last executing test programs:

1.819064582s ago: executing program 0 (id=2185):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x897b, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0xb, 0xfffffffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x40, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x18000}, 0x40000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4884)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x1) (async)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x1)

1.730197711s ago: executing program 2 (id=2187):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008044)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(r1)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
close(0x3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0xa, 0x922000000003, 0x11)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000019c0)={'dvmrp0\x00', {0x2, 0x4e20, @loopback}})

1.728012841s ago: executing program 0 (id=2188):
syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "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"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0xb, 0x1, 0x0, 0x6, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
ioctl(r1, 0x8b32, &(0x7f0000000040)) (async, rerun: 64)
socket(0x10, 0x3, 0x0) (rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = socket(0x840000000002, 0x3, 0x100) (rerun: 64)
connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x34, 0x74e5}}], 0x18}}], 0x2, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20040804) (async, rerun: 64)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (rerun: 64)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async)
pwritev(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) (async, rerun: 32)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000400)="e8", &(0x7f0000000000)=@udp6=r7, 0x1}, 0x20) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="100027bd7000fbdbdf253400000008000300", @ANYRES32=r9, @ANYBLOB="0c00990009000000ff0300000a00060050505050505000000a0006010000000000000000140055007566a46a7bfa3066c03442a163bd52a81400fe00f8da7f0ab2057bc9f123d1974f2cccd31400550002333a7ffdf5b8407270c24d386bf7600500200147000000d3d7e4b1049ffe7a7832a52f5c5118b697e37281d3065aa64d42567f72025d4bd052bd97368eaf1ee3c309c654e4e5b4ae88cc2a37dcf2f0f7"], 0x84}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000) (async, rerun: 64)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r10) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (rerun: 64)

1.650188313s ago: executing program 0 (id=2189):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x29c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x270, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe6, 0x6, 0x1, 0x0, "ef2e446ee824a0bfbb12a4994c7b7072d87e75b3a5cfe0b8553a35e77bcfb63e24da0d8a0a66b7052e1ac6c4a7452416576edd98d34006d8ed6bc554181948b0006cdb7567f994092dab75d7425cc86ecd8511e6c907f05e435611dd1a3cb9c04b3a0a727c7bd09dde6fdc4682b63e9abcb6d5469f5f2ba8f9f96dc438b1eec75666a64859ba9be4665908d8dfa8dff9ab2f0cc5124143d2f052df216ed7d6c676770a5d253773ba057aac540877a332d4e254874082c5706cc0f2381265e6bbe5e201536af9f1861e9f8c456c20149081fea6b99ffa538f29bcfc6359d1bf4d17e2"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa000}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "a3497f5ecfe4d8b32735bab62b1f0fb21e4bce5b6b04cb75600e9bf2e45ecc58c09c3b16b46766abe1b58a514defe80fe544d6f11e657ac93bf1e6aa6f9755b3b7b63f4ad24e417c03aa621fff558f6565604080412966b8c8af2d7f4e2c2bc59d9d33caa2237634f107da3561906225d752235c6e14075c71eb8d6da1969b64cd72795eae2ae4d16dd6da837a432ac8f222a8fcedf91887eccc8a56af966bda9c68bc219a6436e4d995f94de6c1e4b44406cbade44af4"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000)
socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x11, 0x3, 0x0)
pipe(&(0x7f0000000040))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000100003040e000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076657468305f5f776966690008001f00b78298be24000e00010000000000000002000000000000007f00000000000000850e07c900000000"], 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.589403145s ago: executing program 0 (id=2190):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x23, 0x80805, 0x0)
writev(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000640)='$', 0x1}], 0x2)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x7, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x8b, 0x4, 0x4d6, 0x7ffff7ffffffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
recvmsg$unix(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f00000007c0)}, 0x20)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="205500002900070100000000fcdbdf25027c0000040031800800018004004080177bf24693299744e51fdc8514e2ca2f63533dcafa6cee5ffdb6e6dd212affce35c0c42a438cf3fd85c72bb1bd"], 0x20}}, 0x4010)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90)

1.588141271s ago: executing program 2 (id=2191):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
unshare(0x22010580)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
readv(r3, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000037db8e9b5398d387e4f72a9334c6e89c22d316ef7ac7d686c907f072f68cec4d0df53106fc0255eaddeb7de311cbe810edd8256db4cbb5edcbd2d3cc9cf316a1bd45dffff000050f6c83cbb3e336c6378e31d7047ac9714ee6418d73be95b1a6b7a9245d9d207392e8f882bb0a08a763405d1b68ee9de400ec1551bb3029d72e7b3d3996fd1a9be209f6db90d945c9f24fde72d75ac7785981ef22c7bd9ae6a50c27b", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000037db8e9b5398d387e4f72a9334c6e89c22d316ef7ac7d686c907f072f68cec4d0df53106fc0255eaddeb7de311cbe810edd8256db4cbb5edcbd2d3cc9cf316a1bd45dffff000050f6c83cbb3e336c6378e31d7047ac9714ee6418d73be95b1a6b7a9245d9d207392e8f882bb0a08a763405d1b68ee9de400ec1551bb3029d72e7b3d3996fd1a9be209f6db90d945c9f24fde72d75ac7785981ef22c7bd9ae6a50c27b", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2d, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x480, 0x0, 0x0) (async)
setsockopt$inet_opts(r8, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x90) (async)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x90)

1.519939989s ago: executing program 2 (id=2192):
r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0}) (rerun: 32)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRESOCT=r3, @ANYBLOB="0400000000002ab19babb80ffede41ac00"/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r4, 0x4}, 0x38)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r5, &(0x7f0000000080)=""/156, 0x9c, 0x0, 0x0, 0x0) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x13)
write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

738.986506ms ago: executing program 0 (id=2193):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@delqdisc={0x1f4, 0x25, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x7, 0xfff1}, {0xe, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xda, 0x1, 0x4, 0x0, 0x2, 0x2400, 0x9}}, {0x16, 0x2, [0x1, 0x2, 0x0, 0x8, 0x7, 0x36, 0x2, 0x9, 0xe]}}, {{0x1c, 0x1, {0x0, 0x5, 0x8, 0x7, 0x1, 0x4, 0x10, 0x9}}, {0x16, 0x2, [0x2, 0x39, 0x5, 0x4, 0x5, 0x0, 0x9f42, 0x10, 0xff]}}, {{0x1c, 0x1, {0xf2, 0x1, 0x1, 0x1b, 0x2, 0x1, 0x8000006, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x2, 0x2f, 0x2, 0xfd2c, 0x1, 0x7fffffff, 0x6, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x4, 0x2, 0x3, 0x2, 0x3]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0xfff80000, 0x2, 0x8000, 0x743c74cc, 0x8}}, {0x14, 0x2, [0x9, 0xfe, 0x4, 0x5, 0x77, 0x2afa, 0x3f, 0xfffb]}}, {{0x1c, 0x1, {0x8, 0x1, 0x1, 0x7, 0x1, 0x1, 0x7, 0x8}}, {0x14, 0x2, [0x8, 0x8, 0xeb9, 0x6, 0xfffa, 0x5, 0x4, 0x9]}}, {{0x1c, 0x1, {0x0, 0x9, 0x1, 0x1, 0x0, 0xfffffffb, 0x53d3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x10, 0x81, 0x9, 0x2, 0x3, 0x6, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xc9d0}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5502}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x1f4}}, 0x44040)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x4e23, 0x2, 'sed\x00', 0x17, 0x5, 0x6a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeaf)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r10, &(0x7f0000000280), 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))

580.000618ms ago: executing program 2 (id=2194):
socket$netlink(0x10, 0x3, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
socket(0x3, 0x0, 0x4)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080))

499.915407ms ago: executing program 2 (id=2195):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$inet_icmp(0x2, 0x2, 0x1)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="53d3"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

497.868604ms ago: executing program 1 (id=2196):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xb, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/432], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xf, 0x1ffffffff}}}, {{@arp={@private=0xa010101, @remote, 0xff, 0xff000000, 0xf, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x8, 0x4, 0x5, 0x7f, 0xfffe, 'bond_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @local, @empty, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@multicast2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@remote, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

268.994604ms ago: executing program 1 (id=2197):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0xa)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
syz_genetlink_get_family_id$wireguard(0x0, r1)
unshare(0x26020480)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x256d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0)

266.973738ms ago: executing program 2 (id=2198):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r2)
splice(r0, 0x0, r1, 0x0, 0x1100000000f336, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000))
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRESOCT], 0x30}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_getaddr={0x60, 0x16, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x80, 0xfe, r8}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0xe, 0x4, 0x3, 0xeb2}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x5}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x1ff, 0xc}}]}, 0x60}}, 0x0)
getpeername(r7, &(0x7f0000000100)=@in={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80)

209.499494ms ago: executing program 0 (id=2199):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
r6 = socket$inet6(0xa, 0x5, 0x0)
listen(r6, 0x10000)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e4000010", @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000040046009c00518060000080040000800d00008011000100d7f78bf48e6d00033b3312d710000000050002000200000014000080050009000200000008000300037a0800"], 0xe4}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f00000006c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000440001000100f394a69c86b15c92eeb0e9044045bae25442bbc0112c4241fe35cf"], 0x26)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

133.825054ms ago: executing program 1 (id=2200):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x40)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r7=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={<r8=>r2, 0x81, 0x40, 0x8000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={<r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r10=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfe23}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3da}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r8)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000094}, 0x40)
r13 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r13, 0x10e, 0x6, &(0x7f00000007c0)={0x7fff, 0x80000001, 0x32da, 0x9}, 0x10)
getsockopt$inet_buf(r11, 0x0, 0x2f, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000001840)=0xfffffff7, 0x4)
r14 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001880)=@ethtool_test={0x1a, 0x36, 0x1, 0x4, [0x8000000000000000, 0x7f, 0xd7, 0xffffffffffffff9a]}})
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f0000001900)="1809249f3320ad84a988713f2c00d2a5c6e5153f6cc6b4cfa5b4853e787aa756d253b7201fd9aa5edff73251a3912525cee4290944327642910a2f53b06f9e4cc3c2593652a08d9dbe4855290c5628cad9d4b09b62439427515cb891e84df06e1d65ec444222e25450a7bb98b76e384b12e175235f9cdf40dcba701bf08ce2603cb7174b1d934b8e6c3c446cf8ede91d6c7f563e7a2bb58d27d86752e575fe9b")
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000019c0))
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000001a00)={0x7, 0x7}, 0x4)
getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000001a40), &(0x7f0000001a80)=0x8)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001ac0), 0x4)
r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xb0, 0x1403, 0x8, 0x70bd27, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x8000)
write$nci(r5, &(0x7f0000001c80)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x0, {0x2, [{0x2, 0x2}, {0x4, 0x5}]}}, 0x8)

68.542511ms ago: executing program 1 (id=2201):
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40000000000600"], 0x48}}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
recvmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f0000001a80)=""/4098, 0x1002}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f00000012c0)=""/60, 0x3c}, {&(0x7f0000001980)=""/231, 0xe7}, {&(0x7f00000018c0)=""/182, 0xb6}, {&(0x7f0000000f80)=""/172, 0xac}, {&(0x7f0000001040)=""/176, 0xb0}, {&(0x7f0000001100)=""/194, 0xc2}], 0x9}}], 0x1, 0x0, 0x0)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="0d2192106b6324038a09815d5fd4e299f2ca374bf41b07b4c09a4fb89a0c2d1ca0dac314818e7e9f50fd8da639aaab3a86674e8719b9404aef7842672969589f92e51c71c3e9592e777647dce5c662773c262c624d3635c1d3c2e106cc6ec65ff23d3f4637cde68b1200020214cb093d3cb520048ef6c47c0892877badb365a92a2a2b8f4e803a6c25e39357480271fd53962b462458af776be527d225ed18dcd71411d421070668298faae82aa9687d753b83a4e1c04ece9d2dab419f00ccce3cfdba53a0512b6b5aad3c11c64df582c099657db7bb8bb55ce89c51ce5eefbb62154fa8c9706186e8eb9ef65a93e771f833662a2a2ee7b31ede", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x1e, 0x1, 0x0)
shutdown(r5, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x25}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

363.964µs ago: executing program 1 (id=2202):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x108}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffd8ef, @my=0x1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000003c0)={@default, @null, @null, 0x3, 0x75d5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xbd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
sendmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="d29f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5", 0x95}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)

0s ago: executing program 1 (id=2203):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async)
unshare(0x6a040000) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x33}, 0x2c) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @ptr={0xa}, @var={0x5, 0x0, 0x0, 0xe, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x75, 0x55757aaa9bb6a8ea}, @float={0x1, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x0, 0x30, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000000700)=""/124, 0x67, 0x7c, 0x1, 0x90}, 0x28) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000280)=@raw=[@ldst={0x3, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1f}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xd9, &(0x7f0000000600)=""/217, 0x41100, 0x40, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x9, 0x8, 0xfff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x0, 0x3, 0xe, 0xa}, {0x4, 0x3, 0xc, 0x5}, {0x5, 0x2, 0x0, 0x8}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0xfff}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000240)=0x84) (async)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r9, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r10, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)

kernel console output (not intermixed with test programs):

