last executing test programs:

2.35925771s ago: executing program 2 (id=5674):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x10, 0x6})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffb4, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.290498564s ago: executing program 2 (id=5675):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x98}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000001080))
r7 = socket$netlink(0x10, 0x3, 0xe)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002bbd7000fcdbdf2545000000080003005ef30013ed82dae2633d058cedbed3d6295b96a618466938217f03d651e459d8e9787e7ece4ddd30edbfed8a6525f46d51895aeea9d117d030458dcd12feba2c3f3f69bd4ccdd331", @ANYRES32=r4, @ANYBLOB="0c0099000500000038000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)

1.215262296s ago: executing program 2 (id=5687):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x94, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x94}}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

1.00091605s ago: executing program 1 (id=5691):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f00000001c0)={0x800, 0xbbbe, 0x7c, 0xc6, 0x5, 0xb, 0x4, "238037bf079bc6dfc1f79cf4dcc0ee961e85b4e8", "c504a082ac158a45fe30511656c2b734fa27bc5b"}) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080)
r13 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r13, 0x107, 0x6, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

894.404842ms ago: executing program 1 (id=5693):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

737.393047ms ago: executing program 1 (id=5695):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (rerun: 64)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000600000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x1008, &(0x7f0000001700)=""/4104}, 0x94) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@ipv6_delrule={0x84, 0x21, 0x100, 0x70bd25, 0x25dfdbfb, {0xa, 0x10, 0x0, 0x2, 0x9, 0x0, 0x0, 0x6, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8}]}, 0x84}}, 0x85) (async)
clock_gettime(0x1, &(0x7f0000000300)) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x60, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x60}}, 0x0)

579.43879ms ago: executing program 1 (id=5697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xfffffffffffffffb}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x100000000}, {0xc, 0x90, 0xd746}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8001}, 0x40801)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x438, 0x3f3, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x2c, [0xfffffff9, 0xe, 0x2, 0x8, 0x24da, 0xbef, 0x7, 0xfffffffc, 0x3, 0xfffffc00, 0xf0000000, 0x3, 0x1, 0x4, 0x100, 0x9, 0x800, 0x1, 0x6, 0xffff60ca, 0x8, 0x8, 0x0, 0x2, 0x2, 0x4, 0x6, 0x25, 0x69317f6e, 0x8, 0x100, 0x1, 0x4, 0x8001, 0x0, 0x7ff00000, 0x4, 0x2, 0x5, 0x0, 0x5, 0x2, 0x5, 0x7, 0xe1b5, 0x3, 0x785, 0x80000000, 0xfc, 0x4, 0xe8e7, 0x5, 0x40, 0x429f, 0x5, 0x509e, 0x1, 0x3, 0x7, 0x6, 0x7, 0x94a, 0xff, 0x3], [0x400, 0x3, 0x4, 0x7, 0x5, 0x0, 0x1, 0x0, 0x8, 0x7, 0x7f, 0x2, 0xe640, 0x2, 0x5, 0x8, 0x3, 0xff, 0x0, 0x7, 0x10, 0xff, 0x8, 0x1000, 0x1, 0x0, 0x4, 0x30000000, 0x0, 0xfd, 0x10000, 0x9, 0x4, 0x40, 0x6f02, 0x0, 0xffffff7f, 0x9, 0x2, 0xfffffb6f, 0x4, 0x1, 0x7, 0xffff, 0x1, 0x3, 0xfffffe01, 0x6, 0xfa, 0x0, 0x6, 0x200, 0x1, 0x5, 0xa, 0x4, 0x8, 0x2, 0x4, 0xffff36dd, 0x8, 0x1, 0x8, 0x3f], [0x1, 0xf, 0x8, 0x1, 0x1196, 0x838, 0xfffffff7, 0x1, 0x1, 0x2, 0x101, 0x2, 0x101, 0x0, 0x6, 0xfffffff9, 0x5, 0xb, 0x7ac, 0x7, 0x48d, 0x7, 0xffff, 0x8, 0x5c, 0x8fd, 0x1, 0x6, 0x8001, 0xf, 0x9, 0xfa, 0x7, 0x5, 0x1, 0x4, 0xe, 0x24000, 0x9, 0x10000, 0x8ea3, 0x9, 0x5, 0x3, 0x13e7, 0x3d91, 0x5, 0x9, 0x9, 0x73, 0xb, 0x7ff, 0x9, 0x7, 0xa64, 0xc88d, 0x6, 0x8, 0x11e, 0x9, 0x1, 0xffff, 0x3f800000, 0xb30], [0x5, 0x3, 0x7e7, 0x8, 0x8, 0xfffffff8, 0x9, 0x1000, 0x6, 0x3, 0x64, 0x4, 0x9, 0x3, 0x4, 0xe, 0x9, 0x100, 0x7, 0x5, 0xc, 0x2, 0x9, 0xa9c, 0x5, 0x8, 0x2, 0xfff, 0x80, 0xa, 0x6, 0xed1, 0x8, 0xb, 0x2, 0x1, 0x5, 0x9, 0x75d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x3, 0x8, 0x9, 0xffffff8d, 0x2, 0x6, 0x1, 0x0, 0x4, 0x9, 0x9, 0x0, 0x80000001, 0x8, 0xe4, 0x1, 0x24, 0x3, 0x3, 0x2], 0x18, ['^*}*.&&{&/}!]\x00', '@\x00', '\x00', ':[#$^#\x00']}, [""]}, 0x438}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x804, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x2402c011)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0x0, 0x9, 0x1c000000, 0x6, @empty, @remote, 0x10, 0x20, 0x6, 0x8}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@RTM_DELMDB={0x58, 0x55, 0x600, 0x70bd2d, 0x25dfdbfb, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x43}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x488d5}, 0x40000004)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0xd6fc2a2bfd55bdfc}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xec, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x64c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffffc0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x64}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x2, 0x8000, 0x80000000, 0x1, 0x1000, r5, 0xffff0b80, '\x00', 0x0, r6, 0x0, 0x3, 0x4}, 0x50)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0xd, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x441d}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
socket$isdn_base(0x22, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000001080)={'icmp6\x00'}, &(0x7f00000010c0)=0x1e)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0xbe, <r10=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x8}, [@generic={0xb, 0x4, 0xb, 0x4000}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000001140)='syzkaller\x00', 0xe, 0xb7, &(0x7f0000001180)=""/183, 0x40f00, 0x4c, '\x00', r3, 0x1b, r6, 0x8, &(0x7f0000001240)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r10, 0x0, 0x0, &(0x7f00000012c0)=[r7, r5, r7], 0x0, 0x10, 0x1}, 0x94)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x90, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4f37, 0x18}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x0, 0x4, 0x7, 0x6, 0x401, 0x3, 0xd]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x33, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @from_mac, {0x0, 0x1}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x1820, @default, {0x1, 0x3, [{0x4, 0x1}, {0x16, 0x1}, {0x5, 0x1}]}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9c6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff73}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa6}]]}, 0x90}, 0x1, 0x0, 0x0, 0x1804}, 0x40)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x805)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="902d85c6f6ef"}]}, 0x20}}, 0xc080)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001800)={'gretap0\x00', &(0x7f0000001740)={'sit0\x00', <r12=>r3, 0x1, 0x700, 0x7ff, 0x8f, {{0x22, 0x4, 0x1, 0x3a, 0x88, 0x65, 0x0, 0x3, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xfc, 0x1, 0x0, [{@loopback, 0x8}, {@private=0xa010100, 0x4}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x100}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc4}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x7, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x9}]}, @ssrr={0x89, 0x23, 0x82, [@multicast2, @private=0xa010100, @loopback, @local, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'syztnl2\x00', r12, 0x2f, 0x9, 0xaf, 0x7, 0x21, @mcast1, @rand_addr=' \x01\x00', 0x80, 0x1, 0x2, 0x401}})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x60, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3e, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x40}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, {{}, 0x7, 0x1, @device_b, 0xda2, @void, 0xd19b, 0x8001, @device_b, 0x8}}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8001)

