last executing test programs:

1.140126226s ago: executing program 2 (id=2905):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x16}]}}]}, 0x3c}}, 0x20004055)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.072525773s ago: executing program 2 (id=2909):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c", @ANYRES16=r4, @ANYRES16=r3], 0x21c}}, 0x0)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r3, &(0x7f00000006c0)=r6, 0x12)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000402293009b9756c66a90c65aaed41c266b930d6b4cf7501a47e28c69480956ad19766cf29f352cb2aa2925b66fdb0ca15835de675bebdcb2a4c952eedba17dedebba948b7c62669d084a00aefcf5ce77e5bdcc92de42a8800ec53427470a368e0719a619e30e68562624b130d43535b3d1e7199231a6740455024aec9c288d78bc70ad124327e7f232fdba16f1b71f27c07c68a08c5a6daf880c6fb9bd7385fbcc7d91e5509b84a7867d7fd82968a76b3aeecb38c0a00ddedfe284741e2cbf163a2b36214f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.003560719s ago: executing program 1 (id=2912):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "d14d9efcc1dd883e", "406240c374f9c22c58126adae6a1efc539de2d4a6b34e4310a662511f80599ba", "383ecbc3", "5d295977b06c682c"}, 0x38)

941.621483ms ago: executing program 1 (id=2914):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syz_tun\x00', @multicast})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08000800070002000000140000004620002c00680000030690780a010100ac1414bb000000004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={<r4=>0x0, @local, @local}, &(0x7f0000000080)=0x2)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs})
ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x35, r4})
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = getpid()
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000200)=r10)
ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000002800))
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000040)={0x20}, 0x8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
socket(0xa, 0x1, 0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r5, 0x8916, &(0x7f0000000000))

774.56539ms ago: executing program 2 (id=2917):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00)
sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f236ec70a", 0x7}], 0x2}}], 0x1, 0xc0)
sendmsg$inet(r0, 0x0, 0x44000)

773.120012ms ago: executing program 2 (id=2918):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x2b, &(0x7f0000000040)}, 0x1)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)

310.913567ms ago: executing program 0 (id=2926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r7, {}, {0x5, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x40000003, 0x3, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = socket(0x2c, 0x5, 0x5)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={<r9=>0x0, 0x4, 0x4, 0x3}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000300)={r9, 0x3}, 0x8)

308.563145ms ago: executing program 0 (id=2927):
r0 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000002380)="c9", 0x1)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
socket(0x1a, 0x80000, 0xc)

234.448325ms ago: executing program 0 (id=2928):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xaf}}, 0xc000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket(0x10, 0x803, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="603aef4c5ceb2cf7b767335e992c77105b9d4a486365637c7f7bc5c7e9ec788c654c6f1c97145d4a10af2788f5ef734fa2a401ee1fc77b97c05f6a7fb2096ff528dc6c659bd5c814", &(0x7f0000000140)=""/43, 0x2}, 0x20)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xaf}}, 0xc000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
socket(0x10, 0x803, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="603aef4c5ceb2cf7b767335e992c77105b9d4a486365637c7f7bc5c7e9ec788c654c6f1c97145d4a10af2788f5ef734fa2a401ee1fc77b97c05f6a7fb2096ff528dc6c659bd5c814", &(0x7f0000000140)=""/43, 0x2}, 0x20) (async)
socket$inet6(0xa, 0x3, 0x8000000003c) (async)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async)

233.59943ms ago: executing program 0 (id=2929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c000004"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff99}, 0xfffffffffffffd59)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r7=>0x0})
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

232.000427ms ago: executing program 0 (id=2930):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
listen(r3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x5f}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r6, 0x0) (async)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r6, 0x0)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)

163.924634ms ago: executing program 0 (id=2931):
socket(0x2, 0x2, 0x1)
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140))
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x5, 0x4)
connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0xa, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000003e00010326"], 0x20}}, 0x8004)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x40502}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r3, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)
unshare(0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
preadv(r10, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000036000000000000000000000091123700000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
write$tun(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1507)

162.960234ms ago: executing program 2 (id=2932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
bind$llc(r3, &(0x7f0000000780)={0x1a, 0x4, 0x0, 0x45, 0x6, 0x1}, 0x10) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4}, 0x10}, 0x94)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="4fada68a0000000000000500027dd600"/26], 0x28}}, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="834c45c768c26964e62b26e3caa1efeb035f0c8d982dccce4bb13530f6dd1ffa5943a6f47fef8e31d897124e958bcc5565eaa1c2060c46f358f98ec3b04586295d13f6eda3a91c5148153b9c2c9b93bb6325f75c1d0fb50a619b8b9031b996737f0addec8748cc2c5baf11bd7495b9ad25968b374f2e1e385b8bdbaa94e1b5c571ed74f6bf814a265e9210860cef09e80cb251cc0a9935f5bfded1a06c0003da0b73fc001a10da0a67fa78016cc0f158be98b918e6ea481041fd37025b704b7d058235e6baf312e95fbb90b935c711fca6d5360d476d3695bacb52eaeebe9006ad3dbdb1062fda572e1ef792a4522f9559d88476d3449a2f"], &(0x7f0000000040)='syzkaller\x00', 0xcbf6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0xf}, 0x94) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000080)=ANY=[], 0x190)
r12 = socket(0x10, 0x803, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r13=>0x0})
recvfrom(r4, &(0x7f0000000580)=""/79, 0x4f, 0x2, &(0x7f0000000880)=@can={0x1d, r13}, 0x80) (async)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000900)={r0, r1})
sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'})
close(r2) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d000a80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

81.495549ms ago: executing program 2 (id=2933):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x40810)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x40}, 0x94)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r8, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x108}, [@default, @bcast, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
socket$xdp(0x2c, 0x3, 0x0)

80.354657ms ago: executing program 1 (id=2934):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x1, 0x20080058) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@ipv4_getnetconf={0x44, 0x52, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfffffff8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x44}}, 0x40040)

2.894367ms ago: executing program 1 (id=2935):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000fb7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000004500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c000020000280140003000000000000000000d5", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c002}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x404c0d1)

1.888766ms ago: executing program 1 (id=2936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910000700000000620000000000000095107400000000008facdfd7ebdbdb0e342ddf85668c8bcb4a3dda2d612d16f1716a362aad118a81e75b9d7945e77d5b477e77d13d75e682617c0481090c83376431ed74668bd6d0550fa824e0e0b12f44f06fd54191bcad3808af6d77161268be5f07b8cc5cbf036c38d650"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x64}, 0x21)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x28}, 0x1, 0x0, 0x0, 0x8e74df65eb9cb9af}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x29) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async, rerun: 32)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async, rerun: 32)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000500)=[{&(0x7f0000000a40)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004647a77cb000400000007fdd411efc408000400000000", 0x39}, {0x0}], 0x2) (async)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff060002000100000045000000250000eb00000000000000f93132000000000000", 0x30}], 0x1)

0s ago: executing program 1 (id=2937):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @remote, 0x7}, 0x1c) (async)
listen(r0, 0x39c) (async)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="05b001"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac00", @ANYRES16=r6, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000a00e80008021100000000002800178004000100040005"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810) (async)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async)
write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x20]}}, 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
recvfrom$inet(r8, &(0x7f0000000000)=""/30, 0x1e, 0x2, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5)

kernel console output (not intermixed with test programs):