to reserved service type 2
[   76.852721][ T7540] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   76.859731][ T7543] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   76.875711][ T7546] netlink: 'syz.1.464': attribute type 10 has an invalid length.
[   76.902602][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.227270][ T7560] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   77.230377][ T7560] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   77.467095][ T7570] veth0_to_bond: left allmulticast mode
[   77.470105][ T7570] veth0_to_bond: left promiscuous mode
[   77.472065][ T7570] bridge1: port 2(veth0_to_bond) entered disabled state
[   77.476372][ T7570] bond0: (slave wlan1): Releasing backup interface
[   77.480154][ T7570] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   77.482644][ T7570] veth3: left allmulticast mode
[   77.484280][ T7570] veth3: left promiscuous mode
[   77.486035][ T7570] bridge1: port 1(veth3) entered disabled state
[   77.490864][ T7570] vlan3: left promiscuous mode
[   77.492483][ T7570] veth1: left promiscuous mode
[   77.494189][ T7570] bridge1: port 3(vlan3) entered disabled state
[   77.499651][ T7570] bond5: (slave veth5): Releasing active interface
[   77.504610][ T7570] bond8: (slave macvlan2): Releasing backup interface
[   77.507899][ T7570] bond0: left allmulticast mode
[   77.509866][ T7570] bond0: left promiscuous mode
[   77.698451][ T7582] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   78.161276][ T7592] netlink: 'syz.2.478': attribute type 7 has an invalid length.
[   78.169298][ T7592] netlink: 'syz.2.478': attribute type 8 has an invalid length.
[   78.257272][ T7609] netlink: 'syz.1.483': attribute type 21 has an invalid length.
[   78.323825][ T7622] netlink: 'syz.0.486': attribute type 2 has an invalid length.
[   78.326437][ T7622] __nla_validate_parse: 32 callbacks suppressed
[   78.326446][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   78.361416][ T7625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.487'.
[   78.393693][ T7628] syzkaller1: entered promiscuous mode
[   78.395754][ T7628] syzkaller1: entered allmulticast mode
[   78.459558][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'.
[   79.270427][ T7650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.495'.
[   79.473723][ T7666] batadv_slave_1: entered promiscuous mode
[   79.493438][ T7666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.501'.
[   79.506338][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[   79.510378][ T7666] bridge_slave_1: left allmulticast mode
[   79.512343][ T7666] bridge_slave_1: left promiscuous mode
[   79.521382][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.525487][ T7666] bridge_slave_0: left allmulticast mode
[   79.527519][ T7666] bridge_slave_0: left promiscuous mode
[   79.532055][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.639491][ T7665] batadv_slave_1: left promiscuous mode
[   79.677184][ T7671] netlink: 724 bytes leftover after parsing attributes in process `syz.1.503'.
[   79.687608][ T7671] netlink: 724 bytes leftover after parsing attributes in process `syz.1.503'.
[   79.790120][ T7679] netlink: 'syz.1.505': attribute type 5 has an invalid length.
[   79.832590][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[   79.923357][ T7685] sctp: [Deprecated]: syz.1.507 (pid 7685) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.923357][ T7685] Use struct sctp_sack_info instead
[   79.965942][ T7685] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20003
[   79.992940][ T7689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.508'.
[   80.186593][ T7701] Driver unsupported XDP return value 0 on prog  (id 182) dev N/A, expect packet loss!
[   80.457222][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.476086][ T7710] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.483404][ T7710] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   81.449464][ T7767] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[   81.569653][ T7769] sctp: [Deprecated]: syz.2.534 (pid 7769) Use of int in maxseg socket option.
[   81.569653][ T7769] Use struct sctp_assoc_value instead
[   81.827128][ T7796] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   81.834745][ T7796] bond0: (slave team0): Releasing backup interface
[   81.837497][ T7796] team0: left allmulticast mode
[   81.840818][ T7796] team_slave_0: left allmulticast mode
[   81.842887][ T7796] team_slave_1: left allmulticast mode
[   81.846527][ T7796] bond0: (slave bond_slave_0): Releasing backup interface
[   81.850328][ T7796] bond_slave_0: left allmulticast mode
[   81.853228][ T7796] bond0: (slave bond_slave_1): Releasing backup interface
[   81.857000][ T7796] bond_slave_1: left allmulticast mode
[   81.860309][ T7796] team0: Port device team_slave_0 removed
[   81.863771][ T7796] team0: Port device team_slave_1 removed
[   81.866074][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.871537][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.882799][ T7796] validate_nla: 1 callbacks suppressed
[   81.882814][ T7796] netlink: 'syz.0.542': attribute type 10 has an invalid length.
[   81.887441][ T7796] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   81.891154][ T7796] bond0: (slave wlan1): refused to change device type
[   81.895267][ T7796] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.898983][ T7796] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.223434][ T7800] netlink: 'syz.1.544': attribute type 30 has an invalid length.
[   82.292172][ T7799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.865366][ T7830] dvmrp8: entered allmulticast mode
[   82.873358][ T7825] openvswitch: netlink: Flow key attr not present in new flow.
[   82.888587][ T7824] dvmrp8: left allmulticast mode
[   82.935143][ T7839] netlink: 'syz.1.557': attribute type 3 has an invalid length.
[   83.074017][ T7855] wg2: entered promiscuous mode
[   83.076101][ T7855] wg2: entered allmulticast mode
[   83.109377][ T7851] netlink: 'syz.0.560': attribute type 303 has an invalid length.
[   83.112886][ T7851] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.116029][ T7851] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.152593][ T7869] netlink: 'syz.2.567': attribute type 32 has an invalid length.
[   83.155345][ T7869] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   83.208057][ T7874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.211228][ T7874] syzkaller0: entered promiscuous mode
[   83.213177][ T7874] syzkaller0: entered allmulticast mode
[   83.218137][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[   83.220985][ T7872] tipc: Resetting bearer <eth:syzkaller0>
[   83.229096][ T7872] tipc: Disabling bearer <eth:syzkaller0>
[   83.537517][ T7896] __nla_validate_parse: 35 callbacks suppressed
[   83.537528][ T7896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.576'.
[   83.548251][ T7896] netlink: 172 bytes leftover after parsing attributes in process `syz.1.576'.
[   83.556898][ T7896] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.576'.
[   83.749765][ T7914] ieee802154 phy0 wpan0: encryption failed: -22
[   83.752793][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'.
[   83.756531][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'.
[   83.760583][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[   83.974624][ T7922] openvswitch: netlink: Message has 1 unknown bytes.
[   83.977120][ T7922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.083435][ T7932] netlink: 'syz.2.588': attribute type 1 has an invalid length.
[   84.096977][ T7932] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.252996][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv1
[   84.257010][ T7932] bond3: (slave batadv1): making interface the new active one
[   84.260750][ T7932] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   84.390790][ T7953] netlink: 92 bytes leftover after parsing attributes in process `syz.2.594'.
[   84.394852][ T7953] netlink: 64 bytes leftover after parsing attributes in process `syz.2.594'.
[   84.430825][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[   84.434576][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[   84.606573][ T7969] netlink: 'syz.2.601': attribute type 2 has an invalid length.
[   84.606917][ T7970] netlink: 'syz.1.600': attribute type 14 has an invalid length.
[   84.644160][ T7973] netlink: 'syz.2.602': attribute type 21 has an invalid length.
[   84.652266][ T7973] macsec1: entered promiscuous mode
[   84.696907][ T7980] netlink: 'syz.2.605': attribute type 1 has an invalid length.
[   84.699769][ T7980] NCSI netlink: No device for ifindex 0
[   84.703541][   T10] IPVS: starting estimator thread 0...
[   84.799515][ T7981] IPVS: using max 77 ests per chain, 184800 per kthread
[   85.262714][ T8025] 8021q: adding VLAN 0 to HW filter on device team0
[   85.266417][ T8025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.603285][ T8058] syzkaller0: entered promiscuous mode
[   85.605179][ T8058] syzkaller0: entered allmulticast mode
[   85.745789][ T8067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.782859][ T8072] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   85.872899][ T5881] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.875813][ T5881] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.883528][ T5881] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.900226][ T5881] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.942310][ T8093] mac80211_hwsim hwsim2 ": renamed from wlan0
[   86.009254][ T8102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.072077][ T8114] pim6reg1: entered promiscuous mode
[   86.073932][ T8114] pim6reg1: entered allmulticast mode
[   86.130967][ T8119] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   86.133815][ T8119] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   86.155256][ T8119] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.158668][ T8119] team0: Port device bond4 added
[   86.260811][ T8130] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   86.269828][ T8129] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   86.455425][ T8148] gretap0: entered allmulticast mode
[   86.567971][ T8156] syzkaller1: entered promiscuous mode
[   86.570585][ T8156] syzkaller1: entered allmulticast mode
[   86.810210][ T8173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.813677][ T8173] IPv6: NLM_F_CREATE should be set when creating new route
[   86.816788][ T8173] IPv6: NLM_F_CREATE should be set when creating new route
[   86.863847][ T8177] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   86.867065][ T8177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.984041][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.987795][ T8185] 8021q: adding VLAN 0 to HW filter on device team0
[   86.992004][ T8185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.000142][ T8187] IPVS: stopping backup sync thread 7503 ...
[   87.088198][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   87.147858][ T8205] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.863414][ T8191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.263837][ T8239] IPv4: Oversized IP packet from 127.202.26.0
[   88.830755][ T8245] __nla_validate_parse: 141 callbacks suppressed
[   88.830767][ T8245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.692'.
[   88.835623][ T8251] validate_nla: 12 callbacks suppressed
[   88.835632][ T8251] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[   88.837536][ T8245] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.845827][ T8245] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[   88.854282][ T8245] netlink: 244 bytes leftover after parsing attributes in process `syz.1.692'.
[   88.927209][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'.
[   89.004453][ T8266] netlink: 'syz.2.696': attribute type 21 has an invalid length.
[   89.007145][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'.
[   89.041603][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'.
[   89.123674][ T8277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.700'.
[   89.133291][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.699'.
[   89.167549][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'.
[   89.341136][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'.
[   89.346007][ T8287] netlink: 'syz.2.702': attribute type 1 has an invalid length.
[   89.351716][ T8287] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.702'.
[   89.585848][ T8318] netlink: 'syz.2.712': attribute type 64 has an invalid length.
[   89.676995][ T8324] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   89.678704][ T8325] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   89.717532][ T8328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.721090][ T8328] syzkaller0: entered promiscuous mode
[   89.723191][ T8328] syzkaller0: entered allmulticast mode
[   89.758983][ T8328] tipc: Resetting bearer <eth:syzkaller0>
[   89.763465][ T8327] tipc: Resetting bearer <eth:syzkaller0>
[   89.773494][ T8327] tipc: Disabling bearer <eth:syzkaller0>
[   89.798730][ T8338] netlink: 'syz.2.717': attribute type 2 has an invalid length.
[   89.813473][ T8338] : entered promiscuous mode
[   89.847747][ T8341] batadv1: entered promiscuous mode
[   91.041623][ T8386] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[   91.044416][ T8386] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[   91.133105][ T8397] netlink: 'syz.0.735': attribute type 58 has an invalid length.
[   91.144415][ T8398] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.218102][ T8406] netlink: 'syz.0.738': attribute type 16 has an invalid length.
[   91.424701][ T8422] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   91.435390][ T8422] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[   91.575289][ T8428] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   92.417366][ T8502] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   93.310825][ T8543] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   93.314556][ T8543] gretap1: entered promiscuous mode
[   93.456692][ T8554] bond10: (slave geneve3): making interface the new active one
[   93.461517][ T8554] bond10: (slave geneve3): Enslaving as an active interface with an up link
[   93.467468][ T8557] geneve2: entered promiscuous mode
[   93.471508][ T5846] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   93.477162][ T8554] 8021q: adding VLAN 0 to HW filter on device bond10
[   93.486460][ T5846] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   93.493652][ T5846] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   93.498912][ T5846] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   93.505576][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.509566][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.512504][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.515331][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.842767][ T8601] __nla_validate_parse: 35 callbacks suppressed
[   93.842776][ T8601] netlink: 292 bytes leftover after parsing attributes in process `syz.2.782'.
[   93.860274][ T8606] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   93.888179][ T8609] validate_nla: 5 callbacks suppressed
[   93.888190][ T8609] netlink: 'syz.2.785': attribute type 29 has an invalid length.
[   93.896832][ T8609] netlink: 'syz.2.785': attribute type 29 has an invalid length.
[   93.935974][ T8613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.787'.
[   93.988089][ T8620] siw: device registration error -23
[   93.992133][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.790'.
[   93.999060][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'.
[   94.003809][ T8620] wg1: entered promiscuous mode
[   94.005553][ T8620] wg1: entered allmulticast mode
[   94.057452][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'.
[   94.064270][ T8627] netlink: 120 bytes leftover after parsing attributes in process `syz.1.792'.
[   94.129891][ T8632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.794'.
[   94.451440][ T8659] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   94.455441][ T8659] netlink: 'syz.2.803': attribute type 4 has an invalid length.
[   94.655139][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'.
[   94.693599][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'.
[   94.919152][ T8691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.921925][ T8691] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   94.924505][ T8691] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   94.937636][ T8691] tipc: Resetting bearer <eth:syzkaller0>
[   94.941638][ T8691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.812'.
[   96.021118][ T8700] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[   96.038879][ T8700] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.052932][ T8700] bond5: (slave veth3): Enslaving as an active interface with a down link
[   96.055899][ T8698] syz_tun: entered promiscuous mode
[   96.057728][ T8698] syz_tun: entered allmulticast mode
[   96.065638][ T8700] vlan0: entered allmulticast mode
[   96.067358][ T8700] veth1: entered allmulticast mode
[   96.078656][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.124664][ T8708] team0: entered promiscuous mode
[   96.126438][ T8708] team_slave_1: entered promiscuous mode
[   96.129426][ T8708] bond4: entered promiscuous mode
[   96.132308][ T8708] bond0: entered promiscuous mode
[   96.134077][ T8708] bond_slave_0: entered promiscuous mode
[   96.136155][ T8708] bond_slave_1: entered promiscuous mode
[   96.138964][ T8708] debugfs: 'hsr0' already exists in 'hsr'
[   96.140908][ T8708] Cannot create hsr debugfs directory
[   96.143062][ T8708] hsr0: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[   96.146585][ T8708] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[   96.150393][ T8708] 8021q: adding VLAN 0 to HW filter on device hsr0
[   96.356695][ T8720] netlink: 'syz.2.822': attribute type 13 has an invalid length.