326.065203ms ago: executing program 0 (id=5699):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0xc00)
connect$phonet_pipe(r0, &(0x7f0000000280)={0x23, 0x8, 0x3, 0x6}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xc042, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'macvlan1\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000680)={0x0, <r5=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r5, 0x0, 0x10}, 0xc)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r5, 0x4003, 0x10}, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000400)=0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f00000002c0)="969afd308002ceaa0832e7edecba115715502cb11067dfdc1af3122bbfc48128e3b0c9e89d5da0be5e9c72a2e36b7a79443f5b1d1847f7735a5229c7f2b60ea9de960244a0a81ea4a7e539485e127625a96a563efc7070619fa2f43bc288f8d0fdb2bde219573fcfb843fc41b59b8fca800dd87e9b5211ad84c616414f6cb5ede88d07f667ba06fdd3875142727b0ec9aca7491d34f112c814296965d0387d066cfbe18a9f43df73c287f460f8a324a7503d45", &(0x7f0000000140)=""/125, 0x4}, 0x20)

324.141399ms ago: executing program 1 (id=5700):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='pimreg0\x00', 0x10)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000100)=0xf801, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'wlan0\x00', 0x4000})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
r5 = accept(r3, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000280)=0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffff8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xae}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xfff9}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x57}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x6}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20008044)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000440), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0xfffffff8, 0x3, 'snmp_trap\x00', {0x3}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xff000000, 'batadv_slave_0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0x0, 0x40}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000740))
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r3}, 0x8)
ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f00000007c0)={0x2, 0xac, "d38874ab8930905a2c506dc2836a68218b1c1be78d1a4c842074db68df2f0f13ee1162f3626678a54157244610153e86cef0e78a470620c476dbccf06375bb1093eb411dff16b26909dee13128c842ad50cb79973d5e90b0752c900f1d8077abeaff6ff93e9fd3a12da000c23c5864f276802be685b6bb3179993bbbb1288dcd8a4265293e41ad382c974376119a00313c4e1d9b6df758dc90af7a1e54d2a067278028d98676f81256e74d15"})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={<r9=>r7, 0x2, 0x3, 0x9})
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000008c0)={'vlan0\x00', 0x1000})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000d00)="168fbdf19bde78e8e512c9880a9926c9", 0x10)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000d40)="7def8c32f9b4edae340f228c92714d1b2cd30986239aa0be5123fbc544151b5f376c80492f938ed75105cfeb1caf47ab508341a07d57dffd22e41de1ecd73c26c2cc391ffb86083f52a1776ab35fd2b1eaf1ea9bef5da9e2da2178b5cfdf295ed504ca1def91e3a3a6ce8dc81694c1caae2af9195fda0ddf2b39bcc7232cc64173cda576dec1fd5ef76df135abad13a78d88af001e822db81da24d51b5739f78ec943c214625d7a616392c0b8ab5", 0xae)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000e00)='htcp\x00', 0x5)
ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000ec0)=<r10=>0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000f40)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000fc0)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001000)=@nat={'nat\x00', 0x1b, 0x5, 0x610, 0x450, 0x450, 0xffffffff, 0xf0, 0x0, 0x540, 0x540, 0xffffffff, 0x540, 0x540, 0x5, &(0x7f0000000e40), {[{{@ipv6={@remote, @private2, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'veth0_to_bridge\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0xd0, 0x1, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, @icmp_id=0x67, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@broadcast, @gre_key=0x5, @port=0x4e23}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0xee00, r10, r11, r12, 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e22], [0x4e21, 0x4e22], [0x2d8b, 0x1ff, 0x1ff, 0x2, 0x80000001, 0x1, 0xa1b, 0x80, 0xfffffffa, 0x9, 0x4, 0x6, 0x0, 0x7, 0x4, 0x44, 0xfffffffb, 0x0, 0x100, 0x9, 0xcb, 0x4, 0x7, 0x4, 0xfffffff9, 0x2, 0x80000001, 0x4, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x1b, 0x401, 0x3356, 0x80, 0x7, 0x7, 0x9, 0x1000, 0x7, 0x101, 0x5, 0x4e, 0x80, 0x8, 0x1db6, 0x7, 0x4, 0xfffffff4, 0x7, 0x3a2c95c1, 0xffff, 0x40, 0xb759, 0x6, 0x6, 0x1, 0x4, 0xfff, 0x7, 0xfffffffc, 0x6], 0x3, [{0x1, 0x6, 0x3}, {0x5, 0x6, 0xff}, {0x4, 0x38, 0xc}, {0x2, 0x2, 0x5}], 0x0, 0x1, 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x15, @ipv6=@private1, @ipv6=@loopback, @gre_key, @icmp_id=0x67}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff, 0xff, 0x0, 0xffffffff], [0x0, 0xb9f9be0d51e5b1c7, 0xffffff00], 'veth0\x00', 'dvmrp0\x00', {0x80}, {0xff}, 0x32, 0x6, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, @ipv6=@mcast2, @port=0x4e21, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670)
connect$rxrpc(r5, &(0x7f0000001680)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xf0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r9)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0xa21, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x38c2}, 0x1)