68122][T12327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1741'.
[  138.672057][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'.
[  138.677034][T12327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1741'.
[  138.681339][T12327] validate_nla: 14 callbacks suppressed
[  138.681348][T12327] netlink: 'syz.1.1741': attribute type 16 has an invalid length.
[  138.686353][T12327] netlink: 'syz.1.1741': attribute type 17 has an invalid length.
[  138.690673][T12327] tipc: Resetting bearer <eth:syzkaller0>
[  138.737028][T12329] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1742'.
[  138.839820][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1743'.
[  138.857568][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'.
[  138.868154][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  138.911902][T12351] veth0: entered promiscuous mode
[  138.931598][T12354] veth0: left promiscuous mode
[  138.956927][T12359] xfrm0 speed is unknown, defaulting to 1000
[  138.978652][T12362] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  138.981308][T12362] netlink: 'syz.1.1750': attribute type 4 has an invalid length.
[  138.984593][T12362] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1750'.
[  139.124527][T12368] netlink: 'syz.2.1752': attribute type 1 has an invalid length.
[  139.212899][T12378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.215489][T12378] syzkaller0: entered promiscuous mode
[  139.217760][T12378] syzkaller0: entered allmulticast mode
[  139.222612][T12378] tipc: Resetting bearer <eth:syzkaller0>
[  139.225243][T12377] tipc: Resetting bearer <eth:syzkaller0>
[  139.228727][T12377] tipc: Disabling bearer <eth:syzkaller0>
[  139.232082][T12379] netlink: 'syz.1.1754': attribute type 10 has an invalid length.
[  139.240238][T12379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.246115][T12379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.257843][T12381] gtp6: entered promiscuous mode
[  139.259529][T12381] gtp6: entered allmulticast mode
[  139.359140][T12390] netlink: 'syz.0.1758': attribute type 12 has an invalid length.
[  139.406419][T12398] 8021q: VLANs not supported on wlan1
[  139.467897][T12410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.470451][T12410] syzkaller0: entered promiscuous mode
[  139.472329][T12410] syzkaller0: entered allmulticast mode
[  139.526645][T12412] tipc: Resetting bearer <eth:syzkaller0>
[  139.531487][T12412] tipc: Disabling bearer <eth:syzkaller0>
[  139.729682][T12419] netlink: 'syz.0.1765': attribute type 13 has an invalid length.
[  139.732968][T12419] netlink: 'syz.0.1765': attribute type 17 has an invalid length.
[  139.740844][T12419] gretap0: left promiscuous mode
[  139.749802][T12419] 8021q: adding VLAN 0 to HW filter on device team0
[  139.753127][T12419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.859128][T12423] netlink: 'syz.2.1766': attribute type 39 has an invalid length.
[  140.347488][T12446] 8021q: adding VLAN 0 to HW filter on device bond11
[  140.359318][T12446] veth1: entered promiscuous mode
[  140.363863][T12446] bond11: (slave veth1): Enslaving as an active interface with a down link
[  140.369075][T12446] erspan0: entered allmulticast mode
[  140.373648][T12446] bond11: (slave erspan0): making interface the new active one
[  140.377849][T12446] erspan0: entered promiscuous mode
[  140.380419][T12446] bond11: (slave erspan0): Enslaving as an active interface with an up link
[  140.413113][T12449] batadv0: entered allmulticast mode
[  140.415491][T12449] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  140.492568][T12451] tipc: New replicast peer: 255.255.255.255
[  140.495389][T12451] tipc: Enabled bearer <udp:syz2>, priority 10
[  140.501442][T12451] vlan1: entered allmulticast mode
[  140.599432][T12469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.601977][T12469] syzkaller0: entered promiscuous mode
[  140.603985][T12469] syzkaller0: entered allmulticast mode
[  140.607845][T12469] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.612306][T12469] tipc: Resetting bearer <eth:syzkaller0>
[  140.622800][T12468] tipc: Resetting bearer <eth:syzkaller0>
[  140.628093][T12468] tipc: Disabling bearer <eth:syzkaller0>
[  140.868901][T12498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.872937][T12498] tipc: Resetting bearer <eth:syzkaller0>
[  140.879521][T12498] tipc: Resetting bearer <eth:syzkaller0>
[  140.924478][T12500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.429740][T12525] openvswitch: netlink: IPv6 tunnel dst address is zero
[  141.473193][T12532] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.678895][T12552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.687702][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  141.701478][T12554] erspan0: refused to change device tx_queue_len
[  141.703779][T12554] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  141.711894][T12556] erspan0: refused to change device tx_queue_len
[  141.714430][T12556] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  141.738230][T12558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.742018][T12558] syzkaller0: entered promiscuous mode
[  141.744356][T12558] syzkaller0: entered allmulticast mode
[  141.750454][T12557] tipc: Resetting bearer <eth:syzkaller0>
[  141.755788][T12557] tipc: Disabling bearer <eth:syzkaller0>
[  141.769719][T12565] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.792767][T12570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.798369][T12570] netlink: 'syz.0.1805': attribute type 11 has an invalid length.
[  141.802184][T12570] netem: change failed
[  141.873351][T12588] mac80211_hwsim hwsim137 wlan1: entered allmulticast mode
[  141.880689][T12588] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.883863][T12588] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.265839][T12608] vti0: entered promiscuous mode
[  142.268494][T12608] vti0: entered allmulticast mode
[  142.273388][T12609] erspan0: left allmulticast mode
[  142.281017][T12609] batadv0: left allmulticast mode
[  142.283618][T12609] veth0_to_team: left promiscuous mode
[  142.286081][T12609] veth0_to_team: left allmulticast mode
[  142.288874][T12609] batadv_slave_0: left promiscuous mode
[  142.291180][T12609] batadv_slave_0: left allmulticast mode
[  142.294206][T12609] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  142.300647][T12609] bond7: left promiscuous mode
[  142.303266][T12609] geneve5: left promiscuous mode
[  142.305579][T12609] geneve5: left allmulticast mode
[  142.309025][T12609] tipc: Resetting bearer <eth:syzkaller0>
[  142.311664][T12609] syzkaller0: left promiscuous mode
[  142.313799][T12609] syzkaller0: left allmulticast mode
[  142.322042][T12609] veth1: left promiscuous mode
[  142.324792][T12609] vlan1: left allmulticast mode
[  142.332269][T12611] macvlan0: entered promiscuous mode
[  142.334171][T12611] hsr0: entered promiscuous mode
[  142.336135][T12611] macvlan0: entered allmulticast mode
[  142.339130][T12611] hsr0: entered allmulticast mode
[  142.340913][T12611] hsr_slave_0: entered allmulticast mode
[  142.345017][T12611] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20000
[  142.349442][T12611] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003
[  142.377777][T12616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.380248][T12616] syzkaller0: entered promiscuous mode
[  142.382237][T12616] syzkaller0: entered allmulticast mode
[  142.389962][T12616] tipc: Resetting bearer <eth:syzkaller0>
[  142.393269][T12615] tipc: Resetting bearer <eth:syzkaller0>
[  142.404850][T12615] tipc: Disabling bearer <eth:syzkaller0>
[  142.580023][T12635] 8021q: adding VLAN 0 to HW filter on device bond11
[  142.657550][T12651] xfrm0 speed is unknown, defaulting to 1000
[  142.708636][T12649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.803762][T12665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.808514][T12665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.187772][T12679] syzkaller0: entered promiscuous mode
[  143.189844][T12679] syzkaller0: entered allmulticast mode
[  143.192601][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  143.318044][T12683] ieee802154 phy0 wpan0: encryption failed: -126
[  143.412895][T12686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.765536][T12693] validate_nla: 25 callbacks suppressed
[  143.765546][T12693] netlink: 'syz.2.1841': attribute type 3 has an invalid length.
[  143.770857][T12693] __nla_validate_parse: 22 callbacks suppressed
[  143.770868][T12693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1841'.
[  143.777343][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'.
[  143.891023][T12697] netlink: 'syz.2.1842': attribute type 9 has an invalid length.
[  143.894433][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'.
[  143.902474][T12697] macvlan1: entered promiscuous mode
[  143.904466][T12697] macvlan1: entered allmulticast mode
[  143.929138][T12701] ip6gre2: entered allmulticast mode
[  143.931528][T12675] tipc: Resetting bearer <eth:syzkaller0>
[  143.983296][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  143.985471][T12706] xfrm0 speed is unknown, defaulting to 1000
[  144.050799][T12714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.062805][T12716] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  144.071523][T12716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.103296][T12720] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  144.136002][T12725] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.139276][T12726] tipc: Resetting bearer <eth:syzkaller0>
[  144.150107][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'.
[  144.166406][T12730] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  144.169252][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.1.1852 Not tainted syzkaller #0 PREEMPT(full) 
[  144.169263][T12730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.169268][T12730] Call Trace:
[  144.169271][T12730]  <TASK>
[  144.169275][T12730]  dump_stack_lvl+0x189/0x250
[  144.169289][T12730]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.169297][T12730]  ? __pfx__printk+0x10/0x10
[  144.169307][T12730]  ? kernfs_root+0x1c/0x230
[  144.169317][T12730]  ? kernfs_path_from_node+0x2f/0x290
[  144.169325][T12730]  ? kernfs_path_from_node+0x250/0x290
[  144.169333][T12730]  ? kernfs_path_from_node+0x2f/0x290
[  144.169341][T12730]  sysfs_warn_dup+0x8e/0xa0
[  144.169349][T12730]  sysfs_do_create_link_sd+0xc0/0x110
[  144.169357][T12730]  device_add_class_symlinks+0x1cf/0x240
[  144.169365][T12730]  device_add+0x475/0xb50
[  144.169372][T12730]  wiphy_register+0x1ba6/0x28d0
[  144.169384][T12730]  ? __pfx_wiphy_register+0x10/0x10
[  144.169393][T12730]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  144.169402][T12730]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  144.169415][T12730]  ieee80211_register_hw+0x3484/0x4100
[  144.169430][T12730]  ? ieee80211_register_hw+0x14a1/0x4100
[  144.169439][T12730]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  144.169447][T12730]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.169457][T12730]  ? __hrtimer_setup+0x187/0x210
[  144.169464][T12730]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  144.169475][T12730]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  144.169488][T12730]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  144.169496][T12730]  ? trace_kmalloc+0x1f/0xd0
[  144.169504][T12730]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  144.169514][T12730]  ? kstrndup+0xbf/0x160
[  144.169523][T12730]  hwsim_new_radio_nl+0xea4/0x1b10
[  144.169532][T12730]  ? __pfx___nla_validate_parse+0x10/0x10
[  144.169546][T12730]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.169557][T12730]  ? __nla_parse+0x40/0x60
[  144.169567][T12730]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  144.169577][T12730]  genl_family_rcv_msg_doit+0x215/0x300
[  144.169585][T12730]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  144.169595][T12730]  ? bpf_lsm_capable+0x9/0x20
[  144.169604][T12730]  ? security_capable+0x7e/0x2e0
[  144.169615][T12730]  genl_rcv_msg+0x60e/0x790
[  144.169623][T12730]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.169630][T12730]  ? __kasan_slab_alloc+0x6c/0x80
[  144.169639][T12730]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.169647][T12730]  ? __netlink_lookup+0xbd/0x810
[  144.169653][T12730]  ? rcu_is_watching+0x15/0xb0
[  144.169660][T12730]  netlink_rcv_skb+0x208/0x470
[  144.169670][T12730]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.169678][T12730]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.169689][T12730]  ? lock_release+0x4b/0x3e0
[  144.169699][T12730]  ? down_read+0x1ad/0x2e0
[  144.169705][T12730]  genl_rcv+0x28/0x40
[  144.169712][T12730]  netlink_unicast+0x82f/0x9e0
[  144.169722][T12730]  ? __pfx_netlink_unicast+0x10/0x10
[  144.169730][T12730]  ? netlink_sendmsg+0x642/0xb30
[  144.169740][T12730]  ? skb_put+0x11b/0x210
[  144.169747][T12730]  netlink_sendmsg+0x805/0xb30
[  144.169758][T12730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.169767][T12730]  ? futex_unqueue+0x22/0x240
[  144.169775][T12730]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.169782][T12730]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.169789][T12730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.169798][T12730]  __sock_sendmsg+0x21c/0x270
[  144.169807][T12730]  ____sys_sendmsg+0x505/0x830
[  144.169815][T12730]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.169822][T12730]  ? import_iovec+0x74/0xa0
[  144.169831][T12730]  ___sys_sendmsg+0x21f/0x2a0
[  144.169838][T12730]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.169845][T12730]  ? futex_wait+0x285/0x360
[  144.169858][T12730]  ? __fget_files+0x2a/0x420
[  144.169868][T12730]  ? __fget_files+0x3a0/0x420
[  144.169879][T12730]  __x64_sys_sendmsg+0x19b/0x260
[  144.169886][T12730]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.169896][T12730]  ? rcu_is_watching+0x15/0xb0
[  144.169903][T12730]  do_syscall_64+0xfa/0x3b0
[  144.169913][T12730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.169920][T12730]  ? exc_page_fault+0x9f/0xf0
[  144.169929][T12730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.169936][T12730] RIP: 0033:0x7f58ae98ebe9
[  144.169944][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.169950][T12730] RSP: 002b:00007f58af80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.169959][T12730] RAX: ffffffffffffffda RBX: 00007f58aebb5fa0 RCX: 00007f58ae98ebe9
[  144.169965][T12730] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  144.169969][T12730] RBP: 00007f58aea11e19 R08: 0000000000000000 R09: 0000000000000000
[  144.169974][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.169978][T12730] R13: 00007f58aebb6038 R14: 00007f58aebb5fa0 R15: 00007ffc1fc6bdc8
[  144.169986][T12730]  </TASK>
[  144.383677][T12731] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1850'.
[  144.435432][T12731] vti0: left promiscuous mode
[  144.437080][T12731] vti0: left allmulticast mode
[  144.440877][T12731] macvlan0: left promiscuous mode
[  144.442559][T12731] macvlan0: left allmulticast mode
[  144.445484][T12731] hsr0: left allmulticast mode
[  144.447235][T12731] hsr_slave_0: left allmulticast mode
[  144.448951][T12731] hsr0: left promiscuous mode
[  144.451675][T12731] macvlan1: left promiscuous mode
[  144.453386][T12731] macvlan1: left allmulticast mode
[  144.455277][T12731] ip6gre2: left allmulticast mode
[  144.471859][T12739] netlink: 'syz.0.1853': attribute type 21 has an invalid length.
[  144.479923][T12739] ipvlan0: entered promiscuous mode
[  144.481932][T12739] bridge0: port 1(ipvlan0) entered blocking state
[  144.484107][T12739] bridge0: port 1(ipvlan0) entered disabled state
[  144.486645][T12739] ipvlan0: entered allmulticast mode
[  144.489358][T12739] ipvlan0: left allmulticast mode
[  144.574442][T12747] tipc: Resetting bearer <eth:syzkaller0>
[  144.577459][T12747] syzkaller0: left promiscuous mode
[  144.579195][T12747] syzkaller0: left allmulticast mode
[  144.583111][T12747] gtp4: left promiscuous mode
[  144.584715][T12747] gtp4: left allmulticast mode
[  144.588562][T12747] macvlan1: left promiscuous mode
[  144.590305][T12747] macvlan1: left allmulticast mode
[  144.592080][T12747] ip6gre4: left allmulticast mode
[  144.593827][T12747] gtp5: left promiscuous mode
[  144.595387][T12747] gtp5: left allmulticast mode
[  144.599280][T12747] gtp6: left promiscuous mode
[  144.601278][T12747] gtp6: left allmulticast mode
[  144.604268][T12747] mac80211_hwsim hwsim137 wlan1: left allmulticast mode
[  144.665512][T12757] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1857'.
[  144.701377][T12759] netlink: 'syz.0.1858': attribute type 39 has an invalid length.
[  144.767335][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'.
[  144.771309][T12766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'.
[  144.777481][T12766] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1861'.
[  144.781570][T12766] netlink: zone id is out of range
[  144.783690][T12766] netlink: zone id is out of range
[  144.785885][T12766] netlink: zone id is out of range
[  144.788618][T12766] netlink: zone id is out of range
[  144.791209][T12766] netlink: get zone limit has 8 unknown bytes
[  144.796807][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  144.825790][T12768] xfrm0 speed is unknown, defaulting to 1000
[  144.937510][ T5719] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.940191][ T5719] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.942765][ T5719] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.949752][ T5719] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.017366][T12786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.019716][T12787] syzkaller0: entered promiscuous mode
[  145.021611][T12787] syzkaller0: entered allmulticast mode
