last executing test programs:

4m10.845263445s ago: executing program 0 (id=616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r2}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcd7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000200000302020000ff"], 0x20}, 0x1, 0x40030000000000}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r8 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x3}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/51, 0x33}], 0x1, 0x1000000000000}}], 0x48, 0x40}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r12 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
setsockopt$inet6_int(r11, 0x29, 0xce, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

4m10.794321106s ago: executing program 0 (id=617):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xfffc, 0x1, 0x0, 0xfffffffd}, 0x1c) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xfffc, 0x1, 0x0, 0xfffffffd}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9}) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x110, r4, 0xdaa92000)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x4040821)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6) (async)
r8 = socket(0x1d, 0x2, 0x6)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r8, &(0x7f0000000400)={0x1d, r10, 0x2, {0x0, 0xf0}}, 0x18) (async)
bind$can_j1939(r8, &(0x7f0000000400)={0x1d, r10, 0x2, {0x0, 0xf0}}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x24, &(0x7f0000000040)=ANY=[], 0x1000f)

4m10.716460986s ago: executing program 0 (id=618):
syz_emit_ethernet(0xa2, &(0x7f00000008c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x6c, 0x11, 0x0, @remote, @local, {[@hopopts={0x2c}], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', <r4=>r3, 0x7848, 0x8, 0x8000, 0x2, {{0xc, 0x4, 0x2, 0x3e, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x17, 0x29, [@multicast1, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, @noop, @end]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x5, [@enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x7}, {0x3, 0x10000}, {0x8, 0x1}, {0x10, 0x8001}, {0x5, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x7}}, @union={0xf, 0x7, 0x0, 0x5, 0x0, 0x711, [{0x4, 0x4, 0x8001}, {0xf, 0x3, 0x5}, {0xe, 0x5, 0xfff}, {0x5, 0x3, 0x65}, {0xc, 0x4, 0x5}, {0xe, 0x1, 0x7f}, {0x5, 0x1, 0x5}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e]}}, &(0x7f0000000b00)=""/149, 0xd9, 0x95}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x9, '\x00', r4, r5, 0x3, 0x4, 0x5}, 0x50)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r4}, 0x18)
sendmmsg(r1, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af", 0x9b}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef", 0x5ca}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
socket$kcm(0xa, 0x3, 0x3a)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r9)
getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fdffffff10000000180001801400020076657468315f746f5f68737200000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$inet6(0xa, 0x3, 0x6)

4m10.626359311s ago: executing program 0 (id=619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="092e8e2de10001000008b3aaaabb00000000007146af87fc900a387c67b010e79961ec42746ae3c7a027b30560648dfc4342ec029bb732cb6ffd75dea30e2110096e81bbdf54fd13d6760a0ed9c3"])
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m10.556491199s ago: executing program 0 (id=622):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r3=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) (async)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=0x10, 0x800) (async)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0)
recvmmsg(r7, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x100, 0x0) (async)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

4m10.495492621s ago: executing program 0 (id=623):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000))
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r5, 0x7f, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4m10.464478195s ago: executing program 32 (id=623):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000))
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r5, 0x7f, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.330391127s ago: executing program 1 (id=4352):
syz_80211_inject_frame(0x0, 0x0, 0xb5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180030000000000000020000a"], 0x68}}, 0x48000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x205, 0x0, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5c9d}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff45}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000)
socket$packet(0x11, 0x3, 0x300)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

1.061072053s ago: executing program 3 (id=4358):
syz_80211_inject_frame(0x0, 0x0, 0xb5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0x205, 0x0, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5c9d}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff45}]}, 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000314010100000000000000000900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}}, 0x20000000)
socket$packet(0x11, 0x3, 0x300)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)
r10 = socket(0x1e, 0x5, 0x0)
connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r10, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000380)=""/196, 0xc4}, 0x3}], 0x1, 0x20, 0x0)
sendmmsg$inet(r10, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001440)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)='#F', 0x2}], 0x1}}], 0x2, 0x40480dc)
socket$kcm(0x10, 0x2, 0x0)

763.974621ms ago: executing program 1 (id=4361):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0)
r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
poll(&(0x7f0000000300)=[{r4, 0x1010}, {r2, 0x8}, {r1, 0x28}, {r0, 0x24}], 0x4, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfe00, 0x2}, 0xe)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r8, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @empty, 0x7}}, 0x24)
connect$rxrpc(r8, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10001}}, 0x24)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x20, r6, 0x20, 0x0, 0x25dfdbfc, {0x25}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000)

690.803205ms ago: executing program 1 (id=4363):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000004100030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESOCT, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)

688.952652ms ago: executing program 1 (id=4364):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000001640), 0x0, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x0)
close(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@deltclass={0x0, 0x29, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {0x7, 0xa}, {0x6, 0x7}}, [@tclass_kind_options=@c_tbf, @tclass_kind_options=@c_sfq, @TCA_RATE={0x0, 0x5, {0x3, 0x40}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x101}]}}]}, 0x50}}, 0x4008000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0})
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket(0x28, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000006273000000000071181a00000000009700000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x8, 0x6}, 0x8)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

688.561194ms ago: executing program 1 (id=4365):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf1, 0x200, 0x9, 0x6, 0x0, 0x7f, 0x80000001, 0x5, 0x4, 0x2, 0x1, 0x570, 0x4, 0x40008, 0xa5, 0x5, 0xdff, 0xff, 0x452, 0x1000, 0xb, 0x4}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000001640)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0xffffffffffffff82}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r5)
sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x140f, 0x502, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x20008014)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0x1}, {0x1, 0x9}, {0x9, 0x3}}}, 0x5b}, 0x1, 0x0, 0x0, 0x44851}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x94, 0x4a, 0x20, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x3f, 0x0, r9, 0xffffd8f2}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IFAL_ADDRESS={0xffffffffffffff4e, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x94}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)

621.138725ms ago: executing program 1 (id=4366):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @any, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40)
sendto$inet(r1, &(0x7f0000000080)="d301a5305d2c228e0971", 0xa, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a0101020800000001800000f012b612c8df49db5d6e81f947bd61e1"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)

407.188693ms ago: executing program 3 (id=4369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000500000000009ba6000000000002050001"], 0x28}}, 0x40)
getsockopt$inet_opts(r2, 0x0, 0xf, 0xffffffffffffffff, &(0x7f0000000000))
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040))
socket(0x10, 0x80002, 0x0) (async)
r4 = socket(0x10, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x3a, @multicast1, 0x4e22, 0x2, 'ovf\x00', 0x0, 0x5, 0x49}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x3a, @multicast1, 0x4e22, 0x2, 'ovf\x00', 0x0, 0x5, 0x49}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44)

310.830787ms ago: executing program 2 (id=4370):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000004100030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESOCT, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)

309.008071ms ago: executing program 2 (id=4371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="f00000001000000228bd700000000000ac1e0901000000000000000000000000ac1414aa0000000000000000000000004e230000000020000a0000a02b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc000000000000000000000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000fcfffffffdffffff27bd7000010000000200000200000000000000000000000000001000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0x10, 0xffe0}, {0xd, 0xa}}}, 0x24}}, 0x4000814)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x15, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x31}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r12)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, r13, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x20000011)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

308.681783ms ago: executing program 3 (id=4372):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
socket$kcm(0x21, 0x2, 0xa)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000040000000000d0000000000005f00"], 0x0, 0x34, 0x0, 0x0, 0xfffffffc}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000004b0400f78900000000007a00000000000093bf4b93cd8ad770355509008e23fb3fcf68f9ec8bc207b16b4294d68a9b3923ec4a2baf162b80d4ca36725cc9a4218fa3c9fe8adc66f00374feed06469b409dd4c9cde76a84c4eefd6f547b991d8689aba8b0c5148617c6ee89d76a99c3f1945ca59331292e16e413d5ac", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000b40000000011400030067656e65766530000000000000000000"], 0x50}}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x100000000}, 0x18)
tee(r7, 0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000500)={0x68000000, {{0xa, 0x4e24, 0x2d33, @remote, 0x100}}}, 0x88)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x2, 0x1, 0x2, {0xa, 0x4e23, 0x18f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6b}}}, 0x32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

252.179229ms ago: executing program 2 (id=4373):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

242.170922ms ago: executing program 3 (id=4374):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e9c, 0xdc5, @mcast2, 0x2}, 0x19)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
r7 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r7, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="100000000000f6688c03b38588ff330949fbdbdf25250000000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)

140.713647ms ago: executing program 3 (id=4375):
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00T\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}, 0x1, 0x0, 0x0, 0x40c0}, 0x24000080)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008002502e1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x20004030)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000)
close(0xffffffffffffffff)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$inet6_udp(0xa, 0x2, 0x0)

69.14531ms ago: executing program 3 (id=4376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', <r1=>0x0, 0x700, 0x8, 0x3, 0x81, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x66, 0x0, 0x8c, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x10, 0x94, 0x0, 0x7, [0x7fff, 0x2, 0x7]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r2=>0x0, 0x8000, 0xf, 0x1, 0x0, {{0x20, 0x4, 0x0, 0x3a, 0x80, 0x64, 0x0, 0xc4, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x2a, 0x2, [{0x7, 0xe, "955ac9ea11b49564ff39f57f"}, {0x5, 0x5, "237f43"}, {0x5, 0x5, "41dc9c"}, {0x7, 0xa, "aaa663a98cc1f75c"}, {0x5, 0x2}]}, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x0, [0x9, 0xca]}, @lsrr={0x83, 0x23, 0xce, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @empty, @loopback, @rand_addr=0x64010101, @remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x5d, 0x0, 0x8, [0x2, 0x6]}]}}}}})
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newroute={0x50, 0x18, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x2, 0x0, 0x1, 0xfe, 0x3, 0x3100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x10000}, @RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x4e, 0xe, 0x3, r2}}, @RTA_PRIORITY={0x8, 0x6, 0xfffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000300)={'batadv_slave_0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1cc, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xaaa8}, @CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}]}]}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x20000005)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/161, 0xa1}, {&(0x7f0000000940)=""/177, 0xb1}], 0x7, &(0x7f0000000a80)=""/123, 0x7b}, 0x12000)
r4 = socket$inet(0x2, 0x4, 0x6)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000b40))
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x8055)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x4008840)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000e00)={{0x0, 0x3}, 0x100, './file0\x00'})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000f40)={0x5, 0x2, 0x1, 0x3, 0xded, 0x8, 0x2, 0xffff153c, <r7=>0x0}, &(0x7f0000000f80)=0x20)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000fc0)={r7, 0x3}, 0x8)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001000)={<r9=>r7, 0x5, 0x2, [0x2, 0x0]}, &(0x7f0000001040)=0xc)
getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001080)={r9, 0xcf8c}, &(0x7f00000010c0)=0x8)
r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001100)={0x1f, 0x0, @none}, &(0x7f0000001140)=0xe, 0x81000)
getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000001180)=0xb0d, &(0x7f00000011c0)=0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001240)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001340)={<r14=>r9, 0x1000, "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"}, &(0x7f0000002380)=0x1008)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f00000023c0)={r14, 0x6}, 0x8)
connect$l2tp6(r11, &(0x7f0000002400)={0xa, 0x0, 0x9, @mcast2, 0xe, 0x1}, 0x20)
readv(r11, &(0x7f0000002540)=[{&(0x7f0000002440)=""/212, 0xd4}], 0x1)

68.251737ms ago: executing program 2 (id=4377):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001011030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESOCT, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)

67.328835ms ago: executing program 2 (id=4378):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket(0x11, 0x3, 0x0) (async)
r3 = socket(0x200000000000011, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x5882, 0x4)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='rpcgss_oid_to_mech\x00', r11}, 0xfffffffffffffc5a) (async)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x102, 0xbf22, 0x1, 0xffffffffffffffff, 0xf}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r12, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r12, 0x0, 0x1500}, 0x38) (async)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@expire={0x30c, 0x18, 0x300, 0x70bd2d, 0x7, {{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x2, 0x4e21, 0x400, 0x2, 0xa0, 0xa0, 0x2f, r5}, {@in=@remote, 0x4d6, 0xff}, @in=@rand_addr=0x64010101, {0x7, 0x80000000, 0xaa1, 0x7fff, 0x2, 0xffffffff, 0xfffffffffffff1c2, 0x14abc000}, {0x0, 0xffffffffffff6c41, 0x4, 0x4}, {0x6, 0x7, 0x6}, 0x70bd28, 0x0, 0xa, 0x2, 0x4, 0x8}, 0x7}, [@policy={0xac, 0x7, {{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x100, 0x80, 0x62, r5}, {0x3, 0xfffffffffffffffe, 0x8fb4, 0x2, 0x1, 0x101, 0x8, 0x2}, {0x6a8bd48b, 0xe3, 0xffffffffffffe9b2, 0x200}, 0x4, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd28, 0x70bd27, 0x70bd26, 0x70bd25, 0x5, [0xffff7fff]}}, @sa={0xe4, 0x6, {{@in=@empty, @in6=@loopback, 0x4e21, 0xfff1, 0x4e22, 0x8, 0x2, 0x0, 0x80, 0x87, r5}, {@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, @in=@multicast1, {0x400, 0x3, 0x100, 0x7, 0x80, 0xfffffffffffffff2, 0x1000, 0xfffffffffffffff8}, {0x4, 0x6, 0x1, 0x2}, {0xb, 0x3, 0x9}, 0x70bd28, 0x3505, 0xa, 0x0, 0xf2, 0x1}}, @sec_ctx={0x55, 0x8, {0x51, 0x8, 0x1, 0x2, 0x49, "9cb5d38e4d495e8adb704f5a11175e992f93cd21bf8d982be83b8c41e70565d66b75b6d4eac957033588b1a9b49efa84a23f689c0ffc44a02c9177d24da85fc8efb8cc48e649a004ca"}}, @mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0x30c}}, 0x0) (async)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0xce20, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @in=@private=0xa010102, @in6=@remote, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@private=0xa010102, @in=@loopback, 0x5f, 0x1, 0x0, 0x3506, 0xa, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") (async)
socket$inet_sctp(0x2, 0x5, 0x84)

