last executing test programs:

998.325558ms ago: executing program 2 (id=3099):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="4423ca7eaf47c1900625e4bf7920a32d", 0x10)
r3 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb9952aa97289f855, 0x69, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb9)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x8000)

929.164136ms ago: executing program 2 (id=3100):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
sendmsg$nl_generic(r2, 0x0, 0x801)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20f752}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)="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", 0x4c4}], 0x2}}], 0x1, 0x40)

727.680017ms ago: executing program 2 (id=3108):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x0)
pipe(&(0x7f00000009c0)={<r2=>0xffffffffffffffff})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x43ca10337ab2e290, r1}, 0x18)
unshare(0x2c020400)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40) (async)
bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r2, 0xffffffffffffffff, 0xb, 0xd, 0xffffffffffffffff, @void, @value=r3}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r2, 0xffffffffffffffff, 0xb, 0xd, 0xffffffffffffffff, @void, @value=r3}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f00000002c0), &(0x7f0000000240)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYRESHEX=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYRESHEX=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=<r7=>0x0, &(0x7f00000001c0)=0x4)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000003000000000000000400000d00000000030000000200000001000000050000000300000002fffb001000000005000000bb000000000000110300000004009a77890f00000000000a020000000b0000000000001010000000030000000000000b03000000100000000000001004000000000000"], &(0x7f0000000200)=""/9, 0x87, 0x9, 0x0, 0xdd}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x28011, r11, 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0x2, 0x9, 0xffffffffffffffe0, 0xfffffffffffffff6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x92, &(0x7f0000000300)=""/146, 0x40f00, 0x0, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x397, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r9, r10, r0, r11], &(0x7f0000000680)=[{0x5, 0x4, 0x1}, {0x0, 0x1, 0x6}], 0x10, 0x7f}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff2bbd70000000000000060000", @ANYRES32=0x0, @ANYBLOB="81fbffff0000000020006772657461700000100002800400120006000000005dc500000000000000"], 0x40}}, 0x4000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff2bbd70000000000000060000", @ANYRES32=0x0, @ANYBLOB="81fbffff0000000020006772657461700000100002800400120006000000005dc500000000000000"], 0x40}}, 0x4000000)

726.834211ms ago: executing program 0 (id=3109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000bec5a0000000f000000000000000000000008000100010000"], 0x20}}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x16}})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4e000)
r5 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

667.902388ms ago: executing program 2 (id=3111):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe)
listen(r4, 0x0)
listen(r3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
unshare(0x24060400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000001000000000000"], 0x18}, 0xc800)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000000400000097a751765a8b57bf880000000600000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB="00c618000000157a79e0000000002ad1937aa153c26809df59cd748c087f5dd7f708c71fac36db141885977c588446aa57f8c5ecf7a3e2c7cfdbc55fe2459c8afb85cc01568409177a2a570e7af8a1c2d9108ce3e6d301a6c0fad2"], 0x50)
socket$pptp(0x18, 0x1, 0x2)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r6, @ANYRES16=r7], &(0x7f0000000080)='GPL\x00', 0x8007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r8}, 0x18)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"})
pipe(&(0x7f0000000140))

666.108753ms ago: executing program 0 (id=3112):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000000)

596.033328ms ago: executing program 0 (id=3114):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e")
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x400}, 0x810)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x5}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x38, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts]}}}}}}, 0x6e)
unshare(0x20000400)
socket(0xa, 0x3, 0x87)

594.10965ms ago: executing program 2 (id=3116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2, 0xb, 0x6, 0x7, 0x40, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@remote, 0x1d, 0x4, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0xf, 0x4, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x10, 0x14, 0x4}, @sadb_address={0x5, 0x17, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e23, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x9}}, @sadb_key={0x21, 0x9, 0x7d8, 0x0, "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"}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in=@multicast2, 0xe, 0x4, 0x4}]}, 0x200}}, 0x880)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r5, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x40010)

593.089431ms ago: executing program 1 (id=3117):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@dev, @broadcast, <r1=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x6, 0x0, 0x8100, r1, {0xa}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x39, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x2b, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0x2010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x10000, 0xcd, 0x2d5f, 0x8}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380), 0x500}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001982f"], 0xfdef)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff000000069825f6d400017c0000040042800c00010004100002800c00168008000f0088470000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
socket$packet(0x11, 0x2, 0x300)

549.005484ms ago: executing program 2 (id=3118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x2, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000006c0)=""/4096, &(0x7f00000001c0)=0x1000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r12, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x574, "f1aca1a63b1889eef66472d664927292"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

349.873681ms ago: executing program 1 (id=3119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x1)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="200000001200010a00000000000000008000e6"], 0x20}}, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xfffe, 0x1, [0x9]}, &(0x7f0000000180)=0xa)

278.893429ms ago: executing program 0 (id=3120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0xac, 0x30, 0xb, 0x5, 0x0, {}, [{0x98, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "14d13dec9dcc5dea7cc3e615eb9b94f3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="2ba2bb6f8b7d0adf745526c5aa82579be29df13bf3", 0x15}], 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r8, &(0x7f00000001c0)=""/83, 0x53, 0x42, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/226, 0xe2, 0x0, &(0x7f0000000480)=""/243, 0xf3}, &(0x7f0000000340)=0x14)

189.594042ms ago: executing program 1 (id=3121):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000))
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffd}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x22, 0x6, "625e8372"}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006717864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000001c0)=0x4, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000a000000c889000001040400", @ANYRES32=r6, @ANYBLOB="7f00"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="040008afb681784de0250cc300000017c6bb20fd0002000000000400"], 0x50)

187.747027ms ago: executing program 0 (id=3122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa, 0x0, 0x10000}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa, 0x0, 0x10000}, 0x28)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0xc}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x0, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0xc}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x0, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRESDEC, @ANYRESDEC, @ANYRES32=r8, @ANYRESOCT=r12, @ANYRES16=r7, @ANYRES16=r12], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r15}, 0x38)
bind$bt_hci(r14, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
write$bt_hci(r14, &(0x7f0000000000)=ANY=[], 0xa)
setsockopt(r13, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

6.750201ms ago: executing program 1 (id=3123):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=<r1=>0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_NET_NS_PID={0x0, 0x13, r1}]}, 0x40}}, 0x0)

5.94781ms ago: executing program 1 (id=3124):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000140)="41000200010007", 0x7)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4)
openat$cgroup_ro(r10, 0x0, 0x0, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xdf6, 0x2, 0x3}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0x1, 0x2, 0x8, 0x20942, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, r4, 0x4, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx  \x00'}, 0x20)
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x6, 0x18}, 0xc)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x1, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1c, &(0x7f0000000a40)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffed16}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000180)=""/147, 0x81e00, 0xa, '\x00', r7, 0x0, r8, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x6, 0xc01, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r10, r11, r12, 0x1, r13, r14, r15, r16, r17], &(0x7f0000000900)=[{0x3, 0x5, 0xa, 0x5}, {0x2, 0x1, 0x10}, {0x4, 0x2, 0x4, 0x6}, {0x2, 0x3}, {0x4, 0x1, 0x10, 0x7}], 0x10, 0x5}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80, 0x6)
write(r2, &(0x7f0000003300)="ac", 0x1)
r18 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r18, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10)

5.181738ms ago: executing program 0 (id=3125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000106970000200020900000000", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

0s ago: executing program 1 (id=3126):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {}, {0x100000000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0xfffffbfc}, 0x0, 0x7fff}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x158}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x30, 0x0, &(0x7f0000000040))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000007}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
r9 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10})
ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)

kernel console output (not intermixed with test programs):