[  145.024598][T12786] sch_tbf: peakrate 2178 is lower than or equals to rate 1148720904362935503 !
[  145.031108][T12788] tipc: Resetting bearer <eth:syzkaller0>
[  145.048878][T12782] tipc: Resetting bearer <eth:syzkaller0>
[  145.053074][T12782] tipc: Disabling bearer <eth:syzkaller0>
[  145.114389][T12794] netlink: 'syz.0.1869': attribute type 4 has an invalid length.
[  145.143974][T12801] dvmrp0: left allmulticast mode
[  145.206285][T12807] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  145.208845][T12807] CPU: 0 UID: 0 PID: 12807 Comm: syz.2.1873 Not tainted syzkaller #0 PREEMPT(full) 
[  145.208863][T12807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.208871][T12807] Call Trace:
[  145.208876][T12807]  <TASK>
[  145.208882][T12807]  dump_stack_lvl+0x189/0x250
[  145.208903][T12807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.208917][T12807]  ? __pfx__printk+0x10/0x10
[  145.208933][T12807]  ? kernfs_root+0x1c/0x230
[  145.208949][T12807]  ? kernfs_path_from_node+0x2f/0x290
[  145.208962][T12807]  ? kernfs_path_from_node+0x250/0x290
[  145.208974][T12807]  ? kernfs_path_from_node+0x2f/0x290
[  145.208987][T12807]  sysfs_warn_dup+0x8e/0xa0
[  145.208999][T12807]  sysfs_do_create_link_sd+0xc0/0x110
[  145.209012][T12807]  device_add_class_symlinks+0x1cf/0x240
[  145.209026][T12807]  device_add+0x475/0xb50
[  145.209038][T12807]  wiphy_register+0x1ba6/0x28d0
[  145.209060][T12807]  ? __pfx_wiphy_register+0x10/0x10
[  145.209076][T12807]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  145.209089][T12807]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  145.209109][T12807]  ieee80211_register_hw+0x3484/0x4100
[  145.209126][T12807]  ? ieee80211_register_hw+0x14a1/0x4100
[  145.209174][T12807]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  145.209189][T12807]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.209207][T12807]  ? __hrtimer_setup+0x187/0x210
[  145.209219][T12807]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  145.209236][T12807]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  145.209260][T12807]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  145.209275][T12807]  ? trace_kmalloc+0x1f/0xd0
[  145.209289][T12807]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  145.209304][T12807]  ? kstrndup+0xbf/0x160
[  145.209317][T12807]  hwsim_new_radio_nl+0xea4/0x1b10
[  145.209333][T12807]  ? __pfx___nla_validate_parse+0x10/0x10
[  145.209354][T12807]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.209373][T12807]  ? __nla_parse+0x40/0x60
[  145.209391][T12807]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.209407][T12807]  genl_family_rcv_msg_doit+0x215/0x300
[  145.209422][T12807]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.209439][T12807]  ? bpf_lsm_capable+0x9/0x20
[  145.209455][T12807]  ? security_capable+0x7e/0x2e0
[  145.209473][T12807]  genl_rcv_msg+0x60e/0x790
[  145.209487][T12807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.209499][T12807]  ? __kasan_slab_alloc+0x6c/0x80
[  145.209513][T12807]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.209527][T12807]  ? __netlink_lookup+0xbd/0x810
[  145.209537][T12807]  ? rcu_is_watching+0x15/0xb0
[  145.209551][T12807]  netlink_rcv_skb+0x208/0x470
[  145.209568][T12807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.209582][T12807]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.209601][T12807]  ? lock_release+0x4b/0x3e0
[  145.209618][T12807]  ? down_read+0x1ad/0x2e0
[  145.209628][T12807]  genl_rcv+0x28/0x40
[  145.209638][T12807]  netlink_unicast+0x82f/0x9e0
[  145.209654][T12807]  ? __pfx_netlink_unicast+0x10/0x10
[  145.209668][T12807]  ? netlink_sendmsg+0x642/0xb30
[  145.209683][T12807]  ? skb_put+0x11b/0x210
[  145.209695][T12807]  netlink_sendmsg+0x805/0xb30
[  145.209714][T12807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.209731][T12807]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.209742][T12807]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.209755][T12807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.209771][T12807]  __sock_sendmsg+0x21c/0x270
[  145.209786][T12807]  ____sys_sendmsg+0x505/0x830
[  145.209798][T12807]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.209811][T12807]  ? import_iovec+0x74/0xa0
[  145.209825][T12807]  ___sys_sendmsg+0x21f/0x2a0
[  145.209836][T12807]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.209849][T12807]  ? futex_wake+0x4b2/0x560
[  145.209871][T12807]  ? __fget_files+0x2a/0x420
[  145.209887][T12807]  ? __fget_files+0x3a0/0x420
[  145.209907][T12807]  __x64_sys_sendmsg+0x19b/0x260
[  145.209919][T12807]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.209933][T12807]  ? rcu_is_watching+0x15/0xb0
[  145.209946][T12807]  ? rcu_is_watching+0x15/0xb0
[  145.209957][T12807]  do_syscall_64+0xfa/0x3b0
[  145.209975][T12807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.209986][T12807]  ? exc_page_fault+0x9f/0xf0
[  145.210001][T12807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.210014][T12807] RIP: 0033:0x7f4b0a58ebe9
[  145.210026][T12807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.210036][T12807] RSP: 002b:00007f4b0b318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.210051][T12807] RAX: ffffffffffffffda RBX: 00007f4b0a7b5fa0 RCX: 00007f4b0a58ebe9
[  145.210060][T12807] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  145.210067][T12807] RBP: 00007f4b0a611e19 R08: 0000000000000000 R09: 0000000000000000
[  145.210074][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.210081][T12807] R13: 00007f4b0a7b6038 R14: 00007f4b0a7b5fa0 R15: 00007ffcbba083a8
[  145.210093][T12807]  </TASK>
[  145.427001][T12825] dvmrp0: left allmulticast mode
[  145.428659][T12825] dvmrp1: left allmulticast mode
[  145.430254][T12825] dvmrp8: left allmulticast mode
[  145.474702][T12825] tipc: Resetting bearer <eth:batadv0>
[  145.538952][T12830] dvmrp1: entered allmulticast mode
[  145.613051][T12844] xfrm0 speed is unknown, defaulting to 1000
[  145.790067][T12859] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.793386][T12860] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.873619][T12873] bridge0: port 1(wlan0) entered blocking state
[  145.875768][T12873] bridge0: port 1(wlan0) entered disabled state
[  145.879238][T12873] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  145.882776][T12873] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  145.888021][T12869] ip6tnl4: entered promiscuous mode
[  145.889814][T12869] ip6tnl4: entered allmulticast mode
[  145.922212][T12877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.952938][T12883] pim6reg1: entered promiscuous mode
[  145.954800][T12883] pim6reg1: entered allmulticast mode
[  146.031246][T12886] syzkaller0: left promiscuous mode
[  146.033263][T12886] syzkaller0: left allmulticast mode
[  146.037477][T12886] tipc: Resetting bearer <eth:syzkaller0>
[  146.056471][T12883] bond12 (unregistering): Released all slaves
[  146.063497][T12897] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  146.066086][T12898] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  146.072045][T12897] 8021q: adding VLAN 0 to HW filter on device bond12
[  146.075832][T12897] bond12: entered promiscuous mode
[  146.264993][T12912] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[  146.304257][T12913] openvswitch: netlink: Missing key (keys=40, expected=80)
[  146.333158][T12921] netem: incorrect gi model size
[  146.334823][T12921] netem: change failed
[  146.387852][T12931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.390924][T12931] syzkaller0: entered promiscuous mode
[  146.392809][T12931] syzkaller0: entered allmulticast mode
[  146.394665][T12931] tipc: Resetting bearer <eth:syzkaller0>
[  146.431679][T12943] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.466992][T12943] netlink: 'syz.1.1909': attribute type 30 has an invalid length.
[  146.569713][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.573844][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.579322][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.583861][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.599268][T12965] netlink: 'syz.0.1915': attribute type 1 has an invalid length.
[  146.606066][T12965] netlink: 'syz.0.1915': attribute type 1 has an invalid length.
[  147.187004][T12982] vlan0: entered promiscuous mode
[  147.189242][T12982] bridge0: entered promiscuous mode
[  147.339877][T12993] bond12: left promiscuous mode
[  147.472872][T13008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.475657][T13008] syzkaller0: entered promiscuous mode
[  147.478462][T13008] syzkaller0: entered allmulticast mode
[  147.483325][T13010] tipc: Resetting bearer <eth:syzkaller0>
[  147.487601][T13007] tipc: Resetting bearer <eth:syzkaller0>
[  147.491959][T13007] tipc: Disabling bearer <eth:syzkaller0>
[  147.527022][T13006] xfrm0 speed is unknown, defaulting to 1000
[  147.650121][T13014] hsr_slave_0: mtu less than device minimum
[  147.708768][T13032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.711466][T13032] syzkaller0: entered promiscuous mode
[  147.714826][T13032] syzkaller0: entered allmulticast mode
[  147.721854][T13032] tipc: Resetting bearer <eth:syzkaller0>
[  147.723790][T13032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.726541][T13032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.741063][T13031] tipc: Resetting bearer <eth:syzkaller0>
[  147.746809][T13031] tipc: Disabling bearer <eth:syzkaller0>
[  147.827511][T13035] tipc: Resetting bearer <eth:syzkaller0>
[  147.830947][T13035] syzkaller0: left promiscuous mode
[  147.832910][T13035] syzkaller0: left allmulticast mode
[  147.836561][T13035] ip6tnl4: left promiscuous mode
[  147.838183][T13035] ip6tnl4: left allmulticast mode
[  148.090360][T13061] xfrm0 speed is unknown, defaulting to 1000
[  148.622826][T13084] team0: Device gtp7 is up. Set it down before adding it as a team port
[  148.632395][T13081] sctp: [Deprecated]: syz.2.1946 (pid 13081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.632395][T13081] Use struct sctp_sack_info instead
[  148.670973][T13084] rdma_op ffff8880383311f0 conn xmit_rdma 0000000000000000
[  148.805008][T13107] __nla_validate_parse: 62 callbacks suppressed
[  148.805020][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'.
[  148.856697][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'.
[  149.004660][T13145] validate_nla: 8 callbacks suppressed
[  149.004670][T13145] netlink: 'syz.0.1962': attribute type 2 has an invalid length.
[  149.018438][T13145] 8021q: adding VLAN 0 to HW filter on device team0
[  149.021881][T13145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.157628][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  149.160997][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'.
[  149.164057][T13155] netlink: 'syz.2.1964': attribute type 14 has an invalid length.
[  149.172501][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  149.177340][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'.
[  149.180245][T13155] netlink: 'syz.2.1964': attribute type 14 has an invalid length.
[  149.201827][T13161] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1967'.
[  149.265241][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'.
[  149.420425][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'.
[  149.423559][T13190] IPVS: Unknown mcast interface: vcan0
[  149.514518][T13204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1979'.
[  149.586366][T13210] netlink: 'syz.0.1981': attribute type 12 has an invalid length.
[  149.625820][T13214] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  149.629709][T13214] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  149.848883][T13238] net_ratelimit: 3 callbacks suppressed
[  149.848891][T13238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.957431][T13245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.960688][T13245] syzkaller0: entered promiscuous mode
[  149.963056][T13245] syzkaller0: entered allmulticast mode
[  149.972185][T13245] sctp: [Deprecated]: syz.2.1992 (pid 13245) Use of int in max_burst socket option deprecated.
[  149.972185][T13245] Use struct sctp_assoc_value instead
[  149.980635][T13245] netlink: 'syz.2.1992': attribute type 1 has an invalid length.
[  149.987717][T13244] tipc: Resetting bearer <eth:syzkaller0>
[  149.992182][T13244] tipc: Disabling bearer <eth:syzkaller0>
[  150.061363][T13247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.064067][T13247] syzkaller0: entered promiscuous mode
[  150.065863][T13247] syzkaller0: entered allmulticast mode
[  150.072479][T13247] tipc: Resetting bearer <eth:syzkaller0>
[  150.075786][T13246] tipc: Resetting bearer <eth:syzkaller0>
[  150.081501][T13246] tipc: Disabling bearer <eth:syzkaller0>
[  150.492339][T13273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.495708][T13273] syzkaller0: entered promiscuous mode
[  150.497994][T13273] syzkaller0: entered allmulticast mode
[  150.515031][T13274] mac80211_hwsim hwsim144 wlan0: entered promiscuous mode
[  150.519297][T13274] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  150.526062][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.715957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.731560][T13300] vti1: entered promiscuous mode
[  150.733253][T13300] vti1: entered allmulticast mode
[  150.749053][T13305] vlan0: entered promiscuous mode
[  150.808197][T13309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.811504][T13309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.082223][T13357] netlink: 'syz.1.2005': attribute type 1 has an invalid length.
[  151.084938][T13357] netlink: 'syz.1.2005': attribute type 1 has an invalid length.
[  151.261664][T13393] pim6reg1: entered promiscuous mode
[  151.263813][T13393] pim6reg1: entered allmulticast mode
[  151.276158][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.358471][T13393] bond13 (unregistering): Released all slaves
[  151.509872][T13419] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.513455][T13419] syzkaller0: entered promiscuous mode
[  151.515339][T13419] syzkaller0: entered allmulticast mode
[  151.518047][T13419] tipc: Resetting bearer <eth:syzkaller0>
[  151.570494][T13424] tipc: Resetting bearer <eth:syzkaller0>
[  151.573584][T13424] syzkaller0: left promiscuous mode
[  151.575527][T13424] syzkaller0: left allmulticast mode
[  151.755968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.795973][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.836041][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.875994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.915984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.956043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.996012][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.036000][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.076000][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.116640][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.156020][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.195990][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.236006][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.276007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.315993][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.355981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.395994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.446063][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.157517][T13473] __nla_validate_parse: 19 callbacks suppressed
[  170.157532][T13473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2031'.
[  170.165241][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2031'.
[  170.193691][T13484] ip6gretap3: entered promiscuous mode
[  170.263705][T13497] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.422899][T13512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.441212][T13512] vlan0: left promiscuous mode
[  170.443440][T13512] mac80211_hwsim hwsim144 wlan0: left promiscuous mode
[  170.446832][T13512] vti1: left promiscuous mode
[  170.448841][T13512] vti1: left allmulticast mode
[  170.475960][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.508291][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'.
[  170.539364][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'.
[  170.543111][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.551944][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.579989][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.586702][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.754637][T13525] netlink: 'syz.2.2043': attribute type 1 has an invalid length.
[  171.044459][T13528] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2044'.
[  171.084785][T13531] netem: change failed
[  171.087059][T13531] netem: change failed
[  171.091498][T13531] netem: change failed
[  171.172202][T13536] xfrm0 speed is unknown, defaulting to 1000
[  171.271300][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2048'.
[  171.394444][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'.
[  171.398290][T13567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2054'.
[  171.460018][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'.
[  171.468394][T13580] netlink: 'syz.1.2057': attribute type 1 has an invalid length.
[  171.480103][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.495405][T13585] syzkaller0: entered promiscuous mode
[  171.499364][T13585] syzkaller0: entered allmulticast mode
[  171.502677][T13585] tipc: Resetting bearer <eth:syzkaller0>
[  171.532516][T13594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.600374][T13612] netlink: 'syz.2.2066': attribute type 10 has an invalid length.
[  171.642824][T13623] tipc: Resetting bearer <eth:syzkaller0>
[  171.652505][T13623] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.653769][T13626] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2070'.