[   96.359800][ T8720] netlink: 'syz.2.822': attribute type 17 has an invalid length.
[   96.362510][ T8720] netlink: 'syz.2.822': attribute type 27 has an invalid length.
[   96.427453][ T8720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.427987][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.485201][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.485208][ T8720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.653592][ T8748] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.775071][ T8767] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[   97.869517][ T8781] netlink: 'syz.0.840': attribute type 9 has an invalid length.
[   98.387083][ T8820] netlink: 'syz.2.850': attribute type 1 has an invalid length.
[   98.446099][ T8824] lo speed is unknown, defaulting to 1000
[   98.455521][ T8824] lo speed is unknown, defaulting to 1000
[   98.458022][ T8824] lo speed is unknown, defaulting to 1000
[   98.512617][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.516182][ T8822] 8021q: adding VLAN 0 to HW filter on device team0
[   98.522304][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.531359][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.539161][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.546943][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.551218][ T8824] infiniband syz0: set active
[   98.554817][ T8824] infiniband syz0: added lo
[   98.557991][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.563553][   T10] lo speed is unknown, defaulting to 1000
[   98.565816][   T10] syz0: Port: 1 Link ACTIVE
[   98.567564][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.577701][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.583961][   T51] lo speed is unknown, defaulting to 1000
[   98.588050][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.590564][ T8824] RDS/IB: syz0: added
[   98.595079][ T8824] smc: adding ib device syz0 with port count 1
[   98.597879][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.597959][ T8824] smc:    ib device syz0 port 1 has pnetid 
[   98.610159][   T10] lo speed is unknown, defaulting to 1000
[   98.614785][ T8824] lo speed is unknown, defaulting to 1000
[   98.725091][ T8824] lo speed is unknown, defaulting to 1000
[   98.819967][ T8824] lo speed is unknown, defaulting to 1000
[   98.892153][ T8827] __nla_validate_parse: 22 callbacks suppressed
[   98.892164][ T8827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'.
[   98.962384][ T8827] bridge4: entered promiscuous mode
[   98.990581][ T8832] GUP no longer grows the stack in syz.2.854 (8832): 200000002000-20000000a000 (200000001000)
[   98.994168][ T8832] CPU: 1 UID: 0 PID: 8832 Comm: syz.2.854 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   98.994182][ T8832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.994187][ T8832] Call Trace:
[   98.994191][ T8832]  <TASK>
[   98.994195][ T8832]  dump_stack_lvl+0x189/0x250
[   98.994210][ T8832]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.994218][ T8832]  ? __pfx__printk+0x10/0x10
[   98.994227][ T8832]  ? find_vma+0xe7/0x160
[   98.994245][ T8832]  __get_user_pages+0x2a60/0x30b0
[   98.994269][ T8832]  ? __pfx___get_user_pages+0x10/0x10
[   98.994283][ T8832]  __gup_longterm_locked+0xd66/0x15b0
[   98.994295][ T8832]  ? try_grab_folio_fast+0x35b/0x4f0
[   98.994309][ T8832]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[   98.994322][ T8832]  gup_fast_fallback+0x1cd4/0x2260
[   98.994348][ T8832]  ? __pfx_gup_fast_fallback+0x10/0x10
[   98.994360][ T8832]  ? stack_depot_save_flags+0x429/0x900
[   98.994371][ T8832]  ? pin_user_pages_fast+0x4d/0xb0
[   98.994382][ T8832]  iov_iter_extract_pages+0x35a/0x5e0
[   98.994398][ T8832]  extract_iter_to_sg+0xe46/0x24e0
[   98.994413][ T8832]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   98.994429][ T8832]  ? __asan_memset+0x22/0x50
[   98.994440][ T8832]  af_alg_get_rsgl+0x436/0x810
[   98.994459][ T8832]  aead_recvmsg+0x4cc/0x13f0
[   98.994475][ T8832]  ? __pfx_aead_recvmsg+0x10/0x10
[   98.994482][ T8832]  ? __schedule+0x1755/0x4d30
[   98.994493][ T8832]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   98.994502][ T8832]  ? __pfx_aead_recvmsg+0x10/0x10
[   98.994510][ T8832]  sock_recvmsg_nosec+0x186/0x1c0
[   98.994522][ T8832]  ____sys_recvmsg+0x3aa/0x460
[   98.994534][ T8832]  ? __pfx_____sys_recvmsg+0x10/0x10
[   98.994549][ T8832]  ? import_iovec+0x74/0xa0
[   98.994561][ T8832]  ___sys_recvmsg+0x1b5/0x510
[   98.994571][ T8832]  ? __pfx____sys_recvmsg+0x10/0x10
[   98.994594][ T8832]  ? __might_fault+0xb0/0x130
[   98.994607][ T8832]  do_recvmmsg+0x307/0x770
[   98.994620][ T8832]  ? __pfx_do_recvmmsg+0x10/0x10
[   98.994627][ T8832]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   98.994644][ T8832]  ? __pfx_do_futex+0x10/0x10
[   98.994659][ T8832]  __x64_sys_recvmmsg+0x190/0x240
[   98.994668][ T8832]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   98.994676][ T8832]  ? rcu_is_watching+0x15/0xb0
[   98.994695][ T8832]  ? do_syscall_64+0xbe/0x3b0
[   98.994708][ T8832]  do_syscall_64+0xfa/0x3b0
[   98.994718][ T8832]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.994729][ T8832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.994737][ T8832]  ? exc_page_fault+0x9f/0xf0
[   98.994749][ T8832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.994756][ T8832] RIP: 0033:0x7fecbb58ebe9
[   98.994765][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.994772][ T8832] RSP: 002b:00007fecbc3a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   98.994781][ T8832] RAX: ffffffffffffffda RBX: 00007fecbb7b5fa0 RCX: 00007fecbb58ebe9
[   98.994787][ T8832] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000f
[   98.994791][ T8832] RBP: 00007fecbb611e19 R08: 0000000000000000 R09: 0000000000000000
[   98.994796][ T8832] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   98.994800][ T8832] R13: 00007fecbb7b6038 R14: 00007fecbb7b5fa0 R15: 00007ffeb74edcb8
[   98.994812][ T8832]  </TASK>
[   99.123924][ T8834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.855'.
[   99.160620][ T8839] netlink: 193 bytes leftover after parsing attributes in process `syz.0.857'.
[   99.163739][ T8839] netlink: 364 bytes leftover after parsing attributes in process `syz.0.857'.
[   99.166775][ T8839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.857'.
[   99.173959][ T8839] netlink: 180 bytes leftover after parsing attributes in process `syz.0.857'.
[   99.183625][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.858'.
[   99.243731][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'.
[   99.324163][ T8871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.866'.
[   99.380169][ T8880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.869'.
[   99.504006][ T8896] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[   99.971627][ T8905] lo speed is unknown, defaulting to 1000
[  100.003079][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.070668][   T33] audit: type=1804 audit(1754625974.154:2): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.882" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1672 res=1 errno=0
[  100.078122][   T33] audit: type=1800 audit(1754625974.154:3): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.882" name="cgroup.controllers" dev="tmpfs" ino=1672 res=0 errno=0
[  100.585849][ T8955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.900007][ T8917] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  100.947413][ T8968] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  100.954100][ T8968] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  101.676186][ T8992] syzkaller1: entered promiscuous mode
[  101.683938][ T8992] syzkaller1: entered allmulticast mode
[  101.693207][ T8992] vlan1: entered promiscuous mode
[  101.695138][ T8992] vlan1: entered allmulticast mode
[  101.697036][ T8992] bond0: entered allmulticast mode
[  101.700866][ T8992] bond_slave_0: entered allmulticast mode
[  101.702887][ T8992] bond_slave_1: entered allmulticast mode
[  102.269884][ T9017] netlink: 'syz.1.913': attribute type 14 has an invalid length.
[  102.291500][ T9017] netlink: 'syz.1.913': attribute type 14 has an invalid length.
[  102.381258][ T9032] netlink: 'syz.1.918': attribute type 1 has an invalid length.
[  102.397031][ T9026] tipc: New replicast peer: 255.255.255.255
[  102.399601][ T9026] tipc: Enabled bearer <udp:syz2>, priority 10
[  102.663858][ T9045] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  102.676910][ T9045] bond6 (unregistering): Released all slaves
[  102.801201][ T9049] 8021q: adding VLAN 0 to HW filter on device bond6
[  102.807122][ T9049] bridge_slave_0: left allmulticast mode
[  102.809354][ T9049] bridge_slave_0: left promiscuous mode
[  102.811391][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.815420][ T9049] bridge_slave_1: left allmulticast mode
[  102.817373][ T9049] bridge_slave_1: left promiscuous mode
[  102.819834][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.824194][ T9049] bond0: (slave bond_slave_0): Releasing backup interface
[  102.827040][ T9049] bond_slave_0: left promiscuous mode
[  102.831741][ T9049] bond_slave_0: left allmulticast mode
[  102.834494][ T9049] bond0: (slave bond_slave_1): Releasing backup interface
[  102.838141][ T9049] bond_slave_1: left promiscuous mode
[  102.840319][ T9049] bond_slave_1: left allmulticast mode
[  102.842760][ T9049] team_slave_1: left promiscuous mode
[  102.845395][ T9049] team0: Port device team_slave_1 removed
[  102.847582][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.851123][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.854496][ T9049] bond3: (slave batadv1): Releasing active interface
[  102.857942][ T9049] bond4: left promiscuous mode
[  102.860940][ T9049] team0: Port device bond4 removed
[  102.863574][ T9049] bond5: (slave veth3): Releasing active interface
[  103.373969][ T9082] netlink: 'syz.1.931': attribute type 12 has an invalid length.
[  103.381256][ T9082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.464949][ T9092] lo speed is unknown, defaulting to 1000
[  103.518453][   T10] tipc: Node number set to 990137379
[  103.604862][ T9098] syz_tun: left promiscuous mode
[  103.606738][ T9098] syz_tun: left allmulticast mode
[  103.615428][ T9098] wg1: left promiscuous mode
[  103.617036][ T9098] wg1: left allmulticast mode
[  103.620921][ T9098] wg2: left promiscuous mode
[  103.622480][ T9098] wg2: left allmulticast mode
[  103.630605][ T9098] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  103.633287][ T9098] team1: left promiscuous mode
[  103.635277][ T9098] team1: left allmulticast mode
[  103.642561][ T9098] vlan2: left promiscuous mode
[  103.644519][ T9098] gretap0: left promiscuous mode
[  103.646496][ T9098] sit1: left promiscuous mode
[  103.648835][ T9098] vlan3: left allmulticast mode
[  103.650652][ T9098] veth1: left allmulticast mode
[  103.661183][ T9098] macvlan2: left promiscuous mode
[  103.664375][ T9098] macvlan2: left allmulticast mode
[  103.666907][ T9098] mac80211_hwsim hwsim2 ": left allmulticast mode
[  103.669924][ T9098] macvtap1: left allmulticast mode
[  103.674825][ T9098] geneve2: left promiscuous mode
[  103.676636][ T9098] geneve2: left allmulticast mode
[  103.692330][ T5881] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.695296][ T5881] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.698167][ T5881] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  103.701373][ T5881] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.704145][ T5881] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.706928][ T5881] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  103.718643][ T5881] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.723485][ T5881] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.726289][ T5881] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  103.730507][ T5881] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.733730][ T5881] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.736514][ T5881] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  104.145344][ T9118] __nla_validate_parse: 19 callbacks suppressed
[  104.145355][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'.
[  104.264949][ T9131] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  104.369810][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  104.372901][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  104.881983][ T9155] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.952'.
[  104.930432][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'.
[  104.937090][ T9160] geneve4: entered promiscuous mode
[  104.941888][ T7287] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.945817][ T7287] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.949082][ T7287] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.951882][ T7287] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.996445][ T9164] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  105.165006][ T9171] netlink: 212 bytes leftover after parsing attributes in process `syz.0.957'.
[  105.987843][ T9189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.963'.
[  106.014812][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'.
[  106.231492][ T9209] net_ratelimit: 60 callbacks suppressed
[  106.231503][ T9209] openvswitch: netlink: Key type 251 is out of range max 32
[  106.238596][ T9209] netlink: 'syz.2.970': attribute type 1 has an invalid length.
[  106.241172][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'.
[  106.293168][ T9215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.972'.
[  106.843145][ T9248] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  106.861790][ T9248] netlink: 'syz.2.983': attribute type 10 has an invalid length.
[  106.865805][ T9248] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  106.870563][ T9248] bond0: (slave wlan1): Opening slave failed
[  106.875912][ T9248] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.881014][ T9248] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.889139][ T9250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.942188][ T9250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.004782][ T9250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.048610][ T9250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.403066][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.405888][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.415052][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.426105][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.474843][ T9262] lo speed is unknown, defaulting to 1000
[  107.595159][ T9273] lo speed is unknown, defaulting to 1000
[  107.697487][ T9278] syzkaller0: entered promiscuous mode
[  107.702782][ T9278] syzkaller0: entered allmulticast mode
[  107.754921][ T9282] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  107.802730][ T9282] 8021q: adding VLAN 0 to HW filter on device bond7
[  107.833324][ T9284] 8021q: adding VLAN 0 to HW filter on device bond7
[  107.835869][ T9284] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  107.840107][ T9284] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  108.754991][ T9282] gretap1: entered promiscuous mode
[  108.758253][ T9282] bond7: (slave gretap1): making interface the new active one
[  108.761289][ T9282] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  108.989189][ T9296] syz0: rxe_newlink: already configured on lo
[  109.005436][ T9296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.173328][ T9320] __nla_validate_parse: 9 callbacks suppressed
[  109.173338][ T9320] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1000'.
[  109.203029][ T9323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1004'.
[  109.240939][ T9328] netlink: 'syz.0.1005': attribute type 2 has an invalid length.
[  109.243730][ T9328] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1005'.
[  109.247227][ T9328] syzkaller1: entered promiscuous mode
[  109.249432][ T9328] syzkaller1: entered allmulticast mode
[  109.258358][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'.
[  109.379946][ T9347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.395701][ T9347] syzkaller0: entered promiscuous mode
[  109.397685][ T9347] syzkaller0: entered allmulticast mode
[  109.410830][ T9347] tipc: Resetting bearer <eth:syzkaller0>
[  109.421099][ T9349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'.
[  109.424170][ T9349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'.
[  109.427704][ T9349] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1012'.
[  109.484697][ T9355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1013'.
[  109.511390][ T9357] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  109.514634][ T9357] netlink: 'syz.1.1014': attribute type 2 has an invalid length.
[  109.517953][ T9358] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  109.522313][ T9358] netlink: 'syz.1.1014': attribute type 2 has an invalid length.
[  109.744206][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'.
[  109.747909][ T9369] tc_dump_action: action bad kind
[  109.852411][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'.
[  109.863189][ T9376] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  109.934692][ T9379] netlink: 'syz.1.1020': attribute type 1 has an invalid length.
[  109.965007][ T9384] netlink: 'syz.1.1021': attribute type 39 has an invalid length.
[  110.130425][ T9393] bond0 (unregistering): Released all slaves
[  110.206282][ T9398] : renamed from batadv_slave_1
[  110.282038][ T9405] siw: device registration error -23
[  111.092792][ T9405] wg1: entered promiscuous mode
[  111.095824][ T9405] wg1: entered allmulticast mode
[  111.105220][ T9407] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  111.116296][ T9408] bond10: (slave geneve3): Releasing active interface
[  111.121380][ T9407] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  111.123862][ T9407] bond0: (slave wlan1): refused to change device type