trace_kmalloc+0x1f/0xd0
[  192.431201][T14572]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  192.431218][T14572]  ? kstrndup+0xbf/0x160
[  192.431233][T14572]  hwsim_new_radio_nl+0xea4/0x1b10
[  192.431257][T14572]  ? __pfx___nla_validate_parse+0x10/0x10
[  192.431310][T14572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.431328][T14572]  ? __nla_parse+0x40/0x60
[  192.431347][T14572]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  192.431365][T14572]  genl_family_rcv_msg_doit+0x215/0x300
[  192.431380][T14572]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  192.431398][T14572]  ? bpf_lsm_capable+0x9/0x20
[  192.431414][T14572]  ? security_capable+0x7e/0x2e0
[  192.431433][T14572]  genl_rcv_msg+0x60e/0x790
[  192.431448][T14572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.431460][T14572]  ? __kasan_slab_alloc+0x6c/0x80
[  192.431475][T14572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.431490][T14572]  ? __netlink_lookup+0xbd/0x810
[  192.431499][T14572]  ? rcu_is_watching+0x15/0xb0
[  192.431514][T14572]  netlink_rcv_skb+0x208/0x470
[  192.431531][T14572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.431544][T14572]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.431563][T14572]  ? lock_release+0x4b/0x3e0
[  192.431581][T14572]  ? down_read+0x1ad/0x2e0
[  192.431592][T14572]  genl_rcv+0x28/0x40
[  192.431604][T14572]  netlink_unicast+0x82f/0x9e0
[  192.431621][T14572]  ? __pfx_netlink_unicast+0x10/0x10
[  192.431637][T14572]  ? netlink_sendmsg+0x642/0xb30
[  192.431652][T14572]  ? skb_put+0x11b/0x210
[  192.431664][T14572]  netlink_sendmsg+0x805/0xb30
[  192.431683][T14572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.431700][T14572]  ? aa_sock_msg_perm+0xf1/0x1d0
[  192.431712][T14572]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.431725][T14572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.431742][T14572]  __sock_sendmsg+0x21c/0x270
[  192.431758][T14572]  ____sys_sendmsg+0x505/0x830
[  192.431771][T14572]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.431785][T14572]  ? import_iovec+0x74/0xa0
[  192.431799][T14572]  ___sys_sendmsg+0x21f/0x2a0
[  192.431811][T14572]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.431825][T14572]  ? futex_wake+0x4b2/0x560
[  192.431845][T14572]  ? __fget_files+0x2a/0x420
[  192.431863][T14572]  ? __fget_files+0x3a0/0x420
[  192.431880][T14572]  __x64_sys_sendmsg+0x19b/0x260
[  192.431894][T14572]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.431908][T14572]  ? rcu_is_watching+0x15/0xb0
[  192.431920][T14572]  ? rcu_is_watching+0x15/0xb0
[  192.431932][T14572]  do_syscall_64+0xfa/0x3b0
[  192.431949][T14572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.431961][T14572]  ? exc_page_fault+0x9f/0xf0
[  192.431977][T14572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.431988][T14572] RIP: 0033:0x7f063ab8ebe9
[  192.431999][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.432010][T14572] RSP: 002b:00007f063b969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.432025][T14572] RAX: ffffffffffffffda RBX: 00007f063adb5fa0 RCX: 00007f063ab8ebe9
[  192.432034][T14572] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  192.432041][T14572] RBP: 00007f063ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  192.432049][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.432056][T14572] R13: 00007f063adb6038 R14: 00007f063adb5fa0 R15: 00007ffc0c779718
[  192.432069][T14572]  </TASK>
[  192.456398][T14573] dvmrp1: entered allmulticast mode
[  192.481144][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'.
[  192.481212][T14576] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  192.528359][T14580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.529596][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.566337][T14580] syzkaller0: entered promiscuous mode
[  192.610720][T14587] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2187'.
[  192.623934][T14580] syzkaller0: entered allmulticast mode
[  192.667416][T14587] tipc: Resetting bearer <eth:syzkaller0>
[  192.678899][T14587] tipc: Disabling bearer <eth:syzkaller0>
[  192.681673][T14592] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.686190][T14589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'.
[  192.738012][T14595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2189'.
[  192.742365][T14595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2189'.
[  192.762796][T14598] netlink: 'syz.1.2190': attribute type 10 has an invalid length.
[  192.769776][T14598] netlink: 'syz.1.2190': attribute type 10 has an invalid length.
[  192.793374][T14603] netlink: 'syz.2.2193': attribute type 12 has an invalid length.
[  193.070535][T14626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.084051][T14626] tipc: Disabling bearer <eth:syzkaller0>
[  193.205345][T14630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.294926][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  193.394175][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2203'.
[  193.402583][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'.
[  193.463216][T14656] lo speed is unknown, defaulting to 1000
[  193.693879][T14667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.706571][T14667] syzkaller0: entered promiscuous mode
[  193.708575][T14667] syzkaller0: entered allmulticast mode
[  193.725923][T14667] tipc: Resetting bearer <eth:syzkaller0>
[  193.730622][T14666] tipc: Resetting bearer <eth:syzkaller0>
[  193.735120][T14666] tipc: Disabling bearer <eth:syzkaller0>
[  194.822101][T14707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.831218][ T5862] lo speed is unknown, defaulting to 1000
[  194.835187][ T5862] syz0: Port: 1 Link ACTIVE
[  194.837291][ T5862] lo speed is unknown, defaulting to 1000
[  194.911170][T14725] ip6gretap0: left allmulticast mode
[  194.915058][T14725] ip6gretap0: left promiscuous mode
[  194.917744][T14725] macsec0: left promiscuous mode
[  194.923736][T14724] macsec0: entered promiscuous mode
[  194.930009][T14728] veth0_to_bond: left allmulticast mode
[  194.932437][T14728] veth0_to_bond: left promiscuous mode
[  194.934845][T14728] bridge0: port 2(veth0_to_bond) entered disabled state
[  194.940226][T14728] bond10: (slave veth15): Releasing active interface
[  194.943839][T14728] veth17: left allmulticast mode
[  194.945607][T14728] veth17: left promiscuous mode
[  194.947509][T14728] bridge0: port 1(veth17) entered disabled state
[  194.951714][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  194.954768][T14728] bond11: (slave ip6gretap0): Removing an active aggregator
[  194.957462][T14728] bond11: (slave ip6gretap0): Releasing backup interface
[  194.960841][T14728] bond11: (slave ip6gretap0): the permanent HWaddr of slave - 3a:74:65:4b:de:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  194.968742][T14728] bond11: (slave veth19): Releasing backup interface
[  194.976211][T14731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.984727][T14728] lo speed is unknown, defaulting to 1000
[  195.004572][T14731] tipc: Disabling bearer <eth:syzkaller0>
[  195.091484][T14738] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.152862][T14750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.157022][T14750] syzkaller0: entered promiscuous mode
[  195.160023][T14750] syzkaller0: entered allmulticast mode
[  195.163559][T14752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.173352][T14752] syzkaller0: entered promiscuous mode
[  195.176080][T14752] syzkaller0: entered allmulticast mode
[  195.193855][T14752] tipc: Resetting bearer <eth:syzkaller0>
[  195.218013][T14751] tipc: Resetting bearer <eth:syzkaller0>
[  195.247221][T14751] tipc: Disabling bearer <eth:syzkaller0>
[  195.340592][T14763] ip6gre2: left allmulticast mode
[  195.343895][T14763] macsec0: left promiscuous mode
[  195.350545][T14763] macsec0: left allmulticast mode
[  195.358151][ T5258] lo speed is unknown, defaulting to 1000
[  195.361484][ T5258] syz0: Port: 1 Link DOWN
[  195.377096][T14747] tipc: Resetting bearer <eth:syzkaller0>
[  195.386162][T14747] tipc: Disabling bearer <eth:syzkaller0>
[  195.391169][ T5258] lo speed is unknown, defaulting to 1000
[  195.469533][T14781] bond8: (slave bridge9): Releasing backup interface
[  195.480819][T14781] bridge9: left promiscuous mode
[  195.482953][T14781] bridge9: left allmulticast mode
[  195.515780][T14781] lo speed is unknown, defaulting to 1000
[  195.535813][T14790] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  195.685047][T14804] validate_nla: 2 callbacks suppressed
[  195.685061][T14804] netlink: 'syz.1.2240': attribute type 13 has an invalid length.
[  195.700815][T14804] gretap0: refused to change device tx_queue_len
[  195.711220][T14804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  195.834452][T14821] erspan0: left allmulticast mode
[  195.842676][T14821] mac80211_hwsim hwsim68 wlan0: left promiscuous mode
[  195.845239][T14821] macvlan1: left promiscuous mode
[  195.846896][T14821] macvlan1: left allmulticast mode
[  195.849345][T14821] bond8: left promiscuous mode
[  195.851204][T14821] bond8: left allmulticast mode
[  195.853195][T14821] sit6: left promiscuous mode
[  195.854803][T14821] geneve7: left allmulticast mode
[  195.856636][T14821] ip6gre3: left allmulticast mode
[  195.859546][T14821] geneve8: left promiscuous mode
[  195.865239][T14821] ip6tnl3: left promiscuous mode
[  195.866914][T14821] ip6tnl3: left allmulticast mode
[  195.870767][ T5871] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.873854][ T5871] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.876820][ T5871] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.881102][ T5871] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.936582][T14828] lo speed is unknown, defaulting to 1000
[  196.147071][T14842] bridge0: failed insert local address into bridge forwarding table
[  196.411615][T14867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.415071][T14867] syzkaller0: entered promiscuous mode
[  196.417285][T14867] syzkaller0: entered allmulticast mode
[  196.421972][T14866] tipc: Resetting bearer <eth:syzkaller0>
[  196.428078][T14866] tipc: Disabling bearer <eth:syzkaller0>
[  196.868039][T14886] netlink: 'syz.0.2260': attribute type 2 has an invalid length.
[  196.883055][T14886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.889137][ T5940] lo speed is unknown, defaulting to 1000
[  196.891097][ T5940] syz0: Port: 1 Link ACTIVE
[  196.892758][ T5940] lo speed is unknown, defaulting to 1000
[  197.017901][T14888] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  197.077113][T14900] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  197.184021][T14902] netlink: 'syz.0.2263': attribute type 1 has an invalid length.
[  197.186771][T14902] netlink: 'syz.0.2263': attribute type 1 has an invalid length.
[  197.190571][T14902] netlink: 'syz.0.2263': attribute type 1 has an invalid length.
[  197.201006][T14902] 8021q: adding VLAN 0 to HW filter on device bond14
[  197.248188][T14907] syzkaller0: entered promiscuous mode
[  197.250281][T14907] syzkaller0: entered allmulticast mode
[  197.420415][T14912] __nla_validate_parse: 56 callbacks suppressed
[  197.420429][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'.
[  197.457945][T14922] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000
[  197.464685][T14922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.468095][T14922] syzkaller0: entered promiscuous mode
[  197.470635][T14922] syzkaller0: entered allmulticast mode
[  197.477248][T14914] smc: net device bond0 applied user defined pnetid SYZ2
[  197.515282][T14921] tipc: Resetting bearer <eth:syzkaller0>
[  197.529193][T14921] tipc: Disabling bearer <eth:syzkaller0>
[  197.553202][T14929] netlink: 'syz.2.2270': attribute type 39 has an invalid length.
[  197.638037][T14951] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  197.638607][T14953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2275'.
[  197.641916][T14955] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  197.646486][T14955] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  197.701592][T14964] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.707885][T14964] netlink: 'syz.0.2277': attribute type 4 has an invalid length.
[  197.722109][   T47] lo speed is unknown, defaulting to 1000
[  197.724486][   T47] syz0: Port: 1 Link DOWN
[  197.725151][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'.
[  197.726218][   T47] lo speed is unknown, defaulting to 1000
[  197.731784][T14964] netlink: 'syz.0.2277': attribute type 4 has an invalid length.
[  197.737391][ T5258] lo speed is unknown, defaulting to 1000
[  197.739519][ T5258] syz0: Port: 1 Link ACTIVE
[  197.741777][ T5258] lo speed is unknown, defaulting to 1000
[  197.824516][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2282'.
[  197.867132][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  197.873387][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  197.887844][T14976] netlink: 'syz.1.2281': attribute type 10 has an invalid length.
[  197.945984][T14988] sit7: entered promiscuous mode
[  198.088431][T15002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.092032][T15002] syzkaller0: entered promiscuous mode
[  198.094366][T15002] syzkaller0: entered allmulticast mode
[  198.122020][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'.
[  198.250333][T14995] tipc: Resetting bearer <eth:syzkaller0>
[  198.254215][T14995] tipc: Disabling bearer <eth:syzkaller0>
[  198.531817][T15006] lo speed is unknown, defaulting to 1000
[  198.785458][T15013] lo speed is unknown, defaulting to 1000
[  198.836713][T15017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2292'.
[  198.888141][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'.
[  198.904841][T15025] netlink: 'syz.0.2294': attribute type 10 has an invalid length.
[  198.922669][T15023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2294'.
[  198.944964][T15019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.125731][T15048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.182561][T15056] syzkaller0: entered promiscuous mode
[  199.184569][T15056] syzkaller0: entered allmulticast mode
[  199.255432][T15069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.259969][T15069] syzkaller0: entered promiscuous mode
[  199.262188][T15069] syzkaller0: entered allmulticast mode
[  199.269507][T15068] tipc: Resetting bearer <eth:syzkaller0>
[  199.277328][T15068] tipc: Disabling bearer <eth:syzkaller0>
[  199.498075][T15103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.502918][T15103] syzkaller0: entered promiscuous mode
[  199.504763][T15103] syzkaller0: entered allmulticast mode
[  199.510052][T15103] tipc: Resetting bearer <eth:syzkaller0>
[  199.519412][T15102] tipc: Resetting bearer <eth:syzkaller0>
[  199.530498][T15102] tipc: Disabling bearer <eth:syzkaller0>
[  199.538862][T15105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.558208][T15105] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  199.561601][T15105] tipc: Resetting bearer <eth:syzkaller0>
[  199.564715][T15104] tipc: Disabling bearer <eth:syzkaller0>
[  199.771941][T15122] lo speed is unknown, defaulting to 1000
[  200.221433][   T47] lo speed is unknown, defaulting to 1000
[  200.223809][   T47] syz0: Port: 1 Link DOWN
[  200.226957][   T47] lo speed is unknown, defaulting to 1000
[  200.281375][ T5905] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.284220][ T5905] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.287390][ T5905] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.293613][ T5905] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.298198][T15162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  200.307010][T15164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  200.530106][T15183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.612763][T15183] syzkaller0: mtu less than device minimum
[  200.616063][T15181] tipc: Disabling bearer <eth:syzkaller0>
[  200.899778][T15209] validate_nla: 14 callbacks suppressed
[  200.899788][T15209] netlink: 'syz.0.2342': attribute type 4 has an invalid length.
[  200.904317][T15216] Bluetooth: hci1: Opcode 0x080f failed: -4
[  201.000596][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.005305][T15223] CPU: 1 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.005321][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.005328][T15223] Call Trace:
[  201.005333][T15223]  <TASK>
[  201.005337][T15223]  dump_stack_lvl+0x189/0x250
[  201.005355][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.005368][T15223]  ? __pfx__printk+0x10/0x10
[  201.005383][T15223]  ? kernfs_root+0x1c/0x230
[  201.005396][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.005408][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.005421][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.005433][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.005444][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.005456][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.005468][T15223]  device_add+0x475/0xb50
[  201.005480][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.005507][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.005522][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.005535][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.005554][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.005570][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.005584][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.005597][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.005613][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.005623][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.005640][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.005662][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.005674][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.005688][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.005703][T15223]  ? kstrndup+0xbf/0x160
