last executing test programs:

1.352125297s ago: executing program 1 (id=1364):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000fc0b000c00"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) (async)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000fc0b000c00"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

1.081530188s ago: executing program 1 (id=1365):
socketpair(0x1, 0x6, 0x4, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x433}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d4}, 0x810)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1401, 0x4, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x4008000)
recvfrom(r3, &(0x7f0000000380)=""/53, 0x35, 0x40000000, &(0x7f00000003c0)=@in6={0xa, 0x4e23, 0x80000001, @local, 0x80000000}, 0x80)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4008880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c862294d306107969d4f594b875eaa81c1a62e370c1a9087b440"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x48, 0x3, "55ecc04c66d2ef139536611fa27eca3bae01e694b59971f8e61ef75e21c0a3aa08b8012413f99e25612eefed9e6b4fe4ec5a34f5d6b9bcb3c7c2b06e02127ee635518aae"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0x2000c040)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000007c0)={<r6=>r0, 0xffffffffffffffff, 0x4000000000, 0x100})
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x80000000)
close(r1)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000008c0)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}}, 0x3ff, 0xf}, &(0x7f0000000980)=0x90)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000009c0)={r7, 0x2}, 0x8)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x1409, 0x10, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x801)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x28000001)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000c00))
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r9, 0x4008662c, &(0x7f0000000d00)={0x0, 0x0, "5c7f8fc4e174885b10062c953fd825e8"})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x30, 0x24}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x40)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x18}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)

881.887381ms ago: executing program 0 (id=1367):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', <r4=>0x0}) (rerun: 32)
sendto$packet(r3, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000805f000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="040034000600fd0007000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x10000) (async, rerun: 32)
r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x4971017e69de1f5d)
sendmmsg$alg(r11, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x3a, 0x1}], 0x1, 0x20048889) (async)
recvmsg$can_j1939(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) (rerun: 64)
r12 = socket$igmp(0x2, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) (async)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r5, &(0x7f0000000100)={0x6, 0x8, 0x3, 0x0, 0xfe}, 0x8)
accept4(r2, 0x0, 0x0, 0x800) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

861.896634ms ago: executing program 0 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@hci, &(0x7f0000000280)=0x80, 0x80c00)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000440)=""/169, 0x200000, 0x0, 0x6, 0x4}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b04000000000000fdc598ae0000180004"], 0x58}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b04000000000000fdc598ae0000180004"], 0x58}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c0001"], 0x28}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) (async)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

810.931221ms ago: executing program 0 (id=1370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4076, 0xfec}], 0x1}, 0x2}], 0x1, 0x40010100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0)

351.984324ms ago: executing program 2 (id=1375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) (async, rerun: 32)
r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x4, 0x0, 0xe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r13) (async)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0)

350.53666ms ago: executing program 2 (id=1376):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xf0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x2, {0x1, 0xf0, 0x3}, {0x1, 0xf0}, 0x1, 0xfe}, {0x3, 0x3, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x1}, 0xff}], 0x40) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async)
sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

280.773493ms ago: executing program 2 (id=1377):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
clock_gettime(0x7, &(0x7f00000008c0))
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x69}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES8], 0x48)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000004) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
close(0x3) (async)
close(0x3)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

230.795602ms ago: executing program 1 (id=1378):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffff", 0x40}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a0247fc9f0c15b7b9260278a3eddd2ec3cf3759b9f6818233e5716b1d0e6a14fa74c0749c6b3c81d0b0", @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a00000008001700"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

230.097317ms ago: executing program 2 (id=1379):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400abb6040a010128ac7000ffdbdf2501000008"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe2}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x8, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {0x0, 0x6, 0x0, 0x0, 0x7}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {0x3, 0x80000000}, {0x0, 0x0, 0x6e1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xe96}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000ab6cd3f7123eee9dbc8eb95684e840c29100000000000100009d8f5c4ebe2a33a695b4d5dbc8705b50dd98b9c2bc99aab5bcaef910359a431dd09de602c663fcc3155d2dd563"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)

228.997905ms ago: executing program 0 (id=1380):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20004880) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0xfffff000) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0055e883e2b9ccb53a00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xfffffffffffffdae, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair(0x11, 0xa, 0xcd25, &(0x7f0000000240)={<r8=>0xffffffffffffffff})
sendmsg$AUDIT_ADD_RULE(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)={0x42c, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfd, {0x7, 0x2, 0x2d, [0x6, 0xa67, 0xf, 0x3, 0xd47, 0x3, 0xf, 0xdc, 0x8000, 0x9, 0xbe6, 0x7, 0x1, 0x4fe39426, 0x4, 0x101, 0x7fff, 0x5, 0x1, 0x81, 0x0, 0xffffff7f, 0x40, 0x68, 0x5, 0x0, 0xfffff670, 0x7432, 0x1, 0xff, 0x3, 0x9, 0x3f, 0x0, 0x7, 0x9, 0xd, 0x9, 0x7fffffff, 0x1, 0x4, 0x3, 0x1, 0x3ff, 0x3c5f, 0x80000000, 0x7, 0xa2cb, 0x3, 0x1, 0x8248, 0x1, 0x640f, 0x1, 0x9, 0x81, 0x6, 0xbc, 0x9, 0x8001, 0x1, 0xef5, 0xfffffa51, 0x3ff], [0x3, 0x5, 0x6, 0x0, 0x5, 0x81, 0xd, 0x2, 0x1, 0x1, 0x6, 0x3, 0x80000000, 0x1, 0x1, 0x7f, 0x4, 0x4, 0x80000000, 0x3825, 0x8, 0x1, 0x0, 0x1, 0x0, 0x5a6, 0x0, 0x3, 0x8, 0x7d, 0x2c6, 0x3, 0x2, 0x9, 0x10, 0x8, 0x400, 0xa36, 0xff, 0x3, 0x9, 0xff, 0x7ff, 0x7f, 0xc, 0x1, 0xc5e, 0x2, 0x2, 0x6, 0x81, 0x1, 0x91, 0xfffffc01, 0x8195, 0x10000, 0xffff, 0xfb4, 0x3, 0x2, 0x1, 0xa, 0x8, 0x69b235a0], [0x3, 0x9, 0xff000000, 0x100, 0x96, 0x6, 0x9, 0x3, 0x1000, 0xffffffff, 0x7, 0x9, 0x1d, 0x0, 0x8, 0x4, 0x4, 0xfffffffd, 0x1, 0x0, 0xbd, 0x8, 0x0, 0x1, 0x6, 0xe47a, 0xbc, 0x1ff, 0xff, 0x5, 0x4, 0xffff, 0x8, 0xffff, 0x3, 0x9, 0xfffffff3, 0xfff, 0xd, 0x1, 0x3, 0x0, 0x6, 0x7, 0x9, 0x6, 0xaa1, 0x8, 0x10000, 0xef9, 0x400, 0x16, 0x8f, 0x0, 0x6, 0x1ff, 0x7, 0x2, 0x0, 0x24, 0x100, 0x2, 0x7, 0xfffffff4], [0x2, 0x1, 0x1, 0x7ff, 0xdca, 0x5, 0x8, 0x10000, 0x8, 0x0, 0x4, 0x10, 0xadac, 0x9, 0x4559, 0x0, 0x1, 0x401, 0x7, 0x6, 0x5, 0x5, 0x6, 0x1000, 0x5, 0x7, 0x7fffffff, 0x1, 0x7f, 0x2, 0x9, 0x5, 0x400, 0x0, 0x4, 0xfffffff3, 0xfffffff9, 0xee, 0x28, 0xe, 0x3, 0x8001, 0xb59c, 0x3, 0x0, 0x5, 0xff, 0xa20, 0x3, 0xfffffe01, 0x7, 0x7, 0x6, 0xf, 0x3, 0x311789a8, 0xf, 0x81, 0x7fffffff, 0xb, 0x40, 0x0, 0xfffffff4, 0x1], 0xa, ['-!*[\x00', ']#-\x00', '\x00']}, ["", ""]}, 0x42c}}, 0x20000000)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e20, 0x0, 0xfffe, 0x200, 0x2, 0x0, 0x20}, {0x21, 0x65ed, 0x1, 0x0, 0xfffffffffffffffc, 0x100000000000000, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x2008}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x6c}, 0xafc37fded6a3cf9a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40000, 0x5, 0x0, 0xb7}}, 0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0)

226.467892ms ago: executing program 1 (id=1381):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000095c311f0ee8e3425d5e7a98ce1a3693e14954dc59d98c030f0f5"], 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d1727424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0943fd83df083a73fc768c5ad1c75a4c04aad64c4b78899434d557140e6f1d7b60d5f72ee03384c18eadeba30efdcba6014004420cdba8e4534d794bf4e5d432c8268e7c941e6d8303d82216b99256bd83d435cd78e687e8969e0f9faf95311db3df66ab650cb4a8f7e0a3ed1da68dc2ba765083aaf56af877947b9ee98c4ece5bf5fa7e515102f41c4f6bffa20d8258dca80913eca22bb26b4c8569000000000000000000"], 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x11, 0xa, 0x300)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0xc}, {}, {0x2}, {0x6, 0x0, 0x0, 0x3}]})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="906c672311c7316908b8a46dbc", @ANYRES16=r3, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x39}}}}}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

148.398304ms ago: executing program 0 (id=1382):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0800000000000000000000fbff090000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000000000000200"/28], 0x50)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400000000f5dffeff95"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @null, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r7}, 0x10)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x78})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x17}, @local}, 0xc)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r11, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400ffff100001002abd0e7d2f7307f958c3d4e1ca1ba6c1be571033b04d7288d30666935b0349524433627fd7a0044a6c57bd6574bafebdff4954ad86caae9a16a400"/77, @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400000800168004000180"], 0x44}}, 0x0)

147.902846ms ago: executing program 1 (id=1383):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0x10}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40)
r10 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

71.752308ms ago: executing program 0 (id=1384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, 0x0, 0x0)

69.408433ms ago: executing program 2 (id=1385):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="80000000190000042dbd7000fddbdf250a10200700020000000c00000c00168005000400400000005700088084e86a63aba469eec21fd19825d431aa9499b405df1905dfdfec57d009533cfdb058f318fb5a93c9b6fe22d59a3fe19a3c9016e0116fc63f824d7687b49603a88695bd470d910b7997a81ec33bb8d9ad24ebb8443e1000"], 0x80}, 0x1, 0x0, 0x0, 0x4884}, 0x400c0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async, rerun: 64)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (rerun: 64)
accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32)
r7 = socket$isdn(0x22, 0x3, 0x26)
recvmsg(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2001) (async, rerun: 64)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f00000004c0), 0x10) (async)
sendmsg$inet(r12, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="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", 0x19f}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f0800000014e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818a17b4ace348ba3a9e496f461dd82c728ef31dbae6661542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f00000009c0)="c83c", 0x2}], 0x5}, 0x20000090) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

1.618306ms ago: executing program 1 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', <r7=>0x0})
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0)
sendto$packet(r6, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r7, 0x1, 0xe, 0x6, @multicast}, 0x14)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="cf000000f302a6", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25030000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8851)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
r11 = socket$igmp(0x2, 0x3, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r9, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r5, 0x0, 0x0, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