[  171.659536][T13621] tipc: Resetting bearer <eth:syzkaller0>
[  171.775059][T13639] tipc: Resetting bearer <eth:syzkaller0>
[  171.779738][T13639] syzkaller0: left promiscuous mode
[  171.781474][T13639] syzkaller0: left allmulticast mode
[  171.791201][T13639] ip6gretap3: left promiscuous mode
[  171.927041][T13654] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  171.948005][   T29] tipc: Resetting bearer <eth:syzkaller0>
[  171.955155][T13663] tipc: Resetting bearer <eth:syzkaller0>
[  171.981230][T13662] tipc: Resetting bearer <eth:syzkaller0>
[  172.556327][T13685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.558561][T13685] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.569250][T13686] tipc: Disabling bearer <eth:syzkaller0>
[  172.641964][T13695] netlink: 'syz.0.2081': attribute type 10 has an invalid length.
[  172.653703][T13695] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.658263][T13695] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.809011][T13711] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  172.856735][T13718] tipc: Disabling bearer <eth:batadv0>
[  172.921041][T13731] ip6tnl6: entered promiscuous mode
[  172.922983][T13731] ip6tnl6: entered allmulticast mode
[  172.953196][T13737] netlink: 'syz.1.2094': attribute type 2 has an invalid length.
[  172.958539][   T29] tipc: Resetting bearer <eth:syzkaller0>
[  172.967332][T13737] veth0_to_team: entered promiscuous mode
[  172.969332][T13737] veth0_to_team: entered allmulticast mode
[  173.074464][T13750] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  173.079035][T13750] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  173.087614][T13750] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  173.096321][T13750] 8021q: adding VLAN 0 to HW filter on device bond13
[  173.101054][T13753] pim6reg1: entered allmulticast mode
[  173.151764][T13754] bond13: (slave wlan0): Opening slave failed
[  173.157372][T13754] vlan1: entered allmulticast mode
[  173.159055][T13754] veth1: entered allmulticast mode
[  173.161563][T13754] bond13: (slave vlan1): Opening slave failed
[  173.598612][T13769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.602655][T13769] netlink: 'syz.0.2104': attribute type 5 has an invalid length.
[  173.609508][T13769] geneve5: entered promiscuous mode
[  173.611325][T13769] geneve5: entered allmulticast mode
[  173.613574][ T5719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  173.616777][ T5719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  173.619978][ T5719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  173.623028][ T5719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  173.847383][T13779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.850587][T13779] syzkaller0: entered promiscuous mode
[  173.852361][T13779] syzkaller0: entered allmulticast mode
[  173.854956][T13779] netlink: 'syz.0.2107': attribute type 14 has an invalid length.
[  173.858999][T13779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  174.007738][T13801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.053731][T13806] 8021q: adding VLAN 0 to HW filter on device team0
[  174.058872][T13806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.066082][T13801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) !
[  174.793560][T13811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.796411][T13811] syzkaller0: entered promiscuous mode
[  174.798315][T13811] syzkaller0: entered allmulticast mode
[  174.802193][T13811] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  174.807502][T13811] tipc: Resetting bearer <eth:syzkaller0>
[  174.810770][T13810] tipc: Resetting bearer <eth:syzkaller0>
[  174.815154][T13810] tipc: Disabling bearer <eth:syzkaller0>
[  174.863732][T13815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.884657][T13820] macsec0: entered allmulticast mode
[  174.886908][T13820] ip6gretap0: entered allmulticast mode
[  174.893650][T13820] ip6gretap0: left allmulticast mode
[  174.912473][T13824] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.922987][T13824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.035175][T13840] tipc: Resetting bearer <eth:syzkaller0>
[  175.090386][T13841] tipc: Resetting bearer <eth:syzkaller0>
[  175.100997][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  175.105687][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  175.109644][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  175.114419][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  175.118363][T13844] batadv_slave_0: entered promiscuous mode
[  175.253467][T13856] syzkaller1: entered allmulticast mode
[  175.260374][T13857] syzkaller1: left allmulticast mode
[  175.395826][T13863] IPv6: NLM_F_CREATE should be specified when creating new route
[  175.400235][T13863] __nla_validate_parse: 36 callbacks suppressed
[  175.400244][T13863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2131'.
[  175.506525][T13869] dvmrp0: left allmulticast mode
[  175.508533][T13869] dvmrp1: left allmulticast mode
[  175.586553][T13874] xfrm0 speed is unknown, defaulting to 1000
[  175.804664][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'.
[  175.846683][T13890] batadv_slave_0: left promiscuous mode
[  175.858996][T13890] ip6tnl6: left promiscuous mode
[  175.860789][T13890] ip6tnl6: left allmulticast mode
[  175.867357][ T5719] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.870157][ T5719] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.880460][ T5719] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.884516][T13896] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2139'.
[  175.887898][T13896] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2139'.
[  175.887980][T13839] tipc: Resetting bearer <eth:syzkaller0>
[  175.893192][ T5719] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  175.918205][T13896] 8021q: adding VLAN 0 to HW filter on device team0
[  175.926348][T13896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.963857][T13906] validate_nla: 3 callbacks suppressed
[  175.963871][T13906] netlink: 'syz.2.2140': attribute type 10 has an invalid length.
[  175.970406][T13906] netlink: 'syz.2.2140': attribute type 10 has an invalid length.
[  175.982426][T13905] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2142'.
[  175.990115][T13905] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  176.014412][T13913] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.019812][T13913] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  176.051413][T13915] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.055643][T13915] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  176.064237][T13917] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002
[  176.078244][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  176.120006][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'.
[  176.201705][T13923] veth0_to_team: left promiscuous mode
[  176.204118][T13923] veth0_to_team: left allmulticast mode
[  176.208815][T13923] tipc: Resetting bearer <eth:syzkaller0>
[  176.212142][T13923] syzkaller0: left promiscuous mode
[  176.214471][T13923] syzkaller0: left allmulticast mode
[  176.768090][T13927] netlink: 'syz.2.2148': attribute type 12 has an invalid length.
[  176.819430][T13931] netlink: 'syz.2.2149': attribute type 11 has an invalid length.
[  176.822304][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2149'.
[  176.903288][T13940] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  176.909422][T13940] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  176.915673][T13941] netlink: 'syz.2.2150': attribute type 13 has an invalid length.
[  176.919106][T13941] netlink: 'syz.2.2150': attribute type 17 has an invalid length.
[  176.934687][T13941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.010635][T13948] netlink: 'syz.0.2154': attribute type 12 has an invalid length.
[  177.140940][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'.
[  177.145424][T13963] gtp8: entered promiscuous mode
[  177.147862][T13963] gtp8: entered allmulticast mode
[  177.169964][T13965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.201979][T13967] netlink: 'syz.0.2160': attribute type 39 has an invalid length.
[  177.205176][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'.
[  177.210344][T13966] delete_channel: no stack
[  177.229125][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'.
[  177.239844][T13970] netlink: 'syz.0.2161': attribute type 1 has an invalid length.
[  177.243112][T13971] netlink: 'syz.0.2161': attribute type 1 has an invalid length.
[  177.836527][T13982] ieee802154 phy0 wpan0: encryption failed: -126
[  177.915720][T13990] 8021q: adding VLAN 0 to HW filter on device bond13
[  177.924886][T13987] 8021q: adding VLAN 0 to HW filter on device bond13
[  177.928301][T13987] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  177.933458][T13987] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  177.975206][T13990] veth13: entered promiscuous mode
[  177.979227][T13990] bond13: (slave veth13): Enslaving as an active interface with a down link
[  177.984312][T13990] erspan0: entered allmulticast mode
[  177.988757][T13990] bond11: (slave erspan0): Releasing active interface
[  177.991178][T13990] erspan0: left promiscuous mode
[  177.995737][T13990] bond13: (slave erspan0): making interface the new active one
[  177.999419][T13990] bond13: (slave erspan0): Enslaving as an active interface with an up link
[  178.157832][T14000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.161036][T14001] syzkaller0: entered promiscuous mode
[  178.163179][T14001] syzkaller0: entered allmulticast mode
[  178.165186][T14001] tipc: Resetting bearer <eth:syzkaller0>
[  178.294801][T14017] syzkaller1: entered promiscuous mode
[  178.297343][T14017] syzkaller1: entered allmulticast mode
[  179.040609][T14030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.305160][T14058] 8021q: adding VLAN 0 to HW filter on device bond12
[  179.312504][T14058] bond12 (unregistering): Released all slaves
[  179.404020][T14076] ipvlan0: entered promiscuous mode
[  179.407777][T14076] bridge0: port 1(ipvlan0) entered blocking state
[  179.410177][T14076] bridge0: port 1(ipvlan0) entered disabled state
[  179.412498][T14076] ipvlan0: entered allmulticast mode
[  179.414912][T14076] ipvlan0: left allmulticast mode
[  179.536856][T14081] 8021q: adding VLAN 0 to HW filter on device bond15
[  179.539735][T14081] bond14: (slave bond15): making interface the new active one
[  179.543169][T14081] bond14: (slave bond15): Enslaving as an active interface with an up link
[  179.558745][T14081] 8021q: adding VLAN 0 to HW filter on device bond14
[  179.617568][T14089] openvswitch: netlink: Flow actions attr not present in new flow.
[  179.681424][T14107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.930383][T14152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.933305][T14152] syzkaller0: entered promiscuous mode
[  179.935514][T14152] syzkaller0: entered allmulticast mode
[  179.942985][T14152] tipc: Resetting bearer <eth:syzkaller0>
[  179.958162][T14154] tipc: Resetting bearer <eth:syzkaller0>
[  179.962670][T14154] tipc: Disabling bearer <eth:syzkaller0>
[  180.080463][T14162] bond13: (slave erspan0): Releasing active interface
[  180.084945][T14162] bond9: (slave bond10): Releasing backup interface
[  180.088568][T14162] tipc: Resetting bearer <eth:syzkaller0>
[  180.090926][T14162] bond11: (slave veth1): Releasing active interface
[  180.093890][T14162] bond13: (slave veth13): Releasing active interface
[  180.119685][T14164] erspan0: left allmulticast mode
[  180.125442][T14164] tipc: Resetting bearer <eth:syzkaller0>
[  180.129248][T14164] syzkaller0: left promiscuous mode
[  180.130958][T14164] syzkaller0: left allmulticast mode
[  180.134014][T14164] veth13: left promiscuous mode
[  180.136214][T14165] U: renamed from vlan1
[  180.172162][T14171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.174963][T14172] syzkaller0: entered promiscuous mode
[  180.177011][T14172] syzkaller0: entered allmulticast mode
[  180.178982][T14172] tipc: Resetting bearer <eth:syzkaller0>
[  180.359367][T14196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.492431][T14202] __nla_validate_parse: 63 callbacks suppressed
[  180.492447][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'.
[  180.658685][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2229'.
[  180.694230][T14214] dummy0: entered promiscuous mode
[  180.698715][T14214] team0: Port device dummy0 added
[  180.704481][T14214] dummy0: left promiscuous mode
[  180.707420][T14214] team0: Port device dummy0 removed
[  181.218115][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'.
[  181.276313][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'.
[  181.280610][T14228] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.283412][T14228] CPU: 0 UID: 0 PID: 14228 Comm: syz.1.2234 Not tainted syzkaller #0 PREEMPT(full) 
[  181.283423][T14228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.283428][T14228] Call Trace:
[  181.283431][T14228]  <TASK>
[  181.283435][T14228]  dump_stack_lvl+0x189/0x250
[  181.283447][T14228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.283456][T14228]  ? __pfx__printk+0x10/0x10
[  181.283465][T14228]  ? kernfs_root+0x1c/0x230
[  181.283474][T14228]  ? kernfs_path_from_node+0x2f/0x290
[  181.283481][T14228]  ? kernfs_path_from_node+0x250/0x290
[  181.283489][T14228]  ? kernfs_path_from_node+0x2f/0x290
[  181.283497][T14228]  sysfs_warn_dup+0x8e/0xa0
[  181.283504][T14228]  sysfs_do_create_link_sd+0xc0/0x110
[  181.283511][T14228]  device_add_class_symlinks+0x1cf/0x240
[  181.283520][T14228]  device_add+0x475/0xb50
[  181.283527][T14228]  wiphy_register+0x1ba6/0x28d0
[  181.283540][T14228]  ? __pfx_wiphy_register+0x10/0x10
[  181.283548][T14228]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.283557][T14228]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.283569][T14228]  ieee80211_register_hw+0x3484/0x4100
[  181.283579][T14228]  ? ieee80211_register_hw+0x14a1/0x4100
[  181.283588][T14228]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.283596][T14228]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.283607][T14228]  ? __hrtimer_setup+0x187/0x210
[  181.283614][T14228]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.283624][T14228]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.283637][T14228]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.283645][T14228]  ? trace_kmalloc+0x1f/0xd0
[  181.283654][T14228]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.283663][T14228]  ? kstrndup+0xbf/0x160
[  181.283672][T14228]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.283681][T14228]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.283694][T14228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.283704][T14228]  ? __nla_parse+0x40/0x60
[  181.283715][T14228]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.283725][T14228]  genl_family_rcv_msg_doit+0x215/0x300
[  181.283733][T14228]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.283743][T14228]  ? bpf_lsm_capable+0x9/0x20
[  181.283753][T14228]  ? security_capable+0x7e/0x2e0
[  181.283764][T14228]  genl_rcv_msg+0x60e/0x790
[  181.283772][T14228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.283779][T14228]  ? __kasan_slab_alloc+0x6c/0x80
[  181.283788][T14228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.283796][T14228]  ? __netlink_lookup+0xbd/0x810
[  181.283802][T14228]  ? rcu_is_watching+0x15/0xb0
[  181.283810][T14228]  netlink_rcv_skb+0x208/0x470
[  181.283820][T14228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.283827][T14228]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.283838][T14228]  ? lock_release+0x4b/0x3e0
[  181.283848][T14228]  ? down_read+0x1ad/0x2e0
[  181.283855][T14228]  genl_rcv+0x28/0x40
[  181.283861][T14228]  netlink_unicast+0x82f/0x9e0
[  181.283871][T14228]  ? __pfx_netlink_unicast+0x10/0x10
[  181.283880][T14228]  ? netlink_sendmsg+0x642/0xb30
[  181.283889][T14228]  ? skb_put+0x11b/0x210
[  181.283896][T14228]  netlink_sendmsg+0x805/0xb30
[  181.283907][T14228]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.283917][T14228]  ? futex_unqueue+0x22/0x240
[  181.283925][T14228]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.283932][T14228]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.283940][T14228]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.283950][T14228]  __sock_sendmsg+0x21c/0x270
[  181.283959][T14228]  ____sys_sendmsg+0x505/0x830
[  181.283967][T14228]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.283975][T14228]  ? import_iovec+0x74/0xa0
[  181.283983][T14228]  ___sys_sendmsg+0x21f/0x2a0
[  181.283990][T14228]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.283998][T14228]  ? futex_wait+0x285/0x360
[  181.284011][T14228]  ? __fget_files+0x2a/0x420
[  181.284022][T14228]  ? __fget_files+0x3a0/0x420
[  181.284064][T14228]  __x64_sys_sendmsg+0x19b/0x260
[  181.284073][T14228]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.284081][T14228]  ? rcu_is_watching+0x15/0xb0
[  181.284089][T14228]  ? rcu_is_watching+0x15/0xb0
[  181.284096][T14228]  do_syscall_64+0xfa/0x3b0
[  181.284107][T14228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.284114][T14228]  ? exc_page_fault+0x9f/0xf0
[  181.284124][T14228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.284130][T14228] RIP: 0033:0x7f58ae98ebe9
[  181.284138][T14228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.284145][T14228] RSP: 002b:00007f58af80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.284154][T14228] RAX: ffffffffffffffda RBX: 00007f58aebb5fa0 RCX: 00007f58ae98ebe9
[  181.284159][T14228] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  181.284164][T14228] RBP: 00007f58aea11e19 R08: 0000000000000000 R09: 0000000000000000
