last executing test programs:

1.711548898s ago: executing program 2 (id=1702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], <r3=>0x0, 0xcd, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93bd5ad57ca5ce47}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x421, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9257}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x56b8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20010}, 0x801)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000700)=[{}], 0x1, 0x9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x101, 0x1, 0x960d, 0x10, r6, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50)
close(r6)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000800)=[{}], &(0x7f0000000840)=0x8)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'erspan0\x00', <r10=>r2, 0x20, 0x80, 0x5, 0x8, {{0x20, 0x4, 0x0, 0x24, 0x80, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast1, {[@generic={0x83, 0xf, "759569734948629205c98de477"}, @timestamp_addr={0x44, 0x3c, 0xf8, 0x1, 0x9, [{@remote, 0x81}, {@multicast2, 0xff}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x2}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x3ff}]}, @noop, @ssrr={0x89, 0x1f, 0xce, [@loopback, @multicast2, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102]}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, r9, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r3, 0x4)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x10, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x0, 0x5, 0x1, 0x8, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='GPL\x00', 0xfffffffb, 0x7, &(0x7f0000000dc0)=""/7, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x1, 0x0, 0xfff, 0x1}, 0x10, 0x2e42d, 0xffffffffffffffff, 0x5, &(0x7f0000000e40)=[r7, r6, r7], &(0x7f0000000e80)=[{0x5, 0x5, 0x3, 0x6}, {0x3, 0x3, 0xc, 0xa}, {0x1, 0x3, 0xa, 0x5}, {0x3, 0x5, 0x4, 0x5}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0x7f}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x1000, 0x1, 0x3ff, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x13, 0x15, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xfffffff7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x3, 0x0, 0x2, 0x9, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000c40)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x6, r11, 0x8, &(0x7f0000000cc0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r12, 0x6, &(0x7f0000001040)=[r7, r8, r13, r6], &(0x7f0000001080)=[{0x1, 0x1, 0x9, 0xa}, {0x0, 0x4, 0x4, 0x6}, {0x4, 0x4, 0xb, 0x7}, {0x5, 0x3, 0x3, 0x7}, {0x3, 0x1, 0x3, 0xb}, {0x1, 0x4, 0xb, 0xb}], 0x10, 0x10001}, 0x94)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r12)
r14 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xac}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x80)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r14, &(0x7f00000017c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001440)={0x328, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}, @NL80211_ATTR_IE={0x12b, 0x2a, [@challenge={0x10, 0x1, 0xa1}, @peer_mgmt={0x75, 0x4, {0x0, 0x3, @void, @void, @void}}, @supported_rates={0x1, 0x1, [{0x10, 0x1}]}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x7, 0x0, {0x1000, 0x3, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3}, 0x400, 0xf1e, 0x7f}}, @fast_bss_trans={0x37, 0xfa, {0x0, 0x8, "57bb2a0589aa05fac0d22dfaaf859359", "1996981f97e186ad4b06da72ba275381739a8f98342d4cf22d36b87ea9e186fa", "b6c8d5b8e39e9cee8922cdae2aeac4668b72cb79f98c950430d5dae47268c144", [{0x3, 0xd, "3f1e6ba9c3339b3d0240fd72c1"}, {0x4, 0x1f, "221491ff710b8ae0c36397d824d33064305aece5d1d94e4547395d9f0d3a4b"}, {0x2, 0xb, "c55e5987628c2b8a45421b"}, {0x1, 0x1, "0e"}, {0x4, 0x1b, "cb11af09cfd150774e490bfe36995e67ec237b34a66db7962ed82b"}, {0x2, 0x21, "57cf0b82071e7286b4a6f40ee74769c01ff4ee8b0e07b03b67665ff98f03f9126f"}, {0x4, 0x3, "5d95b3"}, {0x3, 0x21, "12b1308292891de50a67f4ee6654aa86038255424cea298f0a8434f55ca4a4280d"}]}}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@challenge={0x10, 0x1, 0xf1}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @link_id={0x65, 0x12, {@random="5ecf478d4427"}}, @chsw_timing={0x68, 0x4, {0x2, 0x7fff}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x9e}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x167, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0x67, "2f832bc1397ef2ab54e6007d2de32362013ee68855d6d323f37d9c2424da792ca058d091eaf00ec06fd46cb04b3b2471b61971a380fdecce04d5467338eae3a4aaecd556794a3e91311865dcceff1aec500321abb982126e629146ba37f2c445d29fb8b6b3231b"}, @random_vendor={0xdd, 0xcc, "e0802154ef311ef6fb68b74392e5d04227bfbeb076035a9cde40e616339e055ab03867b4ea0cc081690e09883c890c2bb30b0cf64c1917e3476079357ae14fdce2e2ef6d05020e0f57e0f21f9ca9bff89245f810c5fb343c5636fc85fd81464daca1c24f3e3d74a7b3dd806c492773587ecc209eec3304fd72f93cf762dd0cb3937da733d06070ce69eaf7b384ce34955ce8d3abdbf157dac8ba00ed799e59d392f7ef7568615a6eef27c5f0bd254e7396825db9fe4774a6a8ccef88d0171bf0a81a81acb94b0b0294c5852e"}, @mic={0x8c, 0x10, {0xdeb, "67fb90cb9416", @short="aaf56e856d506c2f"}}, @dsss={0x3, 0x1, 0x8c}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xa3, 0x20}}, @chsw_timing={0x68, 0x4, {0x7f, 0x8}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x2004}, 0x80)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r14)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xe8, r15, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x77}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xaca1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe0000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe6000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x93}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x74f}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x1010)

1.661693796s ago: executing program 2 (id=1705):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x35d4, @none, 0x4e18}, 0xe)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r3}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
r6 = epoll_create1(0x0)
poll(&(0x7f0000000040)=[{r6, 0x200}], 0x1, 0xdb3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100))
shutdown(r7, 0x0)
epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x101)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x2000200b})
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @empty}}]}, 0x190)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})

1.322106102s ago: executing program 0 (id=1715):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

1.171658826s ago: executing program 0 (id=1716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
recvmmsg(r5, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r7, &(0x7f0000000100)={@val, @void, @eth={@random="0017a2dfff00", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a410400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0)

752.402939ms ago: executing program 2 (id=1721):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x40045)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) (async)
bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc)
bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe}, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
getsockopt$ax25_int(r2, 0x101, 0x2, 0x0, &(0x7f0000000040)) (async)
getsockopt$ax25_int(r2, 0x101, 0x2, 0x0, &(0x7f0000000040))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000108fdfffffffddbdf2500000000", @ANYRESOCT=r3, @ANYBLOB="000000002104020008001b000000000030001a802c000a80140007"], 0x58}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000000)) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000000))

752.067744ms ago: executing program 2 (id=1722):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
sendto$packet(r0, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x20000820, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14)

552.085178ms ago: executing program 2 (id=1726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0x9}, 0x80, 0x0, 0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)="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", 0x1f3, 0x0, &(0x7f0000000b00)={0x2, 0xfa, {0x0, 0xc, 0xcc, "1927d5ee158c6a4df461067aabfa6b969adbf49bb21a91e0318dfc82a099c6a38d8cd7c16c529b0027f70717080e6745717b029e569777506c3a0a561e3b77d929f34b48590f4bcec90cde232b2a9e7b7b0492646c41f853503ea21ce80783a098d985e8e116c8780800c315c24c70bcd65be040dcca00ce45175461a491543545228ba0921d8a1b6296479c1222ff7334591cb1ee7d21b23b34b860a65af2d49508987b8fe874fe0c00ce9f586310aadbcc34d47173c9bc2f2f2e0028cef86f840797e662844a2aa49b6562", 0x21, "6af57e22f7ada5937812bde997636fc373b7f157c6162d526b0b1748be9c6c8e15"}, 0xc5, "a73fbc6df25f64fbeab3feae3c5b768de06930b2b00bf1c0c8f18377efb64fe632b1d4c69b533cb443bb61cc219a15cf36c467693f5ecbe9819c26f595bb16b79f9cec8c8247970f0369dd7cb0b4714ac32f5a564d2e4eb2194ba328f33f9ed07cc9b9f05449605eacda8b4d78be94a135bb2237ca1ec2b8772fd34b69843f8b48cbcc6609d4333badf84b943d5a07031f30562d65f3d2827d504125d6f8c2b0ccd96429a9527e885dcdf01e11448986f42487710877049d5e7f413c6ecb3ee551f1f04912"}, 0x1cb})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x261}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x3, 0x50f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x612}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x47415192}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x518}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xe, 0x8, 0xe, 0x5, 0x8, 0x3ff, 0xdd6, 0x4]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0)
close(r4)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @broadcast}, &(0x7f00000003c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x10, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}}, 0x10008844)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

478.292945ms ago: executing program 2 (id=1730):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000016000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="2f128337f58465e3806d2da226ac66ab2b3da248561dd858224162effd292cddcfd366023e0022e5aa7b3372be1641be5303e083e2d35db321e0b0143610b7ae9b4b5580c4040f220f9aea58569ccc4b24106cb843021d44562b76fa3489c402147ad8678fd8c46d438305d10ee68bf2668165c5e527dcf91d5e2d342f52ee7a5fb956340517afb3a06103649a3c039a7636fdd102b2553587da483ae0f899ab581c76988fef1ff9fb80ed72c3ccd7599a373b3289285b7ef050a59279793cc1e7bcc76484c90588a9cfd6aad06260966b06b1281435a0fee48aef122c03b7696da24b35c36e", @ANYRES64=0x0], 0x20)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100"], 0x36)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a0104000100000000000002000500000000000004000000000000e7786e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r3], 0x68}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

220.728984ms ago: executing program 1 (id=1732):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32], 0x44}}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x20000820, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)

218.503482ms ago: executing program 0 (id=1733):
socket$inet6(0xa, 0x80000, 0x0) (async)
r0 = socket$inet6(0xa, 0x80000, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x80]}, &(0x7f0000000000)=0x100)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)
socket$netlink(0x10, 0x3, 0x9) (async)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="32000000ea0301000000000000000000000000652ea12500f40301feff0000000000000200000a"], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002", @ANYRES32=r4], 0x50}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
accept4$packet(r3, 0x0, &(0x7f0000000340), 0x800)
bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
accept4(r6, 0x0, 0x0, 0x80000) (async)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) (async)
recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110) (async)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0)
socket(0x1, 0x803, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x50}}, 0x2)

218.12464ms ago: executing program 1 (id=1734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000c80))
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, &(0x7f0000000240))
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x50c89, 0x20009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080003"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlinkprop={0x30, 0x6c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x220}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GROUP={0x8, 0x1b, 0x6}]}, 0x30}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={<r9=>0xffffffffffffffff, 0x4, 0x68, 0x23})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@map_val={0x18, 0xb, 0x2, 0x0, r1}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x7a, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x7fffffff, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r0], &(0x7f0000000540)=[{0x4, 0x5, 0x3, 0x3}], 0x10, 0x7}, 0x94)

142.590325ms ago: executing program 1 (id=1735):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x24040010)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3, 0x9, 0x0, 0x12}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000000)) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
gettid()
sendmsg$nl_route(r9, 0x0, 0x0)

142.08023ms ago: executing program 0 (id=1736):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 64)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (rerun: 64)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) (async, rerun: 32)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async)
close(0x3) (async, rerun: 32)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000440)={0x7b71, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfff}}, {{0xa, 0x4e22, 0x3143, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x65}}}, 0x108) (rerun: 32)

71.309689ms ago: executing program 0 (id=1737):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102)
close(r2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)

70.106773ms ago: executing program 1 (id=1738):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x1, 0x0, {0x1, 0x9, 0x0, 0x3fa, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x7, 0x5}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}}, 0x8000) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x1, 0x0, {0x1, 0x9, 0x0, 0x3fa, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x7, 0x5}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}}, 0x8000)
pipe(&(0x7f0000000180)) (async)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x5fc, 0x1}) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x5fc, 0x1})
r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000300)={0x1, 0xfffffffffffff000, 0xd8, &(0x7f0000000200)=""/216})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}}, 0x40020)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) (async)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)={<r5=>0x0, 0x8}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000005c0)={r5, 0xde, "2636d53444f230c3ae0af2fc2ddaa842c6bd987ff3f0caed4c232bc04ebedeee1b2eed0381dd845b4ce04171cd3a7ce0de5060764e617f076e101b3384d58c864c3f6b30172d98f8de781153c059978acddc2aaff7b3d0d939b6a72fd7ba3517eb0dcfbf78cdfb5b61c14462837b6b55bdba8fd41cfbdb6a2ef25f760303d3f022f031ef8e06c69fc32499b712d423f4636615a49bee75379aab626e6b5f01d38662d1b2b8abc7c58e7e2c6ae11dd2cbbb8b4ba2cc32dc1ff644b1fc9df115efd73af760fdb54ed19e75dd5811a244b41343dfb0c77b254ff72aab509d97"}, &(0x7f00000006c0)=0xe6) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000005c0)={r5, 0xde, "2636d53444f230c3ae0af2fc2ddaa842c6bd987ff3f0caed4c232bc04ebedeee1b2eed0381dd845b4ce04171cd3a7ce0de5060764e617f076e101b3384d58c864c3f6b30172d98f8de781153c059978acddc2aaff7b3d0d939b6a72fd7ba3517eb0dcfbf78cdfb5b61c14462837b6b55bdba8fd41cfbdb6a2ef25f760303d3f022f031ef8e06c69fc32499b712d423f4636615a49bee75379aab626e6b5f01d38662d1b2b8abc7c58e7e2c6ae11dd2cbbb8b4ba2cc32dc1ff644b1fc9df115efd73af760fdb54ed19e75dd5811a244b41343dfb0c77b254ff72aab509d97"}, &(0x7f00000006c0)=0xe6)
ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000700)=0x8) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000700)=0x8)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000840)=""/248, &(0x7f0000000940)=0xf8)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x1, 0x1, 0x4, 0x8, 0xc, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000a80)=""/204, 0x41100, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r2, r2, r1], 0x0, 0x10, 0x4}, 0x94)
ioctl$FITHAW(r6, 0xc0045878)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='mm_page_pcpu_drain\x00', r2, 0x0, 0x100000000}, 0x18)
socket$igmp6(0xa, 0x3, 0x2) (async)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000d80)=0x5, 0x4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}}, 0x80)
unshare(0x20000)
getsockopt$inet6_buf(r7, 0x29, 0x2e, &(0x7f0000000f40), &(0x7f0000000f80))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)=@newqdisc={0x1a4, 0x24, 0x120, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {0x0, 0xffff}, {0x2, 0x6}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8b8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x50}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffa}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x9e20, 0x0, r1, 0x100, '\x00', r4, r1, 0x3, 0x3, 0x4}, 0x50)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000012c0)={'icmp\x00'}, &(0x7f0000001300)=0x1e) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000012c0)={'icmp\x00'}, &(0x7f0000001300)=0x1e)
r10 = openat$cgroup_pressure(r2, &(0x7f0000001340)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000001380)={'full', 0x20, 0x3, 0x20, 0x7ff}, 0x2f)

69.926877ms ago: executing program 1 (id=1739):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffef0000000000000000850000007f00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

622.435µs ago: executing program 1 (id=1740):
r0 = socket$unix(0x1, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0xffffff2a, @local, 0x957}, 0x1c)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001340)={'dummy0\x00', 0x200})

0s ago: executing program 0 (id=1741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
socket$packet(0x11, 0xa, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x0)
bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], 0x48)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000040), 0x10)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00', <r6=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r6}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d75c53a7071a445"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xd790a2e53b9f9fd3, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cd62c760d19ac7527f5bcba29ae8684410fbd559403cd6ad9588e73fb89bd85b453d350030273b0390343338cbedcda38af6b44ef031d23bff0e18ffbb916dd8"}}, 0x80}}, 0x0)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4)
sendto$inet6(r7, &(0x7f0000000040)="00d8", 0x10b0c, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

kernel console output (not intermixed with test programs):