0s ago: executing program 2 (id=1387):
unshare(0x6a040000)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r1=>0x0}) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x70) (async)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) (async)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x5, @local, 0x8}, 0x1c) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
shutdown(r2, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46295' (ED25519) to the list of known hosts.
syzkaller login: [   48.555458][ T5781] cgroup: Unknown subsys name 'net'
[   48.661257][ T5781] cgroup: Unknown subsys name 'cpuset'
[   48.672218][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.618636][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.930381][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.936619][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.940321][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.942688][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.946993][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.955418][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.986081][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.994424][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.006172][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.009814][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.109488][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.113509][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.116472][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.119561][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.122442][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.146237][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   55.314266][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.317752][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.320282][ T5839] bridge_slave_0: entered allmulticast mode
[   55.323217][ T5839] bridge_slave_0: entered promiscuous mode
[   55.331199][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.333735][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.336901][ T5839] bridge_slave_1: entered allmulticast mode
[   55.340371][ T5839] bridge_slave_1: entered promiscuous mode
[   55.346177][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.412466][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.436410][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.530756][ T5839] team0: Port device team_slave_0 added
[   55.534397][ T5839] team0: Port device team_slave_1 added
[   55.537638][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.539919][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.542164][ T5843] bridge_slave_0: entered allmulticast mode
[   55.546775][ T5843] bridge_slave_0: entered promiscuous mode
[   55.568089][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.570900][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.573169][ T5843] bridge_slave_1: entered allmulticast mode
[   55.577306][ T5843] bridge_slave_1: entered promiscuous mode
[   55.594359][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.596872][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.604670][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.609767][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.626424][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.629548][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.631668][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.640512][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.649655][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.691224][ T5843] team0: Port device team_slave_0 added
[   55.708347][ T5843] team0: Port device team_slave_1 added
[   55.755887][ T5839] hsr_slave_0: entered promiscuous mode
[   55.759780][ T5839] hsr_slave_1: entered promiscuous mode
[   55.762921][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.767446][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.775916][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.807458][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.810271][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.820896][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.832470][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.835196][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.837459][ T5851] bridge_slave_0: entered allmulticast mode
[   55.840775][ T5851] bridge_slave_0: entered promiscuous mode
[   55.871505][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.873766][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.876910][ T5851] bridge_slave_1: entered allmulticast mode
[   55.879690][ T5851] bridge_slave_1: entered promiscuous mode
[   55.929671][ T5843] hsr_slave_0: entered promiscuous mode
[   55.932558][ T5843] hsr_slave_1: entered promiscuous mode
[   55.937166][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.939538][ T5843] Cannot create hsr debugfs directory
[   55.948258][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.963167][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.015836][ T5851] team0: Port device team_slave_0 added
[   56.031102][ T5851] team0: Port device team_slave_1 added
[   56.070687][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.073009][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.082871][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.119501][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.122284][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.133597][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.222524][ T5851] hsr_slave_0: entered promiscuous mode
[   56.225602][ T5851] hsr_slave_1: entered promiscuous mode
[   56.228164][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.230306][ T5851] Cannot create hsr debugfs directory
[   56.256084][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.263142][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.286856][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.292249][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.381202][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.386927][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.411604][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.418681][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.510059][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.515520][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.521017][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.531591][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.571729][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.597868][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   56.617638][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.620497][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.639677][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.642060][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.648316][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.670938][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.679105][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.681410][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.701332][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.703635][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.772786][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.804548][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.813830][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.816166][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.828669][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.831292][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.861000][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.939932][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.947706][ T5839] veth0_vlan: entered promiscuous mode
[   56.954115][ T5839] veth1_vlan: entered promiscuous mode
[   56.996822][ T5839] veth0_macvtap: entered promiscuous mode
[   57.001165][ T5843] veth0_vlan: entered promiscuous mode
[   57.011174][ T5839] veth1_macvtap: entered promiscuous mode
[   57.015743][ T5843] veth1_vlan: entered promiscuous mode
[   57.035626][ T5847] Bluetooth: hci1: command tx timeout
[   57.035728][ T5842] Bluetooth: hci0: command tx timeout
[   57.044134][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.050557][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.056976][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.075900][ T5735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.079958][ T5843] veth0_macvtap: entered promiscuous mode
[   57.086304][ T5735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.089882][ T5843] veth1_macvtap: entered promiscuous mode
[   57.097666][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.103411][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.136289][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.158324][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.160864][ T5851] veth0_vlan: entered promiscuous mode
[   57.180663][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.187283][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.195235][ T5842] Bluetooth: hci2: command tx timeout
[   57.206637][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.211861][ T5851] veth1_vlan: entered promiscuous mode
[   57.217816][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.244065][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.251910][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.294455][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.296918][ T5851] veth0_macvtap: entered promiscuous mode
[   57.302076][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.315419][ T5851] veth1_macvtap: entered promiscuous mode
[   57.339714][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.347555][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.350653][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.366864][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.378285][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.403191][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.406282][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.411001][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.414632][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.425053][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.426942][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.586434][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.595407][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.632976][  T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.638819][  T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.642369][ T5915] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   57.669690][ T5920] bridge_slave_0: left allmulticast mode
[   57.671864][ T5920] bridge_slave_0: left promiscuous mode
[   57.694559][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.701323][ T5925] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.710398][ T5920] bridge_slave_1: left allmulticast mode
[   57.712392][ T5920] bridge_slave_1: left promiscuous mode
[   57.714520][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.720992][ T5920] bond0: (slave bond_slave_0): Releasing backup interface
[   57.727836][ T5920] bond0: (slave bond_slave_1): Releasing backup interface
[   57.738679][ T5920] team0: Port device team_slave_0 removed
[   57.743362][ T5920] team0: Port device team_slave_1 removed
[   57.745942][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.748483][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.751721][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.754208][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.758411][ T5920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   57.770752][ T5920] netlink: 'syz.1.4': attribute type 10 has an invalid length.
[   57.797568][ T5920] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.390439][ T5954] netlink: 'syz.0.6': attribute type 12 has an invalid length.
[   58.435181][   T24] cfg80211: failed to load regulatory.db
[   58.455602][ T5954] syz_tun: refused to change device tx_queue_len
[   58.468966][ T5954] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   58.522455][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.729624][ T5966] syzkaller0: entered promiscuous mode
[   58.731953][ T5966] syzkaller0: entered allmulticast mode
[   58.871291][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'.
[   58.881957][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'.
[   58.888843][ T5981] netlink: 34 bytes leftover after parsing attributes in process `syz.2.12'.
[   58.958518][ T5982] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   58.961002][ T5982] syzkaller1: entered allmulticast mode
[   59.114961][ T5842] Bluetooth: hci1: command tx timeout
[   59.134137][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   59.140362][ T5989] netlink: 'syz.2.14': attribute type 10 has an invalid length.
[   59.146384][ T5989] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.204863][ T5989] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   59.239776][ T5991] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.253977][ T5991] bridge_slave_0: left allmulticast mode
[   59.256993][ T5991] bridge_slave_0: left promiscuous mode
[   59.258983][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.263791][ T5991] bridge_slave_1: left allmulticast mode
[   59.266929][ T5991] bridge_slave_1: left promiscuous mode
[   59.268765][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.275121][ T5842] Bluetooth: hci2: command tx timeout
[   59.279575][ T5991] bond0: (slave bond_slave_0): Releasing backup interface
[   59.284338][ T5991] bond0: (slave bond_slave_1): Releasing backup interface
[   59.293544][ T5991] team0: Port device team_slave_0 removed
[   59.298908][ T5991] team0: Port device team_slave_1 removed
[   59.301866][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.304326][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.309229][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.311542][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.315415][ T5991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.336445][ T5991] netlink: 'syz.2.15': attribute type 10 has an invalid length.
