0x10/0x10
[  161.963815][T12850]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  161.963832][T12850]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  161.963854][T12850]  ieee80211_register_hw+0x3425/0x4080
[  161.963874][T12850]  ? ieee80211_register_hw+0x14a1/0x4080
[  161.963889][T12850]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  161.963902][T12850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.963922][T12850]  ? __hrtimer_setup+0x187/0x210
[  161.963936][T12850]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  161.963956][T12850]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  161.963971][T12850]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  161.963979][T12850]  ? trace_kmalloc+0x1f/0xd0
[  161.963989][T12850]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  161.963999][T12850]  ? kstrndup+0xbf/0x160
[  161.964010][T12850]  hwsim_new_radio_nl+0xea4/0x1b10
[  161.964019][T12850]  ? __pfx___nla_validate_parse+0x10/0x10
[  161.964034][T12850]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.964046][T12850]  ? __nla_parse+0x40/0x60
[  161.964085][T12850]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  161.964105][T12850]  genl_family_rcv_msg_doit+0x215/0x300
[  161.964121][T12850]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.964138][T12850]  ? bpf_lsm_capable+0x9/0x20
[  161.964159][T12850]  ? security_capable+0x7e/0x2e0
[  161.964180][T12850]  genl_rcv_msg+0x60e/0x790
[  161.964190][T12850]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.964197][T12850]  ? __kasan_slab_alloc+0x6c/0x80
[  161.964208][T12850]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.964217][T12850]  ? __netlink_lookup+0xbd/0x810
[  161.964223][T12850]  ? rcu_is_watching+0x15/0xb0
[  161.964233][T12850]  netlink_rcv_skb+0x208/0x470
[  161.964260][T12850]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.964289][T12850]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.964301][T12850]  ? lock_release+0x4b/0x3e0
[  161.964313][T12850]  ? down_read+0x1ad/0x2e0
[  161.964320][T12850]  genl_rcv+0x28/0x40
[  161.964327][T12850]  netlink_unicast+0x82f/0x9e0
[  161.964338][T12850]  ? __pfx_netlink_unicast+0x10/0x10
[  161.964348][T12850]  ? netlink_sendmsg+0x642/0xb30
[  161.964357][T12850]  ? skb_put+0x11b/0x210
[  161.964365][T12850]  netlink_sendmsg+0x805/0xb30
[  161.964378][T12850]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.964388][T12850]  ? futex_unqueue+0x22/0x240
[  161.964397][T12850]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.964405][T12850]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.964413][T12850]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.964424][T12850]  __sock_sendmsg+0x21c/0x270
[  161.964434][T12850]  ____sys_sendmsg+0x505/0x830
[  161.964443][T12850]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.964452][T12850]  ? import_iovec+0x74/0xa0
[  161.964462][T12850]  ___sys_sendmsg+0x21f/0x2a0
[  161.964475][T12850]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.964484][T12850]  ? futex_wait+0x285/0x360
[  161.964500][T12850]  ? __fget_files+0x2a/0x420
[  161.964512][T12850]  ? __fget_files+0x3a0/0x420
[  161.964524][T12850]  __x64_sys_sendmsg+0x19b/0x260
[  161.964532][T12850]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.964541][T12850]  ? rcu_is_watching+0x15/0xb0
[  161.964549][T12850]  ? rcu_is_watching+0x15/0xb0
[  161.964556][T12850]  do_syscall_64+0xfa/0x3b0
[  161.964569][T12850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.964577][T12850]  ? exc_page_fault+0x9f/0xf0
[  161.964586][T12850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.964594][T12850] RIP: 0033:0x7fe1ab78ebe9
[  161.964602][T12850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.964610][T12850] RSP: 002b:00007fe1a99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.964620][T12850] RAX: ffffffffffffffda RBX: 00007fe1ab9b5fa0 RCX: 00007fe1ab78ebe9
[  161.964625][T12850] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  161.964630][T12850] RBP: 00007fe1ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  161.964636][T12850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.964640][T12850] R13: 00007fe1ab9b6038 R14: 00007fe1ab9b5fa0 R15: 00007ffc0d331678
[  161.964649][T12850]  </TASK>
[  162.156722][T12851] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  162.161546][T12851] CPU: 1 UID: 0 PID: 12851 Comm: syz.3.2337 Not tainted syzkaller #0 PREEMPT(full) 
[  162.161566][T12851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.161575][T12851] Call Trace:
[  162.161581][T12851]  <TASK>
[  162.161588][T12851]  dump_stack_lvl+0x189/0x250
[  162.161606][T12851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.161615][T12851]  ? __pfx__printk+0x10/0x10
[  162.161628][T12851]  ? kernfs_root+0x1c/0x230
[  162.161638][T12851]  ? kernfs_path_from_node+0x2f/0x290
[  162.161646][T12851]  ? kernfs_path_from_node+0x250/0x290
[  162.161654][T12851]  ? kernfs_path_from_node+0x2f/0x290
[  162.161662][T12851]  sysfs_warn_dup+0x8e/0xa0
[  162.161671][T12851]  sysfs_do_create_link_sd+0xc0/0x110
[  162.161679][T12851]  device_add_class_symlinks+0x1cf/0x240
[  162.161690][T12851]  device_add+0x475/0xb50
[  162.161698][T12851]  wiphy_register+0x1ba6/0x28d0
[  162.161713][T12851]  ? __pfx_wiphy_register+0x10/0x10
[  162.161723][T12851]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  162.161733][T12851]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  162.161749][T12851]  ieee80211_register_hw+0x3425/0x4080
[  162.161761][T12851]  ? ieee80211_register_hw+0x14a1/0x4080
[  162.161770][T12851]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  162.161779][T12851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.161792][T12851]  ? __hrtimer_setup+0x187/0x210
[  162.161800][T12851]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  162.161814][T12851]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  162.161828][T12851]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  162.161842][T12851]  ? trace_kmalloc+0x1f/0xd0
[  162.161853][T12851]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  162.161869][T12851]  ? kstrndup+0xbf/0x160
[  162.161883][T12851]  hwsim_new_radio_nl+0xea4/0x1b10
[  162.161898][T12851]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.161921][T12851]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.161938][T12851]  ? __nla_parse+0x40/0x60
[  162.161956][T12851]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  162.161969][T12851]  genl_family_rcv_msg_doit+0x215/0x300
[  162.161979][T12851]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  162.161990][T12851]  ? bpf_lsm_capable+0x9/0x20
[  162.162002][T12851]  ? security_capable+0x7e/0x2e0
[  162.162015][T12851]  genl_rcv_msg+0x60e/0x790
[  162.162024][T12851]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.162032][T12851]  ? __kasan_slab_alloc+0x6c/0x80
[  162.162043][T12851]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.162052][T12851]  ? __netlink_lookup+0xbd/0x810
[  162.162058][T12851]  ? rcu_is_watching+0x15/0xb0
[  162.162068][T12851]  netlink_rcv_skb+0x208/0x470
[  162.162080][T12851]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.162088][T12851]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.162100][T12851]  ? lock_release+0x4b/0x3e0
[  162.162112][T12851]  ? down_read+0x1ad/0x2e0
[  162.162119][T12851]  genl_rcv+0x28/0x40
[  162.162126][T12851]  netlink_unicast+0x82f/0x9e0
[  162.162137][T12851]  ? __pfx_netlink_unicast+0x10/0x10
[  162.162147][T12851]  ? netlink_sendmsg+0x642/0xb30
[  162.162157][T12851]  ? skb_put+0x11b/0x210
[  162.162165][T12851]  netlink_sendmsg+0x805/0xb30
[  162.162177][T12851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.162188][T12851]  ? futex_unqueue+0x22/0x240
[  162.162197][T12851]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.162206][T12851]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.162219][T12851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.162233][T12851]  __sock_sendmsg+0x21c/0x270
[  162.162276][T12851]  ____sys_sendmsg+0x505/0x830
[  162.162290][T12851]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.162303][T12851]  ? import_iovec+0x74/0xa0
[  162.162316][T12851]  ___sys_sendmsg+0x21f/0x2a0
[  162.162326][T12851]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.162338][T12851]  ? futex_wait+0x285/0x360
[  162.162360][T12851]  ? __fget_files+0x2a/0x420
[  162.162373][T12851]  ? __fget_files+0x3a0/0x420
[  162.162389][T12851]  __x64_sys_sendmsg+0x19b/0x260
[  162.162396][T12851]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.162406][T12851]  ? __pfx_ksys_write+0x10/0x10
[  162.162415][T12851]  ? rcu_is_watching+0x15/0xb0
[  162.162423][T12851]  ? rcu_is_watching+0x15/0xb0
[  162.162430][T12851]  do_syscall_64+0xfa/0x3b0
[  162.162444][T12851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.162452][T12851]  ? exc_page_fault+0x9f/0xf0
[  162.162462][T12851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.162470][T12851] RIP: 0033:0x7fe1ab78ebe9
[  162.162479][T12851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.162486][T12851] RSP: 002b:00007fe1a99cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.162496][T12851] RAX: ffffffffffffffda RBX: 00007fe1ab9b6090 RCX: 00007fe1ab78ebe9
[  162.162502][T12851] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  162.162507][T12851] RBP: 00007fe1ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  162.162512][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.162516][T12851] R13: 00007fe1ab9b6128 R14: 00007fe1ab9b6090 R15: 00007ffc0d331678
[  162.162525][T12851]  </TASK>
[  162.166333][T12861] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  162.352904][T12861] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  162.355613][T12861] tipc: Resetting bearer <eth:syzkaller0>
[  162.525612][T12888] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  162.834415][T12906] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.837377][T12906] 8021q: adding VLAN 0 to HW filter on device team0
[  162.841014][T12906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.846222][   T10] lo speed is unknown, defaulting to 1000
[  162.848027][   T10] syz2: Port: 1 Link ACTIVE
[  162.861434][T12906] lo speed is unknown, defaulting to 1000
[  162.863789][T12906] lo speed is unknown, defaulting to 1000
[  163.051021][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  163.451694][ T1091] tipc: Resetting bearer <eth:syzkaller0>
[  163.529256][T12926] rdma_rxe: rxe_newlink: failed to add lo
[  163.773457][T12929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.811270][T12929] lo speed is unknown, defaulting to 1000
[  163.824319][T12929] lo speed is unknown, defaulting to 1000
[  164.073830][T12933] syzkaller1: entered promiscuous mode
[  164.076563][T12933] syzkaller1: entered allmulticast mode
[  164.085441][T12933] syzkaller1: left promiscuous mode
[  164.087870][T12933] syzkaller1: left allmulticast mode
[  164.194884][T12935] sctp: [Deprecated]: syz.3.2358 (pid 12935) Use of int in max_burst socket option.
[  164.194884][T12935] Use struct sctp_assoc_value instead
[  164.295721][T12944] tipc: Resetting bearer <eth:syzkaller0>
[  164.303753][T12944] tipc: Resetting bearer <eth:syzkaller0>
[  164.319285][T12944] tipc: Resetting bearer <eth:syzkaller0>
[  164.372096][T12947] __nla_validate_parse: 19 callbacks suppressed
[  164.372109][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'.
[  164.400112][T12953] macsec2: entered promiscuous mode
[  164.401997][T12953] ip6gretap0: entered promiscuous mode
[  164.403869][T12953] macsec2: entered allmulticast mode
[  164.405542][T12953] ip6gretap0: entered allmulticast mode
[  164.409588][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'.
[  164.457798][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2364'.
[  164.548215][T12963] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.2365'.
[  164.577518][T12965] batman_adv: batadv0: Adding interface: dummy0
[  164.580132][T12965] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.590627][T12965] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  164.679506][T12971] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  164.683552][T12971] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  164.688748][T12971] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2369'.
[  164.694287][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  164.697704][T12971] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  164.700530][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.028849][T13002] validate_nla: 7 callbacks suppressed
[  165.028862][T13002] netlink: 'syz.3.2380': attribute type 39 has an invalid length.
[  165.072118][T13007] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2381'.
[  165.075776][T13007] nbd: couldn't find a device at index 0
[  165.131119][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  165.156016][T13013] lo speed is unknown, defaulting to 1000
[  165.160052][T13013] lo speed is unknown, defaulting to 1000
[  165.415719][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'.