 - 0
[  100.246383][ T5846] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  100.249696][ T5846] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  100.256856][ T5846] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.262695][ T5846] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  100.266048][ T5846] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  100.268679][ T5846] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.271366][ T5846] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  100.276399][ T9266] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  100.279625][ T5846] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  100.341386][ T9276] netlink: 'syz.1.878': attribute type 18 has an invalid length.
[  102.018427][ T9297] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.071164][ T9303] netlink: zone id is out of range
[  102.076500][ T9303] netlink: zone id is out of range
[  102.078268][ T9303] netlink: zone id is out of range
[  102.079993][ T9303] netlink: zone id is out of range
[  102.089025][ T9303] netlink: 'syz.0.884': attribute type 5 has an invalid length.
[  102.092183][ T9297] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.209888][ T9297] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.277614][ T9297] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.349088][ T5667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.352498][ T5667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.357754][ T9326] netlink: 'syz.1.888': attribute type 13 has an invalid length.
[  102.360365][ T9326] netlink: 'syz.1.888': attribute type 17 has an invalid length.
[  102.364185][ T9326] netlink: 'syz.1.888': attribute type 27 has an invalid length.
[  102.372204][ T5667] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.395746][ T5667] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.492120][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.557339][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.829096][ T9353] dvmrp0: entered allmulticast mode
[  102.993960][ T9374] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  103.009770][ T9374] bond19: entered promiscuous mode
[  103.011455][ T9374] bond19: entered allmulticast mode
[  103.013292][ T9374] 8021q: adding VLAN 0 to HW filter on device bond19
[  103.046310][ T9377] IPv6: sit4: Disabled Multicast RS
[  103.754816][ T9400] netlink: 'syz.2.904': attribute type 10 has an invalid length.
[  103.757511][ T9400] __nla_validate_parse: 27 callbacks suppressed
[  103.757517][ T9400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.904'.
[  103.764465][ T9400] geneve0: entered promiscuous mode
[  103.766608][ T9400] team0: Port device geneve0 added
[  103.771428][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.776721][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.779516][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.792336][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.796490][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  103.803202][ T9409] gtp0: entered promiscuous mode
[  103.805766][ T9409] gtp0: entered allmulticast mode
[  103.828971][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'.
[  104.562415][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.565452][ T9419] net_ratelimit: 23 callbacks suppressed
[  104.565459][ T9419] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.648702][ T9421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.651400][ T9421] syzkaller0: entered promiscuous mode
[  104.653218][ T9421] syzkaller0: entered allmulticast mode
[  104.659538][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  104.665904][ T9420] tipc: Resetting bearer <eth:syzkaller0>
[  104.673289][ T9420] tipc: Disabling bearer <eth:syzkaller0>
[  104.748358][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.750807][ T9425] IPv6: NLM_F_CREATE should be set when creating new route
[  104.753152][ T9425] IPv6: NLM_F_CREATE should be set when creating new route
[  104.756547][ T9425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.992362][ T9443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.999239][ T9443] syzkaller0: entered promiscuous mode
[  105.000987][ T9443] syzkaller0: entered allmulticast mode
[  105.036476][ T9443] tipc: Resetting bearer <eth:syzkaller0>
[  105.039377][ T9442] tipc: Resetting bearer <eth:syzkaller0>
[  105.066596][ T9442] tipc: Disabling bearer <eth:syzkaller0>
[  105.099870][ T9457] netlink: 'syz.1.917': attribute type 12 has an invalid length.
[  105.106633][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'.
[  105.177811][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  105.196432][ T9466] netlink: 'syz.0.921': attribute type 1 has an invalid length.
[  105.218824][ T9466] bond9: entered promiscuous mode
[  105.220669][ T9466] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.231749][ T9466] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.233961][ T9472] netlink: 'syz.2.923': attribute type 10 has an invalid length.
[  105.234155][ T9466] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  105.241130][ T9466] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  105.246562][ T9466] bond9: (slave wireguard0): making interface the new active one
[  105.249086][ T9466] wireguard0: entered promiscuous mode
[  105.251614][ T9466] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  105.256713][ T9466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.257958][   T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  105.259104][ T9466] IPv6: NLM_F_CREATE should be set when creating new route
[  105.265282][ T9466] IPv6: NLM_F_CREATE should be set when creating new route
[  105.266855][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.267855][ T9466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.275572][ T9472] batadv0: entered promiscuous mode
[  105.278149][ T9472] batadv0: entered allmulticast mode
[  105.296320][ T9466] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address
[  105.315415][ T9466] bond9: (slave wireguard1): Enslaving as a backup interface with an up link
[  105.331148][ T9472] netlink: 'syz.2.923': attribute type 10 has an invalid length.
[  105.333806][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.923'.
[  105.338264][ T9472] bridge0: port 1(batadv0) entered blocking state
[  105.340443][ T9472] bridge0: port 1(batadv0) entered disabled state
[  105.376750][ T9485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.432158][ T9494] macvlan0: entered allmulticast mode
[  105.434052][ T9494] veth1_vlan: entered allmulticast mode
[  105.589088][ T9507] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  105.599314][ T9507] bridge0: port 1(batadv0) entered disabled state
[  105.606287][ T9507] geneve0: left promiscuous mode
[  105.626697][ T9507] team0: Port device geneve0 removed
[  105.629575][ T9507] bond10: (slave bond11): Releasing backup interface
[  105.633147][ T9507] bond12: (slave geneve4): Releasing active interface
[  105.636748][ T9507] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  105.639186][ T9507] batman_adv: batadv0: Removing interface: ip6gretap3
[  105.646511][ T9507] team0: Port device bridge43 removed
[  105.650096][ T9507] bond15: (slave wireguard1): Releasing backup interface
[  105.652874][ T9507] wireguard1: left promiscuous mode
[  105.661026][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.663796][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.668123][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.670961][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.741666][ T9508] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  105.743972][ T9508] bond0: (slave wlan1): refused to change device type
[  105.747641][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'.
[  105.751292][ T9508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.754670][ T9508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.290459][ T9515] syzkaller1: entered promiscuous mode
[  106.292287][ T9515] syzkaller1: entered allmulticast mode
[  106.393824][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.397794][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.472350][ T9528] 8021q: adding VLAN 0 to HW filter on device bond20
[  106.488177][ T9528] bond20: (slave veth17): Enslaving as an active interface with a down link
[  106.501317][ T9528] vlan4: entered allmulticast mode
[  106.506398][ T9528] bond20: (slave vlan4): Enslaving as an active interface with a down link
[  106.510445][ T9525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.671276][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.939'.
[  106.729917][ T9558] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  106.736385][ T9558] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  106.750870][ T9558] bond10: entered promiscuous mode
[  106.752544][ T9558] bond10: entered allmulticast mode
[  106.755302][ T9558] 8021q: adding VLAN 0 to HW filter on device bond10
[  106.863546][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'.
[  107.201228][ T9585] ip6tnl4: entered promiscuous mode
[  107.202993][ T9585] ip6tnl4: entered allmulticast mode
[  107.321255][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'.
[  107.348224][ T9596] bond0: (slave wlan1): Releasing backup interface
[  107.351753][ T9596] bond9: (slave bridge0): Releasing active interface
[  107.356314][ T9596] bond10: (slave gretap1): Releasing backup interface
[  107.790002][ T9609] macvtap1: entered promiscuous mode
[  107.791800][ T9609] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  107.796608][ T9609] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  107.912212][ T9618] pim6reg1: entered promiscuous mode
[  107.913944][ T9618] pim6reg1: entered allmulticast mode
[  107.919304][ T9618] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  107.922019][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.0.956 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  107.922030][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.922034][ T9618] Call Trace:
[  107.922038][ T9618]  <TASK>
[  107.922041][ T9618]  dump_stack_lvl+0x189/0x250
[  107.922055][ T9618]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.922063][ T9618]  ? __pfx__printk+0x10/0x10
[  107.922073][ T9618]  ? kernfs_path_from_node+0x2c/0x260
[  107.922082][ T9618]  ? kernfs_path_from_node+0x2c/0x260
[  107.922090][ T9618]  ? kernfs_path_from_node+0x2c/0x260
[  107.922099][ T9618]  ? kernfs_path_from_node+0x22c/0x260
[  107.922106][ T9618]  ? kernfs_path_from_node+0x2c/0x260
[  107.922115][ T9618]  sysfs_warn_dup+0x8e/0xa0
[  107.922124][ T9618]  sysfs_do_create_link_sd+0xc0/0x110
[  107.922135][ T9618]  device_add_class_symlinks+0x1cf/0x240
[  107.922146][ T9618]  device_add+0x475/0xb50
[  107.922156][ T9618]  wiphy_register+0x1ba6/0x28d0
[  107.922175][ T9618]  ? __pfx_wiphy_register+0x10/0x10
[  107.922184][ T9618]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  107.922195][ T9618]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  107.922206][ T9618]  ieee80211_register_hw+0x3425/0x4080
[  107.922222][ T9618]  ? ieee80211_register_hw+0x1471/0x4080
[  107.922234][ T9618]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  107.922243][ T9618]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.922257][ T9618]  ? __hrtimer_setup+0x187/0x210
[  107.922268][ T9618]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  107.922281][ T9618]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  107.922303][ T9618]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  107.922312][ T9618]  ? trace_kmalloc+0x1f/0xd0
[  107.922321][ T9618]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  107.922332][ T9618]  ? kstrndup+0xbf/0x160
[  107.922344][ T9618]  hwsim_new_radio_nl+0xea4/0x1b10
[  107.922356][ T9618]  ? __pfx___nla_validate_parse+0x10/0x10
[  107.922372][ T9618]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  107.922386][ T9618]  ? __nla_parse+0x40/0x60
[  107.922396][ T9618]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  107.922408][ T9618]  genl_family_rcv_msg_doit+0x215/0x300
[  107.922420][ T9618]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  107.922433][ T9618]  ? bpf_lsm_capable+0x9/0x20
[  107.922443][ T9618]  ? security_capable+0x7e/0x2e0
[  107.922455][ T9618]  genl_rcv_msg+0x60e/0x790
[  107.922466][ T9618]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.922474][ T9618]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  107.922489][ T9618]  netlink_rcv_skb+0x208/0x470
[  107.922499][ T9618]  ? __lock_acquire+0xab9/0xd20
[  107.922516][ T9618]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.922525][ T9618]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  107.922545][ T9618]  ? down_read+0x1ad/0x2e0
[  107.922553][ T9618]  genl_rcv+0x28/0x40
[  107.922561][ T9618]  netlink_unicast+0x82f/0x9e0
[  107.922575][ T9618]  ? __pfx_netlink_unicast+0x10/0x10
[  107.922586][ T9618]  ? netlink_sendmsg+0x642/0xb30
[  107.922595][ T9618]  ? skb_put+0x11b/0x210
[  107.922604][ T9618]  netlink_sendmsg+0x805/0xb30
[  107.922621][ T9618]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.922633][ T9618]  ? aa_sock_msg_perm+0x94/0x160
[  107.922644][ T9618]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  107.922652][ T9618]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.922663][ T9618]  __sock_sendmsg+0x21c/0x270
[  107.922674][ T9618]  ____sys_sendmsg+0x505/0x830
[  107.922684][ T9618]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.922695][ T9618]  ? import_iovec+0x74/0xa0
[  107.922707][ T9618]  ___sys_sendmsg+0x21f/0x2a0
[  107.922715][ T9618]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.922738][ T9618]  ? __fget_files+0x2a/0x420
[  107.922745][ T9618]  ? __fget_files+0x3a0/0x420
[  107.922781][ T9618]  __x64_sys_sendmsg+0x19b/0x260
[  107.922793][ T9618]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  107.922809][ T9618]  ? do_syscall_64+0xbe/0x3b0
[  107.922821][ T9618]  do_syscall_64+0xfa/0x3b0
[  107.922831][ T9618]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.922841][ T9618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.922849][ T9618]  ? exc_page_fault+0x9f/0xf0
[  107.922859][ T9618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.922867][ T9618] RIP: 0033:0x7f65e718ebe9
[  107.922875][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.922881][ T9618] RSP: 002b:00007f65e7f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.922890][ T9618] RAX: ffffffffffffffda RBX: 00007f65e73b5fa0 RCX: 00007f65e718ebe9
[  107.922895][ T9618] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  107.922900][ T9618] RBP: 00007f65e7211e19 R08: 0000000000000000 R09: 0000000000000000
[  107.922904][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.922909][ T9618] R13: 00007f65e73b6038 R14: 00007f65e73b5fa0 R15: 00007fff4a05e8d8
[  107.922921][ T9618]  </TASK>
[  108.147183][ T9620] 0{X: left allmulticast mode
[  108.152223][ T9620] vlan0: left promiscuous mode
[  108.153943][ T9620] macvlan0: left allmulticast mode
[  108.160707][ T9620] mac80211_hwsim hwsim4 ": left promiscuous mode
[  108.188457][ T9620] bond3: left promiscuous mode
[  108.190875][ T9620] veth5: left allmulticast mode
[  108.193024][ T9620] veth9: left promiscuous mode
[  108.195422][ T9620] vxlan0: left promiscuous mode
[  108.197088][ T9620] vxlan0: left allmulticast mode
[  108.198938][ T9620] tipc: Resetting bearer <eth:syzkaller0>
[  108.201407][ T9620] syzkaller0: left promiscuous mode
[  108.203154][ T9620] syzkaller0: left allmulticast mode
[  108.207476][ T9620] veth11: left promiscuous mode
[  108.209433][ T9620] veth13: left promiscuous mode
[  108.211524][ T9620] veth15: left promiscuous mode
[  108.213220][ T9620] erspan1: left promiscuous mode
[  108.224118][ T9620] bond0: left allmulticast mode
[  108.227039][ T9620] bond0: left promiscuous mode
[  108.229382][ T9620] macvtap0: left promiscuous mode
[  108.253389][ T9620] bridge43: left promiscuous mode
[  108.256782][ T9620] bridge43: left allmulticast mode
[  108.264635][ T9620] bond15: left promiscuous mode
[  108.269384][ T9620] bond16: left promiscuous mode
[  108.273393][ T9620] bond19: left promiscuous mode
[  108.275204][ T9620] bond19: left allmulticast mode
[  108.282572][ T9620] gtp0: left promiscuous mode
[  108.284179][ T9620] gtp0: left allmulticast mode
[  108.297560][ T9620] vlan4: left allmulticast mode
[  108.299195][ T9620] macvtap0: left allmulticast mode
[  108.301086][ T9620] ip6tnl4: left promiscuous mode
[  108.302690][ T9620] ip6tnl4: left allmulticast mode
[  108.338599][ T9627] IPv6: sit5: Disabled Multicast RS
[  108.342652][ T9627] sit5: entered allmulticast mode
[  108.380637][ T9632] validate_nla: 5 callbacks suppressed
[  108.380646][ T9632] netlink: 'syz.0.962': attribute type 1 has an invalid length.
[  108.391845][ T9635] gtp1: entered promiscuous mode
[  108.393440][ T9635] gtp1: entered allmulticast mode
[  108.403978][ T9632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.406874][ T9632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.498346][ T9649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.513593][ T9652] 8021q: adding VLAN 0 to HW filter on device bond21
[  108.519223][ T9653] macvlan6: entered promiscuous mode
[  108.520971][ T9653] macvlan6: entered allmulticast mode
[  108.530245][ T9649] syzkaller0: entered promiscuous mode
[  108.535901][ T9649] syzkaller0: entered allmulticast mode
[  108.542638][ T9652] macvlan6: entered promiscuous mode
[  108.544849][ T9652] macvlan6: entered allmulticast mode
[  108.593734][ T9652] macvlan6: entered promiscuous mode
[  108.595737][ T9652] macvlan6: entered allmulticast mode
[  108.603849][ T9649] tipc: Resetting bearer <eth:syzkaller0>
[  108.648951][ T9664] netlink: 'syz.0.971': attribute type 1 has an invalid length.
[  108.661724][ T9664] bond11: entered promiscuous mode
[  108.663812][ T9664] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.681994][ T9664] batadv0: entered promiscuous mode
[  108.683688][ T9664] batadv0: entered allmulticast mode
[  108.686494][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.689556][ T9664] bond11: (slave batadv0): making interface the new active one
[  108.692450][ T9664] bond11: (slave batadv0): Enslaving as an active interface with an up link
[  108.698186][ T9652] macvlan6: entered promiscuous mode
[  108.699894][ T9652] macvlan6: entered allmulticast mode
[  108.749138][ T9652] macvlan6: entered promiscuous mode
[  108.751045][ T9652] macvlan6: entered allmulticast mode
[  108.793189][ T9652] macvlan6: entered promiscuous mode
[  108.797213][ T9652] macvlan6: entered allmulticast mode
[  108.807873][ T9671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  108.810965][ T9671] syzkaller0: entered promiscuous mode
[  108.812719][ T9671] syzkaller0: entered allmulticast mode
[  108.851516][ T9652] macvlan6: entered promiscuous mode
[  108.853304][ T9652] macvlan6: entered allmulticast mode
[  108.867191][ T9686] __nla_validate_parse: 10 callbacks suppressed
[  108.867199][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'.
[  108.873862][ T9686] netlink: 32 bytes leftover after parsing attributes in process `syz.1.976'.
[  108.889317][ T9687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'.
[  108.899441][ T9652] macvlan6: entered promiscuous mode
[  108.901536][ T9652] macvlan6: entered allmulticast mode
[  108.958359][ T9652] macvlan6: entered promiscuous mode
[  108.960115][ T9652] macvlan6: entered allmulticast mode
[  109.028882][ T9652] macvlan6: entered promiscuous mode
[  109.030803][ T9652] macvlan6: entered allmulticast mode
[  109.062680][ T9691] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  109.066999][ T9691] netlink: 'syz.1.978': attribute type 4 has an invalid length.
[  109.099311][ T9691] veth1_vlan: left allmulticast mode
[  109.108351][ T9691] tipc: Resetting bearer <eth:syzkaller0>
[  109.119102][ T9652] macvlan6: entered promiscuous mode
[  109.120980][ T9652] macvlan6: entered allmulticast mode
[  109.157914][ T9652] macvlan6: entered promiscuous mode
[  109.159884][ T9652] macvlan6: entered allmulticast mode
[  109.208907][ T9652] macvlan6: entered promiscuous mode
[  109.210714][ T9652] macvlan6: entered allmulticast mode
[  109.259309][ T9652] macvlan6: entered promiscuous mode
[  109.261035][ T9652] macvlan6: entered allmulticast mode
[  109.308557][ T9652] macvlan6: entered promiscuous mode
[  109.310323][ T9652] macvlan6: entered allmulticast mode
[  109.660665][ T9723] netlink: 124 bytes leftover after parsing attributes in process `syz.2.986'.
[  109.663801][ T9723] netlink: 'syz.2.986': attribute type 13 has an invalid length.
[  109.666413][ T9723] netlink: 'syz.2.986': attribute type 17 has an invalid length.
[  109.684025][ T9723] 8021q: adding VLAN 0 to HW filter on device team0
[  109.687946][ T9723] tipc: Resetting bearer <eth:team0>
[  109.689790][ T9723] tipc: Resetting bearer <eth:team0>
[  109.692294][ T9723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.707145][ T9725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'.
[  109.711092][ T9722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.717119][ T9722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.720370][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.723526][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.728416][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.732038][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.103002][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'.
[  110.142120][   T52] Bluetooth: hci2: link tx timeout
[  110.144140][   T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.148158][   T52] Bluetooth: hci2: link tx timeout
[  110.150156][   T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.306086][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.326784][ T9746] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  110.329002][ T9745] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  110.353453][ T9751] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  110.728991][ T9771] netlink: 'syz.0.1000': attribute type 10 has an invalid length.
[  110.731927][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'.
