last executing test programs:

1.523924809s ago: executing program 1 (id=2277):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x28)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x0, 0xe7, r4, 0x3}, 0xc)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

1.359857346s ago: executing program 1 (id=2281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x6, 0x5, 0x5, 0x7, 0x8}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delqdisc={0x54, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xe, 0x3}, {0xfff2, 0x9}, {0x8, 0xffe3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x54}}, 0x20040054)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
close(r2)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000140)={'wlan0\x00', @remote})
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.05074525s ago: executing program 1 (id=2282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = socket(0x6, 0x2, 0x2000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x8000, 0x0, 0x0, 0x300}})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270)
sendmsg(r2, &(0x7f0000000480)={&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)="4f30423ac371c82aca98e7fb54f28020c074771ae4573f94fb52b7a4e7063dc053c42a92007311e58a91778cb558e3f70c0e96b4995ca1211d26b6ea9e4f3549b07f01ad6ae166c97f55c8dded0255f28a034878105ba3bc802c8a1d6b637bbdb39faf2c931bec41eaccb0b4b2d81c19c4659f0da4da983c2036d5e94067a80789e750f48edc8a8125908ca7f601754d0befe5ab0a472c2ced792936c841d94910ab16fbecfdde565938212a4f407695566da3877dd0999b453234d6f80ce3a7086fbabbfeea7b8b8aed2b1118008d33461accabe3", 0xd5}, {&(0x7f00000007c0)="6c1ab7e097237c0977daeaa595ccd2723398eb87f4d065b74dd2e3013fc549e058726e06ef159d56a0c09a935c0c6ec2614b815926d97a55d58d17594ac1acb142d239cb3361059921f575ff8b883fcc49ff70c943f0ca2ba7707d8e139f3037f09934a89102080963c6202a14b8b81237815a720664c18106239c2788c4541d892c0db98084f83845d823b8062c1bb49f0e9f269198b40e8690e2fe9e0d4a01cbf96f7adb1c4cb0ada843394254273fb30e7fb4349541181207a252e2576db3d4aefdcfa0c143dc325a6212e8c48b1c0a", 0xd1}, {&(0x7f0000000100)="87bbb6c24c8293c25ede0d4975a79773e0eb67fba4c8", 0x16}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000440)="3e3e5f3f1827acd4e531bbd3a7d6e45b180e1f96fd10251c", 0x18}], 0x5, &(0x7f0000000a40)=[{0x88, 0x109, 0x6, "863695b100cd65bfda76be1ce31782015c7c53892218292fec40b3e6525c7a04bc105215fe9da26abd02e3054945804d67292efaa5cd573623cca9cd6bcd8c9b37cccac62c1dd4d74cb7fffac42db7e0fb43c31cb55bd567f80827921959d1b16697ddaa1731a33ca012ff3b1f3d4e18c6e2e1a3"}, {0x80, 0x10f, 0x3, "a081a9dd196fd123afe986a9750fceb2bb60be24277c3402d9ad047868a28c8f2f2a1c3ff7904115c4db3db4e0fbe6c562bf38f06b4cb26d588ac4401e257d7079a36f38e5ff8b845463211bbc3e91dffe95d7d577d26f17823b70ff50bfd7b0e77fef45e8aaab92b0d8e57feb"}, {0x58, 0x102, 0xbe, "69dd863c2079adef829e89e323bb6d04eb6458c38c95cddc35545cb4c9bef2634fb835b70b942a53e08fb1bb00a835d3549976d433ee33336f1de51314246192d66f9baa"}], 0x160}, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

1.050510735s ago: executing program 1 (id=2283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x800) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x800)

979.174318ms ago: executing program 1 (id=2284):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
unshare(0x22020400)
unshare(0x10000400)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780))
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000740)={0x8, 'macvlan0\x00', {'veth0\x00'}, 0x4})
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r2, 0x5}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x0, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
sendmsg$nl_netfilter(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002"], 0x30}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x7, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="3c3a9763928b166b74b2768113cf3c37b7f6070f1c56cf8e1910f1f235f7a0c4160183b513ee0ed700cb09879c3e9eb253d5d8e753769009cdc83859c3c7cde79940247299c39b6410876ecfffd279d5778004138bfa888b4406739e97c1170ca506bec196fd5906d0f8c8d287560cec437e0b657e5e6950b14ccce133d2da5a5a", 0x81}, {&(0x7f0000000440)="46de1dcbeef6a819fd1b5fc8f3e67758a974d5056e8d76db01fa79a56ba144979a188ab01eb6d8c753b90ddf93e4e57a9997eafc91886313227841a774a434b7526d950b8cb958bfb2cb4e5ab9c08270625bb04119726b1477540667fa5f824f347c492e0fc0f402edceb07130744e40205bcda92537da8a5d59f3b4bdf77008f43605cd8fec58543fb370ab97cf7ec1f8aa7140602d706dd342d59f066ecee740b4e74f148f68cde17cfa268eb379de8cb57cbbbe5478c06c15d3342cd51459a80999e69aacffa82d767d54128a3997e3b550c9eefa29574ec319af934fe486", 0xe0}], 0x3, &(0x7f0000000540)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1, @generic={0x7}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0xab1, [0x8, 0x0, 0x4ad, 0x32, 0x4]}}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x4, 0x13, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xc, "4f96dc09a1dbcd80b8583fd0"}, @jumbo, @jumbo={0xc2, 0x4, 0xfffffffd}, @jumbo={0xc2, 0x4, 0xa46}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x401, [0x9, 0x4]}}, @jumbo={0xc2, 0x4, 0xe000000}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x1a80, [0x8, 0x400, 0x0, 0x7fffffff, 0x8001, 0x6, 0x1, 0xffffffffffff8524]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x1b8}, 0x4080)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

346.029789ms ago: executing program 0 (id=2295):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000021"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x21, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x40}, @alu={0x7, 0x1, 0x5, 0x7, 0x2, 0x80, 0xfffffffffffffffc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0x6, 0xd7, &(0x7f0000000380)=""/215, 0x41000, 0x4e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0xfffffffc, 0x400}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x8, 0x3}, {0x5, 0x3, 0x4, 0x9}, {0x4, 0x3, 0x3, 0x7}, {0x1, 0x4, 0xb, 0x5}, {0x0, 0x3, 0x3}, {0x1, 0x4, 0x8, 0xb}, {0x3, 0x2, 0xc, 0xb}, {0x0, 0x5, 0x3, 0x8}], 0x10, 0x40}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231b0500240012800800010067726500180002800500f90000000000050013000100000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040)

300.058635ms ago: executing program 0 (id=2297):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x200)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000dffbdbdf25210000000500200041e9ff000b001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)='\f', 0x1}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="c705e395312d4e1a5df95256a640a7570000000087eeb182", 0xffffffffffffffe6)
r8 = accept4(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$alg(r9, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="be520b39ee0eec58dea2bf1efa027df3646073995c1194dfd8e1640e7aef69e5978d8ca658bc98fe3984e39be1d393650084302062687d35b3373223efbbba58f8e01a1b687a950d358232ba4a17ef5c541991b959794208f29eba4c0a27d0facaa937dfc8bd5813d59397afb9835cdef72582a2fd3d0f3d8d931bf19367f7ffe09f7ecad3944a52236d88e726742bfb28425a03595dd1f02063204d5745d52c4dc039ebca2e74cd4edce0770ba2246d8aaeaefc672d05f7b230e7c29040e2af1c677c9930b87a96ee509824c80a5b461f3a18762ba3fd", 0xd7}, {&(0x7f0000000200)="35d23d54d84d0d3c46509b5f068cc04702aed26ba2d81fc46fff24a43acce8cdee822cee5287f4c72034c5666b7e41237b348bf94d33ff5766e85954b94dd2a9528381ceadd9c080cbc680790cd52cd087318a4fd9911092329736a99031f76b2cb1c704c0e8e79c6a5f9fec5a4258a48401d76547b1788dbdae9577f3138864efd058922d184ac5b1d270de9e881287cfd803ed5c69ebee069d58ac84c11d89eacbe5a00c", 0xa5}, {&(0x7f0000000400)="c079b09883300562afbf1441dbd9e2cb3b2d929be5e00e7937ab448971a7dbfbad61ba07cdde07016f83f55456781949444f1eabd5d8f4cdc37a5dd070b25657a585906c3c53ccee5bf5a5152e1b4acdb6a446a4978a4e689272e8dcf8ba762082ab129c855a23fb", 0x68}, {&(0x7f0000000480)="b7d645662f88dd7f3a188182d4deb411b6427b3ace83a0f01176f533b148e925fa3389246f9748be5c6f69fe8c20966997c4bba3eabfc3656911d17b6898d33648eb56721e3c5e6a6d200176cfa37b08ca04b880b046124483df87efdaea48f1a82099a1fee2862910cb08eb23a22972b2ecd05f61eca925cb385e8ee62bf952a41a3f1b458f8c7f652c6b24a67f2156e5ec873f920a3e626af30ea3ebc246e41adfc63f35", 0xa5}, {&(0x7f00000005c0)="393d8c923b54352e545748e732e8dac9d2f37ca999e0a3e06c3038202be0caaa61d2c27cb2a65308cbfb167befac4f66f85dfa9964e38374d0285cadb61aaa5ef5b8ae241a8434d7349789e1b507d7f366778d195d10fdefd1c0e2f95f584cf5c76c0c7c90ef3e2986e37fa3b341c1d7ee578456c4c9bf7817aeccd2c0382f6010053b1a3eaec998f8f647aa885c1f3bb4524e4fd7c3cca2", 0x98}, {&(0x7f0000000540)="e02dd6102ed38e2199c9752ce07053d4bf1585004b48f1d9214eab877f302c852fe45a06eddab0040f92fc36a80e2ab711254d3fd1edd48b40b39eb7c23f0350", 0x40}, {&(0x7f0000000680)="21f590dc23b63ea13f5aafc8047c214914532b22ae3cf65cc7a540b8c20dd10bc89d6f4ef8cc1b5539dc2ee24c99332c9fb1f7942f375082555afaf3d04df4ed54743b06984ffd6783e5ba40c5501fec97609e9265b93919bbe6fddd75d6f49f44d397fdc0a95979255f4eb2f497db48b58f3e04", 0x74}], 0x7, &(0x7f00000007c0)=[@op={0x18}, @iv={0x20, 0x117, 0x2, 0x6, "dcc6eb5e6dce"}, @op={0x18}, @op={0x18}], 0x68, 0x4001}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="4b7cb955af7d007f53da7af50846ca52323a9d121f0999947e7af7ba2700fa5c0ae0ab6bfd8d0ab70b395b6fa1d3851c07e03301afc7a6a1ac6b9f5e3f3e15f229bff7e1efcdcb976e39058d62fcc7f8c51f1d39e2984e1712dd4033d285a10b3508132765f49038ed764af68baaf2582ad078aaa55b2555aac3cfdfaf16ef0f329c21", 0x83}, {&(0x7f0000000980)="99838852c0febf58dc4fcdd22d8e5f1c23f1aa36e6d1b4fb2236d3c46e140666d575beb88e8fa1c7365a6d440ac9f391e8213977bf7bd4ed8e7e278de1e55b1ca0ea226420141a272342d782c8a9c0ee8fa6aadb2cecbae3c7dad3116b4de01929fb21017bf248dc1ac550a8b9cbfd734c4ee62966f195bf2f281dcc5ad1", 0x7e}, {&(0x7f0000000a00)="05d0d0ed0b560db3d9a998bc8a4284084033f1913c340b9666aeda5b93a2fbd14fd31fba5269f005777e54f4fe971f3b46ad680000b05a9592ee13a9d071fec073", 0x41}, {&(0x7f0000000ac0)="2e2e610a87eb7a52b1a2d6b17e54e760667dcfec12923de1d260ce96208ffd9c3a3aa0054a7f51c790e2c2a1a66cac773d6b7e035b83b1f208f4afd7c96ca456ad0f366910f62e6aa7d0ba8a6e774aefe167893fed99727b6d3f983bb48f8cbe672cf65734fcf1506416d847f24a871c5ea9fe951e0d42adf330c8e7fa4fe9e6a5b3412684dba2187135fbe0375d4cf21de7ee5cd98116a458ca995720a07df9e0c32eb2d1c1cde7e69a04535d9ee4f743986f2b2830fe097572c4b7b9251ecd92aaaa9307e6d162f54d673c", 0xcc}, {&(0x7f0000000bc0)="af180d348826e86f54d1d68d9d01d0ae6683cd76d304798427a97fccc513e844c83a4e82286d43543446e25b427e6d6d1fb85a75c26245c7b132b076c46aaee5a8fdd0316ebfdbab3a5292782d8573fb8e1cb7a202e75ed62e2cfb5c98641905818d3c8405c3ff469bad17923c26693e13c03749ae3a43d90cc0c600da", 0x7d}, {&(0x7f0000000c40)="e6eb755e73624e2c2bf86a0657caec4e06aad817bd25e0580363170ca18519e920720e65ba9241c04d11bc87738ed5e5039c7d610c450b31345c4abf64465a4002fccd6ab3c48b0885e32d1ac7ffc4ff745f1ad73f1fb3347cd0eaca06e8be139ee28c0f6251d9d3b1d440a38df1cf6d0d63172b9f942b2d4e6ee769ed932e1836416e9e19a43db956da", 0x8a}, {&(0x7f0000000d00)="8e105f50cfd25f9d792b5feda9c5d524bd3d165bce84cd272d9a0c723a52503dc3d35c00cadfca0e4af8f17989a58b34c57b70550f48bafd182f59b464a642ebad9a4cfb225ef61f810acdd65cf3073f24dfbe6c954fe8966b072722f841489e3b", 0x61}], 0x8, &(0x7f0000000e00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x60, 0x800}], 0x2, 0x20048080)
sendfile(r9, r8, 0x0, 0x5)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x14, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
close(r0)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r11, 0x40000)

298.72669ms ago: executing program 2 (id=2299):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xb, 0x2, 0xd, 0x0, @empty, @remote, 0x7800, 0x7, 0x8, 0x5}})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={<r4=>0x0, 0x6a, "54190b9225fcc654f8a91cedfbdb1f728a60d125d7785bb2fa20bc9df6198d34a3b94623096b17c57559e4713bb823e833dd85aa12a3988c7ecbee56d8c73717138348a08e98538c956dbedea0a90884de2411ae84790996057857969f7e5ddc087d577d05958e2b8884"}, &(0x7f0000000600)=0x72)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000640)={r4, 0x200}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', <r5=>r2, 0x20, 0x80, 0x3, 0xcf, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@lsrr={0x83, 0x3, 0x6a}, @rr={0x7, 0xf, 0xd0, [@local, @broadcast, @multicast1]}, @cipso={0x86, 0x2b, 0x2, [{0x3, 0xa, "18bf0962efd2771b"}, {0x5, 0x12, "c1cd2b2eae9581a4997b879156d7210f"}, {0x6, 0x5, '\v|2'}, {0x6, 0x4, "74cb"}]}, @ssrr={0x89, 0x7, 0xe5, [@local]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', <r6=>0x0, 0x8, 0x8000, 0x7, 0x10000, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x10, 0xbc, 0x0, 0x8, [0x7, 0x10001, 0xa36]}, @noop, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0xb, [{@local, 0x3587}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2a6}, {@multicast1, 0xf}, {@private=0xa010101, 0xbfc1}, {@loopback, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xb7, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb4a}]}, @end, @lsrr={0x83, 0x13, 0xff, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @noop, @end, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd7000fcdbdf250d0000004c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020074756e6c3000000000000000000000000800030003000000140002006970766c616e31000000000000004000"], 0x60}, 0x1, 0x0, 0x0, 0x240080c2}, 0x400)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0xfffffffd, {0x2, 0x14, 0x20, 0x0, 0x0, 0x3, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x0)
r12 = accept4(r7, 0x0, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r12, 0x113, 0x2, &(0x7f0000000040)=<r14=>0x0, &(0x7f0000000080)=0x4)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, 0x15615, 0xef}}, 0x20}}, 0x0)

230.76782ms ago: executing program 2 (id=2300):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

230.17462ms ago: executing program 0 (id=2301):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

228.527184ms ago: executing program 2 (id=2302):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

170.496524ms ago: executing program 0 (id=2303):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x6}, {0x1, 0xf}}}, 0x24}}, 0x20040054)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x3c, 0x3}}]}, 0x48}}, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'})
socket(0x2, 0x80805, 0x0)
close(0x3)
r12 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r12, 0x0)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r13, 0x106, 0x1, &(0x7f0000000000), 0x4)