[  201.005717][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.005731][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.005753][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.005770][T15223]  ? __nla_parse+0x40/0x60
[  201.005786][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.005802][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.005817][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.005833][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.005848][T15223]  ? security_capable+0x7e/0x2e0
[  201.005866][T15223]  genl_rcv_msg+0x60e/0x790
[  201.005880][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.005891][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.005905][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.005919][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.005928][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.005942][T15223]  netlink_rcv_skb+0x208/0x470
[  201.005958][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.005971][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.005987][T15223]  ? lock_release+0x4b/0x3e0
[  201.006004][T15223]  ? down_read+0x1ad/0x2e0
[  201.006015][T15223]  genl_rcv+0x28/0x40
[  201.006026][T15223]  netlink_unicast+0x82f/0x9e0
[  201.006042][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.006057][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.006072][T15223]  ? skb_put+0x11b/0x210
[  201.006083][T15223]  netlink_sendmsg+0x805/0xb30
[  201.006103][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.006119][T15223]  ? futex_unqueue+0x22/0x240
[  201.006130][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.006140][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.006152][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.006168][T15223]  __sock_sendmsg+0x21c/0x270
[  201.006183][T15223]  ____sys_sendmsg+0x505/0x830
[  201.006196][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.006209][T15223]  ? import_iovec+0x74/0xa0
[  201.006222][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.006234][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.006276][T15223]  ? futex_wait+0x285/0x360
[  201.006317][T15223]  ? __fget_files+0x2a/0x420
[  201.006335][T15223]  ? __fget_files+0x3a0/0x420
[  201.006354][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.006366][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.006379][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.006391][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.006402][T15223]  do_syscall_64+0xfa/0x3b0
[  201.006419][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.006430][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.006445][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.006456][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.006466][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.006476][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.006498][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.006507][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.006516][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.006523][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.006531][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.006546][T15223]  </TASK>
[  201.186948][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.198811][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.198825][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.198830][T15223] Call Trace:
[  201.198833][T15223]  <TASK>
[  201.198837][T15223]  dump_stack_lvl+0x189/0x250
[  201.198850][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.198858][T15223]  ? __pfx__printk+0x10/0x10
[  201.198867][T15223]  ? kernfs_root+0x1c/0x230
[  201.198875][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.198882][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.198889][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.198896][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.198904][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.198912][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.198920][T15223]  device_add+0x475/0xb50
[  201.198927][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.198940][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.198948][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.198957][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.198969][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.198979][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.198988][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.198995][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.199006][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.199012][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.199023][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.199036][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.199044][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.199053][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.199062][T15223]  ? kstrndup+0xbf/0x160
[  201.199071][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.199080][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.199093][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.199103][T15223]  ? __nla_parse+0x40/0x60
[  201.199113][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.199123][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.199132][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.199142][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.199151][T15223]  ? security_capable+0x7e/0x2e0
[  201.199162][T15223]  genl_rcv_msg+0x60e/0x790
[  201.199170][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.199179][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.199193][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.199205][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.199213][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.199226][T15223]  netlink_rcv_skb+0x208/0x470
[  201.199269][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.199282][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.199300][T15223]  ? lock_release+0x4b/0x3e0
[  201.199319][T15223]  ? down_read+0x1ad/0x2e0
[  201.199330][T15223]  genl_rcv+0x28/0x40
[  201.199342][T15223]  netlink_unicast+0x82f/0x9e0
[  201.199378][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.199393][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.199408][T15223]  ? skb_put+0x11b/0x210
[  201.199420][T15223]  netlink_sendmsg+0x805/0xb30
[  201.199439][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.199455][T15223]  ? futex_unqueue+0x22/0x240
[  201.199477][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.199488][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.199501][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.199517][T15223]  __sock_sendmsg+0x21c/0x270
[  201.199534][T15223]  ____sys_sendmsg+0x505/0x830
[  201.199547][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.199561][T15223]  ? import_iovec+0x74/0xa0
[  201.199575][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.199587][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.199601][T15223]  ? futex_wait+0x285/0x360
[  201.199625][T15223]  ? __fget_files+0x2a/0x420
[  201.199640][T15223]  ? __fget_files+0x3a0/0x420
[  201.199659][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.199671][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.199685][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.199697][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.199708][T15223]  do_syscall_64+0xfa/0x3b0
[  201.199726][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.199737][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.199752][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.199764][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.199775][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.199786][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.199800][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.199809][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.199817][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.199825][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.199832][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.199863][T15223]  </TASK>
[  201.367701][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.371738][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.371748][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.371753][T15223] Call Trace:
[  201.371757][T15223]  <TASK>
[  201.371760][T15223]  dump_stack_lvl+0x189/0x250
[  201.371773][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.371781][T15223]  ? __pfx__printk+0x10/0x10
[  201.371790][T15223]  ? kernfs_root+0x1c/0x230
[  201.371799][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.371806][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.371813][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.371821][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.371828][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.371836][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.371844][T15223]  device_add+0x475/0xb50
[  201.371852][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.371864][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.371873][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.371881][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.371893][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.371904][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.371912][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.371920][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.371930][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.371937][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.371948][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.371961][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.371969][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.371978][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.371987][T15223]  ? kstrndup+0xbf/0x160
[  201.371996][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.372004][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.372018][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.372028][T15223]  ? __nla_parse+0x40/0x60
[  201.372038][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.372048][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.372056][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.372066][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.372075][T15223]  ? security_capable+0x7e/0x2e0
[  201.372086][T15223]  genl_rcv_msg+0x60e/0x790
[  201.372094][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.372101][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.372110][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.372118][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.372123][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.372131][T15223]  netlink_rcv_skb+0x208/0x470
[  201.372141][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.372149][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.372160][T15223]  ? lock_release+0x4b/0x3e0
[  201.372170][T15223]  ? down_read+0x1ad/0x2e0
[  201.372176][T15223]  genl_rcv+0x28/0x40
[  201.372183][T15223]  netlink_unicast+0x82f/0x9e0
[  201.372193][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.372201][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.372216][T15223]  ? skb_put+0x11b/0x210
[  201.372224][T15223]  netlink_sendmsg+0x805/0xb30
[  201.372235][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.372276][T15223]  ? futex_unqueue+0x22/0x240
[  201.372288][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.372299][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.372311][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.372326][T15223]  __sock_sendmsg+0x21c/0x270
[  201.372339][T15223]  ____sys_sendmsg+0x505/0x830
[  201.372351][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.372363][T15223]  ? import_iovec+0x74/0xa0
[  201.372376][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.372387][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.372400][T15223]  ? futex_wait+0x285/0x360
[  201.372421][T15223]  ? __fget_files+0x2a/0x420
[  201.372440][T15223]  ? __fget_files+0x3a0/0x420
[  201.372460][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.372470][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.372477][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.372485][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.372492][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.372499][T15223]  do_syscall_64+0xfa/0x3b0
[  201.372509][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.372516][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.372525][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.372532][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.372540][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.372546][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.372555][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.372561][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.372565][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.372570][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.372574][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.372582][T15223]  </TASK>
[  201.540496][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.544125][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.544136][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.544140][T15223] Call Trace:
[  201.544144][T15223]  <TASK>
[  201.544147][T15223]  dump_stack_lvl+0x189/0x250
[  201.544160][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.544168][T15223]  ? __pfx__printk+0x10/0x10
[  201.544177][T15223]  ? kernfs_root+0x1c/0x230
[  201.544185][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.544192][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.544199][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.544207][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.544215][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.544222][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.544235][T15223]  device_add+0x475/0xb50
[  201.544266][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.544278][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.544287][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.544296][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.544308][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.544318][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.544326][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.544334][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.544344][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.544351][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.544362][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.544374][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.544382][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.544390][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.544399][T15223]  ? kstrndup+0xbf/0x160
[  201.544409][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.544417][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.544430][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.544440][T15223]  ? __nla_parse+0x40/0x60
[  201.544450][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.544460][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.544468][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.544478][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.544487][T15223]  ? security_capable+0x7e/0x2e0
[  201.544498][T15223]  genl_rcv_msg+0x60e/0x790
[  201.544506][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.544512][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.544521][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.544530][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.544535][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.544543][T15223]  netlink_rcv_skb+0x208/0x470
[  201.544553][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.544560][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.544571][T15223]  ? lock_release+0x4b/0x3e0
[  201.544582][T15223]  ? down_read+0x1ad/0x2e0
[  201.544588][T15223]  genl_rcv+0x28/0x40
[  201.544594][T15223]  netlink_unicast+0x82f/0x9e0
[  201.544604][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.544612][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.544622][T15223]  ? skb_put+0x11b/0x210
[  201.544628][T15223]  netlink_sendmsg+0x805/0xb30
[  201.544639][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.544649][T15223]  ? futex_unqueue+0x22/0x240
[  201.544656][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.544663][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.544670][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.544680][T15223]  __sock_sendmsg+0x21c/0x270
[  201.544689][T15223]  ____sys_sendmsg+0x505/0x830
[  201.544696][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.544704][T15223]  ? import_iovec+0x74/0xa0
[  201.544712][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.544719][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.544727][T15223]  ? futex_wait+0x285/0x360
[  201.544740][T15223]  ? __fget_files+0x2a/0x420
[  201.544750][T15223]  ? __fget_files+0x3a0/0x420
[  201.544761][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.544768][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.544774][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.544782][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.544789][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.544796][T15223]  do_syscall_64+0xfa/0x3b0