0s ago: executing program 2 (id=4379):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a300000000049000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003580000000c0a01020000000000000000010000000900020073797a32000000002c0003802800008008000640000000001c000b801800018007000100637400000c00028008000140000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x2, 0x20000000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRESDEC, @ANYBLOB="316a280c2d8d620ad819a1cb8118f3f649ad"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000001000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYRES8=r5], 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f00003b5000/0x2000)=nil, 0x2000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x230, 0x2c8, 0x130, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@remote, @local, 0x0, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0xff000000, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x2e}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x6, 0x1, 0x1], 0x4, 0x2}, {0x2, [0x2, 0x2, 0x4, 0x1, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r11, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x403, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

syzkaller0: entered allmulticast mode
[  286.141774][T18469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.284402][T18477] __nla_validate_parse: 18 callbacks suppressed
[  286.284417][T18477] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3376'.
[  286.576345][T18487] geneve5: entered promiscuous mode
[  286.578185][T18487] geneve5: entered allmulticast mode
[  286.584825][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 40480 - 0
[  286.588174][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 55007 - 0
[  286.594168][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 40480 - 0
[  286.597441][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 55007 - 0
[  286.600511][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 40480 - 0
[  286.603165][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 55007 - 0
[  286.605707][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 40480 - 0
[  286.608290][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 55007 - 0
[  286.633283][T18494] validate_nla: 16 callbacks suppressed
[  286.633297][T18494] netlink: 'syz.3.3382': attribute type 10 has an invalid length.
[  286.698036][T18498] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3383'.
[  286.701656][T18502] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.705124][T18502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40480 - 0
[  286.708901][T18502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55007 - 0
[  286.716155][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'.
[  286.719029][T18498] netlink: 'syz.2.3383': attribute type 1 has an invalid length.
[  286.721802][T18498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3383'.
[  286.748324][T18507] netlink: 'syz.2.3385': attribute type 12 has an invalid length.
[  286.751220][T18507] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3385'.
[  286.764903][T18502] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.768052][T18502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40480 - 0
[  286.773505][T18502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55007 - 0
[  286.812539][T18502] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.821294][T18502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40480 - 0
[  286.825324][T18502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55007 - 0
[  286.858297][T18516] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  286.866452][T18516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3387'.
[  286.883270][T18502] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.887093][T18502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40480 - 0
[  286.892514][T18502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55007 - 0
[  286.972146][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.975368][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 55007 - 0
[  286.983916][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 40480 - 0
[  286.996226][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.000496][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 55007 - 0
[  287.003704][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 40480 - 0
[  287.021631][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.024729][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 55007 - 0
[  287.028203][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 40480 - 0
[  287.043819][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.046850][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 55007 - 0
[  287.056456][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 40480 - 0
[  287.148366][T18537] sctp: [Deprecated]: syz.2.3393 (pid 18537) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.148366][T18537] Use struct sctp_sack_info instead
[  287.160827][T18537] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  287.165515][T18537] CPU: 0 UID: 0 PID: 18537 Comm: syz.2.3393 Not tainted syzkaller #0 PREEMPT(full) 
[  287.165538][T18537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.165549][T18537] Call Trace:
[  287.165557][T18537]  <TASK>
[  287.165565][T18537]  dump_stack_lvl+0x189/0x250
[  287.165592][T18537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.165611][T18537]  ? __pfx__printk+0x10/0x10
[  287.165632][T18537]  ? kernfs_root+0x1c/0x230
[  287.165650][T18537]  ? kernfs_path_from_node+0x2f/0x290
[  287.165666][T18537]  ? kernfs_path_from_node+0x250/0x290
[  287.165682][T18537]  ? kernfs_path_from_node+0x2f/0x290
[  287.165699][T18537]  sysfs_warn_dup+0x8e/0xa0
[  287.165714][T18537]  sysfs_do_create_link_sd+0xc0/0x110
[  287.165731][T18537]  device_add_class_symlinks+0x1cf/0x240
[  287.165749][T18537]  device_add+0x475/0xb50
[  287.165764][T18537]  wiphy_register+0x1ba6/0x28d0
[  287.165795][T18537]  ? __pfx_wiphy_register+0x10/0x10
[  287.165814][T18537]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  287.165833][T18537]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  287.165862][T18537]  ieee80211_register_hw+0x3425/0x4080
[  287.165885][T18537]  ? ieee80211_register_hw+0x14a1/0x4080
[  287.165904][T18537]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  287.165921][T18537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.165944][T18537]  ? __hrtimer_setup+0x187/0x210
[  287.165958][T18537]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  287.165981][T18537]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  287.166010][T18537]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  287.166057][T18537]  ? trace_kmalloc+0x1f/0xd0
[  287.166077][T18537]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  287.166099][T18537]  ? kstrndup+0xbf/0x160
[  287.166120][T18537]  hwsim_new_radio_nl+0xea4/0x1b10
[  287.166142][T18537]  ? __pfx___nla_validate_parse+0x10/0x10
[  287.166170][T18537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.166192][T18537]  ? __nla_parse+0x40/0x60
[  287.166213][T18537]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  287.166234][T18537]  genl_family_rcv_msg_doit+0x215/0x300
[  287.166256][T18537]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  287.166280][T18537]  ? bpf_lsm_capable+0x9/0x20
[  287.166301][T18537]  ? security_capable+0x7e/0x2e0
[  287.166326][T18537]  genl_rcv_msg+0x60e/0x790
[  287.166346][T18537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.166362][T18537]  ? __kasan_slab_alloc+0x6c/0x80
[  287.166382][T18537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.166401][T18537]  ? __netlink_lookup+0xbd/0x810
[  287.166420][T18537]  ? rcu_is_watching+0x15/0xb0
[  287.166440][T18537]  netlink_rcv_skb+0x208/0x470
[  287.166463][T18537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.166480][T18537]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.166507][T18537]  ? lock_release+0x4b/0x3e0
[  287.166534][T18537]  ? down_read+0x1ad/0x2e0
[  287.166548][T18537]  genl_rcv+0x28/0x40
[  287.166563][T18537]  netlink_unicast+0x82f/0x9e0
[  287.166585][T18537]  ? __pfx_netlink_unicast+0x10/0x10
[  287.166605][T18537]  ? netlink_sendmsg+0x642/0xb30
[  287.166625][T18537]  ? skb_put+0x11b/0x210
[  287.166640][T18537]  netlink_sendmsg+0x805/0xb30
[  287.166665][T18537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.166687][T18537]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.166702][T18537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.166718][T18537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.166740][T18537]  __sock_sendmsg+0x21c/0x270
[  287.166760][T18537]  ____sys_sendmsg+0x505/0x830
[  287.166777][T18537]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.166795][T18537]  ? import_iovec+0x74/0xa0
[  287.166814][T18537]  ___sys_sendmsg+0x21f/0x2a0
[  287.166829][T18537]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.166846][T18537]  ? futex_wake+0x4b2/0x560
[  287.166877][T18537]  ? __fget_files+0x2a/0x420
[  287.166899][T18537]  ? __fget_files+0x3a0/0x420
[  287.166925][T18537]  __x64_sys_sendmsg+0x19b/0x260
[  287.166940][T18537]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.166959][T18537]  ? rcu_is_watching+0x15/0xb0
[  287.166976][T18537]  ? rcu_is_watching+0x15/0xb0
[  287.166990][T18537]  do_syscall_64+0xfa/0x3b0
[  287.167012][T18537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.167053][T18537]  ? exc_page_fault+0x9f/0xf0
[  287.167075][T18537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.167091][T18537] RIP: 0033:0x7fc057b8ebe9
[  287.167106][T18537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.167121][T18537] RSP: 002b:00007fc05897c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.167139][T18537] RAX: ffffffffffffffda RBX: 00007fc057db5fa0 RCX: 00007fc057b8ebe9
[  287.167152][T18537] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  287.167162][T18537] RBP: 00007fc057c11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.167172][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.167181][T18537] R13: 00007fc057db6038 R14: 00007fc057db5fa0 R15: 00007ffe33c71c58
[  287.167199][T18537]  </TASK>
[  287.472436][T18547] pim6reg1: entered promiscuous mode
[  287.474468][T18547] pim6reg1: entered allmulticast mode
[  287.504193][T18551] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  287.517184][T18551] 8021q: adding VLAN 0 to HW filter on device bond25
[  287.525964][T18551] 8021q: adding VLAN 0 to HW filter on device bond25
[  287.528677][T18551] bond25: (slave vxcan3): The slave device specified does not support setting the MAC address
[  287.534553][T18551] bond25: (slave vxcan3): Error -95 calling set_mac_address
[  287.596854][T18554] veth13: entered promiscuous mode
[  287.601297][T18554] bond25: (slave veth13): Enslaving as an active interface with a down link
[  287.608856][ T7505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.612078][ T7505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.734414][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'.
[  287.778341][T18558] lo speed is unknown, defaulting to 1000
[  287.867813][T18562] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  287.874214][T18562] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  287.892281][T18562] veth13: left promiscuous mode
[  287.895725][T18558] lo speed is unknown, defaulting to 1000
[  287.976471][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.979023][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.096394][T18578] bond25: (slave veth13): Releasing active interface
[  288.127553][T18582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3405'.
[  288.132071][T18582] bridge0: entered allmulticast mode
[  288.134102][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'.
[  288.166191][T18586] netlink: 'syz.2.3407': attribute type 4 has an invalid length.
[  288.176237][T18588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.182093][T18588] tipc: Resetting bearer <eth:syzkaller0>
[  288.217230][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'.
[  288.254982][T18598] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  288.284850][T18602] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.317489][T18607] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.321199][T18607] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  288.324168][T18607] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  288.327171][T18607] tipc: Resetting bearer <eth:syzkaller0>
[  288.333313][T18608] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  288.343546][T18610] mac80211_hwsim hwsim4 ": renamed from wlan0
[  288.360074][T18612] tipc: Resetting bearer <eth:syzkaller0>
[  288.369074][T18612] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  288.373785][T18612] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  288.689273][T18630] tipc: Resetting bearer <eth:syzkaller0>
[  289.058404][T18637] netlink: 'syz.3.3422': attribute type 10 has an invalid length.
[  289.061356][T18637] netlink: 'syz.3.3422': attribute type 10 has an invalid length.
[  289.309408][T18643] bond0: (slave bridge0): Releasing active interface
[  289.353026][T18645] openvswitch: netlink: Flow key attr not present in new flow.
[  289.356796][T18645] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  289.359990][T18649] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  289.384238][T18645] bond26: entered promiscuous mode
[  289.386648][T18645] 8021q: adding VLAN 0 to HW filter on device bond26
[  289.397043][T18649] 8021q: adding VLAN 0 to HW filter on device bond21
[  289.403970][T18645] 8021q: adding VLAN 0 to HW filter on device bond26
[  289.406338][T18645] bond26: (slave wireguard0): The slave device specified does not support setting the MAC address
[  289.409553][T18645] bond26: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  289.414528][T18645] bond26: (slave wireguard0): making interface the new active one
[  289.417030][T18645] wireguard0: entered promiscuous mode
[  289.419374][T18645] bond26: (slave wireguard0): Enslaving as an active interface with an up link
[  289.433191][T18649] 8021q: adding VLAN 0 to HW filter on device bond21
[  289.435463][T18649] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  289.439328][T18649] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  289.449062][T18645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.451466][T18645] IPv6: NLM_F_CREATE should be set when creating new route
[  289.453871][T18645] IPv6: NLM_F_CREATE should be set when creating new route
[  289.456889][T18645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.484445][T18655] veth13: entered promiscuous mode
[  289.502522][T18657] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  289.505181][T18657] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  289.525595][T18649] erspan0: entered allmulticast mode
[  289.909295][T18685] ip6gretap0: entered promiscuous mode
[  289.912946][T18685] netlink: 'syz.3.3436': attribute type 14 has an invalid length.
[  289.938504][T18688] "syz.3.3437" (18688) uses obsolete ecb(arc4) skcipher
[  289.939793][T18687] "syz.3.3437" (18687) uses obsolete ecb(arc4) skcipher
[  289.944022][T18687] ip6gretap0: left promiscuous mode
[  289.960016][T18687] ip6tnl2: left promiscuous mode
[  289.961767][T18687] ip6tnl2: left allmulticast mode
[  289.964671][   T61] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 120 seconds
[  289.968835][   T61] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 120 seconds
[  289.974301][T18687] geneve5: left promiscuous mode
[  289.974633][   T61] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 120 seconds
[  289.976068][T18687] geneve5: left allmulticast mode
[  289.979440][   T61] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 120 seconds
[  289.984904][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.987819][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 55007 - 0
[  289.991327][   T13] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 40480 - 0
[  289.995390][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.998226][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 55007 - 0
[  290.002096][   T13] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 40480 - 0
[  290.005093][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.007792][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 55007 - 0
[  290.011389][   T13] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 40480 - 0
[  290.014226][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.017321][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 55007 - 0
[  290.021187][   T13] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 40480 - 0
[  290.351187][T18696] unknown channel width for channel at 909000KHz?
[  290.353495][T18696] unknown channel width for channel at 909000KHz?
[  290.417360][T18702] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  290.423778][T18703] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  291.169779][T18775] pim6reg1: entered promiscuous mode
[  291.171591][T18775] pim6reg1: entered allmulticast mode
[  291.333446][T18788] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  291.333446][T18789] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  291.816179][T18803] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  291.829705][ T5975] lo speed is unknown, defaulting to 1000
[  291.831951][ T5975] syz1: Port: 1 Link ACTIVE