[  110.747890][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  110.750839][ T9773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1001'.
[  110.756622][ T9775] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1002'.
[  110.756659][ T9773] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  110.762897][ T9773] gretap2: entered promiscuous mode
[  110.788835][ T9778] netlink: 'syz.0.1003': attribute type 18 has an invalid length.
[  110.836686][ T9783] syzkaller1: entered promiscuous mode
[  110.838498][ T9783] syzkaller1: entered allmulticast mode
[  110.906835][ T9796] veth0_to_bond: entered allmulticast mode
[  110.924952][ T9795] netlink: 'syz.1.1011': attribute type 13 has an invalid length.
[  110.927621][ T9795] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  110.959224][ T9802] netlink: 'syz.0.1012': attribute type 1 has an invalid length.
[  110.973849][ T9802] netlink: 'syz.0.1012': attribute type 3 has an invalid length.
[  111.018874][ T9808] team0: Port device bridge7 added
[  111.119709][ T9818] pim6reg1: entered promiscuous mode
[  111.121505][ T9818] pim6reg1: entered allmulticast mode
[  111.152931][ T9821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.311677][ T9837] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.342548][ T9839] lo: entered promiscuous mode
[  111.350142][ T9839] tunl0: entered promiscuous mode
[  111.353151][ T9839] gre0: entered promiscuous mode
[  111.356973][ T9839] gretap0: entered promiscuous mode
[  111.359607][ T9839] erspan0: entered promiscuous mode
[  111.362196][ T9839] ip_vti0: entered promiscuous mode
[  111.365927][ T9839] ip6_vti0: entered promiscuous mode
[  111.368381][ T9839] sit0: entered promiscuous mode
[  111.372123][ T9839] ip6tnl0: entered promiscuous mode
[  111.374942][ T9839] ip6gre0: entered promiscuous mode
[  111.377398][ T9839] ip6gretap0: entered promiscuous mode
[  111.380541][ T9839] bond0: entered promiscuous mode
[  111.382569][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.386759][ T9839] team0: entered promiscuous mode
[  111.388451][ T9839] bridge7: entered promiscuous mode
[  111.390543][ T9839] 8021q: adding VLAN 0 to HW filter on device team0
[  111.392901][ T9839] tipc: Resetting bearer <eth:team0>
[  111.395089][ T9839] tipc: Resetting bearer <eth:team0>
[  111.396959][ T9839] nlmon0: entered promiscuous mode
[  111.400024][ T9839] caif0: entered promiscuous mode
[  111.401696][ T9839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.568439][ T9845] 8021q: adding VLAN 0 to HW filter on device bond13
[  111.576767][ T9845] vlan4: entered promiscuous mode
[  111.578635][ T9845] bond13: entered promiscuous mode
[  111.580428][ T9845] vlan4: entered allmulticast mode
[  111.582171][ T9845] bond13: entered allmulticast mode
[  111.708630][ T9854] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.785115][ T9861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.872891][ T9870] pim6reg1: entered promiscuous mode
[  111.878985][ T9870] pim6reg1: entered allmulticast mode
[  112.186028][   T52] Bluetooth: hci2: command 0x0405 tx timeout
[  112.189084][ T9878] bridge0: port 1(erspan0) entered blocking state
[  112.191375][ T9878] bridge0: port 1(erspan0) entered disabled state
[  112.193800][ T9878] erspan0: entered allmulticast mode
[  112.197055][ T9878] erspan0: left allmulticast mode
[  112.294009][ T9885] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.388413][ T9896] veth11: entered promiscuous mode
[  112.451389][ T9902] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.650008][ T9915] bond4: (slave vti1): Releasing backup interface
[  112.656963][ T9915] bond5: (slave gretap2): Releasing active interface
[  112.661984][ T9915] bond0: (slave bond6): Releasing backup interface
[  112.668057][ T9915] bond7: (slave bridge3): Releasing backup interface
[  112.670366][ T9915] bridge3: left promiscuous mode
[  112.679028][ T9915] bond9: (slave wireguard0): Releasing backup interface
[  112.681659][ T9915] wireguard0: left promiscuous mode
[  112.683597][ T9915] bond9: (slave wireguard1): making interface the new active one
[  112.686369][ T9915] wireguard1: entered promiscuous mode
[  112.692097][ T9915] bond9: (slave wireguard1): Releasing backup interface
[  112.694807][ T9915] wireguard1: left promiscuous mode
[  112.701187][ T9915] bond11: (slave batadv0): Releasing active interface
[  112.719044][   T96] sz1: Port: 1 Link DOWN
[  112.753587][ T9920] bond22: (slave gretap0): making interface the new active one
[  112.759265][ T9920] bond22: (slave gretap0): Enslaving as an active interface with an up link
[  112.787395][ T9916] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.790459][ T9916] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  112.799664][ T9923] team0: Device sit5 is of different type
[  112.883142][ T9935] syzkaller1: entered promiscuous mode
[  112.894933][ T9935] syzkaller1: entered allmulticast mode
[  112.975668][ T9940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.983169][ T9940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  113.104034][ T9947] bridge0: entered allmulticast mode
[  113.714042][ T9962] hsr_slave_1 (unregistering): left promiscuous mode
[  113.888999][ T9971] __nla_validate_parse: 26 callbacks suppressed
[  113.889012][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'.
[  113.934045][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'.
[  114.010534][ T9986] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1063'.
[  114.013932][ T9986] validate_nla: 2 callbacks suppressed
[  114.013940][ T9986] netlink: 'syz.2.1063': attribute type 8 has an invalid length.
[  114.022253][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  114.111956][ T9998] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  114.132818][ T9998] 8021q: adding VLAN 0 to HW filter on device bond23
[  114.153579][ T9998] 8021q: adding VLAN 0 to HW filter on device bond23
[  114.156627][ T9998] bond23: (slave vcan0): The slave device specified does not support setting the MAC address
[  114.163592][ T9998] bond23: (slave vcan0): Error -95 calling set_mac_address
[  114.184899][ T9994] syzkaller1: entered promiscuous mode
[  114.186735][ T9994] syzkaller1: entered allmulticast mode
[  114.193420][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'.
[  114.204862][T10006] gretap1: entered promiscuous mode
[  114.215024][T10006] bond23: (slave gretap1): making interface the new active one
[  114.218500][T10006] bond23: (slave gretap1): Enslaving as an active interface with an up link
[  114.229021][ T9998] macvlan6: entered promiscuous mode
[  114.234485][ T9998] macvlan6: entered allmulticast mode
[  114.237518][ T9998] bond23: entered promiscuous mode
[  114.239658][ T9998] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  114.246156][ T9998] bond23: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  114.250583][ T9998] bond23: left promiscuous mode
[  114.528515][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'.
[  114.534040][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'.
[  114.899831][T10028] syzkaller0: entered promiscuous mode
[  114.901765][T10028] syzkaller0: entered allmulticast mode
[  114.966368][T10039] syzkaller0: left promiscuous mode
[  114.968104][T10039] syzkaller0: left allmulticast mode
[  114.998812][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'.
[  115.072682][T10055] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  115.089682][T10055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1083'.
[  115.098282][T10055] 8021q: adding VLAN 0 to HW filter on device bond24
[  115.101117][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'.
[  115.111114][T10055] veth19: entered promiscuous mode
[  115.116382][T10055] bond24: (slave veth19): Enslaving as a backup interface with a down link
[  115.121449][T10055] tipc: Resetting bearer <eth:team0>
[  115.124143][T10055] bond20: (slave veth17): Releasing active interface
[  115.126832][T10055] bond20: (slave veth17): the permanent HWaddr of slave - 5e:d6:ad:36:0e:5b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.133185][T10055] bond20: (slave vlan4): Releasing active interface
[  115.137780][T10055] bond22: (slave gretap0): Releasing active interface
[  115.142409][T10055] bond23: (slave gretap1): Releasing active interface
[  115.147581][T10055] bond24: (slave veth19): Releasing backup interface
[  115.151919][T10058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.219834][T10068] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  115.222490][T10068] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  115.286206][T10073] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  115.289400][T10073] netlink: 'syz.2.1086': attribute type 1 has an invalid length.
[  115.370842][T10083] syzkaller0: left promiscuous mode
[  115.372549][T10083] syzkaller0: left allmulticast mode
[  115.379594][T10085] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  115.459247][T10092] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  115.460291][ T5286] IPVS: starting estimator thread 0...
[  115.495220][T10097] netlink: 'syz.2.1094': attribute type 5 has an invalid length.
[  115.554406][T10096] IPVS: using max 79 ests per chain, 189600 per kthread
[  115.674519][T10108] : left promiscuous mode
[  115.728409][T10109] pim6reg1: entered promiscuous mode
[  115.730297][T10109] pim6reg1: entered allmulticast mode
[  115.831373][T10116] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  115.841126][T10116] syzkaller0: entered promiscuous mode
[  115.842922][T10116] syzkaller0: entered allmulticast mode
[  115.910276][T10125] syzkaller1: entered promiscuous mode
[  115.912107][T10125] syzkaller1: entered allmulticast mode
[  115.968784][T10120] netlink: 'syz.0.1101': attribute type 1 has an invalid length.
[  116.108991][T10146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.271892][T10148] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  116.274944][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.278471][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.281303][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.283932][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.314985][T10153] 8021q: adding VLAN 0 to HW filter on device bond12
[  116.538017][T10166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.719639][T10178] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  116.737541][T10178] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  117.089211][T10200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.152394][T10208] tipc: Resetting bearer <eth:syzkaller0>
[  117.158743][T10208] tipc: Resetting bearer <eth:syzkaller0>
[  117.269750][T10219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.273034][T10219] syzkaller0: entered promiscuous mode
[  117.276286][T10219] syzkaller0: entered allmulticast mode
[  117.314783][T10221] batman_adv: batadv0: Adding interface: 
[  117.320766][T10221] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.331094][T10221] batman_adv: batadv0: Interface activated: 
[  117.468379][T10233] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.632813][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.640213][T10241] nr0: entered allmulticast mode
[  118.244882][T10251] veth11: entered promiscuous mode
[  118.445945][T10276] veth13: entered promiscuous mode
[  118.453289][T10276] tipc: Resetting bearer <eth:team0>
[  118.459338][T10276] batman_adv: batadv0: Interface deactivated: 
[  118.462205][T10276] batman_adv: batadv0: Removing interface: 
[  118.465823][T10276] bond0: (slave wlan1): Releasing backup interface
[  118.472802][T10276] bridge7: left promiscuous mode
[  118.483623][T10276] team0: Port device bridge7 removed
[  118.488977][T10274] syzkaller1: entered promiscuous mode
[  118.491302][T10274] syzkaller1: entered allmulticast mode
[  118.593309][T10284] tipc: Resetting bearer <eth:team0>
[  118.596124][T10284] tipc: Resetting bearer <eth:team0>
[  118.605384][    C0] vcan0: j1939_tp_rxtimer: 0xffff888038991000: rx timeout, send abort
[  118.606797][T10284] syzkaller0: left promiscuous mode
[  118.609113][    C0] vcan0: j1939_tp_rxtimer: 0xffff888038c5bc00: rx timeout, send abort
[  118.612482][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038991000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  118.615478][T10284] gtp1: left promiscuous mode
[  118.617177][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038c5bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  118.619705][T10284] gretap1: left promiscuous mode
[  118.626146][T10284] veth19: left promiscuous mode
[  118.635997][T10285] tipc: Resetting bearer <eth:team0>
[  118.642981][T10284] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  118.690349][T10298] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.707216][T10298] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.728033][T10290] tipc: Resetting bearer <eth:team0>
[  118.778697][T10298] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.789219][T10298] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.807946][T10306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.810899][T10306] syzkaller0: entered promiscuous mode
[  118.830333][T10298] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.833556][T10298] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.869350][T10298] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.872479][T10298] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.985490][ T5846] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.989051][ T5846] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.998173][ T9263] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.001117][ T9263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.009309][ T9263] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.012417][ T9263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.021411][ T9263] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.024621][ T9263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.088217][ T9263] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  119.148875][T10323] __nla_validate_parse: 33 callbacks suppressed
[  119.148887][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1158'.
[  119.154040][T10323] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1158'.
[  119.164197][T10323] tipc: Resetting bearer <eth:syzkaller0>
[  119.176951][T10323] tipc: Resetting bearer <eth:syzkaller0>
[  119.347936][T10337] IPv6: sit3: Disabled Multicast RS
[  119.350503][T10337] sit3: entered allmulticast mode
[  119.498451][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'.
[  119.557595][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'.
[  119.572062][T10348] vlan5: entered allmulticast mode
[  119.574068][T10348] bridge10: port 1(vlan5) entered blocking state
[  119.576355][T10348] bridge10: port 1(vlan5) entered disabled state
[  119.579335][T10348] vlan5: entered promiscuous mode
[  119.580982][T10348] bridge0: entered promiscuous mode
[  119.659766][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  119.692050][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  119.717740][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'.
[  119.742503][T10370] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  119.748782][T10370] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  119.763979][T10369] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  119.768199][T10369] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  119.791807][T10372] macvlan2: entered promiscuous mode
[  119.793924][T10372] macvlan2: entered allmulticast mode
[  119.795995][T10372] bond16: (slave macvlan2): Error -98 calling set_mac_address
[  119.838027][T10374] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.841878][T10374] IPVS: length: 209 != 24
[  119.843564][T10374] syzkaller0: left promiscuous mode
[  119.847038][T10374] syzkaller0: left allmulticast mode
[  119.963168][T10380] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  120.041593][T10395] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.048087][T10395] syzkaller0: entered promiscuous mode
[  120.050544][T10395] syzkaller0: entered allmulticast mode
[  120.082174][T10401] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1175'.
[  120.086517][T10401] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1175'.
[  120.109565][T10402] validate_nla: 5 callbacks suppressed
[  120.109577][T10402] netlink: 'syz.1.1174': attribute type 13 has an invalid length.
[  120.114077][T10402] netlink: 'syz.1.1174': attribute type 17 has an invalid length.
[  120.119285][T10402] lo: left promiscuous mode
[  120.125109][T10402] tunl0: left promiscuous mode
[  120.127686][T10402] gre0: left promiscuous mode
[  120.130092][T10402] gretap0: left promiscuous mode
[  120.132307][T10402] erspan0: left promiscuous mode
[  120.136156][T10402] ip_vti0: left promiscuous mode
[  120.138209][T10402] ip6_vti0: left promiscuous mode
[  120.140388][T10402] sit0: left promiscuous mode
[  120.142542][T10402] ip6tnl0: left promiscuous mode
[  120.144868][T10402] ip6gre0: left promiscuous mode
[  120.146974][T10402] ip6gretap0: left promiscuous mode
[  120.260608][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  120.271005][T10402] team0: left promiscuous mode
[  120.272952][T10402] tipc: Resetting bearer <eth:team0>
[  120.275156][T10402] tipc: Resetting bearer <eth:team0>
[  120.277054][T10402] nlmon0: left promiscuous mode
[  120.279155][T10402] caif0: left promiscuous mode
[  120.280723][T10402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.289847][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.363502][T10410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.365483][T10419] bond26: entered promiscuous mode
[  120.368708][T10419] bond26: entered allmulticast mode
[  120.370608][T10419] 8021q: adding VLAN 0 to HW filter on device bond26
[  120.427902][T10399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.457958][T10432] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  120.518874][T10430] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  120.602182][T10447] tipc: Resetting bearer <eth:team0>
[  120.609479][T10447] bond0: (slave geneve1): Releasing backup interface
[  120.631547][ T5860] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.635754][ T5860] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.639442][ T5860] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.642325][ T5860] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.672165][T10447] netlink: 'syz.2.1184': attribute type 10 has an invalid length.
[  120.707968][T10447] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.711035][T10447] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.577174][T10482] erspan0: entered promiscuous mode
[  121.824709][T10505] netlink: 'syz.2.1197': attribute type 39 has an invalid length.
[  121.907056][T10511] netlink: 'syz.0.1200': attribute type 10 has an invalid length.
[  121.909637][T10511] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  121.916137][T10511] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.920623][T10511] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.923387][ T5286] sz1: Port: 1 Link ACTIVE
[  121.940747][T10523] netlink: 'syz.1.1202': attribute type 1 has an invalid length.
[  121.961747][T10523] bond17: entered promiscuous mode
[  121.963805][T10523] 8021q: adding VLAN 0 to HW filter on device bond17
[  121.983503][T10523] 8021q: adding VLAN 0 to HW filter on device bond17
[  121.987534][T10523] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  122.010031][T10523] bond17: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  122.017621][T10523] bond17: (slave wireguard0): making interface the new active one
[  122.020448][T10523] wireguard0: entered promiscuous mode
[  122.023269][T10523] bond17: (slave wireguard0): Enslaving as an active interface with an up link
[  122.028817][T10511] tipc: Resetting bearer <eth:syzkaller0>
[  122.033374][T10523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.035868][T10523] IPv6: NLM_F_CREATE should be set when creating new route
[  122.038284][T10523] IPv6: NLM_F_CREATE should be set when creating new route
[  122.041206][T10523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.041627][T10510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.069767][T10531] ipvlan4: entered promiscuous mode
[  122.122446][ T9263] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  122.317862][T10554] netlink: 'syz.1.1208': attribute type 1 has an invalid length.
[  122.330759][T10554] bond18: entered promiscuous mode
[  122.332807][T10554] 8021q: adding VLAN 0 to HW filter on device bond18
[  122.351343][T10554] 8021q: adding VLAN 0 to HW filter on device bond18
[  122.357360][T10554] bond18: (slave wireguard1): The slave device specified does not support setting the MAC address
[  122.361721][T10554] bond18: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  122.368679][T10554] bond18: (slave wireguard1): making interface the new active one
[  122.371304][T10554] wireguard1: entered promiscuous mode
[  122.374872][T10554] bond18: (slave wireguard1): Enslaving as an active interface with an up link
[  122.387193][T10554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.394091][T10554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.495219][T10572] tipc: Resetting bearer <eth:team0>
[  122.507916][T10572] tipc: Resetting bearer <eth:team0>
[  122.527201][T10569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  122.592469][T10579] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  122.639346][T10585] netlink: 'syz.2.1218': attribute type 10 has an invalid length.
[  122.651828][T10585] team0: Device bond0 failed to register rx_handler
[  122.736330][T10592] GUP no longer grows the stack in syz.2.1220 (10592): 200000006000-20000000a000 (200000005000)
[  122.740748][T10588] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  122.741317][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.2.1220 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  122.741331][T10592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.741337][T10592] Call Trace:
[  122.741342][T10592]  <TASK>