[  181.284168][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.284172][T14228] R13: 00007f58aebb6038 R14: 00007f58aebb5fa0 R15: 00007ffc1fc6bdc8
[  181.284180][T14228]  </TASK>
[  181.494865][T14231] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  181.520949][T14236] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  181.523374][T14236] tipc: Resetting bearer <eth:syzkaller0>
[  181.525506][T14236] syzkaller0: left promiscuous mode
[  181.528871][T14236] syzkaller0: left allmulticast mode
[  181.535575][T14236] geneve5: left promiscuous mode
[  181.537699][T14236] geneve5: left allmulticast mode
[  181.541217][T14236] gtp8: left promiscuous mode
[  181.542720][T14236] gtp8: left allmulticast mode
[  181.566768][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  181.572685][T14237] validate_nla: 43 callbacks suppressed
[  181.572697][T14237] netlink: 'syz.1.2237': attribute type 13 has an invalid length.
[  181.579784][T14237] gretap0: refused to change device tx_queue_len
[  181.582314][T14237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  181.608333][T14232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2236'.
[  181.613027][T14232] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.616338][T14232] CPU: 1 UID: 0 PID: 14232 Comm: syz.2.2236 Not tainted syzkaller #0 PREEMPT(full) 
[  181.616350][T14232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.616356][T14232] Call Trace:
[  181.616359][T14232]  <TASK>
[  181.616362][T14232]  dump_stack_lvl+0x189/0x250
[  181.616375][T14232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.616401][T14232]  ? __pfx__printk+0x10/0x10
[  181.616411][T14232]  ? kernfs_root+0x1c/0x230
[  181.616420][T14232]  ? kernfs_path_from_node+0x2f/0x290
[  181.616427][T14232]  ? kernfs_path_from_node+0x250/0x290
[  181.616434][T14232]  ? kernfs_path_from_node+0x2f/0x290
[  181.616442][T14232]  sysfs_warn_dup+0x8e/0xa0
[  181.616448][T14232]  sysfs_do_create_link_sd+0xc0/0x110
[  181.616457][T14232]  device_add_class_symlinks+0x1cf/0x240
[  181.616466][T14232]  device_add+0x475/0xb50
[  181.616472][T14232]  wiphy_register+0x1ba6/0x28d0
[  181.616485][T14232]  ? __pfx_wiphy_register+0x10/0x10
[  181.616494][T14232]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.616503][T14232]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.616516][T14232]  ieee80211_register_hw+0x3484/0x4100
[  181.616526][T14232]  ? ieee80211_register_hw+0x14a1/0x4100
[  181.616536][T14232]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.616544][T14232]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.616555][T14232]  ? __hrtimer_setup+0x187/0x210
[  181.616562][T14232]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.616572][T14232]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.616585][T14232]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.616593][T14232]  ? trace_kmalloc+0x1f/0xd0
[  181.616602][T14232]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.616612][T14232]  ? kstrndup+0xbf/0x160
[  181.616621][T14232]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.616630][T14232]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.616645][T14232]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.616656][T14232]  ? __nla_parse+0x40/0x60
[  181.616667][T14232]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.616677][T14232]  genl_family_rcv_msg_doit+0x215/0x300
[  181.616686][T14232]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.616696][T14232]  ? bpf_lsm_capable+0x9/0x20
[  181.616705][T14232]  ? security_capable+0x7e/0x2e0
[  181.616716][T14232]  genl_rcv_msg+0x60e/0x790
[  181.616724][T14232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.616731][T14232]  ? __kasan_slab_alloc+0x6c/0x80
[  181.616740][T14232]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.616748][T14232]  ? __netlink_lookup+0xbd/0x810
[  181.616753][T14232]  ? rcu_is_watching+0x15/0xb0
[  181.616762][T14232]  netlink_rcv_skb+0x208/0x470
[  181.616772][T14232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.616779][T14232]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.616790][T14232]  ? lock_release+0x4b/0x3e0
[  181.616801][T14232]  ? down_read+0x1ad/0x2e0
[  181.616807][T14232]  genl_rcv+0x28/0x40
[  181.616814][T14232]  netlink_unicast+0x82f/0x9e0
[  181.616824][T14232]  ? __pfx_netlink_unicast+0x10/0x10
[  181.616832][T14232]  ? netlink_sendmsg+0x642/0xb30
[  181.616841][T14232]  ? skb_put+0x11b/0x210
[  181.616849][T14232]  netlink_sendmsg+0x805/0xb30
[  181.616860][T14232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.616870][T14232]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.616876][T14232]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.616884][T14232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.616894][T14232]  __sock_sendmsg+0x21c/0x270
[  181.616903][T14232]  ____sys_sendmsg+0x505/0x830
[  181.616910][T14232]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.616919][T14232]  ? import_iovec+0x74/0xa0
[  181.616927][T14232]  ___sys_sendmsg+0x21f/0x2a0
[  181.616934][T14232]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.616942][T14232]  ? futex_wake+0x4b2/0x560
[  181.616955][T14232]  ? __fget_files+0x2a/0x420
[  181.616966][T14232]  ? __fget_files+0x3a0/0x420
[  181.616977][T14232]  __x64_sys_sendmsg+0x19b/0x260
[  181.616984][T14232]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.616993][T14232]  ? rcu_is_watching+0x15/0xb0
[  181.617000][T14232]  ? rcu_is_watching+0x15/0xb0
[  181.617007][T14232]  do_syscall_64+0xfa/0x3b0
[  181.617017][T14232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.617024][T14232]  ? exc_page_fault+0x9f/0xf0
[  181.617058][T14232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.617067][T14232] RIP: 0033:0x7f4b0a58ebe9
[  181.617075][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.617082][T14232] RSP: 002b:00007f4b0b318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.617092][T14232] RAX: ffffffffffffffda RBX: 00007f4b0a7b5fa0 RCX: 00007f4b0a58ebe9
[  181.617097][T14232] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  181.617102][T14232] RBP: 00007f4b0a611e19 R08: 0000000000000000 R09: 0000000000000000
[  181.617108][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.617113][T14232] R13: 00007f4b0a7b6038 R14: 00007f4b0a7b5fa0 R15: 00007ffcbba083a8
[  181.617121][T14232]  </TASK>
[  181.833121][T14252] netlink: 164316 bytes leftover after parsing attributes in process `syz.1.2241'.
[  181.855243][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'.
[  181.859864][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'.
[  181.864598][T14256] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  181.869823][T14256] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  181.873657][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'.
[  181.873715][T14256] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  181.956163][T14262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.959587][T14262] syzkaller0: entered promiscuous mode
[  181.961430][T14262] syzkaller0: entered allmulticast mode
[  181.986700][T14264] netlink: 'syz.0.2245': attribute type 10 has an invalid length.
[  181.990139][T14264] dummy0: entered promiscuous mode
[  181.993593][T14264] team0: Port device dummy0 added
[  181.997145][T14264] netlink: 'syz.0.2245': attribute type 10 has an invalid length.
[  182.000394][T14264] dummy0: left promiscuous mode
[  182.005353][T14264] team0: Port device dummy0 removed
[  182.040227][T14275] netlink: 'syz.0.2249': attribute type 2 has an invalid length.
[  182.041874][T14274] netlink: 'syz.0.2249': attribute type 2 has an invalid length.
[  182.063439][T14279] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.114758][T14281] bridge18: entered promiscuous mode
[  182.118897][T14281] macsec0: entered promiscuous mode
[  182.120784][T14281] macsec0: entered allmulticast mode
[  182.122585][T14281] bridge18: entered allmulticast mode
[  182.125438][T14281] bridge18: port 1(macsec0) entered blocking state
[  182.130343][T14281] bridge18: port 1(macsec0) entered disabled state
[  182.134933][T14281] bridge18: left allmulticast mode
[  182.137942][T14281] bridge18: left promiscuous mode
[  182.147426][T14282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.218874][T14292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.248185][T14297] netlink: 'syz.0.2254': attribute type 102 has an invalid length.
[  182.251309][T14297] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.709737][T14314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.712631][T14314] IPv6: NLM_F_CREATE should be set when creating new route
[  182.715564][T14314] IPv6: NLM_F_CREATE should be set when creating new route
[  182.720054][T14314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.780723][T14314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  182.784017][T14314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  182.882799][T14321] tipc: Resetting bearer <eth:syzkaller0>
[  182.886830][T14321] netlink: 'syz.1.2260': attribute type 10 has an invalid length.
[  183.280882][T14340] netlink: 'syz.0.2267': attribute type 4 has an invalid length.
[  183.283796][T14340] netlink: 'syz.0.2267': attribute type 4 has an invalid length.
[  183.416547][T14347] netlink: 'syz.0.2270': attribute type 23 has an invalid length.
[  183.467326][T14349] xfrm0 speed is unknown, defaulting to 1000
[  183.533268][T14352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.594372][T14357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.600126][T14357] syzkaller0: entered promiscuous mode
[  183.601975][T14357] syzkaller0: entered allmulticast mode
[  183.607317][T14357] tipc: Resetting bearer <eth:syzkaller0>
[  183.617221][T14355] tipc: Resetting bearer <eth:syzkaller0>
[  183.624815][T14355] tipc: Disabling bearer <eth:syzkaller0>
[  183.769971][T14383] 8021q: adding VLAN 0 to HW filter on device bond13
[  183.773069][T14383] bond12: (slave bond13): making interface the new active one
[  183.776385][T14383] bond12: (slave bond13): Enslaving as an active interface with an up link
[  183.791352][T14383] bond12: (slave gretap1): Enslaving as a backup interface with an up link
[  183.797682][T14383] 8021q: adding VLAN 0 to HW filter on device bond12
[  183.905010][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.911470][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.914331][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.919401][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.930170][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.934302][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.938749][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.941941][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.954364][T14417] vlan0: entered promiscuous mode
[  183.956558][T14417] bridge0: entered promiscuous mode
[  183.970490][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.973229][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.977208][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.980113][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.011447][T14423] pim6reg1: entered promiscuous mode
[  184.018206][T14423] pim6reg1: entered allmulticast mode
[  184.032299][T14425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.800801][T14454] gtp7: entered promiscuous mode
[  184.802607][T14454] gtp7: entered allmulticast mode
[  184.858111][T14458] : entered promiscuous mode
[  185.032705][T14475] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  185.358258][T14496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.360773][T14496] syzkaller0: entered promiscuous mode
[  185.362682][T14496] syzkaller0: entered allmulticast mode
[  185.392988][T14496] tipc: Resetting bearer <eth:syzkaller0>
[  185.396257][T14495] tipc: Resetting bearer <eth:syzkaller0>
[  185.399599][T14495] tipc: Disabling bearer <eth:syzkaller0>
[  185.521624][T14505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.530889][T14506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.644941][T14524] __nla_validate_parse: 46 callbacks suppressed
[  185.644952][T14524] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2319'.
[  185.791060][T14533] xfrm0 speed is unknown, defaulting to 1000
[  185.897046][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'.
[  185.900928][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'.
[  185.908608][T14533] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  185.950695][T14551] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2327'.
[  185.981373][T14551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2327'.
[  185.981504][T14557] 8021q: adding VLAN 0 to HW filter on device bond17
[  185.989301][T14557] bond17: (slave wlan0): Opening slave failed
[  185.992185][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'.
[  185.994467][T14557] vlan0: entered allmulticast mode
[  186.000378][T14557] bond17: (slave vlan0): Opening slave failed
[  186.014493][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'.
[  186.019012][T14551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2327'.
[  186.022064][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'.
[  186.053239][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'.
[  186.134090][T14585] netlink: 'syz.0.2334': attribute type 11 has an invalid length.
[  186.197458][T14587] tipc: Resetting bearer <eth:syzkaller0>
[  186.217744][T14587] netlink: zone id is out of range
[  186.219674][T14587] netlink: zone id is out of range
[  186.221500][T14587] netlink: zone id is out of range
[  186.223312][T14587] netlink: zone id is out of range
[  186.255503][T14586] tipc: Resetting bearer <eth:syzkaller0>
[  186.344381][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  186.349109][T14612] syzkaller0: left promiscuous mode
[  186.350925][T14612] syzkaller0: left allmulticast mode
[  186.372445][T14612] vlan0: left promiscuous mode
[  186.374104][T14612] bridge0: left promiscuous mode
[  186.383982][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.387679][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.390435][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.393140][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.601219][T14627] dvmrp0: entered allmulticast mode
[  186.675474][T14629] batadv_slave_0: entered promiscuous mode
[  186.679191][T14629] batadv_slave_0: entered allmulticast mode
[  186.758065][T14638] ip6tnl7: entered promiscuous mode
[  186.766488][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  186.838689][T14645] dvmrp1: entered allmulticast mode
[  186.881514][T14647] validate_nla: 22 callbacks suppressed
[  186.881524][T14647] netlink: 'syz.2.2351': attribute type 1 has an invalid length.
[  187.027824][T14670] netlink: 'syz.2.2356': attribute type 2 has an invalid length.
[  187.039957][T14670] net_ratelimit: 1 callbacks suppressed
[  187.039962][T14670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.097503][T14677] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  187.099993][T14677] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  187.133325][T14686] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.151925][T14687] syzkaller0: entered promiscuous mode
[  187.153737][T14687] syzkaller0: entered allmulticast mode
[  187.210720][T14698] netlink: 'syz.0.2362': attribute type 16 has an invalid length.
[  187.272545][T14707] veth0: entered promiscuous mode
[  187.283385][T14713] veth0 (unregistering): left promiscuous mode
[  187.296823][T14704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.302093][T14715] tipc: Resetting bearer <eth:syzkaller0>
[  187.321492][T14715] tipc: Disabling bearer <eth:syzkaller0>
[  187.333100][T14717] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.372207][T14722] macsec0: entered promiscuous mode
[  187.373962][T14722] batadv0: entered promiscuous mode
[  187.376793][T14722] macsec0: entered allmulticast mode
[  187.378574][T14722] batadv0: entered allmulticast mode
[  187.381046][T14722] batadv0: left allmulticast mode
[  187.382921][T14722] batadv0: left promiscuous mode
[  187.523521][T14741] ip6tnl7: left promiscuous mode
[  187.528307][T14743] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.602799][T14745] netlink: 'syz.2.2376': attribute type 9 has an invalid length.
[  187.608621][T14745] macvlan0: entered promiscuous mode
[  187.610395][T14745] hsr0: entered promiscuous mode
[  187.612189][T14745] macvlan0: entered allmulticast mode
[  187.614112][T14745] hsr0: entered allmulticast mode
[  187.615830][T14745] hsr_slave_0: entered allmulticast mode
[  187.646954][T14758] gtp9: entered promiscuous mode
[  187.648699][T14758] gtp9: entered allmulticast mode
[  187.662687][T14755] netlink: 'syz.2.2378': attribute type 2 has an invalid length.
[  187.699405][T14762] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  187.702401][T14762] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  187.872975][T14778] dvmrp0: entered allmulticast mode
[  187.907066][T14786] netlink: 'syz.0.2386': attribute type 1 has an invalid length.
[  187.910002][T14786] netlink: 'syz.0.2386': attribute type 1 has an invalid length.
[  187.979337][T14795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.985796][T14795] openvswitch: netlink: Missing key (keys=40, expected=80)
[  188.159658][T14820] netlink: 'syz.2.2396': attribute type 12 has an invalid length.
[  188.308793][T14832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  188.312995][T14832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  188.433522][T14851] 8021q: adding VLAN 0 to HW filter on device bond15
[  188.445066][T14851] 8021q: adding VLAN 0 to HW filter on device bond15
[  188.448854][T14851] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  188.452688][T14851] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  188.497610][T14861] veth1: entered promiscuous mode