[  165.477238][T13050] syzkaller1: entered allmulticast mode
[  165.499185][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  165.610256][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'.
[  165.614641][T13058] netlink: 'syz.0.2396': attribute type 12 has an invalid length.
[  165.828253][T13068] nbd: couldn't find a device at index 0
[  165.841559][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.885142][T13066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.888521][T13066] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  165.892210][T13066] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  165.899648][T13078] lo speed is unknown, defaulting to 1000
[  165.904195][T13078] lo speed is unknown, defaulting to 1000
[  165.910388][T13080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.123620][T13104] nbd: couldn't find a device at index 0
[  166.468698][T13133] macvtap1: entered promiscuous mode
[  166.470781][T13133] batadv0: entered promiscuous mode
[  166.473357][T13133] macvtap1: entered allmulticast mode
[  166.475514][T13133] batadv0: entered allmulticast mode
[  166.478401][T13133] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  166.636113][T13149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.639448][T13149] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  166.642063][T13149] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  166.647395][T13149] tipc: Resetting bearer <eth:syzkaller0>
[  166.730654][T13155] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.854202][T13164] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  166.953114][T13182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.129149][T13189] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  167.134412][T13189] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  167.140191][T13189] ip6gretap0: left allmulticast mode
[  167.143109][T13189] ip6gretap0: left promiscuous mode
[  167.144866][T13189] macsec2: left promiscuous mode
[  167.146701][T13189] macsec2: left allmulticast mode
[  167.149836][T13189] batadv0: left allmulticast mode
[  167.152026][T13189] batadv0: left promiscuous mode
[  167.153904][T13189] macvtap1: left promiscuous mode
[  167.155996][T13189] macvtap1: left allmulticast mode
[  167.245009][T13202] netlink: 'syz.1.2445': attribute type 2 has an invalid length.
[  167.248243][T13202] netlink: 'syz.1.2445': attribute type 1 has an invalid length.
[  167.254019][T13202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.257402][T13203] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  167.260219][T13203] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  167.268369][T13198] geneve3: entered promiscuous mode
[  167.273868][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  167.276890][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  167.279961][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  167.285162][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  168.170470][T13225] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.249808][T13236] lo speed is unknown, defaulting to 1000
[  168.253236][T13236] lo speed is unknown, defaulting to 1000
[  168.516724][T13265] 8021q: adding VLAN 0 to HW filter on device bond4
[  168.538522][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.635222][T13275] veth0_to_team: entered promiscuous mode
[  168.638947][T13275] veth0_to_team: entered allmulticast mode
[  168.693438][T13280] netlink: 'syz.3.2467': attribute type 13 has an invalid length.
[  168.696652][T13280] gretap0: refused to change device tx_queue_len
[  168.698862][T13280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  168.750239][T13287] veth0_to_team: left promiscuous mode
[  168.755084][T13287] veth0_to_team: left allmulticast mode
[  168.759883][T13287] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  168.763882][T13287] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  168.769257][T13287] geneve3: left promiscuous mode
[  168.776999][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  168.779894][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  168.783665][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  168.787450][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  168.827333][T13297] sctp: [Deprecated]: syz.0.2473 (pid 13297) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.827333][T13297] Use struct sctp_sack_info instead
[  168.978286][T13327] netlink: 'syz.0.2483': attribute type 1 has an invalid length.
[  168.981993][T13327] netlink: 'syz.0.2483': attribute type 1 has an invalid length.
[  169.026399][T13336] nbd: couldn't find a device at index 0
[  169.118160][T13348] erspan0: entered promiscuous mode
[  169.205567][T13342] netlink: 'syz.1.2490': attribute type 10 has an invalid length.
[  169.249287][T13362] nbd: couldn't find a device at index 0
[  169.326047][T13375] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.495756][T13385] __nla_validate_parse: 37 callbacks suppressed
[  169.495775][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'.
[  170.015386][T13426] pim6reg1: entered promiscuous mode
[  170.017242][T13426] pim6reg1: entered allmulticast mode
[  170.111970][T13433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.157774][T13439] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  170.161883][T13439] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  170.172993][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'.
[  170.176584][T13441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2523'.
[  170.184559][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2523'.
[  170.303562][T13455] netlink: 'syz.3.2529': attribute type 7 has an invalid length.
[  170.306675][T13455] netlink: 'syz.3.2529': attribute type 8 has an invalid length.
[  170.319228][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'.
[  170.359205][T13459] lo speed is unknown, defaulting to 1000
[  170.361686][T13459] lo speed is unknown, defaulting to 1000
[  170.474097][T13468] dvmrp8: entered allmulticast mode
[  170.489055][T13468] lo speed is unknown, defaulting to 1000
[  170.492340][T13468] lo speed is unknown, defaulting to 1000
[  170.628669][T13473] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.642021][T13471] netlink: 'syz.0.2533': attribute type 23 has an invalid length.
[  170.674795][T13475] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  170.677409][T13475] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  170.737311][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2537'.
[  170.750802][T13481] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2537'.
[  170.764139][T13467] dvmrp8: left allmulticast mode
[  170.998739][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'.
[  171.077209][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'.
[  171.185532][T13520] netlink: 'syz.3.2548': attribute type 16 has an invalid length.
[  171.188855][T13520] netlink: 'syz.3.2548': attribute type 17 has an invalid length.
[  171.190821][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'.
[  171.197441][T13521] IPv6: NLM_F_REPLACE set, but no existing node found!
[  171.263791][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.267863][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.279665][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.283872][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.316005][T13536] netlink: 'syz.1.2552': attribute type 1 has an invalid length.
[  171.322938][T13538] netlink: 'syz.1.2552': attribute type 12 has an invalid length.
[  171.359561][T13533] netlink: 'syz.3.2551': attribute type 12 has an invalid length.
[  171.399442][T13534] netlink: 'syz.3.2551': attribute type 12 has an invalid length.
[  171.470800][T13543] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.505721][T13545] nbd: couldn't find a device at index 0
[  171.546714][T13549] lo speed is unknown, defaulting to 1000
[  171.549735][T13549] lo speed is unknown, defaulting to 1000
[  171.843655][T13575] netlink: 'syz.3.2563': attribute type 13 has an invalid length.
[  171.906361][ T5865] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.916478][ T5865] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.919455][ T5865] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.925902][ T5865] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.968725][T13620] dvmrp0: entered allmulticast mode
[  173.048660][T13626] lo speed is unknown, defaulting to 1000
[  173.051337][T13629] lo speed is unknown, defaulting to 1000
[  173.053561][T13626] lo speed is unknown, defaulting to 1000
[  173.153065][T13629] lo speed is unknown, defaulting to 1000
[  173.534110][T13668] gtp0: entered promiscuous mode
[  173.585622][T13673] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.667939][T13677] mac80211_hwsim hwsim2 ": renamed from wlan0
[  173.724766][T13683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.743528][T13687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.747218][T13687] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  173.750083][T13687] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  174.088994][T13733] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  174.115570][T13733] lo speed is unknown, defaulting to 1000
[  174.118672][T13733] lo speed is unknown, defaulting to 1000
[  174.763088][T13746] __nla_validate_parse: 27 callbacks suppressed
[  174.763110][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'.
[  174.819077][T13750] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.014971][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2624'.
[  175.020293][T13758] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2624'.
[  175.174608][T13771] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.178338][T13771] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  175.182368][T13771] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  175.239334][T13773] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2630'.
[  175.842133][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'.
[  178.182413][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'.
[  178.215901][T13790] validate_nla: 5 callbacks suppressed
[  178.215920][T13790] netlink: 'syz.0.2634': attribute type 7 has an invalid length.
[  178.236112][T13790] netlink: 'syz.0.2634': attribute type 8 has an invalid length.
[  178.327246][T13802] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  178.329894][T13802] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  178.353865][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[  178.365696][T13809] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.2640'.
[  178.488987][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'.
[  178.549967][T13833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2648'.
[  179.522927][T13840] netlink: 'syz.0.2651': attribute type 12 has an invalid length.
[  180.730955][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  181.325391][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'.
[  181.376832][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'.
[  181.410479][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2656'.
[  181.417216][T13863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2657'.
[  181.423809][T13863] rdma_rxe: rxe_newlink: failed to add lo
[  181.461123][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2658'.
[  181.489291][T13869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.493774][T13869] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  181.496521][T13869] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  181.568986][T13875] netlink: 'syz.0.2662': attribute type 1 has an invalid length.
[  181.579839][T13875] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.591746][T13875] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.594993][T13875] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  181.599155][T13875] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  181.609863][T13880] netlink: 'syz.1.2664': attribute type 10 has an invalid length.
[  181.612920][T13880] batman_adv: batadv0: Removing interface: dummy0
[  181.669380][T13875] veth9: entered promiscuous mode
[  181.673581][T13875] bond5: (slave veth9): Enslaving as an active interface with a down link
[  181.702879][T13889] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2667'.
[  181.790165][T13893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2668'.
[  181.812917][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  181.845522][T13896] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.868841][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'.
[  181.872933][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'.
[  181.876884][T13898] dvmrp0: left allmulticast mode
[  182.064740][T13916] netlink: 'syz.1.2673': attribute type 10 has an invalid length.
[  182.900723][T13925] pim6reg1: entered promiscuous mode
[  182.906987][T13925] pim6reg1: entered allmulticast mode
[  182.987739][T13935] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  182.990746][T13935] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  183.014449][T13935] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.018155][T13935] team0: Port device bond5 added
[  183.102225][T13947] netlink: 'syz.0.2684': attribute type 2 has an invalid length.
[  183.136296][T13956] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.412455][T13981] macsec0: entered promiscuous mode
[  183.414705][T13981] team0: entered promiscuous mode
[  183.416831][T13981] team_slave_0: entered promiscuous mode
[  183.419286][T13981] team_slave_1: entered promiscuous mode
[  183.422897][T13981] !: entered promiscuous mode
[  183.425384][T13981] bond5: entered promiscuous mode
[  183.428318][T13981] macsec0: entered allmulticast mode
[  183.430571][T13981] team0: entered allmulticast mode
[  183.432731][T13981] team_slave_0: entered allmulticast mode
[  183.435166][T13981] team_slave_1: entered allmulticast mode
[  183.437562][T13981] !: entered allmulticast mode
[  183.439638][T13981] bond5: entered allmulticast mode
[  184.145508][T14000] lo speed is unknown, defaulting to 1000
[  184.147834][T14000] lo speed is unknown, defaulting to 1000
[  184.948486][T14035] netlink: 'syz.1.2710': attribute type 9 has an invalid length.
[  185.016787][T14041] netlink: 'syz.1.2712': attribute type 1 has an invalid length.
[  185.024179][T14041] vlan2: entered promiscuous mode
[  185.026387][T14041] vlan2: entered allmulticast mode
[  185.028439][T14041] hsr_slave_1: entered allmulticast mode
[  186.062369][T14048] bridge6: port 1(veth11) entered blocking state
[  186.064443][T14048] bridge6: port 1(veth11) entered disabled state
[  186.067304][T14048] veth11: entered allmulticast mode
[  186.069652][T14048] veth11: entered promiscuous mode
[  186.077391][T14049] bridge6: port 2(veth0_to_bond) entered blocking state
[  186.079650][T14049] bridge6: port 2(veth0_to_bond) entered disabled state
[  186.082203][T14049] veth0_to_bond: entered allmulticast mode
[  186.085013][T14049] veth0_to_bond: entered promiscuous mode
[  188.019265][T14068] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  188.074992][T14073] __nla_validate_parse: 21 callbacks suppressed
[  188.075012][T14073] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.2722'.
[  188.093431][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2723'.
[  188.207227][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'.
[  188.227787][T14091] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.265764][T14085] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  188.268571][T14085] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  188.276461][T14085] veth9: left promiscuous mode
[  188.281326][   T51] lo speed is unknown, defaulting to 1000
[  188.283725][   T51] syz2: Port: 1 Link DOWN
[  188.322414][T14102] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.2730'.
[  188.360142][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'.
[  188.383329][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'.
[  188.414400][T14115] netlink: 'syz.3.2736': attribute type 7 has an invalid length.