90.085029ms ago: executing program 2 (id=2304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000146970766c616e0000040002800800050049d52c8684246c13dfd2bcb7a1965ad4c635e6f6e290a0dbba1c35cf1ff298bae49a6d1d92b17cd2fbfd39b213a9d212dc2a8796cfc0595f22eba5b7d89db5b8bc49b3adbee495cb9fab861829a55ab68312ae2f1ec50d219b7eded67ef5f6cf6829c63e71f80000000000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

88.807576ms ago: executing program 1 (id=2305):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYRESHEX=r1], 0x100}}, 0x20000884)
r2 = socket(0x840000000002, 0x3, 0xff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1106}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x40080c0)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
write(r4, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000003b00), 0x0, 0x4004044)
r9 = socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xbffffffe}, {0x80000006, 0x80, 0x9, 0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000070000000000000a00000000100000faff00000a020000769a30e6"], &(0x7f00000000c0)=""/63, 0x33, 0x3f, 0x0, 0x6}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r13, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/33, 0x21, 0x0, &(0x7f0000000180)=""/51, 0x33}}, 0x10)
socket$key(0xf, 0x3, 0x2)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25d7dbfd, {0x0, 0x0, 0x0, r12, {0x10, 0xfff3}, {0x1, 0xc}, {0xfff3, 0xa}}, ["", "", "", ""]}, 0x24}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="09000000010000", 0x7)

87.798644ms ago: executing program 2 (id=2306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x53}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc44}, 0x4000041)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000bb1400a6b5f95ba4318a8e018d7b54b15c0d642167f1"], 0x4c}}, 0x0)

1.204198ms ago: executing program 0 (id=2307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000001a0001000000000000000000816b2826d14e7a760700000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000080dbb8ae7a711081c19f3e000006400003000008008340000001ffc408ce990b0c7c6fdc020000000000000000"], 0x2c}}, 0x4000) (async)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$kcm(0x10, 0x100000000002, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, 'L\x00ZtC\x00', "3eda254a1c2a8d000000000000000700", "29469d6b", "5350b7add205a3ec"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x303}, "e12dc20a892d7dde", "a52cbf2aa84c7c9e38b06f060000001c", "296258a3", "ebee76f27293fe23"}, 0x28) (async, rerun: 64)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r10, 0x6, 0x19, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, 0x1411, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}}, 0x8000) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000580)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x1, 0x8001, 0x200, 0xfffffffffffffffe], 0x10, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x78) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

914.955µs ago: executing program 2 (id=2308):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000008000000000000", @ANYRES32, @ANYBLOB="5a76008069b372000000000000010100e5000000000000796dd4a5155cc0e12bd2f1527c859a7de7aaac02d854", @ANYRES16, @ANYRES32, @ANYBLOB="000085f0a98f5574d9502d0e000000000000050000000000100000000000000000000000000029c0190e5a369f11319abb7c2147f0183bc7bde4892ee628c742dd4ad2de4ede596d4476ce03f8b931f47f865d538772027081ac7dec29265148bb39dc553a8eb4aa123ff742c0f847a8e32405761ea31dbe1e97996629030000000000003e394b3be84d3c0000000000000000bf836fda2d989890d001b37c1d8b028dfcb9caae66ad957fe8187342e70b2cb8245fdb17722ba967d7f655b5c7928a5be0a21d25b054edcfb1b221adae4b56ee70917da8de070020ec15a1ceea0fba0784e96676fea119c0c1bfa08a4c8645498d72ce115826d09cd539760afa10eef92fd5af5b8f097fe53d443ad68b8d5fec32f06dba38aba102d1f72c43842a3c3260d3e3fbe97644c4aba45fffad71d96a28b67960c845f0fc4bbb8e24e8cba4b7"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0x1}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000440)={<r8=>0x0, 0x100, 0x800000000000005c}, &(0x7f0000000400)=0xa)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={r8, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000780), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000700)={'bond0\x00'})

0s ago: executing program 0 (id=2309):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000014)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r1)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000070000000f0000000000000a0400000000000000000000030000000003000000020000007e0e00000000000000000003000000000400000004000000b2ef000009000000000000010000000060001d00002e1361615f00ee4674527d"], &(0x7f0000000380)=""/28, 0x6b, 0x1c, 0x1, 0x6, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="00fb0080000000000000b31dc0a86f98b67500000000000000000000cc316498605652d45969ad3895bf7d3f3e4931651efd51f61f956627774290d452b0e4"], 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x140, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x4e24, 0x4f20, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0x1, 'netbios-ns\x00', {0x8}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x4, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES64=r4], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$SIOCAX25ADDFWD(r11, 0x89ea, &(0x7f00000000c0)={@default, @default})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r7)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, 0x0, 0x81)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFBR(r9, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})

kernel console output (not intermixed with test programs):