[  122.741345][T10592]  dump_stack_lvl+0x189/0x250
[  122.741361][T10592]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.741370][T10592]  ? __pfx__printk+0x10/0x10
[  122.741380][T10592]  ? find_vma+0xe7/0x160
[  122.741399][T10592]  __get_user_pages+0x2a60/0x30b0
[  122.741425][T10592]  ? __pfx___get_user_pages+0x10/0x10
[  122.741434][T10592]  ? __gup_longterm_locked+0xbf7/0x15b0
[  122.741444][T10592]  ? down_read_killable+0x1d1/0x350
[  122.741454][T10592]  ? try_get_folio+0x633/0x660
[  122.741467][T10592]  __gup_longterm_locked+0xd66/0x15b0
[  122.741480][T10592]  ? try_grab_folio_fast+0x1be/0x4f0
[  122.741496][T10592]  ? gup_fast_fallback+0x1afc/0x2260
[  122.741507][T10592]  gup_fast_fallback+0x1cd4/0x2260
[  122.741531][T10592]  ? __pfx_gup_fast_fallback+0x10/0x10
[  122.741539][T10592]  ? __mutex_lock+0x335/0x1340
[  122.741551][T10592]  ? futex_unqueue+0x22/0x240
[  122.741559][T10592]  ? futex_unqueue+0x22/0x240
[  122.741565][T10592]  ? futex_unqueue+0x22/0x240
[  122.741572][T10592]  ? is_valid_gup_args+0x11f/0x200
[  122.741582][T10592]  ? get_user_pages_fast+0x4d/0xb0
[  122.741594][T10592]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  122.741608][T10592]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  122.741616][T10592]  ? wait_for_space+0x24d/0x2d0
[  122.741628][T10592]  iov_iter_get_pages2+0x5e/0xa0
[  122.741664][T10592]  __se_sys_vmsplice+0x548/0x10d0
[  122.741682][T10592]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  122.741695][T10592]  ? __pfx_futex_wait+0x10/0x10
[  122.741711][T10592]  ? __lock_acquire+0xab9/0xd20
[  122.741738][T10592]  ? do_pipe2+0xf7/0x170
[  122.741751][T10592]  ? do_syscall_64+0xbe/0x3b0
[  122.741765][T10592]  do_syscall_64+0xfa/0x3b0
[  122.741775][T10592]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.741786][T10592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.741793][T10592]  ? exc_page_fault+0x9f/0xf0
[  122.741804][T10592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.741810][T10592] RIP: 0033:0x7f080298ebe9
[  122.741818][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.741825][T10592] RSP: 002b:00007f0800bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  122.741834][T10592] RAX: ffffffffffffffda RBX: 00007f0802bb5fa0 RCX: 00007f080298ebe9
[  122.741839][T10592] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010
[  122.741844][T10592] RBP: 00007f0802a11e19 R08: 0000000000000000 R09: 0000000000000000
[  122.741848][T10592] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  122.741853][T10592] R13: 00007f0802bb6038 R14: 00007f0802bb5fa0 R15: 00007ffc63195ff8
[  122.741865][T10592]  </TASK>
[  122.875352][T10596] tipc: Resetting bearer <eth:team0>
[  122.885551][T10596] macvlan0: left allmulticast mode
[  122.889039][T10596] tipc: Resetting bearer <eth:syzkaller0>
[  122.897632][T10596] syzkaller0: left promiscuous mode
[  122.899415][T10596] syzkaller0: left allmulticast mode
[  122.908572][T10596] gretap2: left promiscuous mode
[  122.917005][T10596] vlan4: left promiscuous mode
[  122.919367][T10596] bond13: left promiscuous mode
[  122.921201][T10596] vlan4: left allmulticast mode
[  122.922937][T10596] bond13: left allmulticast mode
[  122.928316][T10596] veth11: left promiscuous mode
[  122.930553][T10596] veth13: left promiscuous mode
[  122.935926][T10596] bond17: left promiscuous mode
[  122.937720][T10596] wireguard0: left promiscuous mode
[  122.944553][T10596] bond18: left promiscuous mode
[  122.946328][T10596] wireguard1: left promiscuous mode
[  123.116317][T10603] vlan5 (unregistering): left allmulticast mode
[  123.118473][T10603] bridge0 (unregistering): left allmulticast mode
[  123.120566][T10603] vlan5 (unregistering): left promiscuous mode
[  123.122677][T10603] bridge0 (unregistering): left promiscuous mode
[  123.126279][T10603] bridge10: port 1(vlan5) entered disabled state
[  124.110134][T10647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.148717][T10647] 8021q: adding VLAN 0 to HW filter on device bond27
[  124.157197][T10650] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.165494][T10647] __nla_validate_parse: 29 callbacks suppressed
[  124.165503][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1231'.
[  124.174156][T10651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.216526][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'.
[  124.220250][T10655] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.252913][T10659] sctp: [Deprecated]: syz.1.1234 (pid 10659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.252913][T10659] Use struct sctp_sack_info instead
[  124.376268][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'.
[  124.376959][T10662] syzkaller0: entered promiscuous mode
[  124.381651][T10662] syzkaller0: entered allmulticast mode
[  124.697044][T10665] geneve5: entered allmulticast mode
[  124.701020][ T9263] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.707697][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.710540][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.713349][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.864923][T10675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.870398][T10676] syzkaller0: Caught tx_queue_len zero misconfig
[  124.951279][T10680] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1242'.
[  124.992565][T10680] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1242'.
[  124.996806][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'.
[  125.059480][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'.
[  125.072848][T10684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.120677][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'.
[  125.124032][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1245'.
[  125.156797][T10697] validate_nla: 13 callbacks suppressed
[  125.156816][T10697] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  125.193356][T10697] bond28: (slave bridge49): making interface the new active one
[  125.204727][T10697] bond28: (slave bridge49): Enslaving as an active interface with an up link
[  125.246139][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'.
[  125.351754][T10710] batman_adv: batadv0: Adding interface: ip6gretap3
[  125.355688][T10710] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.370709][T10710] batman_adv: batadv0: Interface activated: ip6gretap3
[  125.499512][T10723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.576429][T10727] syzkaller0: left promiscuous mode
[  125.578229][T10727] syzkaller0: left allmulticast mode
[  125.582579][T10727] tipc: Resetting bearer <eth:syzkaller0>
[  125.612027][T10734] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[  125.640907][T10734] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  125.645192][T10734] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  125.699905][T10737] netlink: 'syz.2.1258': attribute type 13 has an invalid length.
[  125.703152][T10737] netlink: 'syz.2.1258': attribute type 17 has an invalid length.
[  125.712974][T10737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  125.940600][T10746] syz.2.1261 uses old SIOCAX25GETINFO
[  126.262440][T10764] syzkaller1: tun_chr_ioctl cmd 1074025677
[  126.266182][T10764] syzkaller1: linktype set to 778
[  126.382028][T10780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.505113][T10789] pim6reg1: entered promiscuous mode
[  126.507488][T10789] pim6reg1: entered allmulticast mode
[  126.611335][T10789] 8021q: adding VLAN 0 to HW filter on device bond29
[  126.615462][T10789] bond29: entered promiscuous mode
[  126.620219][T10789] team0: Port device bond29 added
[  126.627717][   T83] tipc: Resetting bearer <eth:team0>
[  126.667061][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.774928][T10818] sctp: [Deprecated]: syz.2.1278 (pid 10818) Use of int in max_burst socket option.
[  126.774928][T10818] Use struct sctp_assoc_value instead
[  126.855185][T10825] netlink: 'syz.2.1279': attribute type 2 has an invalid length.
[  126.867430][T10825] : entered promiscuous mode
[  127.000934][T10833] bond0: entered promiscuous mode
[  127.003189][T10833] bond0: left promiscuous mode
[  127.165993][T10840] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  127.166374][T10835] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  127.571717][T10863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  127.669343][T10870] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  127.686841][T10870] 8021q: adding VLAN 0 to HW filter on device bond16
[  127.723409][T10868] bond16: (slave veth15): Enslaving as an active interface with a down link
[  127.743574][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.745781][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.750820][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.410016][T10898] bridge0: port 1(erspan0) entered blocking state
[  128.412780][T10898] bridge0: port 1(erspan0) entered disabled state
[  128.417780][T10898] erspan0: entered allmulticast mode
[  128.421378][T10898] erspan0: left allmulticast mode
[  128.497270][T10904] syzkaller1: tun_chr_ioctl cmd 1074025673
[  128.624737][T10906] netlink: 'syz.1.1301': attribute type 13 has an invalid length.
[  128.627415][T10906] netlink: 'syz.1.1301': attribute type 17 has an invalid length.
[  128.690064][T10919] netlink: 'syz.1.1305': attribute type 4 has an invalid length.
[  129.170246][T10949] syzkaller1: entered promiscuous mode
[  129.172222][T10949] syzkaller1: entered allmulticast mode
[  129.194810][T10957] __nla_validate_parse: 20 callbacks suppressed
[  129.194827][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  129.585686][T10963] bond19 (unregistering): Released all slaves
[  129.611691][T10966] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  129.769677][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1319'.
[  129.772850][T10977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1319'.
[  129.841890][T10982] 8021q: adding VLAN 0 to HW filter on device bond30
[  129.852834][T10982] 8021q: adding VLAN 0 to HW filter on device bond30
[  129.856019][T10982] bond30: (slave vcan0): The slave device specified does not support setting the MAC address
[  129.860187][T10982] bond30: (slave vcan0): Error -95 calling set_mac_address
[  130.242544][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'.
[  130.295448][T11008] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1324'.
[  130.299058][T11008] gretap0: entered promiscuous mode
[  130.327151][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'.
[  130.349478][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  130.362873][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'.
[  130.401479][T11027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.406514][T11027] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  130.440806][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  130.445379][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  130.457049][T11029] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  130.882029][T11040] geneve0: entered allmulticast mode
[  131.289997][T11049] syzkaller0: left promiscuous mode
[  131.292312][T11049] syzkaller0: left allmulticast mode
[  131.296929][T11049] tipc: Resetting bearer <eth:syzkaller0>
[  131.437748][T11053] validate_nla: 1 callbacks suppressed
[  131.437760][T11053] netlink: 'syz.1.1338': attribute type 2 has an invalid length.
[  131.442054][T11053] netlink: 'syz.1.1338': attribute type 1 has an invalid length.
[  131.453337][T11053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.458365][T11053] syzkaller0: entered promiscuous mode
[  131.460140][T11053] syzkaller0: entered allmulticast mode
[  131.463171][T11053] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1806) !
[  131.469723][T11053] tipc: Resetting bearer <eth:syzkaller0>
[  131.473779][T11055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.741426][T11067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.814957][T11069] netlink: 'syz.2.1343': attribute type 30 has an invalid length.
[  131.857448][T11074] netlink: 'syz.0.1344': attribute type 3 has an invalid length.
[  131.995201][T11089] netlink: 'syz.1.1350': attribute type 10 has an invalid length.
[  132.046813][T11083] tipc: Resetting bearer <eth:team0>
[  132.061360][T11083] tipc: Resetting bearer <eth:syzkaller0>
[  132.122019][ T5846] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.128762][ T5846] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.131391][ T5846] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.133995][ T5846] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.187787][T11105] batman_adv: batadv0: Adding interface: ip6gretap1
[  132.190024][T11105] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.235222][T11105] batman_adv: batadv0: Interface activated: ip6gretap1
[  132.258071][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.361869][T11132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.454972][T11147] netlink: 'syz.0.1359': attribute type 33 has an invalid length.
[  132.661099][T11161] sctp: [Deprecated]: syz.1.1363 (pid 11161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.661099][T11161] Use struct sctp_sack_info instead
[  133.313789][T11184] pim6reg: left allmulticast mode
[  133.397467][T11187] sctp: [Deprecated]: syz.2.1366 (pid 11187) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.397467][T11187] Use struct sctp_sack_info instead
[  133.440486][T11198] netlink: 'syz.2.1368': attribute type 10 has an invalid length.
[  133.443250][T11196] netlink: 'syz.2.1368': attribute type 10 has an invalid length.
[  133.446930][T11198] batman_adv: batadv0: Adding interface: team0
[  133.449098][T11198] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.458608][T11198] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  133.464889][T11196] 8021q: adding VLAN 0 to HW filter on device team0
[  133.468854][T11196] batman_adv: batadv0: Interface activated: team0
[  133.471342][T11196] batman_adv: batadv0: Interface deactivated: team0
[  133.474096][T11196] batman_adv: batadv0: Removing interface: team0
[  133.478798][T11196] bridge0: port 1(team0) entered blocking state
[  133.481075][T11196] bridge0: port 1(team0) entered disabled state
[  133.483308][T11196] team0: entered allmulticast mode
[  133.485621][T11196] bond29: entered allmulticast mode
[  133.489532][T11196] team0: left allmulticast mode
[  133.491946][T11196] bond29: left allmulticast mode
[  133.582125][T11212] 8021q: VLANs not supported on ip_vti0
[  133.600824][ T5846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.604035][ T5846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.610374][ T5846] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.613305][ T5846] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.622952][T11214] netlink: 'syz.0.1373': attribute type 10 has an invalid length.
[  133.629032][T11214] netlink: 'syz.0.1373': attribute type 10 has an invalid length.
[  133.638207][T11219] tipc: Resetting bearer <eth:team0>
[  134.039182][T11248] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  134.041935][T11248] CPU: 0 UID: 0 PID: 11248 Comm: syz.0.1383 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  134.041947][T11248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.041952][T11248] Call Trace:
[  134.041956][T11248]  <TASK>
[  134.041960][T11248]  dump_stack_lvl+0x189/0x250
[  134.041974][T11248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.041983][T11248]  ? __pfx__printk+0x10/0x10
[  134.041993][T11248]  ? kernfs_path_from_node+0x2c/0x260
[  134.042003][T11248]  ? kernfs_path_from_node+0x2c/0x260
[  134.042011][T11248]  ? kernfs_path_from_node+0x2c/0x260
[  134.042019][T11248]  ? kernfs_path_from_node+0x22c/0x260
[  134.042027][T11248]  ? kernfs_path_from_node+0x2c/0x260
[  134.042036][T11248]  sysfs_warn_dup+0x8e/0xa0
[  134.042046][T11248]  sysfs_do_create_link_sd+0xc0/0x110
[  134.042055][T11248]  device_add_class_symlinks+0x1cf/0x240
[  134.042067][T11248]  device_add+0x475/0xb50
[  134.042077][T11248]  wiphy_register+0x1ba6/0x28d0
[  134.042096][T11248]  ? __pfx_wiphy_register+0x10/0x10
[  134.042105][T11248]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  134.042117][T11248]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  134.042129][T11248]  ieee80211_register_hw+0x3425/0x4080
[  134.042145][T11248]  ? ieee80211_register_hw+0x1471/0x4080
[  134.042156][T11248]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  134.042165][T11248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.042188][T11248]  ? __hrtimer_setup+0x187/0x210
[  134.042200][T11248]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  134.042214][T11248]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  134.042236][T11248]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  134.042247][T11248]  ? trace_kmalloc+0x1f/0xd0
[  134.042259][T11248]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  134.042270][T11248]  ? kstrndup+0xbf/0x160
[  134.042283][T11248]  hwsim_new_radio_nl+0xea4/0x1b10
[  134.042300][T11248]  ? __pfx___nla_validate_parse+0x10/0x10
[  134.042318][T11248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  134.042331][T11248]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  134.042345][T11248]  ? __nla_parse+0x40/0x60
[  134.042355][T11248]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  134.042369][T11248]  genl_family_rcv_msg_doit+0x215/0x300
[  134.042381][T11248]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  134.042395][T11248]  ? bpf_lsm_capable+0x9/0x20
[  134.042407][T11248]  ? security_capable+0x7e/0x2e0
[  134.042419][T11248]  genl_rcv_msg+0x60e/0x790
[  134.042430][T11248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  134.042438][T11248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  134.042453][T11248]  netlink_rcv_skb+0x208/0x470
[  134.042464][T11248]  ? __lock_acquire+0xab9/0xd20
[  134.042475][T11248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  134.042483][T11248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.042501][T11248]  ? down_read+0x1ad/0x2e0
[  134.042509][T11248]  genl_rcv+0x28/0x40
[  134.042516][T11248]  netlink_unicast+0x82f/0x9e0
[  134.042529][T11248]  ? __pfx_netlink_unicast+0x10/0x10
[  134.042539][T11248]  ? netlink_sendmsg+0x642/0xb30
[  134.042576][T11248]  ? skb_put+0x11b/0x210
[  134.042587][T11248]  netlink_sendmsg+0x805/0xb30
[  134.042603][T11248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.042615][T11248]  ? aa_sock_msg_perm+0x94/0x160
[  134.042627][T11248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.042637][T11248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.042650][T11248]  __sock_sendmsg+0x21c/0x270
[  134.042663][T11248]  ____sys_sendmsg+0x505/0x830
[  134.042675][T11248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.042688][T11248]  ? import_iovec+0x74/0xa0
[  134.042702][T11248]  ___sys_sendmsg+0x21f/0x2a0
[  134.042711][T11248]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.042734][T11248]  ? __fget_files+0x2a/0x420
[  134.042741][T11248]  ? __fget_files+0x3a0/0x420
[  134.042752][T11248]  __x64_sys_sendmsg+0x19b/0x260
[  134.042761][T11248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.042773][T11248]  ? rcu_is_watching+0x15/0xb0
[  134.042787][T11248]  ? do_syscall_64+0xbe/0x3b0
[  134.042799][T11248]  do_syscall_64+0xfa/0x3b0
[  134.042809][T11248]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.042818][T11248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.042826][T11248]  ? exc_page_fault+0x9f/0xf0
[  134.042836][T11248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.042843][T11248] RIP: 0033:0x7f65e718ebe9
[  134.042851][T11248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.042857][T11248] RSP: 002b:00007f65e7f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.042867][T11248] RAX: ffffffffffffffda RBX: 00007f65e73b5fa0 RCX: 00007f65e718ebe9
[  134.042872][T11248] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  134.042877][T11248] RBP: 00007f65e7211e19 R08: 0000000000000000 R09: 0000000000000000
[  134.042881][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.042885][T11248] R13: 00007f65e73b6038 R14: 00007f65e73b5fa0 R15: 00007fff4a05e8d8
[  134.042897][T11248]  </TASK>
[  134.249295][T11256] __nla_validate_parse: 19 callbacks suppressed
[  134.249306][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'.
[  134.317838][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'.
[  134.341424][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'.
[  134.403902][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1390'.
[  134.445920][T11282] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1394'.
[  134.473887][T11288] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1396'.
[  134.542899][T11296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.622104][T11300] batadv_slave_0: entered allmulticast mode
[  134.811294][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  134.819716][T11322] batman_adv: batadv0: Adding interface: ipvlan2
[  134.821782][T11322] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.830210][T11322] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  135.139004][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'.
[  135.142823][T11354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.153953][T11354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.160807][T11354] lo: entered allmulticast mode
[  135.162585][T11354] tunl0: entered allmulticast mode
[  135.164620][T11354] gre0: entered allmulticast mode
[  135.166421][T11354] gretap0: entered allmulticast mode
[  135.168445][T11354] erspan0: entered allmulticast mode
[  135.170282][T11354] ip_vti0: entered allmulticast mode
[  135.172168][T11354] ip6_vti0: entered allmulticast mode
[  135.174595][T11354] sit0: entered allmulticast mode
[  135.176302][T11354] ip6tnl0: entered allmulticast mode
[  135.178218][T11354] ip6gre0: entered allmulticast mode
[  135.179954][T11354] ip6gretap0: entered allmulticast mode
[  135.181822][T11354] bond0: entered allmulticast mode
[  135.183751][T11354] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  135.186266][T11354] team0: entered allmulticast mode
[  135.188067][T11354] nlmon0: entered allmulticast mode