[  291.871013][T18805] lo speed is unknown, defaulting to 1000
[  291.934276][T18811] validate_nla: 4 callbacks suppressed
[  291.934290][T18811] netlink: 'syz.1.3469': attribute type 1 has an invalid length.
[  291.937627][T18805] lo speed is unknown, defaulting to 1000
[  291.938991][T18811] __nla_validate_parse: 17 callbacks suppressed
[  291.939004][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'.
[  292.198275][T18821] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3471'.
[  292.361894][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.364780][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.367663][T18838] netlink: 'syz.1.3474': attribute type 12 has an invalid length.
[  292.371846][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.374599][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.377481][T18838] netlink: 'syz.1.3474': attribute type 12 has an invalid length.
[  292.382463][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.385396][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.388596][T18839] netlink: 'syz.1.3474': attribute type 12 has an invalid length.
[  292.395842][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.398731][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'.
[  292.401589][T18839] netlink: 'syz.1.3474': attribute type 12 has an invalid length.
[  292.454367][   T33] audit: type=1800 audit(1755846399.301:8): pid=18842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3475" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=6467 res=0 errno=0
[  292.485569][T18846] erspan0: left allmulticast mode
[  292.488352][T18846] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  292.601252][T18853] dvmrp1: left allmulticast mode
[  292.663544][T18853] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  292.774498][T18867] netlink: 'syz.1.3480': attribute type 10 has an invalid length.
[  292.804620][T18866] dvmrp1: entered allmulticast mode
[  292.974034][T18882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.186245][T18906] netlink: 'syz.2.3494': attribute type 4 has an invalid length.
[  293.190867][T18906] netlink: 'syz.2.3494': attribute type 4 has an invalid length.
[  293.227471][T18908] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.263293][T18911] netlink: 'syz.2.3496': attribute type 13 has an invalid length.
[  293.265775][T18911] netlink: 'syz.2.3496': attribute type 17 has an invalid length.
[  293.308292][T18911] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.314094][T18911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.635177][T18940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.862331][T18943] netlink: 'syz.3.3506': attribute type 11 has an invalid length.
[  293.953789][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.102019][T18964] dummy0: entered allmulticast mode
[  294.152752][T18970] syzkaller1: entered promiscuous mode
[  294.154527][T18970] syzkaller1: entered allmulticast mode
[  294.615562][T18993] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  294.617975][T18993] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  294.784682][ T5975] lo speed is unknown, defaulting to 1000
[  294.786492][ T5975] syz1: Port: 1 Link DOWN
[  295.036968][T19031] Bluetooth: MGMT ver 1.23
[  295.109194][T19043] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.117349][T19043] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  295.120757][T19043] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  295.129886][T19043] net_ratelimit: 1 callbacks suppressed
[  295.129900][T19043] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  295.172249][T19050] openvswitch: netlink: Multiple metadata blocks provided
[  295.209146][T19048] dummy0: left allmulticast mode
[  295.334320][T19066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.405109][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.494786][T19078] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  295.968738][T19101] bond26: left promiscuous mode
[  295.971111][T19101] wireguard0: left promiscuous mode
[  296.002741][T19107] 8021q: VLANs not supported on nlmon0
[  296.290483][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.293111][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.295647][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.297870][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.301365][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.304408][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.307692][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.311910][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.315066][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.317804][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.321024][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.323783][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.326418][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.329372][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.332256][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.334671][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.337714][T19137] smc: net device bond0 applied user defined pnetid SYZ2
[  296.341749][T19138] smc: net device bond0 erased user defined pnetid SYZ2
[  296.534550][T19150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.558499][T19158] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  296.561707][T19158] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  296.567925][T19157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.638124][T19171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.946847][T19199] sock: sock_timestamping_bind_phc: sock not bind to device
[  296.977230][T19201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.995639][T19201] pim6reg1: entered promiscuous mode
[  296.997811][T19201] pim6reg1: entered allmulticast mode
[  297.006256][T19201] tun0: tun_chr_ioctl cmd 2148553947
[  297.675216][T19238] __nla_validate_parse: 34 callbacks suppressed
[  297.675230][T19238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3580'.
[  297.686123][T19238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3580'.
[  297.710189][T19240] 8021q: VLANs not supported on vxcan1
[  297.723183][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'.
[  297.788029][T19251] syz.2.3586: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  297.801721][T19251] CPU: 0 UID: 0 PID: 19251 Comm: syz.2.3586 Not tainted syzkaller #0 PREEMPT(full) 
[  297.801745][T19251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.801755][T19251] Call Trace:
[  297.801761][T19251]  <TASK>
[  297.801768][T19251]  dump_stack_lvl+0x189/0x250
[  297.801792][T19251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.801808][T19251]  ? __pfx__printk+0x10/0x10
[  297.801825][T19251]  ? lock_release+0x4b/0x3e0
[  297.801846][T19251]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  297.801862][T19251]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  297.801878][T19251]  warn_alloc+0x214/0x310
[  297.801901][T19251]  ? __pfx_warn_alloc+0x10/0x10
[  297.801924][T19251]  ? __get_vm_area_node+0x28f/0x300
[  297.801975][T19251]  ? xskq_create+0xbf/0x170
[  297.801995][T19251]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  297.802024][T19251]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  297.802041][T19251]  ? xskq_create+0x56/0x170
[  297.802057][T19251]  ? __kasan_kmalloc+0x93/0xb0
[  297.802074][T19251]  vmalloc_user_noprof+0xad/0xf0
[  297.802092][T19251]  ? xskq_create+0xbf/0x170
[  297.802108][T19251]  xskq_create+0xbf/0x170
[  297.802125][T19251]  xsk_init_queue+0xb0/0x110
[  297.802148][T19251]  xsk_setsockopt+0x57b/0x8d0
[  297.802163][T19251]  ? __pfx_xsk_setsockopt+0x10/0x10
[  297.802178][T19251]  ? __pfx_aa_sk_perm+0x10/0x10
[  297.802198][T19251]  ? lock_release+0x4b/0x3e0
[  297.802215][T19251]  ? __se_sys_futex+0x36f/0x400
[  297.802231][T19251]  ? aa_sock_opt_perm+0xff/0x1b0
[  297.802244][T19251]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  297.802259][T19251]  ? __pfx_xsk_setsockopt+0x10/0x10
[  297.802276][T19251]  do_sock_setsockopt+0x17c/0x1b0
[  297.802292][T19251]  __x64_sys_setsockopt+0x13f/0x1b0
[  297.802304][T19251]  do_syscall_64+0xfa/0x3b0
[  297.802321][T19251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.802334][T19251]  ? exc_page_fault+0x9f/0xf0
[  297.802352][T19251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.802364][T19251] RIP: 0033:0x7fc057b8ebe9
[  297.802377][T19251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.802388][T19251] RSP: 002b:00007fc05897c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  297.802403][T19251] RAX: ffffffffffffffda RBX: 00007fc057db5fa0 RCX: 00007fc057b8ebe9
[  297.802414][T19251] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  297.802423][T19251] RBP: 00007fc057c11e19 R08: 0000000000000004 R09: 0000000000000000
[  297.802430][T19251] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  297.802440][T19251] R13: 00007fc057db6038 R14: 00007fc057db5fa0 R15: 00007ffe33c71c58
[  297.802456][T19251]  </TASK>
[  297.802461][T19251] Mem-Info:
[  297.881639][T19256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3587'.
[  297.884508][T19251] active_anon:6928 inactive_anon:7 isolated_anon:0
[  297.884508][T19251]  active_file:1419 inactive_file:35643 isolated_file:0
[  297.884508][T19251]  unevictable:1768 dirty:87 writeback:0
[  297.884508][T19251]  slab_reclaimable:16083 slab_unreclaimable:201843
[  297.884508][T19251]  mapped:18302 shmem:2518 pagetables:1259
[  297.884508][T19251]  sec_pagetables:0 bounce:0
[  297.884508][T19251]  kernel_misc_reclaimable:0
[  297.884508][T19251]  free:137563 free_pcp:13175 free_cma:0
[  297.916787][T19251] Node 0 active_anon:14296kB inactive_anon:28kB active_file:3512kB inactive_file:136036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:54120kB dirty:292kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8396kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.927034][T19251] Node 1 active_anon:13484kB inactive_anon:0kB active_file:2164kB inactive_file:6536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19088kB dirty:56kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6296kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  297.937728][T19251] Node 0 DMA free:6260kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:0kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:548kB local_pcp:200kB free_cma:0kB
[  297.947538][T19251] lowmem_reserve[]: 0 811 811 811 811
[  297.949461][T19251] Node 0 DMA32 free:77856kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:4096KB free_highatomic:808KB active_anon:14228kB inactive_anon:28kB active_file:3456kB inactive_file:136036kB unevictable:3536kB writepending:292kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:1888kB local_pcp:744kB free_cma:0kB
[  297.959831][T19251] lowmem_reserve[]: 0 0 0 0 0
[  297.961572][T19251] Node 1 DMA32 free:394336kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15068kB local_pcp:6976kB free_cma:0kB
[  297.971431][T19251] lowmem_reserve[]: 0 0 854 854 854
[  297.973146][T19251] Node 1 Normal free:71800kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13484kB inactive_anon:0kB active_file:2164kB inactive_file:6536kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35216kB local_pcp:18032kB free_cma:0kB
[  297.983718][T19251] lowmem_reserve[]: 0 0 0 0 0
[  297.985540][T19251] Node 0 DMA: 47*4kB (UME) 50*8kB (UME) 23*16kB (UME) 12*32kB (UME) 5*64kB (M) 4*128kB (UME) 6*256kB (UME) 3*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 6268kB
[  297.991271][T19251] Node 0 DMA32: 1086*4kB (UMH) 1117*8kB (UMEH) 548*16kB (UMEH) 448*32kB (UMEH) 108*64kB (UMEH) 28*128kB (UMEH) 23*256kB (UME) 9*512kB (UM) 2*1024kB (ME) 5*2048kB (UM) 2*4096kB (U) = 77856kB
[  297.997341][T19251] Node 1 DMA32: 12*4kB (UM) 10*8kB (UM) 10*16kB (UME) 10*32kB (UME) 8*64kB (UE) 10*128kB (UME) 13*256kB (UME) 7*512kB (UME) 10*1024kB (UME) 5*2048kB (UME) 89*4096kB (UM) = 394336kB
[  298.003240][T19251] Node 1 Normal: 2009*4kB (UME) 1014*8kB (UM) 221*16kB (UME) 143*32kB (UME) 131*64kB (UM) 42*128kB (UM) 32*256kB (UME) 12*512kB (UME) 7*1024kB (UM) 6*2048kB (UM) 0*4096kB = 71812kB
[  298.011141][T19251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.014080][T19251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.019111][T19251] 39585 total pagecache pages
[  298.023558][T19251] 5 pages in swap cache
[  298.025318][T19251] Free swap  = 124976kB
[  298.027025][T19251] Total swap = 124996kB
[  298.028733][T19251] 786301 pages RAM
[  298.032675][T19251] 0 pages HighMem/MovableOnly
[  298.034883][T19251] 241332 pages reserved
[  298.036662][T19251] 0 pages cma reserved
[  298.096870][T19266] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3590'.
[  298.115366][T19268] validate_nla: 13 callbacks suppressed
[  298.115385][T19268] netlink: 'syz.2.3591': attribute type 1 has an invalid length.
[  298.368158][T19282] netlink: 'syz.3.3593': attribute type 13 has an invalid length.
[  298.372995][T19281] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  298.495081][T19286] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.654401][T19296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3596'.
[  298.658139][T19296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3596'.
[  298.993863][T19319] vti0: entered promiscuous mode
[  298.995577][T19319] vti0: entered allmulticast mode
[  299.052167][T19323] netlink: 'syz.2.3600': attribute type 1 has an invalid length.
[  299.056030][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.058660][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.064461][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.069178][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.076370][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.079284][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.084439][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.087153][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.087545][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3602'.
[  299.091279][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.096279][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.099001][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.103384][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.105632][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.107858][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.129855][T19333] bridge21: port 1(veth13) entered blocking state
[  299.132049][T19333] bridge21: port 1(veth13) entered disabled state
[  299.134354][T19333] veth13: entered allmulticast mode
[  299.136713][T19333] veth13: entered promiscuous mode
[  299.139370][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.144769][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.147284][T19333] bridge21: port 2(veth0_to_bond) entered blocking state
[  299.151221][T19333] bridge21: port 2(veth0_to_bond) entered disabled state
[  299.153665][T19333] veth0_to_bond: entered allmulticast mode
[  299.156319][T19333] veth0_to_bond: entered promiscuous mode
[  299.159216][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.162510][T19337] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  299.164821][T19337] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  299.180112][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.182555][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.184845][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.195284][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.198415][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.201872][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.205061][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.208079][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.212213][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.216889][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.222210][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.227643][T19341] vlan0: entered allmulticast mode
[  299.229468][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.233172][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.238636][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.249890][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.252675][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.255547][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.258993][T19340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.263489][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.265947][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.269015][T19340] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  299.272400][T19340] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  299.276840][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'.
[  299.277887][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.285827][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.288240][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.292446][T19340] tipc: Resetting bearer <eth:syzkaller0>