0x10/0x10
[  110.909150][T10155]  ? kernfs_root+0x1c/0x230
[  110.909160][T10155]  ? kernfs_path_from_node+0x2f/0x290
[  110.909168][T10155]  ? kernfs_path_from_node+0x250/0x290
[  110.909177][T10155]  ? kernfs_path_from_node+0x2f/0x290
[  110.909184][T10155]  sysfs_warn_dup+0x8e/0xa0
[  110.909191][T10155]  sysfs_do_create_link_sd+0xc0/0x110
[  110.909199][T10155]  device_add_class_symlinks+0x1cf/0x240
[  110.909207][T10155]  device_add+0x475/0xb50
[  110.909215][T10155]  wiphy_register+0x1ba6/0x28d0
[  110.909229][T10155]  ? __pfx_wiphy_register+0x10/0x10
[  110.909238][T10155]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  110.909248][T10155]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  110.909258][T10155]  ieee80211_register_hw+0x3425/0x4080
[  110.909269][T10155]  ? ieee80211_register_hw+0x1441/0x4080
[  110.909279][T10155]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  110.909288][T10155]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.909300][T10155]  ? __hrtimer_setup+0x187/0x210
[  110.909307][T10155]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  110.909318][T10155]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  110.909331][T10155]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  110.909340][T10155]  ? trace_kmalloc+0x1f/0xd0
[  110.909348][T10155]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  110.909358][T10155]  ? kstrndup+0xbf/0x160
[  110.909367][T10155]  hwsim_new_radio_nl+0xea4/0x1b10
[  110.909377][T10155]  ? __pfx___nla_validate_parse+0x10/0x10
[  110.909391][T10155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.909401][T10155]  ? __nla_parse+0x40/0x60
[  110.909411][T10155]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  110.909429][T10155]  genl_family_rcv_msg_doit+0x215/0x300
[  110.909439][T10155]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  110.909449][T10155]  ? bpf_lsm_capable+0x9/0x20
[  110.909459][T10155]  ? security_capable+0x7e/0x2e0
[  110.909471][T10155]  genl_rcv_msg+0x60e/0x790
[  110.909480][T10155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.909487][T10155]  ? __kasan_slab_alloc+0x6c/0x80
[  110.909497][T10155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.909505][T10155]  ? __netlink_lookup+0xbd/0x810
[  110.909512][T10155]  ? rcu_is_watching+0x15/0xb0
[  110.909521][T10155]  netlink_rcv_skb+0x208/0x470
[  110.909531][T10155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.909539][T10155]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.909550][T10155]  ? lock_release+0x4b/0x3e0
[  110.909561][T10155]  ? down_read+0x1ad/0x2e0
[  110.909568][T10155]  genl_rcv+0x28/0x40
[  110.909575][T10155]  netlink_unicast+0x82f/0x9e0
[  110.909585][T10155]  ? __pfx_netlink_unicast+0x10/0x10
[  110.909594][T10155]  ? netlink_sendmsg+0x642/0xb30
[  110.909604][T10155]  ? skb_put+0x11b/0x210
[  110.909611][T10155]  netlink_sendmsg+0x805/0xb30
[  110.909622][T10155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.909632][T10155]  ? futex_unqueue+0x22/0x240
[  110.909639][T10155]  ? aa_sock_msg_perm+0xf1/0x1d0
[  110.909646][T10155]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.909654][T10155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.909664][T10155]  __sock_sendmsg+0x21c/0x270
[  110.909673][T10155]  ____sys_sendmsg+0x505/0x830
[  110.909681][T10155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.909689][T10155]  ? import_iovec+0x74/0xa0
[  110.909697][T10155]  ___sys_sendmsg+0x21f/0x2a0
[  110.909704][T10155]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.909712][T10155]  ? futex_wait+0x285/0x360
[  110.909725][T10155]  ? __fget_files+0x2a/0x420
[  110.909731][T10155]  ? __fget_files+0x3a0/0x420
[  110.909738][T10155]  __x64_sys_sendmsg+0x19b/0x260
[  110.909746][T10155]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.909785][T10155]  ? rcu_is_watching+0x15/0xb0
[  110.909794][T10155]  do_syscall_64+0xfa/0x3b0
[  110.909803][T10155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.909810][T10155]  ? exc_page_fault+0x9f/0xf0
[  110.909820][T10155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.909827][T10155] RIP: 0033:0x7fbdd818ebe9
[  110.909834][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.909842][T10155] RSP: 002b:00007fbdd63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.909851][T10155] RAX: ffffffffffffffda RBX: 00007fbdd83b6090 RCX: 00007fbdd818ebe9
[  110.909857][T10155] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  110.909862][T10155] RBP: 00007fbdd8211e19 R08: 0000000000000000 R09: 0000000000000000
[  110.909867][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.909872][T10155] R13: 00007fbdd83b6128 R14: 00007fbdd83b6090 R15: 00007ffd14014ef8
[  110.909880][T10155]  </TASK>
[  111.117539][T10162] TC_ACT_REPEAT abuse ?
[  111.147276][T10162] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  111.150267][T10162] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1122'.
[  111.172062][T10169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.255223][T10178] netlink: 'syz.0.1127': attribute type 4 has an invalid length.
[  111.283697][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'.
[  111.287137][T10182] openvswitch: netlink: Flow actions attr not present in new flow.
[  111.318423][T10182] lo speed is unknown, defaulting to 1000
[  111.426720][T10202] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1133'.
[  111.431898][T10202] gretap0: entered promiscuous mode
[  111.448054][T10208] netlink: 'syz.2.1134': attribute type 13 has an invalid length.
[  111.450992][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'.
[  111.465533][ T6448] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.471887][ T6448] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.477694][ T6448] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.485863][ T6448] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.521851][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  111.525317][T10219] netlink: 'syz.0.1138': attribute type 14 has an invalid length.
[  111.529990][T10219] netlink: 'syz.0.1138': attribute type 13 has an invalid length.
[  111.547397][T10221] netlink: 'syz.2.1136': attribute type 16 has an invalid length.
[  111.550743][T10221] netlink: 'syz.2.1136': attribute type 17 has an invalid length.
[  111.581153][T10221] tipc: Resetting bearer <eth:team0>
[  111.625887][ T9165] lo speed is unknown, defaulting to 1000
[  111.633797][ T7435] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.635820][ T9165] syz0: Port: 1 Link DOWN
[  111.639413][ T6448] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.644055][ T9165] lo speed is unknown, defaulting to 1000
[  111.646663][ T6448] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.655996][ T6448] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.832662][T10244] sit0: entered promiscuous mode
[  111.836115][T10244] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  111.836351][T10247] netlink: 'syz.0.1144': attribute type 13 has an invalid length.
[  111.841887][T10247] lo: left promiscuous mode
[  111.843519][T10247] lo: left allmulticast mode
[  111.849590][T10247] tunl0: left promiscuous mode
[  111.851967][T10247] tunl0: left allmulticast mode
[  111.854556][T10247] gre0: left promiscuous mode
[  111.857193][T10247] gre0: left allmulticast mode
[  111.859875][T10247] gretap0: left allmulticast mode
[  111.870883][T10247] erspan0: left allmulticast mode
[  111.879913][T10247] ip_vti0: left promiscuous mode
[  111.881796][T10247] ip_vti0: left allmulticast mode
[  111.883927][T10247] ip6_vti0: left promiscuous mode
[  111.886009][T10247] ip6_vti0: left allmulticast mode
[  111.889203][T10247] sit0: left promiscuous mode
[  111.890973][T10247] sit0: left allmulticast mode
[  111.893184][T10247] ip6tnl0: left promiscuous mode
[  111.895122][T10247] ip6tnl0: left allmulticast mode
[  111.897905][T10247] ip6gre0: left promiscuous mode
[  111.900380][T10247] ip6gre0: left allmulticast mode
[  111.902269][T10247] syz_tun: left promiscuous mode
[  111.904037][T10247] syz_tun: left allmulticast mode
[  111.911347][T10247] ip6gretap0: left promiscuous mode
[  111.913229][T10247] ip6gretap0: left allmulticast mode
[  111.915651][T10247] bond0: left promiscuous mode
[  111.918026][T10247] dummy0: left promiscuous mode
[  111.919653][T10247] dummy0: left allmulticast mode
[  111.921622][T10247] nlmon0: left promiscuous mode
[  111.923436][T10247] nlmon0: left allmulticast mode
[  111.925947][T10247] caif0: left promiscuous mode
[  111.927843][T10247] caif0: left allmulticast mode
[  111.933520][T10240] lo speed is unknown, defaulting to 1000
[  111.999301][T10256] sit0: left promiscuous mode
[  112.003329][T10256] 8021q: adding VLAN 0 to HW filter on device team0
[  112.053018][T10261] macvtap0: entered promiscuous mode
[  112.054883][T10261] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  112.063922][T10261] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  112.073712][T10254] lo speed is unknown, defaulting to 1000
[  112.308357][T10282] sctp: [Deprecated]: syz.1.1153 (pid 10282) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.308357][T10282] Use struct sctp_sack_info instead
[  112.348027][T10286] : renamed from bridge_slave_0
[  112.368297][T10282] bond19: entered promiscuous mode
[  112.370213][T10282] 8021q: adding VLAN 0 to HW filter on device bond19
[  112.375293][T10282] bond19 (unregistering): Released all slaves
[  112.473306][T10302] 8021q: adding VLAN 0 to HW filter on device bond19
[  112.490822][T10302] veth11: entered promiscuous mode
[  112.498983][T10302] bond19: (slave veth11): Enslaving as an active interface with a down link
[  112.503767][T10302] erspan0: entered allmulticast mode
[  112.509821][T10302] bond19: (slave erspan0): making interface the new active one
[  112.513604][T10302] erspan0: entered promiscuous mode
[  112.516508][T10302] bond19: (slave erspan0): Enslaving as an active interface with an up link
[  112.735348][T10325] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  112.782650][T10330] Bluetooth: MGMT ver 1.23
[  112.841838][T10349] sctp: [Deprecated]: syz.0.1172 (pid 10349) Use of int in max_burst socket option.
[  112.841838][T10349] Use struct sctp_assoc_value instead
[  112.940855][T10364] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.945031][T10364] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  112.972809][T10368] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  113.046203][ T6448] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  113.089600][T10380] 8021q: adding VLAN 0 to HW filter on device bond20
[  113.100918][T10380] 8021q: adding VLAN 0 to HW filter on device bond20
[  113.103356][T10380] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  113.108199][T10380] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  113.315427][T10400] syzkaller0: entered promiscuous mode
[  113.317721][T10400] syzkaller0: entered allmulticast mode
[  113.321758][   T33] audit: type=1107 audit(1755850367.535:2): pid=10398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6	Iؗ3ف3$#IU9#a'
[  113.931153][T10414] ieee802154 phy0 wpan0: encryption failed: -22
[  113.942308][T10420] syzkaller0: entered promiscuous mode
[  113.944068][T10420] syzkaller0: entered allmulticast mode
[  113.948888][ T5911] IPVS: starting estimator thread 0...
[  114.035718][T10421] IPVS: using max 135 ests per chain, 324000 per kthread
[  114.061026][T10431] 8021q: adding VLAN 0 to HW filter on device bond19
[  114.065308][T10431] net_ratelimit: 4 callbacks suppressed
[  114.065321][T10431] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  114.113398][T10440] syzkaller0: entered promiscuous mode
[  114.116085][T10440] syzkaller0: entered allmulticast mode
[  114.125257][T10437] lo speed is unknown, defaulting to 1000
[  114.250446][T10451] IPVS: stopping backup sync thread 10452 ...
[  114.252645][T10452] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  114.400361][T10464] sctp: [Deprecated]: syz.1.1204 (pid 10464) Use of int in max_burst socket option.
[  114.400361][T10464] Use struct sctp_assoc_value instead
[  114.447730][T10465] geneve0: entered promiscuous mode
[  114.466041][T10472] netem: change failed
[  114.565381][T10478] bond19: (slave erspan0): Releasing active interface
[  114.568862][T10478] erspan0: left promiscuous mode
[  114.577693][T10478] bond1: (slave macvlan2): Releasing backup interface
[  114.584402][T10478] bond19: (slave veth11): Releasing active interface
[  114.608664][T10480] lo speed is unknown, defaulting to 1000
[  114.769465][T10493] pim6reg1: entered promiscuous mode
[  114.772234][T10493] pim6reg1: entered allmulticast mode
[  114.978005][T10510] geneve3: entered promiscuous mode
[  114.998022][T10512] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000
[  115.083401][T10527] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  115.091090][T10527] openvswitch: netlink: IPv4 tun info is not correct
[  115.113919][T10529] tap0: tun_chr_ioctl cmd 1074025680
[  115.193481][T10534] macvlan3: entered promiscuous mode
[  115.195295][T10534] bond0: entered promiscuous mode
[  115.197603][T10534] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  115.245342][T10538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.249556][T10538] syzkaller0: entered promiscuous mode
[  115.252031][T10538] syzkaller0: entered allmulticast mode
[  115.264254][T10538] tipc: Resetting bearer <eth:syzkaller0>
[  115.579181][T10570] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  115.590253][T10570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.630005][T10577] vlan0: entered allmulticast mode
[  115.632024][T10577] bond20: entered allmulticast mode
[  115.634110][T10580] nbd: nbd1 already in use
[  115.659931][T10582] Unsupported ieee802154 address type: 0
[  115.668041][T10577] pim6reg1: entered promiscuous mode
[  115.670433][T10577] pim6reg1: entered allmulticast mode
[  115.723043][T10588] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.723605][T10589] batadv3: entered promiscuous mode
[  115.730540][T10589] batadv3: entered allmulticast mode
[  115.838081][T10610] __nla_validate_parse: 50 callbacks suppressed
[  115.838090][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  115.844428][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  115.912372][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'.
[  115.934349][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1247'.
[  115.967485][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'.
[  116.016220][T10640] pim6reg1: entered allmulticast mode
[  116.072802][T10652] validate_nla: 18 callbacks suppressed
[  116.072816][T10652] netlink: 'syz.0.1250': attribute type 13 has an invalid length.
[  116.087030][T10652] netlink: 'syz.0.1250': attribute type 17 has an invalid length.
[  116.095246][T10652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.108619][T10652] lo speed is unknown, defaulting to 1000
[  116.282012][T10671] infiniband syz2: set active
[  116.283751][T10671] infiniband syz2: added syzkaller0
[  116.294340][T10671] RDS/IB: syz2: added
[  116.296591][T10671] smc: adding ib device syz2 with port count 1
[  116.299645][T10671] smc:    ib device syz2 port 1 has pnetid 
[  116.510239][T10700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.512595][T10700] IPv6: NLM_F_CREATE should be set when creating new route
[  116.610330][T10708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.626505][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'.
[  116.736337][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'.
[  116.754091][T10724] netlink: 'syz.1.1256': attribute type 1 has an invalid length.
[  116.758908][T10727] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1257'.
[  116.762677][T10728] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1257'.
[  116.770797][T10724] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1256'.
[  116.803748][T10732] IPv6: sit2: Disabled Multicast RS
[  116.923828][T10734] erspan0: left allmulticast mode
[  116.939838][T10734] team1: left promiscuous mode
[  116.942323][T10734] team1: left allmulticast mode
[  116.946396][T10734] veth11: left promiscuous mode
[  117.114340][T10757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.122513][T10757] netlink: 'syz.2.1267': attribute type 64 has an invalid length.
[  117.203651][T10767] gretap0: left promiscuous mode
[  117.208409][T10767] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  117.211481][T10767] ip6erspan0: left promiscuous mode
[  117.213555][T10767] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  117.216952][T10767] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  117.219664][T10767] vlan0: left promiscuous mode
[  117.221476][T10767] vlan1: left allmulticast mode
[  117.223219][T10767] bridge0: left allmulticast mode
[  117.225395][T10767] bond16: left promiscuous mode
[  117.227995][T10767] bond16: left allmulticast mode
[  117.291916][T10777] netlink: 'syz.0.1273': attribute type 1 has an invalid length.
[  117.328209][T10781] smc: removing ib device syz0
[  117.347433][T10777] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  117.418417][T10788] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  117.503268][T10796] tap0: tun_chr_ioctl cmd 1074025677
[  117.505137][T10796] tap0: linktype set to 780
[  117.585165][T10800] sctp: [Deprecated]: syz.2.1281 (pid 10800) Use of int in max_burst socket option.
[  117.585165][T10800] Use struct sctp_assoc_value instead
[  117.622874][T10802] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  117.626284][T10802] netlink: 'syz.2.1282': attribute type 2 has an invalid length.
[  117.632027][T10802] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  117.634912][T10802] netlink: 'syz.2.1282': attribute type 2 has an invalid length.
[  117.685950][T10814] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  117.749735][ T5884] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.752442][ T5884] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.755523][ T5884] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.759079][ T5884] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.942627][T10832] netlink: 'syz.1.1292': attribute type 1 has an invalid length.
[  117.953171][T10832] 8021q: adding VLAN 0 to HW filter on device bond21
[  117.981425][T10837] dvmrp8: left allmulticast mode
[  118.009085][T10837] lo speed is unknown, defaulting to 1000
[  118.011495][T10837] lo speed is unknown, defaulting to 1000
[  118.013572][T10837] lo speed is unknown, defaulting to 1000
[  118.054333][T10837] infiniband syz0: set down
[  118.056008][   T47] lo speed is unknown, defaulting to 1000
[  118.057905][T10837] infiniband syz0: added lo
[  118.071945][T10837] RDS/IB: syz0: added
[  118.072123][T10849] 8021q: adding VLAN 0 to HW filter on device team0
[  118.073827][T10837] smc: adding ib device syz0 with port count 1
[  118.078589][T10837] smc:    ib device syz0 port 1 has pnetid 
[  118.081115][T10849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.089543][ T5891] lo speed is unknown, defaulting to 1000
[  118.096304][T10848] 8021q: adding VLAN 0 to HW filter on device bond21
[  118.099217][ T5891] syz0: Port: 1 Link ACTIVE
[  118.101818][   T47] lo speed is unknown, defaulting to 1000
[  118.113743][T10848] bond22: entered promiscuous mode
[  118.116333][T10848] 8021q: adding VLAN 0 to HW filter on device bond22
[  118.123413][T10848] bond22 (unregistering): Released all slaves
[  118.128776][T10837] lo speed is unknown, defaulting to 1000
[  118.166495][T10853] bond21: (slave bridge8): Enslaving as an active interface with an up link
[  118.180870][T10837] lo speed is unknown, defaulting to 1000
[  118.219954][T10837] lo speed is unknown, defaulting to 1000
[  118.265464][T10849] syz.1.1293 (10849) used greatest stack depth: 19040 bytes left
[  118.439552][T10876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  118.542613][T10881] lo speed is unknown, defaulting to 1000
[  118.558973][T10890] k*]: entered promiscuous mode
[  118.607278][T10892] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.610479][T10892] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  118.613052][T10892] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  118.769152][T10896] pimreg: entered allmulticast mode
[  118.776590][T10896] pimreg: left allmulticast mode
[  118.935344][T10907] syz_tun: entered allmulticast mode
[  118.939571][T10907] dvmrp8: entered allmulticast mode
[  118.995016][T10907] syz_tun: left allmulticast mode
[  118.997237][T10907] dvmrp8: left allmulticast mode
[  119.096230][T10907] lo speed is unknown, defaulting to 1000
[  119.164296][T10911] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  119.347839][T10920] lo speed is unknown, defaulting to 1000
[  119.448098][T10933] pimreg3: entered allmulticast mode