[   59.339039][ T5991] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   59.345889][ T5991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   59.365080][ T5991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   59.374421][ T5994] netlink: 'syz.1.16': attribute type 23 has an invalid length.
[   59.424162][ T5996] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   59.427316][ T5996] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   59.708831][ T6031] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   59.841672][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.862026][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.866518][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.869752][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.873410][ T6040] netlink: 540 bytes leftover after parsing attributes in process `syz.0.26'.
[   59.880342][ T6040] netlink: 'syz.0.26': attribute type 10 has an invalid length.
[   59.903806][ T6040] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   59.991979][ T6051] hsr_slave_0: left promiscuous mode
[   59.998507][ T6051] hsr_slave_1: left promiscuous mode
[   60.160991][ T6072] netlink: 'syz.0.33': attribute type 12 has an invalid length.
[   60.212789][ T6068] tun0: tun_chr_ioctl cmd 1074025672
[   60.214942][ T6068] tun0: ignored: set checksum disabled
[   60.246625][ T6075] bridge_slave_0: left allmulticast mode
[   60.248497][ T6075] bridge_slave_0: left promiscuous mode
[   60.250398][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.255209][ T6075] bridge_slave_1: left allmulticast mode
[   60.257140][ T6075] bridge_slave_1: left promiscuous mode
[   60.259050][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.271264][ T6075] bond0: (slave bond_slave_0): Releasing backup interface
[   60.281401][ T6075] bond0: (slave bond_slave_1): Releasing backup interface
[   60.291497][ T6075] team0: Port device team_slave_0 removed
[   60.298857][ T6075] team0: Port device team_slave_1 removed
[   60.301537][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.304106][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.309501][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.312041][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.321201][ T6075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   60.341918][ T6074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   60.354609][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.359008][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.047563][ T5865] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.052738][ T5865] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.061896][ T5865] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.107707][ T5865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.196912][ T5842] Bluetooth: hci1: command tx timeout
[   61.366176][ T5842] Bluetooth: hci2: command tx timeout
[   61.757419][ T5842] Bluetooth: hci0: command tx timeout
[   61.791943][ T6142] bond0: (slave wlan1): Releasing backup interface
[   62.403266][ T6203] sock: sock_set_timeout: `syz.0.55' (pid 6203) tries to set negative timeout
[   62.411095][ T6202] pimreg: entered allmulticast mode
[   62.874792][ T6226] __nla_validate_parse: 8 callbacks suppressed
[   62.874807][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'.
[   63.227770][ T6244] netlink: 200 bytes leftover after parsing attributes in process `syz.0.63'.
[   63.234376][ T6245] validate_nla: 3 callbacks suppressed
[   63.234407][ T6245] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   63.240720][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'.
[   63.277464][ T5842] Bluetooth: hci1: command tx timeout
[   63.335021][ T6250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   63.359613][ T6250] netlink: 'syz.0.65': attribute type 10 has an invalid length.
[   63.436518][ T5842] Bluetooth: hci2: command tx timeout
[   63.564997][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.574214][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.584926][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.594348][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.739506][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.743729][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.748799][ T6259] netlink: 'syz.1.68': attribute type 16 has an invalid length.
[   63.752113][ T6259] netlink: 'syz.1.68': attribute type 17 has an invalid length.
[   63.757051][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   63.762470][ T6259] IPv6: NLM_F_REPLACE set, but no existing node found!
[   63.900866][ T6263] netlink: 'syz.0.70': attribute type 10 has an invalid length.
[   64.097705][ T6269] netlink: 'syz.2.71': attribute type 16 has an invalid length.
[   64.100167][ T6269] netlink: 'syz.2.71': attribute type 17 has an invalid length.
[   64.104447][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   64.133636][ T6269] IPv6: NLM_F_REPLACE set, but no existing node found!
[   64.549965][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   64.609758][ T6278] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   64.615139][ T6278] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.668510][ T6278] netlink: 'syz.1.73': attribute type 3 has an invalid length.
[   64.671395][ T6278] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   64.674273][ T6278] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.73'.
[   64.778928][ T6288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.74'.
[   64.823799][ T6290] netlink: 11188 bytes leftover after parsing attributes in process `syz.1.75'.
[   64.913674][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.940357][ T6294] netlink: 'syz.2.77': attribute type 10 has an invalid length.
[   64.948403][ T6294] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.951963][ T6294] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   65.012828][ T6297] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   65.181228][ T6301] pimreg: entered allmulticast mode
[   65.243702][ T6312] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[   65.860741][ T6314] Zero length message leads to an empty skb
[   66.142714][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   66.153045][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.258043][ T6350] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   66.261030][ T6350] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   66.669292][ T6359] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   66.675292][ T6363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   66.694128][ T6367] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.698147][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.701283][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.704393][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.721384][ T6367] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   66.727760][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.882220][ T6383] IPv6: NLM_F_REPLACE set, but no existing node found!
[   67.225890][ T6396] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   68.012068][ T6450] __nla_validate_parse: 19 callbacks suppressed
[   68.012082][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[   68.192502][ T6457] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[   68.557677][ T6467] validate_nla: 9 callbacks suppressed
[   68.557690][ T6467] netlink: 'syz.2.115': attribute type 10 has an invalid length.
[   68.673667][ T6470] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   68.816936][ T6473] netlink: 'syz.0.116': attribute type 4 has an invalid length.
[   68.820194][ T6472] netlink: 'syz.0.116': attribute type 4 has an invalid length.
[   68.823105][ T6473] netlink: 17 bytes leftover after parsing attributes in process `syz.0.116'.
[   68.823391][ T6472] netlink: 17 bytes leftover after parsing attributes in process `syz.0.116'.
[   68.857278][ T6477] trusted_key: syz.0.117 sent an empty control message without MSG_MORE.
[   69.494226][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   69.508127][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.512431][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.536724][ T6508] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[   70.096433][ T6550] netlink: 'syz.2.132': attribute type 83 has an invalid length.
[   70.387607][ T6567] netlink: 228 bytes leftover after parsing attributes in process `syz.1.136'.
[   70.391031][ T6568] netlink: 228 bytes leftover after parsing attributes in process `syz.1.136'.
[   70.448427][ T6570] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   70.451512][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'.
[   70.458640][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   70.733243][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.141'.
[   70.737010][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.141'.
[   70.925335][ T6550] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   70.927443][ T6550] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   70.936577][ T6550] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   70.938457][ T6550] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   71.040327][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.042586][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.153782][ T6604] vlan0: entered promiscuous mode
[   71.155949][ T6604] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   71.296516][ T6619] netlink: 'syz.0.150': attribute type 10 has an invalid length.
[   71.308482][ T6619] Bluetooth: MGMT ver 1.23
[   71.472471][ T6631] netlink: 'syz.0.153': attribute type 6 has an invalid length.
[   71.480083][ T6631] netlink: 'syz.0.153': attribute type 10 has an invalid length.
[   71.511867][ T6633] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   71.514144][ T6633] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   71.565749][ T6638] vlan0: left promiscuous mode
[   71.581745][ T6638] hsr_slave_0: left promiscuous mode
[   71.584756][ T6638] hsr_slave_1: left promiscuous mode
[   71.659370][ T6642] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   71.661523][ T6642] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   71.670826][ T6642] hsr_slave_0: left promiscuous mode
[   71.673031][ T6642] hsr_slave_1: left promiscuous mode
[   72.192878][ T6692] netlink: 'syz.2.167': attribute type 16 has an invalid length.
[   72.197998][ T6692] netlink: 'syz.2.167': attribute type 17 has an invalid length.
[   72.206449][ T6692] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.169843][ T6721] __nla_validate_parse: 14 callbacks suppressed
[   73.169861][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'.
[   73.179239][ T6721] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.187438][ T6723] smc: net device bond0 applied user defined pnetid SYZ2
[   73.368206][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   73.407072][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.177'.
[   73.573364][ T6756] !: renamed from dummy0
[   73.689781][ T6769] validate_nla: 4 callbacks suppressed
[   73.689795][ T6769] netlink: 'syz.0.185': attribute type 10 has an invalid length.
[   74.037585][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   74.041746][ T6777] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.913592][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.940572][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.943430][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.946520][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.949511][ T6798] netlink: 540 bytes leftover after parsing attributes in process `syz.2.193'.
[   74.954273][ T6798] netlink: 'syz.2.193': attribute type 10 has an invalid length.
[   74.959056][ T6798] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   75.001048][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'.
[   75.033867][ T6802] netlink: 'syz.1.194': attribute type 10 has an invalid length.
[   75.073420][ T6817] netlink: 'syz.1.197': attribute type 23 has an invalid length.
[   75.323464][ T6841] bond0: (slave netdevsim0): Releasing backup interface
[   75.339265][ T6841] bond0: (slave wlan1): Releasing backup interface
[   75.343967][ T6841] netlink: 'syz.2.203': attribute type 10 has an invalid length.
[   75.349665][ T6841] bond0: (slave wlan1): Opening slave failed
[   76.992996][ T6960] netlink: 'syz.2.226': attribute type 10 has an invalid length.
[   77.000778][ T6960] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.388876][ T6995] netlink: 'syz.0.231': attribute type 16 has an invalid length.
[   77.397313][ T6995] netlink: 'syz.0.231': attribute type 17 has an invalid length.
[   77.410524][ T6995] IPv6: NLM_F_REPLACE set, but no existing node found!
[   77.618735][ T7002] pimreg: entered allmulticast mode
[   77.722362][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.336763][ T7024] __nla_validate_parse: 17 callbacks suppressed
[   78.336774][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'.
[   78.344249][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   78.378678][ T7024] netlink: 'syz.1.241': attribute type 10 has an invalid length.
[   78.447372][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'.
[   78.450600][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'.
[   78.455462][ T7040] delete_channel: no stack
[   78.543676][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   78.710156][ T7068] netlink: 'syz.0.252': attribute type 16 has an invalid length.
[   78.712959][ T7068] netlink: 'syz.0.252': attribute type 17 has an invalid length.
[   78.717600][ T7071] netlink: 'syz.0.252': attribute type 16 has an invalid length.
[   78.719948][ T7071] netlink: 'syz.0.252': attribute type 17 has an invalid length.
[   78.728345][ T7071] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.730464][ T7068] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.799837][ T7073] netlink: 'syz.2.253': attribute type 16 has an invalid length.
[   78.802402][ T7073] netlink: 'syz.2.253': attribute type 17 has an invalid length.
[   78.808606][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'.
[   78.812255][ T7073] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.646733][ T7087] netlink: 200 bytes leftover after parsing attributes in process `syz.0.259'.
[   79.655833][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   79.669603][ T7087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.259'.