[  111.546823][ T7287] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  111.620352][ T9428] validate_nla: 1 callbacks suppressed
[  111.620363][ T9428] netlink: 'syz.2.1036': attribute type 4 has an invalid length.
[  111.636754][ T9430] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  112.492447][ T9447] netlink: 'syz.0.1041': attribute type 1 has an invalid length.
[  112.514578][ T9447] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.820570][ T9447] bond3: (slave veth5): Enslaving as an active interface with a down link
[  112.838023][ T9451] vlan0: entered allmulticast mode
[  112.842025][ T9451] veth1: entered allmulticast mode
[  112.844151][ T9451] bond3: (slave vlan0): Opening slave failed
[  112.909562][ T9457] netlink: 'syz.2.1044': attribute type 29 has an invalid length.
[  113.246174][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.873949][ T9477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.948447][ T9483] tun0: tun_chr_ioctl cmd 2148045848
[  113.950543][ T9483] tun0: tun_chr_ioctl cmd 21731
[  114.384363][ T9501] __nla_validate_parse: 207 callbacks suppressed
[  114.384374][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[  114.390872][ T9501] netlink: 'syz.0.1060': attribute type 5 has an invalid length.
[  114.393531][ T9501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1060'.
[  114.404470][ T9501] geneve4: entered promiscuous mode
[  114.406415][ T9501] geneve4: entered allmulticast mode
[  114.409853][ T5881] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  114.416184][ T5881] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  114.424133][ T5881] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  114.430168][ T5881] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  115.141449][ T9510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1063'.
[  115.262901][ T9522] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1067'.
[  115.280841][ T9522] bond0 (unregistering): Released all slaves
[  115.413806][ T9530] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1069'.
[  115.418395][ T9530] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1069'.
[  115.454117][ T9537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1071'.
[  115.541955][ T9539] netlink: 'syz.1.1077': attribute type 83 has an invalid length.
[  116.054102][ T9569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1088'.
[  116.062460][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[  116.065406][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'.
[  116.197916][ T9594] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  116.220913][ T9594] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  116.226145][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.229248][ T5881] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.242894][ T9594] veth5: entered promiscuous mode
[  116.246759][ T9594] bond0: (slave veth5): Enslaving as a backup interface with a down link
[  116.253804][ T9597] vlan0: entered promiscuous mode
[  116.255687][ T9597] vlan0: entered allmulticast mode
[  116.257528][ T9597] hsr_slave_1: entered allmulticast mode
[  116.267389][ T9594] bond7: (slave gretap1): Releasing active interface
[  116.277367][ T9594] bond0: (slave ip6gretap1): Removing an active aggregator
[  116.282346][ T9594] bond0: (slave ip6gretap1): Releasing backup interface
[  116.284717][ T9594] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 4e:22:01:e0:cc:15 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  116.296560][ T9594] bond0: (slave veth5): Releasing backup interface
[  116.326076][ T9599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.494070][ T9610] batadv_slave_0: entered promiscuous mode
[  116.511200][ T9609] batadv_slave_0: left promiscuous mode
[  116.545275][ T9623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.548001][ T9623] syzkaller0: entered promiscuous mode
[  116.551055][ T9623] syzkaller0: entered allmulticast mode
[  116.576133][ T9623] tipc: Resetting bearer <eth:syzkaller0>
[  116.583179][ T9622] tipc: Resetting bearer <eth:syzkaller0>
[  116.587245][ T9628] netlink: 'syz.0.1102': attribute type 21 has an invalid length.
[  116.596528][ T9622] tipc: Disabling bearer <eth:syzkaller0>
[  116.612427][ T9630] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  116.615946][ T9630] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  117.722811][ T9675] 8021q: VLANs not supported on ip6gre0
[  117.909931][ T9693] batadv_slave_1: entered promiscuous mode
[  117.946363][ T9697] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  117.951110][ T9697] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  118.233501][ T9750] netlink: 'syz.2.1140': attribute type 1 has an invalid length.
[  118.257905][ T9750] bond8: (slave vti0): The slave device specified does not support setting the MAC address
[  118.261498][ T9750] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  118.265982][ T9750] bond8: (slave vti0): making interface the new active one
[  118.269431][ T9750] bond8: (slave vti0): Enslaving as an active interface with an up link
[  118.355924][ T9761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  118.397047][ T9767] IPv6: sit1: Disabled Multicast RS
[  118.405397][ T9766] delete_channel: no stack
[  118.423319][ T9771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.426756][ T9771] syzkaller0: entered promiscuous mode
[  118.428700][ T9771] syzkaller0: entered allmulticast mode
[  118.433897][ T9771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  118.445999][ T9771] tipc: Resetting bearer <eth:syzkaller0>
[  118.483733][ T9774] netlink: 'syz.0.1148': attribute type 13 has an invalid length.
[  118.486754][ T9770] tipc: Resetting bearer <eth:syzkaller0>
[  118.497208][ T9770] tipc: Disabling bearer <eth:syzkaller0>
[  118.573342][ T9776] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  118.787481][ T9803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.794151][ T9803] syzkaller0: entered promiscuous mode
[  118.796011][ T9803] syzkaller0: entered allmulticast mode
[  118.803410][ T9803] tipc: Resetting bearer <eth:syzkaller0>
[  118.901505][ T9802] tipc: Resetting bearer <eth:syzkaller0>
[  118.913166][ T9802] tipc: Disabling bearer <eth:syzkaller0>
[  119.017763][ T9811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.089376][ T9820] lo speed is unknown, defaulting to 1000
[  119.345093][ T9822] lo speed is unknown, defaulting to 1000
[  119.623952][ T9838] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20000
[  119.679902][ T9844] __nla_validate_parse: 24 callbacks suppressed
[  119.679914][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'.
[  119.701795][ T9844] bond4: (slave geneve5): Enslaving as an active interface with an up link
[  119.704812][ T5881] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  119.707657][ T5881] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  119.709836][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'.
[  119.712552][ T5881] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  119.716607][ T5881] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  119.772196][ T9852] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  119.813135][ T9857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1173'.
[  119.901231][ T9867] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1177'.
[  119.941829][ T9869] ieee802154 phy0 wpan0: encryption failed: -22
[  119.944087][ T9869] ieee802154 phy0 wpan0: encryption failed: -22
[  120.027950][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'.
[  120.145942][ T9883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1182'.
[  120.216166][ T9887] vlan0: entered promiscuous mode
[  120.218558][ T9887] vlan0: entered allmulticast mode
[  120.223371][ T9887] hsr_slave_1: entered allmulticast mode
[  120.322128][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'.
[  120.427569][ T9892] lo speed is unknown, defaulting to 1000
[  120.973946][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[  120.976991][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[  121.295999][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'.
[  121.716133][ T9926] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.720949][ T9926] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.110431][ T9944] IPVS: stopping backup sync thread 9945 ...
[  122.112455][ T9945] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  122.281774][ T9948] netlink: 'syz.0.1202': attribute type 1 has an invalid length.
[  122.294989][ T9948] 8021q: adding VLAN 0 to HW filter on device bond5
[  122.307130][ T9948] 8021q: adding VLAN 0 to HW filter on device bond5
[  122.311458][ T9948] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  122.315791][ T9948] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  122.353782][ T9950] gretap2: entered promiscuous mode
[  122.357276][ T9950] bond5: (slave gretap2): making interface the new active one
[  122.360170][ T9950] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  122.726553][ T9959] netlink: 'syz.1.1205': attribute type 10 has an invalid length.
[  122.909700][ T9964] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  122.916969][ T9965] bridge0: port 1(veth0_to_bridge) entered blocking state
[  122.919537][ T9965] bridge0: port 1(veth0_to_bridge) entered disabled state
[  122.922031][ T9965] veth0_to_bridge: entered allmulticast mode
[  122.924789][ T9965] veth0_to_bridge: entered promiscuous mode
[  123.314233][ T9986] gretap0: left allmulticast mode
[  123.317762][ T9986] wg1: left promiscuous mode
[  123.321226][ T9986] wg1: left allmulticast mode
[  123.326152][ T9986] batadv_slave_1: left promiscuous mode
[  123.330557][ T9986] team1: left allmulticast mode
[  123.332985][ T9986] vlan2: left allmulticast mode
[  123.334730][ T9986] bond0: left allmulticast mode
[  123.337241][ T9986] gretap1: left promiscuous mode
[  123.343341][ T9986] geneve2: left promiscuous mode
[  123.347834][ T9986] bridge4: left promiscuous mode
[  123.352991][ T9986] tipc: Resetting bearer <eth:syzkaller0>
[  123.355151][ T9986] syzkaller0: left promiscuous mode
[  123.356892][ T9986] syzkaller0: left allmulticast mode
[  123.363222][ T9986] geneve4: left promiscuous mode
[  123.364907][ T9986] geneve4: left allmulticast mode
[  123.375968][ T9986] gretap2: left promiscuous mode
[  123.378872][ T5846] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.381685][ T5846] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  123.384276][ T5846] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  123.387105][ T5846] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.390392][ T5846] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  123.393086][ T5846] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  123.395841][ T5846] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.400572][ T5846] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  123.403291][ T5846] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  123.406060][ T5846] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.409082][ T5846] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  123.411883][ T5846] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  123.710439][T10002] siw: device registration error -23
[  123.797485][T10012] veth0_to_bridge: left allmulticast mode
[  123.804385][T10012] veth0_to_bridge: left promiscuous mode
[  123.806575][T10012] bridge0: port 1(veth0_to_bridge) entered disabled state
[  123.811992][T10012] bond3: (slave veth5): Releasing active interface
[  123.815695][T10012] bond4: (slave geneve5): Releasing backup interface
[  123.819443][T10012] bond5: (slave gretap2): Releasing active interface
[  123.823539][T10013] netlink: 'syz.1.1220': attribute type 13 has an invalid length.
[  123.826198][T10013] netlink: 'syz.1.1220': attribute type 17 has an invalid length.
[  123.848684][T10013] 8021q: adding VLAN 0 to HW filter on device team0
[  123.851848][T10013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.956366][T10005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.989796][T10031] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  124.023441][T10004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.203660][T10064] netlink: 'syz.2.1237': attribute type 23 has an invalid length.
[  124.238119][T10066] netlink: 'syz.2.1238': attribute type 1 has an invalid length.
[  124.252394][T10066] bond9 (unregistering): Released all slaves
[  124.347738][T10071] bridge0: port 1(veth0_to_bridge) entered blocking state
[  124.350873][T10071] bridge0: port 1(veth0_to_bridge) entered disabled state
[  124.353491][T10071] veth0_to_bridge: entered allmulticast mode
[  124.356381][T10071] veth0_to_bridge: entered promiscuous mode
[  124.467907][T10079] netlink: 'syz.2.1243': attribute type 83 has an invalid length.
[  124.476935][T10079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.570794][T10083] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.682372][T10087] bridge0: port 1(veth0_to_bridge) entered blocking state
[  124.685040][T10087] bridge0: port 1(veth0_to_bridge) entered disabled state
[  124.687683][T10087] veth0_to_bridge: entered allmulticast mode
[  124.690914][T10087] veth0_to_bridge: entered promiscuous mode
[  124.721555][T10089] __nla_validate_parse: 15 callbacks suppressed
[  124.721566][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  124.729300][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  124.770979][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'.
[  124.774968][T10095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'.
[  124.805550][T10097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.810040][T10097] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  125.029003][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  125.045199][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'.
[  125.294836][T10148] netlink: 'syz.0.1256': attribute type 8 has an invalid length.
[  125.311839][T10148] 8021q: adding VLAN 0 to HW filter on device bond6
[  125.315321][T10148] bond0: (slave bond6): Enslaving as an active interface with an up link
[  125.343573][T10149] lo speed is unknown, defaulting to 1000
[  125.376136][T10157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1258'.
[  125.411256][T10161] netlink: 'syz.0.1259': attribute type 21 has an invalid length.
[  125.415111][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'.
[  125.517099][T10167] netlink: 'syz.0.1260': attribute type 1 has an invalid length.
[  125.522652][T10167] netlink: 'syz.0.1260': attribute type 3 has an invalid length.
[  125.526292][T10167] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1260'.
[  125.529562][T10167] NCSI netlink: No device for ifindex 0
[  125.531799][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'.
[  125.591296][T10178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.680875][T10184] vlan1: entered allmulticast mode
[  125.682792][T10184] bond8: entered allmulticast mode
[  125.722977][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.757850][T10193] delete_channel: no stack
[  126.254741][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.849733][T10223] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.160677][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.163548][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.180529][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.183373][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.366863][T10253] lo: entered allmulticast mode
[  127.371011][T10253] lo: left allmulticast mode
[  127.430299][T10263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.457872][T10267] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  127.462224][T10268] syzkaller1: entered promiscuous mode
[  127.464104][T10268] syzkaller1: entered allmulticast mode
[  127.704141][T10289] tipc: Enabled bearer <udp:syz0>, priority 10
[  127.756514][T10294] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  128.841493][T10343] tipc: New replicast peer: 255.255.255.255
[  128.844104][T10343] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.000405][T10356] validate_nla: 8 callbacks suppressed
[  129.000417][T10356] netlink: 'syz.1.1310': attribute type 2 has an invalid length.
[  129.431093][T10386] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  129.437486][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.453439][T10391] veth0_to_bridge: left allmulticast mode
[  129.455394][T10391] veth0_to_bridge: left promiscuous mode
[  129.458023][T10391] bridge0: port 1(veth0_to_bridge) entered disabled state
[  129.712847][T10407] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  129.738429][T10409] bond0: (slave bond6): Releasing backup interface
[  129.774375][T10414] __nla_validate_parse: 25 callbacks suppressed
[  129.774387][T10414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1328'.
[  129.799427][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'.
[  129.868981][   T51] tipc: Node number set to 2793560902
[  130.046365][T10424] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  130.075807][T10424] netlink: 'syz.0.1333': attribute type 10 has an invalid length.
[  130.083375][T10424] bond0: (slave wlan1): refused to change device type
[  130.091952][T10424] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.095085][T10424] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.331720][T10432] syz.2.1335 uses old SIOCAX25GETINFO
[  130.910954][T10436] netlink: 'syz.0.1336': attribute type 1 has an invalid length.
[  130.946917][T10439] syzkaller0: Caught tx_queue_len zero misconfig
[  130.956300][T10439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.961417][T10439] syzkaller0: entered promiscuous mode
[  130.963270][T10439] syzkaller0: entered allmulticast mode
[  130.966524][T10438] delete_channel: no stack
[  130.967061][T10441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1338'.