[  188.417522][T14115] netlink: 'syz.3.2736': attribute type 8 has an invalid length.
[  188.505475][T14124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2739'.
[  188.510564][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'.
[  188.543504][T14124] netlink: 'syz.3.2739': attribute type 15 has an invalid length.
[  188.550056][T14124] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  188.557947][T14124] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  188.568421][T14124] tipc: Resetting bearer <eth:syzkaller0>
[  188.618891][T14141] syzkaller1: entered promiscuous mode
[  188.623917][T14141] syzkaller1: entered allmulticast mode
[  188.633635][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'.
[  188.636665][T14141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2745'.
[  188.677964][T14147] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  188.707359][T14151] netlink: 'syz.0.2749': attribute type 7 has an invalid length.
[  188.709206][T14152] netlink: 'syz.1.2750': attribute type 9 has an invalid length.
[  188.709943][T14151] netlink: 'syz.0.2749': attribute type 8 has an invalid length.
[  188.759945][T14156] veth0_virt_wifi: entered allmulticast mode
[  188.846206][T14161] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.923748][T14176] netlink: 'syz.1.2760': attribute type 5 has an invalid length.
[  188.930245][T14176] geneve3: entered promiscuous mode
[  188.933182][T14176] geneve3: entered allmulticast mode
[  188.936296][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  188.940022][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  188.951039][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  188.954225][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  189.263071][T14221] tipc: Resetting bearer <eth:syzkaller0>
[  189.342160][T14235] sctp: [Deprecated]: syz.1.2783 (pid 14235) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.342160][T14235] Use struct sctp_sack_info instead
[  189.519092][T14251] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  189.523456][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.1.2783 Not tainted syzkaller #0 PREEMPT(full) 
[  189.523481][T14251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.523494][T14251] Call Trace:
[  189.523499][T14251]  <TASK>
[  189.523505][T14251]  dump_stack_lvl+0x189/0x250
[  189.523528][T14251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.523546][T14251]  ? __pfx__printk+0x10/0x10
[  189.523564][T14251]  ? kernfs_root+0x1c/0x230
[  189.523583][T14251]  ? kernfs_path_from_node+0x2f/0x290
[  189.523593][T14251]  ? kernfs_path_from_node+0x250/0x290
[  189.523601][T14251]  ? kernfs_path_from_node+0x2f/0x290
[  189.523611][T14251]  sysfs_warn_dup+0x8e/0xa0
[  189.523620][T14251]  sysfs_do_create_link_sd+0xc0/0x110
[  189.523629][T14251]  device_add_class_symlinks+0x1cf/0x240
[  189.523639][T14251]  device_add+0x475/0xb50
[  189.523648][T14251]  wiphy_register+0x1ba6/0x28d0
[  189.523664][T14251]  ? __pfx_wiphy_register+0x10/0x10
[  189.523675][T14251]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  189.523687][T14251]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  189.523703][T14251]  ieee80211_register_hw+0x3425/0x4080
[  189.523715][T14251]  ? ieee80211_register_hw+0x14a1/0x4080
[  189.523725][T14251]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  189.523733][T14251]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.523746][T14251]  ? __hrtimer_setup+0x187/0x210
[  189.523754][T14251]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  189.523768][T14251]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  189.523793][T14251]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  189.523806][T14251]  ? trace_kmalloc+0x1f/0xd0
[  189.523823][T14251]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  189.523850][T14251]  ? kstrndup+0xbf/0x160
[  189.523867][T14251]  hwsim_new_radio_nl+0xea4/0x1b10
[  189.523885][T14251]  ? __pfx___nla_validate_parse+0x10/0x10
[  189.523901][T14251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.523912][T14251]  ? __nla_parse+0x40/0x60
[  189.523924][T14251]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  189.523936][T14251]  genl_family_rcv_msg_doit+0x215/0x300
[  189.523948][T14251]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  189.523959][T14251]  ? bpf_lsm_capable+0x9/0x20
[  189.523970][T14251]  ? security_capable+0x7e/0x2e0
[  189.523983][T14251]  genl_rcv_msg+0x60e/0x790
[  189.523992][T14251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.524000][T14251]  ? __kasan_slab_alloc+0x6c/0x80
[  189.524010][T14251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.524019][T14251]  ? __netlink_lookup+0xbd/0x810
[  189.524026][T14251]  ? rcu_is_watching+0x15/0xb0
[  189.524036][T14251]  netlink_rcv_skb+0x208/0x470
[  189.524047][T14251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.524055][T14251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.524068][T14251]  ? lock_release+0x4b/0x3e0
[  189.524080][T14251]  ? down_read+0x1ad/0x2e0
[  189.524087][T14251]  genl_rcv+0x28/0x40
[  189.524099][T14251]  netlink_unicast+0x82f/0x9e0
[  189.524118][T14251]  ? __pfx_netlink_unicast+0x10/0x10
[  189.524132][T14251]  ? netlink_sendmsg+0x642/0xb30
[  189.524145][T14251]  ? skb_put+0x11b/0x210
[  189.524159][T14251]  netlink_sendmsg+0x805/0xb30
[  189.524182][T14251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.524195][T14251]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.524203][T14251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.524211][T14251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.524222][T14251]  __sock_sendmsg+0x21c/0x270
[  189.524232][T14251]  ____sys_sendmsg+0x505/0x830
[  189.524240][T14251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.524250][T14251]  ? import_iovec+0x74/0xa0
[  189.524260][T14251]  ___sys_sendmsg+0x21f/0x2a0
[  189.524269][T14251]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.524277][T14251]  ? futex_wake+0x4b2/0x560
[  189.524294][T14251]  ? __fget_files+0x2a/0x420
[  189.524306][T14251]  ? __fget_files+0x3a0/0x420
[  189.524333][T14251]  __x64_sys_sendmsg+0x19b/0x260
[  189.524349][T14251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.524365][T14251]  ? rcu_is_watching+0x15/0xb0
[  189.524374][T14251]  ? rcu_is_watching+0x15/0xb0
[  189.524382][T14251]  do_syscall_64+0xfa/0x3b0
[  189.524396][T14251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.524404][T14251]  ? exc_page_fault+0x9f/0xf0
[  189.524442][T14251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.524458][T14251] RIP: 0033:0x7f58e678ebe9
[  189.524472][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.524487][T14251] RSP: 002b:00007f58e75eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.524504][T14251] RAX: ffffffffffffffda RBX: 00007f58e69b6180 RCX: 00007f58e678ebe9
[  189.524515][T14251] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  189.524521][T14251] RBP: 00007f58e6811e19 R08: 0000000000000000 R09: 0000000000000000
[  189.524526][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.524531][T14251] R13: 00007f58e69b6218 R14: 00007f58e69b6180 R15: 00007ffe70622d88
[  189.524541][T14251]  </TASK>
[  189.994814][T14273] validate_nla: 2 callbacks suppressed
[  189.994831][T14273] netlink: 'syz.3.2796': attribute type 21 has an invalid length.
[  190.082113][T14281] nbd: couldn't find a device at index 0
[  190.138980][T14285] vlan2: entered promiscuous mode
[  190.141742][T14285] bridge0: entered promiscuous mode
[  190.282294][T14300] pim6reg1: entered promiscuous mode
[  190.284575][T14300] pim6reg1: entered allmulticast mode
[  190.335886][T14307] netlink: 'syz.3.2809': attribute type 10 has an invalid length.
[  190.345679][T14307] team0: Port device 0! removed
[  190.349237][T14307] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  190.397383][T14314] lo speed is unknown, defaulting to 1000
[  190.400476][T14314] lo speed is unknown, defaulting to 1000
[  190.593127][ T5865] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  191.289764][T14318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.059890][T14366] dvmrp8: entered allmulticast mode
[  192.075919][T14364] lo speed is unknown, defaulting to 1000
[  192.078840][T14364] lo speed is unknown, defaulting to 1000
[  192.282319][T14373] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  192.285047][T14373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.306924][T14373] IPVS: length: 49 != 24
[  192.326470][T14374] lo speed is unknown, defaulting to 1000
[  192.328954][T14374] lo speed is unknown, defaulting to 1000
[  192.402676][T14364] dvmrp8: left allmulticast mode
[  192.498605][T14378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  192.555750][T14378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  192.614242][T14378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  192.673518][T14378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  192.726208][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  192.735641][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  192.744450][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  192.752067][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  193.140688][T14425] veth0: entered promiscuous mode
[  193.146035][T14425] __nla_validate_parse: 37 callbacks suppressed
[  193.146072][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'.
[  193.154202][T14425] veth0 (unregistering): left promiscuous mode
[  193.182214][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2841'.
[  193.204351][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'.
[  193.324880][T14443] lo speed is unknown, defaulting to 1000
[  193.330530][T14443] lo speed is unknown, defaulting to 1000
[  193.372230][T14441] dvmrp0: entered allmulticast mode
[  193.393405][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'.
[  193.414415][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'.
[  193.536043][T14467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2848'.
[  193.538970][T14467] nbd: couldn't find a device at index 0
[  193.579592][T14476] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2850'.
[  193.683206][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'.
[  193.687340][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'.
[  193.691089][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  193.715247][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.719403][T14489] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.727564][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  193.730521][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.739418][T14498] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.2856'.
[  193.744352][T14489] netlink: 'syz.1.2855': attribute type 1 has an invalid length.
[  193.795376][T14503] nbd: couldn't find a device at index 0
[  193.916358][T14511] sctp: [Deprecated]: syz.1.2861 (pid 14511) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.916358][T14511] Use struct sctp_sack_info instead
[  193.929450][T14511] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  193.935553][T14511] CPU: 0 UID: 0 PID: 14511 Comm: syz.1.2861 Not tainted syzkaller #0 PREEMPT(full) 
[  193.935578][T14511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.935588][T14511] Call Trace:
[  193.935595][T14511]  <TASK>
[  193.935602][T14511]  dump_stack_lvl+0x189/0x250
[  193.935628][T14511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.935646][T14511]  ? __pfx__printk+0x10/0x10
[  193.935666][T14511]  ? kernfs_root+0x1c/0x230
[  193.935684][T14511]  ? kernfs_path_from_node+0x2f/0x290
[  193.935701][T14511]  ? kernfs_path_from_node+0x250/0x290
[  193.935715][T14511]  ? kernfs_path_from_node+0x2f/0x290
[  193.935732][T14511]  sysfs_warn_dup+0x8e/0xa0
[  193.935746][T14511]  sysfs_do_create_link_sd+0xc0/0x110
[  193.935762][T14511]  device_add_class_symlinks+0x1cf/0x240
[  193.935780][T14511]  device_add+0x475/0xb50
[  193.935794][T14511]  wiphy_register+0x1ba6/0x28d0
[  193.935821][T14511]  ? __pfx_wiphy_register+0x10/0x10
[  193.935840][T14511]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  193.935860][T14511]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  193.935888][T14511]  ieee80211_register_hw+0x3425/0x4080
[  193.935909][T14511]  ? ieee80211_register_hw+0x14a1/0x4080
[  193.935926][T14511]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  193.935943][T14511]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.936001][T14511]  ? __hrtimer_setup+0x187/0x210
[  193.936016][T14511]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  193.936041][T14511]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  193.936069][T14511]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  193.936087][T14511]  ? trace_kmalloc+0x1f/0xd0
[  193.936107][T14511]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  193.936127][T14511]  ? kstrndup+0xbf/0x160
[  193.936145][T14511]  hwsim_new_radio_nl+0xea4/0x1b10
[  193.936164][T14511]  ? __pfx___nla_validate_parse+0x10/0x10
[  193.936191][T14511]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.936212][T14511]  ? __nla_parse+0x40/0x60
[  193.936234][T14511]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  193.936256][T14511]  genl_family_rcv_msg_doit+0x215/0x300
[  193.936276][T14511]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  193.936297][T14511]  ? bpf_lsm_capable+0x9/0x20
[  193.936318][T14511]  ? security_capable+0x7e/0x2e0
[  193.936342][T14511]  genl_rcv_msg+0x60e/0x790
[  193.936359][T14511]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.936374][T14511]  ? __kasan_slab_alloc+0x6c/0x80
[  193.936392][T14511]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.936410][T14511]  ? __netlink_lookup+0xbd/0x810
[  193.936422][T14511]  ? rcu_is_watching+0x15/0xb0
[  193.936440][T14511]  netlink_rcv_skb+0x208/0x470
[  193.936460][T14511]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.936475][T14511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.936504][T14511]  ? lock_release+0x4b/0x3e0
[  193.936528][T14511]  ? down_read+0x1ad/0x2e0
[  193.936541][T14511]  genl_rcv+0x28/0x40
[  193.936555][T14511]  netlink_unicast+0x82f/0x9e0
[  193.936577][T14511]  ? __pfx_netlink_unicast+0x10/0x10
[  193.936594][T14511]  ? netlink_sendmsg+0x642/0xb30
[  193.936614][T14511]  ? skb_put+0x11b/0x210
[  193.936629][T14511]  netlink_sendmsg+0x805/0xb30
[  193.936652][T14511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.936673][T14511]  ? futex_unqueue+0x22/0x240
[  193.936688][T14511]  ? aa_sock_msg_perm+0xf1/0x1d0
[  193.936703][T14511]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  193.936718][T14511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.936739][T14511]  __sock_sendmsg+0x21c/0x270
[  193.936757][T14511]  ____sys_sendmsg+0x505/0x830
[  193.936773][T14511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.936791][T14511]  ? import_iovec+0x74/0xa0
[  193.936808][T14511]  ___sys_sendmsg+0x21f/0x2a0
[  193.936822][T14511]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.936839][T14511]  ? futex_wait+0x285/0x360
[  193.936867][T14511]  ? __fget_files+0x2a/0x420
[  193.936889][T14511]  ? __fget_files+0x3a0/0x420
[  193.936913][T14511]  __x64_sys_sendmsg+0x19b/0x260
[  193.936928][T14511]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.936947][T14511]  ? fdget+0x184/0x1e0
[  193.936991][T14511]  ? rcu_is_watching+0x15/0xb0
[  193.937008][T14511]  do_syscall_64+0xfa/0x3b0
[  193.937032][T14511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.937047][T14511]  ? exc_page_fault+0x9f/0xf0
[  193.937068][T14511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.937082][T14511] RIP: 0033:0x7f58e678ebe9
[  193.937096][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.937111][T14511] RSP: 002b:00007f58e762d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.937128][T14511] RAX: ffffffffffffffda RBX: 00007f58e69b5fa0 RCX: 00007f58e678ebe9
[  193.937140][T14511] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  193.937150][T14511] RBP: 00007f58e6811e19 R08: 0000000000000000 R09: 0000000000000000
[  193.937160][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.937169][T14511] R13: 00007f58e69b6038 R14: 00007f58e69b5fa0 R15: 00007ffe70622d88
[  193.937187][T14511]  </TASK>
[  194.157803][T14529] nbd: couldn't find a device at index 0
[  194.186329][T14533] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.189743][T14533] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.264377][T14536] netlink: 'syz.0.2869': attribute type 10 has an invalid length.