[   79.674378][ T7088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.771007][ T7094] netlink: 'syz.0.261': attribute type 4 has an invalid length.
[   79.776972][ T7094] netlink: 'syz.0.261': attribute type 4 has an invalid length.
[   79.844396][ T7096] bond0: (slave netdevsim0): Releasing backup interface
[   79.877804][ T7096] netlink: 'syz.0.262': attribute type 10 has an invalid length.
[   79.914438][ T7096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.919364][ T7096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.282559][ T7110] netlink: 'syz.1.265': attribute type 12 has an invalid length.
[   80.357263][ T7112] bond0: (slave wlan1): Releasing backup interface
[   80.470435][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   80.481349][ T7126] IPv6: NLM_F_REPLACE set, but no existing node found!
[   80.759048][ T7142] syzkaller1: entered promiscuous mode
[   80.760833][ T7142] syzkaller1: entered allmulticast mode
[   80.881378][ T7144] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.884594][ T7144] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   81.434195][ T7163] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[   81.660183][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'.
[   81.666273][ T7175] IPv6: NLM_F_REPLACE set, but no existing node found!
[   81.878752][ T7192] batadv2: entered promiscuous mode
[   81.880635][ T7192] batadv2: entered allmulticast mode
[   82.683838][ T7207] Bluetooth: MGMT ver 1.23
[   83.904048][ T7265] __nla_validate_parse: 6 callbacks suppressed
[   83.904060][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'.
[   84.019914][ T7283] tipc: Started in network mode
[   84.022119][ T7283] tipc: Node identity 080211, cluster identity 4711
[   84.029608][ T7283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.034822][ T7283] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   84.038713][ T7283] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   84.397070][ T7291] validate_nla: 7 callbacks suppressed
[   84.397089][ T7291] netlink: 'syz.2.308': attribute type 10 has an invalid length.
[   84.650282][ T7295] netlink: 200 bytes leftover after parsing attributes in process `syz.2.309'.
[   84.828396][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'.
[   84.834087][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'.
[   84.834156][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   84.853707][ T7307] netlink: 'syz.2.313': attribute type 88 has an invalid length.
[   85.102818][ T7321] tipc: Started in network mode
[   85.104455][ T7321] tipc: Node identity 420000000f, cluster identity 4711
[   85.111113][ T7321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.129316][ T7321] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[   85.139860][ T7321] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[   85.156569][ T5312] tipc: Node number set to 134353152
[   85.170379][ T7321] tipc: Resetting bearer <eth:syzkaller0>
[   85.192492][ T7321] tipc: Resetting bearer <eth:syzkaller0>
[   85.241704][ T7331] netlink: 76 bytes leftover after parsing attributes in process `syz.2.318'.
[   85.250026][ T7331] netlink: 'syz.2.318': attribute type 11 has an invalid length.
[   85.343946][ T7338] bond0: (slave netdevsim0): Releasing backup interface
[   85.710023][ T7365] netlink: 'syz.1.325': attribute type 10 has an invalid length.
[   85.759968][ T7365] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[   85.763698][ T7365] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[   85.780897][ T7371] netlink: 'syz.0.328': attribute type 12 has an invalid length.
[   85.913340][ T7374] netlink: 'syz.0.329': attribute type 12 has an invalid length.
[   86.174927][ T5904] tipc: Node number set to 1291845632
[   86.292237][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[   86.658526][ T7405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.334'.
[   86.663146][ T7392] netlink: 'syz.1.333': attribute type 10 has an invalid length.
[   86.814313][ T7410] netlink: 'syz.2.334': attribute type 12 has an invalid length.
[   86.994513][ T7423] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[   87.020882][ T7435] netlink: 'syz.0.340': attribute type 10 has an invalid length.
[   87.029304][ T7435] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[   87.063461][ T7429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.067244][ T7429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.142435][ T7449] netlink: 'syz.0.343': attribute type 96 has an invalid length.
[   87.273357][ T7459] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[   87.882617][ T7468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.887146][ T7468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.001463][ T7479] tipc: Started in network mode
[   88.003586][ T7479] tipc: Node identity 420000000c, cluster identity 4711
[   88.006850][ T7479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.188637][ T7493] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[   88.313544][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'.
[   88.318868][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'.
[   88.372487][ T7503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.356'.
[   88.480987][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[   88.504356][ T7509] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.124939][ T5904] tipc: Node number set to 1308622848
[   89.342661][ T7529] team_slave_0: entered allmulticast mode
[   89.608868][ T7537] nbd: illegal input index -1
[   89.784065][ T7546] __nla_validate_parse: 1 callbacks suppressed
[   89.784079][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'.
[   90.287946][ T7570] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.372'.
[   90.301631][ T7570] validate_nla: 5 callbacks suppressed
[   90.301647][ T7570] netlink: 'syz.2.372': attribute type 10 has an invalid length.
[   90.313376][ T7570] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   90.536983][ T7594] bond0: (slave dummy0): Releasing backup interface
[   90.542561][ T7594] netlink: 'syz.0.377': attribute type 10 has an invalid length.
[   90.617900][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[   90.717471][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[   90.720638][ T7609] IPv6: NLM_F_REPLACE set, but no existing node found!
[   90.880595][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'.
[   90.893422][ T7614] team_slave_0: left allmulticast mode
[   90.902846][ T7614] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   90.906274][ T7614] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   90.909279][ T7614] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[   90.924613][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[   90.982146][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[   91.078955][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'.
[   91.611556][ T7648] netlink: 'syz.0.391': attribute type 16 has an invalid length.
[   91.614810][ T7648] netlink: 'syz.0.391': attribute type 17 has an invalid length.
[   91.619465][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[   91.623730][ T7648] IPv6: NLM_F_REPLACE set, but no existing node found!
[   92.475348][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   92.628513][ T7669] netlink: 'syz.2.395': attribute type 16 has an invalid length.
[   92.631580][ T7669] netlink: 'syz.2.395': attribute type 17 has an invalid length.
[   92.645015][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'.
[   92.650614][ T7669] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.074584][ T7690] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   93.079442][ T7690] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   93.268615][ T7697] netlink: 'syz.1.404': attribute type 16 has an invalid length.
[   93.271200][ T7697] netlink: 'syz.1.404': attribute type 17 has an invalid length.
[   94.276921][ T7723] netlink: 'syz.0.411': attribute type 12 has an invalid length.
[   94.477506][ T7725] netlink: 'syz.1.412': attribute type 10 has an invalid length.
[   94.648634][ T7745] bridge0: entered promiscuous mode
[   94.651011][ T7745] ip6gretap0: entered promiscuous mode
[   94.653597][ T7745] bridge0: left promiscuous mode
[   94.656541][ T7745] ip6gretap0: left promiscuous mode
[   94.828736][ T7759] __nla_validate_parse: 16 callbacks suppressed
[   94.828748][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'.
[   94.847001][ T7765] netlink: 3 bytes leftover after parsing attributes in process `syz.0.420'.
[   94.853359][ T7765] batadv2: entered promiscuous mode
[   94.857949][ T7765] batadv2: entered allmulticast mode
[   95.068166][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[   95.221547][ T7808] netlink: 248 bytes leftover after parsing attributes in process `syz.0.434'.
[   95.309718][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   95.324259][ T7817] sctp: [Deprecated]: syz.0.436 (pid 7817) Use of int in max_burst socket option.
[   95.324259][ T7817] Use struct sctp_assoc_value instead
[   95.444626][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.436'.
[   95.776009][ T7821] netlink: 20896 bytes leftover after parsing attributes in process `syz.2.437'.
[   95.788545][ T7821] validate_nla: 6 callbacks suppressed
[   95.788556][ T7821] netlink: 'syz.2.437': attribute type 10 has an invalid length.
[   96.136898][ T7829] netlink: 'syz.1.439': attribute type 10 has an invalid length.
[   96.141576][ T7829] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[   96.272288][ T7843] netlink: 'syz.1.443': attribute type 12 has an invalid length.
[   96.317878][ T7847] netlink: 200 bytes leftover after parsing attributes in process `syz.2.444'.
[   96.321860][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'.
[   96.325767][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'.
[   96.444373][ T7856] netlink: 'syz.1.447': attribute type 16 has an invalid length.
[   96.448187][ T7856] netlink: 'syz.1.447': attribute type 17 has an invalid length.
[   96.452312][ T7856] IPv6: NLM_F_REPLACE set, but no existing node found!
[   96.692201][ T7865] netlink: 'syz.0.451': attribute type 10 has an invalid length.
[   96.698210][ T7865] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   96.853921][ T7868] netlink: 'syz.0.452': attribute type 16 has an invalid length.
[   96.857153][ T7868] netlink: 'syz.0.452': attribute type 17 has an invalid length.
[   96.872933][ T7868] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.313313][ T7879] netlink: 'syz.1.455': attribute type 16 has an invalid length.
[   97.316483][ T7879] netlink: 'syz.1.455': attribute type 17 has an invalid length.
[   97.321083][ T7879] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.824595][ T7909] bond0: (slave dummy0): Releasing backup interface
[   98.491725][ T7962] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[   98.973327][ T7986] syzkaller1: entered promiscuous mode
[   98.981222][ T7986] syzkaller1: entered allmulticast mode
[   99.016211][ T7988] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.021107][ T7988] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   99.060688][ T7990] macvlan2: entered promiscuous mode
[   99.062487][ T7990] macvlan2: entered allmulticast mode
[   99.064441][ T7990] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   99.161165][ T7997] sctp: [Deprecated]: syz.0.485 (pid 7997) Use of int in maxseg socket option.
[   99.161165][ T7997] Use struct sctp_assoc_value instead
[   99.293995][ T8008] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[   99.804592][ T8024] bond0: (slave dummy0): Releasing backup interface
[   99.959331][ T8044] sctp: [Deprecated]: syz.2.498 (pid 8044) Use of int in max_burst socket option.
[   99.959331][ T8044] Use struct sctp_assoc_value instead
[  100.012308][ T8048] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  100.026574][ T8049] __nla_validate_parse: 17 callbacks suppressed
[  100.026591][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'.
[  100.048638][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'.
[  100.226828][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[  100.239122][ T8058] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  100.241514][ T8058] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.272196][ T8060] netlink: 200 bytes leftover after parsing attributes in process `syz.2.503'.
[  100.275307][ T8061] netlink: 200 bytes leftover after parsing attributes in process `syz.2.503'.
[  100.280681][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[  100.977548][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'.
[  101.012531][ T8071] validate_nla: 11 callbacks suppressed
[  101.012546][ T8071] netlink: 'syz.1.505': attribute type 10 has an invalid length.
[  101.141014][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.173798][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.178442][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.181197][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.212145][ T8077] netlink: 200 bytes leftover after parsing attributes in process `syz.0.507'.
[  101.305520][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'.
[  101.762951][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  101.932899][ T8126] netlink: 'syz.1.520': attribute type 10 has an invalid length.
[  102.041609][ T8134] netlink: 'syz.1.522': attribute type 10 has an invalid length.
[  102.047873][ T8134] bond0: (slave 0!): Enslaving as an active interface with an up link
[  102.159609][ T8136] sock: sock_timestamping_bind_phc: sock not bind to device
[  102.229938][ T8139] netlink: 'syz.1.523': attribute type 10 has an invalid length.
[  102.236150][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[  102.330077][ T8143] tipc: Resetting bearer <eth:syzkaller0>
[  102.501889][ T8155] syzkaller1: entered promiscuous mode
[  102.503809][ T8155] syzkaller1: entered allmulticast mode
[  102.641359][ T8164] mac80211_hwsim hwsim56 wlan1: left allmulticast mode
[  102.662182][ T8164] netlink: 'syz.0.531': attribute type 10 has an invalid length.