[  130.989527][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.992352][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.118663][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.121468][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.296222][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  131.302510][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  131.350956][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'.
[  131.362668][T10473] bridge_slave_1: entered allmulticast mode
[  131.411149][T10476] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[  131.500899][T10482] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  131.506081][T10476] vlan0: entered allmulticast mode
[  131.508040][T10476] bond0: entered allmulticast mode
[  131.556235][T10484] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  131.599516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.613304][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  131.616512][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'.
[  131.620874][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1354'.
[  131.624983][T10497] syzkaller0: entered promiscuous mode
[  131.626952][T10497] syzkaller0: entered allmulticast mode
[  131.632551][T10496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.649823][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  131.663273][T10496] tipc: Disabling bearer <eth:syzkaller0>
[  131.677921][T10503] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1357'.
[  131.940755][T10533] netlink: 'syz.1.1365': attribute type 10 has an invalid length.
[  132.119949][T10541] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  132.124519][T10541] netlink: 'syz.1.1367': attribute type 10 has an invalid length.
[  132.224963][T10560] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  132.243790][T10560] 8021q: adding VLAN 0 to HW filter on device bond12
[  132.261764][T10560] 8021q: adding VLAN 0 to HW filter on device bond12
[  132.264117][T10560] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  132.268609][T10560] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  132.284689][T10563] netlink: 'syz.2.1375': attribute type 13 has an invalid length.
[  132.311482][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.415709][T10560] macvlan2: entered promiscuous mode
[  132.417672][T10560] macvlan2: entered allmulticast mode
[  132.420190][T10560] bond12: entered promiscuous mode
[  132.422438][T10560] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  132.426713][T10560] bond12: left promiscuous mode
[  132.510511][T10568] netlink: 'syz.1.1376': attribute type 10 has an invalid length.
[  132.514329][T10568] 8021q: adding VLAN 0 to HW filter on device team0
[  132.629165][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.632236][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.063225][T10627] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.067440][T10627] tipc: Disabling bearer <udp:syz2>
[  133.106882][T10629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.025867][T10693] validate_nla: 2 callbacks suppressed
[  134.025877][T10693] netlink: 'syz.0.1405': attribute type 13 has an invalid length.
[  134.350245][T10716] netlink: 'syz.0.1411': attribute type 21 has an invalid length.
[  134.546352][T10724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.556588][T10724] tipc: Resetting bearer <eth:syzkaller0>
[  134.872282][T10729] netlink: 'syz.1.1414': attribute type 13 has an invalid length.
[  134.875391][T10730] __nla_validate_parse: 20 callbacks suppressed
[  134.875401][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'.
[  134.902383][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'.
[  134.922733][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'.
[  135.032670][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1417'.
[  135.139532][T10748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.142127][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'.
[  135.145614][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'.
[  135.145990][T10748] tipc: Resetting bearer <eth:syzkaller0>
[  135.154211][T10750] netlink: 'syz.2.1424': attribute type 2 has an invalid length.
[  135.170424][T10747] tipc: Disabling bearer <eth:syzkaller0>
[  135.205938][T10752] lo speed is unknown, defaulting to 1000
[  135.245111][T10756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.264007][T10755] nft_compat: unsupported protocol 0
[  135.305340][T10758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1427'.
[  135.331923][T10760] net_ratelimit: 2 callbacks suppressed
[  135.331934][T10760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.389606][T10765] geneve6: entered promiscuous mode
[  135.391576][T10765] geneve6: entered allmulticast mode
[  135.395525][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 55573 - 0
[  135.398768][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 37155 - 0
[  135.404059][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 55573 - 0
[  135.406333][T10766] netlink: 'syz.1.1429': attribute type 10 has an invalid length.
[  135.410408][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 37155 - 0
[  135.413164][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 55573 - 0
[  135.416510][T10766] netlink: 'syz.1.1429': attribute type 10 has an invalid length.
[  135.419572][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 37155 - 0
[  135.422163][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 55573 - 0
[  135.424910][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 37155 - 0
[  135.900583][T10775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'.
[  136.075675][T10785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1435'.
[  136.153697][T10787] netlink: 'syz.2.1436': attribute type 11 has an invalid length.
[  136.208186][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  136.267100][T10804] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  136.295331][T10809] Unsupported ieee802154 address type: 0
[  136.605631][T10809] team0 (unregistering): left promiscuous mode
[  136.719580][T10827] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  136.722032][T10827] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  136.725032][T10827] veth1_to_team: mtu greater than device maximum
[  136.886122][T10838] netlink: 'syz.2.1453': attribute type 29 has an invalid length.
[  136.895193][T10840] netlink: 'syz.0.1454': attribute type 9 has an invalid length.
[  136.951678][T10838] netlink: 'syz.2.1453': attribute type 29 has an invalid length.
[  137.067481][T10857] pim6reg1: entered promiscuous mode
[  137.069486][T10857] pim6reg1: entered allmulticast mode
[  137.214775][T10865] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4)
[  137.523161][T10871] lo speed is unknown, defaulting to 1000
[  137.569480][T10880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.705957][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.871409][T10909] lo speed is unknown, defaulting to 1000
[  137.892923][T10913] bridge0: entered promiscuous mode
[  137.936395][T10916] pim6reg1: entered promiscuous mode
[  137.938213][T10916] pim6reg1: entered allmulticast mode
[  138.074064][T10925] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  138.076615][T10925] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  138.079564][T10925] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  138.437852][T10959] bridge0: failed insert local address into bridge forwarding table
[  138.734597][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  138.846043][   T33] audit: type=1800 audit(1754626012.924:4): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1495" name="memory.events" dev="tmpfs" ino=2545 res=0 errno=0
[  138.854792][   T33] audit: type=1804 audit(1754626012.924:5): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1495" name="/newroot/497/memory.events" dev="tmpfs" ino=2545 res=1 errno=0
[  139.434860][T10997] bridge0: entered promiscuous mode
[  139.558086][T11011] validate_nla: 3 callbacks suppressed
[  139.558095][T11011] netlink: 'syz.0.1502': attribute type 2 has an invalid length.
[  139.742094][T11013] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  139.811934][T11021] bridge0: port 1(erspan0) entered blocking state
[  139.814465][T11021] bridge0: port 1(erspan0) entered disabled state
[  139.816892][T11021] erspan0: entered allmulticast mode
[  139.822480][T11021] erspan0: entered promiscuous mode
[  139.826404][T11021] erspan0: left allmulticast mode
[  139.828250][T11021] erspan0: left promiscuous mode
[  139.833252][T11021] bridge0: port 1(erspan0) entered disabled state
[  139.904111][T11024] __nla_validate_parse: 21 callbacks suppressed
[  139.904124][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'.
[  139.909505][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'.
[  140.122691][T11035] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1509'.
[  140.126020][T11036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1509'.
[  140.406700][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  140.464944][T11046] lo speed is unknown, defaulting to 1000
[  140.501108][T11049] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1514'.
[  140.530257][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'.
[  140.666890][T11071] lo speed is unknown, defaulting to 1000
[  140.669426][T11071] lo speed is unknown, defaulting to 1000
[  140.671802][T11071] lo speed is unknown, defaulting to 1000
[  140.686594][T11071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  140.710709][T11071] lo speed is unknown, defaulting to 1000
[  140.720203][T11071] lo speed is unknown, defaulting to 1000
[  140.724050][T11075] netlink: 'syz.0.1521': attribute type 2 has an invalid length.
[  140.725320][T11071] lo speed is unknown, defaulting to 1000
[  140.744841][T11071] lo speed is unknown, defaulting to 1000
[  140.753661][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'.
[  140.807451][T11079] netlink: 'syz.0.1522': attribute type 11 has an invalid length.
[  140.810140][T11079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1522'.
[  140.814124][T11085] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1523'.
[  140.839179][T11085] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.854284][T11085] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.897574][T11094] 8021q: VLANs not supported on ipvlan1
[  140.950478][T11101] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  140.954696][T11101] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  140.986745][T11103] netlink: 'syz.0.1528': attribute type 1 has an invalid length.
[  141.009780][T11103] bond10: (slave bridge6): Enslaving as a backup interface with an up link
[  141.023029][T11103] tipc: Resetting bearer <eth:syzkaller0>
[  141.037674][ T5846] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 55573 - 0
[  141.042753][ T5846] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 37155 - 0
[  141.048149][ T5846] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 55573 - 0
[  141.054703][ T5846] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 37155 - 0
[  141.060214][ T5846] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 55573 - 0
[  141.063105][ T5846] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 37155 - 0
[  141.066060][ T5846] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 55573 - 0
[  141.069910][ T5846] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 37155 - 0
[  141.105251][T11114] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  141.110478][T11116] bond10: (slave bridge6): Releasing backup interface
[  141.116026][T11115] netlink: 'syz.0.1531': attribute type 10 has an invalid length.
[  141.120616][T11115] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  141.123462][T11115] bond0: (slave wlan1): refused to change device type
[  141.244126][T11124] pim6reg1: entered promiscuous mode
[  141.246076][T11124] pim6reg1: entered allmulticast mode
[  141.741094][T11145] smc: net device bond0 applied user defined pnetid SYZ2
[  141.790082][T11141] netlink: 'syz.1.1543': attribute type 1 has an invalid length.
[  141.792774][T11141] netlink: 'syz.1.1543': attribute type 2 has an invalid length.
[  141.888756][T11150] lo speed is unknown, defaulting to 1000
[  142.034868][T11150] lo speed is unknown, defaulting to 1000
[  142.051328][T11163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.115927][T11166] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  142.155407][T11166] bond9: entered promiscuous mode
[  142.157144][T11166] bond9: entered allmulticast mode
[  142.163571][T11175] vlan0: entered promiscuous mode
[  142.173607][T11175] bridge0: entered promiscuous mode
[  142.175814][T11175] vlan0: entered allmulticast mode
[  142.177546][T11175] bridge0: entered allmulticast mode
[  142.186020][T11166] bridge8: the hash_elasticity option has been deprecated and is always 16
[  142.304481][T11189] lo speed is unknown, defaulting to 1000
[  142.313347][T11184] block nbd0: shutting down sockets
[  142.383206][T11195] netlink: 'syz.2.1560': attribute type 23 has an invalid length.
[  142.458005][T11189] lo speed is unknown, defaulting to 1000
[  142.787928][T11225] lo speed is unknown, defaulting to 1000
[  142.941893][T11241] netlink: 'syz.2.1572': attribute type 1 has an invalid length.
[  142.976301][T11241] 8021q: adding VLAN 0 to HW filter on device bond10
[  143.018691][T11241] bond10: (slave gretap2): making interface the new active one
[  143.021902][T11241] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  143.032627][T11225] lo speed is unknown, defaulting to 1000
[  143.072274][T11241] syz.2.1572 (11241) used greatest stack depth: 19400 bytes left
[  143.174415][T11254] bond11: entered promiscuous mode
[  143.176405][T11254] 8021q: adding VLAN 0 to HW filter on device bond11
[  143.192206][T11254] 8021q: adding VLAN 0 to HW filter on device bond11
[  143.194734][T11254] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  143.198410][T11254] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  143.206723][T11254] bond11: (slave wireguard0): making interface the new active one
[  143.211548][T11254] wireguard0: entered promiscuous mode
[  143.214124][T11254] bond11: (slave wireguard0): Enslaving as an active interface with an up link
[  143.223739][T11254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.226214][T11254] IPv6: NLM_F_CREATE should be set when creating new route
[  143.228769][T11254] IPv6: NLM_F_CREATE should be set when creating new route
[  143.234216][T11254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.246568][T11254] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  143.255170][T11254] bond11: (slave wireguard1): Enslaving as a backup interface with an up link
[  143.326048][T11265] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.329960][T11265] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.260465][T11283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.460288][T11287] nbd0: detected capacity change from 0 to 549764202496
[  144.996219][T11319] __nla_validate_parse: 28 callbacks suppressed
[  144.996230][T11319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1601'.
[  145.048740][T11322] validate_nla: 3 callbacks suppressed
[  145.048749][T11322] netlink: 'syz.1.1602': attribute type 1 has an invalid length.
[  145.053639][T11322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1602'.
[  145.145235][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1605'.
[  145.150445][T11331] netlink: 'syz.0.1605': attribute type 4 has an invalid length.
[  145.155593][T11333] netlink: 'syz.1.1606': attribute type 13 has an invalid length.
[  145.158214][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'.
[  145.174629][T11333] netlink: 'syz.1.1606': attribute type 13 has an invalid length.
[  145.177238][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'.
[  145.182524][   T55] block nbd0: Receive control failed (result -32)
[  145.190387][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1607'.
[  145.224711][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1609'.
[  145.376535][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  145.522239][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'.
[  145.531314][T11363] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  145.539767][T11363] netlink: 'syz.2.1613': attribute type 10 has an invalid length.
[  145.542521][T11363] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  145.545981][T11363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1613'.
[  145.555677][T11363] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.559366][T11363] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.746264][T11376] lo speed is unknown, defaulting to 1000
[  145.831793][T11376] lo speed is unknown, defaulting to 1000
[  145.839194][T11378] lo speed is unknown, defaulting to 1000
[  145.935259][T11378] lo speed is unknown, defaulting to 1000
[  146.034939][T11387] netlink: 'syz.1.1621': attribute type 10 has an invalid length.
[  146.042052][T11387] netlink: 'syz.1.1621': attribute type 10 has an invalid length.
[  146.045318][T11387] batadv0: entered promiscuous mode
[  146.047308][T11387] batadv0: entered allmulticast mode
[  146.049574][T11387] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  146.088097][T11391] netlink: 'syz.0.1622': attribute type 3 has an invalid length.
[  146.091523][T11391] netlink: 'syz.0.1622': attribute type 3 has an invalid length.
[  146.186169][T11392] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  146.192979][T11393] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  146.314697][T11408] syzkaller0: left promiscuous mode
[  146.404252][T11413] netlink: 'syz.2.1630': attribute type 3 has an invalid length.
[  146.410356][T11413] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  146.412976][T11413] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  146.482722][T11419] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  146.526495][T11419] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  146.532212][T11419] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.535870][T11419] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.779713][T11425] lo speed is unknown, defaulting to 1000