[  194.299090][T14540] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.326417][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.329598][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.360033][T14547] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  194.374394][T14547] 8021q: adding VLAN 0 to HW filter on device bond6
[  194.654108][T14555] netlink: 'syz.0.2874': attribute type 10 has an invalid length.
[  194.688926][T14557] netlink: 'syz.0.2875': attribute type 7 has an invalid length.
[  194.692914][T14557] netlink: 'syz.0.2875': attribute type 8 has an invalid length.
[  194.773318][T14561] pim6reg1: entered promiscuous mode
[  194.777536][T14561] pim6reg1: entered allmulticast mode
[  194.783396][T14561] netlink: 'syz.3.2876': attribute type 274 has an invalid length.
[  194.856404][T14575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.987528][T14582] gretap1: entered promiscuous mode
[  194.989649][T14582] gretap1: entered allmulticast mode
[  195.027305][T14594] netlink: 'syz.0.2885': attribute type 8 has an invalid length.
[  195.028094][T14591] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode
[  195.034361][T14591] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  195.110783][T14607] netlink: 'syz.1.2890': attribute type 12 has an invalid length.
[  195.162472][T14614] team0: Device xfrm2 is of different type
[  195.460137][T14648] netlink: 'syz.3.2902': attribute type 5 has an invalid length.
[  195.508321][T14655] netlink: 'syz.1.2906': attribute type 6 has an invalid length.
[  195.654643][T14672] bridge0: entered allmulticast mode
[  195.728703][T14681] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  196.005184][T14704] lo speed is unknown, defaulting to 1000
[  196.008302][T14704] lo speed is unknown, defaulting to 1000
[  196.405518][T14749] erspan0: entered promiscuous mode
[  196.408077][T14749] gretap0: entered promiscuous mode
[  196.410435][T14749] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  196.416349][T14749] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  196.520745][T14762] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.556123][T14762] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.607374][T14762] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.655353][T14762] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.673553][T14774] nbd: couldn't find a device at index 0
[  196.720738][T14771] 8021q: adding VLAN 0 to HW filter on device bond4
[  196.739853][T14771] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  196.746297][T14771] bond4: (slave macvlan0): Enslaving as a backup interface with a down link
[  196.753943][T14771] veth0_to_bond: left allmulticast mode
[  196.756327][T14771] veth0_to_bond: left promiscuous mode
[  196.758735][T14771] bridge3: port 2(veth0_to_bond) entered disabled state
[  196.768255][T14771] tipc: Resetting bearer <eth:syzkaller0>
[  196.785589][T14771] veth3: left allmulticast mode
[  196.787530][T14771] veth3: left promiscuous mode
[  196.789579][T14771] bridge3: port 1(veth3) entered disabled state
[  196.804147][T14771] bond4: (slave macvlan0): Releasing backup interface
[  196.854282][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.863067][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.882535][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.885729][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.992718][T14800] lo speed is unknown, defaulting to 1000
[  196.995827][T14800] lo speed is unknown, defaulting to 1000
[  197.188670][T14809] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  197.191937][T14809] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  197.195105][T14809] tipc: Resetting bearer <eth:syzkaller0>
[  197.199013][T14809] netlink: 'syz.3.2933': attribute type 10 has an invalid length.
[  197.205598][T14811] nbd: couldn't find a device at index 0
[  197.244417][T14814] netlink: 'syz.3.2935': attribute type 9 has an invalid length.
[  197.285646][T14816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.291415][T14816] syz.0.2936: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  197.296189][T14816] CPU: 0 UID: 0 PID: 14816 Comm: syz.0.2936 Not tainted syzkaller #0 PREEMPT(full) 
[  197.296207][T14816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.296215][T14816] Call Trace:
[  197.296219][T14816]  <TASK>
[  197.296224][T14816]  dump_stack_lvl+0x189/0x250
[  197.296239][T14816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.296249][T14816]  ? __pfx__printk+0x10/0x10
[  197.296260][T14816]  ? lock_release+0x4b/0x3e0
[  197.296274][T14816]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  197.296283][T14816]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  197.296293][T14816]  warn_alloc+0x214/0x310
[  197.296305][T14816]  ? stack_depot_save_flags+0x40/0x860
[  197.296316][T14816]  ? __pfx_warn_alloc+0x10/0x10
[  197.296327][T14816]  ? kasan_save_track+0x4f/0x80
[  197.296338][T14816]  ? xskq_create+0x56/0x170
[  197.296348][T14816]  ? xsk_init_queue+0xb0/0x110
[  197.296357][T14816]  ? xsk_setsockopt+0x4dc/0x8d0
[  197.296365][T14816]  ? do_sock_setsockopt+0x17c/0x1b0
[  197.296373][T14816]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  197.296381][T14816]  ? do_syscall_64+0xfa/0x3b0
[  197.296393][T14816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.296402][T14816]  __vmalloc_node_range_noprof+0x125/0x12f0
[  197.296419][T14816]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  197.296431][T14816]  ? xsk_setsockopt+0x462/0x8d0
[  197.296440][T14816]  ? __kasan_kmalloc+0x93/0xb0
[  197.296450][T14816]  vmalloc_user_noprof+0xad/0xf0
[  197.296460][T14816]  ? xskq_create+0xbf/0x170
[  197.296470][T14816]  xskq_create+0xbf/0x170
[  197.296480][T14816]  xsk_init_queue+0xb0/0x110
[  197.296490][T14816]  xsk_setsockopt+0x4dc/0x8d0
[  197.296500][T14816]  ? __pfx_xsk_setsockopt+0x10/0x10
[  197.296508][T14816]  ? __pfx_aa_sk_perm+0x10/0x10
[  197.296519][T14816]  ? lock_release+0x4b/0x3e0
[  197.296530][T14816]  ? aa_sock_opt_perm+0xff/0x1b0
[  197.296537][T14816]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  197.296546][T14816]  ? __pfx_xsk_setsockopt+0x10/0x10
[  197.296555][T14816]  do_sock_setsockopt+0x17c/0x1b0
[  197.296563][T14816]  __x64_sys_setsockopt+0x13f/0x1b0
[  197.296572][T14816]  do_syscall_64+0xfa/0x3b0
[  197.296582][T14816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.296589][T14816]  ? exc_page_fault+0x9f/0xf0
[  197.296600][T14816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.296607][T14816] RIP: 0033:0x7ff9e1d8ebe9
[  197.296642][T14816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.296651][T14816] RSP: 002b:00007ff9e2b92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  197.296661][T14816] RAX: ffffffffffffffda RBX: 00007ff9e1fb5fa0 RCX: 00007ff9e1d8ebe9
[  197.296667][T14816] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  197.296673][T14816] RBP: 00007ff9e1e11e19 R08: 0000000000000004 R09: 0000000000000000
[  197.296679][T14816] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.296685][T14816] R13: 00007ff9e1fb6038 R14: 00007ff9e1fb5fa0 R15: 00007fff6261e018
[  197.296696][T14816]  </TASK>
[  197.296700][T14816] Mem-Info:
[  197.372333][T14819] netlink: 'syz.3.2937': attribute type 23 has an invalid length.