[  201.544806][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.544813][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.544821][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.544828][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.544835][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.544842][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.544851][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.544856][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.544861][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.544865][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.544869][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.544877][T15223]  </TASK>
[  201.545123][T15232] syzkaller0: entered promiscuous mode
[  201.705897][T15232] syzkaller0: entered allmulticast mode
[  201.718327][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.722541][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.722552][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.722557][T15223] Call Trace:
[  201.722560][T15223]  <TASK>
[  201.722563][T15223]  dump_stack_lvl+0x189/0x250
[  201.722575][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.722587][T15223]  ? __pfx__printk+0x10/0x10
[  201.722600][T15223]  ? kernfs_root+0x1c/0x230
[  201.722613][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.722625][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.722638][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.722650][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.722662][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.722675][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.722688][T15223]  device_add+0x475/0xb50
[  201.722699][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.722712][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.722725][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.722737][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.722758][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.722774][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.722789][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.722802][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.722818][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.722828][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.722844][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.722859][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.722867][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.722875][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.722885][T15223]  ? kstrndup+0xbf/0x160
[  201.722893][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.722902][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.722914][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.722924][T15223]  ? __nla_parse+0x40/0x60
[  201.722934][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.722945][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.722953][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.722963][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.722972][T15223]  ? security_capable+0x7e/0x2e0
[  201.722982][T15223]  genl_rcv_msg+0x60e/0x790
[  201.722991][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.722997][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.723006][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.723014][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.723020][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.723028][T15223]  netlink_rcv_skb+0x208/0x470
[  201.723038][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.723045][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.723056][T15223]  ? lock_release+0x4b/0x3e0
[  201.723067][T15223]  ? down_read+0x1ad/0x2e0
[  201.723073][T15223]  genl_rcv+0x28/0x40
[  201.723079][T15223]  netlink_unicast+0x82f/0x9e0
[  201.723089][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.723097][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.723106][T15223]  ? skb_put+0x11b/0x210
[  201.723113][T15223]  netlink_sendmsg+0x805/0xb30
[  201.723124][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.723134][T15223]  ? futex_unqueue+0x22/0x240
[  201.723141][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.723147][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.723155][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.723165][T15223]  __sock_sendmsg+0x21c/0x270
[  201.723174][T15223]  ____sys_sendmsg+0x505/0x830
[  201.723182][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.723190][T15223]  ? import_iovec+0x74/0xa0
[  201.723198][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.723205][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.723213][T15223]  ? futex_wait+0x285/0x360
[  201.723228][T15223]  ? __fget_files+0x2a/0x420
[  201.723260][T15223]  ? __fget_files+0x3a0/0x420
[  201.723272][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.723279][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.723285][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.723294][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.723301][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.723307][T15223]  do_syscall_64+0xfa/0x3b0
[  201.723318][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.723325][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.723334][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.723340][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.723348][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.723354][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.723364][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.723369][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.723374][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.723379][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.723383][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.723391][T15223]  </TASK>
[  201.891442][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  201.895645][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  201.895656][T15223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.895661][T15223] Call Trace:
[  201.895665][T15223]  <TASK>
[  201.895668][T15223]  dump_stack_lvl+0x189/0x250
[  201.895681][T15223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.895689][T15223]  ? __pfx__printk+0x10/0x10
[  201.895698][T15223]  ? kernfs_root+0x1c/0x230
[  201.895707][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.895714][T15223]  ? kernfs_path_from_node+0x250/0x290
[  201.895721][T15223]  ? kernfs_path_from_node+0x2f/0x290
[  201.895729][T15223]  sysfs_warn_dup+0x8e/0xa0
[  201.895736][T15223]  sysfs_do_create_link_sd+0xc0/0x110
[  201.895743][T15223]  device_add_class_symlinks+0x1cf/0x240
[  201.895752][T15223]  device_add+0x475/0xb50
[  201.895759][T15223]  wiphy_register+0x1ba6/0x28d0
[  201.895771][T15223]  ? __pfx_wiphy_register+0x10/0x10
[  201.895780][T15223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.895788][T15223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.895801][T15223]  ieee80211_register_hw+0x3484/0x4100
[  201.895811][T15223]  ? ieee80211_register_hw+0x14a1/0x4100
[  201.895819][T15223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.895827][T15223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.895838][T15223]  ? __hrtimer_setup+0x187/0x210
[  201.895844][T15223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.895854][T15223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.895867][T15223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.895875][T15223]  ? trace_kmalloc+0x1f/0xd0
[  201.895884][T15223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.895893][T15223]  ? kstrndup+0xbf/0x160
[  201.895902][T15223]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.895911][T15223]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.895924][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.895934][T15223]  ? __nla_parse+0x40/0x60
[  201.895944][T15223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.895954][T15223]  genl_family_rcv_msg_doit+0x215/0x300
[  201.895963][T15223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.895972][T15223]  ? bpf_lsm_capable+0x9/0x20
[  201.895982][T15223]  ? security_capable+0x7e/0x2e0
[  201.895993][T15223]  genl_rcv_msg+0x60e/0x790
[  201.896001][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.896008][T15223]  ? __kasan_slab_alloc+0x6c/0x80
[  201.896017][T15223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.896025][T15223]  ? __netlink_lookup+0xbd/0x810
[  201.896031][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.896039][T15223]  netlink_rcv_skb+0x208/0x470
[  201.896049][T15223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.896056][T15223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.896067][T15223]  ? lock_release+0x4b/0x3e0
[  201.896078][T15223]  ? down_read+0x1ad/0x2e0
[  201.896084][T15223]  genl_rcv+0x28/0x40
[  201.896091][T15223]  netlink_unicast+0x82f/0x9e0
[  201.896101][T15223]  ? __pfx_netlink_unicast+0x10/0x10
[  201.896109][T15223]  ? netlink_sendmsg+0x642/0xb30
[  201.896119][T15223]  ? skb_put+0x11b/0x210
[  201.896126][T15223]  netlink_sendmsg+0x805/0xb30
[  201.896137][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.896147][T15223]  ? futex_unqueue+0x22/0x240
[  201.896154][T15223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.896161][T15223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.896168][T15223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.896178][T15223]  __sock_sendmsg+0x21c/0x270
[  201.896187][T15223]  ____sys_sendmsg+0x505/0x830
[  201.896195][T15223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.896213][T15223]  ? import_iovec+0x74/0xa0
[  201.896222][T15223]  ___sys_sendmsg+0x21f/0x2a0
[  201.896228][T15223]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.896260][T15223]  ? futex_wait+0x285/0x360
[  201.896276][T15223]  ? __fget_files+0x2a/0x420
[  201.896285][T15223]  ? __fget_files+0x3a0/0x420
[  201.896297][T15223]  __x64_sys_sendmsg+0x19b/0x260
[  201.896303][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.896310][T15223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.896318][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.896325][T15223]  ? rcu_is_watching+0x15/0xb0
[  201.896332][T15223]  do_syscall_64+0xfa/0x3b0
[  201.896342][T15223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.896349][T15223]  ? exc_page_fault+0x9f/0xf0
[  201.896357][T15223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.896365][T15223] RIP: 0033:0x7fca6c58ebe9
[  201.896372][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.896378][T15223] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.896388][T15223] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  201.896393][T15223] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  201.896398][T15223] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  201.896402][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.896406][T15223] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  201.896414][T15223]  </TASK>
[  202.096005][T15244] veth7: entered promiscuous mode
[  202.124147][T15249] netlink: 'syz.1.2353': attribute type 4 has an invalid length.
[  202.132009][T15249] netlink: 'syz.1.2353': attribute type 4 has an invalid length.
[  202.163587][T15254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.166355][T15254] syzkaller0: entered promiscuous mode
[  202.168336][T15254] syzkaller0: entered allmulticast mode
[  202.174597][T15254] tipc: Resetting bearer <eth:syzkaller0>
[  202.177113][T15253] tipc: Resetting bearer <eth:syzkaller0>
[  202.181021][T15253] tipc: Disabling bearer <eth:syzkaller0>
[  202.500053][T15283] __nla_validate_parse: 35 callbacks suppressed
[  202.500067][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'.
[  202.505574][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'.
[  202.626282][T15297] netlink: 'syz.2.2362': attribute type 16 has an invalid length.
[  202.630454][T15297] netlink: 'syz.2.2362': attribute type 17 has an invalid length.
[  202.658564][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2363'.
[  202.677862][T15301] vti2: entered promiscuous mode
[  202.694263][T15304] netlink: 'syz.2.2365': attribute type 1 has an invalid length.
[  202.939429][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  202.981839][T15251] delete_channel: no stack
[  203.051660][T15321] IPVS: Scheduler module ip_vs_sip not found
[  203.057505][T15321] IPv6: sit6: Disabled Multicast RS
[  203.060482][T15321] sit6: entered allmulticast mode
[  203.188363][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'.
[  203.193925][T15331] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2370'.
[  203.270796][T15328] delete_channel: no stack
[  203.305710][T15347] netlink: 'syz.0.2372': attribute type 2 has an invalid length.
[  203.311540][T15347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.317904][ T5258] lo speed is unknown, defaulting to 1000
[  203.321666][ T5258] syz0: Port: 1 Link ACTIVE
[  203.324430][ T5258] lo speed is unknown, defaulting to 1000
[  203.328472][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'.
[  203.331681][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2371'.
[  203.334703][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'.
[  203.339649][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2371'.
[  203.342715][T15349] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2371'.
[  203.346122][T15347] veth0_to_team: entered promiscuous mode
[  203.348601][T15347] veth0_to_team: entered allmulticast mode
[  203.379938][T15351] netlink: 'syz.0.2373': attribute type 10 has an invalid length.
[  203.385119][T15351] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  203.389432][T15351] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.643839][T15354] netlink: 'syz.2.2374': attribute type 10 has an invalid length.
[  203.647403][T15354] team0: Port device dummy0 added
[  203.649645][T15354] netlink: 'syz.2.2374': attribute type 10 has an invalid length.
[  203.654091][T15354] team0: Port device dummy0 removed
[  204.481752][T15397] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  204.569616][T15412] openvswitch: netlink: Unknown nsh attribute 0
[  204.572363][T15412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.584121][T15407] veth0_to_team: left promiscuous mode
[  204.586055][T15407] veth0_to_team: left allmulticast mode
[  204.593057][T10840] lo speed is unknown, defaulting to 1000
[  204.595026][T10840] syz0: Port: 1 Link DOWN
[  204.596438][T10840] lo speed is unknown, defaulting to 1000
[  204.618984][T15410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.630640][T15410] syzkaller0: entered promiscuous mode
[  204.632388][T15410] syzkaller0: entered allmulticast mode
[  204.671960][T15410] tipc: Resetting bearer <eth:syzkaller0>
[  204.686958][T15409] tipc: Resetting bearer <eth:syzkaller0>
[  204.689630][T15409] tipc: Disabling bearer <eth:syzkaller0>
[  204.837912][T15424] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  204.881825][T15424] batadv_slave_0: entered promiscuous mode
[  205.257380][T15449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.265442][T15450] tipc: Disabling bearer <eth:syzkaller0>
[  205.466407][T15477] sit7: left promiscuous mode
[  205.487938][ T5905] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.493439][ T5905] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.503264][ T5905] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.510662][ T5905] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.296457][T15503] validate_nla: 3 callbacks suppressed
[  206.296471][T15503] netlink: 'syz.2.2413': attribute type 4 has an invalid length.
[  206.308130][T15503] netlink: 'syz.2.2413': attribute type 4 has an invalid length.
[  206.338842][T15507] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  206.341818][T15507] bond0: option active_slave: invalid value (veth0_to_hsr)
[  206.346517][T15507] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  206.349743][T15507] bond0: option active_slave: invalid value (veth0_to_hsr)
[  206.352612][T15507] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  206.355487][T15507] bond0: option active_slave: invalid value (veth0_to_hsr)
[  206.588367][T15530] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  206.715190][T15550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.758485][T15552] lo speed is unknown, defaulting to 1000
[  206.847092][T15556] netlink: 'syz.2.2426': attribute type 15 has an invalid length.
[  206.855393][T15556] ip6tnl3: entered promiscuous mode
[  206.857278][T15556] ip6tnl3: entered allmulticast mode
[  206.859875][T15556] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  206.972078][T15558] pim6reg: entered allmulticast mode
[  206.977154][T15558] pim6reg: left allmulticast mode
[  207.242011][T15575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.245302][T15575] syzkaller0: entered promiscuous mode
[  207.247602][T15575] syzkaller0: entered allmulticast mode
[  207.254718][T15575] tipc: Resetting bearer <eth:syzkaller0>
[  207.258025][T15574] tipc: Resetting bearer <eth:syzkaller0>
[  207.262592][T15574] tipc: Disabling bearer <eth:syzkaller0>
[  207.365693][T15587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.383084][T15587] syzkaller0: entered promiscuous mode
[  207.385021][T15587] syzkaller0: entered allmulticast mode
[  207.422377][T15587] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.427610][T15589] batadv_slave_0: left promiscuous mode
[  207.431804][T15589] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  207.439154][T15589] vti2: left promiscuous mode
[  207.443299][T15586] tipc: Resetting bearer <eth:syzkaller0>
[  207.446686][T15586] tipc: Disabling bearer <eth:syzkaller0>
[  207.484068][T15598] netlink: 'syz.2.2438': attribute type 2 has an invalid length.
[  207.499129][T15598] 8021q: adding VLAN 0 to HW filter on device team0
[  207.503826][T15598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.522016][T15598] __nla_validate_parse: 29 callbacks suppressed
[  207.522025][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'.
[  207.527514][T15598] veth0_to_team: entered promiscuous mode
[  207.529726][T15598] veth0_to_team: entered allmulticast mode
[  207.626362][T15617] netlink: 'syz.0.2444': attribute type 9 has an invalid length.