[  188.501417][T14861] bond15: (slave veth1): Enslaving as an active interface with a down link
[  188.506602][T14861] erspan0: entered allmulticast mode
[  188.511517][T14861] bond15: (slave erspan0): making interface the new active one
[  188.515187][T14861] bond15: (slave erspan0): Enslaving as an active interface with an up link
[  188.562347][T14865] dvmrp3: entered allmulticast mode
[  188.565218][T14865] dvmrp0: left allmulticast mode
[  188.568503][T14865] dvmrp3: left allmulticast mode
[  188.845419][T14896] tipc: Resetting bearer <eth:syzkaller0>
[  188.855101][T14899] IPVS: Error connecting to the multicast addr
[  188.924440][T14911] erspan0: left allmulticast mode
[  188.929518][T14911] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  188.931970][T14911] syzkaller0: left promiscuous mode
[  188.933864][T14911] syzkaller0: left allmulticast mode
[  188.940171][T14911] gtp9: left promiscuous mode
[  188.941806][T14911] gtp9: left allmulticast mode
[  188.944055][T14911] veth1: left promiscuous mode
[  189.168498][T14947] IPVS: length: 83 != 24
[  189.223834][T14950] tipc: Resetting bearer <eth:syzkaller0>
[  189.230121][T14949] tipc: Resetting bearer <eth:syzkaller0>
[  189.375480][T14962] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.381962][T14962] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  189.384641][T14962] CPU: 0 UID: 0 PID: 14962 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) 
[  189.384653][T14962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.384658][T14962] Call Trace:
[  189.384662][T14962]  <TASK>
[  189.384665][T14962]  dump_stack_lvl+0x189/0x250
[  189.384679][T14962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.384689][T14962]  ? __pfx__printk+0x10/0x10
[  189.384700][T14962]  ? kernfs_root+0x1c/0x230
[  189.384709][T14962]  ? kernfs_path_from_node+0x2f/0x290
[  189.384718][T14962]  ? kernfs_path_from_node+0x250/0x290
[  189.384726][T14962]  ? kernfs_path_from_node+0x2f/0x290
[  189.384735][T14962]  sysfs_warn_dup+0x8e/0xa0
[  189.384742][T14962]  sysfs_do_create_link_sd+0xc0/0x110
[  189.384751][T14962]  device_add_class_symlinks+0x1cf/0x240
[  189.384760][T14962]  device_add+0x475/0xb50
[  189.384767][T14962]  wiphy_register+0x1ba6/0x28d0
[  189.384781][T14962]  ? __pfx_wiphy_register+0x10/0x10
[  189.384791][T14962]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  189.384800][T14962]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  189.384813][T14962]  ieee80211_register_hw+0x3484/0x4100
[  189.384824][T14962]  ? ieee80211_register_hw+0x14a1/0x4100
[  189.384833][T14962]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  189.384842][T14962]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.384852][T14962]  ? __hrtimer_setup+0x187/0x210
[  189.384859][T14962]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  189.384870][T14962]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  189.384882][T14962]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  189.384890][T14962]  ? trace_kmalloc+0x1f/0xd0
[  189.384899][T14962]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  189.384908][T14962]  ? kstrndup+0xbf/0x160
[  189.384917][T14962]  hwsim_new_radio_nl+0xea4/0x1b10
[  189.384926][T14962]  ? __pfx___nla_validate_parse+0x10/0x10
[  189.384939][T14962]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.384949][T14962]  ? __nla_parse+0x40/0x60
[  189.384960][T14962]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  189.384970][T14962]  genl_family_rcv_msg_doit+0x215/0x300
[  189.384980][T14962]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  189.384989][T14962]  ? bpf_lsm_capable+0x9/0x20
[  189.384999][T14962]  ? security_capable+0x7e/0x2e0
[  189.385033][T14962]  genl_rcv_msg+0x60e/0x790
[  189.385043][T14962]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.385050][T14962]  ? __kasan_slab_alloc+0x6c/0x80
[  189.385060][T14962]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.385069][T14962]  ? __netlink_lookup+0xbd/0x810
[  189.385075][T14962]  ? rcu_is_watching+0x15/0xb0
[  189.385084][T14962]  netlink_rcv_skb+0x208/0x470
[  189.385096][T14962]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.385103][T14962]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.385115][T14962]  ? lock_release+0x4b/0x3e0
[  189.385126][T14962]  ? down_read+0x1ad/0x2e0
[  189.385133][T14962]  genl_rcv+0x28/0x40
[  189.385139][T14962]  netlink_unicast+0x82f/0x9e0
[  189.385149][T14962]  ? __pfx_netlink_unicast+0x10/0x10
[  189.385159][T14962]  ? netlink_sendmsg+0x642/0xb30
[  189.385173][T14962]  ? skb_put+0x11b/0x210
[  189.385183][T14962]  netlink_sendmsg+0x805/0xb30
[  189.385199][T14962]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.385214][T14962]  ? futex_unqueue+0x22/0x240
[  189.385226][T14962]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.385245][T14962]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.385258][T14962]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.385274][T14962]  __sock_sendmsg+0x21c/0x270
[  189.385290][T14962]  ____sys_sendmsg+0x505/0x830
[  189.385303][T14962]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.385315][T14962]  ? import_iovec+0x74/0xa0
[  189.385328][T14962]  ___sys_sendmsg+0x21f/0x2a0
[  189.385339][T14962]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.385352][T14962]  ? futex_wait+0x285/0x360
[  189.385375][T14962]  ? __fget_files+0x2a/0x420
[  189.385391][T14962]  ? __fget_files+0x3a0/0x420
[  189.385402][T14962]  __x64_sys_sendmsg+0x19b/0x260
[  189.385410][T14962]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.385419][T14962]  ? rcu_is_watching+0x15/0xb0
[  189.385426][T14962]  do_syscall_64+0xfa/0x3b0
[  189.385437][T14962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.385444][T14962]  ? exc_page_fault+0x9f/0xf0
[  189.385453][T14962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.385460][T14962] RIP: 0033:0x7f58ae98ebe9
[  189.385467][T14962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.385474][T14962] RSP: 002b:00007f58af80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.385483][T14962] RAX: ffffffffffffffda RBX: 00007f58aebb5fa0 RCX: 00007f58ae98ebe9
[  189.385488][T14962] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  189.385493][T14962] RBP: 00007f58aea11e19 R08: 0000000000000000 R09: 0000000000000000
[  189.385497][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.385501][T14962] R13: 00007f58aebb6038 R14: 00007f58aebb5fa0 R15: 00007ffc1fc6bdc8
[  189.385509][T14962]  </TASK>
[  189.720655][T14969] tipc: Resetting bearer <eth:syzkaller0>
[  189.744583][T14971] sit0: entered promiscuous mode
[  189.763328][T14973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.766881][T14973] tipc: Resetting bearer <eth:syzkaller0>
[  189.770365][T14973] netlink: 'syz.1.2434': attribute type 11 has an invalid length.
[  189.889982][T14987] dvmrp1: entered allmulticast mode
[  189.892464][T14987] dvmrp1: left allmulticast mode
[  189.917829][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  189.922336][  T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.926440][  T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.013276][T14997] xfrm0 speed is unknown, defaulting to 1000
[  190.304641][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.309694][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.312911][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.315641][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.460180][T15030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.463250][T15030] syzkaller0: entered promiscuous mode
[  190.465104][T15030] syzkaller0: entered allmulticast mode
[  190.515220][T15034] bridge23: port 1(veth0_to_bond) entered blocking state
[  190.518520][T15034] bridge23: port 1(veth0_to_bond) entered disabled state
[  190.521520][T15034] veth0_to_bond: entered allmulticast mode
[  190.524404][T15034] veth0_to_bond: entered promiscuous mode
[  190.530110][T15034] vlan1: entered allmulticast mode
[  190.532250][T15034] veth1: entered allmulticast mode
[  190.534300][T15034] bridge23: port 2(vlan1) entered blocking state
[  190.536891][T15034] bridge23: port 2(vlan1) entered disabled state
[  190.539609][T15034] vlan1: entered promiscuous mode
[  190.541608][T15034] veth1: entered promiscuous mode
[  190.728305][T15048] __nla_validate_parse: 54 callbacks suppressed
[  190.728316][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'.
[  190.759117][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'.
[  190.763197][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'.
[  190.767913][T15050] netlink: 'syz.0.2455': attribute type 11 has an invalid length.
[  190.777549][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'.
[  190.790166][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'.
[  190.820246][T15065] syzkaller0: entered promiscuous mode
[  190.822190][T15065] syzkaller0: entered allmulticast mode
[  190.914878][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2460'.
[  191.002489][T15079] syzkaller0: entered promiscuous mode
[  191.004669][T15079] syzkaller0: entered allmulticast mode
[  191.010319][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'.
[  191.010434][T15078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.019436][T15078] tipc: Resetting bearer <eth:syzkaller0>
[  191.022604][T15077] tipc: Resetting bearer <eth:syzkaller0>
[  191.028876][T15077] tipc: Disabling bearer <eth:syzkaller0>
[  191.124951][T15088] sit0: left promiscuous mode
[  191.135515][T15088] tipc: Resetting bearer <eth:syzkaller0>
[  191.139321][T15088] syzkaller0: left promiscuous mode
[  191.141537][T15088] syzkaller0: left allmulticast mode
[  191.146036][T15088] gtp7: left promiscuous mode
[  191.148044][T15088] gtp7: left allmulticast mode
[  191.169071][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'.
[  191.275682][T15098] bond15: (slave erspan0): Releasing active interface
[  191.281174][T15098] veth0_to_bond: left allmulticast mode
[  191.284391][T15098] veth0_to_bond: left promiscuous mode
[  191.287113][T15098] bridge23: port 1(veth0_to_bond) entered disabled state
[  191.291480][T15098] bond12: (slave bond13): Releasing backup interface
[  191.294280][T15098] bond12: (slave bond13): the permanent HWaddr of slave - 5e:f4:87:9a:20:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  191.299692][T15098] bond12: (slave gretap1): making interface the new active one
[  191.303595][T15098] bond12: (slave gretap1): Releasing backup interface
[  191.307157][T15098] bond15: (slave veth1): Releasing active interface
[  191.310459][T15098] vlan1: left promiscuous mode
[  191.312522][T15098] veth1: left promiscuous mode
[  191.314780][T15098] bridge23: port 2(vlan1) entered disabled state
[  191.800056][T15120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2474'.
[  191.855809][T15124] infiniband syz2: set down
[  191.857646][T15124] infiniband syz2: added bond0
[  191.865667][T15124] RDS/IB: syz2: added
[  191.867176][T15124] smc: adding ib device syz2 with port count 1
[  191.869118][T15124] smc:    ib device syz2 port 1 has pnetid 
[  191.937805][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'.
[  191.957782][T15134] validate_nla: 7 callbacks suppressed
[  191.957791][T15134] netlink: 'syz.1.2477': attribute type 48 has an invalid length.
[  192.033660][T15136] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  192.036494][T15136] netlink: 'syz.1.2478': attribute type 4 has an invalid length.
[  192.041213][T15136] vti1: entered promiscuous mode
[  192.245260][T15160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.406552][T15160] nbd0: detected capacity change from 0 to 127
[  192.411676][   T56] block nbd0: Receive control failed (result -32)
[  192.414401][T15165] block nbd0: Receive control failed (result -32)
[  192.438357][T15170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.447578][T15172] batadv0: mtu less than device minimum
[  192.637235][T15193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.677044][T15197] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.971620][T15213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.981629][T15214] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.989376][T15214] syzkaller0: entered promiscuous mode
[  192.991275][T15214] syzkaller0: entered allmulticast mode
[  192.993201][T15214] tipc: Resetting bearer <eth:syzkaller0>
[  192.997444][T15212] tipc: Resetting bearer <eth:syzkaller0>
[  193.006484][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  193.270790][T15170] tipc: Disabling bearer <eth:syzkaller0>
[  193.312803][T15230] netlink: 'syz.1.2506': attribute type 12 has an invalid length.
[  193.364824][T15234] dvmrp1: left allmulticast mode
[  193.413468][T15238] dvmrp1: entered allmulticast mode
[  193.416865][T15238] dvmrp1: left allmulticast mode
[  193.595132][T15252] xfrm0 speed is unknown, defaulting to 1000
[  193.637890][T15253] netlink: 'syz.1.2513': attribute type 13 has an invalid length.
[  193.640853][T15253] netlink: 'syz.1.2513': attribute type 17 has an invalid length.
[  193.657614][T15253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.770708][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.771197][T15261] netlink: 'syz.2.2516': attribute type 30 has an invalid length.
[  193.827801][T15267] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  193.969445][T15273] pim6reg1: entered promiscuous mode
[  193.971572][T15273] pim6reg1: entered allmulticast mode
[  194.018089][T15273] syzkaller0: left promiscuous mode
[  194.019962][T15273] syzkaller0: left allmulticast mode
[  194.028369][T15273] 8021q: adding VLAN 0 to HW filter on device bond16
[  194.031445][T15273] bond16: entered promiscuous mode
[  194.033737][T15273] team0: Port device bond16 added
[  194.045377][T15274] 8021q: adding VLAN 0 to HW filter on device bond17
[  194.049437][T15274] bond17: entered promiscuous mode
[  194.052150][T15274] team0: Port device bond17 added
[  194.090359][T15281] gretap0: entered promiscuous mode
[  194.112297][T15283] tipc: Resetting bearer <eth:syzkaller0>
[  194.123089][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.126223][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.131102][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.134471][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.275151][T15286] netlink: 'syz.1.2524': attribute type 11 has an invalid length.
[  194.278977][T15289] netlink: 'syz.1.2524': attribute type 11 has an invalid length.
[  194.355496][T15302] netlink: 'syz.1.2528': attribute type 12 has an invalid length.
[  194.466200][T15317] netlink: 'syz.0.2533': attribute type 39 has an invalid length.
[  194.482342][T15321] bridge0: entered promiscuous mode
[  194.686730][T15341] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  194.690474][T15341] CPU: 1 UID: 0 PID: 15341 Comm: syz.1.2539 Not tainted syzkaller #0 PREEMPT(full) 
[  194.690491][T15341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.690498][T15341] Call Trace:
[  194.690503][T15341]  <TASK>
[  194.690509][T15341]  dump_stack_lvl+0x189/0x250
[  194.690525][T15341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.690533][T15341]  ? __pfx__printk+0x10/0x10
[  194.690544][T15341]  ? kernfs_root+0x1c/0x230
[  194.690553][T15341]  ? kernfs_path_from_node+0x2f/0x290
[  194.690561][T15341]  ? kernfs_path_from_node+0x250/0x290
[  194.690569][T15341]  ? kernfs_path_from_node+0x2f/0x290
[  194.690577][T15341]  sysfs_warn_dup+0x8e/0xa0
[  194.690584][T15341]  sysfs_do_create_link_sd+0xc0/0x110
[  194.690591][T15341]  device_add_class_symlinks+0x1cf/0x240
[  194.690600][T15341]  device_add+0x475/0xb50
[  194.690607][T15341]  wiphy_register+0x1ba6/0x28d0
[  194.690621][T15341]  ? __pfx_wiphy_register+0x10/0x10
[  194.690630][T15341]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  194.690638][T15341]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  194.690650][T15341]  ieee80211_register_hw+0x3484/0x4100
[  194.690660][T15341]  ? ieee80211_register_hw+0x14a1/0x4100
[  194.690669][T15341]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  194.690678][T15341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.690688][T15341]  ? __hrtimer_setup+0x187/0x210
[  194.690695][T15341]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  194.690706][T15341]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  194.690718][T15341]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  194.690726][T15341]  ? trace_kmalloc+0x1f/0xd0
[  194.690735][T15341]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  194.690744][T15341]  ? kstrndup+0xbf/0x160
[  194.690753][T15341]  hwsim_new_radio_nl+0xea4/0x1b10
[  194.690762][T15341]  ? __pfx___nla_validate_parse+0x10/0x10
[  194.690776][T15341]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.690787][T15341]  ? __nla_parse+0x40/0x60
[  194.690797][T15341]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  194.690806][T15341]  genl_family_rcv_msg_doit+0x215/0x300
[  194.690815][T15341]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  194.690825][T15341]  ? bpf_lsm_capable+0x9/0x20
[  194.690834][T15341]  ? security_capable+0x7e/0x2e0
[  194.690845][T15341]  genl_rcv_msg+0x60e/0x790
[  194.690854][T15341]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.690861][T15341]  ? __kasan_slab_alloc+0x6c/0x80
[  194.690869][T15341]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.690878][T15341]  ? __netlink_lookup+0xbd/0x810
[  194.690883][T15341]  ? rcu_is_watching+0x15/0xb0
[  194.690892][T15341]  netlink_rcv_skb+0x208/0x470
[  194.690902][T15341]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.690909][T15341]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  194.690920][T15341]  ? lock_release+0x4b/0x3e0
[  194.690930][T15341]  ? down_read+0x1ad/0x2e0
[  194.690937][T15341]  genl_rcv+0x28/0x40
[  194.690943][T15341]  netlink_unicast+0x82f/0x9e0
[  194.690953][T15341]  ? __pfx_netlink_unicast+0x10/0x10