[  299.294747][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.297839][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.307336][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.311503][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.317436][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.324225][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.330316][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.336752][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.339277][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.350039][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.352602][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.355207][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.357812][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.375589][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.380145][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.390357][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'.
[  299.394707][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.403712][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.415101][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.421483][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.430864][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.442921][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.447090][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.458873][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.466589][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.477288][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.481832][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.485141][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.493997][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.510879][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.516850][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.523559][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.528270][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.532485][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.534968][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.537616][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.541042][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.543377][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.547217][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.556134][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.558732][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.561409][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.579210][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.583106][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.585996][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.588590][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.593070][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.595845][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.598269][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.600708][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.603128][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.605785][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.608087][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.611789][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.614868][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.618306][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.622028][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.626237][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.628944][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.633425][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.637172][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.642023][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.645217][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.647996][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.651263][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.655201][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.657813][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.662637][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.668183][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.676809][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.679057][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.690024][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.692591][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.695307][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.698122][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.700498][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.703164][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.708578][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.713642][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.717269][T19365] mac80211_hwsim hwsim4 ": left promiscuous mode
[  299.730209][T19365] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  299.732484][T19365] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  299.747644][T19365] vti0: left promiscuous mode
[  299.749216][T19365] vti0: left allmulticast mode
[  299.765629][T19365] vlan0: left allmulticast mode
[  299.767364][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.772595][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.775364][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.783311][T19332] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  299.783470][T19360] netlink: 'syz.2.3612': attribute type 4 has an invalid length.
[  299.789163][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.795160][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.798215][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.803245][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.806393][T19360] netlink: 'syz.2.3612': attribute type 4 has an invalid length.
[  299.809029][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.816302][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.821240][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.830407][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.832942][T19331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.869220][T19379] netlink: 'syz.3.3616': attribute type 39 has an invalid length.
[  299.885861][T19374] lo speed is unknown, defaulting to 1000
[  299.897759][T19375] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  299.902432][T19375] CPU: 1 UID: 0 PID: 19375 Comm: syz.2.3615 Not tainted syzkaller #0 PREEMPT(full) 
[  299.902446][T19375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.902453][T19375] Call Trace:
[  299.902457][T19375]  <TASK>
[  299.902462][T19375]  dump_stack_lvl+0x189/0x250
[  299.902480][T19375]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.902490][T19375]  ? __pfx__printk+0x10/0x10
[  299.902503][T19375]  ? kernfs_root+0x1c/0x230
[  299.902513][T19375]  ? kernfs_path_from_node+0x2f/0x290
[  299.902521][T19375]  ? kernfs_path_from_node+0x250/0x290
[  299.902529][T19375]  ? kernfs_path_from_node+0x2f/0x290
[  299.902538][T19375]  sysfs_warn_dup+0x8e/0xa0
[  299.902546][T19375]  sysfs_do_create_link_sd+0xc0/0x110
[  299.902555][T19375]  device_add_class_symlinks+0x1cf/0x240
[  299.902565][T19375]  device_add+0x475/0xb50
[  299.902573][T19375]  wiphy_register+0x1ba6/0x28d0
[  299.902587][T19375]  ? __pfx_wiphy_register+0x10/0x10
[  299.902599][T19375]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  299.902611][T19375]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  299.902627][T19375]  ieee80211_register_hw+0x3425/0x4080
[  299.902639][T19375]  ? ieee80211_register_hw+0x14a1/0x4080
[  299.902649][T19375]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  299.902658][T19375]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.902671][T19375]  ? __hrtimer_setup+0x187/0x210
[  299.902679][T19375]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  299.902692][T19375]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  299.902709][T19375]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  299.902752][T19375]  ? trace_kmalloc+0x1f/0xd0
[  299.902764][T19375]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  299.902776][T19375]  ? kstrndup+0xbf/0x160
[  299.902787][T19375]  hwsim_new_radio_nl+0xea4/0x1b10
[  299.902798][T19375]  ? __pfx___nla_validate_parse+0x10/0x10
[  299.902814][T19375]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.902826][T19375]  ? __nla_parse+0x40/0x60
[  299.902838][T19375]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  299.902850][T19375]  genl_family_rcv_msg_doit+0x215/0x300
[  299.902860][T19375]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  299.902872][T19375]  ? bpf_lsm_capable+0x9/0x20
[  299.902883][T19375]  ? security_capable+0x7e/0x2e0
[  299.902899][T19375]  genl_rcv_msg+0x60e/0x790
[  299.902910][T19375]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.902924][T19375]  ? __kasan_slab_alloc+0x6c/0x80
[  299.902936][T19375]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.902947][T19375]  ? __netlink_lookup+0xbd/0x810
[  299.902954][T19375]  ? rcu_is_watching+0x15/0xb0
[  299.902966][T19375]  netlink_rcv_skb+0x208/0x470
[  299.902979][T19375]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.902988][T19375]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.903003][T19375]  ? lock_release+0x4b/0x3e0
[  299.903015][T19375]  ? down_read+0x1ad/0x2e0
[  299.903023][T19375]  genl_rcv+0x28/0x40
[  299.903031][T19375]  netlink_unicast+0x82f/0x9e0
[  299.903042][T19375]  ? __pfx_netlink_unicast+0x10/0x10
[  299.903052][T19375]  ? netlink_sendmsg+0x642/0xb30
[  299.903063][T19375]  ? skb_put+0x11b/0x210
[  299.903072][T19375]  netlink_sendmsg+0x805/0xb30
[  299.903088][T19375]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.903106][T19375]  ? aa_sock_msg_perm+0xf1/0x1d0
[  299.903121][T19375]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.903139][T19375]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.903155][T19375]  __sock_sendmsg+0x21c/0x270
[  299.903171][T19375]  ____sys_sendmsg+0x505/0x830
[  299.903185][T19375]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.903203][T19375]  ? import_iovec+0x74/0xa0
[  299.903220][T19375]  ___sys_sendmsg+0x21f/0x2a0
[  299.903235][T19375]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.903249][T19375]  ? futex_wake+0x4b2/0x560
[  299.903274][T19375]  ? __fget_files+0x2a/0x420
[  299.903294][T19375]  ? __fget_files+0x3a0/0x420
[  299.903320][T19375]  __x64_sys_sendmsg+0x19b/0x260
[  299.903336][T19375]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.903355][T19375]  ? rcu_is_watching+0x15/0xb0
[  299.903372][T19375]  ? rcu_is_watching+0x15/0xb0
[  299.903388][T19375]  do_syscall_64+0xfa/0x3b0
[  299.903410][T19375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.903424][T19375]  ? exc_page_fault+0x9f/0xf0
[  299.903444][T19375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.903458][T19375] RIP: 0033:0x7fc057b8ebe9
[  299.903473][T19375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.903488][T19375] RSP: 002b:00007fc05897c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.903506][T19375] RAX: ffffffffffffffda RBX: 00007fc057db5fa0 RCX: 00007fc057b8ebe9
[  299.903518][T19375] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  299.903528][T19375] RBP: 00007fc057c11e19 R08: 0000000000000000 R09: 0000000000000000
[  299.903539][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.903548][T19375] R13: 00007fc057db6038 R14: 00007fc057db5fa0 R15: 00007ffe33c71c58
[  299.903567][T19375]  </TASK>
[  299.938771][T19374] lo speed is unknown, defaulting to 1000
[  300.083824][T19389] netlink: 'syz.2.3617': attribute type 10 has an invalid length.
[  300.254801][T19396] tipc: Resetting bearer <eth:syzkaller0>
[  300.257810][T19396] netlink: 'syz.1.3619': attribute type 10 has an invalid length.
[  300.378891][T19405] pim6reg1: entered promiscuous mode
[  300.383005][T19405] pim6reg1: entered allmulticast mode
[  300.553701][T19412] netlink: 'syz.1.3624': attribute type 1 has an invalid length.
[  300.628866][T19420] netlink: 'syz.1.3625': attribute type 5 has an invalid length.
[  300.710486][T19424] pim6reg1: entered promiscuous mode
[  300.712620][T19424] pim6reg1: entered allmulticast mode
[  300.759309][T19431] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004
[  300.796706][T19432] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  300.814125][T19432] bond28 (unregistering): Released all slaves
[  300.841498][T19436] veth1_to_bond: entered allmulticast mode
[  300.848079][T19436] veth1_to_bond: entered promiscuous mode
[  300.855338][T19435] veth1_to_bond: left promiscuous mode
[  300.861187][T19435] veth1_to_bond: left allmulticast mode
[  301.105066][T19463] IPVS: Unknown mcast interface: vcan0
[  302.300956][T19526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.306753][   T10] lo speed is unknown, defaulting to 1000
[  302.308775][   T10] syz0: Port: 1 Link ACTIVE
[  302.312026][   T10] lo speed is unknown, defaulting to 1000
[  302.332311][T19526] lo speed is unknown, defaulting to 1000
[  302.400043][T19526] lo speed is unknown, defaulting to 1000
[  302.558686][T19541] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  302.564372][T19541] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  302.678789][T19552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.684146][T19552] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  302.687694][T19552] tipc: Resetting bearer <eth:syzkaller0>
[  302.694271][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  302.738988][T19563] __nla_validate_parse: 18 callbacks suppressed
[  302.739007][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'.
[  302.770536][T19565] sctp: [Deprecated]: syz.1.3665 (pid 19565) Use of struct sctp_assoc_value in delayed_ack socket option.
[  302.770536][T19565] Use struct sctp_sack_info instead
[  302.776205][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3665'.
[  302.779465][T19565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3665'.
[  302.782966][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3665'.
[  302.786527][T19565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3665'.
[  303.115161][T19592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3672'.
[  303.154799][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'.
[  303.185732][T19596] validate_nla: 40 callbacks suppressed
[  303.185745][T19596] netlink: 'syz.1.3673': attribute type 12 has an invalid length.
[  303.289428][T19601] netlink: 'syz.3.3675': attribute type 1 has an invalid length.
[  303.299534][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'.
[  303.302118][T19601] 8021q: adding VLAN 0 to HW filter on device bond8
[  303.310655][T19601] 8021q: adding VLAN 0 to HW filter on device bond8
[  303.312991][T19601] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  303.317218][T19601] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  303.359218][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.362106][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.477464][T19611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.632672][T19622] pim6reg1: entered promiscuous mode
[  303.634747][T19622] pim6reg1: entered allmulticast mode
[  303.646128][T19619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.776486][T19628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3682'.
[  303.827183][T19637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.836269][T19637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3684'.
[  303.842060][T19637] tipc: Resetting bearer <eth:syzkaller0>
[  303.866083][T19641] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  303.948078][T19654] IPVS: length: 49 != 24
[  303.977418][T19657] sctp: [Deprecated]: syz.3.3690 (pid 19657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.977418][T19657] Use struct sctp_sack_info instead
[  304.020539][T19663] IPv6: sit8: Disabled Multicast RS
[  304.023042][T19663] sit8: entered allmulticast mode
[  304.028585][T19665] netlink: 'syz.2.3692': attribute type 12 has an invalid length.
[  304.122888][T19670] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  304.136524][T19670] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  304.353337][T19694] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.358451][T19689] tipc: Resetting bearer <eth:syzkaller0>
[  304.419134][T19700] macsec2: entered promiscuous mode
[  304.422378][T19700] ip6gretap0: entered promiscuous mode
[  304.424179][T19700] macsec2: entered allmulticast mode
[  304.425941][T19700] ip6gretap0: entered allmulticast mode
[  304.527090][T19707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.617249][T19719] netlink: 'syz.2.3707': attribute type 7 has an invalid length.
[  304.683532][T19731] netlink: 'syz.1.3709': attribute type 10 has an invalid length.
[  304.688709][T19731] dummy0: entered allmulticast mode
[  304.692514][T19731] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  304.803249][T19739] sctp: [Deprecated]: syz.2.3711 (pid 19739) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.803249][T19739] Use struct sctp_sack_info instead
[  304.838526][T19751] netlink: 'syz.1.3713': attribute type 1 has an invalid length.
[  304.853722][T19751] 8021q: adding VLAN 0 to HW filter on device bond22
[  304.861121][T19751] 8021q: adding VLAN 0 to HW filter on device bond22
[  304.863968][T19751] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  304.868010][T19751] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  304.907722][T19761] erspan0: entered allmulticast mode
[  304.912259][T19761] bond22: (slave erspan0): making interface the new active one
[  304.915343][T19761] bond22: (slave erspan0): Enslaving as an active interface with an up link
[  304.984240][T19776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.086967][T19784] netlink: 'syz.2.3720': attribute type 5 has an invalid length.