[  119.614869][T10948] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  119.620166][ T7435] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.622918][ T7435] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.625983][ T7435] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.629443][ T7435] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.685318][T10951] macvlan4: entered promiscuous mode
[  119.687445][T10951] macvlan4: entered allmulticast mode
[  119.725951][T10956] tipc: Enabled bearer <eth:gre0>, priority 10
[  119.762230][T10962] bridge0: port 1(erspan0) entered blocking state
[  119.764356][T10962] bridge0: port 1(erspan0) entered disabled state
[  119.766822][T10962] erspan0: entered allmulticast mode
[  119.769372][T10962] erspan0: left allmulticast mode
[  119.807610][T10964] net_ratelimit: 3 callbacks suppressed
[  119.807619][T10964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.826530][T10956] lo speed is unknown, defaulting to 1000
[  119.860419][T10976] : entered promiscuous mode
[  119.897718][T10981] vlan2: entered allmulticast mode
[  119.899584][T10981] gretap0: entered allmulticast mode
[  120.044143][T10996] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  120.048985][T10996] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  120.389035][T11025] bond22: (slave geneve3): making interface the new active one
[  120.392526][T11025] bond22: (slave geneve3): Enslaving as an active interface with an up link
[  120.398390][ T6448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  120.401396][ T6448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  120.413803][ T6448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  120.418905][ T6448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  120.443409][T11025] 8021q: adding VLAN 0 to HW filter on device bond22
[  120.476902][T11038] bond21: (slave bridge8): Releasing backup interface
[  120.483499][T11043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.487381][T11043] syzkaller0: entered promiscuous mode
[  120.489479][T11043] syzkaller0: entered allmulticast mode
[  120.497254][T11043] tipc: Resetting bearer <eth:syzkaller0>
[  120.507773][T11041] tipc: Resetting bearer <eth:syzkaller0>
[  120.511069][T11041] tipc: Disabling bearer <eth:syzkaller0>
[  120.669887][T11075] vlan0: entered allmulticast mode
[  120.671639][T11075] bridge0: entered allmulticast mode
[  120.673535][T11075] bridge0: port 1(vlan0) entered blocking state
[  120.675994][T11075] bridge0: port 1(vlan0) entered disabled state
[  120.718084][T11075] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  120.773063][T11086] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.328673][T11150] __nla_validate_parse: 53 callbacks suppressed
[  121.328718][T11150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1362'.
[  121.361244][T11155] validate_nla: 13 callbacks suppressed
[  121.361257][T11155] netlink: 'syz.1.1363': attribute type 1 has an invalid length.
[  121.362290][T11156] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  121.372540][T11155] 8021q: adding VLAN 0 to HW filter on device bond23
[  121.386822][T11155] veth13: entered promiscuous mode
[  121.390135][T11155] bond23: (slave veth13): Enslaving as an active interface with a down link
[  121.401195][T11156] 8021q: adding VLAN 0 to HW filter on device bond20
[  121.404114][T11156] bond19: (slave bond20): making interface the new active one
[  121.407362][T11156] bond19: (slave bond20): Enslaving as an active interface with an up link
[  121.410458][T11155] erspan0: entered allmulticast mode
[  121.416767][T11155] bond23: (slave erspan0): making interface the new active one
[  121.419890][T11155] erspan0: entered promiscuous mode
[  121.421876][T11155] bond23: (slave erspan0): Enslaving as an active interface with an up link
[  121.429082][T11156] bond19: (slave gretap4): Enslaving as a backup interface with an up link
[  121.435474][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'.
[  121.440446][T11156] 8021q: adding VLAN 0 to HW filter on device bond19
[  121.453043][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1365'.
[  121.529440][T11172] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1367'.
[  121.563789][T11176] bond23: (slave erspan0): Releasing active interface
[  121.568751][T11176] erspan0: left promiscuous mode
[  121.576591][T11176] bond22: (slave geneve3): Releasing active interface
[  121.581392][T11176] bond23: (slave veth13): Releasing active interface
[  121.587668][ T5884] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  121.591657][T11176] tipc: Can't bind to reserved service type 0
[  121.596878][ T5884] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  121.600782][ T5884] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  121.608108][ T5884] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  121.626388][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'.
[  121.663774][T11184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  121.680622][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'.
[  121.692513][T11185] bond24: entered promiscuous mode
[  121.694725][T11185] bond24: entered allmulticast mode
[  121.697328][T11185] 8021q: adding VLAN 0 to HW filter on device bond24
[  121.758726][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1374'.
[  121.801530][T11193] veth6: entered promiscuous mode
[  121.804433][T11193] erspan0: entered allmulticast mode
[  121.845289][T11198] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  121.849072][T11198] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1376'.
[  121.866585][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1377'.
[  121.871977][T11202] IPv6: sit5: Disabled Multicast RS
[  121.874988][T11202] sit5: entered allmulticast mode
[  121.907107][T11209] netlink: 'syz.0.1379': attribute type 10 has an invalid length.
[  122.103285][T11218] erspan0: left allmulticast mode
[  122.127483][T11218] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  122.130387][T11218] mac80211_hwsim hwsim4 D: left promiscuous mode
[  122.132453][T11218] mac80211_hwsim hwsim4 D: left allmulticast mode
[  122.135059][T11218] bond11: left promiscuous mode
[  122.137742][T11218] bond11: left allmulticast mode
[  122.139831][T11218] bond15: left promiscuous mode
[  122.141477][T11218] bond15: left allmulticast mode
[  122.143386][T11218] bond16: left promiscuous mode
[  122.145899][T11218] bridge6: left promiscuous mode
[  122.148225][T11218] bridge6: left allmulticast mode
[  122.154722][T11218] tipc: Resetting bearer <eth:syzkaller0>
[  122.158176][T11218] syzkaller0: left promiscuous mode
[  122.159889][T11218] syzkaller0: left allmulticast mode
[  122.162588][T11218] bond0: left promiscuous mode
[  122.164319][T11218] macvlan3: left promiscuous mode
[  122.173976][T11218] macvlan4: left promiscuous mode
[  122.183297][T11218] macvlan4: left allmulticast mode
[  122.185197][T11218] veth6: left promiscuous mode
[  122.186970][T11218] sit5: left allmulticast mode
[  122.188739][ T6449] syz1: Port: 1 Link DOWN
[  122.188785][ T5883] syz2: Port: 1 Link DOWN
[  122.546585][T11235] netlink: 'syz.2.1386': attribute type 6 has an invalid length.
[  122.621433][T11239] netlink: 'syz.2.1387': attribute type 1 has an invalid length.
[  122.640840][T11245] syzkaller1: entered promiscuous mode
[  122.642645][T11245] syzkaller1: entered allmulticast mode
[  122.650194][T11248] netlink: 'syz.1.1390': attribute type 1 has an invalid length.
[  122.653052][T11249] batadv3: entered promiscuous mode
[  122.655113][T11249] batadv3: entered allmulticast mode
[  122.660403][T11248] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[  122.771282][T11256] netlink: 'syz.1.1391': attribute type 33 has an invalid length.
[  123.308993][T11268] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  123.357756][T11275] netlink: 'syz.0.1397': attribute type 9 has an invalid length.
[  123.379569][T11275] netlink: 'syz.0.1397': attribute type 2 has an invalid length.
[  123.571526][T11287] pim6reg1: entered promiscuous mode
[  123.573732][T11287] pim6reg1: entered allmulticast mode
[  123.725728][ T5236] Bluetooth: hci2: command 0x0419 tx timeout
[  123.772569][T11301] bond26: entered promiscuous mode
[  123.774570][T11301] 8021q: adding VLAN 0 to HW filter on device bond26
[  123.797185][T11306] macsec1: entered promiscuous mode
[  123.798965][T11306] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  123.801300][T11306] macsec1: entered allmulticast mode
[  123.803171][T11306] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  124.465030][T11336] syz.2.1414 uses old SIOCAX25GETINFO
[  124.611126][T11353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.692910][T11362] 8021q: adding VLAN 0 to HW filter on device bond27
[  124.711965][T11362] veth15: entered promiscuous mode
[  124.715133][T11362] bond27: (slave veth15): Enslaving as an active interface with a down link
[  124.753466][T11385] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  124.760953][T11385] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  124.847723][T11400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.872360][T11403] !: renamed from dummy0
[  125.171834][T11412] lo speed is unknown, defaulting to 1000
[  125.666903][T11442] team0: entered promiscuous mode
[  125.762606][T11452] bond24: entered promiscuous mode
[  125.764791][T11452] 8021q: adding VLAN 0 to HW filter on device bond24
[  125.793355][T11449] bond19: (slave bond20): Releasing backup interface
[  125.796493][T11449] bond19: (slave bond20): the permanent HWaddr of slave - ea:9f:22:c7:7b:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  125.802537][T11449] bond19: (slave gretap4): making interface the new active one
[  125.808678][T11449] bond19: (slave gretap4): Releasing backup interface
[  125.819311][T11458] macvlan3: entered allmulticast mode
[  125.821625][T11458] bond0: entered allmulticast mode
[  125.828121][T11458] bond0: left allmulticast mode
[  125.894921][T11467] 8021q: adding VLAN 0 to HW filter on device bond22
[  125.907196][T11472] syz_tun: entered allmulticast mode
[  125.912097][T11469] syz_tun: left allmulticast mode
[  125.932527][T11475] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.942953][T11475] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  125.949111][T11475] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  126.003755][ T5884] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.007947][ T5884] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.012749][ T5884] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.018015][ T5884] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.048990][T11494] bridge10: entered promiscuous mode
[  126.050944][T11494] bridge10: entered allmulticast mode
[  126.112882][T11497] lo speed is unknown, defaulting to 1000
[  126.170123][T11501] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  126.192534][T11501] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.198049][T11501] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.531590][T11515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.534994][T11515] syzkaller0: entered promiscuous mode
[  126.538079][T11515] syzkaller0: entered allmulticast mode
[  126.545990][T11515] tipc: Resetting bearer <eth:syzkaller0>
[  126.549555][T11514] tipc: Resetting bearer <eth:syzkaller0>
[  126.553846][T11514] tipc: Disabling bearer <eth:syzkaller0>
[  126.627246][T11517] tipc: Enabling of bearer <et:g> rejected, media not registered
[  126.691968][ T6449] IPVS: starting estimator thread 0...
[  126.693509][T11523] IPVS: ip_vs_add_dest(): server weight less than zero
[  126.786111][T11524] IPVS: using max 135 ests per chain, 324000 per kthread
[  126.812519][T11525] lo speed is unknown, defaulting to 1000
[  126.900894][T11529] validate_nla: 10 callbacks suppressed
[  126.900904][T11529] netlink: 'syz.1.1468': attribute type 282 has an invalid length.
[  126.906638][T11529] __nla_validate_parse: 38 callbacks suppressed
[  126.906670][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'.
[  126.914522][T11529] sit3: entered promiscuous mode
[  126.937217][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'.
[  127.027278][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'.
[  127.080492][T11538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1470'.
[  127.146367][T11555] netlink: 'syz.2.1473': attribute type 1 has an invalid length.
[  127.159465][T11555] bond23: entered promiscuous mode
[  127.162093][T11555] 8021q: adding VLAN 0 to HW filter on device bond23
[  127.168303][T11555] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1473'.
[  127.175081][T11555] batadv0: entered promiscuous mode
[  127.178375][T11555] batadv0: entered allmulticast mode
[  127.181925][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.194613][T11555] bond23: (slave batadv0): making interface the new active one
[  127.198489][T11555] bond23: (slave batadv0): Enslaving as an active interface with an up link
[  127.277696][T11561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.294703][T11555] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1473'.
[  127.301368][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'.
[  127.337366][T11571] pim6reg1: entered allmulticast mode
[  127.372405][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'.
[  127.378005][T11575] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  127.390864][T11581] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1478'.
[  127.398006][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1478'.
[  127.420505][T11581] erspan0: left promiscuous mode
[  127.433633][T11581] 8021q: adding VLAN 0 to HW filter on device team0
[  127.437509][T11581] tipc: Resetting bearer <eth:team0>
[  127.440191][T11581] tipc: Resetting bearer <eth:team0>
[  127.443823][T11581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.504087][T11599] erspan0: left allmulticast mode
[  127.509625][T11599] team0: left promiscuous mode
[  127.512165][T11599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.628212][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.680497][T11610] gretap0: mtu less than device minimum
[  127.686146][ T6448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.942991][T11621] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  127.992973][ T6448] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.996484][ T6448] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.999425][ T6448] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.003947][ T6448] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.027061][T11634] netlink: 'syz.1.1493': attribute type 1 has an invalid length.
[  128.073663][T11639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.095218][T11640] tipc: Disabling bearer <eth:syzkaller0>
[  128.181657][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.235424][T11664] syzkaller0: Caught tx_queue_len zero misconfig
[  128.356848][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.440671][T11702] netlink: 'syz.1.1511': attribute type 10 has an invalid length.
[  128.499514][T11712] bond27: (slave veth15): Releasing active interface
[  128.575143][T11723] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  128.721018][T11734] batadv0: entered promiscuous mode
[  128.756040][ T6448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.759675][ T6448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.036609][T11755] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.039768][T11755] syzkaller0: entered promiscuous mode
[  129.041675][T11755] syzkaller0: entered allmulticast mode
[  129.043826][ T6449] syz2: Port: 1 Link ACTIVE
[  129.090253][T11760] netlink: 'syz.2.1528': attribute type 5 has an invalid length.
[  129.140086][T11769] team0: Unable to change to the same mode the team is in
[  129.161169][T11771] netlink: 'syz.2.1534': attribute type 4 has an invalid length.
[  129.165857][ T6449] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.233358][T11782] macvtap0: entered promiscuous mode
[  129.235250][T11782] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  129.240569][T11782] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  130.026961][T11821] sctp: [Deprecated]: syz.0.1544 (pid 11821) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.026961][T11821] Use struct sctp_sack_info instead
[  130.032290][T11820] sctp: [Deprecated]: syz.0.1544 (pid 11820) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.032290][T11820] Use struct sctp_sack_info instead
[  130.059183][T11826] netlink: 'syz.2.1547': attribute type 2 has an invalid length.
[  130.179563][T11851] geneve0: entered promiscuous mode
[  130.181787][ T6448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.185121][ T6448] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.189933][ T6448] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.193196][ T6448] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.266315][T11865] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  130.284004][T11861] @: renamed from bond_slave_0
[  130.324665][T11870] netlink: 'syz.2.1557': attribute type 47 has an invalid length.
[  130.329420][T11873] IPVS: Unknown mcast interface: bridge_slave_0
[  130.460743][T11881] netlink: 'syz.0.1560': attribute type 7 has an invalid length.
[  130.560857][T11890] lo speed is unknown, defaulting to 1000
[  130.902930][T11909] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  130.915412][T11909] 8021q: adding VLAN 0 to HW filter on device bond29
[  130.938048][T11912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.940989][T11912] syzkaller0: entered promiscuous mode
[  130.943191][T11912] syzkaller0: entered allmulticast mode
[  130.949797][T11912] tipc: Resetting bearer <eth:syzkaller0>
[  131.381993][T11938] macsec0: entered promiscuous mode
[  131.384382][T11938] macsec0: entered allmulticast mode
[  131.606554][T11956] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.722950][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.726842][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.729868][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.732577][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.752402][T11979] vlan0: entered allmulticast mode
[  131.754231][T11979] hsr0: entered allmulticast mode
[  131.756258][T11979] erspan0: entered allmulticast mode
[  131.758200][T11979] gretap0: entered allmulticast mode
[  131.764484][T11981] vlan0: entered allmulticast mode
[  131.791845][T11979] vlan0: entered allmulticast mode
[  131.802770][T11983] bond24: entered promiscuous mode
[  131.804658][T11983] 8021q: adding VLAN 0 to HW filter on device bond24
[  131.810021][T11983] batadv1: entered promiscuous mode
[  131.811888][T11983] batadv1: entered allmulticast mode
[  131.814405][T11983] 8021q: adding VLAN 0 to HW filter on device batadv1
[  131.817831][T11983] bond24: (slave batadv1): making interface the new active one
[  131.820869][T11983] bond24: (slave batadv1): Enslaving as an active interface with an up link
[  131.847856][T11979] vlan0: entered allmulticast mode
[  131.918033][T11979] vlan0: entered allmulticast mode
[  131.933160][T11991] validate_nla: 7 callbacks suppressed
[  131.933170][T11991] netlink: 'syz.2.1593': attribute type 1 has an invalid length.
[  131.946741][T11991] veth7: entered promiscuous mode
[  131.972109][T11993] __nla_validate_parse: 220 callbacks suppressed
[  131.972119][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1594'.
[  131.983487][T11979] vlan0: entered allmulticast mode
[  132.054903][T11979] vlan0: entered allmulticast mode
[  132.065713][ T6449] tipc: Node number set to 2559549770
[  132.081661][T11997] lo speed is unknown, defaulting to 1000
[  132.116851][T11979] vlan0: entered allmulticast mode
[  132.170242][T11979] vlan0: entered allmulticast mode
[  132.215254][T11996] lo speed is unknown, defaulting to 1000
[  132.246412][T11979] vlan0: entered allmulticast mode
[  132.446478][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.456308][T11979] vlan0: entered allmulticast mode
[  132.524336][T11979] vlan0: entered allmulticast mode
[  132.595746][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.628215][T12003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1596'.
[  132.655545][T12003] netlink: 'syz.0.1596': attribute type 2 has an invalid length.
[  132.661946][T12003] k*]: entered promiscuous mode
[  132.728634][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'.
[  132.743889][T12009] hsr_slave_1 (unregistering): left promiscuous mode
[  132.761404][T12011] pim6reg1: entered promiscuous mode
[  132.763489][T12011] pim6reg1: entered allmulticast mode
[  132.811665][T12013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1601'.
[  132.875505][T12025] netlink: 'syz.1.1605': attribute type 4 has an invalid length.
[  132.910295][T12027] netlink: 'syz.1.1606': attribute type 10 has an invalid length.
[  132.923845][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'.