323.714505ms ago: executing program 0 (id=5701):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x20, 0x3, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
sendmmsg(r8, &(0x7f00000015c0)=[{{&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="02016720711b01cce7bf110881c63c88e601d14105b2806df529a30425f8e99038b65dbda5ea34a1c78b72e8ed4a54ea7bbb2f1f3a0ed0736c2e9387cd14facd759640e208cc9e63f61cbbe3a15a6501a70b91a855b2202ab8f9c92a4d3934a93cebf65bd492768bd65e16b93258730379bd535d6e81418aa6e00568d448ac961d502d7da8102bd59f650c636ee9e1e681", 0x91}], 0x1, &(0x7f0000001680)=[{0xa0, 0x0, 0x8, "865cbcc47b4fb4b549909101be7598fd78af17b09faa5852b6657cce088888a22a575023d55ed47ba9fa97a5a76d122d91aeb32f3d1d27543e84b1e740774cf59e8edf456b5dcbb79d6b64ff1b5f025a42d5566f545da0a0eb0eac23208df30f274440234ae79f235ed263738679da51b68afddd49cd76c013923e4bf1045690d5522ce6c32770074c1d6183"}, {0x60, 0x10e, 0x5, "472ae72e85b01bbc9f555c25b43d9f4aec508525919bede104b47e7b6ffe746aaf867f4f1992612a8511a239870f7f92827b82468f0fa6d4d539170285005ba82a6e5c601f130c6ee6ea"}, {0x108, 0x11, 0x3000, "853724d87844d9da1f933717d29729f90e8c64004ad97ad513a2c85dc84b1eb784301e5a915ad6a1edb7a49824961e3eeead31fccf87006e4e8cbd3ec20431b98dd710c69de8400563d6bca16688db7a8bde35c390ef46c8d98ccb585faca822b04fb7cd5450a42ff4528e26f8ba54585176417b761faf6b8a3991f8d64c1dbdbd3bf956dd7e17a9e387667d648b679f17676defe9c2e7769c50714ab1ec6f9f87ae0a6ad0a8eac23e9ebef6f74d05c4366fadc8dbdf32a74e537106fcc0d1940cb7de7562106f7a97eb359d1cc66288e10c8c3045817cd71ee585b053670f2a9ae2f1c299893a5951854403e9776f3313ccccbeca4fb8e3"}, {0x138, 0x29, 0x90e, "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"}, {0xb8, 0x1, 0xffff57fb, "95a6994292b2012ff173c615c66ffe80c18c90204bfa4d0ef197c06cb6c7852d052a7a8c96d4084e9b4f156089bd3f4e9a8bce8b5e9dc7388407cb9916eb4f836caedf25945b160f62c188038a01649dffe4d82f178febbcb70b815489cea1742731a77c430f00a3de0b0a89d5d6448f6116a3aa8e616a6d463b980137955701bb23b8809ffffd7442fb12ef24e7288651d887b917acf3a39a5c6c9800b302d823412c6fd5"}, {0x60, 0x104, 0x6c354eea, "4c8e0ca9fd550d7b0ced3305c3c45969995276bcec41ec25eee365cbb15f1b045c778584ffcea1f9f99ddfe3a7ae304d16b6b39d9665b4400f4c9dd9c197e7cbaa3265a12d1b56a384d14c1642c9"}], 0x458}}, {{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @multicast2}, 0x1, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)="3a5e2ae1bf2d11b125cf03552b8438a794ede67fd4c5b44c4d16ed0a35091d024635bff6f900", 0x26}, {&(0x7f0000000ac0)="3de352e9e202ce4f9e4ba3b78876d6d10d", 0x11}, {&(0x7f0000000b00)="088641cb68d50bfa5c1ae18b29d9837fd8c6e3a585e5e0bdba65e185dc50527f60919e813484dcad5b0cfd03d4306591db3a6008feff8ec50eed603bdeccb0c4233e64276309c1cbc6a4e68b8580c9dce8d3ebb732c52e0b1d116a35455cb711a9adcf6e883b54b7b457973802c7ee4571cd14f8cbe90186db0ccb0a0dbe5e8caf87e7d7d1c980860a1edfcfe09ab3bc4ddf451ec558abe70c3f03d126be54ce45", 0xa1}, {&(0x7f0000000bc0)="50e52a7ae56e48e3f7c74dbfbbc6aebb5a62480d54e254f35e55a7b8f29a1adf2a45336a86ac57a5ee266303cdfd21cf1e504be18533cb54598a668d3a17a727ced7e93b32096e8eacdc929fdca26094f936eee76cc73a21813c64147673221a4aec59954e49e38d98929a91cc8313", 0x6f}, {&(0x7f0000000c40)="23a649717a6a4868281e0ba75141434d1e65c485fff7712cd4bf2d3fb732dc4b933f6ee30f870539cd6576b3697798e9bb46d19042ea098041d8f5cbbba73664ada0d7d12dbc62ca0f2af28c7d79189c337546b513a1ca9d5d7234622e6f6e85af97b2c647bb1f2b4d3f1df9872ba4bf8d", 0x71}, {&(0x7f0000000cc0)="a5cbbe0f9782cddbf6bca07c89806d4d5e0bccff7587dd9c2bd32b6e5500f4884cf1052b811928af737ee50dd26b670b5c2c49c279acdabf222541df6217af4ddcf2d341fd56e940", 0x48}, {&(0x7f0000000d40)="c7db981fc7bca342c7e7fbea98a75335bf7d673729b79ca170cc2f41ae377f451f2759e6780f1047a8f3a87f352812c633e52843b0363aa930d8a3cdfa5148297ba8164fc1e882ebae6b3a9df2bd7102813051b7fb974a6e9e94ac56b33c3f28c221e41911d216e57c62dedc2f85ecf2d3449464caf54d6a5723b067440308c33ba043bca8614f579521495e3796237d415e09", 0x93}], 0x7, &(0x7f0000000e80)}}, {{&(0x7f0000000ec0)=@ax25={{0x3, @bcast, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000f40)="0ba3afca1ceb84bc29797d01852a33859b89438384986ed4bac131025ac66148502454d9e48c95db5e5ac8545d99597a7212", 0x32}, {&(0x7f0000000f80)="4dbc3d2bc7f71efbba39c486c3fe435ff43808ea7aefb8ee0f43663d237a58e9b132cdacddd118829a144ee6b6fe979c3ef68335da2fb66dabe0a68aa73bfbde5af63f12096d1d87646f990dc72f5c07d89467ae6f2df083750e413a0b98a4949051e8ca3ee7da7b8d5ce62fc2a666d6a84fb13837bec2dcc14d63b6848250f1d5d42bcec4feda0a1611fd53ed88a07ff3", 0x91}, {&(0x7f0000000640)="2ebff97fea42e2b57b82e64f04971f364fafd17a606b4f1b00a39ae389dff46e373781a674109f49c94547d6808eb60a9349b5102b2187c19114f313c7101e0180d8c4d1fd868a43998a20cff24c634fc32c8ea9208ce2f3058b31c763f55133caf127da205c0e759f8c641d818329492031e68096e1d514694575ba5bb57f25ad3ab4e80712f51cdb2b232528609f577a179f37f962a0834205a6a1", 0x9c}], 0x3, &(0x7f0000001080)=[{0xb0, 0x103, 0x4, "eb7789cf6c99238a5f4df41dd1ef8d9f35fae2f126edcd710f3795a1e8a87b3422a5c0bd03558f421774507d5f1e73da20ad1cc7dc4afdbb05c0ad8789a1eeb336cf56b9e932dce3f5996ee679562ccc2e8c04da47ca867cd939be73011f2252103bae9bbfceead8416dfacccfc0282500882faa2f718df5668c806ad1774d0bba638a417725e4011a5dad9cdf4986c94616f948b49a88d38db8ff2494bb34"}, {0xf0, 0x117, 0x10001, "01e09a12f32d000adc1067c17cec039537db0019235ba6c95141426e92523162d725f088e78b78d68da8d20aeeb86d4269f505f77f4aa99e904a9cd1de11f79b3fb59be03c1ff161a1046d7cfb7d1f293e6ae3ccfd99e727e6209b74aa508ab20809fe6193d995a76272399475d388c99d3320b1752121a84d2cc3e08be211b9c6f2a0a4127f9144546a5a08cb823f367161782f45f105297ea5b97a83a8f794f21cee6be401a127796a5177dfebb8d50f2936ff8e1b85212624a5011ca0567b1d7dbbd87fa9a621f883b1a41bdca06754baaae96415f3a64b6833"}, {0x98, 0x102, 0xb7c, "45903338698d0a4dde85ce0375cc8b2d541a4775b80f0ef997f87611d82925649d3b5574f3f9d0857abd4708d75fdf77a63d59bd9ffe5c834fded13cbb3127806175c815496ae0d13caaa33a85a3237153829050ac048e1b889f21c524cc884bbdd842c95cd6db1a7ae8a1b30ddb9a82e28fc34c31132904717c8f958fc8642dc598f3431496"}, {0x100, 0x0, 0x8, "60e5afcdf6c7184cca705a866381a367a35f1c7c7623f40354656f222e58e2d6995034c54f01cfc4e47c45bd26f63e02cbd84ea3788d575b8b7094138edcd62ddfd5a6ffb6d63489fd774713f116115435f763c6f8f0fb256963254d12f3bb8f2c1ec6732d85091131ba839666ef483206e2605563285de77e60d17a47d4997ff52b0a8a6535bb9652b9cc9889f2a5c4ecc81c67970b1f4aa832b844fcb16b935e6a0b169d18fa59b425edb896ccc66bf8100ed00baab9bf0d9156f720bc4c842efe54129c13b1f7cb855f3ec25931db7077164c84c20ff2b63c1d82962ad06a27bfb9dcdb5003dc2556f809748ac79e"}, {0xd8, 0x119, 0x6, "bed103221a96909dbee4cbfc217ffef78f62379fdadb33cadbb5c47511c2ea5abbf75742939a02e314b75db342e665f569dd9f29d50200d8bb18914d9ab7ebca9de031d047c8b4d4e14d050b66ec02ede2cea703af5ff67c09c7b12cf855314ba30bf47cf9220dfbea036a0b6f8c69bdcd7f55de76fbc69e7f3fa373760e3bb0603c10e99840c6f8fe4ec04829fe0ff7ca23f127bf515405554089f35141b878dd719aa692fc3f0945d73f17b4c56ba0b66ae9178d0bfab324b500012eeeff008e20fc"}, {0xe8, 0x115, 0x7, "5fa754fb479a054392156137be9fa661907c9989d50a4d8785f6b8edcf5b93bba6eb2d4ef6abbc8e6da57d33acd6abd57e996c5fcf6854016edb71d70ac2c2d8beae9fff79022aa27c0b59b3084eabce5d2aa13114055b102e5ec41a87b953909a620c1fdfc3df8e517244ac718e38cdbcce07a977b83aacb791c324ed2bba510c347b5f2da896fe0c61a817f6e30b33d0d3921a93ef16f41045a649ff8eca79c2c68cd1078d97e39d822a7860265f0fc4f1d8e0fcd738b4104bfa63cf4073375a8b806e87334eeb6318159b77db18a3b46e"}, {0x18, 0x11, 0x0, "0c16bd7c4f"}], 0x510}}], 0x3, 0x48000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fcffffff1000000008000600a50800001800018014000200776c616e300000000100000000000000"], 0x34}}, 0x10) (async)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r12, @ANYBLOB="d01e020000000000"], 0x20}}, 0x0) (async)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x39, 0x8, [0x8, 0x2, 0xfffffffa, 0x3, 0x6, 0x0, 0x1, 0x5]}}) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r14, 0x0, 0x0)