[  305.331593][T19796] tipc: Resetting bearer <eth:syzkaller0>
[  305.337855][T19796] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  305.342582][T19796] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  305.368907][T19798] netlink: 'syz.3.3724': attribute type 9 has an invalid length.
[  305.433274][T19800] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.437202][T19800] netlink: 'syz.3.3725': attribute type 6 has an invalid length.
[  305.440204][T19800] IPv6: NLM_F_CREATE should be specified when creating new route
[  305.504349][T19813] IPVS: length: 49 != 24
[  305.814533][T19833] pim6reg1: entered promiscuous mode
[  305.816407][T19833] pim6reg1: entered allmulticast mode
[  305.819168][T19835] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode
[  305.825510][T19835] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode
[  305.969149][T19847] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  305.972240][T19847] CPU: 0 UID: 0 PID: 19847 Comm: syz.3.3738 Not tainted syzkaller #0 PREEMPT(full) 
[  305.972253][T19847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.972260][T19847] Call Trace:
[  305.972265][T19847]  <TASK>
[  305.972269][T19847]  dump_stack_lvl+0x189/0x250
[  305.972286][T19847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.972297][T19847]  ? __pfx__printk+0x10/0x10
[  305.972309][T19847]  ? kernfs_root+0x1c/0x230
[  305.972319][T19847]  ? kernfs_path_from_node+0x2f/0x290
[  305.972328][T19847]  ? kernfs_path_from_node+0x250/0x290
[  305.972336][T19847]  ? kernfs_path_from_node+0x2f/0x290
[  305.972345][T19847]  sysfs_warn_dup+0x8e/0xa0
[  305.972353][T19847]  sysfs_do_create_link_sd+0xc0/0x110
[  305.972362][T19847]  device_add_class_symlinks+0x1cf/0x240
[  305.972372][T19847]  device_add+0x475/0xb50
[  305.972380][T19847]  wiphy_register+0x1ba6/0x28d0
[  305.972398][T19847]  ? __pfx_wiphy_register+0x10/0x10
[  305.972408][T19847]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  305.972420][T19847]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  305.972436][T19847]  ieee80211_register_hw+0x3425/0x4080
[  305.972450][T19847]  ? ieee80211_register_hw+0x14a1/0x4080
[  305.972460][T19847]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  305.972469][T19847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  305.972487][T19847]  ? __hrtimer_setup+0x187/0x210
[  305.972497][T19847]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  305.972512][T19847]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  305.972529][T19847]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  305.972538][T19847]  ? trace_kmalloc+0x1f/0xd0
[  305.972550][T19847]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  305.972561][T19847]  ? kstrndup+0xbf/0x160
[  305.972573][T19847]  hwsim_new_radio_nl+0xea4/0x1b10
[  305.972584][T19847]  ? __pfx___nla_validate_parse+0x10/0x10
[  305.972599][T19847]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  305.972611][T19847]  ? __nla_parse+0x40/0x60
[  305.972622][T19847]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  305.972634][T19847]  genl_family_rcv_msg_doit+0x215/0x300
[  305.972644][T19847]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  305.972655][T19847]  ? bpf_lsm_capable+0x9/0x20
[  305.972666][T19847]  ? security_capable+0x7e/0x2e0
[  305.972679][T19847]  genl_rcv_msg+0x60e/0x790
[  305.972689][T19847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  305.972697][T19847]  ? __kasan_slab_alloc+0x6c/0x80
[  305.972709][T19847]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  305.972718][T19847]  ? __netlink_lookup+0xbd/0x810
[  305.972725][T19847]  ? rcu_is_watching+0x15/0xb0
[  305.972735][T19847]  netlink_rcv_skb+0x208/0x470
[  305.972747][T19847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  305.972755][T19847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.972768][T19847]  ? lock_release+0x4b/0x3e0
[  305.972780][T19847]  ? down_read+0x1ad/0x2e0
[  305.972788][T19847]  genl_rcv+0x28/0x40
[  305.972795][T19847]  netlink_unicast+0x82f/0x9e0
[  305.972807][T19847]  ? __pfx_netlink_unicast+0x10/0x10
[  305.972817][T19847]  ? netlink_sendmsg+0x642/0xb30
[  305.972827][T19847]  ? skb_put+0x11b/0x210
[  305.972835][T19847]  netlink_sendmsg+0x805/0xb30
[  305.972848][T19847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.972859][T19847]  ? futex_unqueue+0x22/0x240
[  305.972868][T19847]  ? aa_sock_msg_perm+0xf1/0x1d0
[  305.972876][T19847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  305.972885][T19847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.972896][T19847]  __sock_sendmsg+0x21c/0x270
[  305.972906][T19847]  ____sys_sendmsg+0x505/0x830
[  305.972915][T19847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.972925][T19847]  ? import_iovec+0x74/0xa0
[  305.972935][T19847]  ___sys_sendmsg+0x21f/0x2a0
[  305.972944][T19847]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.972952][T19847]  ? futex_wait+0x285/0x360
[  305.972969][T19847]  ? __fget_files+0x2a/0x420
[  305.972981][T19847]  ? __fget_files+0x3a0/0x420
[  305.972994][T19847]  __x64_sys_sendmsg+0x19b/0x260
[  305.973002][T19847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  305.973012][T19847]  ? rcu_is_watching+0x15/0xb0
[  305.973021][T19847]  ? rcu_is_watching+0x15/0xb0
[  305.973029][T19847]  do_syscall_64+0xfa/0x3b0
[  305.973041][T19847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.973050][T19847]  ? exc_page_fault+0x9f/0xf0
[  305.973060][T19847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.973068][T19847] RIP: 0033:0x7f791ad8ebe9
[  305.973076][T19847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.973112][T19847] RSP: 002b:00007f791bc03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.973123][T19847] RAX: ffffffffffffffda RBX: 00007f791afb6090 RCX: 00007f791ad8ebe9
[  305.973130][T19847] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  305.973135][T19847] RBP: 00007f791ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  305.973141][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.973146][T19847] R13: 00007f791afb6128 R14: 00007f791afb6090 R15: 00007ffd6e176418
[  305.973156][T19847]  </TASK>
[  306.422811][T19858] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.425517][T19858] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  306.459831][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  306.871901][T19865] netlink: 'syz.1.3745': attribute type 6 has an invalid length.
[  306.994833][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  307.010095][ T3145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  307.133653][T19888] bridge0 (unregistering): left allmulticast mode
[  307.342441][T19919] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  307.467483][T19925] tipc: Resetting bearer <eth:syzkaller0>
[  307.485440][ T3145] lo speed is unknown, defaulting to 1000
[  307.487251][ T3145] syz0: Port: 1 Link DOWN
[  307.531075][ T3145] lo speed is unknown, defaulting to 1000
[  307.571178][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.575051][ T5744] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.577881][ T5744] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.583684][ T5744] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.639509][ T7505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.643027][ T7505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.682357][T19953] 8021q: adding VLAN 0 to HW filter on device bond23
[  307.696749][T19953] 8021q: adding VLAN 0 to HW filter on device bond23
[  307.702475][T19953] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  307.711103][T19953] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  307.758130][T19958] veth15: entered promiscuous mode
[  307.762788][T19958] bond23: (slave veth15): Enslaving as an active interface with a down link
[  307.767884][T19962] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  307.771118][T19962] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  307.774043][T19961] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.829148][T19969] __nla_validate_parse: 84 callbacks suppressed
[  307.829167][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'.
[  307.856194][T19971] tipc: Resetting bearer <eth:syzkaller0>
[  308.030232][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  308.032904][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  308.163427][T19975] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3779'.
[  308.166663][T19975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3779'.
[  308.420614][T19985] mac80211_hwsim hwsim293 wlan0: entered promiscuous mode
[  308.423219][T19985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'.
[  308.426024][T19985] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  308.450630][T19988] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3782'.
[  308.565982][T19993] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3783'.
[  308.569438][T19993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3783'.
[  308.569468][T19992] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3783'.
[  308.751186][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  308.792226][T19996] validate_nla: 6 callbacks suppressed
[  308.792245][T19996] netlink: 'syz.3.3784': attribute type 4 has an invalid length.
[  308.797991][ T5909] lo speed is unknown, defaulting to 1000
[  308.800253][ T5909] syz1: Port: 1 Link ACTIVE
[  309.119090][T20003] netlink: 'syz.2.3786': attribute type 3 has an invalid length.
[  309.151639][T20008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.154723][T20008] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  309.157656][T20008] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  309.259034][T20021] bond26: (slave wireguard0): Releasing backup interface
[  309.281199][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  309.396894][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3792'.
[  309.404440][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3792'.
[  309.624726][T20058] veth0_to_bond: entered allmulticast mode
[  309.628846][T20058] netlink: 'syz.2.3795': attribute type 10 has an invalid length.
[  309.752842][T20060] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  310.030389][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  310.182733][T20071] pim6reg1: entered promiscuous mode
[  310.184861][T20071] pim6reg1: entered allmulticast mode
[  310.265885][T20071] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode
[  310.268908][T20071] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode
[  310.301489][T20071] bond9 (unregistering): Released all slaves
[  310.446427][T20086] syzkaller1: entered promiscuous mode
[  310.448566][T20086] syzkaller1: entered allmulticast mode
[  310.737694][T20121] netlink: 'syz.2.3812': attribute type 18 has an invalid length.
[  310.741105][T20121] netlink: 'syz.2.3812': attribute type 18 has an invalid length.
[  311.505746][T20147] sctp: [Deprecated]: syz.3.3819 (pid 20147) Use of struct sctp_assoc_value in delayed_ack socket option.
[  311.505746][T20147] Use struct sctp_sack_info instead
[  311.521997][T20147] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  311.525637][T20147] CPU: 1 UID: 0 PID: 20147 Comm: syz.3.3819 Not tainted syzkaller #0 PREEMPT(full) 
[  311.525651][T20147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.525658][T20147] Call Trace:
[  311.525663][T20147]  <TASK>
[  311.525670][T20147]  dump_stack_lvl+0x189/0x250
[  311.525688][T20147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.525699][T20147]  ? __pfx__printk+0x10/0x10
[  311.525720][T20147]  ? kernfs_root+0x1c/0x230
[  311.525732][T20147]  ? kernfs_path_from_node+0x2f/0x290
[  311.525741][T20147]  ? kernfs_path_from_node+0x250/0x290
[  311.525750][T20147]  ? kernfs_path_from_node+0x2f/0x290
[  311.525760][T20147]  sysfs_warn_dup+0x8e/0xa0
[  311.525769][T20147]  sysfs_do_create_link_sd+0xc0/0x110
[  311.525780][T20147]  device_add_class_symlinks+0x1cf/0x240
[  311.525791][T20147]  device_add+0x475/0xb50
[  311.525800][T20147]  wiphy_register+0x1ba6/0x28d0
[  311.525818][T20147]  ? __pfx_wiphy_register+0x10/0x10
[  311.525830][T20147]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  311.525842][T20147]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  311.525857][T20147]  ieee80211_register_hw+0x3425/0x4080
[  311.525869][T20147]  ? ieee80211_register_hw+0x14a1/0x4080
[  311.525879][T20147]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  311.525888][T20147]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.525901][T20147]  ? __hrtimer_setup+0x187/0x210
[  311.525909][T20147]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  311.525923][T20147]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  311.525939][T20147]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  311.525949][T20147]  ? trace_kmalloc+0x1f/0xd0
[  311.525961][T20147]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  311.525974][T20147]  ? kstrndup+0xbf/0x160
[  311.525985][T20147]  hwsim_new_radio_nl+0xea4/0x1b10
[  311.525998][T20147]  ? __pfx___nla_validate_parse+0x10/0x10
[  311.526013][T20147]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.526025][T20147]  ? __nla_parse+0x40/0x60
[  311.526037][T20147]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  311.526049][T20147]  genl_family_rcv_msg_doit+0x215/0x300
[  311.526059][T20147]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  311.526071][T20147]  ? bpf_lsm_capable+0x9/0x20
[  311.526082][T20147]  ? security_capable+0x7e/0x2e0
[  311.526095][T20147]  genl_rcv_msg+0x60e/0x790
[  311.526104][T20147]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.526112][T20147]  ? __kasan_slab_alloc+0x6c/0x80
[  311.526123][T20147]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.526133][T20147]  ? __netlink_lookup+0xbd/0x810
[  311.526140][T20147]  ? rcu_is_watching+0x15/0xb0
[  311.526150][T20147]  netlink_rcv_skb+0x208/0x470
[  311.526161][T20147]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.526170][T20147]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  311.526183][T20147]  ? lock_release+0x4b/0x3e0
[  311.526195][T20147]  ? down_read+0x1ad/0x2e0
[  311.526203][T20147]  genl_rcv+0x28/0x40
[  311.526210][T20147]  netlink_unicast+0x82f/0x9e0
[  311.526222][T20147]  ? __pfx_netlink_unicast+0x10/0x10
[  311.526232][T20147]  ? netlink_sendmsg+0x642/0xb30
[  311.526242][T20147]  ? skb_put+0x11b/0x210
[  311.526251][T20147]  netlink_sendmsg+0x805/0xb30
[  311.526265][T20147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.526276][T20147]  ? aa_sock_msg_perm+0xf1/0x1d0
[  311.526284][T20147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  311.526293][T20147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.526304][T20147]  __sock_sendmsg+0x21c/0x270
[  311.526315][T20147]  ____sys_sendmsg+0x505/0x830
[  311.526324][T20147]  ? __pfx_____sys_sendmsg+0x10/0x10
[  311.526334][T20147]  ? import_iovec+0x74/0xa0
[  311.526343][T20147]  ___sys_sendmsg+0x21f/0x2a0
[  311.526352][T20147]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.526360][T20147]  ? futex_wake+0x4b2/0x560
[  311.526377][T20147]  ? __fget_files+0x2a/0x420
[  311.526389][T20147]  ? __fget_files+0x3a0/0x420
[  311.526403][T20147]  __x64_sys_sendmsg+0x19b/0x260
[  311.526411][T20147]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.526421][T20147]  ? rcu_is_watching+0x15/0xb0
[  311.526430][T20147]  ? rcu_is_watching+0x15/0xb0
[  311.526437][T20147]  do_syscall_64+0xfa/0x3b0
[  311.526450][T20147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.526459][T20147]  ? exc_page_fault+0x9f/0xf0
[  311.526469][T20147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.526477][T20147] RIP: 0033:0x7f791ad8ebe9
[  311.526487][T20147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.526495][T20147] RSP: 002b:00007f791bc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.526505][T20147] RAX: ffffffffffffffda RBX: 00007f791afb5fa0 RCX: 00007f791ad8ebe9
[  311.526540][T20147] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  311.526546][T20147] RBP: 00007f791ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  311.526553][T20147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.526559][T20147] R13: 00007f791afb6038 R14: 00007f791afb5fa0 R15: 00007ffd6e176418
[  311.526570][T20147]  </TASK>
[  311.775772][T20158] macvlan4: entered allmulticast mode
[  311.777511][T20158] bond0: entered allmulticast mode
[  311.779324][T20158] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  311.782321][T20158] bond0: left allmulticast mode
[  311.984635][T20185] netlink: 'syz.2.3827': attribute type 23 has an invalid length.
[  312.119769][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.378176][T20192] mac80211_hwsim hwsim130 wlan0: entered promiscuous mode
[  312.545583][T20201] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  312.548268][T20201] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  312.588393][T20212] netlink: 'syz.3.3834': attribute type 10 has an invalid length.
[  312.595114][T20211] IPv6: sit8: Disabled Multicast RS
[  312.597179][T20211] sit8: entered allmulticast mode
[  312.838631][T20234] __nla_validate_parse: 21 callbacks suppressed
[  312.838644][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'.
[  312.856364][T20231] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.859540][T20231] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  312.862971][T20231] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  312.921104][T20243] netlink: 'syz.1.3843': attribute type 11 has an invalid length.