[  194.690962][T15341]  ? netlink_sendmsg+0x642/0xb30
[  194.690971][T15341]  ? skb_put+0x11b/0x210
[  194.690978][T15341]  netlink_sendmsg+0x805/0xb30
[  194.690988][T15341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.691025][T15341]  ? futex_unqueue+0x22/0x240
[  194.691033][T15341]  ? aa_sock_msg_perm+0xf1/0x1d0
[  194.691040][T15341]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  194.691047][T15341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.691063][T15341]  __sock_sendmsg+0x21c/0x270
[  194.691076][T15341]  ____sys_sendmsg+0x505/0x830
[  194.691088][T15341]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.691100][T15341]  ? import_iovec+0x74/0xa0
[  194.691113][T15341]  ___sys_sendmsg+0x21f/0x2a0
[  194.691120][T15341]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.691128][T15341]  ? futex_wait+0x285/0x360
[  194.691142][T15341]  ? __fget_files+0x2a/0x420
[  194.691153][T15341]  ? __fget_files+0x3a0/0x420
[  194.691171][T15341]  __x64_sys_sendmsg+0x19b/0x260
[  194.691183][T15341]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.691198][T15341]  ? rcu_is_watching+0x15/0xb0
[  194.691210][T15341]  do_syscall_64+0xfa/0x3b0
[  194.691225][T15341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.691236][T15341]  ? exc_page_fault+0x9f/0xf0
[  194.691254][T15341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.691262][T15341] RIP: 0033:0x7f58ae98ebe9
[  194.691269][T15341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.691276][T15341] RSP: 002b:00007f58af80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.691286][T15341] RAX: ffffffffffffffda RBX: 00007f58aebb5fa0 RCX: 00007f58ae98ebe9
[  194.691292][T15341] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  194.691297][T15341] RBP: 00007f58aea11e19 R08: 0000000000000000 R09: 0000000000000000
[  194.691301][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.691306][T15341] R13: 00007f58aebb6038 R14: 00007f58aebb5fa0 R15: 00007ffc1fc6bdc8
[  194.691314][T15341]  </TASK>
[  194.907485][T15345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.337215][T15356] syzkaller0: entered promiscuous mode
[  195.339353][T15356] syzkaller0: entered allmulticast mode
[  195.342321][T15355] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.407543][T15368] tipc: Resetting bearer <eth:syzkaller0>
[  195.409580][T15368] tipc: Resetting bearer <eth:syzkaller0>
[  195.412008][T15369] tipc: Resetting bearer <eth:syzkaller0>
[  195.440332][T15371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.447332][T15372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.499207][T15374] xt_limit: Overflow, try lower: 271964/0
[  195.773917][T15404] __nla_validate_parse: 99 callbacks suppressed
[  195.773927][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2553'.
[  195.880085][T15415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'.
[  195.912126][T15416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.933661][T15412] xfrm0 speed is unknown, defaulting to 1000
[  196.054460][T15432] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  196.091635][T15439] syzkaller0: entered promiscuous mode
[  196.093828][T15439] syzkaller0: entered allmulticast mode
[  196.203411][T15451] tipc: Resetting bearer <eth:syzkaller0>
[  196.205834][T15451] tipc: Resetting bearer <eth:syzkaller0>
[  196.222027][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2566'.
[  196.239222][T15457] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2567'.
[  196.496581][T15488] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2573'.
[  196.499775][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  196.530406][T15493] gretap0: left promiscuous mode
[  196.534499][T15493] 8021q: adding VLAN 0 to HW filter on device team0
[  196.537787][T15493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.584542][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'.
[  196.687677][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  196.841723][ T5719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  196.844871][ T5719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  196.850533][ T5719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  196.853545][ T5719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  196.868815][T15518] xfrm0 speed is unknown, defaulting to 1000
[  196.992812][T15519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.035078][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2580'.
[  197.267035][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'.
[  197.380035][T15549] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  197.439847][T15551] gtp3: entered promiscuous mode
[  197.442045][T15551] gtp3: entered allmulticast mode
[  197.502376][T15558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.504897][T15558] syzkaller0: entered promiscuous mode
[  197.509809][T15558] syzkaller0: entered allmulticast mode
[  197.516098][T15558] tipc: Resetting bearer <eth:syzkaller0>
[  197.518729][T15557] tipc: Resetting bearer <eth:syzkaller0>
[  197.522440][T15557] tipc: Disabling bearer <eth:syzkaller0>
[  197.631217][T15564] validate_nla: 8 callbacks suppressed
[  197.631232][T15564] netlink: 'syz.2.2593': attribute type 2 has an invalid length.
[  197.799077][T15576] IPVS: persistence engine module ip_vs_pe_ not found
[  197.802056][ T5870] IPVS: starting estimator thread 0...
[  197.854702][T15580] hsr0: left allmulticast mode
[  197.860725][T15580] hsr_slave_0: left allmulticast mode
[  197.862548][T15580] hsr0: left promiscuous mode
[  197.864274][T15580] macvlan0: left promiscuous mode
[  197.866396][T15580] macvlan0: left allmulticast mode
[  197.869808][T15580] gtp3: left promiscuous mode
[  197.871487][T15580] gtp3: left allmulticast mode
[  197.886111][T15582] IPVS: using max 124 ests per chain, 297600 per kthread
[  197.896967][T15590] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.900683][T15590] tipc: Resetting bearer <eth:syzkaller0>
[  197.995420][T15592] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  198.022004][T15594] netlink: 'syz.0.2599': attribute type 4 has an invalid length.
[  198.057426][T15595] veth15: entered promiscuous mode
[  198.138694][T15603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.142070][T15603] syzkaller0: mtu less than device minimum
[  198.176414][T15611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.179749][T15611] tipc: Resetting bearer <eth:syzkaller0>
[  198.208691][T15613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.258906][T15619] netlink: 'syz.1.2609': attribute type 1 has an invalid length.
[  198.263578][T15619] tipc: Resetting bearer <eth:syzkaller0>
[  198.819564][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.823519][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.827630][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.830793][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.844845][T15657] netlink: 'syz.2.2617': attribute type 1 has an invalid length.
[  198.945413][T15669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  199.060422][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.067428][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.070745][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.078576][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.294251][T15682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.411735][T15692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.477806][T15696] netlink: 'syz.1.2628': attribute type 23 has an invalid length.
[  199.750024][T15709] vlan0: entered promiscuous mode
[  199.752287][T15709] gretap0: entered promiscuous mode
[  199.836590][T15722] netlink: 'syz.1.2635': attribute type 9 has an invalid length.
[  199.879582][T15733] netlink: 'syz.2.2639': attribute type 1 has an invalid length.
[  199.921881][T15741] xfrm0 speed is unknown, defaulting to 1000
[  199.977697][T15728] netlink: 'syz.1.2637': attribute type 12 has an invalid length.
[  199.988292][T15748] syzkaller1: entered promiscuous mode
[  199.990238][T15748] syzkaller1: entered allmulticast mode
[  200.379241][T15786] netlink: 'syz.2.2650': attribute type 10 has an invalid length.
[  200.401809][T15786] syzkaller0: entered promiscuous mode
[  200.403759][T15786] syzkaller0: entered allmulticast mode
[  200.480936][T15793] tipc: Resetting bearer <eth:syzkaller0>
[  200.563462][T15795] delete_channel: no stack
[  200.792928][T15818] pim6reg1: entered promiscuous mode
[  200.794841][T15818] pim6reg1: entered allmulticast mode
[  200.889952][T15828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.929132][T15822] __nla_validate_parse: 27 callbacks suppressed
[  200.929147][T15822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'.
[  200.934924][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'.
[  200.943304][T15822] bond19 (unregistering): Released all slaves
[  201.043260][T15840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.101887][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'.
[  201.144528][T15859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.169932][T15861] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2666'.
[  201.193077][T15865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2667'.
[  201.199907][T15865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.202390][T15865] syzkaller0: entered promiscuous mode
[  201.204277][T15865] syzkaller0: entered allmulticast mode
[  201.208275][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'.
[  201.220143][T15865] tipc: Resetting bearer <eth:syzkaller0>
[  201.225251][T15864] tipc: Resetting bearer <eth:syzkaller0>
[  201.234701][T15864] tipc: Disabling bearer <eth:syzkaller0>
[  201.313712][T15792] tipc: Resetting bearer <eth:syzkaller0>
[  201.359497][T12865] tipc: Resetting bearer <eth:syzkaller0>
[  201.375757][T15881] dvmrp1: entered allmulticast mode
[  201.378858][T15881] dvmrp1: left allmulticast mode
[  201.414165][T15889] bond14: (slave bond15): Releasing backup interface
[  201.475686][T15899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'.
[  201.487407][T15903] tipc: Resetting bearer <eth:syzkaller0>
[  201.515270][T15909] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.515598][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  201.525067][T15899] gtp10: entered promiscuous mode
[  201.528334][T15899] gtp10: entered allmulticast mode
[  201.560055][T15913] tipc: Resetting bearer <eth:syzkaller0>
[  201.562486][T15913] bond16: left promiscuous mode
[  201.565679][T15913] team0: Port device bond16 removed
[  201.569457][T15913] bond17: left promiscuous mode
[  201.572723][T15913] team0: Port device bond17 removed
[  201.585509][T15913] team0: Mode changed to "loadbalance"
[  201.614136][T15915] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  201.719376][T15928] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2684'.
[  201.821637][T15945] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2686'.
[  201.889700][T15957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.990027][T15972] macvlan0: entered promiscuous mode
[  201.991827][T15972] hsr0: entered promiscuous mode
[  201.993657][T15972] macvlan0: entered allmulticast mode
[  201.995851][T15972] hsr0: entered allmulticast mode
[  202.000419][T15972] hsr_slave_0: entered allmulticast mode
[  202.002283][T15972] hsr_slave_1: entered allmulticast mode
[  202.026563][T15978] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.035088][T15978] sch_fq: defrate 257 ignored.
[  202.118289][T15994] tipc: Resetting bearer <eth:syzkaller0>
[  202.130549][T15994] xfrm0 speed is unknown, defaulting to 1000
[  202.144688][T15996] syzkaller1: entered promiscuous mode
[  202.150349][T15996] syzkaller1: entered allmulticast mode
[  202.359417][T16019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.523023][T16028] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002
[  202.609610][T16042] tipc: Resetting bearer <eth:syzkaller0>
[  202.614880][T16041] tipc: Resetting bearer <eth:syzkaller0>
[  202.652348][T16048] can: request_module (can-proto-0) failed.
[  202.684841][T16051] syzkaller1: entered allmulticast mode
[  202.691931][T16051] syzkaller1: left allmulticast mode
[  202.760658][T16059] validate_nla: 18 callbacks suppressed
[  202.760671][T16059] netlink: 'syz.1.2717': attribute type 10 has an invalid length.
[  202.767224][T16059] netlink: 'syz.1.2717': attribute type 10 has an invalid length.
[  202.770704][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  202.829152][T16061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.832308][T16061] syzkaller0: entered promiscuous mode
[  202.834531][T16061] syzkaller0: entered allmulticast mode
[  202.842440][T16060] tipc: Resetting bearer <eth:syzkaller0>
[  202.848678][T16060] tipc: Disabling bearer <eth:syzkaller0>
[  202.980135][T16064] netlink: 'syz.2.2719': attribute type 23 has an invalid length.
[  203.051016][T16068] netlink: 'syz.2.2721': attribute type 10 has an invalid length.
[  203.055375][T16070] netlink: 'syz.2.2721': attribute type 10 has an invalid length.
[  203.109241][T16077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.112249][T16077] syzkaller0: entered allmulticast mode
[  203.119102][T16077] tipc: Resetting bearer <eth:syzkaller0>
[  203.124745][T16076] tipc: Disabling bearer <eth:syzkaller0>
[  203.191818][T16079] xfrm0 speed is unknown, defaulting to 1000
[  203.321534][T16083] netlink: 'syz.0.2725': attribute type 1 has an invalid length.
[  203.373337][T16089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.481987][   T29] tipc: Resetting bearer <eth:syzkaller0>
[  203.714101][T16119] netlink: 'syz.2.2733': attribute type 10 has an invalid length.
[  203.822574][T16135] netlink: 'syz.2.2739': attribute type 10 has an invalid length.
[  203.857373][T16136] vlan0: left promiscuous mode
[  203.859031][T16136] gretap0: left promiscuous mode
[  203.860931][T16136] tipc: Resetting bearer <eth:syzkaller0>
[  203.863211][T16136] syzkaller0: left promiscuous mode
[  203.865197][T16136] syzkaller0: left allmulticast mode
[  203.869380][T16136] vti1: left promiscuous mode
[  203.874374][T16135] pim6reg9: entered allmulticast mode
[  204.021204][T16144] bond0 (unregistering): Released all slaves
[  204.023411][T12865] smc: removing ib device syz2
[  204.154180][T16149] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  204.355885][T16162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.358535][T16162] syzkaller0: entered promiscuous mode
[  204.360529][T16162] syzkaller0: entered allmulticast mode
[  204.365752][T16162] tipc: Resetting bearer <eth:syzkaller0>
[  204.368856][T16161] tipc: Resetting bearer <eth:syzkaller0>
[  204.373083][T16161] tipc: Disabling bearer <eth:syzkaller0>
[  204.513873][T16164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.643562][T16180] netlink: 'syz.1.2750': attribute type 1 has an invalid length.
[  204.659300][T16180] 8021q: adding VLAN 0 to HW filter on device bond14
[  204.861810][T16214] gretap0: entered promiscuous mode
[  204.889122][T16216] smc: net device bond0 applied user defined pnetid SYZ
[  204.933364][T16218] gretap0: Device is already in use.
[  205.030684][T16235] syzkaller1: entered promiscuous mode
[  205.032770][T16235] syzkaller1: entered allmulticast mode
[  205.078329][T16245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.082031][T16245] syzkaller0: entered promiscuous mode
[  205.084281][T16245] syzkaller0: entered allmulticast mode
[  205.092885][T16245] tipc: Resetting bearer <eth:syzkaller0>
[  205.097378][T16244] tipc: Resetting bearer <eth:syzkaller0>
[  205.101238][T16244] tipc: Disabling bearer <eth:syzkaller0>
[  205.281832][T16255] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.289668][T16255] bond0: (slave wlan0): Enslaving as an active interface with a down link
[  205.298252][T16255] vlan1: entered allmulticast mode
[  205.300817][T16255] bond0: (slave vlan1): Opening slave failed
[  205.311759][T16263] xfrm0 speed is unknown, defaulting to 1000
[  205.344044][T16265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.631707][T16298] bridge18: entered promiscuous mode
[  205.640728][T16302] bridge19: entered promiscuous mode
[  205.690798][T16315] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  205.991412][T16333] __nla_validate_parse: 49 callbacks suppressed
[  205.991422][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  206.079271][T16336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2791'.
[  206.166572][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'.
[  206.171664][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'.
[  206.643613][T16348] mac80211_hwsim hwsim137 wlan1: entered allmulticast mode
[  206.651251][T16348] tipc: Resetting bearer <eth:syzkaller0>
[  206.661029][T16348] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.665005][T16348] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.914440][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'.
[  206.919772][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'.
[  207.054924][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  207.090479][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2800'.
[  207.090481][T16370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2800'.
[  207.090535][T16370] vlan0: entered promiscuous mode
[  207.098708][T16370] gretap0: entered promiscuous mode
[  207.131458][T16374] netlink: 'syz.1.2802': attribute type 11 has an invalid length.
[  207.217216][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2803'.
[  207.256864][   T33] audit: type=1800 audit(1756208952.281:2): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2801" name="cgroup.controllers" dev="tmpfs" ino=4455 res=0 errno=0
[  207.332865][T16388] vlan1: entered promiscuous mode
[  207.334798][T16388] bridge0: entered promiscuous mode
[  207.382429][T16391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.399993][T16393] xfrm0 speed is unknown, defaulting to 1000