323.269182ms ago: executing program 1 (id=5702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x400c1, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @multicast}, 0x14)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x10, 0x1, @vifc_lcl_ifindex=r3, @remote}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x8, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @remote}}}, 0x108)
setsockopt$inet6_int(r7, 0x29, 0x10, 0x0, 0x0)
write$rfkill(r4, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
sendmsg$inet_sctp(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

315.960204ms ago: executing program 0 (id=5703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000ec0)={<r6=>0x0, "b09928472ccdba476b8c27a70d280573"})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001ec0)={r6, "0c7790d7f15a6df4210753294dd3f6b3"})
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

260.855091ms ago: executing program 2 (id=5704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d00090027bd70000000000004000000040019000c00090000000080"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full', 0x20, 0x8, 0x20, 0x5}, 0x2f)

129.256495ms ago: executing program 2 (id=5705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@newae={0xf0, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfc, {{@in=@local, 0x4d3, 0x2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x34ff}, [@algo_comp={0xaf, 0x3, {{'lzjh\x00'}, 0x338, "104015efb330578baf499cac1101646154162ef42572c49567d05d9f6dfba2e6ae1e9817d484e1f65b41b783e89e06519dcf824056a65deb486a999e9ac6cff7a9f6b279c6cefb90dbb4cdf5e884bde382d252e1713d832747270878a08490755cb05d1b340800"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r11 = socket(0xa, 0x3, 0x87)
bind$inet6(r11, &(0x7f0000000400)={0xa, 0x4e1f, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000580)="df7232e6ecb68e0730be7aca30c1a1714e4f19b87bc1d1a1fd129af6e37e3d6b6d8933", 0x23)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

128.431604ms ago: executing program 0 (id=5706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

50.942737ms ago: executing program 0 (id=5707):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f0f010018000000000000f8ffffff811673a3d88a68"], 0x0, 0x1a, 0x0, 0x8, 0x0, 0x10000, @value=r3}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

50.236018ms ago: executing program 2 (id=5708):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0) (async)
connect$inet6(r5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async)
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc5840e93fb7c14e1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080fa0000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080fa0000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r8, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

0s ago: executing program 0 (id=5709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x4b392a6b8941be02, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c0}, 0x42882)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff3c, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@generic="1e"]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x80c5)

kernel console output (not intermixed with test programs):