[  197.372658][T14816] active_anon:6212 inactive_anon:0 isolated_anon:0
[  197.372658][T14816]  active_file:1638 inactive_file:38266 isolated_file:0
[  197.372658][T14816]  unevictable:1768 dirty:155 writeback:0
[  197.372658][T14816]  slab_reclaimable:12439 slab_unreclaimable:158559
[  197.372658][T14816]  mapped:23389 shmem:3852 pagetables:1162
[  197.372658][T14816]  sec_pagetables:0 bounce:0
[  197.372658][T14816]  kernel_misc_reclaimable:0
[  197.372658][T14816]  free:171724 free_pcp:23307 free_cma:0
[  197.426259][T14816] Node 0 active_anon:9632kB inactive_anon:0kB active_file:3472kB inactive_file:24460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24728kB dirty:368kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5664kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.437462][T14816] Node 1 active_anon:9708kB inactive_anon:0kB active_file:3080kB inactive_file:128604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:68828kB dirty:252kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6692kB pagetables:2252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.448737][T14816] Node 0 DMA free:15032kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:308kB local_pcp:308kB free_cma:0kB
[  197.459790][T14816] lowmem_reserve[]: 0 811 811 811 811
[  197.465472][T14820] pimreg: mtu less than device minimum
[  197.467760][T14816] Node 0 DMA32 free:321072kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9700kB inactive_anon:0kB active_file:3472kB inactive_file:24460kB unevictable:3536kB writepending:368kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:29384kB local_pcp:12404kB free_cma:0kB
[  197.488868][T14816] lowmem_reserve[]: 0 0 0 0 0
[  197.492787][T14816] Node 1 DMA32 free:206752kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:20496kB local_pcp:9116kB free_cma:0kB
[  197.502498][T14816] lowmem_reserve[]: 0 0 854 854 854
[  197.504128][T14816] Node 1 Normal free:143752kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9708kB inactive_anon:0kB active_file:3080kB inactive_file:128604kB unevictable:3536kB writepending:252kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48728kB local_pcp:20632kB free_cma:0kB
[  197.508936][T14824] lo speed is unknown, defaulting to 1000
[  197.514869][T14816] lowmem_reserve[]: 0 0 0 0 0
[  197.518514][T14816] Node 0 DMA: 6*4kB (UM) 6*8kB (U) 5*16kB (U) 7*32kB (UM) 5*64kB (U) 8*128kB (UM) 6*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 1*2048kB (U) 0*4096kB = 15032kB
[  197.524649][T14816] Node 0 DMA32: 922*4kB (UE) 336*8kB (UE) 45*16kB (UME) 229*32kB (UM) 238*64kB (UM) 67*128kB (UM) 135*256kB (UME) 91*512kB (UM) 93*1024kB (UME) 8*2048kB (UME) 22*4096kB (UM) = 321112kB
[  197.525535][T14824] lo speed is unknown, defaulting to 1000
[  197.530252][T14816] Node 1 DMA32: 111*4kB (U) 125*8kB (UME) 101*16kB (UME) 96*32kB (UME) 81*64kB (UE) 75*128kB (U) 72*256kB (UE) 67*512kB (U) 62*1024kB (UE) 4*2048kB (UME) 15*4096kB (M) = 206772kB
[  197.538518][T14816] Node 1 Normal: 470*4kB (UME) 374*8kB (UME) 112*16kB (UE) 4*32kB (UME) 170*64kB (UME) 122*128kB (UM) 101*256kB (UM) 61*512kB (UM) 42*1024kB (UM) 5*2048kB (UM) 0*4096kB = 143624kB
[  197.545059][T14816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.548187][T14816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.551361][T14816] 42413 total pagecache pages
[  197.553039][T14816] 0 pages in swap cache
[  197.554494][T14816] Free swap  = 124996kB
[  197.555783][T14816] Total swap = 124996kB
[  197.557236][T14816] 786301 pages RAM
[  197.558681][T14816] 0 pages HighMem/MovableOnly
[  197.560359][T14816] 241332 pages reserved
[  197.562128][T14816] 0 pages cma reserved
[  197.726705][T14827] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.748989][T14827] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  197.761130][T14827] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  197.773707][T14827] tipc: Resetting bearer <eth:syzkaller0>
[  197.818847][T14833] veth0_virt_wifi: left allmulticast mode
[  197.823167][T14833] tipc: Resetting bearer <eth:syzkaller0>
[  197.828254][T14833] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  197.831177][T14833] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  197.839994][T14833] geneve3: left promiscuous mode
[  197.842214][T14833] geneve3: left allmulticast mode
[  197.848544][ T5882] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  197.856252][ T5882] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  197.865774][ T5882] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  197.884771][ T5882] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  197.923636][T14843] netlink: 'syz.0.2947': attribute type 1 has an invalid length.
[  197.936342][T14843] veth13: entered promiscuous mode
[  197.941034][ T5857] Bluetooth: hci3: command 0x0405 tx timeout
[  197.987151][T14849] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  198.077224][T14857] netlink: 'syz.1.2953': attribute type 39 has an invalid length.
[  198.118813][T14861] bridge5: entered promiscuous mode
[  198.126378][T14861] macsec0: entered promiscuous mode
[  198.129092][T14861] macsec0: entered allmulticast mode
[  198.131595][T14861] bridge5: entered allmulticast mode
[  198.134600][T14861] bridge5: port 1(macsec0) entered blocking state
[  198.137507][T14861] bridge5: port 1(macsec0) entered disabled state
[  198.144363][T14861] bridge5: left allmulticast mode
[  198.146011][T14861] bridge5: left promiscuous mode
[  198.170439][T14865] __nla_validate_parse: 27 callbacks suppressed
[  198.170455][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  198.206107][T14870] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.262427][T14882] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.263093][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  198.277309][T14883] netlink: 'syz.0.2962': attribute type 3 has an invalid length.
[  198.279953][T14883] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2962'.
[  198.281018][T14882] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  198.291151][T14882] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  198.297980][T14882] tipc: Resetting bearer <eth:syzkaller0>
[  198.349206][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  198.373250][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'.
[  198.394488][T14891] bridge0 (unregistering): left allmulticast mode
[  198.468061][T14889] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.471432][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'.
[  198.474600][T14889] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  198.556040][T14905] atomic_op ffff888111ff3998 conn xmit_atomic 0000000000000000
[  198.591989][T14903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2968'.
[  198.649395][T14915] lo speed is unknown, defaulting to 1000
[  198.654447][T14917] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2973'.
[  198.658578][T14915] lo speed is unknown, defaulting to 1000
[  198.671233][T14917] tap0: tun_chr_ioctl cmd 1074025677
[  198.673307][T14917] tap0: linktype set to 270
[  198.712800][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  198.803692][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'.
[  198.809720][T14940] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.907609][T14951] vlan2: entered allmulticast mode
[  198.909583][T14951] bridge_slave_0: entered allmulticast mode
[  198.928212][T14953] bridge7: entered promiscuous mode
[  198.929909][T14953] bridge7: entered allmulticast mode
[  198.937887][T14953] bridge8: entered promiscuous mode
[  198.939524][T14953] bridge8: entered allmulticast mode
[  198.949910][T14955] lo speed is unknown, defaulting to 1000
[  198.961363][T14955] lo speed is unknown, defaulting to 1000
[  199.187512][T14975] lo speed is unknown, defaulting to 1000
[  199.193831][T14975] lo speed is unknown, defaulting to 1000
[  199.293095][T14985] geneve4: entered promiscuous mode
[  199.294923][T14985] geneve4: entered allmulticast mode
[  199.297758][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  199.303124][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  199.306025][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  199.310599][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  199.317213][T14986] sctp: [Deprecated]: syz.3.2990 (pid 14986) Use of int in max_burst socket option deprecated.
[  199.317213][T14986] Use struct sctp_assoc_value instead
[  199.405743][T14995] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.523614][T15010] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  199.778128][T15028] veth0_to_bond: entered allmulticast mode
[  199.840570][T15030] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.845444][T15030] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  199.884749][T15030] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.888078][T15030] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  199.936238][T15030] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.940094][T15030] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  199.994429][T15030] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.998371][T15030] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  200.087487][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.090807][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  200.101454][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.104750][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  200.114243][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.117261][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  200.127824][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.132281][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  200.235022][T15043] lo speed is unknown, defaulting to 1000
[  200.237949][T15043] lo speed is unknown, defaulting to 1000
[  200.374596][T15047] nbd: couldn't find a device at index 0
[  200.458616][   T33] audit: type=1800 audit(1755843700.848:2): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3006" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4967 res=0 errno=0
[  200.515798][T15058] tap0: tun_chr_ioctl cmd 1074025675
[  200.520814][T15058] tap0: persist disabled
[  201.027930][T15072] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.032591][T15073] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  201.035278][T15073] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  201.038158][T15073] tipc: Resetting bearer <eth:syzkaller0>
[  201.144641][T15079] tipc: Resetting bearer <eth:syzkaller0>
[  201.147359][T15079] tipc: Resetting bearer <eth:syzkaller0>
[  201.366162][T15100] validate_nla: 7 callbacks suppressed
[  201.366175][T15100] netlink: 'syz.3.3022': attribute type 10 has an invalid length.
[  201.371529][T15100] !: left promiscuous mode
[  201.373128][T15100] !: left allmulticast mode
[  201.404040][T15106] team_slave_0: left promiscuous mode
[  201.405892][T15106] team_slave_0: left allmulticast mode
[  201.409091][T15106] team0: Port device team_slave_0 removed
[  201.413629][T15106] team_slave_1: left promiscuous mode
[  201.416393][T15106] team_slave_1: left allmulticast mode
[  201.419093][T15106] team0: Port device team_slave_1 removed
[  201.423315][T15106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.425920][T15106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.428989][T15106] bond6: (slave wlan0): Releasing active interface
[  201.433706][T15106] batman_adv: batadv0: Removing interface: ip6gretap1
[  201.436562][T15106] tipc: Resetting bearer <eth:syzkaller0>
[  201.438955][T15106] bond5: left promiscuous mode
[  201.440645][T15106] bond5: left allmulticast mode
[  201.444691][T15106] team0: Port device bond5 removed
[  201.447902][T15105] tipc: Resetting bearer <eth:syzkaller0>
[  201.455827][T15106] tipc: Resetting bearer <eth:syzkaller0>
[  201.556965][T15127] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  201.569957][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.3.3029 Not tainted syzkaller #0 PREEMPT(full) 
[  201.569977][T15127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.569987][T15127] Call Trace:
[  201.569992][T15127]  <TASK>
[  201.569998][T15127]  dump_stack_lvl+0x189/0x250
[  201.570020][T15127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.570034][T15127]  ? __pfx__printk+0x10/0x10
[  201.570047][T15127]  ? kernfs_root+0x1c/0x230
[  201.570062][T15127]  ? kernfs_path_from_node+0x2f/0x290
[  201.570076][T15127]  ? kernfs_path_from_node+0x250/0x290
[  201.570088][T15127]  ? kernfs_path_from_node+0x2f/0x290
[  201.570101][T15127]  sysfs_warn_dup+0x8e/0xa0
[  201.570115][T15127]  sysfs_do_create_link_sd+0xc0/0x110
[  201.570129][T15127]  device_add_class_symlinks+0x1cf/0x240
[  201.570146][T15127]  device_add+0x475/0xb50
[  201.570158][T15127]  wiphy_register+0x1ba6/0x28d0
[  201.570212][T15127]  ? __pfx_wiphy_register+0x10/0x10
[  201.570228][T15127]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.570243][T15127]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.570266][T15127]  ieee80211_register_hw+0x3425/0x4080
[  201.570287][T15127]  ? ieee80211_register_hw+0x14a1/0x4080
[  201.570302][T15127]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.570313][T15127]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.570332][T15127]  ? __hrtimer_setup+0x187/0x210
[  201.570345][T15127]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.570362][T15127]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.570388][T15127]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.570404][T15127]  ? trace_kmalloc+0x1f/0xd0
[  201.570419][T15127]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.570440][T15127]  ? kstrndup+0xbf/0x160
[  201.570455][T15127]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.570472][T15127]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.570497][T15127]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.570516][T15127]  ? __nla_parse+0x40/0x60
[  201.570530][T15127]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.570548][T15127]  genl_family_rcv_msg_doit+0x215/0x300
[  201.570564][T15127]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.570581][T15127]  ? bpf_lsm_capable+0x9/0x20
[  201.570599][T15127]  ? security_capable+0x7e/0x2e0
[  201.570620][T15127]  genl_rcv_msg+0x60e/0x790
[  201.570635][T15127]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.570643][T15127]  ? __kasan_slab_alloc+0x6c/0x80
[  201.570659][T15127]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.570674][T15127]  ? __netlink_lookup+0xbd/0x810
[  201.570684][T15127]  ? rcu_is_watching+0x15/0xb0
[  201.570698][T15127]  netlink_rcv_skb+0x208/0x470
[  201.570716][T15127]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.570730][T15127]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.570752][T15127]  ? lock_release+0x4b/0x3e0
[  201.570766][T15127]  ? down_read+0x1ad/0x2e0
[  201.570777][T15127]  genl_rcv+0x28/0x40
[  201.570788][T15127]  netlink_unicast+0x82f/0x9e0
[  201.570807][T15127]  ? __pfx_netlink_unicast+0x10/0x10
[  201.570822][T15127]  ? netlink_sendmsg+0x642/0xb30
[  201.570859][T15127]  ? skb_put+0x11b/0x210
[  201.570874][T15127]  netlink_sendmsg+0x805/0xb30
[  201.570890][T15127]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.570908][T15127]  ? futex_unqueue+0x22/0x240
[  201.570922][T15127]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.570934][T15127]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.570947][T15127]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.570966][T15127]  __sock_sendmsg+0x21c/0x270
[  201.570983][T15127]  ____sys_sendmsg+0x505/0x830
[  201.570998][T15127]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.571011][T15127]  ? import_iovec+0x74/0xa0
[  201.571024][T15127]  ___sys_sendmsg+0x21f/0x2a0
[  201.571037][T15127]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.571051][T15127]  ? futex_wait+0x285/0x360
[  201.571077][T15127]  ? __fget_files+0x2a/0x420
[  201.571096][T15127]  ? __fget_files+0x3a0/0x420
[  201.571117][T15127]  __x64_sys_sendmsg+0x19b/0x260
[  201.571125][T15127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.571144][T15127]  ? rcu_is_watching+0x15/0xb0
[  201.571157][T15127]  do_syscall_64+0xfa/0x3b0
[  201.571202][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.571212][T15127]  ? exc_page_fault+0x9f/0xf0
[  201.571227][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.571239][T15127] RIP: 0033:0x7fe1ab78ebe9
[  201.571252][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.571264][T15127] RSP: 002b:00007fe1a99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.571279][T15127] RAX: ffffffffffffffda RBX: 00007fe1ab9b5fa0 RCX: 00007fe1ab78ebe9
[  201.571289][T15127] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  201.571298][T15127] RBP: 00007fe1ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  201.571303][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.571308][T15127] R13: 00007fe1ab9b6038 R14: 00007fe1ab9b5fa0 R15: 00007ffc0d331678
[  201.571322][T15127]  </TASK>
[  201.788466][T15130] lo speed is unknown, defaulting to 1000
[  201.790904][T15130] lo speed is unknown, defaulting to 1000
[  201.935793][T15152] netlink: 'syz.0.3034': attribute type 1 has an invalid length.