[  132.953759][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1609'.
[  132.982685][T12038] netlink: 'syz.0.1610': attribute type 1 has an invalid length.
[  133.003572][T12038] 8021q: adding VLAN 0 to HW filter on device bond27
[  133.005983][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  133.017149][T12038] 8021q: adding VLAN 0 to HW filter on device bond27
[  133.019913][T12038] bond27: (slave vcan0): The slave device specified does not support setting the MAC address
[  133.023693][T12038] bond27: (slave vcan0): Error -95 calling set_mac_address
[  133.031765][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  133.049069][T12047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1613'.
[  133.052155][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'.
[  133.071579][T12048] macvlan5: entered promiscuous mode
[  133.073399][T12048] macvlan5: entered allmulticast mode
[  133.075476][T12048] bond27: entered promiscuous mode
[  133.079901][T12048] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  133.088347][T12048] bond27: left promiscuous mode
[  133.420915][T12097] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  133.433676][T12097] 8021q: adding VLAN 0 to HW filter on device bond25
[  133.538545][T12116] bridge0: entered allmulticast mode
[  133.543481][T12116] pim6reg: entered allmulticast mode
[  133.724631][T12135] geneve3: entered promiscuous mode
[  133.833927][T12143] vti0: entered promiscuous mode
[  133.836531][T12143] vti0: entered allmulticast mode
[  133.945243][T12161] syzkaller0: left promiscuous mode
[  133.947500][T12161] syzkaller0: left allmulticast mode
[  133.987902][T12159] netlink: 'syz.1.1644': attribute type 1 has an invalid length.
[  134.061349][T12171] netlink: 'syz.0.1648': attribute type 1 has an invalid length.
[  134.069890][T12171] 8021q: adding VLAN 0 to HW filter on device bond29
[  134.134647][T12183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.143258][T12183] syzkaller0: entered promiscuous mode
[  134.145219][T12183] syzkaller0: entered allmulticast mode
[  134.259852][T12194] ieee802154 phy0 wpan0: encryption failed: -22
[  134.422094][T12214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap5
[  134.426842][T12214] batman_adv: batadv0: Adding interface: ip6gretap5
[  134.429102][T12214] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.437262][T12214] batman_adv: batadv0: Interface activated: ip6gretap5
[  134.466820][T12222] netlink: 'syz.2.1660': attribute type 1 has an invalid length.
[  134.474263][T12222] 8021q: adding VLAN 0 to HW filter on device bond26
[  134.480379][T12222] 8021q: adding VLAN 0 to HW filter on device bond26
[  134.483385][T12222] bond26: (slave vcan0): The slave device specified does not support setting the MAC address
[  134.488102][T12222] bond26: (slave vcan0): Error -95 calling set_mac_address
[  134.767467][T12263] bridge0: port 1(macsec2) entered blocking state
[  134.770413][T12263] bridge0: port 1(macsec2) entered disabled state
[  134.773394][T12263] macsec2: entered allmulticast mode
[  134.776689][T12263] macsec2: left allmulticast mode
[  134.835423][T12272] batman_adv: batadv0: Interface deactivated: ip6gretap5
[  134.838696][T12272] batman_adv: batadv0: Removing interface: ip6gretap5
[  134.844491][T12272] bond23: (slave batadv0): Releasing active interface
[  134.859091][T12274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.940742][T12274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.980295][T12282] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  134.991834][T12274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.011658][T12287] tipc: Resetting bearer <eth:team0>
[  135.014425][T12287] bond24: (slave batadv1): Releasing active interface
[  135.037370][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.039895][T12290] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.049801][T12274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.113227][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.123384][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.131909][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.141665][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.195798][T12305] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 4294967272. macoff=96
[  135.269112][T12311] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  135.272496][T12311] tipc: Resetting bearer <eth:syzkaller0>
[  135.275021][T12311] syzkaller0: left promiscuous mode
[  135.277469][T12311] syzkaller0: left allmulticast mode
[  135.284922][T12311] bond24: left promiscuous mode
[  135.288676][T12311] geneve0: left promiscuous mode
[  135.292429][T12311] macsec0: left promiscuous mode
[  135.294244][T12311] macsec0: left allmulticast mode
[  135.296477][T12311] vti0: left promiscuous mode
[  135.298815][T12311] vti0: left allmulticast mode
[  135.309875][ T5891] syz2: Port: 1 Link DOWN
[  135.309900][ T6448] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.315505][ T6448] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.320626][ T6448] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.324997][ T6448] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.349897][T12317] netlink: 'syz.2.1684': attribute type 1 has an invalid length.
[  135.363575][T12317] 8021q: adding VLAN 0 to HW filter on device bond27
[  135.489679][T12324] bond28: (slave geneve4): making interface the new active one
[  135.492512][T12324] bond28: (slave geneve4): Enslaving as an active interface with an up link
[  135.495396][ T6448] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  135.498883][ T6448] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  135.502455][ T6448] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  135.506040][ T6448] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  135.878451][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.215734][T12389] lo speed is unknown, defaulting to 1000
[  136.328128][T12420] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  136.343692][T12422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.348306][T12422] syzkaller0: entered promiscuous mode
[  136.350450][T12422] syzkaller0: entered allmulticast mode
[  136.353133][ T5883] syz2: Port: 1 Link ACTIVE
[  137.107834][T12440] __nla_validate_parse: 159 callbacks suppressed
[  137.107849][T12440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1721'.
[  137.140337][T12442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'.
[  137.144595][T12442] validate_nla: 2 callbacks suppressed
[  137.144603][T12442] netlink: 'syz.2.1722': attribute type 1 has an invalid length.
[  137.235474][T12454] vlan0: entered allmulticast mode
[  137.238916][T12454] hsr0: entered allmulticast mode
[  137.240697][T12454] hsr_slave_0: entered allmulticast mode
[  137.260380][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'.
[  137.304035][T12459] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1727'.
[  137.310331][T12461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1728'.
[  137.314370][T12459] gretap0: entered promiscuous mode
[  137.326860][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'.
[  137.328484][T12462] pim6reg: entered allmulticast mode
[  137.347028][T12462] pim6reg: left allmulticast mode
[  137.370209][T12466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1730'.
[  137.393870][T12464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.422766][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'.
[  137.436127][T12470] bridge13: entered promiscuous mode
[  137.438355][T12470] bridge13: entered allmulticast mode
[  137.447620][T12470] team0: Port device bridge13 added
[  137.620817][T12481] 8021q: adding VLAN 0 to HW filter on device bond30
[  137.644591][T12484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.707354][T12492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1738'.
[  137.730007][T12492] netlink: 'syz.0.1738': attribute type 3 has an invalid length.
[  137.761758][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1740'.
[  137.779267][T12489] netlink: 'syz.1.1736': attribute type 10 has an invalid length.
[  140.749831][T12513] netlink: 'syz.0.1742': attribute type 2 has an invalid length.
[  140.753919][T12515] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  140.757247][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  140.760705][T12515] netlink: 'syz.1.1743': attribute type 2 has an invalid length.
[  140.768006][T12515] tipc: Resetting bearer <eth:syzkaller0>
[  140.782310][T12518] bridge10: port 1(veth0_to_bond) entered blocking state
[  140.784979][T12518] bridge10: port 1(veth0_to_bond) entered disabled state
[  140.788994][T12518] veth0_to_bond: entered allmulticast mode
[  140.792016][T12518] veth0_to_bond: entered promiscuous mode
[  140.964301][T12548] netlink: 'syz.1.1749': attribute type 1 has an invalid length.
[  140.975018][T12548] 8021q: adding VLAN 0 to HW filter on device bond31
[  140.992022][T12548] veth17: entered promiscuous mode
[  140.995989][T12548] bond31: (slave veth17): Enslaving as an active interface with a down link
[  141.888923][T12586] lo speed is unknown, defaulting to 1000
[  142.094029][T12594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.130571][T12598] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.168062][T12600] netlink: 'syz.0.1765': attribute type 11 has an invalid length.
[  142.171374][T12600] netlink: 'syz.0.1765': attribute type 4 has an invalid length.
[  142.174572][T12600] __nla_validate_parse: 14 callbacks suppressed
[  142.174583][T12600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1765'.
[  142.184055][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'.
[  142.201973][T12600] bond30: entered promiscuous mode
[  142.242223][T12604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1766'.
[  142.319388][T12607] netlink: 'syz.0.1767': attribute type 13 has an invalid length.
[  142.322441][T12607] netlink: 'syz.0.1767': attribute type 17 has an invalid length.
[  142.344128][T12607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.356160][ T5891] syz1: Port: 1 Link ACTIVE
[  142.459721][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1771'.
[  142.463485][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'.
[  142.464025][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1770'.
[  142.476963][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1770'.
[  142.480567][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1770'.
[  142.484189][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1770'.
[  142.652703][T12620] lo speed is unknown, defaulting to 1000
[  142.762896][T12639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1776'.
[  142.780642][T12639] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  142.783901][T12639] netlink: 'syz.1.1776': attribute type 10 has an invalid length.
[  142.931998][T12656] netlink: 'syz.1.1782': attribute type 30 has an invalid length.
[  143.030328][T12665] netlink: 'syz.1.1785': attribute type 1 has an invalid length.
[  143.116042][T12669] netlink: 'syz.1.1787': attribute type 6 has an invalid length.
[  143.119558][T12669] netlink: 'syz.1.1787': attribute type 6 has an invalid length.
[  143.126418][T12669] macsec0: entered promiscuous mode
[  143.129046][T12669] macsec0: entered allmulticast mode
[  143.171199][T12671] : entered promiscuous mode
[  143.353846][T12684] bond0: Device is already in use.
[  143.358510][T12686] bond0: Device is already in use.
[  143.376900][T12689] tipc: Resetting bearer <eth:syzkaller0>
[  143.379030][T12689] syzkaller0: left promiscuous mode
[  143.381940][ T6449] syz2: Port: 1 Link DOWN
[  143.403843][T12691] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  143.531454][T12701] vxcan0: entered promiscuous mode
[  143.678247][T12714] netlink: 'syz.0.1800': attribute type 10 has an invalid length.
[  143.756838][T12720] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  144.195780][T12747] openvswitch: netlink: IP tunnel dst address not specified
[  144.203181][T12747] erspan0: entered promiscuous mode
[  144.205578][T12747] vlan1: entered promiscuous mode
[  144.352939][T12758] 8021q: adding VLAN 0 to HW filter on device bond30
[  144.367572][T12758] bond30: (slave veth9): Enslaving as an active interface with a down link
[  144.374953][T12758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.378328][T12758] bond30: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  144.682663][T12800] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000
[  144.762243][T12806] pim6reg: left allmulticast mode
[  144.764585][T12806] bridge0: left allmulticast mode
[  144.837068][T12808] bridge0: port 1(macsec1) entered blocking state
[  144.839887][T12808] bridge0: port 1(macsec1) entered disabled state
[  144.842727][T12808] macsec1: entered allmulticast mode
[  144.847173][T12808] macsec1: left allmulticast mode
[  144.901091][T12810] bond0: entered promiscuous mode
[  144.903732][T12810] bond0: left promiscuous mode
[  144.948048][T12810] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  145.475575][T12818] ieee802154 phy0 wpan0: encryption failed: -22
[  146.787753][T12884] geneve3: entered promiscuous mode
[  146.984436][T12892] : renamed from wg2
[  147.144234][T12900] lo speed is unknown, defaulting to 1000
[  147.267997][T12922] syzkaller0: entered promiscuous mode
[  147.273004][ T5891] syz2: Port: 1 Link ACTIVE
[  147.278716][T12924] tap0: tun_chr_ioctl cmd 1074025677
[  147.280890][T12924] tap0: linktype set to 0
[  147.369592][T12936] sctp: [Deprecated]: syz.0.1864 (pid 12936) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.369592][T12936] Use struct sctp_sack_info instead
[  147.522841][T12957] __nla_validate_parse: 21 callbacks suppressed
[  147.522852][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'.
[  147.548019][T12962] validate_nla: 4 callbacks suppressed
[  147.548032][T12962] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  147.551919][T12963] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  147.561619][T12963] !: entered allmulticast mode
[  147.563962][T12963] bond0: (slave 0!): Enslaving as an active interface with an up link
[  147.583356][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'.
[  147.593998][T12970] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  147.629258][T12972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.665877][T12978] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1876'.
[  147.723540][T12978] bond0 (unregistering): (slave 0!): Releasing backup interface
[  147.727419][T12978] !: left allmulticast mode
[  147.730481][T12978] bond0 (unregistering): Released all slaves
[  147.763583][T12982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1877'.
[  147.822270][T12987] netlink: 'syz.2.1879': attribute type 1 has an invalid length.
[  147.833041][T12987] 8021q: adding VLAN 0 to HW filter on device bond31
[  147.971734][T13004] pimreg: entered allmulticast mode
[  147.973904][T13004] pimreg: left allmulticast mode
[  147.989021][T13006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1885'.
[  148.059003][T13012] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  148.062975][T13011] IPVS: stopping backup sync thread 13012 ...
[  148.068835][T13011] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1887'.
[  148.073177][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1887'.
[  148.076573][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1887'.
[  148.099063][T13017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.133944][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'.
[  148.137897][T13021] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  148.149565][T13021] dvmrp8: entered allmulticast mode
[  148.152037][T13019] dvmrp8: left allmulticast mode
[  148.203411][T13032] netlink: 'syz.0.1892': attribute type 1 has an invalid length.
[  148.235998][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'.
[  148.238878][T13041] IPVS: Unknown mcast interface: wg0
[  148.354368][T13051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.170855][T13072] gretap0: left promiscuous mode
[  149.199691][T13072] veth13: left promiscuous mode
[  149.203046][T13072] bond24: left promiscuous mode
[  149.205192][T13072] bond24: left allmulticast mode
[  149.219241][T13072] bond26: left promiscuous mode
[  149.223406][T13072] macsec1: left promiscuous mode
[  149.225426][T13072] macsec1: left allmulticast mode
[  149.232801][T13072] veth15: left promiscuous mode
[  149.236752][T13072] sit3: left promiscuous mode
[  149.242094][T13072] tipc: Resetting bearer <eth:syzkaller0>
[  149.245427][T13072] syzkaller0: left promiscuous mode
[  149.248876][T13072] syzkaller0: left allmulticast mode
[  149.257188][T13072] bridge13: left promiscuous mode
[  149.262141][T13072] bridge13: left allmulticast mode
[  149.270753][T13072] veth17: left promiscuous mode
[  149.277103][T13072] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  149.279640][T13072] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  149.282193][T13072] macsec0: left promiscuous mode
[  149.284188][T13072] macsec0: left allmulticast mode
[  149.290033][ T5891] lo speed is unknown, defaulting to 1000
[  149.292220][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.295322][ T5891] syz0: Port: 1 Link DOWN
[  149.300384][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.303156][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.307897][ T5891] lo speed is unknown, defaulting to 1000
[  149.308386][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.338316][T13084] netlink: 'syz.1.1904': attribute type 10 has an invalid length.
[  149.399975][T13096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.403517][T13096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.484339][T13105] netlink: 'syz.1.1911': attribute type 29 has an invalid length.
[  149.660691][T13114] lo speed is unknown, defaulting to 1000
[  149.788697][T13120] lo speed is unknown, defaulting to 1000
[  150.082201][T13144] bond32: entered promiscuous mode
[  150.083959][T13144] bond32: entered allmulticast mode
[  150.086438][T13144] 8021q: adding VLAN 0 to HW filter on device bond32
[  150.192178][T13153] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.282417][T13164] pim6reg: entered allmulticast mode
[  150.286901][T13164] pim6reg: left allmulticast mode
[  150.315863][T13167] vlan2: entered promiscuous mode
[  150.317977][T13167] gretap0: entered promiscuous mode
[  150.529715][T13203] netlink: 'syz.1.1932': attribute type 1 has an invalid length.
[  150.534768][T13201] bond0: entered promiscuous mode
[  150.539629][T13201] bond0: left promiscuous mode
[  150.573610][T13203] 8021q: adding VLAN 0 to HW filter on device bond33
[  150.583602][T13203] ipvlan0: entered allmulticast mode
[  150.588887][T13203] bond33: entered allmulticast mode
[  150.640402][T13206] lo speed is unknown, defaulting to 1000
[  150.645973][T13209] atomic_op ffff88802bbc0198 conn xmit_atomic 0000000000000000
[  150.648861][T13209] syzkaller1: entered promiscuous mode
[  150.650933][T13209] syzkaller1: entered allmulticast mode
[  150.783220][T13220] bridge0: port 1(erspan0) entered blocking state
[  150.786889][T13220] bridge0: port 1(erspan0) entered disabled state
[  151.000691][T13240] netlink: 'syz.0.1941': attribute type 3 has an invalid length.
[  151.196202][T13251] netlink: 'syz.0.1943': attribute type 10 has an invalid length.
[  151.315142][T13275] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  151.320282][T13275] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  151.413375][T13292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.461075][T13307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.469209][T13306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.509337][T13314] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  151.590838][T13320] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  151.598618][T13321] sit5: entered promiscuous mode
[  152.248993][T13332] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  152.317148][T13335] bond32: left promiscuous mode
[  152.319512][T13335] vlan2: left promiscuous mode
[  152.321354][T13335] gretap0: left promiscuous mode
[  152.324105][T13335] sit5: left promiscuous mode
[  152.441929][T13352] vlan1: entered allmulticast mode
[  152.595070][T13362] __nla_validate_parse: 30 callbacks suppressed
[  152.595081][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'.
[  152.603971][T13367] validate_nla: 2 callbacks suppressed
[  152.603981][T13367] netlink: 'syz.0.1973': attribute type 9 has an invalid length.
[  152.783892][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'.
[  152.787365][T13396] netlink: 'syz.2.1980': attribute type 1 has an invalid length.
[  152.792911][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'.
[  152.874400][T13410] IPv6: sit6: Disabled Multicast RS