 suppressed
[  427.723060][T24524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4505'.
[  427.745962][T24525] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  427.771239][T24527] netlink: 'syz.2.4506': attribute type 10 has an invalid length.
[  427.789469][T24527] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  427.793272][T24527] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  427.898522][T24533] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4508'.
[  427.906543][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4508'.
[  427.996201][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'.
[  427.996272][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'.
[  428.068099][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'.
[  428.096482][T24544] block nbd0: Receive control failed (result -32)
[  428.147331][T24548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4512'.
[  428.160393][T24548] netlink: 'syz.1.4512': attribute type 10 has an invalid length.
[  428.285901][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4513'.
[  428.316417][T24552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4513'.
[  428.539930][T24556] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4514'.
[  429.424615][T24612] tipc: Resetting bearer <eth:syzkaller0>
[  429.831064][T24633] IPv6: NLM_F_REPLACE set, but no existing node found!
[  430.096501][T24660] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.100225][T24660] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  430.783486][T24677] validate_nla: 10 callbacks suppressed
[  430.783502][T24677] netlink: 'syz.0.4547': attribute type 16 has an invalid length.
[  430.789370][T24677] netlink: 'syz.0.4547': attribute type 17 has an invalid length.
[  430.793975][T24677] IPv6: NLM_F_REPLACE set, but no existing node found!
[  431.021645][T24693] netlink: 'syz.2.4551': attribute type 23 has an invalid length.
[  431.102054][T24690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.105943][T24690] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  431.109689][T24690] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  431.281081][T24702] netlink: 'syz.0.4552': attribute type 10 has an invalid length.
[  431.381969][T24730] pim6reg: entered allmulticast mode
[  431.385514][T24730] pim6reg: left allmulticast mode
[  431.485986][T24740] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  431.545431][T24745] netlink: 'syz.1.4561': attribute type 16 has an invalid length.
[  431.551969][T24745] netlink: 'syz.1.4561': attribute type 17 has an invalid length.
[  431.561667][T24744] delete_channel: no stack
[  431.619543][T24750] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  431.628168][T24750] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  431.672917][T24754] netlink: 'syz.1.4564': attribute type 5 has an invalid length.
[  432.325955][T24769] can: request_module (can-proto-0) failed.
[  432.342350][T24759] netlink: 'syz.0.4566': attribute type 10 has an invalid length.
[  432.391533][T24759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.394652][T24759] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.504918][T24786] netlink: 'syz.2.4572': attribute type 10 has an invalid length.
[  432.513242][T24786] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  432.515902][T24786] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  432.519379][T24786] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  433.113037][T24793] __nla_validate_parse: 10 callbacks suppressed
[  433.113062][T24793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4574'.
[  433.150037][T24793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4574'.
[  433.162841][T24795] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4575'.
[  433.170637][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4575'.
[  433.260770][T24802] netlink: 'syz.0.4576': attribute type 16 has an invalid length.
[  433.265781][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4576'.
[  433.271260][T24797] IPv6: NLM_F_REPLACE set, but no existing node found!
[  433.560952][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4579'.
[  434.389186][T24828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4583'.
[  434.394539][T24828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4583'.
[  434.839628][T24844] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  434.842696][T24844] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  434.913623][T24862] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  434.916581][T24862] CPU: 1 UID: 0 PID: 24862 Comm: syz.1.4591 Not tainted syzkaller #0 PREEMPT(full) 
[  434.916593][T24862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  434.916599][T24862] Call Trace:
[  434.916604][T24862]  <TASK>
[  434.916609][T24862]  dump_stack_lvl+0x189/0x250
[  434.916626][T24862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.916636][T24862]  ? __pfx__printk+0x10/0x10
[  434.916651][T24862]  ? kernfs_path_from_node+0x2f/0x290
[  434.916664][T24862]  ? kernfs_path_from_node+0x250/0x290
[  434.916673][T24862]  ? kernfs_path_from_node+0x2f/0x290
[  434.916684][T24862]  sysfs_warn_dup+0x8e/0xa0
[  434.916694][T24862]  sysfs_do_create_link_sd+0xc0/0x110
[  434.916705][T24862]  device_add_class_symlinks+0x1cf/0x240
[  434.916717][T24862]  device_add+0x475/0xb50
[  434.916728][T24862]  wiphy_register+0x1c81/0x2aa0
[  434.916750][T24862]  ? __pfx_wiphy_register+0x10/0x10
[  434.916760][T24862]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  434.916773][T24862]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  434.916783][T24862]  ieee80211_register_hw+0x3442/0x40a0
[  434.916801][T24862]  ? ieee80211_register_hw+0x1411/0x40a0
[  434.916813][T24862]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  434.916823][T24862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  434.916839][T24862]  ? __hrtimer_setup+0x187/0x210
[  434.916850][T24862]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  434.916862][T24862]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  434.916888][T24862]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  434.916898][T24862]  ? trace_kmalloc+0x1f/0xd0
[  434.916910][T24862]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  434.916920][T24862]  ? __x64_sys_sendmsg+0x19b/0x260
[  434.916928][T24862]  ? kstrndup+0xbf/0x160
[  434.916957][T24862]  hwsim_new_radio_nl+0xea4/0x1b10
[  434.916976][T24862]  ? __pfx___nla_validate_parse+0x10/0x10
[  434.917019][T24862]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  434.917034][T24862]  ? rcu_is_watching+0x15/0xb0
[  434.917048][T24862]  ? __nla_parse+0x40/0x60
[  434.917064][T24862]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  434.917078][T24862]  genl_family_rcv_msg_doit+0x215/0x300
[  434.917090][T24862]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  434.917105][T24862]  ? bpf_lsm_capable+0x9/0x20