[  207.629618][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  207.632604][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'.
[  207.637345][T15617] macvlan6: entered promiscuous mode
[  207.641067][T15617] hsr0: entered promiscuous mode
[  207.642775][T15617] macvlan6: entered allmulticast mode
[  207.644631][T15617] hsr0: entered allmulticast mode
[  207.646355][T15617] hsr_slave_0: entered allmulticast mode
[  207.654406][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  207.714284][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'.
[  208.021595][T15637] netlink: 'syz.0.2449': attribute type 4 has an invalid length.
[  208.025159][T15637] netlink: 'syz.0.2449': attribute type 4 has an invalid length.
[  208.028567][ T5862] lo speed is unknown, defaulting to 1000
[  208.031889][ T5862] syz0: Port: 1 Link ACTIVE
[  208.034532][ T5862] lo speed is unknown, defaulting to 1000
[  208.071918][T15639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.074612][T15639] syzkaller0: entered promiscuous mode
[  208.076718][T15639] syzkaller0: entered allmulticast mode
[  208.081014][T15639] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.084785][T15638] tipc: Resetting bearer <eth:syzkaller0>
[  208.088186][T15638] tipc: Disabling bearer <eth:syzkaller0>
[  208.556978][T15659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2456'.
[  208.561023][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'.
[  208.582392][T15661] openvswitch: netlink: Message has 159 unknown bytes.
[  208.605934][T15663] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002
[  208.683537][T15666] netlink: 'syz.2.2457': attribute type 1 has an invalid length.
[  208.697777][T15676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.724640][T15676] syzkaller0: entered promiscuous mode
[  208.726479][T15676] syzkaller0: entered allmulticast mode
[  208.731991][T15676] tipc: Resetting bearer <eth:syzkaller0>
[  208.734953][T15675] tipc: Resetting bearer <eth:syzkaller0>
[  208.737465][T15675] tipc: Disabling bearer <eth:syzkaller0>
[  208.907292][T15688] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2465'.
[  208.993444][T15696] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2465'.
[  209.009460][T15696] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2465'.
[  209.072982][T15704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.075574][T15704] syzkaller0: entered promiscuous mode
[  209.077473][T15704] syzkaller0: entered allmulticast mode
[  209.081532][T15704] syzkaller0: mtu less than device minimum
[  209.083884][T15703] tipc: Resetting bearer <eth:syzkaller0>
[  209.086939][T15703] tipc: Disabling bearer <eth:syzkaller0>
[  209.357969][T15716] dvmrp0: left allmulticast mode
[  209.360609][T15716] dvmrp1: left allmulticast mode
[  209.398494][T15716] syz0: rxe_newlink: already configured on lo
[  209.420346][T15718] tipc: Cannot configure node identity twice
[  209.504955][T15731] dvmrp0: entered allmulticast mode
[  209.545837][T15735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.548181][T15735] syzkaller0: entered promiscuous mode
[  209.550263][T15735] syzkaller0: entered allmulticast mode
[  209.554768][T15735] tipc: Resetting bearer <eth:syzkaller0>
[  209.557718][T15734] tipc: Resetting bearer <eth:syzkaller0>
[  209.560857][T15734] tipc: Disabling bearer <eth:syzkaller0>
[  209.668537][T15753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.672735][T15753] syzkaller0: entered promiscuous mode
[  209.675123][T15753] syzkaller0: entered allmulticast mode
[  209.685311][T15753] tipc: Resetting bearer <eth:syzkaller0>
[  209.692658][T15752] tipc: Resetting bearer <eth:syzkaller0>
[  209.696476][T15752] tipc: Disabling bearer <eth:syzkaller0>
[  209.803988][T15767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.810897][T15767] syzkaller0: entered promiscuous mode
[  209.813073][T15767] syzkaller0: entered allmulticast mode
[  209.823865][T15767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  209.827994][T15768] netlink: 'syz.1.2490': attribute type 10 has an invalid length.
[  209.828278][T15767] tipc: Resetting bearer <eth:syzkaller0>
[  209.835425][T15765] tipc: Resetting bearer <eth:syzkaller0>
[  209.839550][T15765] tipc: Disabling bearer <eth:syzkaller0>
[  209.941944][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.948900][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.951842][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.973440][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.009615][T15792] macsec0: entered promiscuous mode
[  210.011732][T15792] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  210.014159][T15792] macsec0: entered allmulticast mode
[  210.016021][T15792] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  210.022648][T15795] netlink: 'syz.1.2500': attribute type 16 has an invalid length.
[  210.045566][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.050194][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.053080][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.056445][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.063490][T15800] openvswitch: netlink: IP tunnel TTL not specified.
[  210.132935][T15819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.135808][T15819] syzkaller0: entered promiscuous mode
[  210.137711][T15819] syzkaller0: entered allmulticast mode
[  210.140535][T15819] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  210.144179][T15819] tipc: Resetting bearer <eth:syzkaller0>
[  210.147042][T15816] tipc: Resetting bearer <eth:syzkaller0>
[  210.151189][T15816] tipc: Disabling bearer <eth:syzkaller0>
[  210.235683][T15828] openvswitch: netlink: Flow actions attr not present in new flow.
[  210.235990][T15829] openvswitch: netlink: Flow actions attr not present in new flow.
[  210.374133][T15847] ipvlan0: entered promiscuous mode
[  210.376803][T15847] bridge0: port 1(ipvlan0) entered blocking state
[  210.379576][T15847] bridge0: port 1(ipvlan0) entered disabled state
[  210.382044][T15847] ipvlan0: entered allmulticast mode
[  210.384078][T15847] gretap0: entered allmulticast mode
[  210.386985][T15847] ipvlan0: left allmulticast mode
[  210.389077][T15847] gretap0: left allmulticast mode
[  210.507326][T15856] macvlan8: entered allmulticast mode
[  210.585307][T15858] vlan1: entered allmulticast mode
[  210.587525][T15858] bridge0: entered allmulticast mode
[  210.590629][T15858] bridge0: port 1(vlan1) entered blocking state
[  210.592959][T15858] bridge0: port 1(vlan1) entered disabled state
[  210.744538][T15865] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  210.748599][T15865] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  210.767612][T15872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.775614][T15872] syzkaller0: entered promiscuous mode
[  210.777928][T15872] syzkaller0: entered allmulticast mode
[  210.785429][T15872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  210.790324][T15872] tipc: Resetting bearer <eth:syzkaller0>
[  210.793033][T15871] tipc: Resetting bearer <eth:syzkaller0>
[  210.797250][T15871] tipc: Disabling bearer <eth:syzkaller0>
[  210.957710][T15893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.961067][T15893] syzkaller0: entered promiscuous mode
[  210.963018][T15893] syzkaller0: entered allmulticast mode
[  210.967329][T15893] tipc: Resetting bearer <eth:syzkaller0>
[  210.970823][T15892] tipc: Resetting bearer <eth:syzkaller0>
[  210.973857][T15892] tipc: Disabling bearer <eth:syzkaller0>
[  211.290123][T15909] sctp: [Deprecated]: syz.1.2530 (pid 15909) Use of int in max_burst socket option deprecated.
[  211.290123][T15909] Use struct sctp_assoc_value instead
[  211.320593][T15911] validate_nla: 6 callbacks suppressed
[  211.320607][T15911] netlink: 'syz.1.2531': attribute type 22 has an invalid length.
[  211.326322][T15911] netlink: 'syz.1.2531': attribute type 22 has an invalid length.
[  211.370116][T15913] netlink: 'syz.1.2532': attribute type 10 has an invalid length.
[  211.387518][T15918] netlink: 'syz.1.2533': attribute type 1 has an invalid length.
[  211.395934][T15918] 8021q: adding VLAN 0 to HW filter on device bond10
[  211.404010][T15918] bond10: (slave wlan0): Opening slave failed
[  211.484522][T15923] lo speed is unknown, defaulting to 1000
[  211.588584][T15934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.591828][T15934] syzkaller0: entered promiscuous mode
[  211.593943][T15934] syzkaller0: entered allmulticast mode
[  211.607648][T15934] tipc: Resetting bearer <eth:syzkaller0>
[  211.613492][T15933] tipc: Resetting bearer <eth:syzkaller0>
[  211.619149][T15933] tipc: Disabling bearer <eth:syzkaller0>
[  211.730721][T15945] netlink: 'syz.2.2540': attribute type 1 has an invalid length.
[  211.734011][T15945] netlink: 'syz.2.2540': attribute type 1 has an invalid length.
[  211.753131][T15945] netlink: 'syz.2.2540': attribute type 1 has an invalid length.
[  211.778052][T15945] 8021q: adding VLAN 0 to HW filter on device bond13
[  211.851601][T15956] netlink: 'syz.1.2542': attribute type 5 has an invalid length.
[  211.855843][T15956] netlink: 'syz.1.2542': attribute type 5 has an invalid length.
[  211.856573][T15958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  211.861155][T15956] netlink: 'syz.1.2542': attribute type 5 has an invalid length.
[  211.937880][T15963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.940419][T15963] syzkaller0: entered promiscuous mode
[  211.942358][T15963] syzkaller0: entered allmulticast mode
[  211.947862][T15963] tipc: Resetting bearer <eth:syzkaller0>
[  211.956081][T15962] tipc: Resetting bearer <eth:syzkaller0>
[  211.965472][T15962] tipc: Disabling bearer <eth:syzkaller0>
[  212.167676][T15986] hsr0: left allmulticast mode
[  212.170557][T15986] hsr_slave_0: left allmulticast mode
[  212.172830][T15986] hsr0: left promiscuous mode
[  212.175180][T15986] macvlan6: left promiscuous mode
[  212.177484][T15986] macvlan6: left allmulticast mode
[  212.183582][T15986] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  212.187172][T15986] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  212.190251][T15986] macsec0: left promiscuous mode
[  212.192384][T15986] macsec0: left allmulticast mode
[  212.195092][T10840] lo speed is unknown, defaulting to 1000
[  212.197614][T10840] syz0: Port: 1 Link DOWN
[  212.199824][T10840] lo speed is unknown, defaulting to 1000
[  212.306419][T15999] syzkaller0: entered promiscuous mode
[  212.308573][T15999] syzkaller0: entered allmulticast mode
[  212.318232][T15990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.469038][T16018] syzkaller0: entered promiscuous mode
[  212.471491][T16018] syzkaller0: entered allmulticast mode
[  212.480833][T16020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.484045][T16020] syzkaller0: entered promiscuous mode
[  212.486401][T16020] syzkaller0: entered allmulticast mode
[  212.491108][T16020] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  212.495697][T16020] tipc: Resetting bearer <eth:syzkaller0>
[  212.500514][T16019] tipc: Resetting bearer <eth:syzkaller0>
[  212.503979][T16019] tipc: Disabling bearer <eth:syzkaller0>
[  212.707848][T16030] ip6gre2: entered allmulticast mode
[  212.730112][T16032] __nla_validate_parse: 185 callbacks suppressed
[  212.730128][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'.
[  212.739725][T16032] gtp4: entered promiscuous mode
[  212.741943][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'.
[  212.742246][T16032] gtp4: entered allmulticast mode
[  212.804279][T16043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.810957][T16044] syzkaller0: entered allmulticast mode
[  212.830981][T16042] tipc: Disabling bearer <eth:syzkaller0>
[  212.886972][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2564'.
[  212.892663][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'.
[  212.906268][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'.
[  212.920520][T16061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2566'.
[  212.955862][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2567'.
[  213.083525][T16082] syzkaller0: entered promiscuous mode
[  213.086266][T16082] syzkaller0: entered allmulticast mode
[  213.227666][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'.
[  213.262006][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  213.325489][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'.
[  213.405544][T16114] 8021q: adding VLAN 0 to HW filter on device bond14
[  213.411286][T16107] bond14 (unregistering): Released all slaves
[  213.625181][T16125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.627971][T16126] syzkaller0: entered promiscuous mode
[  213.630432][T16126] syzkaller0: entered allmulticast mode
[  213.671258][T16128] tipc: Resetting bearer <eth:syzkaller0>
[  213.675761][T16128] tipc: Disabling bearer <eth:syzkaller0>
[  213.690710][T16121] gtp4: left promiscuous mode
[  213.692869][T16121] gtp4: left allmulticast mode
[  213.776106][T16134] unsupported nlmsg_type 40
[  213.795143][T16134] dvmrp1: left allmulticast mode
[  213.864370][T16137] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.867597][T16137] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.383931][T16140] netem: change failed
[  214.506879][T16159] syzkaller0: entered promiscuous mode
[  214.510927][T16159] syzkaller0: entered allmulticast mode
[  214.516672][T16159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.523817][T16158] tipc: Resetting bearer <eth:syzkaller0>
[  214.556588][T16158] tipc: Disabling bearer <eth:syzkaller0>
[  214.635141][T16163] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  214.638703][T16163] CPU: 1 UID: 0 PID: 16163 Comm: syz.0.2592 Not tainted syzkaller #0 PREEMPT(full) 
[  214.638716][T16163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.638722][T16163] Call Trace:
[  214.638726][T16163]  <TASK>
[  214.638730][T16163]  dump_stack_lvl+0x189/0x250
[  214.638744][T16163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.638753][T16163]  ? __pfx__printk+0x10/0x10
[  214.638764][T16163]  ? kernfs_root+0x1c/0x230
[  214.638774][T16163]  ? kernfs_path_from_node+0x2f/0x290
[  214.638782][T16163]  ? kernfs_path_from_node+0x250/0x290
[  214.638789][T16163]  ? kernfs_path_from_node+0x2f/0x290
[  214.638798][T16163]  sysfs_warn_dup+0x8e/0xa0
[  214.638806][T16163]  sysfs_do_create_link_sd+0xc0/0x110
[  214.638814][T16163]  device_add_class_symlinks+0x1cf/0x240
[  214.638823][T16163]  device_add+0x475/0xb50
[  214.638830][T16163]  wiphy_register+0x1ba6/0x28d0
[  214.638848][T16163]  ? __pfx_wiphy_register+0x10/0x10
[  214.638861][T16163]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  214.638896][T16163]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  214.638915][T16163]  ieee80211_register_hw+0x3484/0x4100
[  214.638932][T16163]  ? ieee80211_register_hw+0x14a1/0x4100
[  214.638946][T16163]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  214.638958][T16163]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.638975][T16163]  ? __hrtimer_setup+0x187/0x210
[  214.638985][T16163]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  214.638998][T16163]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  214.639013][T16163]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  214.639022][T16163]  ? trace_kmalloc+0x1f/0xd0
[  214.639032][T16163]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  214.639042][T16163]  ? kstrndup+0xbf/0x160
[  214.639051][T16163]  hwsim_new_radio_nl+0xea4/0x1b10
[  214.639061][T16163]  ? __pfx___nla_validate_parse+0x10/0x10
[  214.639074][T16163]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.639084][T16163]  ? __nla_parse+0x40/0x60
[  214.639095][T16163]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  214.639105][T16163]  genl_family_rcv_msg_doit+0x215/0x300
[  214.639114][T16163]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  214.639124][T16163]  ? bpf_lsm_capable+0x9/0x20
[  214.639135][T16163]  ? security_capable+0x7e/0x2e0
[  214.639146][T16163]  genl_rcv_msg+0x60e/0x790
[  214.639154][T16163]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.639161][T16163]  ? __kasan_slab_alloc+0x6c/0x80
[  214.639183][T16163]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.639193][T16163]  ? __netlink_lookup+0xbd/0x810
[  214.639232][T16163]  ? rcu_is_watching+0x15/0xb0
[  214.639246][T16163]  netlink_rcv_skb+0x208/0x470
[  214.639258][T16163]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.639267][T16163]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.639280][T16163]  ? lock_release+0x4b/0x3e0
[  214.639291][T16163]  ? down_read+0x1ad/0x2e0
[  214.639298][T16163]  genl_rcv+0x28/0x40
[  214.639305][T16163]  netlink_unicast+0x82f/0x9e0
[  214.639316][T16163]  ? __pfx_netlink_unicast+0x10/0x10
[  214.639326][T16163]  ? netlink_sendmsg+0x642/0xb30
[  214.639336][T16163]  ? skb_put+0x11b/0x210
[  214.639343][T16163]  netlink_sendmsg+0x805/0xb30
[  214.639354][T16163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.639364][T16163]  ? futex_unqueue+0x22/0x240
[  214.639372][T16163]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.639379][T16163]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.639387][T16163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.639397][T16163]  __sock_sendmsg+0x21c/0x270
[  214.639406][T16163]  ____sys_sendmsg+0x505/0x830
[  214.639414][T16163]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.639424][T16163]  ? import_iovec+0x74/0xa0
[  214.639433][T16163]  ___sys_sendmsg+0x21f/0x2a0
[  214.639441][T16163]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.639449][T16163]  ? futex_wait+0x285/0x360
[  214.639464][T16163]  ? __fget_files+0x2a/0x420
[  214.639474][T16163]  ? __fget_files+0x3a0/0x420
[  214.639490][T16163]  __x64_sys_sendmsg+0x19b/0x260
[  214.639501][T16163]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.639516][T16163]  ? rcu_is_watching+0x15/0xb0
[  214.639528][T16163]  do_syscall_64+0xfa/0x3b0
[  214.639543][T16163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.639554][T16163]  ? exc_page_fault+0x9f/0xf0