[  146.879333][T11425] lo speed is unknown, defaulting to 1000
[  147.347717][T11440] syzkaller0: entered promiscuous mode
[  147.352497][T11440] syzkaller0: entered allmulticast mode
[  147.586909][T11472] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  147.650969][T11478] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  147.667565][T11478] bond12: entered promiscuous mode
[  147.669751][T11478] bond12: entered allmulticast mode
[  147.671885][T11478] 8021q: adding VLAN 0 to HW filter on device bond12
[  147.763564][T11484] dvmrp8: entered allmulticast mode
[  147.767952][T11484] openvswitch: netlink: Flow key attr not present in new flow.
[  147.783656][T11482] dvmrp8: left allmulticast mode
[  147.837100][T11486] infiniband syz!: set down
[  147.839366][T11486] infiniband syz!: added team_slave_0
[  147.866616][T11486] RDS/IB: syz!: added
[  147.868496][T11486] smc: adding ib device syz! with port count 1
[  147.872604][T11486] smc:    ib device syz! port 1 has pnetid 
[  147.950843][T11503] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  148.244058][T11518] bond6: option mode: unable to set because the bond device is up
[  148.251741][T11518] bond6: option mode: unable to set because the bond device is up
[  148.265081][T11518] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  148.271955][T11518] bond6: (slave macvlan0): Enslaving as a backup interface with a down link
[  148.278728][T11518] veth0_to_bridge: left allmulticast mode
[  148.290644][T11518] veth0_to_bridge: left promiscuous mode
[  148.292814][T11518] bridge0: port 1(veth0_to_bridge) entered disabled state
[  148.300583][T11518] bond8: (slave vti0): Releasing backup interface
[  148.313450][T11518] bond10: (slave gretap2): Releasing active interface
[  148.319916][T11518] bond11: (slave wireguard0): Releasing backup interface
[  148.325714][T11518] wireguard0: left promiscuous mode
[  148.327929][T11518] bond11: (slave wireguard1): making interface the new active one
[  148.330935][T11518] wireguard1: entered promiscuous mode
[  148.343939][T11518] bond11: (slave wireguard1): Releasing backup interface
[  148.346203][T11518] wireguard1: left promiscuous mode
[  148.354821][T11518] bond6: (slave macvlan0): Releasing backup interface
[  148.361239][ T5882] lo speed is unknown, defaulting to 1000
[  149.264779][T11539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.516932][T11599] bond11: (slave gretap3): making interface the new active one
[  149.520187][T11599] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  149.605599][T11607] geneve7: entered promiscuous mode
[  149.608147][ T5881] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.612413][ T5881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.615607][ T5881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.618946][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.456583][T11625] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  150.462932][T11625] CPU: 1 UID: 0 PID: 11625 Comm: syz.1.1693 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  150.462945][T11625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.462951][T11625] Call Trace:
[  150.462955][T11625]  <TASK>
[  150.462960][T11625]  dump_stack_lvl+0x189/0x250
[  150.462974][T11625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.462982][T11625]  ? __pfx__printk+0x10/0x10
[  150.462992][T11625]  ? kernfs_path_from_node+0x2c/0x260
[  150.463002][T11625]  ? kernfs_path_from_node+0x2c/0x260
[  150.463011][T11625]  ? kernfs_path_from_node+0x2c/0x260
[  150.463021][T11625]  ? kernfs_path_from_node+0x22c/0x260
[  150.463029][T11625]  ? kernfs_path_from_node+0x2c/0x260
[  150.463039][T11625]  sysfs_warn_dup+0x8e/0xa0
[  150.463049][T11625]  sysfs_do_create_link_sd+0xc0/0x110
[  150.463059][T11625]  device_add_class_symlinks+0x1cf/0x240
[  150.463071][T11625]  device_add+0x475/0xb50
[  150.463082][T11625]  wiphy_register+0x1ba6/0x28d0
[  150.463100][T11625]  ? __pfx_wiphy_register+0x10/0x10
[  150.463110][T11625]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  150.463122][T11625]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  150.463133][T11625]  ieee80211_register_hw+0x3425/0x4080
[  150.463149][T11625]  ? ieee80211_register_hw+0x1491/0x4080
[  150.463160][T11625]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  150.463171][T11625]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.463185][T11625]  ? __hrtimer_setup+0x187/0x210
[  150.463196][T11625]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  150.463209][T11625]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  150.463238][T11625]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  150.463248][T11625]  ? trace_kmalloc+0x1f/0xd0
[  150.463258][T11625]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  150.463270][T11625]  ? kstrndup+0xbf/0x160
[  150.463283][T11625]  hwsim_new_radio_nl+0xea4/0x1b10
[  150.463296][T11625]  ? __pfx___nla_validate_parse+0x10/0x10
[  150.463311][T11625]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.463328][T11625]  ? __nla_parse+0x40/0x60
[  150.463338][T11625]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  150.463351][T11625]  genl_family_rcv_msg_doit+0x215/0x300
[  150.463362][T11625]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.463381][T11625]  ? bpf_lsm_capable+0x9/0x20
[  150.463395][T11625]  ? security_capable+0x7e/0x2e0
[  150.463409][T11625]  genl_rcv_msg+0x60e/0x790
[  150.463421][T11625]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.463430][T11625]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.463473][T11625]  netlink_rcv_skb+0x208/0x470
[  150.463484][T11625]  ? __lock_acquire+0xab9/0xd20
[  150.463496][T11625]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.463505][T11625]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.463526][T11625]  ? down_read+0x1ad/0x2e0
[  150.463534][T11625]  genl_rcv+0x28/0x40
[  150.463542][T11625]  netlink_unicast+0x82f/0x9e0
[  150.463557][T11625]  ? __pfx_netlink_unicast+0x10/0x10
[  150.463569][T11625]  ? netlink_sendmsg+0x642/0xb30
[  150.463579][T11625]  ? skb_put+0x11b/0x210
[  150.463588][T11625]  netlink_sendmsg+0x805/0xb30
[  150.463604][T11625]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.463617][T11625]  ? aa_sock_msg_perm+0x94/0x160
[  150.463628][T11625]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.463637][T11625]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.463648][T11625]  __sock_sendmsg+0x21c/0x270
[  150.463660][T11625]  ____sys_sendmsg+0x505/0x830
[  150.463670][T11625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.463682][T11625]  ? import_iovec+0x74/0xa0
[  150.463694][T11625]  ___sys_sendmsg+0x21f/0x2a0
[  150.463703][T11625]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.463726][T11625]  ? __fget_files+0x2a/0x420
[  150.463733][T11625]  ? __fget_files+0x3a0/0x420
[  150.463745][T11625]  __x64_sys_sendmsg+0x19b/0x260
[  150.463764][T11625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.463777][T11625]  ? rcu_is_watching+0x15/0xb0
[  150.463791][T11625]  ? do_syscall_64+0xbe/0x3b0
[  150.463803][T11625]  do_syscall_64+0xfa/0x3b0
[  150.463813][T11625]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.463824][T11625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.463832][T11625]  ? exc_page_fault+0x9f/0xf0
[  150.463844][T11625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.463851][T11625] RIP: 0033:0x7febc578ebe9
[  150.463860][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.463867][T11625] RSP: 002b:00007febc669f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.463877][T11625] RAX: ffffffffffffffda RBX: 00007febc59b5fa0 RCX: 00007febc578ebe9
[  150.463882][T11625] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  150.463887][T11625] RBP: 00007febc5811e19 R08: 0000000000000000 R09: 0000000000000000
[  150.463892][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.463897][T11625] R13: 00007febc59b6038 R14: 00007febc59b5fa0 R15: 00007ffff3b96648
[  150.463911][T11625]  </TASK>
[  150.664619][T11630] __nla_validate_parse: 20 callbacks suppressed
[  150.664629][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'.
[  150.671664][T11628] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  150.675064][T11628] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  150.683524][T11630] validate_nla: 12 callbacks suppressed
[  150.683534][T11630] netlink: 'syz.1.1695': attribute type 3 has an invalid length.
[  150.688334][T11630] netlink: 'syz.1.1695': attribute type 3 has an invalid length.
[  150.764423][T11639] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.767403][T11639] syzkaller0: entered promiscuous mode
[  150.780738][T11641] tipc: Resetting bearer <eth:syzkaller0>
[  150.825271][T11650] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1700'.
[  150.828588][T11650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1700'.
[  150.853965][T11650] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.857822][T11650] 8021q: adding VLAN 0 to HW filter on device team0
[  151.009628][T11650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.121707][T11665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'.
[  151.144793][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1704'.
[  151.161127][T11667] netlink: 'syz.0.1704': attribute type 3 has an invalid length.
[  151.163947][T11667] netlink: 'syz.0.1704': attribute type 3 has an invalid length.
[  151.195123][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'.
[  151.198082][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'.
[  151.201289][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'.
[  151.204399][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'.
[  151.207403][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'.
[  151.376971][T11685] netlink: 'syz.0.1710': attribute type 10 has an invalid length.
[  151.380504][T11685] bond0: (slave wlan1): refused to change device type
[  151.389844][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.397393][T11686] netlink: 'syz.0.1710': attribute type 12 has an invalid length.
[  151.401213][T11685] netlink: 'syz.0.1710': attribute type 12 has an invalid length.
[  151.515880][T10665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.518788][T10665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.748510][ T5823] Bluetooth: hci2: command 0x0405 tx timeout
[  152.073381][T11710] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  152.126912][T11712] syzkaller0: entered promiscuous mode
[  152.128935][T11712] syzkaller0: entered allmulticast mode
[  152.134381][T11712] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  152.153053][T11712] 8021q: adding VLAN 0 to HW filter on device bond15
[  152.341863][T11689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.126161][T11726] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  153.387354][T11718] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  153.483068][T11749] netlink: 'syz.1.1728': attribute type 3 has an invalid length.
[  154.320541][T11763] tipc: Resetting bearer <eth:syzkaller0>
[  154.362549][ T5882] lo speed is unknown, defaulting to 1000
[  154.367979][ T5882] syz2: Port: 1 Link DOWN
[  154.401960][T11772] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  154.406689][T11773] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  154.708579][    C0] tipc: RX(ac14140f): key[1] is activated
[  154.841690][T11803] bond12: entered promiscuous mode
[  154.843704][T11803] 8021q: adding VLAN 0 to HW filter on device bond12
[  154.972641][T11814] bond11: (slave gretap3): Releasing active interface
[  155.846144][T11848] __nla_validate_parse: 55 callbacks suppressed
[  155.846167][T11848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1757'.
[  155.879839][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1758'.
[  155.886466][T11850] validate_nla: 8 callbacks suppressed
[  155.886478][T11850] netlink: 'syz.0.1758': attribute type 3 has an invalid length.
[  155.890940][T11850] netlink: 'syz.0.1758': attribute type 3 has an invalid length.
[  155.922180][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'.
[  155.927475][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'.
[  155.934014][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'.
[  155.994983][T11861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1762'.
[  156.144331][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'.
[  156.232256][T11896] siw: device registration error -23
[  157.048166][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'.
[  157.235810][T11925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1779'.
[  157.250711][T11930] lo speed is unknown, defaulting to 1000
[  157.251342][T11928] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  157.252580][T11930] lo speed is unknown, defaulting to 1000
[  157.261209][T11930] lo speed is unknown, defaulting to 1000
[  157.279906][T11930] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  157.296923][T11930] lo speed is unknown, defaulting to 1000
[  157.300438][T11930] lo speed is unknown, defaulting to 1000
[  157.303220][T11930] lo speed is unknown, defaulting to 1000
[  157.391678][T11956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.394133][T11956] IPv6: NLM_F_CREATE should be set when creating new route
[  157.396676][T11956] IPv6: NLM_F_CREATE should be set when creating new route
[  157.399032][T11956] IPv6: NLM_F_CREATE should be set when creating new route
[  157.403457][T11956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.455014][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'.
[  157.508130][T11974] geneve8: entered promiscuous mode
[  157.587348][T11987] netlink: 'syz.2.1800': attribute type 1 has an invalid length.
[  157.603842][T11987] 8021q: adding VLAN 0 to HW filter on device bond13
[  157.617490][T11987] bond13: (slave veth7): Enslaving as an active interface with a down link
[  157.632450][T11977] delete_channel: no stack
[  157.635965][T11986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.781661][T11999] netlink: 'syz.0.1803': attribute type 1 has an invalid length.
[  157.784319][T11997] netlink: 'syz.0.1803': attribute type 1 has an invalid length.
[  157.955874][T12016] lo speed is unknown, defaulting to 1000
[  158.043294][T12016] lo speed is unknown, defaulting to 1000
[  158.089061][T12021] sctp: [Deprecated]: syz.0.1809 (pid 12021) Use of int in max_burst socket option.
[  158.089061][T12021] Use struct sctp_assoc_value instead
[  158.096746][T12021] netlink: 'syz.0.1809': attribute type 3 has an invalid length.
[  158.099816][T12021] netlink: 'syz.0.1809': attribute type 3 has an invalid length.
[  158.138907][T12016] lo speed is unknown, defaulting to 1000
[  158.429873][T12039] dvmrp8: entered allmulticast mode
[  158.475235][T12044] lo speed is unknown, defaulting to 1000
[  158.559485][T12044] lo speed is unknown, defaulting to 1000
[  158.641874][T12044] lo speed is unknown, defaulting to 1000
[  158.762999][T12031] dvmrp8: left allmulticast mode
[  158.880591][T12059] sch_tbf: burst 0 is lower than device veth0_macvtap mtu (1514) !
[  159.045320][T12078] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  159.051051][T12078] netlink: 'syz.2.1826': attribute type 2 has an invalid length.
[  159.126513][T12087] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  159.132659][T12086] rdma_rxe: rxe_newlink: failed to add lo
[  159.199077][T12093] netlink: 'syz.0.1834': attribute type 12 has an invalid length.
[  159.451550][T12136] batadv0: left promiscuous mode
[  159.453403][T12136] batadv0: left allmulticast mode
[  159.456844][T12136] bridge_slave_1: left allmulticast mode
[  159.474299][T12136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.489863][T12139] gretap0: entered promiscuous mode
[  159.497185][T12139] 0{X: renamed from gretap0
[  159.506056][T12139] 0{X: left promiscuous mode
[  159.507949][T12139] 0{X: entered allmulticast mode
[  159.511973][T12139] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  159.553096][T12146] syzkaller0: left promiscuous mode
[  159.554870][T12146] syzkaller0: left allmulticast mode
[  159.801807][T12174] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  159.846039][T12183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.849750][T12183] tipc: Resetting bearer <eth:syzkaller0>
[  160.792940][T12204] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  160.851240][T12212] __nla_validate_parse: 29 callbacks suppressed
[  160.851253][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'.
[  160.924024][T12218] 8021q: adding VLAN 0 to HW filter on device team0
[  160.931633][T12222] ieee802154 phy0 wpan0: encryption failed: -22
[  160.935272][T12218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.945006][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1872'.
[  160.945314][T12218] veth0_to_team: entered promiscuous mode
[  160.950647][T12218] veth0_to_team: entered allmulticast mode
[  160.976942][T12224] netlink: 'syz.1.1873': attribute type 1 has an invalid length.
[  161.037043][T12232] netlink: 'syz.1.1875': attribute type 1 has an invalid length.
[  161.040559][T12232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1875'.
[  161.090466][T12236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.101225][T12236] ip6erspan0: entered promiscuous mode
[  161.103049][T12236] ip6erspan0: entered allmulticast mode
[  161.107415][T12238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1878'.
[  164.222714][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'.
[  164.225656][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  164.225698][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'.
[  164.236457][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  164.241563][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'.
[  164.244492][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'.