[  312.928724][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'.
[  312.934893][T20245] netlink: 'syz.3.3844': attribute type 15 has an invalid length.
[  312.938492][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'.
[  312.947121][T20245] netlink: 'syz.3.3844': attribute type 15 has an invalid length.
[  312.970347][T20250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3846'.
[  312.982343][T20251] netlink: 'syz.1.3847': attribute type 11 has an invalid length.
[  313.018938][T20258] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004
[  313.077563][T20264] netlink: 'syz.1.3852': attribute type 12 has an invalid length.
[  313.124966][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3853'.
[  313.139464][T20270] sctp: [Deprecated]: syz.1.3853 (pid 20270) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.139464][T20270] Use struct sctp_sack_info instead
[  313.219443][T20282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.227500][T20282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.245280][T20287] 8021q: adding VLAN 0 to HW filter on device bond24
[  313.254370][T20285] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  313.289310][T20291] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.329967][T20293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3858'.
[  313.410130][T20305] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3861'.
[  313.533126][T20319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3864'.
[  313.555395][T20313] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3862'.
[  313.754307][T20341] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  313.757112][T20341] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  313.786620][T20347] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3873'.
[  313.893558][T20351] validate_nla: 2 callbacks suppressed
[  313.893571][T20351] netlink: 'syz.2.3874': attribute type 8 has an invalid length.
[  313.925589][T20353] pim6reg1: entered promiscuous mode
[  313.927250][T20353] pim6reg1: entered allmulticast mode
[  313.983043][T20356] netlink: 'syz.1.3876': attribute type 10 has an invalid length.
[  314.046573][T20358] sctp: [Deprecated]: syz.2.3877 (pid 20358) Use of struct sctp_assoc_value in delayed_ack socket option.
[  314.046573][T20358] Use struct sctp_sack_info instead
[  314.058863][T20358] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  314.064770][T20358] CPU: 1 UID: 0 PID: 20358 Comm: syz.2.3877 Not tainted syzkaller #0 PREEMPT(full) 
[  314.064785][T20358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.064792][T20358] Call Trace:
[  314.064796][T20358]  <TASK>
[  314.064801][T20358]  dump_stack_lvl+0x189/0x250
[  314.064819][T20358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.064830][T20358]  ? __pfx__printk+0x10/0x10
[  314.064843][T20358]  ? kernfs_root+0x1c/0x230
[  314.064855][T20358]  ? kernfs_path_from_node+0x2f/0x290
[  314.064863][T20358]  ? kernfs_path_from_node+0x250/0x290
[  314.064872][T20358]  ? kernfs_path_from_node+0x2f/0x290
[  314.064880][T20358]  sysfs_warn_dup+0x8e/0xa0
[  314.064889][T20358]  sysfs_do_create_link_sd+0xc0/0x110
[  314.064898][T20358]  device_add_class_symlinks+0x1cf/0x240
[  314.064909][T20358]  device_add+0x475/0xb50
[  314.064917][T20358]  wiphy_register+0x1ba6/0x28d0
[  314.064953][T20358]  ? __pfx_wiphy_register+0x10/0x10
[  314.064964][T20358]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  314.064977][T20358]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  314.064994][T20358]  ieee80211_register_hw+0x3425/0x4080
[  314.065009][T20358]  ? ieee80211_register_hw+0x14a1/0x4080
[  314.065019][T20358]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  314.065028][T20358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  314.065041][T20358]  ? __hrtimer_setup+0x187/0x210
[  314.065049][T20358]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  314.065061][T20358]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  314.065077][T20358]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  314.065086][T20358]  ? trace_kmalloc+0x1f/0xd0
[  314.065098][T20358]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  314.065109][T20358]  ? kstrndup+0xbf/0x160
[  314.065119][T20358]  hwsim_new_radio_nl+0xea4/0x1b10
[  314.065130][T20358]  ? __pfx___nla_validate_parse+0x10/0x10
[  314.065146][T20358]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  314.065158][T20358]  ? __nla_parse+0x40/0x60
[  314.065169][T20358]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  314.065182][T20358]  genl_family_rcv_msg_doit+0x215/0x300
[  314.065194][T20358]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  314.065207][T20358]  ? bpf_lsm_capable+0x9/0x20
[  314.065218][T20358]  ? security_capable+0x7e/0x2e0
[  314.065230][T20358]  genl_rcv_msg+0x60e/0x790
[  314.065240][T20358]  ? __pfx_genl_rcv_msg+0x10/0x10
[  314.065271][T20358]  ? __kasan_slab_alloc+0x6c/0x80
[  314.065285][T20358]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  314.065296][T20358]  ? __netlink_lookup+0xbd/0x810
[  314.065304][T20358]  ? rcu_is_watching+0x15/0xb0
[  314.065316][T20358]  netlink_rcv_skb+0x208/0x470
[  314.065330][T20358]  ? __pfx_genl_rcv_msg+0x10/0x10
[  314.065339][T20358]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  314.065352][T20358]  ? lock_release+0x4b/0x3e0
[  314.065364][T20358]  ? down_read+0x1ad/0x2e0
[  314.065371][T20358]  genl_rcv+0x28/0x40
[  314.065378][T20358]  netlink_unicast+0x82f/0x9e0
[  314.065390][T20358]  ? __pfx_netlink_unicast+0x10/0x10
[  314.065400][T20358]  ? netlink_sendmsg+0x642/0xb30
[  314.065411][T20358]  ? skb_put+0x11b/0x210
[  314.065419][T20358]  netlink_sendmsg+0x805/0xb30
[  314.065432][T20358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.065443][T20358]  ? futex_unqueue+0x22/0x240
[  314.065453][T20358]  ? aa_sock_msg_perm+0xf1/0x1d0
[  314.065461][T20358]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  314.065477][T20358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.065490][T20358]  __sock_sendmsg+0x21c/0x270
[  314.065503][T20358]  ____sys_sendmsg+0x505/0x830
[  314.065514][T20358]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.065525][T20358]  ? import_iovec+0x74/0xa0
[  314.065537][T20358]  ___sys_sendmsg+0x21f/0x2a0
[  314.065547][T20358]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.065559][T20358]  ? futex_wait+0x285/0x360
[  314.065575][T20358]  ? __fget_files+0x2a/0x420
[  314.065587][T20358]  ? __fget_files+0x3a0/0x420
[  314.065616][T20358]  __x64_sys_sendmsg+0x19b/0x260
[  314.065626][T20358]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  314.065638][T20358]  ? rcu_is_watching+0x15/0xb0
[  314.065647][T20358]  do_syscall_64+0xfa/0x3b0
[  314.065661][T20358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.065669][T20358]  ? exc_page_fault+0x9f/0xf0
[  314.065679][T20358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.065688][T20358] RIP: 0033:0x7fc057b8ebe9
[  314.065697][T20358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.065705][T20358] RSP: 002b:00007fc05897c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.065715][T20358] RAX: ffffffffffffffda RBX: 00007fc057db5fa0 RCX: 00007fc057b8ebe9
[  314.065722][T20358] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  314.065728][T20358] RBP: 00007fc057c11e19 R08: 0000000000000000 R09: 0000000000000000
[  314.065734][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.065739][T20358] R13: 00007fc057db6038 R14: 00007fc057db5fa0 R15: 00007ffe33c71c58
[  314.065749][T20358]  </TASK>
[  314.277599][T20364] netlink: 'syz.2.3879': attribute type 9 has an invalid length.
[  314.721210][T20382] lo speed is unknown, defaulting to 1000
[  314.767742][T20382] lo speed is unknown, defaulting to 1000
[  314.886594][T20393] syzkaller1: entered promiscuous mode
[  314.888451][T20393] syzkaller1: entered allmulticast mode
[  315.098086][T20407] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[  315.107369][T20408] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[  315.374097][T20426] netlink: 'syz.3.3894': attribute type 9 has an invalid length.
[  315.501176][T20430] netlink: 'syz.1.3896': attribute type 10 has an invalid length.
[  315.509289][T20432] pim6reg1: entered promiscuous mode
[  315.512493][T20432] pim6reg1: entered allmulticast mode
[  315.622642][T20438] netlink: 'syz.3.3899': attribute type 10 has an invalid length.
[  315.677267][T20441] ip6gre1: entered allmulticast mode
[  315.794691][T20452] netlink: 'syz.2.3903': attribute type 39 has an invalid length.
[  315.826172][T20448] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode
[  315.829303][T20448] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode
[  315.838539][T20448] ip6gretap0: left allmulticast mode
[  315.842631][T20448] macsec2: left promiscuous mode
[  315.845402][T20448] macsec2: left allmulticast mode
[  315.848628][T20448] ip6gre1: left allmulticast mode
[  315.851758][ T5889] lo speed is unknown, defaulting to 1000
[  315.851807][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.854618][ T5889] syz1: Port: 1 Link DOWN
[  315.856914][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.864529][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.867680][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.994887][T20465] IPv6: sit6: Disabled Multicast RS
[  315.997349][T20465] sit6: entered promiscuous mode
[  316.160779][T20494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.163518][T20494] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  316.165909][T20494] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  316.305344][T20509] netlink: 'syz.3.3919': attribute type 1 has an invalid length.
[  316.310952][T20509] netlink: 'syz.3.3919': attribute type 1 has an invalid length.
[  316.313804][T20509] netlink: 'syz.3.3919': attribute type 1 has an invalid length.
[  316.423441][T20530] mac80211_hwsim hwsim321 wlan1: entered allmulticast mode
[  316.619514][T20551] bond22: (slave erspan0): Releasing active interface
[  316.626881][T20551] veth0_to_bond: left allmulticast mode
[  316.632639][T20551] veth0_to_bond: left promiscuous mode
[  316.635036][T20551] bridge21: port 2(veth0_to_bond) entered disabled state
[  316.640274][T20551] veth13: left allmulticast mode
[  316.642299][T20551] veth13: left promiscuous mode
[  316.644384][T20551] bridge21: port 1(veth13) entered disabled state
[  316.650144][T20551] bond23: (slave veth15): Releasing active interface
[  316.665670][T20551] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  316.842748][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.956447][T20587] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  316.959350][T20587] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  317.022533][T20591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.063910][T20597] tipc: Enabling of bearer <et:g> rejected, media not registered
[  317.105977][T20600] bridge12: entered promiscuous mode
[  317.123822][T20604] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  317.207961][T20619] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode
[  317.211773][T20619] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  317.315403][T20639] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.348150][T20639] tipc: Resetting bearer <eth:syzkaller0>
[  317.373427][T20647] openvswitch: netlink: IP tunnel dst address not specified
[  317.377873][T20647] IPv6: sit8: Disabled Multicast RS
[  317.382308][T20647] sit8: entered allmulticast mode
[  317.521375][T20664] openvswitch: netlink: IP tunnel dst address not specified
[  317.610228][T20677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.615353][T20680] siw: device registration error -23
[  317.699849][T20688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.713163][T20688] tipc: Resetting bearer <eth:syzkaller0>
[  317.766484][T20691] ipvlan0: entered promiscuous mode
[  317.769058][T20691] bridge0: port 1(ipvlan0) entered blocking state
[  317.774314][T20691] bridge0: port 1(ipvlan0) entered disabled state
[  317.778348][T20691] ipvlan0: entered allmulticast mode
[  317.780694][T20691] 1{X: entered allmulticast mode
[  317.784175][T20691] ipvlan0: left allmulticast mode
[  317.786249][T20691] 1{X: left allmulticast mode
[  317.857350][T20696] __nla_validate_parse: 26 callbacks suppressed
[  317.857362][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'.
[  317.863945][T20697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3965'.
[  317.911397][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'.
[  317.930774][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'.
[  317.973359][T20707] sctp: [Deprecated]: syz.3.3969 (pid 20707) Use of int in max_burst socket option.
[  317.973359][T20707] Use struct sctp_assoc_value instead
[  318.071140][T20718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3974'.
[  318.075034][T20719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3974'.
[  318.239179][T20727] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3976'.
[  318.424195][  T791] lo speed is unknown, defaulting to 1000
[  318.426576][  T791] syz1: Port: 1 Link ACTIVE
[  318.438976][T20735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.496893][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3979'.
[  318.507716][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3979'.
[  318.553188][T20741] mac80211_hwsim hwsim54 wlan0: left promiscuous mode
[  318.558599][T20741] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode
[  318.561628][T20741] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode
[  318.573107][T20741] bridge12: left promiscuous mode
[  318.575364][   T10] lo speed is unknown, defaulting to 1000
[  318.577555][   T10] syz1: Port: 1 Link DOWN
[  318.681171][T20745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3981'.
[  318.684916][T20745] openvswitch: netlink: Flow actions attr not present in new flow.
[  319.118356][T20778] validate_nla: 19 callbacks suppressed
[  319.118370][T20778] netlink: 'syz.3.3988': attribute type 5 has an invalid length.
[  319.137882][T20778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  319.274467][T20812] netlink: 'syz.2.3996': attribute type 4 has an invalid length.
[  319.310080][T20812] block nbd0: must specify backend
[  319.314208][T20820] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.349070][T20823] rdma_rxe: rxe_newlink: failed to add lo
[  319.352324][T20824] netlink: 'syz.1.4000': attribute type 1 has an invalid length.
[  319.367009][T20824] 8021q: adding VLAN 0 to HW filter on device bond25
[  319.376517][T20824] 8021q: adding VLAN 0 to HW filter on device bond25
[  319.378824][T20824] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  319.383368][T20824] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  319.437796][T20836] veth17: entered promiscuous mode
[  319.441673][T20836] bond25: (slave veth17): Enslaving as an active interface with a down link
[  319.512313][T20843] lo speed is unknown, defaulting to 1000
[  319.548399][T20848] syz0: rxe_newlink: already configured on lo
[  319.556297][T20843] lo speed is unknown, defaulting to 1000
[  320.038178][   T61] block nbd0: Possible stuck request ffff888022448000: control (read@0,1024B). Runtime 150 seconds
[  320.042491][   T61] block nbd0: Possible stuck request ffff888022448200: control (read@1024,1024B). Runtime 150 seconds
[  320.046188][   T61] block nbd0: Possible stuck request ffff888022448400: control (read@2048,1024B). Runtime 150 seconds
[  320.050205][   T61] block nbd0: Possible stuck request ffff888022448600: control (read@3072,1024B). Runtime 150 seconds
[  320.094577][T20881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.150188][ T2315] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.261656][T20891] netlink: 'syz.2.4017': attribute type 10 has an invalid length.
[  320.596208][T20897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.599361][T20897] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  320.602029][T20897] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  320.605431][T20897] netlink: 'syz.3.4019': attribute type 1 has an invalid length.
[  320.609723][T20897] netlink: 'syz.3.4019': attribute type 3 has an invalid length.
[  320.642987][T20901] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  320.647415][T20901] CPU: 0 UID: 0 PID: 20901 Comm: syz.1.4020 Not tainted syzkaller #0 PREEMPT(full) 
[  320.647428][T20901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.647434][T20901] Call Trace:
[  320.647440][T20901]  <TASK>
[  320.647445][T20901]  dump_stack_lvl+0x189/0x250
[  320.647462][T20901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.647472][T20901]  ? __pfx__printk+0x10/0x10
[  320.647484][T20901]  ? kernfs_root+0x1c/0x230
[  320.647495][T20901]  ? kernfs_path_from_node+0x2f/0x290
[  320.647503][T20901]  ? kernfs_path_from_node+0x250/0x290
[  320.647510][T20901]  ? kernfs_path_from_node+0x2f/0x290
[  320.647519][T20901]  sysfs_warn_dup+0x8e/0xa0
[  320.647528][T20901]  sysfs_do_create_link_sd+0xc0/0x110
[  320.647537][T20901]  device_add_class_symlinks+0x1cf/0x240
[  320.647548][T20901]  device_add+0x475/0xb50
[  320.647556][T20901]  wiphy_register+0x1ba6/0x28d0
[  320.647598][T20901]  ? __pfx_wiphy_register+0x10/0x10
[  320.647609][T20901]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  320.647620][T20901]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  320.647636][T20901]  ieee80211_register_hw+0x3425/0x4080