[  214.639568][T16163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.639581][T16163] RIP: 0033:0x7fca6c58ebe9
[  214.639592][T16163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.639602][T16163] RSP: 002b:00007fca6d4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.639618][T16163] RAX: ffffffffffffffda RBX: 00007fca6c7b5fa0 RCX: 00007fca6c58ebe9
[  214.639627][T16163] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  214.639635][T16163] RBP: 00007fca6c611e19 R08: 0000000000000000 R09: 0000000000000000
[  214.639644][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.639651][T16163] R13: 00007fca6c7b6038 R14: 00007fca6c7b5fa0 R15: 00007ffc10795f38
[  214.639665][T16163]  </TASK>
[  215.112781][T16188] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.140799][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.144114][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.150617][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.154242][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.164035][T16191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.167289][T16191] syzkaller0: entered promiscuous mode
[  215.172621][T16191] syzkaller0: entered allmulticast mode
[  215.178141][T16191] tipc: Resetting bearer <eth:syzkaller0>
[  215.182394][T16190] tipc: Resetting bearer <eth:syzkaller0>
[  215.185581][T16190] tipc: Disabling bearer <eth:syzkaller0>
[  215.264132][T16200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.294100][T16202] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.386579][T16209] lo speed is unknown, defaulting to 1000
[  215.443042][T16212] macvlan8: entered allmulticast mode
[  215.445373][T16212] hsr0: entered allmulticast mode
[  215.447491][T16212] hsr_slave_0: entered allmulticast mode
[  215.459771][T16212] hsr0: left allmulticast mode
[  215.461815][T16212] hsr_slave_0: left allmulticast mode
[  215.676938][T16228] 8021q: adding VLAN 0 to HW filter on device bond15
[  215.716583][T16231] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  215.746034][T16235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.817880][T16241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.882077][T16234] lo speed is unknown, defaulting to 1000
[  215.925621][T16244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.942172][ T5258] lo speed is unknown, defaulting to 1000
[  215.944787][ T5258] syz0: Port: 1 Link ACTIVE
[  215.947924][ T5258] lo speed is unknown, defaulting to 1000
[  215.955408][T16247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.962332][T16250] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  216.006284][ T5940] lo speed is unknown, defaulting to 1000
[  216.008922][ T5940] syz0: Port: 1 Link DOWN
[  216.011563][ T5940] lo speed is unknown, defaulting to 1000
[  216.095308][T16267] 8021q: adding VLAN 0 to HW filter on device bond14
[  216.210828][T16281] syzkaller0: entered promiscuous mode
[  216.214497][T16281] syzkaller0: entered allmulticast mode
[  216.228403][T16287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.236347][T16286] syzkaller0: entered promiscuous mode
[  216.239892][T16286] syzkaller0: entered allmulticast mode
[  216.258170][T16288] tipc: Resetting bearer <eth:syzkaller0>
[  216.262768][T16288] tipc: Disabling bearer <eth:syzkaller0>
[  216.331530][T16304] validate_nla: 47 callbacks suppressed
[  216.331540][T16304] netlink: 'syz.2.2633': attribute type 4 has an invalid length.
[  216.383470][T16311] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  216.521249][T16321] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  216.524172][T16322] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  216.578161][T16321] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  216.578707][T16322] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  216.841939][T16377] netlink: 'syz.1.2654': attribute type 9 has an invalid length.
[  216.850104][T16377] macvlan0: entered promiscuous mode
[  216.852493][T16377] hsr0: entered promiscuous mode
[  216.854951][T16377] macvlan0: entered allmulticast mode
[  216.857396][T16377] hsr0: entered allmulticast mode
[  216.861177][T16377] hsr_slave_0: entered allmulticast mode
[  216.863611][T16377] hsr_slave_1: entered allmulticast mode
[  216.948825][T16390] syzkaller0: tun_chr_ioctl cmd 1074025677
[  216.951061][T16390] syzkaller0: linktype set to 1
[  216.989363][T16394] geneve6: entered promiscuous mode
[  216.991757][T16394] geneve6: entered allmulticast mode
[  216.995266][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 56230 - 0
[  217.002468][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 54874 - 0
[  217.005704][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 56230 - 0
[  217.016401][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 54874 - 0
[  217.024538][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 56230 - 0
[  217.033221][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 54874 - 0
[  217.044054][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 56230 - 0
[  217.052415][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 54874 - 0
[  217.055237][T16404] netlink: 'syz.2.2661': attribute type 1 has an invalid length.
[  217.058586][T16404] netlink: 'syz.2.2661': attribute type 1 has an invalid length.
[  217.125909][T16415] netlink: 'syz.1.2663': attribute type 10 has an invalid length.
[  217.151781][T16413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.155108][T16413] syzkaller0: entered promiscuous mode
[  217.157367][T16413] syzkaller0: entered allmulticast mode
[  217.172901][T16412] tipc: Resetting bearer <eth:syzkaller0>
[  217.180870][T16412] tipc: Disabling bearer <eth:syzkaller0>
[  217.340468][T16435] netlink: 'syz.2.2669': attribute type 9 has an invalid length.
[  217.393862][T16443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.396781][T16443] syzkaller0: entered promiscuous mode
[  217.400489][T16443] syzkaller0: entered allmulticast mode
[  217.468576][T16443] tipc: Resetting bearer <eth:syzkaller0>
[  217.472919][T16442] tipc: Resetting bearer <eth:syzkaller0>
[  217.475305][T16442] tipc: Disabling bearer <eth:syzkaller0>
[  217.498262][T16450] lo speed is unknown, defaulting to 1000
[  217.796023][T16465] veth0_to_team: left promiscuous mode
[  217.798365][T16465] veth0_to_team: left allmulticast mode
[  217.803991][T16465] ip6gre2: left allmulticast mode
[  217.815587][T16465] geneve6: left promiscuous mode
[  217.817917][T16465] geneve6: left allmulticast mode
[  217.822305][ T5871] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 56230 - 0
[  217.826716][ T5871] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 54874 - 0
[  217.834184][ T5871] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 56230 - 0
[  217.838002][ T5871] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 54874 - 0
[  217.845603][ T5871] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 56230 - 0
[  217.845726][T16466] __nla_validate_parse: 48 callbacks suppressed
[  217.845739][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'.
[  217.854793][ T5871] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 54874 - 0
[  217.857785][ T5871] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 56230 - 0
[  217.860932][ T5871] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 54874 - 0
[  218.269349][T16490] vlan2: entered allmulticast mode
[  218.322688][T16493] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[  218.333237][T16493] 8021q: adding VLAN 0 to HW filter on device bond16
[  218.443549][T16506] lo speed is unknown, defaulting to 1000
[  218.490209][T16508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.497336][    T9] lo speed is unknown, defaulting to 1000
[  218.499381][    T9] syz0: Port: 1 Link ACTIVE
[  218.501532][    T9] lo speed is unknown, defaulting to 1000
[  218.620352][T14638] wlan1: Trigger new scan to find an IBSS to join
[  218.642909][T16522] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.685916][T16522] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.703863][T16529] netlink: 'syz.0.2691': attribute type 1 has an invalid length.
[  218.707561][T16529] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2691'.
[  218.754071][T16532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.773287][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'.
[  218.804133][T16531] tipc: Disabling bearer <eth:syzkaller0>
[  218.812850][T16522] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.852981][T16522] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.878265][T16542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.899310][T16543] syzkaller0: entered promiscuous mode
[  218.901610][T16543] syzkaller0: entered allmulticast mode
[  218.954137][T16543] tipc: Resetting bearer <eth:syzkaller0>
[  218.958604][T16541] tipc: Resetting bearer <eth:syzkaller0>
[  218.964649][T16541] tipc: Disabling bearer <eth:syzkaller0>
[  218.982901][ T5871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.985764][ T5871] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.993471][ T5871] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.000118][ T5871] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.026613][T16550] bridge0: entered promiscuous mode
[  219.043573][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2697'.
[  219.046465][T16552] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2697'.
[  219.076024][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'.
[  219.084282][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'.
[  219.274603][T16579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.919090][T16593] netlink: 'syz.0.2709': attribute type 11 has an invalid length.
[  219.951693][T16591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.954762][T16593] netlink: 'syz.0.2709': attribute type 11 has an invalid length.
[  220.030423][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  220.034550][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'.
[  220.063521][T16605] veth7: entered promiscuous mode
[  220.080948][T16605] erspan0: entered allmulticast mode
[  220.096580][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'.
[  220.164631][T16627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.169286][T16627] syzkaller0: entered promiscuous mode
[  220.171113][T16627] syzkaller0: entered allmulticast mode
[  220.214476][T16626] tipc: Resetting bearer <eth:syzkaller0>
[  220.217773][T16626] tipc: Disabling bearer <eth:syzkaller0>
[  220.420528][T16650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.423325][T16650] syzkaller0: entered promiscuous mode
[  220.425173][T16650] syzkaller0: entered allmulticast mode
[  220.431829][T16649] tipc: Resetting bearer <eth:syzkaller0>
[  220.435949][T16649] tipc: Disabling bearer <eth:syzkaller0>
[  220.512134][T10840] lo speed is unknown, defaulting to 1000
[  220.514080][T10840] syz0: Port: 1 Link DOWN
[  220.515604][T10840] lo speed is unknown, defaulting to 1000
[  220.600874][T16663] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.835390][T16680] gretap0: Device is already in use.
[  220.968300][ T5258] lo speed is unknown, defaulting to 1000
[  220.970761][ T5258] syz0: Port: 1 Link ACTIVE
[  220.990801][ T5258] lo speed is unknown, defaulting to 1000
[  221.181435][T16712] pim6reg: entered allmulticast mode
[  221.245805][ T5905] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  221.302717][T16725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.320507][T16728] lo speed is unknown, defaulting to 1000
[  221.378831][T16734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.381426][T16734] syzkaller0: entered promiscuous mode
[  221.383240][T16734] syzkaller0: entered allmulticast mode
[  221.386475][T16734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  221.390684][T16734] tipc: Resetting bearer <eth:syzkaller0>
[  221.393361][T16733] tipc: Resetting bearer <eth:syzkaller0>
[  221.396405][T16733] tipc: Disabling bearer <eth:syzkaller0>
[  221.631665][T16754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  221.707039][T16769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.712328][T16769] syzkaller0: entered promiscuous mode
[  221.714743][T16769] syzkaller0: entered allmulticast mode
[  221.722061][T16769] tipc: Resetting bearer <eth:syzkaller0>
[  221.725810][T16767] tipc: Resetting bearer <eth:syzkaller0>
[  221.731644][T16767] tipc: Disabling bearer <eth:syzkaller0>
[  221.738327][T16776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.750859][T16778] tipc: Disabling bearer <eth:syzkaller0>
[  221.868931][T16788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.872163][T16788] syzkaller0: entered promiscuous mode
[  221.874534][T16788] syzkaller0: entered allmulticast mode
[  221.900045][T16787] tipc: Resetting bearer <eth:syzkaller0>
[  221.903947][T16787] tipc: Disabling bearer <eth:syzkaller0>
[  221.964268][T16790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.970574][T16793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.972967][T16793] syzkaller0: entered promiscuous mode
[  221.974816][T16793] syzkaller0: entered allmulticast mode
[  221.982661][T16793] tipc: Resetting bearer <eth:syzkaller0>
[  221.986121][T16792] tipc: Resetting bearer <eth:syzkaller0>
[  221.990598][T16792] tipc: Disabling bearer <eth:syzkaller0>
[  222.057671][T16799] validate_nla: 12 callbacks suppressed
[  222.057680][T16799] netlink: 'syz.0.2761': attribute type 12 has an invalid length.
[  222.063591][T16803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.068724][T16806] syzkaller0: entered promiscuous mode
[  222.070570][T16806] syzkaller0: entered allmulticast mode
[  222.081568][T16810] netlink: 'syz.0.2764': attribute type 1 has an invalid length.
[  222.084019][T16810] netlink: 'syz.0.2764': attribute type 1 has an invalid length.
[  222.343170][T16835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.356425][T16835] syzkaller0: entered promiscuous mode
[  222.358315][T16835] syzkaller0: entered allmulticast mode
[  222.450629][T16836] tipc: Resetting bearer <eth:syzkaller0>
[  222.504448][T16836] tipc: Disabling bearer <eth:syzkaller0>
[  222.603886][T16842] dvmrp8: entered allmulticast mode
[  222.607887][T16841] dvmrp8: left allmulticast mode
[  222.827613][T16867] netlink: 'syz.0.2775': attribute type 10 has an invalid length.
[  222.831544][T16867] netlink: 'syz.0.2775': attribute type 10 has an invalid length.
[  222.889622][T16802] tipc: Resetting bearer <eth:syzkaller0>
[  222.893833][T16802] tipc: Disabling bearer <eth:syzkaller0>
[  222.967565][T16871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.972303][T16871] syzkaller0: entered promiscuous mode
[  222.974740][T16871] syzkaller0: entered allmulticast mode
[  222.982564][T16871] tipc: Resetting bearer <eth:syzkaller0>
[  222.986261][T16870] tipc: Resetting bearer <eth:syzkaller0>
[  222.991138][T16870] tipc: Disabling bearer <eth:syzkaller0>
[  223.111299][T16874] netlink: 'syz.1.2778': attribute type 10 has an invalid length.
[  223.622337][T16876] __nla_validate_parse: 30 callbacks suppressed
[  223.622347][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'.
[  223.632256][T16880] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2780'.
[  223.651847][T16882] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.682544][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'.
[  223.685706][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2779'.
[  223.692646][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'.
[  223.696012][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2779'.
[  223.699287][T16883] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2779'.
[  223.705480][T16883] netlink: 'syz.0.2779': attribute type 16 has an invalid length.
[  223.708287][T16883] netlink: 'syz.0.2779': attribute type 17 has an invalid length.
[  223.713464][T16884] openvswitch: netlink: IP tunnel TTL not specified.
[  223.718209][ T5940] lo speed is unknown, defaulting to 1000
[  223.722015][ T5940] syz0: Port: 1 Link DOWN
[  223.723674][ T5940] lo speed is unknown, defaulting to 1000
[  223.920680][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'.
[  224.037704][T16905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2786'.
[  224.053740][T16902] hsr0: left allmulticast mode
[  224.055466][T16902] hsr_slave_0: left allmulticast mode
[  224.057506][T16902] hsr_slave_1: left allmulticast mode
[  224.060685][T16902] hsr0: left promiscuous mode
[  224.062439][T16902] macvlan0: left promiscuous mode
[  224.064120][T16902] macvlan0: left allmulticast mode
[  224.067502][ T5905] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.071065][ T5905] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.074387][ T5905] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.077276][ T5905] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.196947][T16918] sctp: [Deprecated]: syz.1.2788 (pid 16918) Use of int in maxseg socket option.
[  224.196947][T16918] Use struct sctp_assoc_value instead
[  224.207911][T16918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.287218][T16922] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode
[  224.290438][T16922] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  224.478908][T16924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.499756][T16924] tipc: Disabling bearer <eth:syzkaller0>
[  224.662601][T16940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2794'.
[  224.682261][T16943] netlink: 'syz.1.2795': attribute type 21 has an invalid length.
[  224.736834][T16953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.740469][T16953] syzkaller0: entered promiscuous mode
[  224.742505][T16953] syzkaller0: entered allmulticast mode
[  224.746805][T16953] tipc: Resetting bearer <eth:syzkaller0>
[  224.751153][T16953] syzkaller0: tun_net_xmit 90
[  224.754269][T16952] tipc: Resetting bearer <eth:syzkaller0>
[  224.756921][T16952] tipc: Disabling bearer <eth:syzkaller0>
[  224.901448][T16964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.904773][T16964] syzkaller0: entered promiscuous mode
[  224.906769][T16964] syzkaller0: entered allmulticast mode