[  164.247668][T12255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.250182][ T7287] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.252981][ T7287] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.270486][T12255] syzkaller0: entered promiscuous mode
[  164.272362][T12255] syzkaller0: entered allmulticast mode
[  164.279846][ T7287] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.288632][ T7287] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.293233][T12255] tipc: Resetting bearer <eth:syzkaller0>
[  164.323138][T12254] tipc: Resetting bearer <eth:syzkaller0>
[  164.335085][T12254] tipc: Disabling bearer <eth:syzkaller0>
[  164.337457][T12265] netlink: 'syz.0.1887': attribute type 58 has an invalid length.
[  164.343678][T12266] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.433046][T12273] gretap0: entered promiscuous mode
[  164.441671][T12273] 0{X: renamed from gretap0
[  164.447692][T12273] 0{X: left promiscuous mode
[  164.451641][T12273] 0{X: entered allmulticast mode
[  164.477542][T12273] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  164.537793][T12282] netlink: 'syz.0.1890': attribute type 10 has an invalid length.
[  164.541016][T12279] netlink: 'syz.2.1892': attribute type 12 has an invalid length.
[  164.546378][T12282] netlink: 'syz.0.1890': attribute type 10 has an invalid length.
[  164.665114][T12291] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  164.683983][T12291] veth9: entered promiscuous mode
[  165.351271][T12332] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  165.354573][T12332] netlink: 'syz.0.1906': attribute type 1 has an invalid length.
[  165.531153][T12347] bridge0: port 1(veth0_to_bridge) entered blocking state
[  165.533841][T12347] bridge0: port 1(veth0_to_bridge) entered disabled state
[  165.536256][T12347] veth0_to_bridge: entered allmulticast mode
[  165.539709][T12347] veth0_to_bridge: entered promiscuous mode
[  165.568041][T12353] netlink: 'syz.1.1912': attribute type 4 has an invalid length.
[  166.215423][T12381] __nla_validate_parse: 12 callbacks suppressed
[  166.215435][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'.
[  166.274674][T12385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1925'.
[  166.375586][T12393] lo speed is unknown, defaulting to 1000
[  166.452153][T12393] lo speed is unknown, defaulting to 1000
[  166.500691][T12396] netlink: 'syz.2.1926': attribute type 10 has an invalid length.
[  166.537731][T12393] lo speed is unknown, defaulting to 1000
[  166.851593][T12404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.151696][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'.
[  167.210986][T12417] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1933'.
[  167.260288][T12419] netlink: 'syz.2.1934': attribute type 12 has an invalid length.
[  167.262938][T12419] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1934'.
[  167.564519][T12432] netlink: 'syz.2.1939': attribute type 29 has an invalid length.
[  167.567206][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  167.715660][T12442] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1941'.
[  167.719473][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1941'.
[  167.803249][T12447] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1943'.
[  167.806663][T12447] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1943'.
[  167.955425][T12469] sctp: [Deprecated]: syz.2.1950 (pid 12469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.955425][T12469] Use struct sctp_sack_info instead
[  167.997699][T12472] syzkaller0: entered promiscuous mode
[  168.001508][T12472] syzkaller0: entered allmulticast mode
[  168.127056][T12489] netlink: 'syz.2.1954': attribute type 5 has an invalid length.
[  168.314786][T12503] : renamed from bond_slave_0
[  169.171960][T12519] openvswitch: netlink: Flow actions attr not present in new flow.
[  169.307585][T12528] smc: net device bond0 erased user defined pnetid SYZ2
[  169.365072][T12531] ieee802154 phy0 wpan0: encryption failed: -22
[  169.381366][T12533] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  169.743184][T12537] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  170.228567][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.331490][T12566] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  170.342880][T12567] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  170.347060][T12567] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  170.378044][T12571] netlink: 'syz.2.1980': attribute type 4 has an invalid length.
[  170.393411][T12570] syzkaller1: entered promiscuous mode
[  170.395741][T12570] syzkaller1: entered allmulticast mode
[  170.537813][T12590] netlink: 'syz.2.1985': attribute type 11 has an invalid length.
[  170.541545][T12590] netlink: 'syz.2.1985': attribute type 4 has an invalid length.
[  171.343852][T12632] bond13: (slave veth7): Releasing active interface
[  171.448633][T12640] netlink: 'syz.2.1999': attribute type 13 has an invalid length.
[  171.672314][T12651] macsec2: entered promiscuous mode
[  171.674304][T12651] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  171.677062][T12651] macsec2: entered allmulticast mode
[  171.682053][T12651] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  171.735689][T12664] __nla_validate_parse: 21 callbacks suppressed
[  171.735700][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2007'.
[  171.741275][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2007'.
[  171.995644][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'.
[  172.043665][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'.
[  172.047309][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'.
[  172.126446][T12693] netlink: 'syz.0.2015': attribute type 1 has an invalid length.
[  172.142755][T12693] 8021q: adding VLAN 0 to HW filter on device bond14
[  172.190731][T12701] netlink: 'syz.0.2017': attribute type 4 has an invalid length.
[  172.194253][ T5567] lo speed is unknown, defaulting to 1000
[  172.196371][ T5567] syz1: Port: 1 Link DOWN
[  172.232304][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2017'.
[  172.533925][T12733] netlink: 'syz.0.2025': attribute type 10 has an invalid length.
[  172.536696][T12733] bond0: (slave wlan1): refused to change device type
[  172.543500][T12733] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.547089][T12733] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.976749][T12773] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  172.980309][T12773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2033'.
[  172.985127][T12773] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  173.001480][T12773] 8021q: adding VLAN 0 to HW filter on device bond17
[  173.480984][T12795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2040'.
[  173.494711][T12801] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2042'.
[  173.497707][T12801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2042'.
[  173.524377][T12801] rdma_rxe: rxe_newlink: failed to add lo
[  173.539555][T12801] 0{X: left allmulticast mode
[  173.543771][T12801] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.547174][T12801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.552643][   T51] lo speed is unknown, defaulting to 1000
[  173.554671][   T51] syz1: Port: 1 Link ACTIVE
[  173.599951][T12810] team0: Refused to change device type
[  173.773593][T12836] unsupported nlmsg_type 40
[  173.804458][T12844] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  173.810796][T12842] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.814091][T12842] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.820824][T12844] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  173.888208][T12842] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.894899][T12842] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.941077][T12842] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.944470][T12842] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.054791][T12842] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.058171][T12842] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.137846][ T5881] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.140868][ T5881] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.143653][ T5881] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.146898][ T5881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.156537][ T7287] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.161005][ T7287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.185197][ T5881] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.192248][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.235649][T12886] netlink: 'syz.1.2066': attribute type 1 has an invalid length.
[  174.251674][T12888] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.255062][T12888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.294429][T12888] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.297786][T12888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.341859][T12888] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.345306][T12888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.402399][T12888] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  174.405773][T12888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.526490][T12914] bridge0: left promiscuous mode
[  174.534020][T12914] ip6erspan0: left promiscuous mode
[  174.535934][T12914] ip6erspan0: left allmulticast mode
[  174.542763][T12914] tipc: Resetting bearer <eth:syzkaller0>
[  174.551083][T12914] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  174.553516][T12914] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  174.557900][T12914] vlan0: left allmulticast mode
[  174.560487][T12914] veth1: left allmulticast mode
[  174.562621][T12914] gretap1: left promiscuous mode
[  174.564570][T12914] veth5: left promiscuous mode
[  174.566632][T12914] bond9: left promiscuous mode
[  174.568246][T12914] bond9: left allmulticast mode
[  174.570316][T12914] bond11: left promiscuous mode
[  174.572207][T12914] bond12: left promiscuous mode
[  174.573885][T12914] bond12: left allmulticast mode
[  174.587968][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.628923][ T7287] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.631570][ T7287] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.634144][ T7287] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.636864][ T7287] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.712508][T12920] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  174.715429][T12920] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  174.717886][T12920] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  175.175371][T12936] netlink: 'syz.1.2079': attribute type 1 has an invalid length.
[  175.178159][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.549179][ T7287] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.552478][ T7287] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.559373][ T7287] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.562394][ T7287] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.569930][ T7287] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.572962][ T7287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.581608][ T7287] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.584598][ T7287] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.726408][T12952] netlink: 'syz.2.2082': attribute type 13 has an invalid length.
[  175.748020][T12952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.754093][ T5847] lo speed is unknown, defaulting to 1000
[  175.755973][ T5847] syz2: Port: 1 Link ACTIVE
[  175.775980][T12952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.781221][T12953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  176.104570][T12956] pim6reg: entered allmulticast mode
[  176.107611][T12956] pim6reg: left allmulticast mode
[  176.503827][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.632233][T12971] 8021q: adding VLAN 0 to HW filter on device bond15
[  176.646771][T12971] 8021q: adding VLAN 0 to HW filter on device bond15
[  176.650815][T12971] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  176.655486][T12971] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  176.693958][T12973] macvlan0: entered promiscuous mode
[  176.695801][T12973] macvlan0: entered allmulticast mode
[  176.698084][T12973] bond15: entered promiscuous mode
[  176.702182][T12973] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  176.706627][T12973] bond15: left promiscuous mode
[  176.845711][T12980] __nla_validate_parse: 17 callbacks suppressed
[  176.845721][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2091'.
[  176.911205][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'.
[  176.984081][T12989] 8021q: adding VLAN 0 to HW filter on device bond16
[  176.999670][T12989] bond16: (slave veth9): Enslaving as an active interface with a down link
[  177.008971][T12989] vlan1: entered allmulticast mode
[  177.014156][T12989] bond16: (slave vlan1): Opening slave failed
[  177.033496][T12992] IPVS: stopping backup sync thread 11503 ...
[  177.037057][T12992] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2094'.
[  177.041795][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2094'.
[  177.044918][T12992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2094'.
[  177.062964][T12988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.163957][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'.
[  177.167181][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'.
[  177.171595][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'.
[  177.173700][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'.
[  177.177816][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'.
[  177.203831][T13001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.207987][T13001] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  177.214401][T13001] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  177.217684][T13001] tipc: Resetting bearer <eth:syzkaller0>
[  177.269680][T13006] : renamed from bond_slave_0
[  177.292578][T13008] validate_nla: 3 callbacks suppressed
[  177.292589][T13008] netlink: 'syz.2.2100': attribute type 7 has an invalid length.
[  177.299031][T13008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.349392][T10676] wlan0: Trigger new scan to find an IBSS to join
[  177.373153][T13013] netlink: 'syz.2.2101': attribute type 10 has an invalid length.
[  177.376050][T13014] netlink: 'syz.2.2101': attribute type 10 has an invalid length.
[  177.409560][T13017] lo speed is unknown, defaulting to 1000
[  177.488204][T13017] lo speed is unknown, defaulting to 1000
[  177.573607][T13017] lo speed is unknown, defaulting to 1000
[  177.642094][T13030] delete_channel: no stack
[  177.682180][T13034] delete_channel: no stack
[  177.967407][T13050] netlink: 'syz.0.2109': attribute type 29 has an invalid length.
[  177.970996][T13050] netlink: 'syz.0.2109': attribute type 29 has an invalid length.
[  178.352568][T13068] batman_adv: batadv0: Adding interface: gretap0
[  178.354771][T13068] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  178.361801][T13068] batman_adv: batadv0: Interface activated: gretap0
[  178.507067][T13077] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  178.923200][T13098] netlink: 'syz.2.2124': attribute type 10 has an invalid length.
[  179.176999][T13120] netlink: 'syz.2.2131': attribute type 3 has an invalid length.
[  179.225119][T13072] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  179.526110][T13140] netlink: 'syz.2.2137': attribute type 39 has an invalid length.
[  179.831277][T13163] tipc: Resetting bearer <eth:syzkaller0>
[  179.874481][   T10] lo speed is unknown, defaulting to 1000
[  179.877071][ T5881] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.881192][   T10] syz1: Port: 1 Link DOWN
[  179.883173][ T5881] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.886803][ T5881] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.890676][ T5881] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.894400][ T5881] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.898082][ T5881] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.901684][ T5881] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.905153][ T5881] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.191906][T13178] bond17: entered promiscuous mode
[  180.234522][T13181] sctp: [Deprecated]: syz.0.2150 (pid 13181) Use of int in max_burst socket option.
[  180.234522][T13181] Use struct sctp_assoc_value instead
[  180.277835][T13186] netlink: 'syz.0.2151': attribute type 3 has an invalid length.
[  180.416245][T13199] bridge0: left promiscuous mode
[  180.418455][T13199] syzkaller0: left promiscuous mode
[  180.421019][T13199] syzkaller0: left allmulticast mode
[  180.424712][T13199] geneve6: left promiscuous mode
[  180.426509][T13199] geneve6: left allmulticast mode
[  180.429910][T13199] geneve7: left promiscuous mode
[  180.431891][T13199] bond12: left promiscuous mode
[  180.433749][T13199] geneve8: left promiscuous mode
[  180.436304][T13199] bond17: left promiscuous mode
[  180.612420][T13210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.614930][T13210] IPv6: NLM_F_CREATE should be set when creating new route
[  180.617375][T13210] IPv6: NLM_F_CREATE should be set when creating new route
[  180.622452][ T5881] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.625711][ T5881] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.629921][ T5881] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.633084][ T5881] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.365153][T13217] netlink: 'syz.2.2162': attribute type 1 has an invalid length.
[  181.576204][T13240] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  181.602435][T13240] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  181.611907][T13240] nbd: socks must be embedded in a SOCK_ITEM attr