[  135.190005][T11354] caif0: entered allmulticast mode
[  135.192009][T11354] batadv0: entered allmulticast mode
[  135.193983][T11354] vxcan0: entered allmulticast mode
[  135.196039][T11354] vxcan1: entered allmulticast mode
[  135.197853][T11354] veth0: entered allmulticast mode
[  135.199753][T11354] veth1: entered allmulticast mode
[  135.201511][T11354] wg1: entered allmulticast mode
[  135.203296][T11354] wg2: entered allmulticast mode
[  135.205436][T11354] veth0_to_bridge: entered allmulticast mode
[  135.207522][T11354] bridge_slave_0: entered allmulticast mode
[  135.209523][T11354] veth1_to_bridge: entered allmulticast mode
[  135.211689][T11354] bridge_slave_1: entered allmulticast mode
[  135.213631][T11354] veth0_to_bond: entered allmulticast mode
[  135.215766][T11354] bond_slave_0: entered allmulticast mode
[  135.217753][T11354] veth1_to_bond: entered allmulticast mode
[  135.219700][T11354] bond_slave_1: entered allmulticast mode
[  135.221602][T11354] veth0_to_team: entered allmulticast mode
[  135.223582][T11354] team_slave_0: entered allmulticast mode
[  135.225893][T11354] veth1_to_team: entered allmulticast mode
[  135.227877][T11354] team_slave_1: entered allmulticast mode
[  135.229844][T11354] veth0_to_batadv: entered allmulticast mode
[  135.231914][T11354] veth1_to_batadv: entered allmulticast mode
[  135.233975][T11354] batadv_slave_1: entered allmulticast mode
[  135.237340][T11354] xfrm0: entered allmulticast mode
[  135.239106][T11354] veth0_to_hsr: entered allmulticast mode
[  135.241039][T11354] hsr_slave_0: entered allmulticast mode
[  135.242924][T11354] hsr0: entered allmulticast mode
[  135.244780][T11354] veth1_virt_wifi: entered allmulticast mode
[  135.246839][T11354] veth0_virt_wifi: entered allmulticast mode
[  135.249014][T11354] net veth1_virt_wifi : entered allmulticast mode
[  135.251389][T11354] veth1_vlan: entered allmulticast mode
[  135.253295][T11354] veth0_vlan: entered allmulticast mode
[  135.255386][T11354] vlan0: entered allmulticast mode
[  135.257206][T11354] vlan1: entered allmulticast mode
[  135.258948][T11354] macvlan0: entered allmulticast mode
[  135.260740][T11354] macvlan1: entered allmulticast mode
[  135.263043][T11354] ipvlan0: entered allmulticast mode
[  135.266056][T11354] ipvlan1: entered allmulticast mode
[  135.267886][T11354] geneve1: entered allmulticast mode
[  135.271368][T11354] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  135.276701][T11354] macsec1: entered allmulticast mode
[  135.278688][T11354] ip6_vti1: entered allmulticast mode
[  135.280527][T11354] macsec0: entered allmulticast mode
[  135.282614][T11354] bridge1: entered allmulticast mode
[  135.284828][T11354] bond1: entered allmulticast mode
[  135.286710][T11354] @: entered allmulticast mode
[  135.288598][T11354] bond2: entered allmulticast mode
[  135.290448][T11354] bond3: entered allmulticast mode
[  135.292325][T11354] ipip0: entered allmulticast mode
[  135.294176][T11354] ip6tnl1: entered allmulticast mode
[  135.296391][T11354] bond4: entered allmulticast mode
[  135.298271][T11354] ip6gretap1: entered allmulticast mode
[  135.301675][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  135.304183][T11354] syzkaller0: left promiscuous mode
[  135.307243][T11354] sit1: entered allmulticast mode
[  135.309075][T11354] ip6erspan0: entered allmulticast mode
[  135.313339][T11354] bond5: entered allmulticast mode
[  135.315627][T11354] ip6gretap2: entered allmulticast mode
[  135.317705][T11354] gre1: entered allmulticast mode
[  135.319747][T11354] vxlan0: entered allmulticast mode
[  135.321759][T11354] batadv0.5: entered allmulticast mode
[  135.323774][T11354] bond6: entered allmulticast mode
[  135.326654][T11354] bridge2: entered allmulticast mode
[  135.328842][T11354] geneve2: entered allmulticast mode
[  135.331056][T11354] bond7: entered allmulticast mode
[  135.332900][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  135.335615][T11354] ip6tnl2: entered allmulticast mode
[  135.336271][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'.
[  135.338058][T11354] veth2: entered allmulticast mode
[  135.343260][T11354] veth3: entered allmulticast mode
[  135.346376][T11354] gtp0: entered allmulticast mode
[  135.348238][T11354] vxlan1: entered allmulticast mode
[  135.350019][T11354] bond8: entered allmulticast mode
[  135.351785][T11354] gre2: entered allmulticast mode
[  135.353442][T11354] sit2: entered allmulticast mode
[  135.363120][T11354] bond9: entered allmulticast mode
[  135.365510][T11354] veth4: entered allmulticast mode
[  135.367902][T11354] veth5: entered allmulticast mode
[  135.369688][T11354] bridge3: entered allmulticast mode
[  135.371820][T11354] tun0: entered allmulticast mode
[  135.376507][T11354] erspan1: entered allmulticast mode
[  135.378634][T11354] bond10: entered allmulticast mode
[  135.379575][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.380370][T11354] gretap1: entered allmulticast mode
[  135.386150][T11354] vlan3: entered allmulticast mode
[  135.387870][T11354] bond11: entered allmulticast mode
[  135.389654][T11354] bond12: entered allmulticast mode
[  135.391369][T11354] bridge4: entered allmulticast mode
[  135.393202][T11354] veth6: entered allmulticast mode
[  135.396571][T11354] veth7: entered allmulticast mode
[  135.398650][T11354] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode
[  135.401568][T11354] mac80211_hwsim hwsim7 pimreg: entered allmulticast mode
[  135.405419][T11354] geneve3: entered allmulticast mode
[  135.407644][T11354] sit3: entered allmulticast mode
[  135.409846][T11354] mac80211_hwsim hwsim6 veth1_to_bod: entered allmulticast mode
[  135.413103][T11354] bridge5: entered allmulticast mode
[  135.417242][T11354] bridge6: entered allmulticast mode
[  135.419444][T11354] ip6gre1: entered allmulticast mode
[  135.421693][T11354] geneve4: entered allmulticast mode
[  135.423946][T11354] geneve5: entered allmulticast mode
[  135.427218][T11354] sit4: entered allmulticast mode
[  135.429394][T11354] netdevsim netdevsim1 eth0: entered allmulticast mode
[  135.432292][T11354] netdevsim netdevsim1 eth1: entered allmulticast mode
[  135.436067][T11354] netdevsim netdevsim1 eth2: entered allmulticast mode
[  135.439620][T11354] netdevsim netdevsim1 eth3: entered allmulticast mode
[  135.442507][T11354] mac80211_hwsim hwsim19 wlan3: entered allmulticast mode
[  135.445834][T11354] ip6tnl3: entered allmulticast mode
[  135.447940][T11354] vti0: entered allmulticast mode
[  135.450045][T11354] gretap2: entered allmulticast mode
[  135.452083][T11354] bridge7: entered allmulticast mode
[  135.454408][T11354] bond13: entered allmulticast mode
[  135.456566][T11354] vlan4: entered allmulticast mode
[  135.458775][T11354] bridge8: entered allmulticast mode
[  135.461020][T11354] veth8: entered allmulticast mode
[  135.463167][T11354] veth9: entered allmulticast mode
[  135.465733][T11354] bond14: entered allmulticast mode
[  135.467976][T11354] bridge9: entered allmulticast mode
[  135.470256][T11354] veth10: entered allmulticast mode
[  135.472523][T11354] veth11: entered allmulticast mode
[  135.474915][T11354] mac80211_hwsim hwsim21 wlan4: entered allmulticast mode
[  135.477716][T11354] mac80211_hwsim hwsim22 wlan5: entered allmulticast mode
[  135.480706][T11354] bond15: entered allmulticast mode
[  135.482957][T11354] veth12: entered allmulticast mode
[  135.485450][T11354] veth13: entered allmulticast mode
[  135.487731][T11354] vti1: entered allmulticast mode
[  135.489907][T11354] bridge10: entered allmulticast mode
[  135.492107][T11354] bond16: entered allmulticast mode
[  135.494454][T11354] bond17: entered allmulticast mode
[  135.496586][T11354] wireguard0: entered allmulticast mode
[  135.499051][T11354] bond18: entered allmulticast mode
[  135.501209][T11354] wireguard1: entered allmulticast mode
[  135.503770][T11354] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  135.507405][T11354] ip6gretap3: entered allmulticast mode
[  135.511136][T11354] bridge0: entered allmulticast mode
[  135.514008][T11354] bridge11: entered allmulticast mode
[  135.518949][T11354] vxcan2: entered allmulticast mode
[  135.521113][T11354] vxcan3: entered allmulticast mode
[  135.523310][T11354] ipvlan2: entered allmulticast mode
[  135.526047][T11354] ip6gre2: entered allmulticast mode
[  135.610711][T11371] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.619678][T11371] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  135.709407][T11379] lo: entered allmulticast mode
[  135.711257][T11379] tunl0: entered allmulticast mode
[  135.713112][T11379] gre0: entered allmulticast mode
[  135.718345][T11379] 0{X: entered allmulticast mode
[  135.720583][T11379] erspan0: entered allmulticast mode
[  135.722518][T11379] ip_vti0: entered allmulticast mode
[  135.724372][T11379] ip6_vti0: entered allmulticast mode
[  135.726152][T11379] sit0: entered allmulticast mode
[  135.727793][T11379] ip6tnl0: entered allmulticast mode
[  135.729508][T11379] ip6gre0: entered allmulticast mode
[  135.731276][T11379] ip6gretap0: entered allmulticast mode
[  135.733162][T11379] bond0: entered allmulticast mode
[  135.735204][T11379] tipc: Resetting bearer <eth:team0>
[  135.737132][T11379] team0: left promiscuous mode
[  135.738735][T11379] bond29: left promiscuous mode
[  135.740400][T11379] team0: entered allmulticast mode
[  135.742114][T11379] bond29: entered allmulticast mode
[  135.745510][T11379] nlmon0: entered allmulticast mode
[  135.747314][T11379] caif0: entered allmulticast mode
[  135.749132][T11379] veth0: entered allmulticast mode
[  135.750880][T11379] veth1: entered allmulticast mode
[  135.752614][T11379] wg1: entered allmulticast mode
[  135.754772][T11379] veth0_to_bridge: entered allmulticast mode
[  135.756797][T11379] bridge_slave_0: entered allmulticast mode
[  135.758781][T11379] veth1_to_bridge: entered allmulticast mode
[  135.760835][T11379] bridge_slave_1: entered allmulticast mode
[  135.762906][T11379] veth0_to_bond: entered allmulticast mode
[  135.765053][T11379] bond_slave_0: entered allmulticast mode
[  135.766999][T11379] veth1_to_bond: entered allmulticast mode
[  135.768905][T11379] bond_slave_1: entered allmulticast mode
[  135.770865][T11379] veth0_to_team: entered allmulticast mode
[  135.773018][T11379] team_slave_0: entered allmulticast mode
[  135.775568][T11379] veth1_to_team: entered allmulticast mode
[  135.777658][T11379] team_slave_1: entered allmulticast mode
[  135.779675][T11379] veth0_to_batadv: entered allmulticast mode
[  135.781786][T11379] batadv_slave_0: entered allmulticast mode
[  135.783901][T11379] xfrm0: entered allmulticast mode
[  135.785822][T11379] veth0_to_hsr: entered allmulticast mode
[  135.787796][T11379] hsr_slave_0: entered allmulticast mode
[  135.789786][T11379] hsr0: entered allmulticast mode
[  135.791599][T11379] veth1_virt_wifi: entered allmulticast mode
[  135.793696][T11379] veth0_virt_wifi: entered allmulticast mode
[  135.796328][T11379] veth1_vlan: entered allmulticast mode
[  135.798318][T11379] veth0_vlan: entered allmulticast mode
[  135.800269][T11379] vlan0: entered allmulticast mode
[  135.802074][T11379] vlan1: entered allmulticast mode
[  135.803877][T11379] macvlan0: entered allmulticast mode
[  135.805876][T11379] macvlan1: entered allmulticast mode
[  135.807767][T11379] ipvlan0: entered allmulticast mode
[  135.809567][T11379] ipvlan1: entered allmulticast mode
[  135.811474][T11379] geneve1: entered allmulticast mode
[  135.813290][T11379] mac80211_hwsim hwsim4 ": entered allmulticast mode
[  135.815827][T11379] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[  135.818174][T11379] bond1: entered allmulticast mode
[  135.819969][T11379] bond2: entered allmulticast mode
[  135.821766][T11379] bridge1: entered allmulticast mode
[  135.823638][T11379] bridge2: entered allmulticast mode
[  135.825625][T11379] bridge3: entered allmulticast mode
[  135.827498][T11379] bridge4: entered allmulticast mode
[  135.829343][T11379] bridge5: entered allmulticast mode
[  135.831196][T11379] bridge6: entered allmulticast mode
[  135.833061][T11379] bridge7: entered allmulticast mode
[  135.835113][T11379] bridge8: entered allmulticast mode
[  135.836965][T11379] bridge9: entered allmulticast mode
[  135.838837][T11379] bridge10: entered allmulticast mode
[  135.840703][T11379] bridge11: entered allmulticast mode
[  135.842605][T11379] bridge12: entered allmulticast mode
[  135.844661][T11379] bridge13: entered allmulticast mode
[  135.846516][T11379] bridge14: entered allmulticast mode
[  135.848350][T11379] bridge15: entered allmulticast mode
[  135.850159][T11379] bridge16: entered allmulticast mode
[  135.851930][T11379] bridge17: entered allmulticast mode
[  135.853704][T11379] bridge18: entered allmulticast mode
[  135.855872][T11379] bridge19: entered allmulticast mode
[  135.857705][T11379] bridge20: entered allmulticast mode
[  135.859568][T11379] bridge21: entered allmulticast mode
[  135.861350][T11379] bridge22: entered allmulticast mode
[  135.863203][T11379] bridge23: entered allmulticast mode
[  135.865590][T11379] bridge24: entered allmulticast mode
[  135.867385][T11379] bridge25: entered allmulticast mode
[  135.869206][T11379] bridge26: entered allmulticast mode
[  135.871063][T11379] bridge27: entered allmulticast mode
[  135.872888][T11379] bridge28: entered allmulticast mode
[  135.874812][T11379] bridge29: entered allmulticast mode
[  135.876607][T11379] bridge30: entered allmulticast mode
[  135.878487][T11379] bridge31: entered allmulticast mode
[  135.880371][T11379] bridge32: entered allmulticast mode
[  135.882230][T11379] bridge33: entered allmulticast mode
[  135.884120][T11379] vxcan0: entered allmulticast mode
[  135.886156][T11379] vxcan1: entered allmulticast mode
[  135.887966][T11379] veth2: entered allmulticast mode
[  135.889763][T11379] veth3: entered allmulticast mode
[  135.891567][T11379] ip6tnl1: entered allmulticast mode
[  135.893351][T11379] bond3: entered allmulticast mode
[  135.895186][T11379] geneve2: entered allmulticast mode
[  135.897010][T11379] bond4: entered allmulticast mode
[  135.898823][T11379] veth4: entered allmulticast mode
[  135.900669][T11379] veth5: entered allmulticast mode
[  135.902465][T11379] veth6: entered allmulticast mode
[  135.904367][T11379] veth7: entered allmulticast mode
[  135.906179][T11379] geneve3: entered allmulticast mode
[  135.907956][T11379] ip6tnl2: entered allmulticast mode
[  135.909888][T11379] bond5: entered allmulticast mode
[  135.911703][T11379] ip6gretap1: entered allmulticast mode
[  135.913641][T11379] veth8: entered allmulticast mode
[  135.915653][T11379] veth9: entered allmulticast mode
[  135.917464][T11379] vxlan0: entered allmulticast mode
[  135.919312][T11379] bond6: entered allmulticast mode
[  135.921124][T11379] bond7: entered allmulticast mode
[  135.922906][T11379] pimreg: entered allmulticast mode
[  135.924807][T11379] syzkaller0: entered allmulticast mode
[  135.926655][T11379] ip6gretap2: entered allmulticast mode
[  135.928565][T11379] bridge34: entered allmulticast mode
[  135.930384][T11379] bond8: entered allmulticast mode
[  135.932163][T11379] veth10: entered allmulticast mode
[  135.933980][T11379] veth11: entered allmulticast mode
[  135.936053][T11379] bridge35: entered allmulticast mode
[  135.937961][T11379] bridge36: entered allmulticast mode
[  135.939842][T11379] bridge37: entered allmulticast mode
[  135.941894][T11379] ipip0: entered allmulticast mode
[  135.943729][T11379] : entered allmulticast mode
[  135.945874][T11379] veth12: entered allmulticast mode
[  135.947822][T11379] veth13: entered allmulticast mode
[  135.949621][T11379] bond9: entered allmulticast mode
[  135.951361][T11379] gre1: entered allmulticast mode
[  135.953125][T11379] ip6gre1: entered allmulticast mode
[  135.955075][T11379] ipvlan2: entered allmulticast mode
[  135.956916][T11379] ip6tnl3: entered allmulticast mode
[  135.958775][T11379] macvlan2: entered allmulticast mode
[  135.960604][T11379] veth14: entered allmulticast mode
[  135.962344][T11379] veth15: entered allmulticast mode
[  135.964124][T11379] bridge38: entered allmulticast mode
[  135.966071][T11379] erspan1: entered allmulticast mode
[  135.967828][T11379] macvlan3: entered allmulticast mode
[  135.969624][T11379] macvlan4: entered allmulticast mode
[  135.971419][T11379] bridge39: entered allmulticast mode
[  135.973302][T11379] vti60: entered allmulticast mode
[  135.975749][T11379] bridge40: entered allmulticast mode
[  135.977623][T11379] bond10: entered allmulticast mode
[  135.979354][T11379] bond11: entered allmulticast mode
[  135.981108][T11379] vlan0.0: entered allmulticast mode
[  135.982944][T11379] bond12: entered allmulticast mode
[  135.984853][T11379] geneve4: entered allmulticast mode
[  135.986670][T11379] vlan2: entered allmulticast mode
[  135.988380][T11379] sit1: entered allmulticast mode
[  135.990067][T11379] wireguard0: entered allmulticast mode
[  135.991911][T11379] ip6gre2: entered allmulticast mode
[  135.993681][T11379] bridge41: entered allmulticast mode
[  135.995698][T11379] sit2: entered allmulticast mode
[  135.997504][T11379] ip6gretap3: entered allmulticast mode
[  135.999376][T11379] bond13: entered allmulticast mode
[  136.001154][T11379] ip6gre3: entered allmulticast mode
[  136.002924][T11379] macvtap0: entered allmulticast mode
[  136.005008][T11379] xfrm1: entered allmulticast mode
[  136.006742][T11379] ipvlan3: entered allmulticast mode
[  136.008606][T11379] bridge42: entered allmulticast mode
[  136.010472][T11379] bond14: entered allmulticast mode
[  136.012311][T11379] bridge43: entered allmulticast mode
[  136.014203][T11379] vxcan2: entered allmulticast mode
[  136.016945][T11379] vxcan3: entered allmulticast mode
[  136.018780][T11379] bridge44: entered allmulticast mode
[  136.020656][T11379] ip6gretap4: entered allmulticast mode
[  136.022609][T11379] vlan3: entered allmulticast mode
[  136.025038][T11379] sit3: entered allmulticast mode
[  136.026812][T11379] bridge45: entered allmulticast mode
[  136.028690][T11379] bond15: entered allmulticast mode
[  136.030499][T11379] B: entered allmulticast mode
[  136.032198][T11379] wireguard1: entered allmulticast mode
[  136.034130][T11379] bond16: entered allmulticast mode
[  136.036851][T11379] bond17: entered allmulticast mode
[  136.038614][T11379] bond18: entered allmulticast mode
[  136.040346][T11379] bridge46: entered allmulticast mode
[  136.042148][T11379] bond19: entered allmulticast mode
[  136.043929][T11379] sit4: entered allmulticast mode
[  136.046206][T11379] macvlan5: entered allmulticast mode
[  136.055298][T11379] gtp0: entered allmulticast mode
[  136.057076][T11379] batadv1: entered allmulticast mode
[  136.058940][T11379] bond20: entered allmulticast mode
[  136.060768][T11379] veth16: entered allmulticast mode
[  136.062619][T11379] veth17: entered allmulticast mode
[  136.067583][T11379] vlan4: entered allmulticast mode
[  136.069938][T11379] ip6tnl4: entered allmulticast mode
[  136.071827][T11379] bond21: entered allmulticast mode
[  136.073660][T11379] bond22: entered allmulticast mode
[  136.075664][T11379] gretap0: entered allmulticast mode
[  136.077501][T11379] bridge47: entered allmulticast mode
[  136.079385][T11379] vti0: entered allmulticast mode
[  136.081135][T11379] bridge48: entered allmulticast mode
[  136.082964][T11379] bond23: entered allmulticast mode
[  136.085434][T11379] gretap1: entered allmulticast mode
[  136.087237][T11379] bond24: entered allmulticast mode
[  136.089077][T11379] veth18: entered allmulticast mode
[  136.090921][T11379] veth19: entered allmulticast mode
[  136.092687][T11379] bond25: entered allmulticast mode
[  136.101928][T11379] netdevsim netdevsim2 eth0: entered allmulticast mode
[  136.106014][T11379] netdevsim netdevsim2 eth1: entered allmulticast mode
[  136.108334][T11379] netdevsim netdevsim2 eth2: entered allmulticast mode
[  136.110656][T11379] netdevsim netdevsim2 eth3: entered allmulticast mode
[  136.113071][T11379] bond26: left promiscuous mode
[  136.116323][T11379] macsec1: entered allmulticast mode
[  136.118210][T11379] ipvlan4: left promiscuous mode
[  136.119881][T11379] ipvlan4: entered allmulticast mode
[  136.121759][T11379] bond27: entered allmulticast mode
[  136.123715][T11379] bond28: entered allmulticast mode
[  136.125705][T11379] bridge49: entered allmulticast mode
[  136.127756][T11379] bridge50: entered allmulticast mode
[  136.129729][T11379] : entered allmulticast mode
[  136.131527][T11379] bond30: entered allmulticast mode
[  136.133868][T11379] bridge51: entered allmulticast mode
[  136.140340][T11379] bridge52: entered allmulticast mode
[  136.142618][T11379] bridge53: entered allmulticast mode
[  136.147888][T11379] vxlan1: entered allmulticast mode
[  136.177124][ T5846] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.179929][ T5846] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.182673][ T5846] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.195879][ T5846] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.338688][T11407] IPVS: length: 219 != 24
[  136.449810][T11419] veth0: entered promiscuous mode
[  136.500317][T11421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.720214][T11437] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  136.772465][T11440] validate_nla: 3 callbacks suppressed
[  136.772492][T11440] netlink: 'syz.0.1435': attribute type 10 has an invalid length.
[  136.831879][T11454] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  136.835601][T11454] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  136.842769][T11454] netlink: zone id is out of range
[  136.847295][T11454] netlink: zone id is out of range
[  136.849123][T11454] netlink: zone id is out of range
[  136.850919][T11454] netlink: zone id is out of range
[  136.852713][T11454] netlink: zone id is out of range
[  136.854567][T11454] netlink: zone id is out of range
[  136.856329][T11454] netlink: zone id is out of range
[  136.861563][T11445] vlan2: entered promiscuous mode
[  136.863272][T11445] gretap0: entered promiscuous mode
[  137.106114][T11488] netlink: 'syz.0.1447': attribute type 10 has an invalid length.