[  152.932709][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'.
[  153.067065][T13427] netlink: 'syz.0.1988': attribute type 1 has an invalid length.
[  153.074869][T13427] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  153.143151][T13442] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1992'.
[  153.151694][T13442] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1992'.
[  153.266481][T13447] lo speed is unknown, defaulting to 1000
[  153.280968][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'.
[  153.395506][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1994'.
[  153.506774][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'.
[  153.530836][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1996'.
[  153.552871][T13466] netlink: 'syz.1.1997': attribute type 1 has an invalid length.
[  153.562280][T13466] 8021q: adding VLAN 0 to HW filter on device bond34
[  153.569979][T13466] bond34: (slave geneve4): making interface the new active one
[  153.573086][T13466] bond34: (slave geneve4): Enslaving as an active interface with an up link
[  153.576758][ T5705] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.580856][ T5705] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.583795][ T5705] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.587784][ T5705] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.727752][T13477] netlink: 'syz.1.1999': attribute type 10 has an invalid length.
[  153.730588][T13477] netlink: 'syz.1.1999': attribute type 10 has an invalid length.
[  153.982994][T13489] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  154.155772][T13511] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.257294][T13540] netlink: 'syz.0.2014': attribute type 21 has an invalid length.
[  154.260071][T13540] gretap0: Device is already in use.
[  154.387496][T13553] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  154.397269][T13553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.473134][T13545] lo speed is unknown, defaulting to 1000
[  154.669341][T13574] netlink: 'syz.2.2020': attribute type 10 has an invalid length.
[  154.673724][T13574] team0: Device hsr_slave_0 failed to register rx_handler
[  155.391909][T13582] tun0: tun_chr_ioctl cmd 2148553947
[  155.394098][T13582] netlink: 'syz.2.2024': attribute type 39 has an invalid length.
[  155.469693][T13598] syzkaller0: left promiscuous mode
[  155.472417][T13598] syzkaller0: left allmulticast mode
[  155.570503][T13615] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  155.577936][T13615] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR
[  155.873254][T13689] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.006580][   T56] block nbd0: Receive control failed (result -107)
[  156.035781][T13698] nbd0: detected capacity change from 0 to 32
[  156.151569][T13710] pim6reg1: entered promiscuous mode
[  156.153290][T13710] pim6reg1: entered allmulticast mode
[  156.267299][T13718] tipc: Resetting bearer <eth:syzkaller0>
[  156.283764][   T24] syz1: Port: 1 Link DOWN
[  156.292320][ T7774] syz2: Port: 1 Link DOWN
[  156.840065][T13740] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  156.863375][T13745] openvswitch: : Dropping previously announced user features
[  156.871646][T13745] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.877685][T13745] bond0: (slave gretap4): making interface the new active one
[  156.881733][T13745] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  156.929043][ T7774] lo speed is unknown, defaulting to 1000
[  156.930971][ T7774] syz0: Port: 1 Link ACTIVE
[  156.932554][   T47] lo speed is unknown, defaulting to 1000
[  157.115874][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.118915][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.200053][   T47] lo speed is unknown, defaulting to 1000
[  157.204416][   T47] syz0: Port: 1 Link DOWN
[  157.209322][   T47] lo speed is unknown, defaulting to 1000
[  157.255795][T13807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.262677][ T5883] syz1: Port: 1 Link ACTIVE
[  157.395752][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.405181][T13819] 8021q: adding VLAN 0 to HW filter on device team0
[  157.409673][T13819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.416105][ T5883] lo speed is unknown, defaulting to 1000
[  157.418672][ T5883] syz0: Port: 1 Link ACTIVE
[  157.420685][ T5883] lo speed is unknown, defaulting to 1000
[  157.464220][T13818] lo speed is unknown, defaulting to 1000
[  157.582388][T13824] bond30: left promiscuous mode
[  157.588311][ T5883] syz1: Port: 1 Link DOWN
[  157.712371][T13831] __nla_validate_parse: 41 callbacks suppressed
[  157.712382][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'.
[  157.764729][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'.
[  157.804569][T13852] validate_nla: 14 callbacks suppressed
[  157.804630][T13852] netlink: 'syz.1.2086': attribute type 1 has an invalid length.
[  157.876794][T13855] ksmbd: Unknown IPC event: 3, ignore.
[  158.779518][T13862] syzkaller0: entered promiscuous mode
[  158.781504][T13862] syzkaller0: entered allmulticast mode
[  158.789214][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'.
[  158.796226][T13864] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2091'.
[  158.829918][T13868] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  158.849605][T13868] 8021q: adding VLAN 0 to HW filter on device bond33
[  158.853963][T13868] vlan1: entered promiscuous mode
[  158.855873][T13868] bond33: entered promiscuous mode
[  158.859078][T13868] vlan1: entered allmulticast mode
[  158.860828][T13868] bond33: entered allmulticast mode
[  158.867454][T13862] lo speed is unknown, defaulting to 1000
[  158.870289][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'.
[  158.886952][T13873] vlan0: entered allmulticast mode
[  158.888779][T13873] bridge0: entered allmulticast mode
[  158.890645][T13873] bridge15: port 1(vlan0) entered blocking state
[  158.892861][T13873] bridge15: port 1(vlan0) entered disabled state
[  158.896003][T13873] vlan0: entered promiscuous mode
[  158.897967][T13873] bridge0: entered promiscuous mode
[  158.901656][T13873] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  158.968852][T13885] syzkaller1: entered promiscuous mode
[  158.971055][T13885] syzkaller1: entered allmulticast mode
[  158.979648][T13885] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.983727][T13885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.989540][T13885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.016575][T13887] netlink: 'syz.0.2096': attribute type 1 has an invalid length.
[  159.020659][T13885] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.024685][T13885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.030496][T13885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.080709][T13885] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.084728][T13885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.088900][T13885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.145363][T13895] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  159.161329][T13895] 8021q: adding VLAN 0 to HW filter on device bond35
[  159.167112][T13885] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.174006][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2098'.
[  159.179314][T13885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.189530][T13885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  159.293081][T13901] veth21: entered promiscuous mode
[  159.298551][T13901] bond35: (slave veth21): Enslaving as an active interface with a down link
[  159.312546][ T5705] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.316051][ T5705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  159.319771][ T5705] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  159.326168][ T5705] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.329555][ T5705] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  159.332647][ T5705] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  159.348702][ T5705] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.352147][ T5705] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  159.359215][ T5705] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  159.367714][ T5705] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.371191][ T5705] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  159.374574][ T5705] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  159.440468][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'.
[  159.472708][T13908] veth0_to_bond: left allmulticast mode
[  159.474851][T13908] veth0_to_bond: left promiscuous mode
[  159.478114][T13908] bridge10: port 1(veth0_to_bond) entered disabled state
[  159.483782][T13908] bond0: (slave gretap4): Releasing active interface
[  159.488646][T13908] vlan0: left promiscuous mode
[  159.490472][T13908] bridge0: left promiscuous mode
[  159.492243][T13908] bridge15: port 1(vlan0) entered disabled state
[  159.500710][T13908] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.608796][T13908] lo speed is unknown, defaulting to 1000
[  159.843518][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'.
[  159.846741][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2103'.
[  159.945175][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'.
[  160.021075][T13926] can: request_module (can-proto-0) failed.
[  160.023753][T13926] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  160.073749][T13935] netlink: 'syz.1.2110': attribute type 1 has an invalid length.
[  160.091359][T13935] 8021q: adding VLAN 0 to HW filter on device bond37
[  160.094434][T13935] bond36: (slave bond37): making interface the new active one
[  160.097336][T13935] bond36: (slave bond37): Enslaving as an active interface with an up link
[  160.104231][T13935] bond36: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  160.109290][T13935] bond36: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  160.199970][T13945] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  160.913312][T13967] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  160.924581][T13967] bond34: entered promiscuous mode
[  160.930134][T13967] 8021q: adding VLAN 0 to HW filter on device bond34
[  160.937738][T13967] 8021q: adding VLAN 0 to HW filter on device bond34
[  160.940466][T13967] bond34: (slave wireguard1): The slave device specified does not support setting the MAC address
[  160.944010][T13967] bond34: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  160.949533][T13967] bond34: (slave wireguard1): making interface the new active one
[  160.952284][T13967] wireguard1: entered promiscuous mode
[  160.954971][T13967] bond34: (slave wireguard1): Enslaving as an active interface with an up link
[  160.998135][T13971] tipc: Resetting bearer <eth:gre0>
[  161.018245][T13971] tipc: Resetting bearer <eth:team0>
[  161.033859][T13971] tipc: Resetting bearer <eth:syzkaller0>
[  161.048796][T13971] bridge10: left promiscuous mode
[  161.050868][T13971] bridge10: left allmulticast mode
[  161.053631][T13971] bond23: left promiscuous mode
[  161.059449][T13971] bond24: left promiscuous mode
[  161.062803][T13971] batadv1: left promiscuous mode
[  161.064818][T13971] batadv1: left allmulticast mode
[  161.067356][T13971] veth7: left promiscuous mode
[  161.077051][T13971] vlan1: left promiscuous mode
[  161.078999][T13971] bond33: left promiscuous mode
[  161.081098][T13971] vlan1: left allmulticast mode
[  161.083110][T13971] bond33: left allmulticast mode
[  161.087838][T13971] bond34: left promiscuous mode
[  161.089871][T13971] wireguard1: left promiscuous mode
[  161.093563][ T7435] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.097140][ T7435] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  161.103360][ T7435] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  161.110204][ T7435] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.115392][ T7435] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  161.119085][ T7435] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  161.122515][ T7435] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.126214][ T7435] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  161.129704][ T7435] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  161.133122][ T7435] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.138521][ T7435] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  161.142397][ T7435] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  161.256856][T13978] lo speed is unknown, defaulting to 1000
[  161.432163][T13985] vlan0: entered promiscuous mode
[  161.434363][T13985] bridge0: entered promiscuous mode
[  161.437055][T13985] vlan0: left allmulticast mode
[  161.438989][T13985] bridge0: left allmulticast mode
[  161.457043][T13991] netlink: 'syz.0.2124': attribute type 1 has an invalid length.
[  161.732615][T14009] netlink: 'syz.0.2126': attribute type 2 has an invalid length.
[  161.814043][T14023] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  161.821906][T14023] 8021q: adding VLAN 0 to HW filter on device bond33
[  161.833918][T14023] veth12: entered promiscuous mode
[  162.938270][T14054] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  163.189242][T14075] validate_nla: 1 callbacks suppressed
[  163.189250][T14075] netlink: 'syz.2.2141': attribute type 10 has an invalid length.
[  163.193826][T14075] __nla_validate_parse: 5 callbacks suppressed
[  163.193837][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2141'.
[  163.203158][T14075] geneve0: entered promiscuous mode
[  163.207299][T14075] team0: Port device geneve0 added
[  163.210156][ T5705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.214026][ T5705] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.218229][ T5705] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.221681][ T5705] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.975217][T14093] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2145'.
[  164.009581][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2146'.
[  164.037479][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.040844][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.044140][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.050347][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.054863][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.057867][T14097] sctp: [Deprecated]: syz.0.2147 (pid 14097) Use of int in maxseg socket option.
[  164.057867][T14097] Use struct sctp_assoc_value instead
[  164.058678][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.066431][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'.
[  164.089116][T14107] siw: device registration error -23
[  164.093606][T14109] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  164.098564][T14109] CPU: 0 UID: 0 PID: 14109 Comm: syz.1.2145 Not tainted syzkaller #0 PREEMPT(full) 
[  164.098575][T14109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.098580][T14109] Call Trace:
[  164.098583][T14109]  <TASK>
[  164.098587][T14109]  dump_stack_lvl+0x189/0x250
[  164.098600][T14109]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.098610][T14109]  ? __pfx__printk+0x10/0x10
[  164.098620][T14109]  ? kernfs_root+0x1c/0x230
[  164.098629][T14109]  ? kernfs_path_from_node+0x2f/0x290
[  164.098637][T14109]  ? kernfs_path_from_node+0x250/0x290
[  164.098644][T14109]  ? kernfs_path_from_node+0x2f/0x290
[  164.098652][T14109]  sysfs_warn_dup+0x8e/0xa0
[  164.098659][T14109]  sysfs_do_create_link_sd+0xc0/0x110
[  164.098667][T14109]  device_add_class_symlinks+0x1cf/0x240
[  164.098675][T14109]  device_add+0x475/0xb50
[  164.098683][T14109]  wiphy_register+0x1ba6/0x28d0
[  164.098698][T14109]  ? __pfx_wiphy_register+0x10/0x10
[  164.098708][T14109]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  164.098717][T14109]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  164.098727][T14109]  ieee80211_register_hw+0x3425/0x4080
[  164.098738][T14109]  ? ieee80211_register_hw+0x1441/0x4080
[  164.098747][T14109]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  164.098756][T14109]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.098766][T14109]  ? __hrtimer_setup+0x187/0x210
[  164.098773][T14109]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  164.098784][T14109]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  164.098797][T14109]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  164.098806][T14109]  ? trace_kmalloc+0x1f/0xd0
[  164.098814][T14109]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  164.098824][T14109]  ? kstrndup+0xbf/0x160
[  164.098834][T14109]  hwsim_new_radio_nl+0xea4/0x1b10
[  164.098844][T14109]  ? __pfx___nla_validate_parse+0x10/0x10
[  164.098858][T14109]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.098888][T14109]  ? __nla_parse+0x40/0x60
[  164.098901][T14109]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  164.098912][T14109]  genl_family_rcv_msg_doit+0x215/0x300
[  164.098922][T14109]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  164.098932][T14109]  ? bpf_lsm_capable+0x9/0x20
[  164.098942][T14109]  ? security_capable+0x7e/0x2e0
[  164.098954][T14109]  genl_rcv_msg+0x60e/0x790
[  164.098964][T14109]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.098971][T14109]  ? __kasan_slab_alloc+0x6c/0x80
[  164.098981][T14109]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.098989][T14109]  ? __netlink_lookup+0xbd/0x810
[  164.099000][T14109]  ? rcu_is_watching+0x15/0xb0
[  164.099008][T14109]  netlink_rcv_skb+0x208/0x470
[  164.099018][T14109]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.099026][T14109]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.099039][T14109]  ? lock_release+0x4b/0x3e0
[  164.099054][T14109]  ? down_read+0x1ad/0x2e0
[  164.099065][T14109]  genl_rcv+0x28/0x40
[  164.099075][T14109]  netlink_unicast+0x82f/0x9e0
[  164.099093][T14109]  ? __pfx_netlink_unicast+0x10/0x10
[  164.099107][T14109]  ? netlink_sendmsg+0x642/0xb30
[  164.099121][T14109]  ? skb_put+0x11b/0x210
[  164.099129][T14109]  netlink_sendmsg+0x805/0xb30
[  164.099141][T14109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.099151][T14109]  ? futex_unqueue+0x22/0x240
[  164.099159][T14109]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.099165][T14109]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.099173][T14109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.099183][T14109]  __sock_sendmsg+0x21c/0x270
[  164.099192][T14109]  ____sys_sendmsg+0x505/0x830
[  164.099200][T14109]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.099210][T14109]  ? import_iovec+0x74/0xa0
[  164.099223][T14109]  ___sys_sendmsg+0x21f/0x2a0
[  164.099233][T14109]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.099245][T14109]  ? futex_wait+0x285/0x360
[  164.099266][T14109]  ? __fget_files+0x2a/0x420
[  164.099276][T14109]  ? __fget_files+0x3a0/0x420
[  164.099286][T14109]  __x64_sys_sendmsg+0x19b/0x260
[  164.099298][T14109]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.099312][T14109]  ? rcu_is_watching+0x15/0xb0
[  164.099324][T14109]  ? rcu_is_watching+0x15/0xb0
[  164.099331][T14109]  do_syscall_64+0xfa/0x3b0
[  164.099338][T14109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.099345][T14109]  ? exc_page_fault+0x9f/0xf0
[  164.099355][T14109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.099361][T14109] RIP: 0033:0x7f708438ebe9
[  164.099368][T14109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.099375][T14109] RSP: 002b:00007f708524f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.099407][T14109] RAX: ffffffffffffffda RBX: 00007f70845b6180 RCX: 00007f708438ebe9
[  164.099414][T14109] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  164.099419][T14109] RBP: 00007f7084411e19 R08: 0000000000000000 R09: 0000000000000000
[  164.099424][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.099428][T14109] R13: 00007f70845b6218 R14: 00007f70845b6180 R15: 00007ffe46fb5dc8
[  164.099437][T14109]  </TASK>
[  164.325068][T14114] netlink: 'syz.2.2151': attribute type 1 has an invalid length.
[  164.478022][T14122] veth15: entered promiscuous mode
[  164.522957][T14123] erspan0: entered allmulticast mode
[  164.739845][ T7435] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  164.960689][T14148] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.964869][T14148] syzkaller0: entered promiscuous mode
[  164.968477][T14148] syzkaller0: entered allmulticast mode
[  164.971264][ T9166] syz2: Port: 1 Link ACTIVE
[  165.089112][T14157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.238004][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.289199][T14168] bond1: option mode: unable to set because the bond device is up
[  165.412265][T14173] netlink: 'syz.2.2168': attribute type 10 has an invalid length.