[  224.971737][T16975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.974733][T16975] syzkaller0: entered promiscuous mode
[  224.976972][T16975] syzkaller0: entered allmulticast mode
[  224.982498][T16963] tipc: Resetting bearer <eth:syzkaller0>
[  224.988075][T16963] tipc: Disabling bearer <eth:syzkaller0>
[  224.994425][T16977] pim6reg1: entered promiscuous mode
[  224.996761][T16977] pim6reg1: entered allmulticast mode
[  225.001192][T16975] tipc: Resetting bearer <eth:syzkaller0>
[  225.006052][T16974] tipc: Resetting bearer <eth:syzkaller0>
[  225.009387][T16974] tipc: Disabling bearer <eth:syzkaller0>
[  225.180527][T16987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.242397][T16986] netlink: 'syz.1.2810': attribute type 10 has an invalid length.
[  225.247873][T16986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  225.252007][T16986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  225.966755][T16992] veth0_to_team: entered promiscuous mode
[  225.975999][T16992] veth0_to_team: entered allmulticast mode
[  226.061231][T16996] mac80211_hwsim hwsim68 wlan0: left promiscuous mode
[  226.141714][T17017] bridge11: entered promiscuous mode
[  226.146669][T17020] openvswitch: netlink: Unknown key attributes 2
[  226.230067][T17024] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  226.842130][T17070] lo speed is unknown, defaulting to 1000
[  226.940630][T17076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.949536][T17076] tipc: Disabling bearer <eth:syzkaller0>
[  226.996992][T17079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  227.198429][T17082] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  227.201861][T17091] erspan0: left allmulticast mode
[  227.210561][T17091] bridge0: left promiscuous mode
[  227.213503][T17091] bridge11: left promiscuous mode
[  246.185996][T17111] validate_nla: 6 callbacks suppressed
[  246.186005][T17111] netlink: 'syz.0.2839': attribute type 13 has an invalid length.
[  246.191615][T17111] gretap0: refused to change device tx_queue_len
[  246.194439][T17111] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  246.244742][T17118] netlink: 'syz.2.2843': attribute type 1 has an invalid length.
[  246.247350][T17118] netlink: 'syz.2.2843': attribute type 1 has an invalid length.
[  246.304002][T17121] netlink: 'syz.2.2843': attribute type 1 has an invalid length.
[  246.314508][T17121] 8021q: adding VLAN 0 to HW filter on device bond15
[  246.390462][T17124] __nla_validate_parse: 13 callbacks suppressed
[  246.390472][T17124] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2844'.
[  246.486937][T17131] netlink: 'syz.2.2845': attribute type 13 has an invalid length.
[  246.487316][T17134] netlink: 'syz.2.2845': attribute type 13 has an invalid length.
[  246.492428][T17134] netlink: 'syz.2.2845': attribute type 17 has an invalid length.
[  246.494427][T17131] netlink: 'syz.2.2845': attribute type 17 has an invalid length.
[  246.523140][T17134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.533274][T17131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.567210][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'.
[  246.593391][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'.
[  246.665802][T17140] wireguard0: entered promiscuous mode
[  246.668017][T17140] wireguard0: entered allmulticast mode
[  246.765269][T17144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2849'.
[  246.838311][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'.
[  246.855473][T17151] netlink: 'syz.2.2852': attribute type 11 has an invalid length.
[  246.862319][T17151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2852'.
[  246.887084][T17152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2852'.
[  246.919745][T17161] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  246.993933][T17164] lo speed is unknown, defaulting to 1000
[  247.007209][T17165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'.
[  247.117343][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'.
[  247.121250][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'.
[  247.302197][T17200] 8021q: adding VLAN 0 to HW filter on device bond17
[  248.985291][T17283] 8021q: adding VLAN 0 to HW filter on device bond16
[  249.038233][T17287] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  249.042551][T17287] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  249.072739][T17292] vlan3: entered allmulticast mode
[  249.074761][T17292] hsr_slave_1: entered allmulticast mode
[  249.220525][T17301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.223534][T17301] syzkaller0: entered promiscuous mode
[  249.225837][T17301] syzkaller0: entered allmulticast mode
[  249.695393][T17313] vlan2: entered allmulticast mode
[  249.697728][T17313] gretap0: entered allmulticast mode
[  249.977444][T17319] pim6reg: entered allmulticast mode
[  249.981696][T17318] pim6reg: left allmulticast mode
[  250.071382][T17301] tipc: Resetting bearer <eth:syzkaller0>
[  250.075572][T17301] tipc: Disabling bearer <eth:syzkaller0>
[  250.115698][T17321] 8021q: adding VLAN 0 to HW filter on device bond18
[  250.128470][T17324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.134740][T17324] syzkaller0: entered promiscuous mode
[  250.136491][T17324] syzkaller0: entered allmulticast mode
[  250.175911][T17324] tipc: Resetting bearer <eth:syzkaller0>
[  250.187261][T17321] bond18 (unregistering): Released all slaves
[  250.220842][T17323] tipc: Resetting bearer <eth:syzkaller0>
[  250.230660][T17323] tipc: Disabling bearer <eth:syzkaller0>
[  250.265303][T17327] syzkaller0: entered promiscuous mode
[  250.267283][T17327] syzkaller0: entered allmulticast mode
[  250.283404][T17329] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  250.290460][T17329] batadv_slave_0: entered promiscuous mode
[  250.348016][T17333] veth0_to_team: left promiscuous mode
[  250.351752][T17333] veth0_to_team: left allmulticast mode
[  250.355860][T17333] wireguard0: left promiscuous mode
[  250.357709][T17333] wireguard0: left allmulticast mode
[  250.397514][T17337] 8021q: VLANs not supported on ip_vti0
[  250.420910][T17337] dvmrp0: entered allmulticast mode
[  250.443286][T17345] ip6tnl4: entered promiscuous mode
[  250.445022][T17345] ip6tnl4: entered allmulticast mode
[  250.467777][T17349] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  250.473562][T17347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.477741][T17347] syzkaller0: entered promiscuous mode
[  250.482918][T17347] syzkaller0: entered allmulticast mode
[  250.543805][T17349] batadv_slave_0: entered promiscuous mode
[  251.311379][T17347] tipc: Resetting bearer <eth:syzkaller0>
[  251.317656][T17347] tipc: Disabling bearer <eth:syzkaller0>
[  251.324349][T17373] validate_nla: 13 callbacks suppressed
[  251.324362][T17373] netlink: 'syz.1.2908': attribute type 10 has an invalid length.
[  251.345820][T17375] netlink: 'syz.1.2909': attribute type 1 has an invalid length.
[  251.350743][T17375] netlink: 'syz.1.2909': attribute type 1 has an invalid length.
[  251.359878][T17375] netlink: 'syz.1.2909': attribute type 1 has an invalid length.
[  251.372654][T17375] 8021q: adding VLAN 0 to HW filter on device bond12
[  251.379670][T17375] bond12: (slave wlan0): Opening slave failed
[  251.386037][T17375] vlan0: entered allmulticast mode
[  251.387950][T17375] veth1: entered allmulticast mode
[  251.390798][T17375] bond12: (slave vlan0): Opening slave failed
[  251.477629][T17383] netlink: 'syz.1.2911': attribute type 12 has an invalid length.
[  251.480371][T17383] __nla_validate_parse: 30 callbacks suppressed
[  251.480379][T17383] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2911'.
[  251.536493][T17385] veth1_to_bond: entered allmulticast mode
[  251.540975][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'.
[  251.548044][T17385] veth1_to_bond (unregistering): left allmulticast mode
[  251.590617][T17389] dvmrp0: entered allmulticast mode
[  251.614628][T17392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.620052][T17394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.623342][T17395] syzkaller0: entered promiscuous mode
[  251.625158][T17395] syzkaller0: entered allmulticast mode
[  251.631560][T17392] tipc: Resetting bearer <eth:syzkaller0>
[  251.640017][T17394] tipc: Resetting bearer <eth:syzkaller0>
[  251.643894][T17391] tipc: Resetting bearer <eth:syzkaller0>
[  251.654580][T17391] tipc: Disabling bearer <eth:syzkaller0>
[  251.660931][T17393] tipc: Resetting bearer <eth:syzkaller0>
[  251.664308][T17393] tipc: Disabling bearer <eth:syzkaller0>
[  251.670255][T17403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.673306][T17403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2917'.
[  251.678230][T17403] syzkaller0: entered promiscuous mode
[  251.684516][T17403] syzkaller0: entered allmulticast mode
[  251.690237][T17403] tipc: Resetting bearer <eth:syzkaller0>
[  251.694345][T17402] tipc: Resetting bearer <eth:syzkaller0>
[  251.697397][T17402] tipc: Disabling bearer <eth:syzkaller0>
[  251.779361][T17410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.782599][T17410] syzkaller0: entered promiscuous mode
[  251.784835][T17410] syzkaller0: entered allmulticast mode
[  251.794832][T17410] tipc: Resetting bearer <eth:syzkaller0>
[  251.798276][T17409] tipc: Resetting bearer <eth:syzkaller0>
[  251.803858][T17409] tipc: Disabling bearer <eth:syzkaller0>
[  251.839674][T17415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.850202][T17415] syzkaller0: entered promiscuous mode
[  251.852070][T17415] syzkaller0: entered allmulticast mode
[  251.863388][T17415] tipc: Resetting bearer <eth:syzkaller0>
[  251.866651][T17414] tipc: Resetting bearer <eth:syzkaller0>
[  251.870280][T17414] tipc: Disabling bearer <eth:syzkaller0>
[  251.876365][T17418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.880531][T17418] syzkaller0: entered promiscuous mode
[  251.882576][T17418] syzkaller0: entered allmulticast mode
[  251.888057][T17418] tipc: Resetting bearer <eth:syzkaller0>
[  251.891950][T17417] tipc: Resetting bearer <eth:syzkaller0>
[  251.895733][T17417] tipc: Disabling bearer <eth:syzkaller0>
[  252.011519][T17428] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2925'.
[  252.059609][T17432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  252.159554][T17450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.162832][T17450] syzkaller0: entered promiscuous mode
[  252.165119][T17450] syzkaller0: entered allmulticast mode
[  252.173561][T17450] tipc: Resetting bearer <eth:syzkaller0>
[  252.176591][T17449] tipc: Resetting bearer <eth:syzkaller0>
[  252.180144][T17449] tipc: Disabling bearer <eth:syzkaller0>
[  252.196610][T17451] netlink: 'syz.1.2929': attribute type 10 has an invalid length.
[  252.424953][T17453] dvmrp8: entered allmulticast mode
[  252.429695][T17453] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2931'.
[  252.434604][T17452] dvmrp8: left allmulticast mode
[  252.508393][T17455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.511636][T17455] syzkaller0: entered promiscuous mode
[  252.514021][T17455] syzkaller0: entered allmulticast mode
[  252.521338][T17455] tipc: Resetting bearer <eth:syzkaller0>
[  252.525598][T17454] tipc: Resetting bearer <eth:syzkaller0>
[  252.529075][T17454] tipc: Disabling bearer <eth:syzkaller0>
[  252.673070][T17464] netlink: 'syz.0.2934': attribute type 10 has an invalid length.
[  252.705142][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'.
[  252.748273][T17473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2937'.
[  252.824601][T17476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.827888][T17476] syzkaller0: entered promiscuous mode
[  252.830269][T17476] syzkaller0: entered allmulticast mode
[  253.025322][T17479] netlink: 'syz.1.2939': attribute type 10 has an invalid length.
[  253.052435][T17482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.079803][T17483] syzkaller0: entered promiscuous mode
[  253.081735][T17483] syzkaller0: entered allmulticast mode
[  253.090828][T17483] tipc: Resetting bearer <eth:syzkaller0>
[  253.123982][T17483] tipc: Disabling bearer <eth:syzkaller0>
[  253.213983][T17487] lo speed is unknown, defaulting to 1000
[  253.645523][T17498] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  253.650706][T17498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.653650][T17499] syzkaller0: entered promiscuous mode
[  253.655435][T17499] syzkaller0: entered allmulticast mode
[  253.668045][T17499] tipc: Resetting bearer <eth:syzkaller0>
[  253.681065][T17499] tipc: Disabling bearer <eth:syzkaller0>
[  253.686759][T17476] tipc: Resetting bearer <eth:syzkaller0>
[  253.690864][T17476] tipc: Disabling bearer <eth:syzkaller0>
[  253.722431][T17503] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2945'.
[  253.732460][T17503] ip6tnl4: left promiscuous mode
[  253.734045][T17503] ip6tnl4: left allmulticast mode
[  253.775147][T17514] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2948'.
[  253.818521][T17518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.823351][T17518] syzkaller0: entered promiscuous mode
[  253.825180][T17518] syzkaller0: entered allmulticast mode
[  253.866607][T17520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2950'.
[  253.886294][T17517] tipc: Resetting bearer <eth:syzkaller0>
[  253.889922][T17517] tipc: Disabling bearer <eth:syzkaller0>
[  253.896498][T17526] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  253.940415][T17530] netlink: 'syz.2.2953': attribute type 13 has an invalid length.
[  253.943381][T17530] netlink: 'syz.2.2953': attribute type 17 has an invalid length.
[  253.949196][T17516] block nbd1: server does not support multiple connections per device.
[  253.953801][T17516] block nbd1: shutting down sockets
[  253.956350][T17530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.033944][T17543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.046366][T17543] syzkaller0: entered promiscuous mode
[  254.048324][T17543] syzkaller0: entered allmulticast mode
[  254.164477][T17563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.166955][T17564] syzkaller0: entered promiscuous mode
[  254.168872][T17564] syzkaller0: entered allmulticast mode
[  254.174982][T17563] tipc: Resetting bearer <eth:syzkaller0>
[  254.181325][T17562] tipc: Resetting bearer <eth:syzkaller0>
[  254.185405][T17562] tipc: Disabling bearer <eth:syzkaller0>
[  254.310662][T17579] syzkaller0: entered promiscuous mode
[  254.313018][T17579] syzkaller0: entered allmulticast mode
[  254.321365][ T5940] lo speed is unknown, defaulting to 1000
[  254.323534][ T5940] syz0: Port: 1 Link ACTIVE
[  254.325495][ T5940] lo speed is unknown, defaulting to 1000
[  254.871541][T17543] tipc: Resetting bearer <eth:syzkaller0>
[  254.877737][T17543] tipc: Disabling bearer <eth:syzkaller0>
[  255.018459][T17631] dvmrp1: entered allmulticast mode
[  255.485635][T17638] dummy0: entered promiscuous mode
[  255.487890][T17638] vlan3: entered promiscuous mode
[  255.583272][T17646] smc: net device bond0 erased user defined pnetid SYZ2
[  255.760455][T17654] bond0 (unregistering): Released all slaves
[  256.239908][T17671] veth7: entered promiscuous mode
[  256.401349][T17677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.409705][T17676] tipc: Disabling bearer <eth:syzkaller0>
[  256.507801][ T5258] lo speed is unknown, defaulting to 1000
[  256.510062][ T5258] syz0: Port: 1 Link DOWN
[  256.519046][ T5258] lo speed is unknown, defaulting to 1000
[  256.632307][T17701] __nla_validate_parse: 14 callbacks suppressed
[  256.632323][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2996'.
[  256.641318][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'.
[  256.654622][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2999'.
[  256.680145][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2999'.
[  256.820422][T17708] syz.0.3000 (17708) used obsolete PPPIOCDETACH ioctl
[  256.830457][T17708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3000'.
[  256.836145][T17708] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3000'.
[  256.894636][T17717] validate_nla: 7 callbacks suppressed
[  256.894650][T17717] netlink: 'syz.1.3002': attribute type 22 has an invalid length.
[  256.900504][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'.
[  256.908764][T17717] netlink: 'syz.1.3002': attribute type 22 has an invalid length.
[  256.911702][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'.
[  256.942328][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'.
[  256.945448][T17721] netlink: 'syz.1.3003': attribute type 15 has an invalid length.
[  256.948289][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'.
[  256.953038][T17721] netlink: 'syz.1.3003': attribute type 15 has an invalid length.
[  257.186059][T17749] netlink: 'syz.0.3010': attribute type 1 has an invalid length.
[  257.211210][T17753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  257.530445][T17776] batadv_slave_0: left promiscuous mode
[  257.574232][T17778] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  257.577244][T17778] CPU: 1 UID: 0 PID: 17778 Comm: syz.2.3018 Not tainted syzkaller #0 PREEMPT(full) 
[  257.577262][T17778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.577270][T17778] Call Trace:
[  257.577275][T17778]  <TASK>
[  257.577280][T17778]  dump_stack_lvl+0x189/0x250
[  257.577301][T17778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.577315][T17778]  ? __pfx__printk+0x10/0x10
[  257.577331][T17778]  ? kernfs_root+0x1c/0x230
[  257.577344][T17778]  ? kernfs_path_from_node+0x2f/0x290
[  257.577358][T17778]  ? kernfs_path_from_node+0x250/0x290
[  257.577369][T17778]  ? kernfs_path_from_node+0x2f/0x290
[  257.577384][T17778]  sysfs_warn_dup+0x8e/0xa0
[  257.577397][T17778]  sysfs_do_create_link_sd+0xc0/0x110
[  257.577412][T17778]  device_add_class_symlinks+0x1cf/0x240
[  257.577424][T17778]  device_add+0x475/0xb50
[  257.577438][T17778]  wiphy_register+0x1ba6/0x28d0
[  257.577457][T17778]  ? __pfx_wiphy_register+0x10/0x10