[  137.109254][T11488] netlink: 'syz.0.1447': attribute type 10 has an invalid length.
[  137.153425][T11492] gretap0: left promiscuous mode
[  137.162386][T11492] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.230841][T11413] veth0: left promiscuous mode
[  137.311856][T11504] netlink: 'syz.0.1452': attribute type 7 has an invalid length.
[  137.331570][T11494] tipc: Disabling bearer <eth:team0>
[  137.354704][T11504] : entered promiscuous mode
[  138.419013][ T5208] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.628010][T11584] macvlan5: entered promiscuous mode
[  138.629881][T11584] macvlan5: entered allmulticast mode
[  138.632684][T11584] bond17: (slave macvlan5): Opening slave failed
[  138.669237][ T4282] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  138.687960][T11589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.712885][T11592] netlink: 'syz.0.1464': attribute type 83 has an invalid length.
[  138.782200][T11597] veth17: entered promiscuous mode
[  138.793977][T11601] veth19: entered promiscuous mode
[  138.907577][T11610] gretap0: entered promiscuous mode
[  139.227860][T11643] syzkaller0: left promiscuous mode
[  139.229622][T11643] syzkaller0: left allmulticast mode
[  139.241791][T11643] tipc: Resetting bearer <eth:syzkaller0>
[  139.412731][T11652] __nla_validate_parse: 20 callbacks suppressed
[  139.412744][T11652] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1474'.
[  139.441559][T11665] netlink: 'syz.2.1475': attribute type 1 has an invalid length.
[  139.468031][T11665] 8021q: adding VLAN 0 to HW filter on device bond31
[  139.478629][T11665] 8021q: adding VLAN 0 to HW filter on device bond31
[  139.480963][T11665] bond31: (slave vcan0): The slave device specified does not support setting the MAC address
[  139.485639][T11665] bond31: (slave vcan0): Error -95 calling set_mac_address
[  139.491755][T11668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.495395][T11668] syzkaller0: entered promiscuous mode
[  139.497252][T11668] syzkaller0: entered allmulticast mode
[  139.501783][T11668] tipc: Resetting bearer <eth:syzkaller0>
[  139.509178][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'.
[  139.514738][T11668] xfrm2: entered promiscuous mode
[  139.516375][T11668] xfrm2: entered allmulticast mode
[  139.524800][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'.
[  139.556884][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'.
[  139.611386][T11681] netlink: 'syz.2.1481': attribute type 9 has an invalid length.
[  139.626318][T11681] netlink: 'syz.2.1481': attribute type 6 has an invalid length.
[  139.632213][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'.
[  139.636872][T11680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1480'.
[  139.688425][T11681] tipc: Disabling bearer <eth:syzkaller0>
[  139.757139][T11693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1484'.
[  139.760637][T11695] netlink: 'syz.0.1485': attribute type 1 has an invalid length.
[  139.764914][T11696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'.
[  139.799697][T11695] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  139.830216][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'.
[  139.859568][T11703] sctp: [Deprecated]: syz.0.1486 (pid 11703) Use of int in maxseg socket option.
[  139.859568][T11703] Use struct sctp_assoc_value instead
[  139.874457][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'.
[  139.948323][T11716] tun0: tun_chr_ioctl cmd 1074025675
[  139.950123][T11716] tun0: persist enabled
[  139.958015][T11716] tun0: tun_chr_ioctl cmd 1074025675
[  139.959883][T11716] tun0: persist enabled
[  140.006742][T11721] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  140.252417][T11745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.259538][T11744] syzkaller0: entered promiscuous mode
[  140.261972][T11744] syzkaller0: entered allmulticast mode
[  140.389938][T11745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  140.437152][T11744] tipc: Resetting bearer <eth:syzkaller0>
[  140.450555][T11744] tipc: Disabling bearer <eth:syzkaller0>
[  140.625824][T11775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.629198][T11779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.633964][T11775] sch_fq: defrate 257 ignored.
[  140.664083][T11784] tun0: tun_chr_ioctl cmd 2147767507
[  140.769030][T11789] net_ratelimit: 10 callbacks suppressed
[  140.769042][T11789] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  140.802493][T11792] netlink: 'syz.0.1508': attribute type 11 has an invalid length.
[  140.903384][T11800] vlan4: entered promiscuous mode
[  140.906159][T11800] bridge0: entered promiscuous mode
[  140.935369][T11803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.970416][T11803] 8021q: adding VLAN 0 to HW filter on device bond18
[  141.072777][T11819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.076740][T11819] syzkaller0: entered promiscuous mode
[  141.139668][T11824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.159542][T11824] tipc: Resetting bearer <eth:syzkaller0>
[  141.161944][T11824] syzkaller0: left promiscuous mode
[  141.245432][T11828] syzkaller0: entered promiscuous mode
[  141.520440][T11850] syzkaller0: entered promiscuous mode
[  141.522326][T11850] syzkaller0: entered allmulticast mode
[  141.528840][T11850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.544924][T11849] tipc: Resetting bearer <eth:syzkaller0>
[  141.563219][T11849] tipc: Disabling bearer <eth:syzkaller0>
[  141.954039][T11889] validate_nla: 7 callbacks suppressed
[  141.954051][T11889] netlink: 'syz.2.1532': attribute type 32 has an invalid length.
[  141.959012][T11889] (unnamed net_device) (uninitialized): option coupled_control: invalid value (32)
[  142.440701][T11948] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  142.487204][T11954] netlink: 'syz.1.1542': attribute type 12 has an invalid length.
[  142.539230][T11954] bridge14: entered promiscuous mode
[  142.540991][T11954] bridge14: entered allmulticast mode
[  142.842041][T11999] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  142.920038][T12004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.923048][T12004] syzkaller0: entered allmulticast mode
[  142.948980][T12003] tipc: Disabling bearer <eth:syzkaller0>
[  143.014096][T12014] openvswitch: netlink: Flow key attr not present in new flow.
[  143.018271][T12017] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  143.047400][T12017] bond32: entered promiscuous mode
[  143.049507][T12017] 8021q: adding VLAN 0 to HW filter on device bond32
[  143.064855][T12017] bond32: (slave bridge54): making interface the new active one
[  143.067523][T12017] bridge54: entered promiscuous mode
[  143.069638][T12017] bond32: (slave bridge54): Enslaving as an active interface with an up link
[  143.291070][T12036] netlink: 'syz.1.1565': attribute type 7 has an invalid length.
[  143.298007][T12036] netlink: 'syz.1.1565': attribute type 8 has an invalid length.
[  143.380076][T12049] x9: renamed from bridge_slave_0
[  143.645857][T12065] netlink: 'syz.0.1571': attribute type 1 has an invalid length.
[  143.819126][T12081] netlink: zone id is out of range
[  143.821017][T12081] netlink: zone id is out of range
[  143.822942][T12081] netlink: zone id is out of range
[  143.825795][T12081] netlink: zone id is out of range
[  143.840219][T12081] netlink: zone id is out of range
[  143.841883][T12081] netlink: zone id is out of range
[  143.843514][T12081] netlink: zone id is out of range
[  143.921596][T12085] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  143.923839][T12085] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  144.376593][T12113] team0: entered promiscuous mode
[  144.378340][T12113] team0: entered allmulticast mode
[  144.472953][T12125] __nla_validate_parse: 45 callbacks suppressed
[  144.472970][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'.
[  144.531234][T12130] syzkaller1: entered promiscuous mode
[  144.533059][T12130] syzkaller1: entered allmulticast mode
[  144.606186][T12143] vxcan5: entered allmulticast mode
[  144.655335][T12146] Unsupported ieee802154 address type: 0
[  144.707539][T12145] tipc: Resetting bearer <eth:syzkaller0>
[  145.107569][T12155] netlink: 'syz.2.1598': attribute type 1 has an invalid length.
[  145.110289][T12155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1598'.
[  145.114359][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1598'.
[  145.118668][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'.
[  145.379070][T12166] batadv_slave_0: entered promiscuous mode
[  145.381620][T12166] batadv_slave_0: left allmulticast mode
[  145.455109][T12172] syzkaller1: tun_chr_ioctl cmd 1074025677
[  145.457823][T12172] syzkaller1: linktype set to 778
[  145.590804][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'.
[  145.669479][T12177] netpci0: tun_chr_ioctl cmd 1074025681
[  145.677181][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1603'.
[  145.916571][T12194] netlink: 'syz.2.1606': attribute type 3 has an invalid length.
[  145.950870][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'.
[  145.984965][T12196] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1609'.
[  146.010098][T12206] netlink: 'syz.0.1608': attribute type 11 has an invalid length.
[  146.015138][T12206] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1608'.
[  146.018244][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  146.021170][T12206] net_ratelimit: 99 callbacks suppressed
[  146.021177][T12206] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  146.480701][T12232] 8021q: adding VLAN 0 to HW filter on device bond20
[  146.483508][T12236] geneve1: left allmulticast mode
[  146.488900][T12236] geneve1: entered allmulticast mode
[  146.491447][T12236] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  146.496933][ T5846] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.500800][ T5846] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.510423][ T5846] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.513406][ T5846] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.570365][T12242] pim6reg1: entered promiscuous mode
[  146.572924][T12242] pim6reg1: entered allmulticast mode
[  147.517910][T12274] delete_channel: no stack
[  147.577836][T12283] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.580988][T12283] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.628540][T12283] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.634204][T12283] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.684210][T12283] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.692098][T12283] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.728125][T12283] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.732415][T12283] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.778362][ T5667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.780990][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.789717][ T5667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.792782][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.804462][ T5667] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.807220][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.815989][ T5667] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.822005][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.340921][T12333] bond0: option arp_validate: invalid value (18446744073491447809)
[  148.501351][T12355] validate_nla: 2 callbacks suppressed
[  148.501364][T12355] netlink: 'syz.2.1642': attribute type 1 has an invalid length.
[  148.541745][T12355] 8021q: adding VLAN 0 to HW filter on device bond34
[  148.721465][T12387] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.786621][T12395] netlink: 'syz.0.1652': attribute type 10 has an invalid length.
[  148.886776][T12398] netlink: 'syz.0.1653': attribute type 21 has an invalid length.
[  148.902557][T12398] netlink: 'syz.0.1653': attribute type 6 has an invalid length.
[  148.921347][T12401] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  148.951151][T12403] dvmrp0: left allmulticast mode
[  148.983744][T12405] bond0: left allmulticast mode
[  148.986454][T12405] geneve1: left allmulticast mode
[  148.989531][T12405] 0{X: left allmulticast mode
[  148.992095][T12405] 1{X: renamed from 30{X
[  148.997278][T12405] 1{X: entered allmulticast mode
[  148.999961][T12405] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  149.013604][T12406] lo speed is unknown, defaulting to 1000
[  149.029390][T12406] lo speed is unknown, defaulting to 1000
[  149.031714][T12406] lo speed is unknown, defaulting to 1000
[  149.068743][T12411] gretap0: left promiscuous mode
[  149.074169][T12411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.189711][T12406] infiniband syz0: set active
[  149.191665][T12406] infiniband syz0: added lo
[  149.217368][T12406] RDS/IB: syz0: added
[  149.219227][T12406] smc: adding ib device syz0 with port count 1
[  149.221487][T12406] smc:    ib device syz0 port 1 has pnetid 
[  149.225576][T12406] lo speed is unknown, defaulting to 1000
[  149.233109][   T96] lo speed is unknown, defaulting to 1000
[  149.318917][T12425] netlink: 'syz.1.1661': attribute type 13 has an invalid length.
[  149.321587][T12425] netlink: 'syz.1.1661': attribute type 17 has an invalid length.
[  149.325636][T12425] lo: left allmulticast mode
[  149.329843][T12425] tunl0: left allmulticast mode
[  149.332336][T12425] gre0: left allmulticast mode
[  149.335496][T12425] gretap0: left allmulticast mode
[  149.338220][T12425] erspan0: left allmulticast mode
[  149.340815][T12425] ip_vti0: left allmulticast mode
[  149.343184][T12425] ip6_vti0: left allmulticast mode
[  149.347073][T12425] sit0: left allmulticast mode
[  149.354875][T12425] ip6tnl0: left allmulticast mode
[  149.358044][T12425] ip6gre0: left allmulticast mode
[  149.361745][T12425] ip6gretap0: left allmulticast mode
[  149.366791][T12425] bond0: left allmulticast mode
[  149.366846][ T5846] bond0: (slave wlan1): interface is now down
[  149.371223][T12425] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.375528][T12425] nlmon0: left allmulticast mode
[  149.383372][T12425] caif0: left allmulticast mode
[  149.391045][T12425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.398262][   T12] bond0: (slave wlan1): interface is now down
[  149.407173][T12406] lo speed is unknown, defaulting to 1000
[  149.418595][ T5860] bond0: (slave wlan1): interface is now down
[  149.457092][ T5860] bond0: (slave wlan1): interface is now down
[  149.472412][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.477346][ T5860] bond0: now running without any active interface!
[  149.480673][   T96] lo speed is unknown, defaulting to 1000
[  149.483222][T12425] __nla_validate_parse: 28 callbacks suppressed
[  149.483232][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1661'.
[  149.501829][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.568073][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.572942][T12406] lo speed is unknown, defaulting to 1000
[  149.623610][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.649857][T12447] netlink: 'syz.2.1663': attribute type 30 has an invalid length.
[  149.652814][T12447] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  149.657365][T12447] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  149.690050][T12430] lo speed is unknown, defaulting to 1000
[  149.695268][T12447] netlink: 'syz.2.1663': attribute type 10 has an invalid length.
[  149.781156][T12406] syz.0.1655 (12406) used greatest stack depth: 18752 bytes left
[  149.787088][T12449] netlink: 'syz.2.1664': attribute type 1 has an invalid length.
[  149.808183][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'.
[  149.811230][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'.
[  149.888838][T12458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1667'.
[  149.975697][T12468] netlink: 'syz.2.1669': attribute type 13 has an invalid length.
[  150.129020][ T5860] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.132893][ T5860] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.138412][ T5860] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.145615][ T5860] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.257627][T12479] syzkaller1: entered promiscuous mode
[  150.259719][T12479] syzkaller1: entered allmulticast mode
[  150.437111][T12497] vti2: entered promiscuous mode
[  150.438759][T12497] vti2: entered allmulticast mode
[  150.520018][T12502] block nbd0: server does not support multiple connections per device.
[  150.523795][T12502] block nbd0: shutting down sockets
[  150.611329][T12506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1677'.
[  150.742235][T12526] 8021q: adding VLAN 0 to HW filter on device bond22
[  150.746506][T12526] bond21: (slave bond22): making interface the new active one
[  150.749302][T12526] bond21: (slave bond22): Enslaving as an active interface with an up link
[  150.760525][T12532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.771958][T12526] bond21: (slave gretap5): Enslaving as a backup interface with an up link
[  150.777403][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1681'.
[  150.777612][T12532] syzkaller0: entered promiscuous mode
[  150.782505][T12532] syzkaller0: entered allmulticast mode
[  150.787379][T12526] 8021q: adding VLAN 0 to HW filter on device bond21
[  150.908286][T12544] smc: net device bond0 applied user defined pnetid SYZ2
[  150.917303][T12544] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1686'.
[  150.926911][T12544] smc: removing net device bond0 with user defined pnetid SYZ2
[  150.930310][T12544] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  150.933397][T12544] bond0 (unregistering): Released all slaves
[  151.011699][T12552] vxcan0: left allmulticast mode
[  151.013741][T12552] vxcan1: left allmulticast mode
[  151.018750][T12552] veth0: left allmulticast mode
[  151.021168][T12552] veth1: left allmulticast mode
[  151.023006][T12552] wg1: left allmulticast mode
[  151.026034][T12552] wg2: left allmulticast mode
[  151.027779][T12552] veth0_to_bridge: left allmulticast mode
[  151.029841][T12552] bridge_slave_0: left allmulticast mode
[  151.031956][T12552] veth1_to_bridge: left allmulticast mode
[  151.034015][T12552] bridge_slave_1: left allmulticast mode
[  151.037332][T12552] veth0_to_bond: left allmulticast mode
[  151.039341][T12552] bond_slave_0: left allmulticast mode
[  151.041330][T12552] veth1_to_bond: left allmulticast mode
[  151.043364][T12552] bond_slave_1: left allmulticast mode
[  151.047536][T12552] veth0_to_team: left allmulticast mode
[  151.049610][T12552] team_slave_0: left allmulticast mode
[  151.051659][T12552] veth1_to_team: left allmulticast mode
[  151.053779][T12552] veth0_to_batadv: left allmulticast mode
[  151.056191][T12552] batadv_slave_0: left promiscuous mode
[  151.058258][T12552] veth1_to_batadv: left allmulticast mode
[  151.060727][T12552] xfrm0: left allmulticast mode
[  151.062613][T12552] veth0_to_hsr: left allmulticast mode
[  151.065993][T12552] hsr0: left allmulticast mode
[  151.067744][T12552] hsr_slave_0: left allmulticast mode
[  151.069742][T12552] veth1_virt_wifi: left allmulticast mode
[  151.071823][T12552] veth0_virt_wifi: left allmulticast mode
[  151.073928][T12552] net veth1_virt_wifi : left allmulticast mode
[  151.076400][T12552] veth1_vlan: left allmulticast mode
[  151.078370][T12552] vlan0: left allmulticast mode
[  151.080114][T12552] vlan1: left allmulticast mode
[  151.081856][T12552] macvlan0: left allmulticast mode
[  151.083655][T12552] macvlan1: left allmulticast mode
[  151.087346][T12552] ipvlan0: left allmulticast mode
[  151.089286][T12552] ipvlan1: left allmulticast mode
[  151.091070][T12552] veth0_vlan: left allmulticast mode
[  151.093047][T12552] geneve1: left allmulticast mode
[  151.095138][T12552] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  151.097632][T12552] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  151.099927][T12552] macsec1: left allmulticast mode
[  151.101732][T12552] ip6_vti1: left allmulticast mode
[  151.103502][T12552] macsec0: left allmulticast mode
[  151.106507][T12552] bridge1: left allmulticast mode
[  151.108409][T12552] bond1: left allmulticast mode
[  151.110226][T12552] @: left allmulticast mode
[  151.111948][T12552] bond2: left allmulticast mode
[  151.113681][T12552] bond3: left allmulticast mode
[  151.115549][T12552] ipip0: left allmulticast mode
[  151.117356][T12552] ip6tnl1: left allmulticast mode
[  151.119265][T12552] bond4: left allmulticast mode
[  151.121087][T12552] ip6gretap1: left allmulticast mode
[  151.123071][T12552] tipc: Resetting bearer <eth:syzkaller0>
[  151.130625][T12552] syzkaller0: left promiscuous mode
[  151.132335][T12552] syzkaller0: left allmulticast mode
[  151.134631][T12552] sit1: left allmulticast mode
[  151.136243][T12552] ip6erspan0: left allmulticast mode
[  151.138108][T12552] bond5: left allmulticast mode
[  151.139962][T12552] ip6gretap2: left allmulticast mode
[  151.141776][T12552] gre1: left allmulticast mode
[  151.143403][T12552] vxlan0: left allmulticast mode
[  151.146364][T12552] batadv0.5: left allmulticast mode
[  151.148169][T12552] batadv0: left allmulticast mode
[  151.150084][T12552] bond6: left allmulticast mode
[  151.151819][T12552] bridge2: left allmulticast mode
[  151.153537][T12552] geneve2: left allmulticast mode
[  151.155606][T12552] bond7: left allmulticast mode
[  151.157356][T12552] ip6tnl2: left allmulticast mode
[  151.159113][T12552] veth2: left allmulticast mode
[  151.160896][T12552] veth3: left allmulticast mode
[  151.162587][T12552] gtp0: left allmulticast mode
[  151.164204][T12552] vxlan1: left allmulticast mode
[  151.166021][T12552] bond8: left allmulticast mode
[  151.167689][T12552] gre2: left allmulticast mode
[  151.169365][T12552] sit2: left allmulticast mode
[  151.171184][T12552] bond9: left allmulticast mode
[  151.172910][T12552] veth4: left allmulticast mode
[  151.174717][T12552] veth5: left allmulticast mode
[  151.176354][T12552] bridge3: left allmulticast mode
[  151.178080][T12552] tun0: left allmulticast mode
[  151.179758][T12552] erspan1: left allmulticast mode