[  165.475484][T14192] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  165.504060][T14201] netlink: 'syz.2.2173': attribute type 1 has an invalid length.
[  165.520108][T14201] 8021q: adding VLAN 0 to HW filter on device bond35
[  165.531892][T14201] veth15: entered promiscuous mode
[  165.536227][T14201] bond35: (slave veth15): Enslaving as an active interface with a down link
[  165.565337][T14204] bridge0: port 1(erspan0) entered blocking state
[  165.568213][T14204] bridge0: port 1(erspan0) entered disabled state
[  165.639420][T14212] netlink: 'syz.2.2177': attribute type 1 has an invalid length.
[  165.651652][T14212] 8021q: adding VLAN 0 to HW filter on device bond36
[  165.662985][T14212] veth17: entered promiscuous mode
[  165.667798][T14212] bond36: (slave veth17): Enslaving as an active interface with a down link
[  165.887630][T14216] netlink: 'syz.0.2178': attribute type 6 has an invalid length.
[  165.898585][T14216] bond34: entered promiscuous mode
[  165.925052][T14222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  165.958574][T14225] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  165.962198][T14226] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  165.973585][T14225] 8021q: adding VLAN 0 to HW filter on device bond35
[  165.979497][T14226] bond35: entered promiscuous mode
[  166.004758][T14229] netem: incorrect ge model size
[  166.007624][T14229] netem: change failed
[  166.106502][T14231] lo speed is unknown, defaulting to 1000
[  166.439792][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  166.442466][T14249] syzkaller0: left promiscuous mode
[  166.444678][T14249] syzkaller0: left allmulticast mode
[  166.448051][T14249] bond32: left allmulticast mode
[  166.451187][T14249] ipvlan0: left allmulticast mode
[  166.453353][T14249] bond33: left allmulticast mode
[  166.461985][T14249] veth21: left promiscuous mode
[  166.467290][   T24] lo speed is unknown, defaulting to 1000
[  166.467421][ T7435] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.470987][   T24] syz0: Port: 1 Link DOWN
[  166.472615][ T7435] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.477667][ T7435] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.481131][ T7435] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.485702][   T24] lo speed is unknown, defaulting to 1000
[  166.650443][T14266] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.653533][T14266] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  166.656979][T14266] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  166.659892][T14266] tipc: Resetting bearer <eth:syzkaller0>
[  166.678423][T14268] netlink: 'syz.2.2193': attribute type 1 has an invalid length.
[  166.681837][T14268] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  166.834203][T14280] erspan0: left allmulticast mode
[  166.844242][T14280] 8021q: adding VLAN 0 to HW filter on device team0
[  166.847748][T14280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.885900][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.886767][T14283] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.937062][T14283] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.989674][T14283] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.005186][T14289] tipc: Resetting bearer <eth:syzkaller0>
[  167.018814][T14283] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.114733][T14292] lo speed is unknown, defaulting to 1000
[  167.205485][ T5884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.212797][ T7435] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.227486][ T7435] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.233385][ T7435] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.293069][T14311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.386251][T14318] syz_tun: entered allmulticast mode
[  167.390187][T14318] dvmrp8: entered allmulticast mode
[  167.392719][T14318] syz_tun: left allmulticast mode
[  167.394378][T14318] dvmrp8: left allmulticast mode
[  167.497238][T14318] netlink: 'syz.0.2206': attribute type 23 has an invalid length.
[  167.515532][T14320] lo speed is unknown, defaulting to 1000
[  167.603713][T14329] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  167.608405][T14329] CPU: 1 UID: 0 PID: 14329 Comm: syz.1.2209 Not tainted syzkaller #0 PREEMPT(full) 
[  167.608420][T14329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.608427][T14329] Call Trace:
[  167.608431][T14329]  <TASK>
[  167.608436][T14329]  dump_stack_lvl+0x189/0x250
[  167.608453][T14329]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.608464][T14329]  ? __pfx__printk+0x10/0x10
[  167.608474][T14329]  ? kernfs_root+0x1c/0x230
[  167.608488][T14329]  ? kernfs_path_from_node+0x2f/0x290
[  167.608499][T14329]  ? kernfs_path_from_node+0x250/0x290
[  167.608510][T14329]  ? kernfs_path_from_node+0x2f/0x290
[  167.608522][T14329]  sysfs_warn_dup+0x8e/0xa0
[  167.608533][T14329]  sysfs_do_create_link_sd+0xc0/0x110
[  167.608545][T14329]  device_add_class_symlinks+0x1cf/0x240
[  167.608558][T14329]  device_add+0x475/0xb50
[  167.608569][T14329]  wiphy_register+0x1ba6/0x28d0
[  167.608589][T14329]  ? __pfx_wiphy_register+0x10/0x10
[  167.608602][T14329]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  167.608616][T14329]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  167.608627][T14329]  ieee80211_register_hw+0x3425/0x4080
[  167.608640][T14329]  ? ieee80211_register_hw+0x1441/0x4080
[  167.608674][T14329]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  167.608687][T14329]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.608705][T14329]  ? __hrtimer_setup+0x187/0x210
[  167.608715][T14329]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  167.608728][T14329]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  167.608752][T14329]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  167.608765][T14329]  ? trace_kmalloc+0x1f/0xd0
[  167.608778][T14329]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  167.608793][T14329]  ? kstrndup+0xbf/0x160
[  167.608806][T14329]  hwsim_new_radio_nl+0xea4/0x1b10
[  167.608820][T14329]  ? __pfx___nla_validate_parse+0x10/0x10
[  167.608836][T14329]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.608850][T14329]  ? __nla_parse+0x40/0x60
[  167.608866][T14329]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  167.608881][T14329]  genl_family_rcv_msg_doit+0x215/0x300
[  167.608896][T14329]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  167.608912][T14329]  ? bpf_lsm_capable+0x9/0x20
[  167.608923][T14329]  ? security_capable+0x7e/0x2e0
[  167.608938][T14329]  genl_rcv_msg+0x60e/0x790
[  167.608952][T14329]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.608962][T14329]  ? __kasan_slab_alloc+0x6c/0x80
[  167.608976][T14329]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.608989][T14329]  ? __netlink_lookup+0xbd/0x810
[  167.608999][T14329]  ? rcu_is_watching+0x15/0xb0
[  167.609012][T14329]  netlink_rcv_skb+0x208/0x470
[  167.609027][T14329]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.609035][T14329]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.609051][T14329]  ? lock_release+0x4b/0x3e0
[  167.609068][T14329]  ? down_read+0x1ad/0x2e0
[  167.609078][T14329]  genl_rcv+0x28/0x40
[  167.609089][T14329]  netlink_unicast+0x82f/0x9e0
[  167.609105][T14329]  ? __pfx_netlink_unicast+0x10/0x10
[  167.609119][T14329]  ? netlink_sendmsg+0x642/0xb30
[  167.609133][T14329]  ? skb_put+0x11b/0x210
[  167.609143][T14329]  netlink_sendmsg+0x805/0xb30
[  167.609157][T14329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.609172][T14329]  ? futex_unqueue+0x22/0x240
[  167.609184][T14329]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.609194][T14329]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.609205][T14329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.609220][T14329]  __sock_sendmsg+0x21c/0x270
[  167.609232][T14329]  ____sys_sendmsg+0x505/0x830
[  167.609241][T14329]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.609254][T14329]  ? import_iovec+0x74/0xa0
[  167.609267][T14329]  ___sys_sendmsg+0x21f/0x2a0
[  167.609278][T14329]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.609291][T14329]  ? futex_wait+0x285/0x360
[  167.609312][T14329]  ? __fget_files+0x2a/0x420
[  167.609320][T14329]  ? __fget_files+0x3a0/0x420
[  167.609327][T14329]  __x64_sys_sendmsg+0x19b/0x260
[  167.609339][T14329]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.609375][T14329]  ? rcu_is_watching+0x15/0xb0
[  167.609388][T14329]  ? rcu_is_watching+0x15/0xb0
[  167.609399][T14329]  do_syscall_64+0xfa/0x3b0
[  167.609408][T14329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.609415][T14329]  ? exc_page_fault+0x9f/0xf0
[  167.609430][T14329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.609441][T14329] RIP: 0033:0x7f708438ebe9
[  167.609451][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.609461][T14329] RSP: 002b:00007f7085291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.609474][T14329] RAX: ffffffffffffffda RBX: 00007f70845b5fa0 RCX: 00007f708438ebe9
[  167.609482][T14329] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  167.609489][T14329] RBP: 00007f7084411e19 R08: 0000000000000000 R09: 0000000000000000
[  167.609496][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.609502][T14329] R13: 00007f70845b6038 R14: 00007f70845b5fa0 R15: 00007ffe46fb5dc8
[  167.609512][T14329]  </TASK>
[  167.783633][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  167.789097][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  167.894894][T14336] lo speed is unknown, defaulting to 1000
[  168.050902][T14343] syzkaller0: entered promiscuous mode
[  168.053247][T14343] syzkaller0: entered allmulticast mode
[  168.332973][T14360] __nla_validate_parse: 45 callbacks suppressed
[  168.332994][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'.
[  168.382735][T14377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2221'.
[  168.388196][T14377] tipc: New replicast peer: 255.255.255.255
[  168.390598][T14377] tipc: Enabled bearer <udp:syz2>, priority 10
[  168.394599][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'.
[  168.398288][T14377] tipc: Disabling bearer <udp:syz2>
[  168.434639][T14379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  168.456403][T14379] netlink: 'syz.1.2222': attribute type 4 has an invalid length.
[  168.463569][T14379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2222'.
[  168.538859][T14397] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.839000][ T7435] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.842251][ T7435] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  169.035995][ T9166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  169.123832][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'.
[  169.127392][T14449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'.
[  169.332323][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'.
[  169.340817][T14480] netlink: 'syz.0.2233': attribute type 2 has an invalid length.
[  169.352848][T14480] : entered promiscuous mode
[  169.375919][T14482] netlink: 'syz.2.2234': attribute type 2 has an invalid length.
[  169.457818][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'.
[  169.467608][T14496] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  169.484627][T14493] netlink: 'syz.1.2236': attribute type 4 has an invalid length.
[  169.490122][T14493] netlink: 'syz.1.2236': attribute type 4 has an invalid length.
[  169.494762][   T47] lo speed is unknown, defaulting to 1000
[  169.501832][   T47] syz0: Port: 1 Link ACTIVE
[  169.503908][   T47] lo speed is unknown, defaulting to 1000
[  169.523934][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'.
[  169.528689][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'.
[  169.538133][T14486] netlink: 'syz.0.2235': attribute type 1 has an invalid length.
[  169.582433][T14512] D: renamed from syzkaller0 (while UP)
[  169.585330][T14512] tipc: Disabling bearer <eth:syzkaller0>
[  169.593664][T14515] netlink: 'syz.0.2240': attribute type 39 has an invalid length.
[  169.611374][T14517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.635501][T14519] dvmrp8: entered allmulticast mode
[  169.658864][T14525] netlink: 'syz.2.2244': attribute type 9 has an invalid length.
[  169.664552][T14525] macvlan4: entered promiscuous mode
[  169.669494][T14525] macvlan4: entered allmulticast mode
[  169.694187][T14527] netlink: 'syz.2.2245': attribute type 2 has an invalid length.
[  169.699055][T14528] netlink: 'syz.1.2242': attribute type 23 has an invalid length.
[  169.704911][T14527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.768381][T14519] lo speed is unknown, defaulting to 1000
[  169.779171][T14532] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  169.786165][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.0.2246 Not tainted syzkaller #0 PREEMPT(full) 
[  169.786177][T14532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.786181][T14532] Call Trace:
[  169.786184][T14532]  <TASK>
[  169.786188][T14532]  dump_stack_lvl+0x189/0x250
[  169.786201][T14532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.786209][T14532]  ? __pfx__printk+0x10/0x10
[  169.786219][T14532]  ? kernfs_root+0x1c/0x230
[  169.786228][T14532]  ? kernfs_path_from_node+0x2f/0x290
[  169.786235][T14532]  ? kernfs_path_from_node+0x250/0x290
[  169.786242][T14532]  ? kernfs_path_from_node+0x2f/0x290
[  169.786251][T14532]  sysfs_warn_dup+0x8e/0xa0
[  169.786258][T14532]  sysfs_do_create_link_sd+0xc0/0x110
[  169.786266][T14532]  device_add_class_symlinks+0x1cf/0x240
[  169.786274][T14532]  device_add+0x475/0xb50
[  169.786281][T14532]  wiphy_register+0x1ba6/0x28d0
[  169.786295][T14532]  ? __pfx_wiphy_register+0x10/0x10
[  169.786304][T14532]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  169.786313][T14532]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  169.786322][T14532]  ieee80211_register_hw+0x3425/0x4080
[  169.786334][T14532]  ? ieee80211_register_hw+0x1441/0x4080
[  169.786369][T14532]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  169.786378][T14532]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.786389][T14532]  ? __hrtimer_setup+0x187/0x210
[  169.786396][T14532]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.786408][T14532]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  169.786421][T14532]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  169.786429][T14532]  ? trace_kmalloc+0x1f/0xd0
[  169.786438][T14532]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  169.786449][T14532]  ? kstrndup+0xbf/0x160
[  169.786458][T14532]  hwsim_new_radio_nl+0xea4/0x1b10
[  169.786468][T14532]  ? __pfx___nla_validate_parse+0x10/0x10
[  169.786480][T14532]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.786491][T14532]  ? __nla_parse+0x40/0x60
[  169.786501][T14532]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  169.786511][T14532]  genl_family_rcv_msg_doit+0x215/0x300
[  169.786520][T14532]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  169.786530][T14532]  ? bpf_lsm_capable+0x9/0x20
[  169.786539][T14532]  ? security_capable+0x7e/0x2e0
[  169.786550][T14532]  genl_rcv_msg+0x60e/0x790
[  169.786558][T14532]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.786565][T14532]  ? __kasan_slab_alloc+0x6c/0x80
[  169.786574][T14532]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.786583][T14532]  ? __netlink_lookup+0xbd/0x810
[  169.786589][T14532]  ? rcu_is_watching+0x15/0xb0
[  169.786597][T14532]  netlink_rcv_skb+0x208/0x470
[  169.786607][T14532]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.786614][T14532]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.786626][T14532]  ? lock_release+0x4b/0x3e0
[  169.786636][T14532]  ? down_read+0x1ad/0x2e0
[  169.786643][T14532]  genl_rcv+0x28/0x40
[  169.786650][T14532]  netlink_unicast+0x82f/0x9e0
[  169.786660][T14532]  ? __pfx_netlink_unicast+0x10/0x10
[  169.786668][T14532]  ? netlink_sendmsg+0x642/0xb30
[  169.786678][T14532]  ? skb_put+0x11b/0x210
[  169.786685][T14532]  netlink_sendmsg+0x805/0xb30
[  169.786698][T14532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.786714][T14532]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.786724][T14532]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.786735][T14532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.786750][T14532]  __sock_sendmsg+0x21c/0x270
[  169.786766][T14532]  ____sys_sendmsg+0x505/0x830
[  169.786779][T14532]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.786793][T14532]  ? import_iovec+0x74/0xa0
[  169.786806][T14532]  ___sys_sendmsg+0x21f/0x2a0
[  169.786820][T14532]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.786833][T14532]  ? futex_wake+0x4b2/0x560
[  169.786856][T14532]  ? __fget_files+0x2a/0x420
[  169.786865][T14532]  ? __fget_files+0x3a0/0x420
[  169.786872][T14532]  __x64_sys_sendmsg+0x19b/0x260
[  169.786880][T14532]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.786889][T14532]  ? rcu_is_watching+0x15/0xb0
[  169.786896][T14532]  ? rcu_is_watching+0x15/0xb0
[  169.786903][T14532]  do_syscall_64+0xfa/0x3b0
[  169.786910][T14532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.786917][T14532]  ? exc_page_fault+0x9f/0xf0
[  169.786927][T14532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.786934][T14532] RIP: 0033:0x7fbdd818ebe9
[  169.786945][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.786961][T14532] RSP: 002b:00007fbdd63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.786975][T14532] RAX: ffffffffffffffda RBX: 00007fbdd83b6090 RCX: 00007fbdd818ebe9
[  169.786984][T14532] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  169.786992][T14532] RBP: 00007fbdd8211e19 R08: 0000000000000000 R09: 0000000000000000
[  169.786998][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.787002][T14532] R13: 00007fbdd83b6128 R14: 00007fbdd83b6090 R15: 00007ffd14014ef8
[  169.787011][T14532]  </TASK>
[  169.996272][T14518] dvmrp8: left allmulticast mode
[  170.085482][T14547] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  170.144112][T14555] Unsupported xt match
[  170.144122][T14555] unable to load match
[  170.159477][T14547] lo speed is unknown, defaulting to 1000
[  170.355748][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  170.435290][T14564] lo speed is unknown, defaulting to 1000
[  171.445927][T14602] dvmrp0: entered allmulticast mode
[  171.542948][T14606] bond39: entered promiscuous mode
[  171.544988][T14606] bond39: entered allmulticast mode
[  171.565006][T14606] 8021q: adding VLAN 0 to HW filter on device bond39
[  172.335357][T14614] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  172.341154][T14613] IPVS: stopping backup sync thread 14614 ...
[  172.347690][T14618] tipc: Resetting bearer <eth:gre0>
[  172.362739][T14618] tipc: Resetting bearer <eth:team0>
[  172.378481][T14618] tipc: Resetting bearer <eth:syzkaller0>
[  172.392304][ T5884] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.395483][ T5884] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.399065][ T5884] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.404122][ T5884] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.443300][T14627] 8021q: adding VLAN 0 to HW filter on device bond39
[  172.454104][T14627] bond38: (slave bond39): making interface the new active one
[  172.457973][T14627] bond38: (slave bond39): Enslaving as an active interface with an up link
[  172.465146][T14628] 8021q: adding VLAN 0 to HW filter on device bond38
[  173.195742][T14648] syz_tun: mtu less than device minimum
[  173.402766][T14666] dvmrp1: entered allmulticast mode
[  173.458403][T14676] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.459932][T14681] __nla_validate_parse: 18 callbacks suppressed
[  173.459946][T14681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2278'.
[  173.494579][T14684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2279'.
[  173.509407][T14684] bond36: entered promiscuous mode
[  173.511621][T14684] bond36: entered allmulticast mode
[  173.513984][T14684] 8021q: adding VLAN 0 to HW filter on device bond36
[  173.520988][T14676] team0: Port device bridge13 removed
[  173.524065][T14676] bond31: (slave veth17): Releasing active interface
[  173.569453][T14676] bond34: (slave geneve4): Releasing active interface
[  173.578225][T14676] bond35: (slave veth21): Releasing active interface
[  173.583731][T14676] bond36: (slave bond37): Releasing backup interface
[  173.589904][T14676] bond38: (slave bond39): Releasing backup interface
[  173.590360][T14689] validate_nla: 6 callbacks suppressed
[  173.590371][T14689] netlink: 'syz.0.2280': attribute type 1 has an invalid length.
[  173.603806][T14689] bond37: entered promiscuous mode
[  173.606252][T14689] 8021q: adding VLAN 0 to HW filter on device bond37
[  173.611243][T14690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.613858][T14690] IPv6: NLM_F_CREATE should be set when creating new route