[  201.940201][T15152] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  201.946165][T15152] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  201.953821][T15152] netlink: 'syz.0.3034': attribute type 10 has an invalid length.
[  201.966757][T15160] batadv_slave_1: entered promiscuous mode
[  201.973072][T15160] netlink: 'syz.3.3036': attribute type 11 has an invalid length.
[  201.993814][T15162] tipc: Resetting bearer <eth:syzkaller0>
[  202.007009][T15162] tipc: Resetting bearer <eth:syzkaller0>
[  202.012658][T15159] batadv_slave_1: left promiscuous mode
[  202.015754][T15162] tipc: Resetting bearer <eth:syzkaller0>
[  202.091895][ T5857] Bluetooth: hci3: command 0x0405 tx timeout
[  202.114163][   T54] Bluetooth: hci3: link tx timeout
[  202.116207][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.119200][ T5857] Bluetooth: hci3: link tx timeout
[  202.124305][ T5857] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.127489][ T5857] Bluetooth: hci3: link tx timeout
[  202.129676][ T5857] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.168277][T15174] ip6tnl1: entered promiscuous mode
[  202.170529][T15174] ip6tnl1: entered allmulticast mode
[  202.175084][T15174] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  202.627688][T15183] batman_adv: batadv0: Adding interface: gretap1
[  202.630421][T15183] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.644158][T15183] batman_adv: batadv0: Interface activated: gretap1
[  202.998818][T15189] syzkaller1: entered promiscuous mode
[  203.001892][T15189] syzkaller1: entered allmulticast mode
[  203.017792][T15190] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  203.021099][T15190] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  203.024562][T15190] tipc: Resetting bearer <eth:syzkaller0>
[  203.192867][ T5857] Bluetooth: hci3: link tx timeout
[  203.194519][ T5857] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  203.197431][ T5857] Bluetooth: hci3: link tx timeout
[  203.199641][ T5857] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  203.206270][T15217] __nla_validate_parse: 44 callbacks suppressed
[  203.206285][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'.
[  203.261796][T15224] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  203.264121][T15224] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  203.278518][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3050'.
[  203.290500][T15224] batman_adv: batadv0: Interface deactivated: gretap1
[  203.369327][T15228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3055'.
[  203.377579][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3055'.
[  203.394045][T15236] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  203.643084][T15254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3063'.
[  204.171682][ T5857] Bluetooth: hci3: command 0x0405 tx timeout
[  206.404425][T15274] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.407947][T15275] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  206.410507][T15275] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  206.415016][T15275] tipc: Resetting bearer <eth:syzkaller0>
[  206.444798][T15281] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.489586][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3071'.
[  206.494376][T15284] netlink: 'syz.3.3071': attribute type 15 has an invalid length.
[  206.501705][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3071'.
[  206.505348][T15284] netlink: 'syz.3.3071': attribute type 15 has an invalid length.
[  206.513464][T15289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3072'.
[  206.517119][T15289] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3072'.
[  206.523906][T15289] netlink: 'syz.1.3072': attribute type 5 has an invalid length.
[  206.527004][T15289] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3072'.
[  206.563778][T15289] lo speed is unknown, defaulting to 1000
[  206.566796][T15289] lo speed is unknown, defaulting to 1000
[  206.608361][T15301] syzkaller1: entered promiscuous mode
[  206.611050][T15301] syzkaller1: entered allmulticast mode
[  206.637755][T15306] netlink: 'syz.0.3078': attribute type 12 has an invalid length.
[  206.692926][T15311] 8021q: VLANs not supported on ipvlan1
[  206.716869][T15314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  206.730462][T15314] batman_adv: batadv0: Adding interface: ip6gretap3
[  206.734117][T15314] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.745412][T15314] batman_adv: batadv0: Interface activated: ip6gretap3
[  206.805450][T15321] nbd: couldn't find a device at index 0
[  206.875120][T15328] lo speed is unknown, defaulting to 1000
[  206.877774][T15328] lo speed is unknown, defaulting to 1000
[  206.907208][T15335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.910208][T15335] xt_time: invalid argument - start or stop time greater than 23:59:59
[  206.916454][T15335] nbd: couldn't find a device at index 0
[  206.933796][T15332] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  206.950146][T15337] sctp: [Deprecated]: syz.3.3090 (pid 15337) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.950146][T15337] Use struct sctp_sack_info instead
[  207.105899][T15350] netlink: 'syz.0.3092': attribute type 10 has an invalid length.
[  207.251015][T15366] netlink: 'syz.1.3097': attribute type 9 has an invalid length.
[  207.417136][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.420251][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.433730][T15388] netlink: 'syz.1.3106': attribute type 30 has an invalid length.
[  207.437000][T15389] netlink: 'syz.1.3106': attribute type 30 has an invalid length.
[  207.443672][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.447150][T15389] netlink: 'syz.1.3106': attribute type 30 has an invalid length.
[  207.454693][T15388] netlink: 'syz.1.3106': attribute type 30 has an invalid length.
[  207.454694][ T5882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.472331][ T5882] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.475595][ T5882] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.475655][T15379] smc: net device bond0 applied user defined pnetid SYZ2
[  207.482691][T15379] smc: net device bond0 erased user defined pnetid SYZ2
[  207.774305][T15410] tipc: Resetting bearer <eth:syzkaller0>
[  207.777843][T15410] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  207.780346][T15410] batman_adv: batadv0: Removing interface: ip6gretap3
[  207.796624][T15411] lo speed is unknown, defaulting to 1000
[  207.799719][T15411] lo speed is unknown, defaulting to 1000
[  207.801645][T15410] lo speed is unknown, defaulting to 1000
[  207.852963][T15410] lo speed is unknown, defaulting to 1000
[  208.218076][T15419] __nla_validate_parse: 26 callbacks suppressed
[  208.218095][T15419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3117'.
[  208.348805][T15430] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3122'.
[  208.352664][T15430] nbd: couldn't find a device at index 0
[  208.433001][T15436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.445846][T15437] lo speed is unknown, defaulting to 1000
[  208.448173][    T9] lo speed is unknown, defaulting to 1000
[  208.450259][    T9] syz0: Port: 1 Link ACTIVE
[  208.452641][T15437] lo speed is unknown, defaulting to 1000
[  208.456377][    T9] lo speed is unknown, defaulting to 1000
[  208.469812][T15436] lo speed is unknown, defaulting to 1000
[  208.548030][T15436] lo speed is unknown, defaulting to 1000
[  208.667864][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'.
[  208.688601][T15444] 8021q: adding VLAN 0 to HW filter on device bond7
[  208.711373][T15444] 8021q: adding VLAN 0 to HW filter on device bond7
[  208.722892][T15444] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  208.739569][T15444] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  208.747707][T15454] sctp: [Deprecated]: syz.3.3130 (pid 15454) Use of int in max_burst socket option.
[  208.747707][T15454] Use struct sctp_assoc_value instead
[  208.755668][T15452] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.803127][T15455] veth15: entered promiscuous mode
[  208.807938][T15455] bond7: (slave veth15): Enslaving as an active interface with a down link
[  208.816754][T15452] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.835116][T15444] erspan0: entered allmulticast mode
[  208.857652][T15452] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.865200][T15459] v: renamed from ip6_vti0
[  208.877032][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'.
[  208.879679][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'.
[  208.909056][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.912139][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.945894][T15466] bridge9: entered promiscuous mode
[  208.973982][T15452] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.044394][T15471] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3134'.
[  209.047956][T15471] nbd: couldn't find a device at index 0
[  209.050784][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.062320][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.068563][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.074835][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.120222][T15477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.125221][T15477] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  209.128240][T15477] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  209.134501][T15477] tipc: Resetting bearer <eth:syzkaller0>
[  209.187995][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3137'.
[  209.206764][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  209.210552][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  209.215828][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  209.219073][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  209.232066][T15481] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3138'.
[  209.236220][T15481] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3138'.
[  209.240654][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[  209.281699][T15483] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.354754][T15489] IPVS: length: 49 != 24
[  209.540548][T15512] lo speed is unknown, defaulting to 1000
[  209.555687][T15512] lo speed is unknown, defaulting to 1000
[  209.736794][T15525] tipc: Resetting bearer <eth:syzkaller0>
[  209.749397][T15525] team0: left allmulticast mode
[  209.808045][ T5882] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.814624][ T5882] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  209.849361][ T5882] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.853994][ T5882] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  209.857571][ T5882] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.861037][ T5882] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  209.865939][ T5882] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.869160][ T5882] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  209.885179][ T5917] IPVS: starting estimator thread 0...
[  209.915260][T15542] tipc: Resetting bearer <eth:syzkaller0>
[  209.920543][T15542] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  209.925432][T15542] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  209.954289][    T9] lo speed is unknown, defaulting to 1000
[  209.956628][    T9] syz0: Port: 1 Link DOWN
[  209.958365][    T9] lo speed is unknown, defaulting to 1000
[  209.967912][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.971644][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.975074][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.978483][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.982103][T15536] IPVS: using max 73 ests per chain, 175200 per kthread
[  210.058085][T15552] tipc: Resetting bearer <eth:syzkaller0>
[  210.105005][T15552] gretap2: entered promiscuous mode
[  210.148273][T15557] tipc: Resetting bearer <eth:syzkaller0>
[  210.159786][T15557] tipc: Resetting bearer <eth:syzkaller0>
[  210.347399][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  210.356819][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  210.362750][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  210.365625][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  210.455207][T15585] syzkaller1: entered promiscuous mode
[  210.457055][T15585] syzkaller1: entered allmulticast mode
[  210.619555][T15592] tipc: Resetting bearer <eth:syzkaller0>
[  210.674216][T15599] nbd: couldn't find a device at index 0
[  210.760529][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.771071][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.774396][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.790680][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.802106][T15612] syzkaller1: entered promiscuous mode
[  210.804276][T15612] syzkaller1: entered allmulticast mode
[  210.911037][T15617] tipc: Resetting bearer <eth:syzkaller0>
[  210.953875][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.956768][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.959507][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.963156][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.997862][T15630] lo speed is unknown, defaulting to 1000
[  211.002554][T15630] lo speed is unknown, defaulting to 1000
[  211.088758][T15638] lo speed is unknown, defaulting to 1000
[  211.092270][T15638] lo speed is unknown, defaulting to 1000
[  211.113603][T15644] sctp: [Deprecated]: syz.3.3188 (pid 15644) Use of int in max_burst socket option deprecated.
[  211.113603][T15644] Use struct sctp_assoc_value instead
[  211.346554][T15652] bridge0: entered allmulticast mode
[  211.383811][T15654] nbd: couldn't find a device at index 0
[  211.516536][T15662] lo speed is unknown, defaulting to 1000
[  211.518953][T15662] lo speed is unknown, defaulting to 1000
[  211.617984][T15666] validate_nla: 23 callbacks suppressed
[  211.618002][T15666] netlink: 'syz.1.3194': attribute type 10 has an invalid length.
[  211.706846][T15673] netlink: 'syz.0.3197': attribute type 7 has an invalid length.
[  211.709567][T15673] netlink: 'syz.0.3197': attribute type 8 has an invalid length.