[  434.917115][T24862]  ? security_capable+0x7e/0x2e0
[  434.917129][T24862]  genl_rcv_msg+0x60e/0x790
[  434.917141][T24862]  ? __pfx_genl_rcv_msg+0x10/0x10
[  434.917150][T24862]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  434.917168][T24862]  netlink_rcv_skb+0x208/0x470
[  434.917178][T24862]  ? __lock_acquire+0xab9/0xd20
[  434.917191][T24862]  ? __pfx_genl_rcv_msg+0x10/0x10
[  434.917199][T24862]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  434.917219][T24862]  ? down_read+0x1ad/0x2e0
[  434.917228][T24862]  genl_rcv+0x28/0x40
[  434.917235][T24862]  netlink_unicast+0x82f/0x9e0
[  434.917250][T24862]  ? __pfx_netlink_unicast+0x10/0x10
[  434.917261][T24862]  ? netlink_sendmsg+0x642/0xb30
[  434.917270][T24862]  ? skb_put+0x11b/0x210
[  434.917284][T24862]  netlink_sendmsg+0x805/0xb30
[  434.917299][T24862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.917312][T24862]  ? aa_sock_msg_perm+0xf1/0x1d0
[  434.917323][T24862]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  434.917330][T24862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.917355][T24862]  __sock_sendmsg+0x21c/0x270
[  434.917369][T24862]  ____sys_sendmsg+0x505/0x830
[  434.917379][T24862]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.917391][T24862]  ? import_iovec+0x74/0xa0
[  434.917409][T24862]  ___sys_sendmsg+0x21f/0x2a0
[  434.917417][T24862]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.917443][T24862]  ? __fget_files+0x2a/0x420
[  434.917452][T24862]  ? __fget_files+0x3a0/0x420
[  434.917464][T24862]  __x64_sys_sendmsg+0x19b/0x260
[  434.917474][T24862]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.917492][T24862]  ? do_syscall_64+0xbe/0xfa0
[  434.917511][T24862]  do_syscall_64+0xfa/0xfa0
[  434.917526][T24862]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.917541][T24862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.917549][T24862]  ? exc_page_fault+0xab/0x100
[  434.917561][T24862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.917569][T24862] RIP: 0033:0x7fd516d8eba9
[  434.917578][T24862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  434.917584][T24862] RSP: 002b:00007fd514ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.917594][T24862] RAX: ffffffffffffffda RBX: 00007fd516fd5fa0 RCX: 00007fd516d8eba9
[  434.917600][T24862] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  434.917604][T24862] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  434.917609][T24862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.917613][T24862] R13: 00007fd516fd6038 R14: 00007fd516fd5fa0 R15: 00007ffcfde3c328
[  434.917628][T24862]  </TASK>
[  435.611841][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.614254][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.621344][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.623877][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.626390][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.631420][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.634534][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  435.643485][T24876] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[  436.125233][T24907] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  436.130380][T24907] CPU: 1 UID: 0 PID: 24907 Comm: syz.0.4600 Not tainted syzkaller #0 PREEMPT(full) 
[  436.130393][T24907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  436.130399][T24907] Call Trace:
[  436.130404][T24907]  <TASK>
[  436.130409][T24907]  dump_stack_lvl+0x189/0x250
[  436.130429][T24907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.130439][T24907]  ? __pfx__printk+0x10/0x10
[  436.130454][T24907]  ? kernfs_path_from_node+0x2f/0x290
[  436.130467][T24907]  ? kernfs_path_from_node+0x250/0x290
[  436.130476][T24907]  ? kernfs_path_from_node+0x2f/0x290
[  436.130488][T24907]  sysfs_warn_dup+0x8e/0xa0
[  436.130499][T24907]  sysfs_do_create_link_sd+0xc0/0x110
[  436.130510][T24907]  device_add_class_symlinks+0x1cf/0x240
[  436.130523][T24907]  device_add+0x475/0xb50
[  436.130535][T24907]  wiphy_register+0x1c81/0x2aa0
[  436.130557][T24907]  ? __pfx_wiphy_register+0x10/0x10
[  436.130567][T24907]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  436.130581][T24907]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  436.130593][T24907]  ieee80211_register_hw+0x3442/0x40a0
[  436.130611][T24907]  ? ieee80211_register_hw+0x1411/0x40a0
[  436.130624][T24907]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  436.130634][T24907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  436.130650][T24907]  ? __hrtimer_setup+0x187/0x210
[  436.130662][T24907]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  436.130675][T24907]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  436.130703][T24907]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  436.130713][T24907]  ? trace_kmalloc+0x1f/0xd0
[  436.130723][T24907]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  436.130733][T24907]  ? __x64_sys_sendmsg+0x19b/0x260
[  436.130741][T24907]  ? kstrndup+0xbf/0x160
[  436.130755][T24907]  hwsim_new_radio_nl+0xea4/0x1b10
[  436.130768][T24907]  ? __pfx___nla_validate_parse+0x10/0x10
[  436.130789][T24907]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  436.130803][T24907]  ? rcu_is_watching+0x15/0xb0
[  436.130817][T24907]  ? __nla_parse+0x40/0x60
[  436.130829][T24907]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  436.130843][T24907]  genl_family_rcv_msg_doit+0x215/0x300
[  436.130855][T24907]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  436.130870][T24907]  ? bpf_lsm_capable+0x9/0x20
[  436.130880][T24907]  ? security_capable+0x7e/0x2e0
[  436.130921][T24907]  genl_rcv_msg+0x60e/0x790
[  436.130935][T24907]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.130944][T24907]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  436.130965][T24907]  netlink_rcv_skb+0x208/0x470
[  436.130977][T24907]  ? __lock_acquire+0xab9/0xd20
[  436.130988][T24907]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.130997][T24907]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.131017][T24907]  ? down_read+0x1ad/0x2e0
[  436.131026][T24907]  genl_rcv+0x28/0x40
[  436.131034][T24907]  netlink_unicast+0x82f/0x9e0
[  436.131048][T24907]  ? __pfx_netlink_unicast+0x10/0x10
[  436.131059][T24907]  ? netlink_sendmsg+0x642/0xb30
[  436.131068][T24907]  ? skb_put+0x11b/0x210
[  436.131082][T24907]  netlink_sendmsg+0x805/0xb30
[  436.131098][T24907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.131126][T24907]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.131140][T24907]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.131154][T24907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.131166][T24907]  __sock_sendmsg+0x21c/0x270
[  436.131180][T24907]  ____sys_sendmsg+0x505/0x830
[  436.131192][T24907]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.131204][T24907]  ? import_iovec+0x74/0xa0