[  102.666525][ T8164] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[  102.805250][ T8172] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  102.810243][ T8172] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  102.845443][ T8180] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[  103.582513][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.585946][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.589364][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.592850][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.946128][ T8253] netlink: 'syz.0.557': attribute type 12 has an invalid length.
[  104.011355][ T8260] 8021q: VLANs not supported on gre0
[  104.045349][ T8264] can: request_module (can-proto-0) failed.
[  104.142103][ T8267] netlink: 'syz.2.559': attribute type 10 has an invalid length.
[  104.149930][ T8267] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  104.242788][ T8278] mac80211_hwsim hwsim56 wlan1: left allmulticast mode
[  104.347510][ T8283] netlink: 'syz.0.563': attribute type 10 has an invalid length.
[  104.352571][ T8283] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  104.811278][ T8289] bond0: (slave 0!): Releasing backup interface
[  104.823823][ T8289] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[  104.831095][ T8289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.843807][ T8289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  105.311114][ T8306] __nla_validate_parse: 16 callbacks suppressed
[  105.311132][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  105.398458][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  105.402037][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'.
[  105.406461][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  105.521592][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  105.713038][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[  106.320159][ T8338] pimreg3: entered allmulticast mode
[  106.330121][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  106.405107][ T8344] validate_nla: 3 callbacks suppressed
[  106.405127][ T8344] netlink: 'syz.0.578': attribute type 16 has an invalid length.
[  106.410276][ T8344] netlink: 'syz.0.578': attribute type 17 has an invalid length.
[  106.418006][ T8344] IPv6: NLM_F_REPLACE set, but no existing node found!
[  106.466217][ T8342] netlink: 'syz.2.579': attribute type 10 has an invalid length.
[  106.867548][ T8364] netlink: 'syz.2.583': attribute type 2 has an invalid length.
[  106.882631][ T8364] netlink: 'syz.2.583': attribute type 2 has an invalid length.
[  107.213094][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  107.228435][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'.
[  107.231842][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'.
[  107.528997][ T8407] netlink: 'syz.1.594': attribute type 10 has an invalid length.
[  107.538204][ T8407] bond0: (slave 0!): Enslaving as an active interface with an up link
[  107.849437][ T8417] netlink: 'syz.1.597': attribute type 16 has an invalid length.
[  107.852674][ T8417] netlink: 'syz.1.597': attribute type 17 has an invalid length.
[  107.860551][ T8417] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.253634][ T8421] netlink: 'syz.0.599': attribute type 10 has an invalid length.
[  109.760965][ T8465] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.769317][ T8465] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  109.771703][ T8465] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  110.030469][ T8482] netlink: 'syz.1.616': attribute type 10 has an invalid length.
[  110.372714][ T8517] __nla_validate_parse: 44 callbacks suppressed
[  110.372736][ T8517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.625'.
[  110.389512][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[  110.392791][ T8519] netlink: 200 bytes leftover after parsing attributes in process `syz.1.628'.
[  110.401008][ T8517] IPv6: NLM_F_REPLACE set, but no existing node found!
[  110.410952][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'.
[  110.841765][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.632'.
[  110.912551][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  110.930118][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'.
[  111.148341][ T8546] netlink: 200 bytes leftover after parsing attributes in process `syz.0.635'.
[  111.810771][ T8613] validate_nla: 2 callbacks suppressed
[  111.810786][ T8613] netlink: 'syz.0.648': attribute type 10 has an invalid length.
[  111.821489][ T8613] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[  111.892291][ T8615] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  112.533543][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'.
[  112.571585][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'.
[  112.788482][ T8632] netlink: 'syz.1.654': attribute type 12 has an invalid length.
[  112.900152][ T8641] mac80211_hwsim hwsim56 wlan1: left allmulticast mode
[  113.071007][ T8650] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  113.087096][ T8650] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  113.450930][ T8664] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  113.455018][   T24] IPVS: starting estimator thread 0...
[  113.460026][ T8664] ieee802154 phy0 wpan0: encryption failed: -22
[  113.472033][  T794] IPVS: starting estimator thread 0...
[  113.533631][ T8671] netlink: 'syz.2.663': attribute type 3 has an invalid length.
[  113.545256][ T8665] IPVS: using max 63 ests per chain, 151200 per kthread
[  113.555089][ T8667] IPVS: using max 63 ests per chain, 151200 per kthread
[  113.695467][ T5865] IPVS: stop unused estimator thread 0...
[  113.776851][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.794590][ T8691] bond0: (slave rose0): Enslaving as an active interface with an up link
[  113.971299][ T8709] tipc: Invalid UDP bearer configuration
[  113.971337][ T8709] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.014002][ T8717] netlink: 'syz.0.674': attribute type 23 has an invalid length.
[  114.102101][ T8722] netlink: 'syz.1.676': attribute type 16 has an invalid length.
[  114.109858][ T8722] netlink: 'syz.1.676': attribute type 17 has an invalid length.
[  114.124135][ T8722] IPv6: NLM_F_REPLACE set, but no existing node found!
[  114.250029][ T8730] tipc: Can't bind to reserved service type 0
[  115.606603][ T8759] netlink: 'syz.0.685': attribute type 16 has an invalid length.
[  115.609887][ T8759] netlink: 'syz.0.685': attribute type 17 has an invalid length.
[  115.614986][ T8759] __nla_validate_parse: 16 callbacks suppressed
[  115.614998][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  115.622525][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'.
[  115.627174][ T8759] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.955719][ T8767] netlink: 'syz.1.688': attribute type 10 has an invalid length.
[  116.042246][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[  116.236462][ T8785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.692'.
[  116.485497][ T8789] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  116.669854][ T8792] netlink: 'syz.0.694': attribute type 10 has an invalid length.
[  116.678955][ T8792] tipc: Resetting bearer <eth:syzkaller0>
[  116.862598][ T8801] tipc: Resetting bearer <eth:syzkaller0>
[  116.965965][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[  117.580966][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.723528][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[  118.074781][ T8883] netlink: 200 bytes leftover after parsing attributes in process `syz.1.718'.
[  118.079419][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.718'.
[  118.161397][ T8888] netlink: 'syz.0.720': attribute type 12 has an invalid length.
[  118.186839][ T8891] bond0: (slave 0!): Releasing backup interface
[  118.198045][ T8891] netlink: 'syz.1.721': attribute type 10 has an invalid length.
[  118.268797][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'.
[  118.297376][ T8898] netlink: 'syz.1.723': attribute type 23 has an invalid length.
[  118.401000][ T8906] netlink: 'syz.1.725': attribute type 10 has an invalid length.
[  118.710066][ T5904] IPVS: starting estimator thread 0...
[  118.748186][ T8934] netlink: 'syz.1.729': attribute type 16 has an invalid length.
[  118.751004][ T8934] netlink: 'syz.1.729': attribute type 17 has an invalid length.
[  118.767299][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.770863][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.795056][ T8928] IPVS: using max 63 ests per chain, 151200 per kthread
[  118.797772][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.801913][ T8934] 8021q: adding VLAN 0 to HW filter on device team0
[  118.812308][ T8934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.822036][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.833322][ T8934] IPv6: NLM_F_REPLACE set, but no existing node found!
[  118.854182][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.937545][ T8938] netlink: 'syz.0.732': attribute type 10 has an invalid length.
[  119.067848][ T8940] netlink: 'syz.2.733': attribute type 9 has an invalid length.
[  119.142503][ T8943] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  119.146011][ T8942] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  119.351858][ T8947] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode
[  119.903173][ T8985] Driver unsupported XDP return value 0 on prog  (id 313) dev N/A, expect packet loss!
[  120.698350][ T9032] __nla_validate_parse: 17 callbacks suppressed
[  120.698365][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  121.012017][ T9044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.015858][ T9044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.773714][ T9052] netlink: 200 bytes leftover after parsing attributes in process `syz.1.760'.
[  121.781082][ T9052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.760'.
[  121.898413][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  121.902363][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  121.902816][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'.
[  121.998303][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'.
[  122.002401][ T9075] IPv6: NLM_F_REPLACE set, but no existing node found!
[  122.291296][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  122.445985][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'.
[  122.684100][ T9101] sctp: [Deprecated]: syz.1.770 (pid 9101) Use of int in maxseg socket option.
[  122.684100][ T9101] Use struct sctp_assoc_value instead
[  122.692925][ T9101] raw_sendmsg: syz.1.770 forgot to set AF_INET. Fix it!
[  122.804601][ T9109] mac80211_hwsim hwsim70 wlan1: left allmulticast mode
[  122.937236][ T9118] team0: Device ipip0 is up. Set it down before adding it as a team port
[  122.991230][ T9121] bond0: (slave netdevsim0): Releasing backup interface
[  122.998607][ T9125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.004392][ T9127] netlink: 248 bytes leftover after parsing attributes in process `syz.1.776'.
[  123.014356][ T9125] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  123.017590][ T9125] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  123.048295][ T9118] tipc: Resetting bearer <eth:syzkaller0>
[  123.150470][ T9131] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  123.153434][ T9131] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  123.299514][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.309471][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.312970][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.316883][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.754651][ T9169] validate_nla: 11 callbacks suppressed
[  123.754666][ T9169] netlink: 'syz.1.786': attribute type 13 has an invalid length.
[  123.761217][ T9169] netlink: 'syz.1.786': attribute type 17 has an invalid length.
[  123.896027][ T9170] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.148934][ T9174] netlink: 'syz.2.788': attribute type 10 has an invalid length.
[  124.153460][ T9174] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode
[  124.728884][ T9214] mac80211_hwsim hwsim70 wlan1: left allmulticast mode
[  124.770224][ T9219] netlink: 'syz.0.798': attribute type 16 has an invalid length.
[  124.773383][ T9219] netlink: 'syz.0.798': attribute type 17 has an invalid length.
[  124.773535][ T9214] netlink: 'syz.2.800': attribute type 10 has an invalid length.
[  124.781140][ T9214] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode
[  124.812104][ T9219] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.899128][ T9224] mac80211_hwsim hwsim70 wlan1: left allmulticast mode
[  125.129625][ T9234] netlink: 'syz.2.804': attribute type 10 has an invalid length.
[  125.912883][ T9246] __nla_validate_parse: 76 callbacks suppressed
[  125.912897][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  125.923393][ T9246] netlink: 'syz.1.808': attribute type 10 has an invalid length.
[  126.079855][ T9258] netlink: 'syz.1.810': attribute type 10 has an invalid length.
[  126.135875][ T9262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'.
[  126.831006][ T9288] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.041897][ T9298] netlink: 200 bytes leftover after parsing attributes in process `syz.0.817'.
[  127.046333][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'.
[  127.431431][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.0.820'.
[  127.837262][ T9323] IPVS: length: 209 != 24
[  127.849047][ T9323] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  127.852272][ T9323] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  127.976021][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'.
[  128.015773][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'.
[  128.019211][ T9325] netlink: 'syz.1.825': attribute type 10 has an invalid length.
[  128.497944][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  128.534206][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'.
[  128.570769][ T9368] netlink: 200 bytes leftover after parsing attributes in process `syz.2.832'.
[  129.158285][ T9388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.161894][ T9388] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  129.166769][ T9388] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  129.178255][ T9388] tipc: Resetting bearer <eth:syzkaller0>
[  129.238809][ T9395] netlink: 'syz.1.840': attribute type 16 has an invalid length.
[  129.241801][ T9395] netlink: 'syz.1.840': attribute type 17 has an invalid length.