[  211.800038][T15680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.333745][T15703] team0: left promiscuous mode
[  212.336151][T15703] veth0_to_bond: left allmulticast mode
[  212.340604][T15703] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  212.345306][T15703] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  212.348629][T15703] macsec0: left promiscuous mode
[  212.350603][T15703] macsec0: left allmulticast mode
[  212.353381][T15703] gretap1: left promiscuous mode
[  212.355780][T15703] gretap1: left allmulticast mode
[  212.358528][T15703] geneve4: left promiscuous mode
[  212.360548][T15703] geneve4: left allmulticast mode
[  212.363627][T15703] gretap2: left promiscuous mode
[  212.444658][T15715] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.515909][T15718] netlink: 'syz.1.3212': attribute type 9 has an invalid length.
[  212.560510][T15723] netlink: 'syz.3.3213': attribute type 10 has an invalid length.
[  212.566485][T15723] team0: Port device 0! added
[  212.572395][T15723] netlink: 'syz.3.3213': attribute type 10 has an invalid length.
[  212.586060][T15723] team0: Port device 0! removed
[  212.825638][T15749] netlink: 'syz.1.3220': attribute type 10 has an invalid length.
[  212.954399][T15762] vlan2: entered promiscuous mode
[  212.956085][T15762] dummy0: entered promiscuous mode
[  213.089634][T15769] netlink: 'syz.1.3229': attribute type 10 has an invalid length.
[  213.321662][T15773] __nla_validate_parse: 38 callbacks suppressed
[  213.321675][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'.
[  213.356643][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'.
[  213.393034][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'.
[  213.398007][T15775] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  213.400610][T15775] CPU: 1 UID: 0 PID: 15775 Comm: syz.3.3231 Not tainted syzkaller #0 PREEMPT(full) 
[  213.400632][T15775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.400642][T15775] Call Trace:
[  213.400646][T15775]  <TASK>
[  213.400651][T15775]  dump_stack_lvl+0x189/0x250
[  213.400669][T15775]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.400679][T15775]  ? __pfx__printk+0x10/0x10
[  213.400691][T15775]  ? kernfs_root+0x1c/0x230
[  213.400702][T15775]  ? kernfs_path_from_node+0x2f/0x290
[  213.400711][T15775]  ? kernfs_path_from_node+0x250/0x290
[  213.400720][T15775]  ? kernfs_path_from_node+0x2f/0x290
[  213.400729][T15775]  sysfs_warn_dup+0x8e/0xa0
[  213.400738][T15775]  sysfs_do_create_link_sd+0xc0/0x110
[  213.400747][T15775]  device_add_class_symlinks+0x1cf/0x240
[  213.400756][T15775]  device_add+0x475/0xb50
[  213.400764][T15775]  wiphy_register+0x1ba6/0x28d0
[  213.400780][T15775]  ? __pfx_wiphy_register+0x10/0x10
[  213.400790][T15775]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  213.400800][T15775]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  213.400814][T15775]  ieee80211_register_hw+0x3425/0x4080
[  213.400825][T15775]  ? ieee80211_register_hw+0x14a1/0x4080
[  213.400834][T15775]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  213.400863][T15775]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.400875][T15775]  ? __hrtimer_setup+0x187/0x210
[  213.400883][T15775]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  213.400896][T15775]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  213.400911][T15775]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  213.400921][T15775]  ? trace_kmalloc+0x1f/0xd0
[  213.400931][T15775]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  213.400941][T15775]  ? kstrndup+0xbf/0x160
[  213.400973][T15775]  hwsim_new_radio_nl+0xea4/0x1b10
[  213.400985][T15775]  ? __pfx___nla_validate_parse+0x10/0x10
[  213.401001][T15775]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.401013][T15775]  ? __nla_parse+0x40/0x60
[  213.401024][T15775]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  213.401037][T15775]  genl_family_rcv_msg_doit+0x215/0x300
[  213.401047][T15775]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.401058][T15775]  ? bpf_lsm_capable+0x9/0x20
[  213.401069][T15775]  ? security_capable+0x7e/0x2e0
[  213.401082][T15775]  genl_rcv_msg+0x60e/0x790
[  213.401091][T15775]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.401099][T15775]  ? __kasan_slab_alloc+0x6c/0x80
[  213.401109][T15775]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.401118][T15775]  ? __netlink_lookup+0xbd/0x810
[  213.401125][T15775]  ? rcu_is_watching+0x15/0xb0
[  213.401135][T15775]  netlink_rcv_skb+0x208/0x470
[  213.401145][T15775]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.401153][T15775]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.401166][T15775]  ? lock_release+0x4b/0x3e0
[  213.401177][T15775]  ? down_read+0x1ad/0x2e0
[  213.401184][T15775]  genl_rcv+0x28/0x40
[  213.401191][T15775]  netlink_unicast+0x82f/0x9e0
[  213.401202][T15775]  ? __pfx_netlink_unicast+0x10/0x10
[  213.401212][T15775]  ? netlink_sendmsg+0x642/0xb30
[  213.401229][T15775]  ? skb_put+0x11b/0x210
[  213.401237][T15775]  netlink_sendmsg+0x805/0xb30
[  213.401251][T15775]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.401263][T15775]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.401271][T15775]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.401279][T15775]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.401291][T15775]  __sock_sendmsg+0x21c/0x270
[  213.401302][T15775]  ____sys_sendmsg+0x505/0x830
[  213.401313][T15775]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.401323][T15775]  ? import_iovec+0x74/0xa0
[  213.401333][T15775]  ___sys_sendmsg+0x21f/0x2a0
[  213.401341][T15775]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.401351][T15775]  ? futex_wake+0x4b2/0x560
[  213.401368][T15775]  ? __fget_files+0x2a/0x420
[  213.401379][T15775]  ? __fget_files+0x3a0/0x420
[  213.401392][T15775]  __x64_sys_sendmsg+0x19b/0x260
[  213.401400][T15775]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.401409][T15775]  ? rcu_is_watching+0x15/0xb0
[  213.401417][T15775]  ? rcu_is_watching+0x15/0xb0
[  213.401424][T15775]  do_syscall_64+0xfa/0x3b0
[  213.401436][T15775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.401443][T15775]  ? exc_page_fault+0x9f/0xf0
[  213.401453][T15775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.401461][T15775] RIP: 0033:0x7fe1ab78ebe9
[  213.401469][T15775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.401476][T15775] RSP: 002b:00007fe1a99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.401485][T15775] RAX: ffffffffffffffda RBX: 00007fe1ab9b5fa0 RCX: 00007fe1ab78ebe9
[  213.401492][T15775] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  213.401498][T15775] RBP: 00007fe1ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  213.401503][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.401508][T15775] R13: 00007fe1ab9b6038 R14: 00007fe1ab9b5fa0 R15: 00007ffc0d331678
[  213.401517][T15775]  </TASK>
[  213.807292][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3232'.
[  213.812350][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3232'.
[  213.815900][T15780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3232'.
[  213.819394][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3232'.
[  214.063867][T15801] vlan0: entered promiscuous mode
[  214.065660][T15801] batadv0: entered promiscuous mode
[  214.073024][T15804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3239'.
[  214.162083][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3240'.
[  214.178141][T15806] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3240'.
[  214.500067][T15830] rdma_rxe: rxe_newlink: failed to add lo
[  214.526695][T15830] 8021q: adding VLAN 0 to HW filter on device team0
[  214.533059][T15830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.894752][T15860] erspan0: left promiscuous mode
[  214.897514][T15860] gretap0: left promiscuous mode
[  215.034628][T15871] netlink: 'syz.3.3266': attribute type 29 has an invalid length.
[  215.037580][T15871] netlink: 'syz.3.3266': attribute type 29 has an invalid length.
[  215.333790][T15890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.601327][T15907] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.645115][T15909] lo speed is unknown, defaulting to 1000
[  215.648256][T15909] lo speed is unknown, defaulting to 1000
[  215.667401][T15913] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.672136][T15913] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  215.675209][T15913] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  215.824516][T15926] gretap0: entered promiscuous mode
[  215.827310][T15926] 0{X: renamed from gretap0
[  215.836403][T15926] 0{X: left promiscuous mode
[  215.838418][T15926] 0{X: entered allmulticast mode
[  215.844420][T15926] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  215.887908][T15931] veth0_to_bond: left allmulticast mode
[  215.892480][T15931] veth0_to_bond: left promiscuous mode
[  215.894447][T15931] bridge6: port 2(veth0_to_bond) entered disabled state
[  215.900455][T15931] bond4: (slave veth1): Releasing backup interface
[  215.907188][T15931] bond5: (slave veth9): Releasing active interface
[  215.909963][T15931] veth11: left allmulticast mode
[  215.912483][T15931] veth11: left promiscuous mode
[  215.914620][T15931] bridge6: port 1(veth11) entered disabled state
[  215.920323][T15931] bond7: (slave veth15): Releasing active interface
[  216.108714][T15958] 0{X: left allmulticast mode
[  216.110742][T15958] erspan0: left promiscuous mode
[  216.114585][T15958] erspan0: left allmulticast mode
[  216.123072][T15958] 8021q: adding VLAN 0 to HW filter on device team0
[  216.126314][T15958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.131855][    T9] lo speed is unknown, defaulting to 1000
[  216.133616][    T9] syz2: Port: 1 Link ACTIVE
[  216.140198][T15956] ipvlan0: entered promiscuous mode
[  216.143181][T15956] bridge0: port 1(ipvlan0) entered blocking state
[  216.145476][T15956] bridge0: port 1(ipvlan0) entered disabled state
[  216.147587][T15956] ipvlan0: entered allmulticast mode
[  216.149271][T15956] erspan0: entered allmulticast mode
[  216.152643][T15956] ipvlan0: left allmulticast mode
[  216.154394][T15956] erspan0: left allmulticast mode
[  216.174075][T15951] lo speed is unknown, defaulting to 1000
[  216.178321][T15951] lo speed is unknown, defaulting to 1000
[  216.357556][T15973] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  216.406754][T15980] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.413502][T15980] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  216.416251][T15980] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  216.496167][T15987] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.500606][T15987] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  216.503753][T15987] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  216.586205][T15985] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  216.588936][T15985] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  216.731481][T16005] validate_nla: 7 callbacks suppressed
[  216.731493][T16005] netlink: 'syz.3.3312': attribute type 3 has an invalid length.
[  216.833184][T16014] netlink: 'syz.3.3316': attribute type 12 has an invalid length.
[  219.800353][T16035] __nla_validate_parse: 43 callbacks suppressed
[  219.800367][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3322'.
[  219.938810][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3325'.
[  219.975141][T16051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3328'.
[  219.978978][T16051] nbd: couldn't find a device at index 0
[  220.056534][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'.
[  220.104336][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3337'.
[  220.107876][T16072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3337'.
[  220.113894][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3337'.
[  220.116952][T16072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3337'.
[  220.141967][T16078] netlink: 'syz.1.3339': attribute type 23 has an invalid length.
[  220.448613][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3342'.
[  220.506897][T16097] lo speed is unknown, defaulting to 1000
[  220.509943][T16097] lo speed is unknown, defaulting to 1000
[  220.570049][T16099] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  220.573167][T16099] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  220.727977][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.732513][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.768629][T16108] netlink: 'syz.1.3348': attribute type 7 has an invalid length.
[  220.772038][T16108] netlink: 'syz.1.3348': attribute type 8 has an invalid length.
[  220.818014][T16115] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3351'.
[  220.822035][T16115] nbd: couldn't find a device at index 0
[  220.929443][T16117] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  220.977520][T16128] netlink: 'syz.1.3355': attribute type 12 has an invalid length.
[  221.035229][T16131] netlink: 'syz.1.3356': attribute type 13 has an invalid length.
[  221.039608][T16131] netlink: 'syz.1.3356': attribute type 17 has an invalid length.
[  221.053875][T16131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.059153][    T9] lo speed is unknown, defaulting to 1000
[  221.063080][    T9] syz0: Port: 1 Link ACTIVE
[  221.064758][    T9] lo speed is unknown, defaulting to 1000
[  221.079615][T16134] lo speed is unknown, defaulting to 1000
[  221.082321][T16134] lo speed is unknown, defaulting to 1000
[  221.088859][T16131] lo speed is unknown, defaulting to 1000
[  221.165282][T16131] lo speed is unknown, defaulting to 1000
[  221.354853][T16143] netlink: 'syz.0.3359': attribute type 10 has an invalid length.