[  257.577473][T17778]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  257.577487][T17778]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  257.577507][T17778]  ieee80211_register_hw+0x3484/0x4100
[  257.577525][T17778]  ? ieee80211_register_hw+0x14a1/0x4100
[  257.577541][T17778]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  257.577556][T17778]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  257.577573][T17778]  ? __hrtimer_setup+0x187/0x210
[  257.577584][T17778]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  257.577601][T17778]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  257.577623][T17778]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  257.577639][T17778]  ? trace_kmalloc+0x1f/0xd0
[  257.577652][T17778]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  257.577669][T17778]  ? kstrndup+0xbf/0x160
[  257.577683][T17778]  hwsim_new_radio_nl+0xea4/0x1b10
[  257.577699][T17778]  ? __pfx___nla_validate_parse+0x10/0x10
[  257.577722][T17778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  257.577738][T17778]  ? __nla_parse+0x40/0x60
[  257.577755][T17778]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  257.577771][T17778]  genl_family_rcv_msg_doit+0x215/0x300
[  257.577789][T17778]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  257.577805][T17778]  ? bpf_lsm_capable+0x9/0x20
[  257.577821][T17778]  ? security_capable+0x7e/0x2e0
[  257.577840][T17778]  genl_rcv_msg+0x60e/0x790
[  257.577854][T17778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  257.577867][T17778]  ? __kasan_slab_alloc+0x6c/0x80
[  257.577881][T17778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  257.577895][T17778]  ? __netlink_lookup+0xbd/0x810
[  257.577905][T17778]  ? rcu_is_watching+0x15/0xb0
[  257.577917][T17778]  netlink_rcv_skb+0x208/0x470
[  257.577935][T17778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  257.577946][T17778]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  257.577966][T17778]  ? lock_release+0x4b/0x3e0
[  257.577984][T17778]  ? down_read+0x1ad/0x2e0
[  257.577995][T17778]  genl_rcv+0x28/0x40
[  257.578007][T17778]  netlink_unicast+0x82f/0x9e0
[  257.578023][T17778]  ? __pfx_netlink_unicast+0x10/0x10
[  257.578038][T17778]  ? netlink_sendmsg+0x642/0xb30
[  257.578090][T17778]  ? skb_put+0x11b/0x210
[  257.578104][T17778]  netlink_sendmsg+0x805/0xb30
[  257.578124][T17778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.578143][T17778]  ? futex_unqueue+0x22/0x240
[  257.578158][T17778]  ? aa_sock_msg_perm+0xf1/0x1d0
[  257.578167][T17778]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  257.578182][T17778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.578198][T17778]  __sock_sendmsg+0x21c/0x270
[  257.578214][T17778]  ____sys_sendmsg+0x505/0x830
[  257.578226][T17778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.578242][T17778]  ? import_iovec+0x74/0xa0
[  257.578256][T17778]  ___sys_sendmsg+0x21f/0x2a0
[  257.578269][T17778]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.578281][T17778]  ? futex_wait+0x285/0x360
[  257.578304][T17778]  ? __fget_files+0x2a/0x420
[  257.578321][T17778]  ? __fget_files+0x3a0/0x420
[  257.578339][T17778]  __x64_sys_sendmsg+0x19b/0x260
[  257.578353][T17778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  257.578366][T17778]  ? rcu_is_watching+0x15/0xb0
[  257.578380][T17778]  ? rcu_is_watching+0x15/0xb0
[  257.578392][T17778]  do_syscall_64+0xfa/0x3b0
[  257.578409][T17778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.578441][T17778]  ? exc_page_fault+0x9f/0xf0
[  257.578455][T17778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.578468][T17778] RIP: 0033:0x7f1a2578ebe9
[  257.578479][T17778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.578491][T17778] RSP: 002b:00007f1a266a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.578505][T17778] RAX: ffffffffffffffda RBX: 00007f1a259b5fa0 RCX: 00007f1a2578ebe9
[  257.578514][T17778] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  257.578523][T17778] RBP: 00007f1a25811e19 R08: 0000000000000000 R09: 0000000000000000
[  257.578530][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.578537][T17778] R13: 00007f1a259b6038 R14: 00007f1a259b5fa0 R15: 00007ffebe88b878
[  257.578551][T17778]  </TASK>
[  257.805060][T17790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.807871][T17790] syzkaller0: entered promiscuous mode
[  257.810490][T17790] syzkaller0: entered allmulticast mode
[  257.814099][T17791] tipc: Resetting bearer <eth:syzkaller0>
[  257.830929][T17788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.835274][T17789] tipc: Resetting bearer <eth:syzkaller0>
[  257.838499][T17789] tipc: Disabling bearer <eth:syzkaller0>
[  257.842723][T17788] syzkaller0: entered promiscuous mode
[  257.844946][T17788] syzkaller0: entered allmulticast mode
[  257.849669][T17788] tipc: Resetting bearer <eth:syzkaller0>
[  257.854310][T17787] tipc: Resetting bearer <eth:syzkaller0>
[  257.857512][T17787] tipc: Disabling bearer <eth:syzkaller0>
[  258.009621][T17814] netlink: 'syz.1.3024': attribute type 10 has an invalid length.
[  258.772614][T17849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.775518][T17849] syzkaller0: entered promiscuous mode
[  258.777654][T17849] syzkaller0: entered allmulticast mode
[  258.789105][T17849] tipc: Resetting bearer <eth:syzkaller0>
[  258.797826][T17849] tipc: Resetting bearer <eth:syzkaller0>
[  258.802568][T17849] tipc: Disabling bearer <eth:syzkaller0>
[  258.850126][T17851] netlink: 'syz.1.3038': attribute type 1 has an invalid length.
[  258.893418][T17851] bond13 (unregistering): Released all slaves
[  258.965912][T17864] netlink: 'syz.1.3041': attribute type 10 has an invalid length.
[  259.071430][T17874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.078567][ T5258] lo speed is unknown, defaulting to 1000
[  259.091758][ T5258] syz0: Port: 1 Link ACTIVE
[  259.109551][ T5258] lo speed is unknown, defaulting to 1000
[  259.166433][T17886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.173613][T17886] syzkaller0: entered promiscuous mode
[  259.176375][T17886] syzkaller0: entered allmulticast mode
[  259.187705][T17886] tipc: Resetting bearer <eth:syzkaller0>
[  259.193876][T17885] tipc: Resetting bearer <eth:syzkaller0>
[  259.198870][T17885] tipc: Disabling bearer <eth:syzkaller0>
[  259.204443][T17888] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  259.358541][T17904] syzkaller0: entered promiscuous mode
[  259.362872][T17904] syzkaller0: entered allmulticast mode
[  259.386386][T17907] netlink: 'syz.2.3052': attribute type 13 has an invalid length.
[  259.463681][T17910] mac80211_hwsim hwsim116 wlan1: entered allmulticast mode
[  259.468831][T17911] netlink: 'syz.2.3053': attribute type 10 has an invalid length.
[  259.661601][T17931] 8021q: adding VLAN 0 to HW filter on device bond13
[  259.666291][T17931] bond13: (slave wlan0): Opening slave failed
[  259.696339][T17935] bridge0: entered promiscuous mode
[  260.104751][T17950] dvmrp0: left allmulticast mode
[  260.158477][T17950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.355240][T17972] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.396923][T17978] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  260.561800][T17981] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  261.297718][T18002] ip6tnl4: entered promiscuous mode
[  261.301359][T18002] ip6tnl4: entered allmulticast mode
[  261.327690][T18006] ip6gre5: entered allmulticast mode
[  261.347981][T18008] lo speed is unknown, defaulting to 1000
[  261.456126][T18019] syzkaller0: entered promiscuous mode
[  261.458074][T18019] syzkaller0: entered allmulticast mode
[  261.648148][T18024] __nla_validate_parse: 31 callbacks suppressed
[  261.648159][T18024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3087'.
[  261.673271][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  261.732123][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3089'.
[  261.746016][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3089'.
[  261.907959][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3094'.
[  261.983140][T18061] validate_nla: 17 callbacks suppressed
[  261.983150][T18061] netlink: 'syz.2.3096': attribute type 39 has an invalid length.
[  262.083558][T18076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.120145][T18078] netlink: 4700 bytes leftover after parsing attributes in process `syz.1.3102'.
[  262.141724][T18081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.164203][ T5235] Bluetooth: hci2: link tx timeout
[  262.165933][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  262.200610][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3102'.
[  262.247225][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'.
[  262.251939][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'.
[  262.274539][T18095] netlink: 'syz.1.3107': attribute type 1 has an invalid length.
[  262.280847][T18095] netlink: 'syz.1.3107': attribute type 1 has an invalid length.
[  262.284678][T18095] netlink: 'syz.1.3107': attribute type 1 has an invalid length.
[  262.297003][T18095] 8021q: adding VLAN 0 to HW filter on device bond14
[  262.301110][T18096] bond14: (slave wlan0): Opening slave failed
[  262.346879][T18101] netlink: 'syz.0.3109': attribute type 10 has an invalid length.
[  262.371653][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  262.381273][T18112] openvswitch: netlink: Flow actions attr not present in new flow.
[  262.464766][T18125] lo speed is unknown, defaulting to 1000
[  262.468276][T18128] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  262.471725][T18128] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  262.478416][T18127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.482140][T18127] syzkaller0: entered promiscuous mode
[  262.484042][T18127] syzkaller0: entered allmulticast mode
[  262.501000][T18127] tipc: Resetting bearer <eth:syzkaller0>
[  262.505045][T18126] tipc: Resetting bearer <eth:syzkaller0>
[  262.509613][T18126] tipc: Disabling bearer <eth:syzkaller0>
[  262.512152][T18130] netlink: 'syz.1.3117': attribute type 13 has an invalid length.
[  262.515341][T18130] netlink: 'syz.1.3117': attribute type 17 has an invalid length.
[  262.714131][T18134] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode
[  262.726985][T18136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.731046][T18136] syzkaller0: entered promiscuous mode
[  262.733102][T18136] syzkaller0: entered allmulticast mode
[  262.739444][T18135] tipc: Resetting bearer <eth:syzkaller0>
[  262.743085][T18135] tipc: Disabling bearer <eth:syzkaller0>
[  262.859913][T18141] netlink: 'syz.1.3121': attribute type 10 has an invalid length.
[  263.016228][T18154] Bluetooth: MGMT ver 1.23
[  263.047151][T18159] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  263.051353][T18159] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  263.054886][T18159] CPU: 1 UID: 0 PID: 18159 Comm: syz.1.3126 Not tainted syzkaller #0 PREEMPT(full) 
[  263.058318][T18159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.061755][T18159] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  263.063519][T18159] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 56 68 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 1f 69 01 f8 4d 89 3e
[  263.070609][T18159] RSP: 0018:ffffc900026ef0e0 EFLAGS: 00010246
[  263.072963][T18159] RAX: 0000000000000000 RBX: 1ffff110229bea46 RCX: dffffc0000000000
[  263.076191][T18159] RDX: ffffc90003b31000 RSI: 00000000000001a1 RDI: 00000000000001a2
[  263.079276][T18159] RBP: ffffc900026ef230 R08: ffff8880210d8000 R09: 0000000000000002
[  263.082355][T18159] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110229bea46
[  263.085584][T18159] R13: ffff888114df5230 R14: 0000000000000000 R15: ffff888114df5228
[  263.088741][T18159] FS:  00007f063b9696c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  263.092272][T18159] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.094864][T18159] CR2: 000000110c2ae5e0 CR3: 0000000037fe4000 CR4: 00000000000006f0
[  263.097996][T18159] Call Trace:
[  263.099437][T18159]  <TASK>
[  263.100564][T18159]  ? xfrm_alloc_spi+0x2a0/0xf30
[  263.102553][T18159]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  263.104624][T18159]  ? xfrm_find_acq+0x87/0xa0
[  263.106457][T18159]  xfrm_alloc_userspi+0x70b/0xc90
[  263.108213][T18159]  ? apparmor_capable+0x137/0x1b0
[  263.109984][T18159]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  263.111785][T18159]  ? __nla_parse+0x40/0x60
[  263.113420][T18159]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.115101][T18159]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.117190][T18159]  ? __pfx___mutex_trylock_common+0x10/0x10
[  263.119241][T18159]  ? kasan_save_track+0x4f/0x80
[  263.120857][T18159]  ? rcu_is_watching+0x15/0xb0
[  263.122690][T18159]  ? trace_contention_end+0x39/0x120
[  263.124608][T18159]  ? __mutex_lock+0x335/0x1350
[  263.126494][T18159]  netlink_rcv_skb+0x208/0x470
[  263.128403][T18159]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.130232][T18159]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.131958][T18159]  ? lock_release+0x4b/0x3e0
[  263.133642][T18159]  ? net_generic+0x1e/0x240
[  263.135259][T18159]  ? net_generic+0x1e/0x240
[  263.136780][T18159]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.138534][T18159]  xfrm_netlink_rcv+0x79/0x90
[  263.140324][T18159]  netlink_unicast+0x82f/0x9e0
[  263.142047][T18159]  ? __pfx_netlink_unicast+0x10/0x10
[  263.143934][T18159]  ? netlink_sendmsg+0x642/0xb30
[  263.145661][T18159]  ? skb_put+0x11b/0x210
[  263.147204][T18159]  netlink_sendmsg+0x805/0xb30
[  263.148907][T18159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.151017][T18159]  ? futex_unqueue+0x22/0x240
[  263.153015][T18159]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.155091][T18159]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.157280][T18159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.159310][T18159]  __sock_sendmsg+0x21c/0x270
[  263.161319][T18159]  ____sys_sendmsg+0x505/0x830
[  263.163266][T18159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.165352][T18159]  ? import_iovec+0x74/0xa0
[  263.167066][T18159]  ___sys_sendmsg+0x21f/0x2a0
[  263.168710][T18159]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.170595][T18159]  ? futex_wait+0x285/0x360
[  263.172251][T18159]  ? __fget_files+0x2a/0x420
[  263.173825][T18159]  ? __fget_files+0x3a0/0x420
[  263.175589][T18159]  __x64_sys_sendmsg+0x19b/0x260
[  263.177309][T18159]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.179268][T18159]  ? rcu_is_watching+0x15/0xb0
[  263.180999][T18159]  ? rcu_is_watching+0x15/0xb0
[  263.182523][T18159]  do_syscall_64+0xfa/0x3b0
[  263.183972][T18159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.185908][T18159]  ? exc_page_fault+0x9f/0xf0
[  263.187670][T18159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.189993][T18159] RIP: 0033:0x7f063ab8ebe9
[  263.191697][T18159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.198601][T18159] RSP: 002b:00007f063b969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.201570][T18159] RAX: ffffffffffffffda RBX: 00007f063adb5fa0 RCX: 00007f063ab8ebe9
[  263.204493][T18159] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  263.207220][T18159] RBP: 00007f063ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  263.210287][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.213440][T18159] R13: 00007f063adb6038 R14: 00007f063adb5fa0 R15: 00007ffc0c779718
[  263.216407][T18159]  </TASK>
[  263.217590][T18159] Modules linked in:
[  263.219358][T18159] ---[ end trace 0000000000000000 ]---
[  263.221446][T18159] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  263.223426][T18159] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 56 68 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 1f 69 01 f8 4d 89 3e
[  263.230483][T18159] RSP: 0018:ffffc900026ef0e0 EFLAGS: 00010246
[  263.232677][T18159] RAX: 0000000000000000 RBX: 1ffff110229bea46 RCX: dffffc0000000000
[  263.235525][T18159] RDX: ffffc90003b31000 RSI: 00000000000001a1 RDI: 00000000000001a2
[  263.238184][T18159] RBP: ffffc900026ef230 R08: ffff8880210d8000 R09: 0000000000000002
[  263.241433][T18159] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110229bea46
[  263.244297][T18159] R13: ffff888114df5230 R14: 0000000000000000 R15: ffff888114df5228
[  263.247256][T18159] FS:  00007f063b9696c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  263.250636][T18159] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.253150][T18159] CR2: 000000110c2ae5e0 CR3: 0000000037fe4000 CR4: 00000000000006f0
[  263.255990][T18159] Kernel panic - not syncing: Fatal exception in interrupt
[  263.259535][T18159] Kernel Offset: disabled
[  263.261188][T18159] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:14:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff11026cc7f61 RCX=ffff88810c631cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002b2f600 RSP=ffffc90002b2f480
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44ce6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fca6d4cf6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556f006808 CR3=0000000114c9c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1a25812e53
XMM06=0000000000000000 00007f1a25812e4d XMM07=0000000000000000 00007f1a25812e61
XMM08=0000000000000000 00007f1a25812ee7 XMM09=0000000000000000 00007f1a25812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001325 RDI=0000000000001326 RBP=00000000000003f9 RSP=ffffc900026ee870
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f063b9696c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ae5e0 CR3=0000000037fe4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f063ad87498 00007f063ad87470 XMM03=00007f063ad874a8 00007f063ad874a0
XMM04=00007f063b8ed100 00007f063ad87460 XMM05=00007f063ad87478 00007f063ad874c0
XMM06=00007f063ad874b8 00007f063ad874b0 XMM07=00007f063ad874a8 00007f063ad874a0
XMM08=0000000000000000 00007f063ac12ee7 XMM09=0000000000000000 00007f063ac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