[  151.181588][T12552] bond10: left allmulticast mode
[  151.183274][T12552] gretap1: left allmulticast mode
[  151.185124][T12552] vlan3: left allmulticast mode
[  151.186739][T12552] team_slave_1: left allmulticast mode
[  151.188579][T12552] bond11: left allmulticast mode
[  151.190254][T12552] bond12: left allmulticast mode
[  151.192053][T12552] bridge4: left allmulticast mode
[  151.193771][T12552] veth6: left allmulticast mode
[  151.195705][T12552] veth7: left allmulticast mode
[  151.197489][T12552] mac80211_hwsim hwsim15 wlan2: left allmulticast mode
[  151.199852][T12552] mac80211_hwsim hwsim7 pimreg: left allmulticast mode
[  151.202335][T12552] geneve3: left allmulticast mode
[  151.204089][T12552] sit3: left allmulticast mode
[  151.205817][T12552] mac80211_hwsim hwsim6 veth1_to_bod: left allmulticast mode
[  151.208304][T12552] bridge5: left allmulticast mode
[  151.210027][T12552] bridge6: left allmulticast mode
[  151.211780][T12552] ip6gre1: left allmulticast mode
[  151.213641][T12552] geneve4: left allmulticast mode
[  151.215554][T12552] geneve5: left allmulticast mode
[  151.217267][T12552] sit4: left allmulticast mode
[  151.218898][T12552] netdevsim netdevsim1 eth0: left allmulticast mode
[  151.221125][T12552] netdevsim netdevsim1 eth1: left allmulticast mode
[  151.223319][T12552] netdevsim netdevsim1 eth2: left allmulticast mode
[  151.225665][T12552] netdevsim netdevsim1 eth3: left allmulticast mode
[  151.227842][T12552] mac80211_hwsim hwsim19 wlan3: left allmulticast mode
[  151.230154][T12552] ip6tnl3: left allmulticast mode
[  151.231869][T12552] vti0: left allmulticast mode
[  151.233525][T12552] gretap2: left allmulticast mode
[  151.235401][T12552] bridge7: left allmulticast mode
[  151.237387][T12552] vlan4: left allmulticast mode
[  151.239021][T12552] bond13: left allmulticast mode
[  151.240703][T12552] bridge8: left allmulticast mode
[  151.242378][T12552] veth8: left allmulticast mode
[  151.244101][T12552] veth9: left allmulticast mode
[  151.245890][T12552] bond14: left allmulticast mode
[  151.247742][T12552] bridge9: left allmulticast mode
[  151.249498][T12552] veth10: left allmulticast mode
[  151.251204][T12552] veth11: left allmulticast mode
[  151.252916][T12552] mac80211_hwsim hwsim21 wlan4: left allmulticast mode
[  151.255324][T12552] mac80211_hwsim hwsim22 wlan5: left allmulticast mode
[  151.257845][T12552] bond15: left allmulticast mode
[  151.259599][T12552] veth12: left allmulticast mode
[  151.261286][T12552] veth13: left allmulticast mode
[  151.262992][T12552] vti1: left allmulticast mode
[  151.264940][T12552] bridge10: left allmulticast mode
[  151.266694][T12552] bond16: left allmulticast mode
[  151.268566][T12552] bond17: left allmulticast mode
[  151.270227][T12552] wireguard0: left allmulticast mode
[  151.272030][T12552] bond18: left allmulticast mode
[  151.273696][T12552] wireguard1: left allmulticast mode
[  151.275556][T12552] ip6gretap3: left allmulticast mode
[  151.277350][T12552] bridge0: left allmulticast mode
[  151.279146][T12552] bridge11: left allmulticast mode
[  151.280916][T12552] vxcan2: left allmulticast mode
[  151.282587][T12552] vxcan3: left allmulticast mode
[  151.284367][T12552] ipvlan2: left allmulticast mode
[  151.286087][T12552] batadv_slave_1: left allmulticast mode
[  151.288075][T12552] ip6gre2: left allmulticast mode
[  151.290131][T12552] bridge14: left promiscuous mode
[  151.291862][T12552] bridge14: left allmulticast mode
[  151.293698][T12552] team0: left promiscuous mode
[  151.295757][T12552] team0: left allmulticast mode
[  151.297920][T12552] vti2: left promiscuous mode
[  151.299482][T12552] vti2: left allmulticast mode
[  151.414792][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'.
[  151.475861][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'.
[  151.502787][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.508063][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.538195][T12593] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1699'.
[  151.541365][T12593] unsupported nlmsg_type 40
[  151.560605][T12531] tipc: Resetting bearer <eth:syzkaller0>
[  151.573522][T12531] tipc: Disabling bearer <eth:syzkaller0>
[  151.903499][T12633] IPv6: sit4: Disabled Multicast RS
[  151.905962][T12633] sit4: entered allmulticast mode
[  152.117340][T12650] pim6reg: entered allmulticast mode
[  152.124959][T12650] pim6reg: left allmulticast mode
[  152.468613][T12653] syzkaller1: entered allmulticast mode
[  152.746970][T12683] bond17: (slave wireguard0): Releasing backup interface
[  152.751358][T12683] bond18: (slave wireguard1): Releasing backup interface
[  152.756068][T12683] batman_adv: batadv0: Removing interface: ip6gretap3
[  152.758728][T12683] batman_adv: batadv0: Removing interface: ipvlan2
[  152.768915][T12683] team0: Mode changed to "loadbalance"
[  152.879770][T12692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.882488][T12692] syzkaller0: entered promiscuous mode
[  152.885301][T12692] syzkaller0: entered allmulticast mode
[  152.911730][T12692] tipc: Resetting bearer <eth:syzkaller0>
[  152.916925][T12691] tipc: Resetting bearer <eth:syzkaller0>
[  152.925615][T12691] tipc: Disabling bearer <eth:syzkaller0>
[  153.018440][T12705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.076712][T12704] smc: adding net device bond0 with user defined pnetid SYZ2
[  153.156831][T12713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  153.292242][T12732] gretap3: entered promiscuous mode
[  153.366674][T12744] batadv0: entered promiscuous mode
[  153.368426][T12744] batadv0: entered allmulticast mode
[  153.370191][T12744] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  153.385646][T12739] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  153.423081][T12751] bond0: (slave wlan1): Releasing backup interface
[  153.431980][T12751] tipc: Resetting bearer <eth:syzkaller0>
[  153.435883][T12751] bond16: (slave veth15): Releasing active interface
[  153.440379][T12751] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  153.442985][T12751] batman_adv: batadv0: Removing interface: ip6gretap1
[  153.450972][T12751] bond21: (slave bond22): Releasing backup interface
[  153.453660][T12751] bond21: (slave bond22): the permanent HWaddr of slave - 36:56:e8:ff:7b:71 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  153.463045][T12751] bond21: (slave gretap5): making interface the new active one
[  153.468009][T12751] 
[  153.469068][T12751] ============================================
[  153.471730][T12751] WARNING: possible recursive locking detected
[  153.474441][T12751] 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 Not tainted
[  153.478362][T12751] --------------------------------------------
[  153.480895][T12751] syz.0.1741/12751 is trying to acquire lock:
[  153.483221][T12751] ffff88810f479958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  153.486495][T12751] 
[  153.486495][T12751] but task is already holding lock:
[  153.488917][T12751] ffff88803c194558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  153.489584][T12752] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  153.492096][T12751] 
[  153.492096][T12751] other info that might help us debug this:
[  153.492103][T12751]  Possible unsafe locking scenario:
[  153.492103][T12751] 
[  153.492105][T12751]        CPU0
[  153.492107][T12751]        ----
[  153.492109][T12751]   lock(&qdisc_xmit_lock_key#3);
[  153.492118][T12751]   lock(&qdisc_xmit_lock_key#3);
[  153.492125][T12751] 
[  153.492125][T12751]  *** DEADLOCK ***
[  153.492125][T12751] 
[  153.492127][T12751]  May be due to missing lock nesting notation
[  153.492127][T12751] 
[  153.492130][T12751] 14 locks held by syz.0.1741/12751:
[  153.492135][T12751]  #0: ffffffff8f509008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  153.514975][T12751]  #1: ffff88804141b580 (&ndev->lock){++--}-{3:3}, at: ndisc_send_unsol_na+0x48/0x250
[  153.518075][T12751]  #2: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x20c/0x1440
[  153.521114][T12751]  #3: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  153.524326][T12751]  #4: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  153.527596][T12751]  #5: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10
[  153.530651][T12751]  #6: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  153.533857][T12751]  #7: ffff88803911b258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  153.537872][T12751]  #8: ffff88803c194558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  153.541173][T12751]  #9: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[  153.544094][T12751]  #10: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  153.547200][T12751]  #11: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  153.550024][T12751]  #12: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  153.553233][T12751]  #13: ffff888038900258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  153.557307][T12751] 
[  153.557307][T12751] stack backtrace:
[  153.559191][T12751] CPU: 0 UID: 0 PID: 12751 Comm: syz.0.1741 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  153.559203][T12751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.559207][T12751] Call Trace:
[  153.559213][T12751]  <TASK>
[  153.559218][T12751]  dump_stack_lvl+0x189/0x250
[  153.559229][T12751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.559236][T12751]  ? __pfx__printk+0x10/0x10
[  153.559250][T12751]  ? print_lock_name+0xde/0x100
[  153.559259][T12751]  print_deadlock_bug+0x28b/0x2a0
[  153.559267][T12751]  validate_chain+0x1a3f/0x2140
[  153.559273][T12751]  ? validate_xmit_xfrm+0xbf/0x1130
[  153.559285][T12751]  ? is_bpf_text_address+0x26/0x2b0
[  153.559296][T12751]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  153.559309][T12751]  __lock_acquire+0xab9/0xd20
[  153.559320][T12751]  ? sch_direct_xmit+0x153/0x4b0
[  153.559329][T12751]  lock_acquire+0x120/0x360
[  153.559338][T12751]  ? sch_direct_xmit+0x153/0x4b0
[  153.559349][T12751]  _raw_spin_lock+0x2e/0x40
[  153.559359][T12751]  ? sch_direct_xmit+0x153/0x4b0
[  153.559367][T12751]  sch_direct_xmit+0x153/0x4b0
[  153.559377][T12751]  ? __pfx_sch_direct_xmit+0x10/0x10
[  153.559387][T12751]  __dev_queue_xmit+0x1857/0x3b50
[  153.559417][T12751]  ? arp_send_dst+0xa7/0x2d0
[  153.559429][T12751]  ? arp_solicit+0xc1d/0xe60
[  153.559440][T12751]  ? __neigh_event_send+0xf70/0x1560
[  153.559455][T12751]  ? __dev_queue_xmit+0x27b/0x3b50
[  153.559466][T12751]  ? ndisc_netdev_event+0x9b/0x4d0
[  153.559478][T12751]  ? notifier_call_chain+0x1b6/0x3e0
[  153.559485][T12751]  ? call_netdevice_notifiers+0x88/0xc0
[  153.559495][T12751]  ? bond_select_active_slave+0x8e2/0xd00
[  153.559505][T12751]  ? __bond_release_one+0x8c4/0x10e0
[  153.559515][T12751]  ? do_setlink+0xcf0/0x41c0
[  153.559521][T12751]  ? rtnl_newlink+0x149f/0x1c70
[  153.559530][T12751]  ? rtnetlink_rcv_msg+0x7cf/0xb70
[  153.559540][T12751]  ? netlink_rcv_skb+0x208/0x470
[  153.559550][T12751]  ? netlink_unicast+0x82f/0x9e0
[  153.559558][T12751]  ? netlink_sendmsg+0x805/0xb30
[  153.559569][T12751]  ? __sock_sendmsg+0x21c/0x270
[  153.559578][T12751]  ? ____sys_sendmsg+0x505/0x830
[  153.559584][T12751]  ? ___sys_sendmsg+0x21f/0x2a0
[  153.559591][T12751]  ? __pfx___dev_queue_xmit+0x10/0x10
[  153.559601][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.559613][T12751]  ? NF_HOOK+0x9e/0x3a0
[  153.559621][T12751]  NF_HOOK+0x310/0x3a0
[  153.559630][T12751]  ? __pfx_arp_xmit_finish+0x10/0x10
[  153.559638][T12751]  ? NF_HOOK+0x9e/0x3a0
[  153.559645][T12751]  ? __pfx_NF_HOOK+0x10/0x10
[  153.559653][T12751]  ? arp_xmit+0x23/0x270
[  153.559662][T12751]  arp_xmit+0x16c/0x270
[  153.559670][T12751]  ? arp_xmit+0x23/0x270
[  153.559677][T12751]  arp_solicit+0xc1d/0xe60
[  153.559686][T12751]  ? arp_solicit+0x11a/0xe60
[  153.559695][T12751]  ? __pfx_arp_solicit+0x10/0x10
[  153.559705][T12751]  ? __neigh_event_send+0xf08/0x1560
[  153.559715][T12751]  ? __pfx_arp_solicit+0x10/0x10
[  153.559723][T12751]  __neigh_event_send+0xf70/0x1560
[  153.559734][T12751]  neigh_resolve_output+0x198/0x750
[  153.559745][T12751]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  153.559753][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.559763][T12751]  ip_finish_output2+0xd40/0x1160
[  153.559773][T12751]  ? ip_finish_output2+0x452/0x1160
[  153.559781][T12751]  ? __pfx_ip_finish_output2+0x10/0x10
[  153.559790][T12751]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  153.559797][T12751]  ? ip_skb_dst_mtu+0x866/0xab0
[  153.559805][T12751]  ? ip_finish_output+0x33a/0x3f0
[  153.559812][T12751]  ip_output+0x2a1/0x3c0
[  153.559820][T12751]  ? ip_output+0x60/0x3c0
[  153.559827][T12751]  iptunnel_xmit+0x592/0xa40
[  153.559839][T12751]  ip_tunnel_xmit+0x1c41/0x2390
[  153.559851][T12751]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  153.559859][T12751]  ? gre_build_header+0x3fd/0xa40
[  153.559867][T12751]  ? __pfx_gre_build_header+0x10/0x10
[  153.559876][T12751]  gre_tap_xmit+0x590/0x7a0
[  153.559884][T12751]  ? __pfx_gre_tap_xmit+0x10/0x10
[  153.559890][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.559901][T12751]  dev_hard_start_xmit+0x2d7/0x830
[  153.559911][T12751]  sch_direct_xmit+0x241/0x4b0
[  153.559921][T12751]  ? __pfx_sch_direct_xmit+0x10/0x10
[  153.559931][T12751]  __dev_queue_xmit+0x1857/0x3b50
[  153.559941][T12751]  ? __dev_queue_xmit+0x27b/0x3b50
[  153.559950][T12751]  ? __pfx___dev_queue_xmit+0x10/0x10
[  153.559959][T12751]  ? is_bpf_text_address+0x26/0x2b0
[  153.559971][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.559982][T12751]  ? __kasan_check_byte+0x12/0x40
[  153.559995][T12751]  bond_start_xmit+0xdc7/0x1a10
[  153.560001][T12751]  ? is_bpf_text_address+0x26/0x2b0
[  153.560012][T12751]  ? rcu_is_watching+0x15/0xb0
[  153.560023][T12751]  ? __kasan_check_byte+0x12/0x40
[  153.560034][T12751]  ? bond_start_xmit+0xf8/0x1a10
[  153.560040][T12751]  ? __pfx_bond_start_xmit+0x10/0x10
[  153.560047][T12751]  ? skb_network_protocol+0x508/0x760
[  153.560055][T12751]  ? is_bpf_text_address+0x292/0x2b0
[  153.560065][T12751]  ? validate_xmit_xfrm+0xbf/0x1130
[  153.560076][T12751]  ? kernel_text_address+0xa5/0xe0
[  153.560085][T12751]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  153.560095][T12751]  ? unwind_get_return_address+0x4d/0x90
[  153.560103][T12751]  ? __pfx_passthru_features_check+0x10/0x10
[  153.560112][T12751]  dev_hard_start_xmit+0x2d7/0x830
[  153.560122][T12751]  __dev_queue_xmit+0x1b8d/0x3b50
[  153.560130][T12751]  ? register_lock_class+0x51/0x320
[  153.560141][T12751]  ? __dev_queue_xmit+0x27b/0x3b50
[  153.560150][T12751]  ? neigh_resolve_output+0x438/0x750
[  153.560160][T12751]  ? __pfx___dev_queue_xmit+0x10/0x10
[  153.560168][T12751]  ? read_seqbegin+0x122/0x250
[  153.560177][T12751]  ? neigh_resolve_output+0x438/0x750
[  153.560187][T12751]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.560197][T12751]  ? read_seqbegin+0x1ac/0x250
[  153.560206][T12751]  ? __pfx_read_seqbegin+0x10/0x10
[  153.560215][T12751]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.560226][T12751]  ? eth_header+0x11b/0x200
[  153.560232][T12751]  ? __asan_memcpy+0x40/0x70
[  153.560249][T12751]  ip6_finish_output2+0x11fe/0x16a0
[  153.560260][T12751]  ? ip6_finish_output2+0x701/0x16a0
[  153.560270][T12751]  ? ip6_mtu+0x7d/0x3f0
[  153.560277][T12751]  ? __pfx_ip6_finish_output2+0x10/0x10
[  153.560286][T12751]  ? ip6_mtu+0x7d/0x3f0
[  153.560294][T12751]  ? ip6_mtu+0x321/0x3f0
[  153.560301][T12751]  ? ip6_finish_output+0x2ef/0x4e0
[  153.560310][T12751]  ndisc_send_skb+0xb54/0x1440
[  153.560321][T12751]  ? ndisc_send_skb+0x20c/0x1440
[  153.560333][T12751]  ? __pfx_ndisc_send_skb+0x10/0x10
[  153.560344][T12751]  ? __pfx_dst_output+0x10/0x10
[  153.560354][T12751]  ? ndisc_alloc_skb+0x1a6/0x480
[  153.560361][T12751]  ? __ndisc_fill_addr_option+0xa2/0x140
[  153.560372][T12751]  ? __asan_memcpy+0x40/0x70
[  153.560380][T12751]  ? __ndisc_fill_addr_option+0xe5/0x140
[  153.560392][T12751]  ndisc_send_na+0x6d7/0x890
[  153.560433][T12751]  ? __pfx_ndisc_send_na+0x10/0x10
[  153.560451][T12751]  ndisc_send_unsol_na+0x118/0x250
[  153.560463][T12751]  ndisc_netdev_event+0x9b/0x4d0
[  153.560475][T12751]  notifier_call_chain+0x1b6/0x3e0
[  153.560484][T12751]  call_netdevice_notifiers+0x88/0xc0
[  153.560494][T12751]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  153.560505][T12751]  ? bond_should_notify_peers+0x2ba/0x480
[  153.560515][T12751]  bond_change_active_slave+0x2445/0x3770
[  153.560525][T12751]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.560537][T12751]  ? __pfx_bond_change_active_slave+0x10/0x10
[  153.560547][T12751]  ? bond_change_active_slave+0x2a28/0x3770
[  153.560559][T12751]  ? __pfx_bond_change_active_slave+0x10/0x10
[  153.560568][T12751]  ? __netdev_upper_dev_unlink+0x652/0x7c0
[  153.560581][T12751]  bond_select_active_slave+0x8e2/0xd00
[  153.560591][T12751]  ? __pfx_bond_select_active_slave+0x10/0x10
[  153.560600][T12751]  ? netdev_upper_dev_unlink+0x91/0xd0
[  153.560613][T12751]  __bond_release_one+0x8c4/0x10e0
[  153.560625][T12751]  ? __pfx___bond_release_one+0x10/0x10
[  153.560638][T12751]  ? netif_state_change+0x29e/0x3a0
[  153.560648][T12751]  ? mutex_is_locked+0x17/0x50
[  153.560654][T12751]  do_set_master+0x312/0x6d0
[  153.560662][T12751]  do_setlink+0xcf0/0x41c0
[  153.560669][T12751]  ? __kernel_text_address+0xd/0x40
[  153.560679][T12751]  ? arch_stack_walk+0xfc/0x150
[  153.560687][T12751]  ? __pfx_do_setlink+0x10/0x10
[  153.560695][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.560706][T12751]  ? __mutex_trylock_common+0x153/0x260
[  153.560713][T12751]  ? __pfx___mutex_trylock_common+0x10/0x10
[  153.560720][T12751]  ? rcu_is_watching+0x15/0xb0
[  153.560731][T12751]  ? trace_contention_end+0x39/0x120
[  153.560738][T12751]  ? __mutex_lock+0x335/0x1340
[  153.560748][T12751]  ? __pfx_aa_get_newest_label+0x10/0x10
[  153.560758][T12751]  ? __pfx_aa_get_newest_label+0x10/0x10
[  153.560767][T12751]  ? rtnl_newlink+0x8db/0x1c70
[  153.560777][T12751]  ? rcu_is_watching+0x15/0xb0
[  153.560788][T12751]  ? __pfx___mutex_lock+0x10/0x10
[  153.560799][T12751]  ? ns_capable+0x8a/0xf0
[  153.560810][T12751]  ? rtnl_link_get_net_capable+0x16a/0x350
[  153.560817][T12751]  rtnl_newlink+0x149f/0x1c70
[  153.560827][T12751]  ? netlink_sendmsg+0x805/0xb30
[  153.560839][T12751]  ? __pfx_rtnl_newlink+0x10/0x10
[  153.560852][T12751]  ? kasan_quarantine_put+0xdd/0x220
[  153.560861][T12751]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.560872][T12751]  ? nlmon_xmit+0xb0/0x100
[  153.560879][T12751]  ? kmem_cache_free+0x18f/0x400
[  153.560891][T12751]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.560902][T12751]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.560911][T12751]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.560921][T12751]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  153.560932][T12751]  ? __dev_queue_xmit+0x27b/0x3b50
[  153.560942][T12751]  ? __lock_acquire+0xab9/0xd20
[  153.560955][T12751]  ? __pfx_rtnl_newlink+0x10/0x10
[  153.560965][T12751]  rtnetlink_rcv_msg+0x7cf/0xb70
[  153.560976][T12751]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  153.560986][T12751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  153.560995][T12751]  ? ref_tracker_free+0x63a/0x7d0
[  153.561004][T12751]  ? __asan_memcpy+0x40/0x70
[  153.561012][T12751]  ? __pfx_ref_tracker_free+0x10/0x10
[  153.561020][T12751]  netlink_rcv_skb+0x208/0x470
[  153.561031][T12751]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  153.561041][T12751]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  153.561052][T12751]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.561064][T12751]  netlink_unicast+0x82f/0x9e0
[  153.561074][T12751]  ? __pfx_netlink_unicast+0x10/0x10
[  153.561083][T12751]  ? netlink_sendmsg+0x642/0xb30
[  153.561093][T12751]  ? skb_put+0x11b/0x210
[  153.561100][T12751]  netlink_sendmsg+0x805/0xb30
[  153.561110][T12751]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.561121][T12751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.561132][T12751]  ? __sanitizer_cov_trace_pc+0x4/0x70
[  153.561141][T12751]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.561149][T12751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.561160][T12751]  __sock_sendmsg+0x21c/0x270
[  153.561169][T12751]  ____sys_sendmsg+0x505/0x830
[  153.561177][T12751]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.561185][T12751]  ? import_iovec+0x74/0xa0
[  153.561195][T12751]  ___sys_sendmsg+0x21f/0x2a0
[  153.561203][T12751]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.561215][T12751]  ? __fget_files+0x2a/0x420
[  153.561221][T12751]  ? __fget_files+0x3a0/0x420
[  153.561229][T12751]  __x64_sys_sendmsg+0x19b/0x260
[  153.561236][T12751]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.561250][T12751]  ? rcu_is_watching+0x15/0xb0
[  153.561261][T12751]  ? do_syscall_64+0xbe/0x3b0
[  153.561272][T12751]  do_syscall_64+0xfa/0x3b0
[  153.561282][T12751]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.561291][T12751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.561298][T12751]  ? exc_page_fault+0x9f/0xf0
[  153.561308][T12751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.561315][T12751] RIP: 0033:0x7f65e718ebe9
[  153.561324][T12751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.561331][T12751] RSP: 002b:00007f65e7f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.561339][T12751] RAX: ffffffffffffffda RBX: 00007f65e73b5fa0 RCX: 00007f65e718ebe9
[  153.561344][T12751] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  153.561349][T12751] RBP: 00007f65e7211e19 R08: 0000000000000000 R09: 0000000000000000
[  153.561353][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.561358][T12751] R13: 00007f65e73b6038 R14: 00007f65e73b5fa0 R15: 00007fff4a05e8d8
[  153.561365][T12751]  </TASK>
[  153.950115][T12751] bond21: (slave gretap5): Releasing backup interface
[  153.955050][   T96] lo speed is unknown, defaulting to 1000
[  153.963797][ T5853] syz1: Port: 1 Link DOWN
[  154.248371][T12751] syz.0.1741 (12751) used greatest stack depth: 13352 bytes left