[  436.131217][T24907]  ___sys_sendmsg+0x21f/0x2a0
[  436.131226][T24907]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.131255][T24907]  ? __fget_files+0x2a/0x420
[  436.131263][T24907]  ? __fget_files+0x3a0/0x420
[  436.131276][T24907]  __x64_sys_sendmsg+0x19b/0x260
[  436.131285][T24907]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  436.131301][T24907]  ? do_syscall_64+0xbe/0xfa0
[  436.131315][T24907]  do_syscall_64+0xfa/0xfa0
[  436.131325][T24907]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.131336][T24907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.131344][T24907]  ? exc_page_fault+0xab/0x100
[  436.131355][T24907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.131363][T24907] RIP: 0033:0x7f8f6298eba9
[  436.131371][T24907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.131378][T24907] RSP: 002b:00007f8f638f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.131387][T24907] RAX: ffffffffffffffda RBX: 00007f8f62bd5fa0 RCX: 00007f8f6298eba9
[  436.131393][T24907] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  436.131398][T24907] RBP: 00007f8f62a11e19 R08: 0000000000000000 R09: 0000000000000000
[  436.131403][T24907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.131408][T24907] R13: 00007f8f62bd6038 R14: 00007f8f62bd5fa0 R15: 00007ffc1f0cf3f8
[  436.131424][T24907]  </TASK>
[  436.140085][T24895] validate_nla: 3 callbacks suppressed
[  436.140096][T24895] netlink: 'syz.2.4598': attribute type 10 has an invalid length.
[  436.363740][T24921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'.
[  436.368471][T24921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4603'.
[  436.393724][T24921] netlink: 'syz.2.4603': attribute type 10 has an invalid length.
[  436.447564][T24910] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  436.468212][T24925] netlink: 'syz.0.4604': attribute type 16 has an invalid length.
[  436.484583][T24925] netlink: 'syz.0.4604': attribute type 17 has an invalid length.
[  436.831611][T24959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  436.835569][T24959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  436.862038][T24969] mac80211_hwsim hwsim175 wlan0: left promiscuous mode
[  436.864675][T24969] ip6gre1: left allmulticast mode
[  438.511247][T25032] __nla_validate_parse: 14 callbacks suppressed
[  438.511262][T25032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4627'.
[  438.522352][T25032] netlink: 'syz.1.4627': attribute type 10 has an invalid length.
[  438.529472][T25032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  438.533106][T25032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  439.334584][T25060] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4631'.
[  439.338941][T25060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4631'.
[  439.420334][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'.
[  439.583221][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'.
[  439.613383][T25081] IPVS: set_ctl: invalid protocol: 217 172.20.20.187:20003
[  439.929878][T25092] netlink: 'syz.2.4641': attribute type 10 has an invalid length.
[  440.003793][T25102] netlink: 'syz.2.4642': attribute type 23 has an invalid length.
[  440.109453][T25106] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  440.114033][T25106] CPU: 0 UID: 0 PID: 25106 Comm: syz.2.4644 Not tainted syzkaller #0 PREEMPT(full) 
[  440.114047][T25106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.114053][T25106] Call Trace:
[  440.114057][T25106]  <TASK>
[  440.114063][T25106]  dump_stack_lvl+0x189/0x250
[  440.114081][T25106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.114091][T25106]  ? __pfx__printk+0x10/0x10
[  440.114107][T25106]  ? kernfs_path_from_node+0x2f/0x290
[  440.114119][T25106]  ? kernfs_path_from_node+0x250/0x290
[  440.114129][T25106]  ? kernfs_path_from_node+0x2f/0x290
[  440.114142][T25106]  sysfs_warn_dup+0x8e/0xa0
[  440.114152][T25106]  sysfs_do_create_link_sd+0xc0/0x110
[  440.114164][T25106]  device_add_class_symlinks+0x1cf/0x240
[  440.114178][T25106]  device_add+0x475/0xb50
[  440.114191][T25106]  wiphy_register+0x1c81/0x2aa0
[  440.114213][T25106]  ? __pfx_wiphy_register+0x10/0x10
[  440.114224][T25106]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  440.114236][T25106]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  440.114248][T25106]  ieee80211_register_hw+0x3442/0x40a0
[  440.114265][T25106]  ? ieee80211_register_hw+0x1411/0x40a0
[  440.114277][T25106]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  440.114288][T25106]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  440.114302][T25106]  ? __hrtimer_setup+0x187/0x210
[  440.114314][T25106]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  440.114325][T25106]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  440.114352][T25106]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  440.114362][T25106]  ? trace_kmalloc+0x1f/0xd0
[  440.114372][T25106]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  440.114382][T25106]  ? __x64_sys_sendmsg+0x19b/0x260
[  440.114390][T25106]  ? kstrndup+0xbf/0x160
[  440.114403][T25106]  hwsim_new_radio_nl+0xea4/0x1b10
[  440.114417][T25106]  ? __pfx___nla_validate_parse+0x10/0x10
[  440.114435][T25106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  440.114450][T25106]  ? rcu_is_watching+0x15/0xb0
[  440.114466][T25106]  ? __nla_parse+0x40/0x60
[  440.114479][T25106]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  440.114492][T25106]  genl_family_rcv_msg_doit+0x215/0x300
[  440.114504][T25106]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  440.114520][T25106]  ? bpf_lsm_capable+0x9/0x20
[  440.114529][T25106]  ? security_capable+0x7e/0x2e0
[  440.114583][T25106]  genl_rcv_msg+0x60e/0x790
[  440.114599][T25106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  440.114608][T25106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  440.114629][T25106]  netlink_rcv_skb+0x208/0x470
[  440.114641][T25106]  ? __lock_acquire+0xab9/0xd20
[  440.114651][T25106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  440.114660][T25106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  440.114681][T25106]  ? down_read+0x1ad/0x2e0
[  440.114690][T25106]  genl_rcv+0x28/0x40
[  440.114697][T25106]  netlink_unicast+0x82f/0x9e0
[  440.114712][T25106]  ? __pfx_netlink_unicast+0x10/0x10
[  440.114723][T25106]  ? netlink_sendmsg+0x642/0xb30
[  440.114733][T25106]  ? skb_put+0x11b/0x210
[  440.114748][T25106]  netlink_sendmsg+0x805/0xb30
[  440.114765][T25106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.114777][T25106]  ? aa_sock_msg_perm+0xf1/0x1d0
[  440.114788][T25106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  440.114795][T25106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.114807][T25106]  __sock_sendmsg+0x21c/0x270
[  440.114827][T25106]  ____sys_sendmsg+0x505/0x830