[  129.248292][ T9395] IPv6: NLM_F_REPLACE set, but no existing node found!
[  129.408425][ T9407] vlan2: entered allmulticast mode
[  129.410743][ T9407] batadv0: entered allmulticast mode
[  129.560184][ T9412] syzkaller0: mtu less than device minimum
[  129.564537][ T9413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.091163][ T9443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.182570][ T9449] netlink: 'syz.1.855': attribute type 10 has an invalid length.
[  130.311770][ T9452] netlink: 'syz.1.856': attribute type 10 has an invalid length.
[  130.354109][ T9452] TCP: TCP_TX_DELAY enabled
[  130.357104][ T9452] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  130.360117][ T9452] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  130.562259][ T9463] tipc: Resetting bearer <eth:syzkaller0>
[  131.059637][ T9498] __nla_validate_parse: 7 callbacks suppressed
[  131.059653][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  131.481379][ T9506] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  131.484552][ T9506] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  131.911566][ T9535] netlink: 'syz.0.874': attribute type 10 has an invalid length.
[  131.918087][ T9535] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  131.921085][ T9535] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  132.055048][ T9545] netlink: 'syz.0.875': attribute type 16 has an invalid length.
[  132.058178][ T9545] netlink: 'syz.0.875': attribute type 17 has an invalid length.
[  132.062198][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'.
[  132.070028][ T9545] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.348873][ T9564] netlink: 'syz.2.880': attribute type 10 has an invalid length.
[  132.382000][ T9569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.432909][ T9571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.436975][ T9571] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  132.439879][ T9571] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  132.477513][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.481603][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.601541][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[  132.621339][ T9578] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  132.624364][ T9578] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  132.637626][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'.
[  132.860345][ T9594] sctp: [Deprecated]: syz.0.886 (pid 9594) Use of int in max_burst socket option.
[  132.860345][ T9594] Use struct sctp_assoc_value instead
[  132.872678][ T9594] syzkaller1: entered promiscuous mode
[  132.877181][ T9594] syzkaller1: entered allmulticast mode
[  133.466579][ T9601] netlink: 'syz.1.887': attribute type 16 has an invalid length.
[  133.469791][ T9601] netlink: 'syz.1.887': attribute type 17 has an invalid length.
[  133.473760][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'.
[  133.481480][ T9601] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.589269][ T9610] netlink: 200 bytes leftover after parsing attributes in process `syz.2.891'.
[  133.599530][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'.
[  133.723672][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'.
[  133.729233][ T9613] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.867069][ T9617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.894'.
[  133.870772][ T9617] nbd: illegal input index 65508
[  134.577409][ T9642] validate_nla: 3 callbacks suppressed
[  134.577488][ T9642] netlink: 'syz.2.899': attribute type 10 has an invalid length.
[  134.583607][ T9642] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  134.887976][ T9654] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  134.892667][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'.
[  134.948402][ T9657] vlan2: left allmulticast mode
[  134.950238][ T9657] batadv0: left allmulticast mode
[  135.009974][ T9665] GUP no longer grows the stack in syz.0.906 (9665): 200000003000-20000000a000 (200000001000)
[  135.013444][ T9665] CPU: 0 UID: 0 PID: 9665 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(full) 
[  135.013457][ T9665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.013463][ T9665] Call Trace:
[  135.013468][ T9665]  <TASK>
[  135.013473][ T9665]  dump_stack_lvl+0x189/0x250
[  135.013501][ T9665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.013510][ T9665]  ? __pfx__printk+0x10/0x10
[  135.013520][ T9665]  ? find_vma+0xe7/0x160
[  135.013538][ T9665]  __get_user_pages+0x2470/0x2a00
[  135.013551][ T9665]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  135.013571][ T9665]  ? rcu_is_watching+0x15/0xb0
[  135.013585][ T9665]  __gup_longterm_locked+0xde9/0x1660
[  135.013601][ T9665]  ? sanity_check_pinned_pages+0x123a/0x1300
[  135.013631][ T9665]  gup_fast_fallback+0x1d65/0x22d0
[  135.013658][ T9665]  ? __pfx_gup_fast_fallback+0x10/0x10
[  135.013670][ T9665]  ? stack_depot_save_flags+0x41b/0x860
[  135.013685][ T9665]  ? pin_user_pages_fast+0x4d/0xb0
[  135.013696][ T9665]  iov_iter_extract_pages+0x35f/0x5e0
[  135.013709][ T9665]  extract_iter_to_sg+0xe46/0x24e0
[  135.013726][ T9665]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  135.013745][ T9665]  ? __asan_memset+0x22/0x50
[  135.013757][ T9665]  af_alg_get_rsgl+0x436/0x810
[  135.013775][ T9665]  aead_recvmsg+0x4cc/0x13f0
[  135.013789][ T9665]  ? rcu_is_watching+0x15/0xb0
[  135.013804][ T9665]  ? __pfx_aead_recvmsg+0x10/0x10
[  135.013814][ T9665]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  135.013822][ T9665]  ? __pfx_aead_recvmsg+0x10/0x10
[  135.013832][ T9665]  sock_recvmsg_nosec+0x186/0x1c0
[  135.013845][ T9665]  ____sys_recvmsg+0x3aa/0x460
[  135.013862][ T9665]  ? __pfx_____sys_recvmsg+0x10/0x10
[  135.013877][ T9665]  ? import_iovec+0x74/0xa0
[  135.013887][ T9665]  ___sys_recvmsg+0x1b5/0x510
[  135.013898][ T9665]  ? __pfx____sys_recvmsg+0x10/0x10
[  135.013920][ T9665]  ? __might_fault+0xb0/0x130
[  135.013933][ T9665]  do_recvmmsg+0x307/0x770
[  135.013946][ T9665]  ? __pfx_do_recvmmsg+0x10/0x10
[  135.013959][ T9665]  ? __pfx_do_futex+0x10/0x10
[  135.013977][ T9665]  __x64_sys_recvmmsg+0x190/0x240
[  135.013987][ T9665]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  135.013997][ T9665]  ? do_syscall_64+0xbe/0xfa0
[  135.014011][ T9665]  do_syscall_64+0xfa/0xfa0
[  135.014021][ T9665]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.014031][ T9665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.014040][ T9665]  ? exc_page_fault+0xab/0x100
[  135.014074][ T9665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.014082][ T9665] RIP: 0033:0x7fd58df8eba9
[  135.014092][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.014099][ T9665] RSP: 002b:00007fd58eefa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  135.014110][ T9665] RAX: ffffffffffffffda RBX: 00007fd58e1d5fa0 RCX: 00007fd58df8eba9
[  135.014115][ T9665] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c
[  135.014120][ T9665] RBP: 00007fd58e011e19 R08: 0000000000000000 R09: 0000000000000000
[  135.014125][ T9665] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  135.014130][ T9665] R13: 00007fd58e1d6038 R14: 00007fd58e1d5fa0 R15: 00007fffcd3067c8
[  135.014144][ T9665]  </TASK>
[  135.331722][ T9676] can: request_module (can-proto-0) failed.
[  135.397557][ T9680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.433666][ T9692] netlink: 'syz.2.911': attribute type 12 has an invalid length.
[  135.632508][ T9704] netlink: 'syz.0.914': attribute type 10 has an invalid length.
[  135.632531][ T9705] netlink: 'syz.0.914': attribute type 10 has an invalid length.
[  135.645532][ T9704] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.648808][ T9704] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.847536][ T9712] netlink: 'syz.2.915': attribute type 12 has an invalid length.
[  135.917200][ T9727] netlink: 'syz.0.918': attribute type 10 has an invalid length.
[  135.954630][ T9727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.958325][ T9727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.813852][ T9759] __nla_validate_parse: 7 callbacks suppressed
[  136.813866][ T9759] netlink: 200 bytes leftover after parsing attributes in process `syz.0.924'.
[  136.823964][ T9759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.830020][ T9759] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  136.833057][ T9759] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  136.911711][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'.
[  136.980989][ T9768] netlink: 200 bytes leftover after parsing attributes in process `syz.2.927'.
[  136.982127][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  137.007539][ T9767] netlink: 'syz.0.926': attribute type 10 has an invalid length.
[  137.015174][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.926'.
[  137.025961][ T9767] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  137.028407][ T9767] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  137.259941][ T9787] netlink: 'syz.1.931': attribute type 10 has an invalid length.
[  137.321655][ T9790] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  137.326695][ T9790] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  138.001233][ T9817] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  138.021489][ T9819] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  138.024056][ T9819] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  138.211085][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  138.221092][ T9849] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  138.239382][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'.
[  138.308752][ T9855] netlink: 'syz.0.946': attribute type 9 has an invalid length.
[  138.311728][ T9855] netlink: 224 bytes leftover after parsing attributes in process `syz.0.946'.
[  138.567732][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  138.607189][ T9876] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  138.706031][ T5865] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  138.890022][ T9894] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[  139.559818][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.959'.
[  139.563373][ T9915] tipc: Invalid UDP bearer configuration
[  139.563416][ T9915] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.652300][ T9924] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  139.720028][ T9931] mac80211_hwsim hwsim56 wlan1: left allmulticast mode
[  139.743544][ T9931] validate_nla: 6 callbacks suppressed
[  139.743560][ T9931] netlink: 'syz.0.964': attribute type 10 has an invalid length.
[  139.753170][ T9931] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[  139.856450][ T9952] netlink: 'syz.0.969': attribute type 10 has an invalid length.
[  139.945961][ T9964] netlink: 'syz.1.971': attribute type 10 has an invalid length.
[  139.978341][ T9968] netlink: 'syz.2.973': attribute type 10 has an invalid length.
[  139.981637][ T9968] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  140.191488][ T9989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.194540][ T9989] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  140.199177][ T9989] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  141.002136][T10012] C: renamed from team_slave_0
[  141.008285][T10012] netlink: 'syz.2.982': attribute type 4 has an invalid length.
[  141.011442][T10012] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  141.114275][T10009] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig
[  141.233473][T10025] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  141.238797][T10025] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  141.242077][T10025] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  141.362978][T10039] netlink: 'syz.0.988': attribute type 10 has an invalid length.
[  141.367060][T10039] dummy0: entered promiscuous mode
[  141.370981][T10039] bridge0: port 1(dummy0) entered blocking state
[  141.373480][T10039] bridge0: port 1(dummy0) entered disabled state
[  141.376029][T10039] dummy0: entered allmulticast mode
[  141.644220][T10056] netlink: 'syz.0.991': attribute type 16 has an invalid length.
[  141.647609][T10056] netlink: 'syz.0.991': attribute type 17 has an invalid length.
[  141.664217][T10056] IPv6: NLM_F_REPLACE set, but no existing node found!
[  141.822009][T10081] netlink: 'syz.2.996': attribute type 16 has an invalid length.
[  141.824939][T10081] netlink: 'syz.2.996': attribute type 17 has an invalid length.
[  141.829729][T10081] __nla_validate_parse: 20 callbacks suppressed
[  141.829738][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'.
[  142.098793][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.101637][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.104656][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.109503][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.112451][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.115502][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.118343][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.121213][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  142.124284][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  143.029268][T10144] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  143.753004][T10195] IPv6: NLM_F_REPLACE set, but no existing node found!
[  144.158602][  T483] tipc: Resetting bearer <eth:syzkaller0>
[  144.497762][T10246] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  144.506898][T10246] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  144.668981][T10266] tipc: Resetting bearer <eth:syzkaller0>
[  144.676309][T10266] IPv6: NLM_F_REPLACE set, but no existing node found!
[  144.709589][T10268] mac80211_hwsim hwsim56 wlan1: left allmulticast mode
[  144.791688][T10272] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.798198][T10272] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  144.801878][T10272] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  144.812698][T10272] tipc: Resetting bearer <eth:syzkaller0>
[  145.107911][T10305] validate_nla: 12 callbacks suppressed
[  145.107926][T10305] netlink: 'syz.0.1049': attribute type 12 has an invalid length.
[  145.289803][T10319] tipc: Resetting bearer <eth:syzkaller0>
[  145.373921][T10323] dummy0: left allmulticast mode
[  145.377402][T10323] bridge0: port 1(dummy0) entered disabled state