[  320.647649][T20901]  ? ieee80211_register_hw+0x14a1/0x4080
[  320.647658][T20901]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  320.647667][T20901]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  320.647681][T20901]  ? __hrtimer_setup+0x187/0x210
[  320.647689][T20901]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  320.647703][T20901]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  320.647718][T20901]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  320.647727][T20901]  ? trace_kmalloc+0x1f/0xd0
[  320.647738][T20901]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  320.647748][T20901]  ? kstrndup+0xbf/0x160
[  320.647759][T20901]  hwsim_new_radio_nl+0xea4/0x1b10
[  320.647769][T20901]  ? __pfx___nla_validate_parse+0x10/0x10
[  320.647793][T20901]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.647810][T20901]  ? __nla_parse+0x40/0x60
[  320.647827][T20901]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  320.647848][T20901]  genl_family_rcv_msg_doit+0x215/0x300
[  320.647858][T20901]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  320.647869][T20901]  ? bpf_lsm_capable+0x9/0x20
[  320.647881][T20901]  ? security_capable+0x7e/0x2e0
[  320.647894][T20901]  genl_rcv_msg+0x60e/0x790
[  320.647903][T20901]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.647911][T20901]  ? __kasan_slab_alloc+0x6c/0x80
[  320.647922][T20901]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  320.647932][T20901]  ? __netlink_lookup+0xbd/0x810
[  320.647938][T20901]  ? rcu_is_watching+0x15/0xb0
[  320.647949][T20901]  netlink_rcv_skb+0x208/0x470
[  320.647961][T20901]  ? __pfx_genl_rcv_msg+0x10/0x10
[  320.647969][T20901]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.647981][T20901]  ? lock_release+0x4b/0x3e0
[  320.647995][T20901]  ? down_read+0x1ad/0x2e0
[  320.648003][T20901]  genl_rcv+0x28/0x40
[  320.648010][T20901]  netlink_unicast+0x82f/0x9e0
[  320.648021][T20901]  ? __pfx_netlink_unicast+0x10/0x10
[  320.648031][T20901]  ? netlink_sendmsg+0x642/0xb30
[  320.648041][T20901]  ? skb_put+0x11b/0x210
[  320.648051][T20901]  netlink_sendmsg+0x805/0xb30
[  320.648065][T20901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.648076][T20901]  ? futex_unqueue+0x22/0x240
[  320.648085][T20901]  ? aa_sock_msg_perm+0xf1/0x1d0
[  320.648096][T20901]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.648104][T20901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.648115][T20901]  __sock_sendmsg+0x21c/0x270
[  320.648126][T20901]  ____sys_sendmsg+0x505/0x830
[  320.648136][T20901]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.648146][T20901]  ? import_iovec+0x74/0xa0
[  320.648156][T20901]  ___sys_sendmsg+0x21f/0x2a0
[  320.648164][T20901]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.648173][T20901]  ? futex_wait+0x285/0x360
[  320.648189][T20901]  ? __fget_files+0x2a/0x420
[  320.648202][T20901]  ? __fget_files+0x3a0/0x420
[  320.648214][T20901]  __x64_sys_sendmsg+0x19b/0x260
[  320.648222][T20901]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.648232][T20901]  ? rcu_is_watching+0x15/0xb0
[  320.648240][T20901]  ? rcu_is_watching+0x15/0xb0
[  320.648248][T20901]  do_syscall_64+0xfa/0x3b0
[  320.648261][T20901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.648270][T20901]  ? exc_page_fault+0x9f/0xf0
[  320.648279][T20901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.648287][T20901] RIP: 0033:0x7f249c58ebe9
[  320.648295][T20901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.648304][T20901] RSP: 002b:00007f249d32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.648314][T20901] RAX: ffffffffffffffda RBX: 00007f249c7b5fa0 RCX: 00007f249c58ebe9
[  320.648320][T20901] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  320.648326][T20901] RBP: 00007f249c611e19 R08: 0000000000000000 R09: 0000000000000000
[  320.648331][T20901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.648336][T20901] R13: 00007f249c7b6038 R14: 00007f249c7b5fa0 R15: 00007ffc083a00b8
[  320.648346][T20901]  </TASK>
[  320.699916][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.815344][T20908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.820401][T20908] IPv6: NLM_F_CREATE should be set when creating new route
[  320.849916][ T2315] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.866505][T20914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.881842][T20915] vlan3: entered promiscuous mode
[  320.884058][T20915] bond0: entered promiscuous mode
[  320.927705][T20922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.959724][T20926] netlink: 'syz.3.4026': attribute type 16 has an invalid length.
[  320.963007][T20926] netlink: 'syz.3.4026': attribute type 3 has an invalid length.
[  321.147515][T20947] IPVS: Error connecting to the multicast addr
[  321.734556][T20985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.895196][T20993] netlink: 'syz.3.4045': attribute type 13 has an invalid length.
[  321.911847][T20993] lo speed is unknown, defaulting to 1000
[  321.968836][T20993] lo speed is unknown, defaulting to 1000
[  322.192098][T21023] netlink: 'syz.1.4052': attribute type 9 has an invalid length.
[  322.744122][T21051] mac80211_hwsim hwsim107 syzkaller0: left promiscuous mode
[  322.746956][T21051] mac80211_hwsim hwsim107 syzkaller0: left allmulticast mode
[  322.997952][T21069] __nla_validate_parse: 23 callbacks suppressed
[  322.997963][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'.
[  323.197425][T21115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4063'.
[  323.222766][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'.
[  323.503819][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4065'.
[  324.268362][T21166] validate_nla: 1 callbacks suppressed
[  324.268375][T21166] netlink: 'syz.3.4069': attribute type 13 has an invalid length.
[  324.293757][T21166] netlink: 'syz.3.4069': attribute type 17 has an invalid length.
[  324.669353][T21166] ip6gretap0: left promiscuous mode
[  324.758875][T21166] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  324.802724][   T10] lo speed is unknown, defaulting to 1000
[  324.827544][   T10] syz1: Port: 1 Link ACTIVE
[  324.923265][T21176] netlink: 'syz.1.4071': attribute type 13 has an invalid length.
[  324.982026][T21179] netlink: 'syz.1.4071': attribute type 1 has an invalid length.
[  324.984724][T21179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4071'.
[  325.015710][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'.
[  325.018516][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4072'.
[  325.187438][T21201] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode
[  325.192260][T21201] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode
[  325.326378][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4081'.
[  325.351620][T21218] lo speed is unknown, defaulting to 1000
[  325.426704][T21217] lo speed is unknown, defaulting to 1000
[  325.431826][T21218] lo speed is unknown, defaulting to 1000
[  325.491034][T21231] netlink: 'syz.1.4083': attribute type 12 has an invalid length.
[  325.524922][T21234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4084'.
[  325.529272][T21234] erspan0: left allmulticast mode
[  325.531811][T21234] dummy0: left allmulticast mode
[  325.537819][T21234] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  325.546620][T21217] lo speed is unknown, defaulting to 1000
[  325.744650][T21248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.752883][T21248] sch_fq: defrate 257 ignored.
[  325.812660][T21254] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  325.816546][T21254] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4090'.
[  325.891099][T21256] tipc: New replicast peer: 255.255.255.255
[  325.893430][T21256] tipc: Enabled bearer <udp:s>, priority 10
[  325.962686][T21264] tap0: tun_chr_ioctl cmd 1074025680
[  325.965112][T21264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.970335][T21264] mac80211_hwsim hwsim107 D: renamed from syzkaller0
[  325.974105][T21264] tipc: Disabling bearer <eth:syzkaller0>
[  326.067539][T21279] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  326.071183][T21283] netlink: 'syz.1.4100': attribute type 13 has an invalid length.
[  326.077383][T21280] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  326.084219][T21283] 1{X: refused to change device tx_queue_len
[  326.086323][T21283] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  326.377503][T21311] netlink: 'syz.3.4107': attribute type 5 has an invalid length.
[  327.313174][T21350] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  327.441621][T21353] netlink: 'syz.1.4120': attribute type 12 has an invalid length.
[  327.444188][T21352] netlink: 'syz.1.4120': attribute type 12 has an invalid length.
[  327.866766][T21395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.870313][T21395] syzkaller0: entered promiscuous mode
[  327.872544][T21395] syzkaller0: entered allmulticast mode
[  327.882999][T21395] tipc: Resetting bearer <eth:syzkaller0>
[  327.898546][T21396] tipc: Resetting bearer <eth:syzkaller0>
[  327.902939][T21396] tipc: Disabling bearer <eth:syzkaller0>
[  327.909248][T21400] pim6reg: entered allmulticast mode
[  327.918859][T21400] pim6reg: left allmulticast mode
[  328.032976][T21417] netlink: 'syz.3.4133': attribute type 23 has an invalid length.
[  328.158318][T21436] syzkaller1: entered promiscuous mode
[  328.161404][T21436] syzkaller1: entered allmulticast mode
[  328.164644][T21436] __nla_validate_parse: 8 callbacks suppressed
[  328.164654][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'.
[  328.169403][T21436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4137'.
[  328.586786][T21449] mac80211_hwsim hwsim107 D: left promiscuous mode
[  328.589483][T21449] mac80211_hwsim hwsim107 D: left allmulticast mode
[  328.592980][   T10] lo speed is unknown, defaulting to 1000
[  328.597352][   T10] syz1: Port: 1 Link DOWN
[  328.624589][T21449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4141'.
[  328.832027][T21466] block nbd2: Unsupported socket: shutdown callout must be supported.
[  328.835586][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'.
[  328.843825][T21466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4147'.
[  328.903478][T21472] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.907915][T21472] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  329.377069][T21486] validate_nla: 1 callbacks suppressed
[  329.377084][T21486] netlink: 'syz.1.4154': attribute type 16 has an invalid length.
[  329.384218][T21486] netlink: 'syz.1.4154': attribute type 17 has an invalid length.
[  329.389269][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'.
[  329.692625][T21508] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  329.695049][T21508] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  329.697718][T21508] tipc: Resetting bearer <eth:syzkaller0>
[  330.340541][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4166'.
[  330.537999][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4167'.
[  330.611851][T21545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4167'.
[  330.699126][T21549] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4169'.
[  330.761016][T21556] netlink: 'syz.1.4172': attribute type 10 has an invalid length.
[  330.768855][T21556] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  330.837448][T21558] netlink: 'syz.1.4173': attribute type 5 has an invalid length.
[  330.905467][T21573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.965487][T21574] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  330.968204][T21574] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  331.010261][T21576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.012915][T21576] syzkaller0: entered promiscuous mode
[  331.014785][T21576] syzkaller0: entered allmulticast mode
[  331.024630][T21575] tipc: Resetting bearer <eth:syzkaller0>
[  331.028604][T21575] tipc: Disabling bearer <eth:syzkaller0>
[  331.941265][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  331.976761][T21603] pim6reg1: entered promiscuous mode
[  331.978569][T21603] pim6reg1: entered allmulticast mode
[  332.080264][T21603] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  332.082529][T21603] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  332.095422][T21603] tipc: Resetting bearer <eth:syzkaller0>
[  332.242956][T21637] sctp: [Deprecated]: syz.2.4192 (pid 21637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.242956][T21637] Use struct sctp_sack_info instead
[  332.250603][T21632] sctp: [Deprecated]: syz.3.4191 (pid 21632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.250603][T21632] Use struct sctp_sack_info instead
[  332.266171][T21632] netlink: 'syz.3.4191': attribute type 11 has an invalid length.
[  332.268816][T21632] netlink: 'syz.3.4191': attribute type 11 has an invalid length.
[  332.277218][T21636] netlink: 'syz.1.4193': attribute type 10 has an invalid length.
[  332.277223][T21640] netlink: 'syz.1.4193': attribute type 10 has an invalid length.
[  332.282487][T21632] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  332.286123][T21632] CPU: 1 UID: 0 PID: 21632 Comm: syz.3.4191 Not tainted syzkaller #0 PREEMPT(full) 
[  332.286136][T21632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.286143][T21632] Call Trace:
[  332.286147][T21632]  <TASK>
[  332.286152][T21632]  dump_stack_lvl+0x189/0x250
[  332.286171][T21632]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.286181][T21632]  ? __pfx__printk+0x10/0x10
[  332.286194][T21632]  ? kernfs_root+0x1c/0x230
[  332.286206][T21632]  ? kernfs_path_from_node+0x2f/0x290
[  332.286216][T21632]  ? kernfs_path_from_node+0x250/0x290
[  332.286225][T21632]  ? kernfs_path_from_node+0x2f/0x290
[  332.286235][T21632]  sysfs_warn_dup+0x8e/0xa0
[  332.286245][T21632]  sysfs_do_create_link_sd+0xc0/0x110
[  332.286254][T21632]  device_add_class_symlinks+0x1cf/0x240
[  332.286265][T21632]  device_add+0x475/0xb50
[  332.286275][T21632]  wiphy_register+0x1ba6/0x28d0
[  332.286292][T21632]  ? __pfx_wiphy_register+0x10/0x10
[  332.286302][T21632]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  332.286314][T21632]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  332.286331][T21632]  ieee80211_register_hw+0x3425/0x4080
[  332.286343][T21632]  ? ieee80211_register_hw+0x14a1/0x4080
[  332.286353][T21632]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  332.286362][T21632]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  332.286398][T21632]  ? __hrtimer_setup+0x187/0x210
[  332.286407][T21632]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  332.286420][T21632]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  332.286436][T21632]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  332.286447][T21632]  ? trace_kmalloc+0x1f/0xd0
[  332.286458][T21632]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  332.286470][T21632]  ? kstrndup+0xbf/0x160
[  332.286481][T21632]  hwsim_new_radio_nl+0xea4/0x1b10
[  332.286491][T21632]  ? __pfx___nla_validate_parse+0x10/0x10
[  332.286506][T21632]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  332.286518][T21632]  ? __nla_parse+0x40/0x60
[  332.286529][T21632]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  332.286541][T21632]  genl_family_rcv_msg_doit+0x215/0x300
[  332.286552][T21632]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  332.286569][T21632]  ? bpf_lsm_capable+0x9/0x20
[  332.286582][T21632]  ? security_capable+0x7e/0x2e0
[  332.286597][T21632]  genl_rcv_msg+0x60e/0x790
[  332.286608][T21632]  ? __pfx_genl_rcv_msg+0x10/0x10
[  332.286617][T21632]  ? __kasan_slab_alloc+0x6c/0x80
[  332.286628][T21632]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  332.286638][T21632]  ? __netlink_lookup+0xbd/0x810
[  332.286644][T21632]  ? rcu_is_watching+0x15/0xb0
[  332.286655][T21632]  netlink_rcv_skb+0x208/0x470
[  332.286666][T21632]  ? __pfx_genl_rcv_msg+0x10/0x10
[  332.286675][T21632]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  332.286688][T21632]  ? lock_release+0x4b/0x3e0
[  332.286700][T21632]  ? down_read+0x1ad/0x2e0
[  332.286707][T21632]  genl_rcv+0x28/0x40
[  332.286715][T21632]  netlink_unicast+0x82f/0x9e0
[  332.286726][T21632]  ? __pfx_netlink_unicast+0x10/0x10
[  332.286736][T21632]  ? netlink_sendmsg+0x642/0xb30
[  332.286747][T21632]  ? skb_put+0x11b/0x210
[  332.286755][T21632]  netlink_sendmsg+0x805/0xb30
[  332.286768][T21632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.286780][T21632]  ? aa_sock_msg_perm+0xf1/0x1d0
[  332.286788][T21632]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  332.286797][T21632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.286808][T21632]  __sock_sendmsg+0x21c/0x270
[  332.286819][T21632]  ____sys_sendmsg+0x505/0x830
[  332.286828][T21632]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.286837][T21632]  ? import_iovec+0x74/0xa0
[  332.286848][T21632]  ___sys_sendmsg+0x21f/0x2a0
[  332.286856][T21632]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.286865][T21632]  ? futex_wake+0x4b2/0x560
[  332.286881][T21632]  ? __fget_files+0x2a/0x420
[  332.286893][T21632]  ? __fget_files+0x3a0/0x420
[  332.286906][T21632]  __x64_sys_sendmsg+0x19b/0x260
[  332.286914][T21632]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  332.286924][T21632]  ? rcu_is_watching+0x15/0xb0
[  332.286933][T21632]  ? rcu_is_watching+0x15/0xb0
[  332.286941][T21632]  do_syscall_64+0xfa/0x3b0