[  173.616650][T14690] IPv6: NLM_F_CREATE should be set when creating new route
[  173.620751][T14689] 8021q: adding VLAN 0 to HW filter on device bond37
[  173.623407][T14689] bond37: (slave wireguard1): The slave device specified does not support setting the MAC address
[  173.626866][T14690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.630595][T14689] bond37: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  173.635840][T14689] bond37: (slave wireguard1): making interface the new active one
[  173.638664][T14689] wireguard1: entered promiscuous mode
[  173.640901][T14689] bond37: (slave wireguard1): Enslaving as an active interface with an up link
[  173.650134][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  173.655103][T14690] bond37: (slave wireguard2): The slave device specified does not support setting the MAC address
[  173.660050][T14690] bond37: (slave wireguard2): Enslaving as a backup interface with an up link
[  173.666462][T14689] bond37: (slave wireguard3): The slave device specified does not support setting the MAC address
[  173.671060][T14689] bond37: (slave wireguard3): Enslaving as a backup interface with an up link
[  173.688549][T14689] bond37: (slave wireguard4): The slave device specified does not support setting the MAC address
[  173.692936][T14689] bond37: (slave wireguard4): Enslaving as a backup interface with an up link
[  173.698421][T14689] bond37: (slave wireguard5): The slave device specified does not support setting the MAC address
[  173.703428][T14689] bond37: (slave wireguard5): Enslaving as a backup interface with an up link
[  173.709628][T14689] bond37: (slave wireguard6): The slave device specified does not support setting the MAC address
[  173.715403][T14689] bond37: (slave wireguard6): Enslaving as a backup interface with an up link
[  173.722793][T14689] bond37: (slave wireguard7): The slave device specified does not support setting the MAC address
[  173.728447][T14689] bond37: (slave wireguard7): Enslaving as a backup interface with an up link
[  173.733423][T14689] bond37: (slave wireguard8): The slave device specified does not support setting the MAC address
[  173.739028][T14689] bond37: (slave wireguard8): Enslaving as a backup interface with an up link
[  173.745251][T14689] bond37: (slave wireguard9): The slave device specified does not support setting the MAC address
[  173.750770][T14689] bond37: (slave wireguard9): Enslaving as a backup interface with an up link
[  173.756383][T14695] vlan4: entered allmulticast mode
[  173.758129][T14695] bridge0: entered allmulticast mode
[  173.760235][T14695] bridge18: port 1(vlan4) entered blocking state
[  173.762622][T14695] bridge18: port 1(vlan4) entered disabled state
[  173.765464][T14695] vlan4: entered promiscuous mode
[  173.767597][T14695] bridge0: entered promiscuous mode
[  173.773636][T14689] bond37: (slave wireguard10): The slave device specified does not support setting the MAC address
[  173.780589][T14689] bond37: (slave wireguard10): Enslaving as a backup interface with an up link
[  173.786825][T14689] bond37: (slave wireguard11): The slave device specified does not support setting the MAC address
[  173.791254][T14689] bond37: (slave wireguard11): Enslaving as a backup interface with an up link
[  173.797783][T14689] bond37: (slave wireguard12): The slave device specified does not support setting the MAC address
[  173.803689][T14689] bond37: (slave wireguard12): Enslaving as a backup interface with an up link
[  173.810541][T14689] bond37: (slave wireguard13): The slave device specified does not support setting the MAC address
[  173.816674][T14689] bond37: (slave wireguard13): Enslaving as a backup interface with an up link
[  173.820523][T14695] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  173.826819][T14689] bond37: (slave wireguard14): The slave device specified does not support setting the MAC address
[  173.833116][T14689] bond37: (slave wireguard14): Enslaving as a backup interface with an up link
[  173.841266][T14689] bond37: (slave wireguard15): The slave device specified does not support setting the MAC address
[  173.847562][T14689] bond37: (slave wireguard15): Enslaving as a backup interface with an up link
[  173.853799][T14689] bond37: (slave wireguard16): The slave device specified does not support setting the MAC address
[  173.858646][T14689] bond37: (slave wireguard16): Enslaving as a backup interface with an up link
[  173.863920][T14689] bond37: (slave wireguard17): The slave device specified does not support setting the MAC address
[  173.870245][T14689] bond37: (slave wireguard17): Enslaving as a backup interface with an up link
[  173.877389][T14689] bond37: (slave wireguard18): The slave device specified does not support setting the MAC address
[  173.884247][T14689] bond37: (slave wireguard18): Enslaving as a backup interface with an up link
[  173.891382][T14689] bond37: (slave wireguard19): The slave device specified does not support setting the MAC address
[  173.896132][T14689] bond37: (slave wireguard19): Enslaving as a backup interface with an up link
[  173.902171][T14689] bond37: (slave wireguard20): The slave device specified does not support setting the MAC address
[  173.908276][T14689] bond37: (slave wireguard20): Enslaving as a backup interface with an up link
[  173.914922][T14689] bond37: (slave wireguard21): The slave device specified does not support setting the MAC address
[  173.920426][T14689] bond37: (slave wireguard21): Enslaving as a backup interface with an up link
[  173.926112][T14689] bond37: (slave wireguard22): The slave device specified does not support setting the MAC address
[  173.930704][T14689] bond37: (slave wireguard22): Enslaving as a backup interface with an up link
[  173.939244][T14689] bond37: (slave wireguard23): The slave device specified does not support setting the MAC address
[  173.944099][T14689] bond37: (slave wireguard23): Enslaving as a backup interface with an up link
[  173.953835][T14689] bond37: (slave wireguard24): The slave device specified does not support setting the MAC address
[  173.964573][T14689] bond37: (slave wireguard24): Enslaving as a backup interface with an up link
[  173.973363][T14689] bond37: (slave wireguard25): The slave device specified does not support setting the MAC address
[  173.979920][T14689] bond37: (slave wireguard25): Enslaving as a backup interface with an up link
[  173.986296][T14689] bond37: (slave wireguard26): The slave device specified does not support setting the MAC address
[  173.993653][T14689] bond37: (slave wireguard26): Enslaving as a backup interface with an up link
[  173.999491][T14689] bond37: (slave wireguard27): The slave device specified does not support setting the MAC address
[  174.004096][T14689] bond37: (slave wireguard27): Enslaving as a backup interface with an up link
[  174.012653][T14689] bond37: (slave wireguard28): The slave device specified does not support setting the MAC address
[  174.017766][T14689] bond37: (slave wireguard28): Enslaving as a backup interface with an up link
[  174.022941][T14689] bond37: (slave wireguard29): The slave device specified does not support setting the MAC address
[  174.028442][T14689] bond37: (slave wireguard29): Enslaving as a backup interface with an up link
[  174.034227][T14689] bond37: (slave wireguard30): The slave device specified does not support setting the MAC address
[  174.039560][T14689] bond37: (slave wireguard30): Enslaving as a backup interface with an up link
[  174.044532][T14689] bond37: (slave wireguard31): The slave device specified does not support setting the MAC address
[  174.050770][T14689] bond37: (slave wireguard31): Enslaving as a backup interface with an up link
[  174.063539][T14689] bond37: (slave wireguard32): The slave device specified does not support setting the MAC address
[  174.073200][T14689] bond37: (slave wireguard32): Enslaving as a backup interface with an up link
[  174.085963][T14689] bond37: (slave wireguard33): The slave device specified does not support setting the MAC address
[  174.092152][T14689] bond37: (slave wireguard33): Enslaving as a backup interface with an up link
[  174.100158][T14689] bond37: (slave wireguard34): The slave device specified does not support setting the MAC address
[  174.106332][T14689] bond37: (slave wireguard34): Enslaving as a backup interface with an up link
[  174.110116][T14728] lo speed is unknown, defaulting to 1000
[  174.114947][T14689] bond37: (slave wireguard35): The slave device specified does not support setting the MAC address
[  174.136985][T14689] bond37: (slave wireguard35): Enslaving as a backup interface with an up link
[  174.144017][T14689] bond37: (slave wireguard36): The slave device specified does not support setting the MAC address
[  174.153476][T14689] bond37: (slave wireguard36): Enslaving as a backup interface with an up link
[  174.164260][T14689] bond37: (slave wireguard37): The slave device specified does not support setting the MAC address
[  174.172166][T14689] bond37: (slave wireguard37): Enslaving as a backup interface with an up link
[  174.195575][T14689] bond37: (slave wireguard38): The slave device specified does not support setting the MAC address
[  174.201796][T14689] bond37: (slave wireguard38): Enslaving as a backup interface with an up link
[  174.209110][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'.
[  174.212744][T14689] bond37: (slave wireguard39): The slave device specified does not support setting the MAC address
[  174.213960][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'.
[  174.221634][T14689] bond37: (slave wireguard39): Enslaving as a backup interface with an up link
[  174.228481][T14733] netlink: 'syz.1.2284': attribute type 13 has an invalid length.
[  174.229458][T14689] bond37: (slave wireguard40): The slave device specified does not support setting the MAC address
[  174.232261][T14733] netlink: 'syz.1.2284': attribute type 17 has an invalid length.
[  174.239870][T14689] bond37: (slave wireguard40): Enslaving as a backup interface with an up link
[  174.260944][T14733] 8021q: adding VLAN 0 to HW filter on device team0
[  174.265299][T14733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.275000][T14689] bond37: (slave wireguard41): The slave device specified does not support setting the MAC address
[  174.281164][T14689] bond37: (slave wireguard41): Enslaving as a backup interface with an up link
[  174.303415][T14689] bond37: (slave wireguard42): The slave device specified does not support setting the MAC address
[  174.309097][T14689] bond37: (slave wireguard42): Enslaving as a backup interface with an up link
[  174.314231][T14689] bond37: (slave wireguard43): The slave device specified does not support setting the MAC address
[  174.319700][T14689] bond37: (slave wireguard43): Enslaving as a backup interface with an up link
[  174.328988][T14689] bond37: (slave wireguard44): The slave device specified does not support setting the MAC address
[  174.337367][T14689] bond37: (slave wireguard44): Enslaving as a backup interface with an up link
[  174.346941][T14689] bond37: (slave wireguard45): The slave device specified does not support setting the MAC address
[  174.352135][T14689] bond37: (slave wireguard45): Enslaving as a backup interface with an up link
[  174.358109][T14689] bond37: (slave wireguard46): The slave device specified does not support setting the MAC address
[  174.363246][T14689] bond37: (slave wireguard46): Enslaving as a backup interface with an up link
[  174.372471][T14689] bond37: (slave wireguard47): The slave device specified does not support setting the MAC address
[  174.378015][T14689] bond37: (slave wireguard47): Enslaving as a backup interface with an up link
[  174.383489][T14689] bond37: (slave wireguard48): The slave device specified does not support setting the MAC address
[  174.388354][T14689] bond37: (slave wireguard48): Enslaving as a backup interface with an up link
[  174.391728][T14756] tipc: Resetting bearer <eth:syzkaller0>
[  174.396822][T14689] bond37: (slave wireguard49): The slave device specified does not support setting the MAC address
[  174.401965][T14689] bond37: (slave wireguard49): Enslaving as a backup interface with an up link
[  174.413851][T14689] bond37: (slave wireguard50): The slave device specified does not support setting the MAC address
[  174.419911][T14689] bond37: (slave wireguard50): Enslaving as a backup interface with an up link
[  174.448596][T14766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2288'.
[  174.464425][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'.
[  174.468838][T14764] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2287'.
[  174.515130][T14773] netlink: 'syz.0.2290': attribute type 1 has an invalid length.
[  174.529993][T14773] veth14: entered promiscuous mode
[  174.568640][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2290'.
[  174.607538][T14783] sch_tbf: burst 5 is lower than device gretap0 mtu (230) !
[  174.609517][T14785] netlink: 'syz.2.2294': attribute type 1 has an invalid length.
[  174.622895][T14785] 8021q: adding VLAN 0 to HW filter on device bond40
[  174.720044][T14804] netlink: 'syz.2.2300': attribute type 11 has an invalid length.
[  174.724348][T14804] netlink: 'syz.2.2300': attribute type 4 has an invalid length.
[  174.728154][T14804] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2300'.
[  174.740393][T14806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.873439][T14815] netlink: 'syz.2.2304': attribute type 1 has an invalid length.
[  174.906653][T14822] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  175.045504][T14819] Oops: general protection fault, probably for non-canonical address 0xeb71e73b0018f90c: 0000 [#1] SMP KASAN PTI
[  175.049491][T14819] KASAN: maybe wild-memory-access in range [0x5b8f59d800c7c860-0x5b8f59d800c7c867]
[  175.053200][T14819] CPU: 1 UID: 0 PID: 14819 Comm: syz.1.2305 Not tainted syzkaller #0 PREEMPT(full) 
[  175.056225][T14819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.059720][T14819] RIP: 0010:__xfrm_state_lookup+0x30c/0x8d0
[  175.061703][T14819] Code: 18 48 8d 48 08 48 c1 e8 03 48 89 44 24 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 7c 03 00 00 45 0f b7 36 44 89 f7 44 89
[  175.067782][T14819] RSP: 0018:ffffc9002059f0c0 EFLAGS: 00010206
[  175.069783][T14819] RAX: 0b71eb3b0018f90c RBX: 5b8f59d800c7c720 RCX: 0000000000080000
[  175.072280][T14819] RDX: ffffc90009590000 RSI: 0000000000000572 RDI: 0000000000000573
[  175.075077][T14819] RBP: ffffc9002059f1b8 R08: ffff888108203980 R09: 0000000000000002
[  175.078188][T14819] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  175.081184][T14819] R13: 0000000000000002 R14: 5b8f59d800c7c862 R15: 0000000000000000
[  175.084113][T14819] FS:  00007f70852916c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  175.087534][T14819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.090228][T14819] CR2: 00007f82c9db7dac CR3: 00000000211f8000 CR4: 00000000000006f0
[  175.093489][T14819] Call Trace:
[  175.094882][T14819]  <TASK>
[  175.096143][T14819]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  175.098462][T14819]  xfrm_state_add+0x27d/0xc40
[  175.100452][T14819]  xfrm_add_sa+0x35a1/0x4070
[  175.102452][T14819]  ? __pfx_xfrm_add_sa+0x10/0x10
[  175.104446][T14819]  ? apparmor_capable+0x137/0x1b0
[  175.106518][T14819]  ? __nla_parse+0x40/0x60
[  175.108343][T14819]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.110416][T14819]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.112757][T14819]  ? __pfx___mutex_trylock_common+0x10/0x10
[  175.115269][T14819]  ? rcu_is_watching+0x15/0xb0
[  175.117360][T14819]  ? trace_contention_end+0x39/0x120
[  175.119600][T14819]  ? __mutex_lock+0x335/0x1350
[  175.121596][T14819]  netlink_rcv_skb+0x208/0x470
[  175.123632][T14819]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.125900][T14819]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.128117][T14819]  ? lock_release+0x4b/0x3e0
[  175.130117][T14819]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.132331][T14819]  xfrm_netlink_rcv+0x79/0x90
[  175.134288][T14819]  netlink_unicast+0x82f/0x9e0
[  175.136322][T14819]  ? __pfx_netlink_unicast+0x10/0x10
[  175.138486][T14819]  ? netlink_sendmsg+0x642/0xb30
[  175.140318][T14819]  ? skb_put+0x11b/0x210
[  175.141747][T14819]  netlink_sendmsg+0x805/0xb30
[  175.143458][T14819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.145675][T14819]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.147694][T14819]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.149866][T14819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.152048][T14819]  __sock_sendmsg+0x21c/0x270
[  175.154026][T14819]  ____sys_sendmsg+0x505/0x830
[  175.155871][T14819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.157695][T14819]  ? import_iovec+0x74/0xa0
[  175.159478][T14819]  ___sys_sendmsg+0x21f/0x2a0
[  175.161416][T14819]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.163551][T14819]  ? futex_wake+0x4b2/0x560
[  175.165525][T14819]  ? __fget_files+0x2a/0x420
[  175.167417][T14819]  ? __fget_files+0x3a0/0x420
[  175.169394][T14819]  __x64_sys_sendmsg+0x19b/0x260
[  175.171519][T14819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.173756][T14819]  ? rcu_is_watching+0x15/0xb0
[  175.175685][T14819]  ? rcu_is_watching+0x15/0xb0
[  175.177665][T14819]  do_syscall_64+0xfa/0x3b0
[  175.179559][T14819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.182033][T14819]  ? exc_page_fault+0x9f/0xf0
[  175.184044][T14819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.186498][T14819] RIP: 0033:0x7f708438ebe9
[  175.188332][T14819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.196211][T14819] RSP: 002b:00007f7085291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.199584][T14819] RAX: ffffffffffffffda RBX: 00007f70845b5fa0 RCX: 00007f708438ebe9
[  175.202859][T14819] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000010
[  175.206175][T14819] RBP: 00007f7084411e19 R08: 0000000000000000 R09: 0000000000000000
[  175.209498][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.212774][T14819] R13: 00007f70845b6038 R14: 00007f70845b5fa0 R15: 00007ffe46fb5dc8
[  175.216058][T14819]  </TASK>
[  175.217403][T14819] Modules linked in:
[  175.219474][T14819] ---[ end trace 0000000000000000 ]---
[  175.221413][T14839] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht'
[  175.221660][T14819] RIP: 0010:__xfrm_state_lookup+0x30c/0x8d0
[  175.227509][T14819] Code: 18 48 8d 48 08 48 c1 e8 03 48 89 44 24 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 7c 03 00 00 45 0f b7 36 44 89 f7 44 89
[  175.235540][T14819] RSP: 0018:ffffc9002059f0c0 EFLAGS: 00010206
[  175.238172][T14819] RAX: 0b71eb3b0018f90c RBX: 5b8f59d800c7c720 RCX: 0000000000080000
[  175.241537][T14819] RDX: ffffc90009590000 RSI: 0000000000000572 RDI: 0000000000000573
[  175.244798][T14819] RBP: ffffc9002059f1b8 R08: ffff888108203980 R09: 0000000000000002
[  175.248214][T14819] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  175.251546][T14819] R13: 0000000000000002 R14: 5b8f59d800c7c862 R15: 0000000000000000
[  175.254802][T14819] FS:  00007f70852916c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  175.258463][T14819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.261030][T14819] CR2: 00007f82c9db7dac CR3: 00000000211f8000 CR4: 00000000000006f0
[  175.264103][T14819] Kernel panic - not syncing: Fatal exception in interrupt
[  175.267721][T14819] Kernel Offset: disabled
[  175.269437][T14819] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:13:49  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e31b7 RBX=ffff88801ab00000 RCX=ffff888023921cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000468f388
R8 =0000000000000000 R9 =0000000000000000 R10=ffff888023922580 R11=ffffffff81ac3810
R12=00000000005ad840 R13=dffffc0000000000 R14=ffff88805fffa401 R15=0000000000001000
RIP=ffffffff822e31bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fa93f25e28 CR3=000000003f394000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff00000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000129c RDI=000000000000129d RBP=00000000000003f8 RSP=ffffc9002059e8f0
R8 =ffff888106b98237 R9 =1ffff11020d73046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afa927 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f70852916c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f82c9db7dac CR3=00000000211f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7084587498 00007f7084587470 XMM03=00007f70845874a8 00007f70845874a0
XMM04=00007f70850ed100 00007f7084587460 XMM05=00007f7084587478 00007f70845874c0
XMM06=00007f70845874b8 00007f70845874b0 XMM07=00007f70845874a8 00007f70845874a0
XMM08=0000000000000000 00007f7084412ee7 XMM09=0000000000000000 00007f7084412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