[  145.382739][T10323] netlink: 'syz.0.1053': attribute type 10 has an invalid length.
[  145.387224][T10323] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.390152][T10323] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.862864][T10340] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  145.871863][T10340] netlink: 'syz.2.1058': attribute type 10 has an invalid length.
[  145.876368][T10340] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode
[  146.013494][T10344] mac80211_hwsim hwsim90 wlan1: left allmulticast mode
[  146.154554][T10351] netlink: 'syz.2.1062': attribute type 10 has an invalid length.
[  146.359225][T10380] batadv_slave_1: entered promiscuous mode
[  146.361960][T10379] batadv_slave_1: left promiscuous mode
[  146.374241][T10373] netlink: 'syz.1.1068': attribute type 10 has an invalid length.
[  146.403136][T10384] netlink: 'syz.2.1070': attribute type 10 has an invalid length.
[  146.512637][T10395] netlink: 'syz.2.1073': attribute type 10 has an invalid length.
[  146.559784][T10400] netdevsim netdevsim1: loading /lib/firmware// failed with error -22
[  146.567710][T10400] netdevsim netdevsim1: Direct firmware load for / failed with error -22
[  146.571182][T10400] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  146.610178][T10402] nft_compat: unsupported protocol 0
[  146.702911][T10407] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  146.880896][T10425] __nla_validate_parse: 78 callbacks suppressed
[  146.880913][T10425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1081'.
[  146.893302][T10419] netlink: 'syz.2.1079': attribute type 11 has an invalid length.
[  147.023712][T10434] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1083'.
[  147.266716][T10439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1085'.
[  147.480913][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1088'.
[  147.722618][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'.
[  147.766151][T10473] netlink: 'syz.2.1092': attribute type 10 has an invalid length.
[  147.813403][T10476] netlink: 'syz.1.1093': attribute type 10 has an invalid length.
[  147.900687][T10494] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  147.928790][T10494] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  147.933017][T10494] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  148.102292][T10503] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1098'.
[  148.113938][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'.
[  148.510454][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'.
[  148.516839][T10536] dummy0: left promiscuous mode
[  148.575745][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'.
[  148.579432][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'.
[  149.153746][T10553] IPVS: Scheduler module ip_vs_sip not found
[  150.548054][T10614] validate_nla: 4 callbacks suppressed
[  150.548065][T10614] netlink: 'syz.0.1124': attribute type 10 has an invalid length.
[  150.754120][T10622] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003
[  150.770022][T10625] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  150.775126][T10622] IPVS: stopping backup sync thread 10625 ...
[  151.450494][T10658] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  151.506045][T10650] netlink: 'syz.1.1131': attribute type 23 has an invalid length.
[  151.993842][T10705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.997455][T10706] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  152.000455][T10706] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  152.035692][T10710] __nla_validate_parse: 6 callbacks suppressed
[  152.035711][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[  152.072194][T10713] netlink: 'syz.2.1145': attribute type 3 has an invalid length.
[  152.102950][T10710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1144'.
[  152.189308][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  152.193562][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  152.197948][T10721] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.189352][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  153.327909][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1152'.
[  153.363781][T10737] netlink: 'syz.0.1151': attribute type 10 has an invalid length.
[  153.386105][T10746] netlink: 'syz.2.1152': attribute type 10 has an invalid length.
[  153.593120][T10775] netlink: 'syz.0.1155': attribute type 2 has an invalid length.
[  153.604803][T10775] netlink: 'syz.0.1155': attribute type 1 has an invalid length.
[  153.774023][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'.
[  153.775476][T10782] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1158'.
[  154.838973][T10832] netlink: 'syz.1.1168': attribute type 10 has an invalid length.
[  154.887376][T10834] netlink: 'syz.1.1169': attribute type 2 has an invalid length.
[  154.890620][T10834] netlink: 'syz.1.1169': attribute type 9 has an invalid length.
[  154.893633][T10834] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1169'.
[  154.962060][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'.
[  155.423252][T10860] IPv6: Can't replace route, no match found
[  155.559587][T10868] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.562986][T10869] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  155.569265][T10869] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  155.580469][T10872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.592391][T10873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.776321][T10885] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode
[  155.778693][T10885] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  155.800514][T10901] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.869463][T10906] validate_nla: 5 callbacks suppressed
[  155.869478][T10906] netlink: 'syz.1.1184': attribute type 10 has an invalid length.
[  155.875924][T10906] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.878954][T10906] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.976688][T10913] netlink: 'syz.0.1186': attribute type 10 has an invalid length.
[  156.881053][T10957] netlink: 'syz.1.1195': attribute type 10 has an invalid length.
[  157.258440][T10978] netlink: 'syz.1.1199': attribute type 10 has an invalid length.
[  157.262640][T10978] mac80211_hwsim hwsim112 wlan1: entered allmulticast mode
[  157.295816][T10981] Bluetooth: MGMT ver 1.23
[  157.308120][T10981] __nla_validate_parse: 9 callbacks suppressed
[  157.308136][T10981] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1201'.
[  157.441547][T10990] netlink: 'syz.0.1205': attribute type 10 has an invalid length.
[  157.503737][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  157.712645][T11006] tipc: Resetting bearer <eth:syzkaller0>
[  157.898216][T11015] bond1: entered promiscuous mode
[  157.914643][T11015] netlink: 'syz.2.1212': attribute type 11 has an invalid length.
[  158.151453][T11020] netlink: 'syz.2.1214': attribute type 10 has an invalid length.
[  158.384201][T11024] netlink: 'syz.0.1215': attribute type 10 has an invalid length.
[  158.390196][T11024] mac80211_hwsim hwsim108 wlan1: entered allmulticast mode
[  158.429782][T11026] xt_policy: neither incoming nor outgoing policy selected
[  158.522068][T11031] netlink: 'syz.0.1217': attribute type 16 has an invalid length.
[  158.525075][T11031] netlink: 'syz.0.1217': attribute type 17 has an invalid length.
[  158.530364][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  158.534648][T11031] IPv6: NLM_F_REPLACE set, but no existing node found!
[  158.561140][T11032] netlink: 'syz.1.1218': attribute type 16 has an invalid length.
[  158.564905][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  158.569187][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[  158.589535][T11032] IPv6: NLM_F_REPLACE set, but no existing node found!
[  159.389861][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'.
[  159.533656][T11052] mac80211_hwsim hwsim112 wlan1: left allmulticast mode
[  159.563891][T11052] mac80211_hwsim hwsim112 wlan1: entered allmulticast mode
[  159.624462][T11056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1223'.
[  159.635304][T11056] batadv1: entered promiscuous mode
[  159.636991][T11056] batadv1: entered allmulticast mode
[  159.772510][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'.
[  159.887113][T11067] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1226'.
[  159.893899][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  160.379252][T11101] bond2: entered promiscuous mode
[  160.446015][T11107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.449131][T11107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.988465][T11114] validate_nla: 69 callbacks suppressed
[  160.988476][T11114] netlink: 'syz.2.1240': attribute type 10 has an invalid length.
[  161.087985][T11116] netlink: 'syz.2.1241': attribute type 10 has an invalid length.
[  161.555676][T11132] netlink: 'syz.0.1244': attribute type 10 has an invalid length.
[  161.560646][T11132] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  161.563374][T11132] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  161.676296][T11137] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  161.680765][T11137] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  162.078947][T11165] netlink: 'syz.0.1250': attribute type 10 has an invalid length.
[  162.491734][T11194] __nla_validate_parse: 4 callbacks suppressed
[  162.491868][T11194] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1258'.
[  162.510529][T11194] batadv1: entered promiscuous mode
[  162.512808][T11194] batadv1: entered allmulticast mode
[  162.694169][T11206] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  162.696678][T11206] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  162.709070][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1260'.
[  162.714029][T11205] netlink: 'syz.2.1260': attribute type 10 has an invalid length.
[  162.718248][T11205] mac80211_hwsim hwsim115 wlan1: entered allmulticast mode
[  162.801553][T11212] netlink: 'syz.2.1264': attribute type 10 has an invalid length.
[  162.807722][T11212] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  162.810481][T11212] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  162.813721][T11212] tipc: Resetting bearer <eth:syzkaller0>
[  162.919110][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'.
[  162.962854][T11227] netlink: 'syz.0.1269': attribute type 11 has an invalid length.
[  163.007979][T11232] netlink: 'syz.2.1270': attribute type 11 has an invalid length.
[  163.028234][T11233] netlink: 'syz.1.1268': attribute type 4 has an invalid length.
[  163.031300][T11233] netlink: 'syz.1.1268': attribute type 17 has an invalid length.
[  163.036054][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'.
[  163.039792][T11233] IPv6: NLM_F_REPLACE set, but no existing node found!
[  163.109491][T11240] mac80211_hwsim hwsim108 wlan1: left allmulticast mode
[  163.118524][T11240] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  163.433116][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  163.502292][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  163.532687][T11256] tipc: Resetting bearer <eth:syzkaller0>
[  163.547036][T11256] mac80211_hwsim hwsim115 wlan1: left allmulticast mode
[  163.550257][T11256] bond1: left promiscuous mode
[  163.563719][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'.
[  163.720171][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'.
[  163.729551][T11265] netlink: 'syz.2.1279': attribute type 10 has an invalid length.
[  163.973877][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  164.038372][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  164.636290][T11323] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.640025][T11323] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.803694][T11329] can: request_module (can-proto-0) failed.
[  165.163059][T11346] tipc: Resetting bearer <eth:syzkaller0>
[  165.205214][T11346] tipc: Resetting bearer <eth:syzkaller0>
[  165.846164][T11359] netlink: 'syz.2.1303': attribute type 11 has an invalid length.
[  165.919063][T11361] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  165.922780][T11361] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.013764][T11369] nbd: must specify a device to reconfigure
[  166.070415][T11368] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  166.180229][T11378] mac80211_hwsim hwsim97 wlan0: left promiscuous mode
[  166.183264][T11378] mac80211_hwsim hwsim112 wlan1: left allmulticast mode
[  166.186647][T11378] bond2: left promiscuous mode
[  166.302144][T11392] validate_nla: 7 callbacks suppressed
[  166.302163][T11392] netlink: 'syz.1.1312': attribute type 64 has an invalid length.
[  166.383234][T11396] netlink: 'syz.0.1313': attribute type 10 has an invalid length.
[  166.813742][T11402] bond2: entered promiscuous mode
[  166.817882][T11402] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.274363][T11418] netlink: 'syz.1.1321': attribute type 10 has an invalid length.
[  167.279710][T11418] mac80211_hwsim hwsim112 wlan1: entered allmulticast mode
[  167.486718][T11432] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.490026][T11432] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  167.492565][T11432] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  167.498543][T11432] tipc: Resetting bearer <eth:syzkaller0>
[  167.521557][T11434] netlink: 'syz.0.1326': attribute type 10 has an invalid length.
[  167.532166][T11434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.536840][T11434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.813145][T11442] __nla_validate_parse: 26 callbacks suppressed
[  167.813161][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'.
[  167.833452][T11442] netlink: 'syz.2.1328': attribute type 10 has an invalid length.
[  167.899880][T11446] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1330'.
[  167.981243][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'.
[  167.987642][T11448] netlink: 'syz.2.1331': attribute type 10 has an invalid length.
[  168.451014][T11466] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  168.454165][T11466] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  168.497063][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'.
[  168.503060][T11471] bond2: left promiscuous mode