[  332.286953][T21632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.286962][T21632]  ? exc_page_fault+0x9f/0xf0
[  332.286974][T21632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.286983][T21632] RIP: 0033:0x7f791ad8ebe9
[  332.286992][T21632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.287000][T21632] RSP: 002b:00007f791bc24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.287010][T21632] RAX: ffffffffffffffda RBX: 00007f791afb5fa0 RCX: 00007f791ad8ebe9
[  332.287017][T21632] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  332.287023][T21632] RBP: 00007f791ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  332.287029][T21632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.287035][T21632] R13: 00007f791afb6038 R14: 00007f791afb5fa0 R15: 00007ffd6e176418
[  332.287045][T21632]  </TASK>
[  332.438796][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.494401][T21657] dvmrp8: entered allmulticast mode
[  332.507012][T21657] lo speed is unknown, defaulting to 1000
[  332.554729][T21662] netlink: 'syz.3.4198': attribute type 23 has an invalid length.
[  332.564326][T21657] lo speed is unknown, defaulting to 1000
[  332.588114][T21655] dvmrp8: left allmulticast mode
[  332.613944][T21671] netlink: 'syz.2.4200': attribute type 10 has an invalid length.
[  332.616544][T21672] netlink: 'syz.2.4200': attribute type 10 has an invalid length.
[  332.651668][T21676] netlink: 'syz.2.4202': attribute type 1 has an invalid length.
[  332.654110][T21676] NCSI netlink: No device for ifindex 0
[  332.815276][T21688] 8021q: adding VLAN 0 to HW filter on device bond28
[  332.821633][T21688] mac80211_hwsim hwsim130 wlan0: left promiscuous mode
[  332.821973][T21698] sctp: [Deprecated]: syz.1.4207 (pid 21698) Use of int in maxseg socket option.
[  332.821973][T21698] Use struct sctp_assoc_value instead
[  332.831375][T21698] tipc: Resetting bearer <eth:syzkaller0>
[  333.691686][T21732] __nla_validate_parse: 17 callbacks suppressed
[  333.691699][T21732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4214'.
[  333.730497][T21737] tipc: Resetting bearer <eth:syzkaller0>
[  334.563616][T21761] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.567717][T21761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4222'.
[  334.572897][T21761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.764155][T21769] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4224'.
[  334.846235][T21775] validate_nla: 7 callbacks suppressed
[  334.846248][T21775] netlink: 'syz.1.4226': attribute type 4 has an invalid length.
[  334.852001][T21775] netlink: 'syz.1.4226': attribute type 4 has an invalid length.
[  334.855980][ T2315] lo speed is unknown, defaulting to 1000
[  334.857774][ T2315] syz0: Port: 1 Link ACTIVE
[  334.859202][ T2315] lo speed is unknown, defaulting to 1000
[  334.971301][T21799] IPv6: Can't replace route, no match found
[  335.081808][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4234'.
[  335.084644][T21821] netlink: 'syz.3.4234': attribute type 7 has an invalid length.
[  335.086984][T21821] netlink: 'syz.3.4234': attribute type 8 has an invalid length.
[  335.089273][T21821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4234'.
[  335.093491][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'.
[  335.097586][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'.
[  335.097612][ T5744] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.103217][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'.
[  335.106163][ T5744] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.117306][ T5744] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.125137][ T5744] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.155871][T21831] netlink: 'syz.3.4237': attribute type 4 has an invalid length.
[  335.158775][T21833] netlink: 'syz.3.4237': attribute type 4 has an invalid length.
[  335.167827][T21826] tipc: Resetting bearer <eth:ipvlan1>
[  335.169704][   T10] lo speed is unknown, defaulting to 1000
[  335.171245][ T5975] lo speed is unknown, defaulting to 1000
[  335.242650][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'.
[  335.288729][T21847] pim6reg1: entered promiscuous mode
[  335.296897][T21847] pim6reg1: entered allmulticast mode
[  335.301622][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'.
[  335.306539][T21847] tipc: Resetting bearer <eth:ipvlan1>
[  335.339032][T21852] lo speed is unknown, defaulting to 1000
[  335.385077][T21852] lo speed is unknown, defaulting to 1000
[  335.391208][T21856] vlan0: entered promiscuous mode
[  335.392850][T21856] veth1: entered promiscuous mode
[  335.461995][T21865] : renamed from bond_slave_0
[  335.479313][T21870] netlink: 'syz.1.4248': attribute type 1 has an invalid length.
[  335.484589][T21870] netlink: 'syz.1.4248': attribute type 2 has an invalid length.
[  335.534762][T21870] netlink: 'syz.1.4248': attribute type 9 has an invalid length.
[  335.536223][T21878] can: request_module (can-proto-0) failed.
[  335.586226][T21881] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  335.677182][T21888] bond0: Device is already in use.
[  335.695430][T21891] sctp: [Deprecated]: syz.2.4255 (pid 21891) Use of struct sctp_assoc_value in delayed_ack socket option.
[  335.695430][T21891] Use struct sctp_sack_info instead
[  335.883064][T21911] netlink: 'syz.2.4261': attribute type 11 has an invalid length.
[  335.923040][T21915] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  335.965023][T21924] bond0: Device is already in use.
[  336.042534][T21938] 8021q: adding VLAN 0 to HW filter on device bond29
[  336.552965][T21955] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  336.555419][T21955] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  336.764118][T21966] tipc: Resetting bearer <eth:ipvlan1>
[  336.773719][T21966] vlan0: left promiscuous mode
[  336.775266][T21966] veth1: left promiscuous mode
[  336.777018][T21966] mac80211_hwsim hwsim293 wlan0: left promiscuous mode
[  336.779301][T21966] veth15: left promiscuous mode
[  336.782972][T21966] veth17: left promiscuous mode
[  336.787152][ T5975] lo speed is unknown, defaulting to 1000
[  336.788965][ T5975] syz0: Port: 1 Link DOWN
[  336.791624][ T5975] lo speed is unknown, defaulting to 1000
[  337.706893][T22043] syzkaller1: entered allmulticast mode
[  337.709740][T22043] syzkaller1: left allmulticast mode
[  337.908660][T22058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.914572][ T3145] lo speed is unknown, defaulting to 1000
[  337.918551][ T3145] syz0: Port: 1 Link ACTIVE
[  337.921247][ T3145] lo speed is unknown, defaulting to 1000
[  337.949746][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.004842][T22073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.018889][T22073] 8021q: adding VLAN 0 to HW filter on device bond9
[  338.024116][T22073] bond9 (unregistering): Released all slaves
[  338.128563][   T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.134158][   T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.137039][   T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.140089][   T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.165213][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.167807][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.569078][T22123] lo speed is unknown, defaulting to 1000
[  338.601454][T22127] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.604054][T22127] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  338.611959][T22123] lo speed is unknown, defaulting to 1000
[  338.629871][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.772921][T22139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.783513][T22137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.956955][T22143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.960155][T22143] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  338.962497][T22143] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  338.965320][T22143] tipc: Resetting bearer <eth:syzkaller0>
[  339.024823][T22153] tipc: Resetting bearer <eth:syzkaller0>
[  339.029375][T22153] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  339.032309][T22153] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  339.038085][ T5975] lo speed is unknown, defaulting to 1000
[  339.041818][ T5975] syz0: Port: 1 Link DOWN
[  339.043462][ T5975] lo speed is unknown, defaulting to 1000
[  339.087930][T22155] veth0_to_bond: left allmulticast mode
[  339.101331][T22155] tipc: Resetting bearer <eth:syzkaller0>
[  339.128346][T22155] sit6: left promiscuous mode
[  339.159028][T22155] __nla_validate_parse: 31 callbacks suppressed
[  339.159043][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4321'.
[  339.218413][T22165] tap0: tun_chr_ioctl cmd 1074025678
[  339.222548][T22165] tap0: group set to 0
[  339.286910][T22173] tipc: Resetting bearer <eth:syzkaller0>
[  339.331200][T22176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4327'.
[  339.722155][T22201] tipc: Resetting bearer <eth:syzkaller0>
[  339.803331][T22203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.213693][T22212] 8021q: adding VLAN 0 to HW filter on device bond12
[  340.261178][T22218] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  340.263849][T22218] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  340.267304][T22218] tipc: Resetting bearer <eth:syzkaller0>
[  340.282500][T22220] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.304586][T22220] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  340.311806][T22220] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  340.320869][T22220] tipc: Resetting bearer <eth:syzkaller0>
[  340.512256][T22234] tipc: Resetting bearer <eth:ipvlan1>
[  340.514138][T22234] tipc: Resetting bearer <eth:ipvlan1>
[  340.516238][T22235] tipc: Resetting bearer <eth:ipvlan1>
[  340.518551][T22235] tipc: Resetting bearer <eth:ipvlan1>
[  340.604850][T22245] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.631525][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4347'.
[  340.634538][T22250] IPv6: Can't replace route, no match found
[  340.730074][T22255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.773669][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4352'.
[  340.781794][T22258] syz0: rxe_newlink: already configured on lo
[  340.802447][T22260] tipc: Resetting bearer <eth:syzkaller0>
[  340.808815][T22260] tipc: Resetting bearer <eth:syzkaller0>
[  340.892815][T22263] validate_nla: 21 callbacks suppressed
[  340.892829][T22263] netlink: 'syz.2.4354': attribute type 4 has an invalid length.
[  340.984013][T22275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.003681][T22275] tipc: Resetting bearer <eth:syzkaller0>
[  341.135789][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'.
[  341.368162][T22296] lo speed is unknown, defaulting to 1000
[  341.431638][T22296] lo speed is unknown, defaulting to 1000
[  341.682279][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'.
[  341.735668][T22320] netlink: 'syz.3.4369': attribute type 1 has an invalid length.
[  341.742913][T22320] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4369'.
[  341.749219][T22320] vlan3: entered allmulticast mode
[  341.753195][T22320] 1{X: entered allmulticast mode
[  341.802071][T22326] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4371'.
[  341.858808][T22328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4372'.
[  341.951928][T22333] netlink: 'syz.2.4373': attribute type 9 has an invalid length.
[  341.954392][T22333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4373'.
[  342.002908][   T57] block nbd2: Receive control failed (result -32)
[  342.076747][T22350] netlink: 'syz.2.4378': attribute type 10 has an invalid length.
Connection to localhost closed by remote host.
[  343.251705][   T12] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc000: 0000 [#1] SMP KASAN PTI
[  343.256011][   T12] KASAN: probably user-memory-access in range [0x00000000fffe0000-0x00000000fffe0007]
[  343.259744][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  343.263472][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.266967][   T12] Workqueue: netns cleanup_net
[  343.268899][   T12] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  343.270975][   T12] Code: ff ff ff e8 dd 21 41 01 89 c5 31 ff 89 c6 e8 52 56 87 f7 85 ed 74 40 e8 09 52 87 f7 eb 05 e8 02 52 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 3c bb ea f7 4d 8b 27 49 8d 7f 30
[  343.278356][   T12] RSP: 0018:ffffc900000f74b0 EFLAGS: 00010206
[  343.280676][   T12] RAX: 000000001fffc000 RBX: ffff8880236cd538 RCX: ffff88801c2f5640
[  343.283786][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  343.286906][   T12] RBP: 0000000000000000 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  343.290022][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff88810f446828
[  343.293172][   T12] R13: dffffc0000000000 R14: ffff88810f446800 R15: 00000000fffe0000
[  343.296263][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  343.299688][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  343.302334][   T12] CR2: 00007fff760f6ff8 CR3: 000000000df36000 CR4: 00000000000006f0
[  343.305448][   T12] Call Trace:
[  343.306839][   T12]  <TASK>
[  343.308050][   T12]  ipv6_mc_destroy_dev+0x45/0x5a0
[  343.310117][   T12]  addrconf_ifdown+0x139e/0x1880
[  343.312123][   T12]  ? tls_dev_event+0x717/0xec0
[  343.314053][   T12]  ? __pfx_addrconf_ifdown+0x10/0x10
[  343.316206][   T12]  ? lock_release+0x4b/0x3e0
[  343.317947][   T12]  ? net_generic+0x1e/0x240
[  343.319381][   T12]  ? __pfx_tls_dev_event+0x10/0x10
[  343.320953][   T12]  addrconf_notify+0x1bc/0x1010
[  343.322477][   T12]  notifier_call_chain+0x1b6/0x3e0
[  343.324077][   T12]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  343.326085][   T12]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  343.328176][   T12]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  343.330127][   T12]  ? sysfs_remove_group+0x236/0x2c0
[  343.331819][   T12]  ? net_generic+0x1e/0x240
[  343.333252][   T12]  ops_undo_list+0x3dc/0x990
[  343.334683][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  343.336254][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  343.337817][   T12]  cleanup_net+0x4c5/0x800
[  343.339200][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  343.340728][   T12]  ? rcu_is_watching+0x15/0xb0
[  343.342136][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  343.343849][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  343.345558][   T12]  process_scheduled_works+0xae1/0x17b0
[  343.347313][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  343.349109][   T12]  worker_thread+0x8a0/0xda0
[  343.350515][   T12]  kthread+0x711/0x8a0
[  343.351776][   T12]  ? __pfx_worker_thread+0x10/0x10
[  343.353306][   T12]  ? __pfx_kthread+0x10/0x10
[  343.354816][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  343.356462][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.358300][   T12]  ? __pfx_kthread+0x10/0x10
[  343.359901][   T12]  ret_from_fork+0x3fc/0x770
[  343.361331][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  343.362907][   T12]  ? __switch_to_asm+0x39/0x70
[  343.364437][   T12]  ? __switch_to_asm+0x33/0x70
[  343.365954][   T12]  ? __pfx_kthread+0x10/0x10
[  343.367401][   T12]  ret_from_fork_asm+0x1a/0x30
[  343.368892][   T12]  </TASK>
[  343.369887][   T12] Modules linked in:
[  343.371478][   T12] ---[ end trace 0000000000000000 ]---
[  343.373865][   T12] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  343.375592][   T12] Code: ff ff ff e8 dd 21 41 01 89 c5 31 ff 89 c6 e8 52 56 87 f7 85 ed 74 40 e8 09 52 87 f7 eb 05 e8 02 52 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 3c bb ea f7 4d 8b 27 49 8d 7f 30
[  343.381594][   T12] RSP: 0018:ffffc900000f74b0 EFLAGS: 00010206
[  343.383487][   T12] RAX: 000000001fffc000 RBX: ffff8880236cd538 RCX: ffff88801c2f5640
[  343.385924][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  343.388350][   T12] RBP: 0000000000000000 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  343.391030][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff88810f446828
[  343.393493][   T12] R13: dffffc0000000000 R14: ffff88810f446800 R15: 00000000fffe0000
[  343.395938][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  343.398667][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  343.401848][   T12] CR2: 00007fff760f6ff8 CR3: 000000000df36000 CR4: 00000000000006f0
[  343.404325][   T12] Kernel panic - not syncing: Fatal exception
[  343.406804][   T12] Kernel Offset: disabled
[  343.408120][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:07:30  Registers:
info registers vcpu 0

CPU#0
RAX=2440e05e40b4b800 RBX=ffffffff819683b8 RCX=2440e05e40b4b800 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff760f6ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000071 0035343300302d2f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ff000000ff000000 XMM09=742f736575657571 2f35396e616c772f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6c50
R8 =ffff888020e60237 R9 =1ffff110041cc046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8c2 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff760f6ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff0000ff000000 XMM05=0000000000000141 000035163b6c696b
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff000000000000 XMM09=00000000000001d1 003035336c6c696b
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