[  181.619780][T13240] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  181.623270][T13240] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.724471][T13249] veth0_to_bridge: left allmulticast mode
[  181.726580][T13249] veth0_to_bridge: left promiscuous mode
[  181.728735][T13249] bridge0: port 1(veth0_to_bridge) entered disabled state
[  182.270552][T13251] __nla_validate_parse: 43 callbacks suppressed
[  182.270564][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'.
[  182.276281][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'.
[  182.347228][T13256] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  182.390904][T10665] wlan0: Trigger new scan to find an IBSS to join
[  182.499178][T13266] bridge0: entered allmulticast mode
[  183.293580][T13278] validate_nla: 3 callbacks suppressed
[  183.293590][T13278] netlink: 'syz.0.2183': attribute type 21 has an invalid length.
[  183.298069][T13278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2183'.
[  183.327740][T13280] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.332772][T13280] syzkaller0: entered promiscuous mode
[  183.335298][T13280] syzkaller0: entered allmulticast mode
[  183.342675][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'.
[  183.391184][T13282] netlink: 'syz.0.2185': attribute type 10 has an invalid length.
[  183.396282][T13282] batman_adv: batadv0: Adding interface: team0
[  183.400291][T13282] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  183.411410][T13282] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  183.526456][T13288] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  183.529591][T13288] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  183.532446][T13288] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  183.551276][T13295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2189'.
[  183.554598][T13295] netlink: 'syz.0.2189': attribute type 10 has an invalid length.
[  183.557597][T13295] batman_adv: batadv0: Removing interface: team0
[  183.562127][T13295] 8021q: adding VLAN 0 to HW filter on device team0
[  183.565969][T13295] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.617443][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2191'.
[  183.641395][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2191'.
[  184.452857][T13365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.683442][T13376] syzkaller1: entered promiscuous mode
[  184.685315][T13376] syzkaller1: entered allmulticast mode
[  184.697291][T13373] lo speed is unknown, defaulting to 1000
[  184.739146][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2195'.
[  184.796699][T13373] lo speed is unknown, defaulting to 1000
[  184.881130][T13373] lo speed is unknown, defaulting to 1000
[  185.037391][T13389] netlink: 'syz.0.2199': attribute type 13 has an invalid length.
[  185.046081][T13389] netlink: 'syz.0.2199': attribute type 17 has an invalid length.
[  185.070681][T13389] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.075258][T13389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.081850][   T10] lo speed is unknown, defaulting to 1000
[  185.083787][   T10] syz1: Port: 1 Link ACTIVE
[  185.113511][T13385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.138172][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'.
[  185.168036][T13384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.207510][T13400] netlink: 'syz.1.2203': attribute type 29 has an invalid length.
[  185.212823][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'.
[  185.239552][T13401] lo speed is unknown, defaulting to 1000
[  185.325306][T13401] lo speed is unknown, defaulting to 1000
[  185.338741][T10641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.368800][   T10] ------------[ cut here ]------------
[  185.370817][   T10] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  185.374338][   T10] WARNING: CPU: 0 PID: 10 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  185.377578][   T10] Modules linked in:
[  185.379255][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  185.383714][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.387008][   T10] Workqueue: mld mld_ifc_work
[  185.388642][   T10] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  185.390721][   T10] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 f3 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  185.396935][   T10] RSP: 0018:ffffc900000d64d8 EFLAGS: 00010246
[  185.399062][   T10] RAX: 3751c01f18cd2000 RBX: 000000000000000c RCX: ffff88801c2d1cc0
[  185.401661][   T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  185.404199][   T10] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  185.406798][   T10] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff8880339a4928
[  185.409439][   T10] R13: 0000000000000000 R14: ffff88811c168e40 R15: ffff88811c16b0d8
[  185.412080][   T10] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  185.414954][   T10] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.417050][   T10] CR2: 00007febc667dfc8 CR3: 000000010d726000 CR4: 00000000000006f0
[  185.419723][   T10] Call Trace:
[  185.420820][   T10]  <TASK>
[  185.421809][   T10]  rate_control_send_low+0x194/0x7a0
[  185.423523][   T10]  rate_control_get_rate+0x20b/0x5d0
[  185.425333][   T10]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  185.427211][   T10]  ? unwind_next_frame+0xa5/0x2390
[  185.428978][   T10]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  185.431077][   T10]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  185.433205][   T10]  invoke_tx_handlers_late+0xb6/0x1820
[  185.435041][   T10]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  185.436951][   T10]  ieee80211_tx_dequeue+0x308e/0x4360
[  185.438875][   T10]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  185.440777][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.442576][   T10]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  185.444594][   T10]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  185.446602][T13401] lo speed is unknown, defaulting to 1000
[  185.446675][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.450463][   T10]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  185.452364][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  185.454086][   T10]  ieee80211_queue_skb+0x1a31/0x21c0
[  185.455867][   T10]  ieee80211_tx+0x297/0x420
[  185.457392][   T10]  ? __pfx_ieee80211_tx+0x10/0x10
[  185.459070][   T10]  ? ieee80211_xmit+0x315/0x400
[  185.460718][   T10]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  185.462648][   T10]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  185.464683][   T10]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  185.466840][   T10]  ? skb_network_protocol+0x508/0x760
[  185.468712][   T10]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  185.470800][   T10]  ieee80211_subif_start_xmit+0xe0/0x510
[  185.472692][   T10]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  185.474783][   T10]  ? __lock_acquire+0xab9/0xd20
[  185.476452][   T10]  dev_hard_start_xmit+0x2d7/0x830
[  185.478211][   T10]  __dev_queue_xmit+0x1b8d/0x3b50
[  185.479963][   T10]  ? register_lock_class+0x51/0x320
[  185.481757][   T10]  ? __dev_queue_xmit+0x27b/0x3b50
[  185.483502][   T10]  ? __pfx___dev_queue_xmit+0x10/0x10
[  185.485292][   T10]  ? read_seqbegin+0x122/0x250
[  185.486902][   T10]  ? neigh_resolve_output+0x438/0x750
[  185.488724][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.490485][   T10]  ? read_seqbegin+0x1ac/0x250
[  185.492160][   T10]  ? __pfx_read_seqbegin+0x10/0x10
[  185.493900][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.495711][   T10]  ? eth_header+0x11b/0x200
[  185.497293][   T10]  ? __asan_memcpy+0x40/0x70
[  185.498960][   T10]  ? eth_header+0x11b/0x200
[  185.500420][   T10]  ? __pfx_eth_header+0x10/0x10
[  185.502061][   T10]  ? neigh_resolve_output+0x624/0x750
[  185.503833][   T10]  ip6_finish_output2+0x11fe/0x16a0
[  185.505606][   T10]  ? ip6_finish_output2+0x701/0x16a0
[  185.507410][   T10]  ? ip6_mtu+0x7d/0x3f0
[  185.508872][   T10]  ? __pfx_ip6_finish_output2+0x10/0x10
[  185.510732][   T10]  ? ip6_mtu+0x7d/0x3f0
[  185.512135][   T10]  ? ip6_mtu+0x321/0x3f0
[  185.513527][   T10]  ? ip6_finish_output+0x2ef/0x4e0
[  185.515272][   T10]  NF_HOOK+0x9e/0x380
[  185.516623][   T10]  ? NF_HOOK+0x101/0x380
[  185.518075][   T10]  ? __pfx_NF_HOOK+0x10/0x10
[  185.519729][   T10]  ? __pfx_dst_output+0x10/0x10
[  185.521399][   T10]  ? icmp6_dst_alloc+0x3a5/0x420
[  185.523062][   T10]  ? icmp6_dst_alloc+0x3a5/0x420
[  185.524743][   T10]  mld_sendpack+0x800/0xd80
[  185.526312][   T10]  ? mld_sendpack+0x1de/0xd80
[  185.527911][   T10]  ? __pfx_mld_sendpack+0x10/0x10
[  185.529676][   T10]  mld_ifc_work+0x83e/0xd60
[  185.531206][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.532905][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  185.534779][   T10]  process_scheduled_works+0xae1/0x17b0
[  185.536654][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  185.538635][   T10]  worker_thread+0x8a0/0xda0
[  185.540136][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.542239][   T10]  ? __kthread_parkme+0x7b/0x200
[  185.543932][   T10]  kthread+0x711/0x8a0
[  185.545351][   T10]  ? __pfx_worker_thread+0x10/0x10
[  185.547072][   T10]  ? __pfx_kthread+0x10/0x10
[  185.548762][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.550547][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.552276][   T10]  ? __pfx_kthread+0x10/0x10
[  185.553760][   T10]  ret_from_fork+0x3fc/0x770
[  185.555354][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  185.557044][   T10]  ? __switch_to_asm+0x39/0x70
[  185.558852][   T10]  ? __switch_to_asm+0x33/0x70
[  185.560490][   T10]  ? __pfx_kthread+0x10/0x10
[  185.562041][   T10]  ret_from_fork_asm+0x1a/0x30
[  185.563615][   T10]  </TASK>
[  185.564703][   T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  185.567205][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  185.571103][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.574362][   T10] Workqueue: mld mld_ifc_work
[  185.575901][   T10] Call Trace:
[  185.576987][   T10]  <TASK>
[  185.577970][   T10]  dump_stack_lvl+0x99/0x250
[  185.579559][   T10]  ? __asan_memcpy+0x40/0x70
[  185.581137][   T10]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.582836][   T10]  ? __pfx__printk+0x10/0x10
[  185.584398][   T10]  panic+0x2db/0x790
[  185.585735][   T10]  ? __pfx_panic+0x10/0x10
[  185.587253][   T10]  ? ret_from_fork_asm+0x1a/0x30
[  185.588902][   T10]  __warn+0x31b/0x4b0
[  185.590207][   T10]  ? __rate_control_send_low+0x5df/0x820
[  185.592060][   T10]  ? __rate_control_send_low+0x5df/0x820
[  185.593957][   T10]  report_bug+0x2be/0x4f0
[  185.595432][   T10]  ? __rate_control_send_low+0x5df/0x820
[  185.597247][   T10]  ? __rate_control_send_low+0x5df/0x820
[  185.599141][   T10]  ? __rate_control_send_low+0x5e1/0x820
[  185.601019][   T10]  handle_bug+0x84/0x160
[  185.602475][   T10]  exc_invalid_op+0x1a/0x50
[  185.604068][   T10]  asm_exc_invalid_op+0x1a/0x20
[  185.605777][   T10] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  185.607895][   T10] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 f3 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  185.614354][   T10] RSP: 0018:ffffc900000d64d8 EFLAGS: 00010246
[  185.616419][   T10] RAX: 3751c01f18cd2000 RBX: 000000000000000c RCX: ffff88801c2d1cc0
[  185.619039][   T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  185.621704][   T10] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  185.624352][   T10] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff8880339a4928
[  185.626971][   T10] R13: 0000000000000000 R14: ffff88811c168e40 R15: ffff88811c16b0d8
[  185.629640][   T10]  ? __rate_control_send_low+0x5de/0x820
[  185.631537][   T10]  rate_control_send_low+0x194/0x7a0
[  185.633296][   T10]  rate_control_get_rate+0x20b/0x5d0
[  185.635026][   T10]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  185.636836][   T10]  ? unwind_next_frame+0xa5/0x2390
[  185.638534][   T10]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  185.640578][   T10]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  185.642665][   T10]  invoke_tx_handlers_late+0xb6/0x1820
[  185.644493][   T10]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  185.646446][   T10]  ieee80211_tx_dequeue+0x308e/0x4360
[  185.648223][   T10]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  185.650135][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.651967][   T10]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  185.654004][   T10]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  185.656203][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.657989][   T10]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  185.659896][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  185.661568][   T10]  ieee80211_queue_skb+0x1a31/0x21c0
[  185.663329][   T10]  ieee80211_tx+0x297/0x420
[  185.664877][   T10]  ? __pfx_ieee80211_tx+0x10/0x10
[  185.666591][   T10]  ? ieee80211_xmit+0x315/0x400
[  185.668137][   T10]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  185.670148][   T10]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  185.672233][   T10]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  185.674369][   T10]  ? skb_network_protocol+0x508/0x760
[  185.676133][   T10]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  185.678242][   T10]  ieee80211_subif_start_xmit+0xe0/0x510
[  185.680097][   T10]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  185.682196][   T10]  ? __lock_acquire+0xab9/0xd20
[  185.683834][   T10]  dev_hard_start_xmit+0x2d7/0x830
[  185.685561][   T10]  __dev_queue_xmit+0x1b8d/0x3b50
[  185.687260][   T10]  ? register_lock_class+0x51/0x320
[  185.688986][   T10]  ? __dev_queue_xmit+0x27b/0x3b50
[  185.690724][   T10]  ? __pfx___dev_queue_xmit+0x10/0x10
[  185.692521][   T10]  ? read_seqbegin+0x122/0x250
[  185.694130][   T10]  ? neigh_resolve_output+0x438/0x750
[  185.695940][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.697700][   T10]  ? read_seqbegin+0x1ac/0x250
[  185.699318][   T10]  ? __pfx_read_seqbegin+0x10/0x10
[  185.701033][   T10]  ? __local_bh_enable_ip+0x12d/0x1c0
[  185.702842][   T10]  ? eth_header+0x11b/0x200
[  185.704387][   T10]  ? __asan_memcpy+0x40/0x70
[  185.705931][   T10]  ? eth_header+0x11b/0x200
[  185.707467][   T10]  ? __pfx_eth_header+0x10/0x10
[  185.709100][   T10]  ? neigh_resolve_output+0x624/0x750
[  185.710918][   T10]  ip6_finish_output2+0x11fe/0x16a0
[  185.712662][   T10]  ? ip6_finish_output2+0x701/0x16a0
[  185.714433][   T10]  ? ip6_mtu+0x7d/0x3f0
[  185.715836][   T10]  ? __pfx_ip6_finish_output2+0x10/0x10
[  185.717686][   T10]  ? ip6_mtu+0x7d/0x3f0
[  185.719095][   T10]  ? ip6_mtu+0x321/0x3f0
[  185.720543][   T10]  ? ip6_finish_output+0x2ef/0x4e0
[  185.722269][   T10]  NF_HOOK+0x9e/0x380
[  185.723623][   T10]  ? NF_HOOK+0x101/0x380
[  185.725060][   T10]  ? __pfx_NF_HOOK+0x10/0x10
[  185.726657][   T10]  ? __pfx_dst_output+0x10/0x10
[  185.728322][   T10]  ? icmp6_dst_alloc+0x3a5/0x420
[  185.729993][   T10]  ? icmp6_dst_alloc+0x3a5/0x420
[  185.731677][   T10]  mld_sendpack+0x800/0xd80
[  185.733252][   T10]  ? mld_sendpack+0x1de/0xd80
[  185.734826][   T10]  ? __pfx_mld_sendpack+0x10/0x10
[  185.736527][   T10]  mld_ifc_work+0x83e/0xd60
[  185.738068][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.739829][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  185.741663][   T10]  process_scheduled_works+0xae1/0x17b0
[  185.743518][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  185.745541][   T10]  worker_thread+0x8a0/0xda0
[  185.747125][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.749251][   T10]  ? __kthread_parkme+0x7b/0x200
[  185.750853][   T10]  kthread+0x711/0x8a0
[  185.752252][   T10]  ? __pfx_worker_thread+0x10/0x10
[  185.753991][   T10]  ? __pfx_kthread+0x10/0x10
[  185.755572][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.757342][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.759097][   T10]  ? __pfx_kthread+0x10/0x10
[  185.760661][   T10]  ret_from_fork+0x3fc/0x770
[  185.762228][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  185.763943][   T10]  ? __switch_to_asm+0x39/0x70
[  185.765570][   T10]  ? __switch_to_asm+0x33/0x70
[  185.767204][   T10]  ? __pfx_kthread+0x10/0x10
[  185.768757][   T10]  ret_from_fork_asm+0x1a/0x30
[  185.770389][   T10]  </TASK>
[  185.772083][   T10] Kernel Offset: disabled
[  185.773559][   T10] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:07:39  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33b3460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99d9a770 RSP=ffffc900000d5c10
R8 =ffff888107028237 R9 =1ffff11020e05046 R10=dffffc0000000000 R11=ffffffff854c1cc0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1d37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007febc667dfc8 CR3=000000010d726000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000110208
XMM02=b0ee925cb1869ca6 94f3000100010044 XMM03=35fe41422c11c0bb 4254e2ba454004e9
XMM04=cf35fe41422c11c0 bb4254e2ba454004 XMM05=e9b0ee925cb1869c a694f30001000100
XMM06=4400000000000000 0000000000001102 XMM07=0800000011020801 0000110208000000
XMM08=0000000000000000 00007feb88c12ee7 XMM09=0000000000000000 00007feb88c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=91ae514f1d52a300 RBX=ffffffff81969b18 RCX=91ae514f1d52a300 RDX=0000000000000001
RSI=ffffffff8d9792aa RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07bf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ce07fe07e8 CR3=000000002b7f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306d616574
XMM02=00007fecbb787498 00007fecbb787470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fecbb787478 00007fecbb7874c0
XMM06=00007fecbb7874b8 00007fecbb7874b0 XMM07=00007fecbb7874a8 00007fecbb7874a0
XMM08=0000000000000000 00007fecbb612ee7 XMM09=0000000000000000 00007fecbb612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