VM DIAGNOSIS:
04:54:30  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90008763ef0
R8 =ffff8880219a8237 R9 =1ffff11004335046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591c R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f65e7f506c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=0000000105368000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000030796d6d7564
XMM02=00007f821bd87498 00007f821bd87470 XMM03=00007f821bd874a8 00007f821bd874a0
XMM04=00007f821c8ed100 00007f821bd87460 XMM05=00007f821bd87478 00007f821bd874c0
XMM06=00007f821bd874b8 00007f821bd874b0 XMM07=00007f821bd874a8 00007f821bd874a0
XMM08=0000000000000000 00007f821bc12ee7 XMM09=0000000000000000 00007f821bc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8fbc8ec8 RCX=dffffc0000000000 RDX=ffffffff8fbc8ebc
RSI=ffffffff903c1262 RDI=ffffffff8be309a0 RBP=ffffffff8fbc8ebc RSP=ffffc90008737518
R8 =0000000000000009 R9 =0000000000000000 R10=ffffc90008737638 R11=ffffffff81ac3450
R12=ffffffff82180e65 R13=ffffffff8fbc8ebc R14=ffffc900087375e8 R15=ffffffff8fbc8ec0
RIP=ffffffff8172df6e RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f041a659380 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f041a6d5440 CR3=0000000023fb0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000030796d6d7564
XMM02=00007f821bd87498 00007f821bd87470 XMM03=00007f821bd874a8 00007f821bd874a0
XMM04=00007f821c8ed100 00007f821bd87460 XMM05=00007f821bd87478 00007f821bd874c0
XMM06=00007f821bd874b8 00007f821bd874b0 XMM07=00007f821bd874a8 00007f821bd874a0
XMM08=0000000000000000 00007f821bc12ee7 XMM09=0000000000000000 00007f821bc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