[  207.459735][T16398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.477556][T16400] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  207.485335][T16401] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  207.582644][T16414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.587876][T16414] syzkaller0: entered promiscuous mode
[  207.590013][T16414] syzkaller0: entered allmulticast mode
[  207.592386][T16414] tipc: Resetting bearer <eth:syzkaller0>
[  207.604752][T16414] tipc: Resetting bearer <eth:syzkaller0>
[  207.630817][T16418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.782833][T16430] validate_nla: 21 callbacks suppressed
[  207.782848][T16430] netlink: 'syz.1.2818': attribute type 2 has an invalid length.
[  207.788909][T16430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.825190][T16432] netlink: 'syz.2.2819': attribute type 39 has an invalid length.
[  208.352640][T16460] netlink: 'syz.0.2824': attribute type 1 has an invalid length.
[  208.377862][T16464] tipc: Resetting bearer <eth:syzkaller0>
[  208.389922][T16464] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.393432][T16464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.581846][T16492] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.638108][T12865] tipc: Resetting bearer <eth:syzkaller0>
[  208.642913][T16501] netlink: 'syz.2.2833': attribute type 4 has an invalid length.
[  208.675386][T16503] tipc: Resetting bearer <eth:syzkaller0>
[  208.683805][T16503] netlink: 'syz.1.2834': attribute type 10 has an invalid length.
[  208.688071][T16506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.690854][T16505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.694494][T16506] syzkaller0: entered promiscuous mode
[  208.696839][T16506] syzkaller0: entered allmulticast mode
[  208.704490][T16506] tipc: Resetting bearer <eth:syzkaller0>
[  208.708858][T16504] tipc: Resetting bearer <eth:syzkaller0>
[  208.712994][T16504] tipc: Disabling bearer <eth:syzkaller0>
[  209.154606][T16526] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.240545][T16545] Bluetooth: hci0: Opcode 0x080f failed: -22
[  209.308518][T16557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.318706][T16557] syzkaller0: entered promiscuous mode
[  209.321820][T16557] syzkaller0: entered allmulticast mode
[  209.329841][T16557] tipc: Resetting bearer <eth:syzkaller0>
[  209.334485][T16556] tipc: Resetting bearer <eth:syzkaller0>
[  209.341192][T16556] tipc: Disabling bearer <eth:syzkaller0>
[  209.345599][T16564] veth0: entered promiscuous mode
[  209.349595][T16561] veth0 (unregistering): left promiscuous mode
[  209.359650][T16566] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  209.362382][T16566] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  209.368750][T16566] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  209.382580][T16566] 8021q: adding VLAN 0 to HW filter on device bond15
[  209.471833][T16576] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  209.529066][T16596] xfrm0 speed is unknown, defaulting to 1000
[  209.649317][T16596] unsupported nlmsg_type 40
[  209.651422][T16605] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  209.655315][T16596] netlink: 'syz.2.2859': attribute type 13 has an invalid length.
[  209.659893][T16596] netlink: 'syz.2.2859': attribute type 17 has an invalid length.
[  209.668601][T16596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  209.679095][T16607] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.827039][T16631] vlan1: entered allmulticast mode
[  209.828826][T16631] bond0: entered allmulticast mode
[  209.881495][T16635] gretap0: left promiscuous mode
[  210.082308][T16635] tipc: Resetting bearer <eth:syzkaller0>
[  210.718146][T16635] syzkaller0: left promiscuous mode
[  210.719894][T16635] syzkaller0: left allmulticast mode
[  210.722138][T16635] mac80211_hwsim hwsim137 wlan1: left allmulticast mode
[  210.726072][T16635] gtp10: left promiscuous mode
[  210.727686][T16635] gtp10: left allmulticast mode
[  210.729937][T16635] hsr0: left allmulticast mode
[  210.731600][T16635] hsr_slave_0: left allmulticast mode
[  210.733798][T16635] hsr_slave_1: left allmulticast mode
[  210.736070][T16635] hsr0: left promiscuous mode
[  210.738159][T16635] macvlan0: left promiscuous mode
[  210.740256][T16635] macvlan0: left allmulticast mode
[  210.750330][ T5719] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  210.753828][ T5719] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  210.767040][ T5719] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  210.775587][ T5719] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  210.847054][T16658] macvlan2: entered allmulticast mode
[  210.849011][T16658] hsr0: entered allmulticast mode
[  210.851197][T16658] hsr_slave_0: entered allmulticast mode
[  210.855319][T16658] hsr0: left allmulticast mode
[  210.857875][T16658] hsr_slave_0: left allmulticast mode
[  210.900924][T16664] tipc: Resetting bearer <eth:syzkaller0>
[  210.909508][T16664] syzkaller0: left promiscuous mode
[  210.911326][T16664] syzkaller0: left allmulticast mode
[  210.920973][T16664] tipc: Resetting bearer <eth:syzkaller0>
[  210.969931][T16670] IPVS: length: 4096 != 8
[  210.973729][T16670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.977704][T16670] syzkaller0: entered promiscuous mode
[  210.979693][T16670] syzkaller0: entered allmulticast mode
[  211.000026][T16670] tipc: Resetting bearer <eth:syzkaller0>
[  211.005037][T16669] tipc: Resetting bearer <eth:syzkaller0>
[  211.009281][T16669] tipc: Disabling bearer <eth:syzkaller0>
[  211.035297][T16676] __nla_validate_parse: 51 callbacks suppressed
[  211.035307][T16676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2883'.
[  211.068423][T16685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.079891][T16685] tipc: Resetting bearer <eth:syzkaller0>
[  211.084513][T16681] tipc: Disabling bearer <eth:syzkaller0>
[  211.100283][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2887'.
[  211.143923][T16696] 8021q: adding VLAN 0 to HW filter on device bond22
[  211.149523][T16696] bond22 (unregistering): Released all slaves
[  211.267646][T16705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2892'.
[  211.267884][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'.
[  211.302504][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'.
[  211.473374][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2894'.
[  211.499451][T16711] netlink: 'syz.0.2894': attribute type 11 has an invalid length.
[  211.756435][   T69] tipc: Resetting bearer <eth:syzkaller0>
[  211.815260][T16674] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  212.181680][T16753] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.185588][T16753] syzkaller0: entered promiscuous mode
[  212.191180][T16753] syzkaller0: entered allmulticast mode
[  212.193599][T16753] tipc: Resetting bearer <eth:syzkaller0>
[  212.232339][T16761] tipc: Resetting bearer <eth:syzkaller0>
[  212.237451][T16761] syzkaller0: left promiscuous mode
[  212.239589][T16761] syzkaller0: left allmulticast mode
[  212.242673][T16761] tipc: Resetting bearer <eth:syzkaller0>
[  212.252340][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'.
[  212.255287][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'.
[  212.258587][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'.
[  212.261541][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'.
[  212.312874][T16770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.317198][T16771] syzkaller0: entered promiscuous mode
[  212.319457][T16771] syzkaller0: entered allmulticast mode
[  212.322090][T16771] tipc: Resetting bearer <eth:syzkaller0>
[  212.350222][T16776] team0: Failed to send options change via netlink (err -105)
[  212.359769][T16776] team0: Failed to send options change via netlink (err -105)
[  212.363079][T16776] team0: Mode changed to "activebackup"
[  212.423832][T16786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.433868][T16786] syzkaller0: entered promiscuous mode
[  212.436378][T16786] syzkaller0: entered allmulticast mode
[  212.438922][T16786] tipc: Resetting bearer <eth:syzkaller0>
[  212.495599][T16791] tipc: Resetting bearer <eth:syzkaller0>
[  212.562008][T16797] bridge18: left promiscuous mode
[  212.563814][T16797] bridge19: left promiscuous mode
[  212.565638][T16797] vlan1: left allmulticast mode
[  212.570677][T16797] bond0: left allmulticast mode
[  212.766757][T13397] tipc: Resetting bearer <eth:syzkaller0>
[  212.923129][T16813] validate_nla: 5 callbacks suppressed
[  212.923138][T16813] netlink: 'syz.0.2921': attribute type 5 has an invalid length.
[  213.005657][T16819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.026852][T16821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.045799][T16823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.092951][T16828] netlink: 'syz.0.2928': attribute type 39 has an invalid length.
[  213.097474][T16830] netlink: 'syz.0.2928': attribute type 39 has an invalid length.
[  213.114777][T16832] tipc: Resetting bearer <eth:syzkaller0>
[  213.141890][T16834] netlink: 'syz.0.2930': attribute type 4 has an invalid length.
[  213.145020][T16834] netlink: 'syz.0.2930': attribute type 4 has an invalid length.
[  213.257573][T16849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.260500][T16849] syzkaller0: entered promiscuous mode
[  213.262810][T16849] syzkaller0: entered allmulticast mode
[  213.275706][T16849] tipc: Resetting bearer <eth:syzkaller0>
[  213.285133][T16847] tipc: Resetting bearer <eth:syzkaller0>
[  213.290597][T16847] tipc: Disabling bearer <eth:syzkaller0>
[  213.328640][T16855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.391697][T16866] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  213.394244][T16868] ieee80211 phy218: Selected rate control algorithm 'minstrel_ht'
[  213.395881][T16866] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  213.402215][T16866] CPU: 1 UID: 0 PID: 16866 Comm: syz.0.2938 Not tainted syzkaller #0 PREEMPT(full) 
[  213.405350][T16866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.408658][T16866] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  213.410660][T16866] Code: 18 00 74 08 4c 89 ef e8 0d 11 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 0a 10 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 e1 10 02 f8 4d 89 2e 41 80 3c 1f 00
[  213.417262][T16866] RSP: 0018:ffffc900080470e8 EFLAGS: 00010246
[  213.419265][T16866] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  213.421867][T16866] RDX: ffffc90004241000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  213.424416][T16866] RBP: ffff888110639fb0 R08: ffff888108beb980 R09: 0000000000000002
[  213.426892][T16866] R10: 000000000000000a R11: 0000000000000002 R12: ffff88811063ad28
[  213.429361][T16866] R13: ffff888110639fa8 R14: 0000000000000000 R15: 1ffff110220c75a6
[  213.431823][T16866] FS:  00007f20c24876c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  213.435040][T16866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.437224][T16866] CR2: 000000110c3474ec CR3: 000000010d5ba000 CR4: 00000000000006f0
[  213.439832][T16866] Call Trace:
[  213.440984][T16866]  <TASK>
[  213.441987][T16866]  ? xfrm_state_insert+0x44/0x60
[  213.443627][T16866]  xfrm_state_insert+0x54/0x60
[  213.445190][T16866]  ipcomp4_init_state+0x673/0xb20
[  213.446891][T16866]  __xfrm_init_state+0xa76/0x13f0
[  213.448582][T16866]  ? __xfrm_init_state+0x7ef/0x13f0
[  213.450319][T16866]  xfrm_add_sa+0x2f5b/0x4070
[  213.452100][T16866]  ? __pfx_xfrm_add_sa+0x10/0x10
[  213.453977][T16866]  ? apparmor_capable+0x137/0x1b0
[  213.455598][T16866]  ? __nla_parse+0x40/0x60
[  213.457069][T16866]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.458615][T16866]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.460432][T16866]  ? __pfx___mutex_trylock_common+0x10/0x10
[  213.462419][T16866]  ? kasan_save_track+0x4f/0x80
[  213.464021][T16866]  ? rcu_is_watching+0x15/0xb0
[  213.465635][T16866]  ? trace_contention_end+0x39/0x120
[  213.467336][T16866]  ? __mutex_lock+0x335/0x1350
[  213.468865][T16866]  netlink_rcv_skb+0x208/0x470
[  213.470423][T16866]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.472287][T16866]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.474265][T16866]  ? lock_release+0x4b/0x3e0
[  213.475792][T16866]  ? net_generic+0x1e/0x240
[  213.477317][T16866]  ? net_generic+0x1e/0x240
[  213.478815][T16866]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.480553][T16866]  xfrm_netlink_rcv+0x79/0x90
[  213.482101][T16866]  netlink_unicast+0x82f/0x9e0
[  213.483643][T16866]  ? __pfx_netlink_unicast+0x10/0x10
[  213.485345][T16866]  ? netlink_sendmsg+0x642/0xb30
[  213.486909][T16866]  ? skb_put+0x11b/0x210
[  213.488298][T16866]  netlink_sendmsg+0x805/0xb30
[  213.489839][T16866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.491500][T16866]  ? futex_unqueue+0x22/0x240
[  213.493226][T16866]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.494850][T16866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.496499][T16866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.498133][T16866]  __sock_sendmsg+0x21c/0x270
[  213.499616][T16866]  ____sys_sendmsg+0x505/0x830
[  213.501143][T16866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.502848][T16866]  ? import_iovec+0x74/0xa0
[  213.504318][T16866]  ___sys_sendmsg+0x21f/0x2a0
[  213.505851][T16866]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.507507][T16866]  ? futex_wait+0x285/0x360
[  213.508997][T16866]  ? __fget_files+0x2a/0x420
[  213.510502][T16866]  ? __fget_files+0x3a0/0x420
[  213.512039][T16866]  __x64_sys_sendmsg+0x19b/0x260
[  213.513887][T16866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.515709][T16866]  ? rcu_is_watching+0x15/0xb0
[  213.517301][T16866]  ? rcu_is_watching+0x15/0xb0
[  213.518917][T16866]  do_syscall_64+0xfa/0x3b0
[  213.520490][T16866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.522534][T16866]  ? exc_page_fault+0x9f/0xf0
[  213.524106][T16866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.526063][T16866] RIP: 0033:0x7f20c158ebe9
[  213.527549][T16866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.533658][T16866] RSP: 002b:00007f20c2487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.536436][T16866] RAX: ffffffffffffffda RBX: 00007f20c17b5fa0 RCX: 00007f20c158ebe9
[  213.539035][T16866] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  213.541568][T16866] RBP: 00007f20c1611e19 R08: 0000000000000000 R09: 0000000000000000
[  213.544058][T16866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.546619][T16866] R13: 00007f20c17b6038 R14: 00007f20c17b5fa0 R15: 00007ffcc0d94f38
[  213.549120][T16866]  </TASK>
[  213.550143][T16866] Modules linked in:
[  213.551658][T16866] ---[ end trace 0000000000000000 ]---
[  213.553428][T16866] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  213.555457][T16866] Code: 18 00 74 08 4c 89 ef e8 0d 11 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 0a 10 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 e1 10 02 f8 4d 89 2e 41 80 3c 1f 00
[  213.561585][T16866] RSP: 0018:ffffc900080470e8 EFLAGS: 00010246
[  213.563572][T16866] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  213.566241][T16866] RDX: ffffc90004241000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  213.568724][T16866] RBP: ffff888110639fb0 R08: ffff888108beb980 R09: 0000000000000002
[  213.571241][T16866] R10: 000000000000000a R11: 0000000000000002 R12: ffff88811063ad28
[  213.573753][T16866] R13: ffff888110639fa8 R14: 0000000000000000 R15: 1ffff110220c75a6
[  213.576405][T16866] FS:  00007f20c24876c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  213.579308][T16866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.581336][T16866] CR2: 000000110c3474ec CR3: 000000010d5ba000 CR4: 00000000000006f0
[  213.583794][T16866] Kernel panic - not syncing: Fatal exception in interrupt
[  213.586815][T16866] Kernel Offset: disabled
[  213.588225][T16866] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:49:18  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8ace13e3 RBX=0000000000000000 RCX=ffff8880397e8000 RDX=ffffc9000a819000
RSI=000000000001ae1f RDI=0000000000000000 RBP=ffffc90008016bb0 RSP=ffffc900080166f8
R8 =ffff88803c4e407c R9 =0000000000000000 R10=ffff88803c4e4088 R11=ffffed100789c810
R12=ffff8880378407c4 R13=dffffc0000000000 R14=1ffff11006f080f8 R15=ffff88803c4e4014
RIP=ffffffff81bfab76 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58af80e6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=0000000038aa8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=10000400001a0425 dfdbfc00f0bd2600
XMM02=00007f58aeb87498 00007f58aeb87470 XMM03=00007f58aeb874a8 00007f58aeb874a0
XMM04=00007f58af6ed100 00007f58aeb87460 XMM05=00007f58aeb87478 00007f58aeb874c0
XMM06=00007f58aeb874b8 00007f58aeb874b0 XMM07=00007f58aeb874a8 00007f58aeb874a0
XMM08=0000000000000000 00007f58aea12ee7 XMM09=0000000000000000 00007f58aea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000004e RBX=000000000000004e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000021567 RDI=0000000000021568 RBP=00000000000003f8 RSP=ffffc90008046910
R8 =ffff88801fd90237 R9 =1ffff11003fb2046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8dc R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f20c24876c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3474ec CR3=000000010d5ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f20c1787498 00007f20c1787470 XMM03=00007f20c17874a8 00007f20c17874a0
XMM04=00007f20c22ed100 00007f20c1787460 XMM05=00007f20c1787478 00007f20c17874c0
XMM06=00007f20c17874b8 00007f20c17874b0 XMM07=00007f20c17874a8 00007f20c17874a0
XMM08=0000000000000000 00007f20c1612ee7 XMM09=0000000000000000 00007f20c1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