[  221.363625][T16143] 8021q: adding VLAN 0 to HW filter on device team0
[  221.501786][   T51] lo speed is unknown, defaulting to 1000
[  221.504089][   T51] syz0: Port: 1 Link DOWN
[  221.505934][   T51] lo speed is unknown, defaulting to 1000
[  221.550341][T16152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.558091][T16152] tipc: Resetting bearer <eth:syzkaller0>
[  221.637186][T16158] pimreg3: entered allmulticast mode
[  221.679038][T16163] batman_adv: batadv0: Removing interface: gretap1
[  221.974379][  T797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.977507][  T797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.020395][T16177] netlink: 'syz.0.3373': attribute type 1 has an invalid length.
[  222.033832][T16177] 8021q: adding VLAN 0 to HW filter on device bond8
[  222.119281][T16193] tipc: Resetting bearer <eth:syzkaller0>
[  222.125626][T16193] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  222.128651][T16193] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  222.136942][T16193] mac80211_hwsim hwsim83 wlan0: left promiscuous mode
[  222.139974][T16193] veth13: left promiscuous mode
[  222.142281][T16193] bridge7: left promiscuous mode
[  222.144333][T16193] bridge7: left allmulticast mode
[  222.146377][T16193] bridge8: left promiscuous mode
[  222.147966][T16193] bridge8: left allmulticast mode
[  222.155270][T16193] veth15: left promiscuous mode
[  222.156918][T16193] bridge9: left promiscuous mode
[  222.161776][ T5313] lo speed is unknown, defaulting to 1000
[  222.164106][ T5313] syz2: Port: 1 Link DOWN
[  222.194512][T16197] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  222.199474][T16197] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  222.202635][T16197] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  222.290597][T16207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.318192][T16212] syzkaller1: entered promiscuous mode
[  222.320117][T16212] syzkaller1: entered allmulticast mode
[  222.403850][T16222] nbd: couldn't find a device at index 0
[  223.045168][T16243] netlink: 'syz.0.3392': attribute type 9 has an invalid length.
[  223.064031][T16244] netlink: 'syz.1.3390': attribute type 10 has an invalid length.
[  223.711598][ T8165] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  223.724388][T16262] nbd: couldn't find a device at index 0
[  223.762511][T16234] syz.1.3390 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  223.766831][T16234] CPU: 1 UID: 0 PID: 16234 Comm: syz.1.3390 Not tainted syzkaller #0 PREEMPT(full) 
[  223.766852][T16234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.766861][T16234] Call Trace:
[  223.766868][T16234]  <TASK>
[  223.766875][T16234]  dump_stack_lvl+0x189/0x250
[  223.766925][T16234]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.766941][T16234]  ? __pfx__printk+0x10/0x10
[  223.766962][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.766976][T16234]  dump_header+0xd3/0x480
[  223.766996][T16234]  oom_kill_process+0x387/0x920
[  223.767011][T16234]  out_of_memory+0xf09/0x12a0
[  223.767025][T16234]  ? mem_cgroup_iter+0x3b/0x460
[  223.767039][T16234]  ? __pfx_out_of_memory+0x10/0x10
[  223.767051][T16234]  mem_cgroup_out_of_memory+0x145/0x240
[  223.767065][T16234]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  223.767082][T16234]  ? _raw_spin_unlock+0x28/0x50
[  223.767098][T16234]  ? memcg1_oom_prepare+0x37f/0x450
[  223.767114][T16234]  try_charge_memcg+0xdff/0x1290
[  223.767132][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767148][T16234]  ? __pfx_try_charge_memcg+0x10/0x10
[  223.767165][T16234]  ? rcu_needs_cpu+0xa1/0xb0
[  223.767175][T16234]  ? xa_load+0x60/0x210
[  223.767193][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767205][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767213][T16234]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  223.767228][T16234]  charge_memcg+0x9f/0x180
[  223.767242][T16234]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  223.767256][T16234]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  223.767272][T16234]  __read_swap_cache_async+0x28c/0x510
[  223.767288][T16234]  swap_cluster_readahead+0x4cf/0x5f0
[  223.767302][T16234]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  223.767318][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767329][T16234]  ? filemap_get_entry+0xad/0x2f0
[  223.767342][T16234]  ? get_vma_policy+0x27c/0x3c0
[  223.767359][T16234]  swapin_readahead+0x17d/0xb50
[  223.767371][T16234]  ? __pfx_filemap_get_entry+0x10/0x10
[  223.767383][T16234]  ? get_swap_device_info+0x1c/0x2b0
[  223.767395][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767405][T16234]  ? __pfx_swapin_readahead+0x10/0x10
[  223.767425][T16234]  ? __filemap_get_folio+0x9a6/0xaf0
[  223.767438][T16234]  ? swap_cache_get_folio+0xae/0x3b0
[  223.767451][T16234]  do_swap_page+0x525/0x5ac0
[  223.767466][T16234]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  223.767485][T16234]  ? ___pte_offset_map+0x29/0x250
[  223.767500][T16234]  ? lock_acquire+0x5f/0x360
[  223.767517][T16234]  ? do_swap_page+0x184/0x5ac0
[  223.767531][T16234]  ? __pfx_do_swap_page+0x10/0x10
[  223.767544][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767554][T16234]  ? __pfx_default_wake_function+0x10/0x10
[  223.767571][T16234]  ? ___pte_offset_map+0x45/0x250
[  223.767586][T16234]  ? ___pte_offset_map+0x1cf/0x250
[  223.767601][T16234]  ? pte_offset_map_rw_nolock+0xea/0x160
[  223.767616][T16234]  __handle_mm_fault+0xe55/0x5440
[  223.767637][T16234]  ? __pfx___handle_mm_fault+0x10/0x10
[  223.767652][T16234]  ? lock_release+0x4b/0x3e0
[  223.767670][T16234]  ? lock_vma_under_rcu+0xdf/0x3d0
[  223.767688][T16234]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  223.767707][T16234]  handle_mm_fault+0x40a/0x8e0
[  223.767726][T16234]  do_user_addr_fault+0xa81/0x1390
[  223.767748][T16234]  ? rcu_is_watching+0x15/0xb0
[  223.767761][T16234]  ? trace_page_fault_user+0x84/0x1e0
[  223.767780][T16234]  exc_page_fault+0x76/0xf0
[  223.767799][T16234]  asm_exc_page_fault+0x26/0x30
[  223.767812][T16234] RIP: 0033:0x7f58e67c14a8
[  223.767827][T16234] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  223.767838][T16234] RSP: 002b:00007ffe70622e80 EFLAGS: 00010293
[  223.767852][T16234] RAX: 0000000000000000 RBX: 00007f58e69b5fa0 RCX: 00007f58e67c14a5
[  223.767914][T16234] RDX: 00007ffe70622ec0 RSI: 0000000000000000 RDI: 0000000000000000
[  223.767923][T16234] RBP: 00007f58e69b7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  223.767932][T16234] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000369bb
[  223.767940][T16234] R13: 00007f58e69b6090 R14: ffffffffffffffff R15: 00007ffe70623000
[  223.767955][T16234]  </TASK>
[  223.768069][T16234] memory: usage 307200kB, limit 307200kB, failcnt 393
[  223.914654][T16234] memory+swap: usage 290460kB, limit 9007199254740988kB, failcnt 0
[  223.917656][T16234] kmem: usage 289656kB, limit 9007199254740988kB, failcnt 0
[  223.919916][T16234] Memory cgroup stats for /syz1:
[  223.919984][T16234] cache 0
[  223.923169][T16234] rss 0
[  223.924261][T16234] rss_huge 0
[  223.925462][T16234] shmem 0
[  223.926609][T16234] mapped_file 0
[  223.927944][T16234] dirty 0
[  223.928882][T16234] writeback 0
[  223.929941][T16234] workingset_refault_anon 18
[  223.931619][T16234] workingset_refault_file 0
[  223.933070][T16234] swap 163840
[  223.934110][T16234] swapcached 45056
[  223.935317][T16234] pgpgin 126145
[  223.936431][T16234] pgpgout 126134
[  223.937645][T16234] pgfault 269910
[  223.938804][T16234] pgmajfault 19
[  223.939979][T16234] inactive_anon 0
[  223.941380][T16234] active_anon 45056
[  223.942633][T16234] inactive_file 0
[  223.943776][T16234] active_file 0
[  223.944972][T16234] unevictable 0
[  223.946143][T16234] hierarchical_memory_limit 314572800
[  223.947918][T16234] hierarchical_memsw_limit 9223372036854771712
[  223.950182][T16234] total_cache 0
[  223.951489][T16234] total_rss 0
[  223.952567][T16234] total_rss_huge 0
[  223.953958][T16234] total_shmem 0
[  223.955064][T16234] total_mapped_file 0
[  223.956372][T16234] total_dirty 0
[  223.957488][T16234] total_writeback 0
[  223.958680][T16234] total_workingset_refault_anon 18
[  223.960251][T16234] total_workingset_refault_file 0
[  223.961923][T16234] total_swap 163840
[  223.963148][T16234] total_swapcached 45056
[  223.964481][T16234] total_pgpgin 126145
[  223.965710][T16234] total_pgpgout 126134
[  223.967031][T16234] total_pgfault 269910
[  223.968278][T16234] total_pgmajfault 19
[  223.969508][T16234] total_inactive_anon 0
[  223.970961][T16234] total_active_anon 45056
[  223.972467][T16234] total_inactive_file 0
[  223.973836][T16234] total_active_file 0
[  223.975182][T16234] total_unevictable 0
[  223.976662][T16234] anon_cost 0
[  223.977966][T16234] file_cost 0
[  223.979021][T16234] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3390,pid=16234,uid=0
[  223.984278][T16234] Memory cgroup out of memory: Killed process 16234 (syz.1.3390) total-vm:101888kB, anon-rss:924kB, file-rss:23012kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000

VM DIAGNOSIS:
06:22:04  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11021ef5a4d RBX=dffffc0000000000 RCX=dffffc0000000000 RDX=ffffc90004041000
RSI=000000000007ffff RDI=0000000000080000 RBP=dffffc0000000000 RSP=ffffc9000b155df8
R8 =ffff88810f7ad26f R9 =0000000000000000 R10=ffff88810f7ad260 R11=ffffed1021ef5a4e
R12=ffff88810f7ad260 R13=1ffff11021ef4c0d R14=ffff88810f7a0000 R15=ffff88810f7a6068
RIP=ffffffff84d0fc9a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58e762d6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f58e6988558 CR3=0000000030d8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000206145e 0000004848f8a11b
XMM02=9412000080020000 000f000a000e0000 XMM03=00000206145e0000 004848f8a11b9fcc
XMM04=00007f58e74ed100 00007f58e6987460 XMM05=00007f58e6987478 00007f58e69874c0
XMM06=00007f58e69874b8 00007f58e69874b0 XMM07=00007f58e69874a8 00007f58e69874a0
XMM08=0000000000000000 00007f58e6812ee7 XMM09=0000000000000000 00007f58e6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82746c12 RBX=1ffff110224b6058 RCX=ffff888109e0d640 RDX=0000000000000000
RSI=ffff8881125b0298 RDI=ffff888103561948 RBP=0000000000000000 RSP=ffffc90021a87530
R8 =ffff888103537ae7 R9 =1ffff110206a6f5c R10=dffffc0000000000 R11=ffffed10206a6f5d
R12=ffff8881125b02c0 R13=0000000000000000 R14=ffff8881125b0298 R15=dffffc0000000000
RIP=ffffffff82861360 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 000055555a87c500 ffffffff 00c00100
GS =0000 ffff8881a3c1b000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe1ab65f1b0 CR3=0000000123ef2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=ca45c18e20b01fb6 4425d7b1c2a99e30
XMM06=452eff60ffcfc094 da90e608e6f7adbc XMM07=febff8242aa855c8 e0c2914e06fec55d
XMM08=0000000000000000 00007fe1ab812ee7 XMM09=0000000000000000 00007fe1ab812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