[  168.519182][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'.
[  168.607745][T11483] netlink: 11188 bytes leftover after parsing attributes in process `syz.1.1341'.
[  168.694363][T11488] mac80211_hwsim hwsim112 wlan1: left allmulticast mode
[  168.702088][T11488] netlink: 'syz.1.1342': attribute type 10 has an invalid length.
[  168.706500][T11488] mac80211_hwsim hwsim112 wlan1: entered allmulticast mode
[  168.771051][T11490] netlink: 'syz.1.1343': attribute type 12 has an invalid length.
[  168.939709][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1345'.
[  168.943740][T11494] mac80211_hwsim hwsim112 wlan1: left allmulticast mode
[  168.950849][T11494] netlink: 'syz.1.1345': attribute type 10 has an invalid length.
[  168.959506][T11494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.963316][T11494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.393385][T11506] nbd: nbd2 already in use
[  169.396241][T11505] block nbd2: NBD_DISCONNECT
[  169.726905][T11513] netlink: 'syz.2.1352': attribute type 12 has an invalid length.
[  169.729369][T11513] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1352'.
[  169.944386][T11527] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1355'.
[  169.951430][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'.
[  170.137028][T11542] IPv6: NLM_F_REPLACE set, but no existing node found!
[  170.474440][T11553] tipc: Resetting bearer <eth:syzkaller0>
[  170.486738][T11553] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  170.489746][T11553] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  171.395850][T11584] sctp: [Deprecated]: syz.2.1371 (pid 11584) Use of int in max_burst socket option.
[  171.395850][T11584] Use struct sctp_assoc_value instead
[  171.471862][T11590] tipc: Invalid UDP bearer configuration
[  171.471898][T11590] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.538435][T11595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.541679][T11595] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  171.544194][T11595] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  171.548681][T11595] tipc: Resetting bearer <eth:syzkaller0>
[  171.693322][T11614] bond0: entered promiscuous mode
[  171.759168][T11612] tipc: Resetting bearer <eth:syzkaller0>
[  171.764408][T11612] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  171.769639][T11612] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  171.886640][T11629] validate_nla: 10 callbacks suppressed
[  171.886660][T11629] netlink: 'syz.0.1384': attribute type 10 has an invalid length.
[  171.943880][T11633] ------------[ cut here ]------------
[  171.946234][T11633] WARNING: net/mac80211/iface.c:510 at ieee80211_do_stop+0x1a36/0x1fb0, CPU#1: syz.1.1386/11633
[  171.950020][T11633] Modules linked in:
[  171.952025][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.1.1386 Not tainted syzkaller #0 PREEMPT(full) 
[  171.956161][T11633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.959447][T11633] RIP: 0010:ieee80211_do_stop+0x1a36/0x1fb0
[  171.961622][T11633] Code: 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 27 05 00 00 41 ff 0c 24 e9 49 f5 ff ff e8 45 4a c6 f6 e9 3f f5 ff ff e8 3b 4a c6 f6 90 <0f> 0b 90 e9 a3 e9 ff ff e8 2d 4a c6 f6 90 43 0f b6 04 2f 84 c0 0f
[  171.968595][T11633] RSP: 0018:ffffc9000a667620 EFLAGS: 00010283
[  171.970451][T11633] RAX: ffffffff8af988e5 RBX: 0000000000000001 RCX: 0000000000080000
[  171.972830][T11633] RDX: ffffc90004211000 RSI: 000000000001f4df RDI: 000000000001f4e0
[  171.975559][T11633] RBP: ffffc9000a667830 R08: 0000000000000000 R09: ffffffff8af2f642
[  171.978592][T11633] R10: 0000096c00000000 R11: ffff8881123eb338 R12: ffffc9000a667790
[  171.981366][T11633] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88812088e9d8
[  171.983801][T11633] FS:  00007fd22120a6c0(0000) GS:ffff8881a39e0000(0000) knlGS:0000000000000000
[  171.986887][T11633] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.989076][T11633] CR2: 00007fd2211e8fc8 CR3: 0000000110d5c000 CR4: 00000000000006f0
[  171.991570][T11633] Call Trace:
[  171.992775][T11633]  <TASK>
[  171.993801][T11633]  ? __lock_acquire+0xab9/0xd20
[  171.996035][T11633]  ? do_raw_spin_lock+0x121/0x290
[  171.997795][T11633]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  171.999768][T11633]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  172.001517][T11633]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  172.003410][T11633]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.005802][T11633]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.008025][T11633]  ? wiphy_work_cancel+0x1eb/0x3c0
[  172.009624][T11633]  ieee80211_stop+0x1b1/0x240
[  172.011130][T11633]  ? __pfx_ieee80211_stop+0x10/0x10
[  172.012711][T11633]  __dev_close_many+0x364/0x6f0
[  172.014152][T11633]  ? __pfx___dev_close_many+0x10/0x10
[  172.016288][T11633]  ? __mutex_trylock_common+0x153/0x260
[  172.018404][T11633]  netif_close_many+0x225/0x410
[  172.020198][T11633]  ? __pfx_netif_close_many+0x10/0x10
[  172.021832][T11633]  ? __mutex_lock+0x335/0x1350
[  172.023293][T11633]  ? __lock_acquire+0xab9/0xd20
[  172.025164][T11633]  netif_close+0x158/0x210
[  172.026544][T11633]  ? __pfx_netif_close+0x10/0x10
[  172.028353][T11633]  ? __pfx___mutex_lock+0x10/0x10
[  172.029934][T11633]  dev_close+0x10a/0x220
[  172.031414][T11633]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[  172.033338][T11633]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  172.035338][T11633]  cfg80211_rfkill_set_block+0x2d/0x50
[  172.037071][T11633]  rfkill_set_block+0x1d2/0x440
[  172.039033][T11633]  rfkill_fop_write+0x44b/0x570
[  172.040720][T11633]  ? __pfx_rfkill_fop_write+0x10/0x10
[  172.042376][T11633]  ? security_kernfs_init_security+0x230/0x290
[  172.044257][T11633]  ? rw_verify_area+0x255/0x4d0
[  172.045891][T11633]  ? __lock_acquire+0xab9/0xd20
[  172.047491][T11633]  ? __pfx_rfkill_fop_write+0x10/0x10
[  172.049146][T11633]  vfs_write+0x27e/0xb30
[  172.050481][T11633]  ? __pfx_vfs_write+0x10/0x10
[  172.051935][T11633]  ? __fget_files+0x2a/0x420
[  172.053361][T11633]  ? __fget_files+0x2a/0x420
[  172.055044][T11633]  ? __fget_files+0x3a0/0x420
[  172.056504][T11633]  ? __fget_files+0x2a/0x420
[  172.058194][T11633]  ksys_write+0x145/0x250
[  172.059527][T11633]  ? __pfx_ksys_write+0x10/0x10
[  172.060971][T11633]  ? do_syscall_64+0xbe/0xfa0
[  172.062464][T11633]  do_syscall_64+0xfa/0xfa0
[  172.064087][T11633]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.065866][T11633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.067822][T11633]  ? exc_page_fault+0xab/0x100
[  172.069319][T11633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.071086][T11633] RIP: 0033:0x7fd22038eba9
[  172.072782][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.078962][T11633] RSP: 002b:00007fd22120a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  172.081663][T11633] RAX: ffffffffffffffda RBX: 00007fd2205d5fa0 RCX: 00007fd22038eba9
[  172.084234][T11633] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c
[  172.086917][T11633] RBP: 00007fd220411e19 R08: 0000000000000000 R09: 0000000000000000
[  172.089320][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.092049][T11633] R13: 00007fd2205d6038 R14: 00007fd2205d5fa0 R15: 00007ffecf301628
[  172.095129][T11633]  </TASK>
[  172.096387][T11633] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  172.099249][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.1.1386 Not tainted syzkaller #0 PREEMPT(full) 
[  172.102866][T11633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.106660][T11633] Call Trace:
[  172.107944][T11633]  <TASK>
[  172.109131][T11633]  dump_stack_lvl+0x99/0x250
[  172.110923][T11633]  ? __asan_memcpy+0x40/0x70
[  172.112782][T11633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.114775][T11633]  ? __pfx__printk+0x10/0x10
[  172.116230][T11633]  vpanic+0x237/0x6d0
[  172.117459][T11633]  ? __pfx_vpanic+0x10/0x10
[  172.118862][T11633]  ? is_bpf_text_address+0x292/0x2b0
[  172.120513][T11633]  ? is_bpf_text_address+0x26/0x2b0
[  172.122189][T11633]  panic+0xb9/0xc0
[  172.123433][T11633]  ? __pfx_panic+0x10/0x10
[  172.125131][T11633]  __warn+0x334/0x4c0
[  172.126615][T11633]  ? ieee80211_do_stop+0x1a36/0x1fb0
[  172.128325][T11633]  ? ieee80211_do_stop+0x1a36/0x1fb0
[  172.130041][T11633]  report_bug+0x2be/0x4f0
[  172.131584][T11633]  ? ieee80211_do_stop+0x1a36/0x1fb0
[  172.133391][T11633]  ? ieee80211_do_stop+0x1a36/0x1fb0
[  172.135456][T11633]  ? ieee80211_do_stop+0x1a38/0x1fb0
[  172.137550][T11633]  handle_bug+0x84/0x160
[  172.139245][T11633]  exc_invalid_op+0x1a/0x50
[  172.141087][T11633]  asm_exc_invalid_op+0x1a/0x20
[  172.143015][T11633] RIP: 0010:ieee80211_do_stop+0x1a36/0x1fb0
[  172.145331][T11633] Code: 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 27 05 00 00 41 ff 0c 24 e9 49 f5 ff ff e8 45 4a c6 f6 e9 3f f5 ff ff e8 3b 4a c6 f6 90 <0f> 0b 90 e9 a3 e9 ff ff e8 2d 4a c6 f6 90 43 0f b6 04 2f 84 c0 0f
[  172.152668][T11633] RSP: 0018:ffffc9000a667620 EFLAGS: 00010283
[  172.155060][T11633] RAX: ffffffff8af988e5 RBX: 0000000000000001 RCX: 0000000000080000
[  172.158223][T11633] RDX: ffffc90004211000 RSI: 000000000001f4df RDI: 000000000001f4e0
[  172.161060][T11633] RBP: ffffc9000a667830 R08: 0000000000000000 R09: ffffffff8af2f642
[  172.163770][T11633] R10: 0000096c00000000 R11: ffff8881123eb338 R12: ffffc9000a667790
[  172.166261][T11633] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88812088e9d8
[  172.168789][T11633]  ? ieee80211_recalc_p2p_go_ps_allowed+0x72/0x3a0
[  172.170785][T11633]  ? ieee80211_do_stop+0x1a35/0x1fb0
[  172.172481][T11633]  ? __lock_acquire+0xab9/0xd20
[  172.173973][T11633]  ? do_raw_spin_lock+0x121/0x290
[  172.175504][T11633]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  172.177097][T11633]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  172.178805][T11633]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  172.180855][T11633]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.182556][T11633]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.184770][T11633]  ? wiphy_work_cancel+0x1eb/0x3c0
[  172.186353][T11633]  ieee80211_stop+0x1b1/0x240
[  172.188018][T11633]  ? __pfx_ieee80211_stop+0x10/0x10
[  172.190089][T11633]  __dev_close_many+0x364/0x6f0
[  172.191724][T11633]  ? __pfx___dev_close_many+0x10/0x10
[  172.193839][T11633]  ? __mutex_trylock_common+0x153/0x260
[  172.195624][T11633]  netif_close_many+0x225/0x410
[  172.197167][T11633]  ? __pfx_netif_close_many+0x10/0x10
[  172.198831][T11633]  ? __mutex_lock+0x335/0x1350
[  172.200323][T11633]  ? __lock_acquire+0xab9/0xd20
[  172.201851][T11633]  netif_close+0x158/0x210
[  172.203271][T11633]  ? __pfx_netif_close+0x10/0x10
[  172.204838][T11633]  ? __pfx___mutex_lock+0x10/0x10
[  172.206473][T11633]  dev_close+0x10a/0x220
[  172.207919][T11633]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[  172.209846][T11633]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  172.212280][T11633]  cfg80211_rfkill_set_block+0x2d/0x50
[  172.214480][T11633]  rfkill_set_block+0x1d2/0x440
[  172.216368][T11633]  rfkill_fop_write+0x44b/0x570
[  172.217921][T11633]  ? __pfx_rfkill_fop_write+0x10/0x10
[  172.219834][T11633]  ? security_kernfs_init_security+0x230/0x290
[  172.221764][T11633]  ? rw_verify_area+0x255/0x4d0
[  172.223316][T11633]  ? __lock_acquire+0xab9/0xd20
[  172.225091][T11633]  ? __pfx_rfkill_fop_write+0x10/0x10
[  172.227015][T11633]  vfs_write+0x27e/0xb30
[  172.228360][T11633]  ? __pfx_vfs_write+0x10/0x10
[  172.229850][T11633]  ? __fget_files+0x2a/0x420
[  172.231478][T11633]  ? __fget_files+0x2a/0x420
[  172.233156][T11633]  ? __fget_files+0x3a0/0x420
[  172.234863][T11633]  ? __fget_files+0x2a/0x420
[  172.236379][T11633]  ksys_write+0x145/0x250
[  172.237761][T11633]  ? __pfx_ksys_write+0x10/0x10
[  172.239519][T11633]  ? do_syscall_64+0xbe/0xfa0
[  172.241406][T11633]  do_syscall_64+0xfa/0xfa0
[  172.243248][T11633]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.245162][T11633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.247373][T11633]  ? exc_page_fault+0xab/0x100
[  172.249030][T11633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.250892][T11633] RIP: 0033:0x7fd22038eba9
[  172.252355][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.258407][T11633] RSP: 002b:00007fd22120a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  172.261148][T11633] RAX: ffffffffffffffda RBX: 00007fd2205d5fa0 RCX: 00007fd22038eba9
[  172.263773][T11633] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000c
[  172.266272][T11633] RBP: 00007fd220411e19 R08: 0000000000000000 R09: 0000000000000000
[  172.268842][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.271792][T11633] R13: 00007fd2205d6038 R14: 00007fd2205d5fa0 R15: 00007ffecf301628
[  172.274949][T11633]  </TASK>
[  172.276899][T11633] Kernel Offset: disabled
[  172.278666][T11633] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:53:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff82194f14 RCX=24261078e16bfc00 RDX=0000000000000001
RSI=ffffffff8c0381e0 RDI=ffffffff8c0381a0 RBP=dffffc0000000000 RSP=ffffc9000654f2e0
R8 =0000000000000000 R9 =ffffffff8173bd25 R10=ffffc9000654f458 R11=ffffffff81ac44a0
R12=1ffff92000ca9e81 R13=ffffc9000654f440 R14=ffffc9000654f408 R15=ffffffff8173bd25
RIP=ffffffff8b841b90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f981589dc80 ffffffff 00c00000
GS =0000 ffff8880b83e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000112370000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000061 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f313879 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000002fb56 RDI=000000000002fb57 RBP=00000000000003f8 RSP=ffffc9000a666dd0
R8 =ffff888108428237 R9 =1ffff11021085046 R10=dffffc0000000000 R11=ffffffff85548780
R12=dffffc0000000000 R13=ffffffff99d3592b R14=ffffffff9a02a180 R15=0000000000000000
RIP=ffffffff855487fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd22120a6c0 ffffffff 00c00000
GS =0000 ffff8881a39e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd2211e8fc8 CR3=0000000110d5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd220412e53
XMM06=0000000000000000 00007fd220412e4d XMM07=0000000000000000 00007fd220412e61
XMM08=0000000000000000 00007fd220412ee7 XMM09=0000000000000000 00007fd220412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