[  440.114839][T25106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  440.114852][T25106]  ? import_iovec+0x74/0xa0
[  440.114864][T25106]  ___sys_sendmsg+0x21f/0x2a0
[  440.114874][T25106]  ? __pfx____sys_sendmsg+0x10/0x10
[  440.114903][T25106]  ? __fget_files+0x2a/0x420
[  440.114911][T25106]  ? __fget_files+0x3a0/0x420
[  440.114924][T25106]  __x64_sys_sendmsg+0x19b/0x260
[  440.114933][T25106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  440.114949][T25106]  ? do_syscall_64+0xbe/0xfa0
[  440.114963][T25106]  do_syscall_64+0xfa/0xfa0
[  440.114972][T25106]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.114983][T25106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.114991][T25106]  ? exc_page_fault+0xab/0x100
[  440.115003][T25106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.115010][T25106] RIP: 0033:0x7f98d018eba9
[  440.115021][T25106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.115036][T25106] RSP: 002b:00007f98d0fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.115051][T25106] RAX: ffffffffffffffda RBX: 00007f98d03d5fa0 RCX: 00007f98d018eba9
[  440.115063][T25106] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  440.115073][T25106] RBP: 00007f98d0211e19 R08: 0000000000000000 R09: 0000000000000000
[  440.115082][T25106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.115089][T25106] R13: 00007f98d03d6038 R14: 00007f98d03d5fa0 R15: 00007ffcb01a2c08
[  440.115115][T25106]  </TASK>
[  440.306647][T25108] netlink: 'syz.0.4645': attribute type 16 has an invalid length.
[  440.310476][T25108] netlink: 'syz.0.4645': attribute type 17 has an invalid length.
[  440.313618][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'.
[  440.320651][T25108] IPv6: NLM_F_REPLACE set, but no existing node found!
[  440.578597][T25121] netlink: 'syz.1.4649': attribute type 10 has an invalid length.
[  440.584671][T25121] mac80211_hwsim hwsim405 wlan1: entered allmulticast mode
[  440.591123][T25123] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4650'.
[  441.093548][T25140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  441.097755][T25140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  441.480666][T25158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4659'.
[  441.557393][T25161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.561060][T25161] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  441.563512][T25161] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  441.566427][T25161] tipc: Resetting bearer <eth:syzkaller0>
[  441.572999][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'.
[  441.690791][T25167] validate_nla: 2 callbacks suppressed
[  441.690805][T25167] netlink: 'syz.1.4662': attribute type 10 has an invalid length.
[  441.703111][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4661'.
[  441.918335][T25185] netlink: 'syz.2.4666': attribute type 10 has an invalid length.
[  441.984821][T25191] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  441.995579][T25191] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  442.004272][T25200] mac80211_hwsim hwsim405 wlan1: left allmulticast mode
[  442.015871][T25200] netlink: 'syz.1.4669': attribute type 10 has an invalid length.
[  442.254745][T25210] sctp: [Deprecated]: syz.1.4672 (pid 25210) Use of int in max_burst socket option.
[  442.254745][T25210] Use struct sctp_assoc_value instead
[  442.715121][T25227] tipc: Resetting bearer <eth:syzkaller0>
[  443.143091][T25248] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  443.358721][T25262] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  443.364163][T25262] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  443.712847][T25269] __nla_validate_parse: 9 callbacks suppressed
[  443.712861][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4685'.
[  443.713792][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4685'.
[  443.771128][T25275] netlink: 'syz.0.4686': attribute type 10 has an invalid length.
[  443.828828][T25275] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  443.831947][T25275] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  443.835947][T25275] tipc: Resetting bearer <eth:syzkaller0>
[  444.310205][T25311] netlink: 'syz.1.4693': attribute type 10 has an invalid length.
[  444.355363][T25311] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.362883][T25311] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.629790][T25345] netlink: 'syz.2.4699': attribute type 12 has an invalid length.
[  444.689300][T25344] netlink: 'syz.0.4700': attribute type 23 has an invalid length.
[  444.782891][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4701'.
[  444.786611][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4701'.
[  445.200487][T25372] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.4705'.
[  445.212952][T25371] netlink: 'syz.1.4705': attribute type 10 has an invalid length.
[  445.370348][T25377] netlink: 'syz.1.4707': attribute type 10 has an invalid length.
[  445.401451][T25381] netlink: 'syz.1.4708': attribute type 10 has an invalid length.
[  445.439684][T25381] tipc: Resetting bearer <eth:syzkaller0>
[  445.947364][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'.
[  445.951755][T25427] tipc: Resetting bearer <eth:syzkaller0>
[  445.973784][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4714'.
[  446.101273][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4719'.
[  446.242672][T25439] netlink: 11188 bytes leftover after parsing attributes in process `syz.0.4719'.
[  446.491924][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'.
[  446.997916][T25474] validate_nla: 2 callbacks suppressed
[  446.997927][T25474] netlink: 'syz.0.4728': attribute type 10 has an invalid length.
[  447.003558][T25474] mac80211_hwsim hwsim433 wlan1: entered allmulticast mode
[  447.009398][T25476] netlink: 'syz.1.4729': attribute type 21 has an invalid length.
[  447.012672][T25476] netlink: 'syz.1.4729': attribute type 1 has an invalid length.
[  447.016757][T25476] netlink: 'syz.1.4729': attribute type 10 has an invalid length.
[  447.021909][T25476] dummy0: entered promiscuous mode
[  447.031480][T25476] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  447.060481][T25478] mac80211_hwsim hwsim433 wlan1: left allmulticast mode
[  447.082142][T25478] netlink: 'syz.0.4730': attribute type 10 has an invalid length.
[  447.092469][T25478] mac80211_hwsim hwsim433 wlan1: entered allmulticast mode
[  447.394789][T25499] netlink: 'syz.1.4735': attribute type 3 has an invalid length.
[  447.524546][T25506] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.529928][T25506] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  447.532707][T25506] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  447.535632][T25506] tipc: Resetting bearer <eth:syzkaller0>
[  447.594331][T25510] netlink: 'syz.2.4738': attribute type 1 has an invalid length.
[  447.598370][T25510] netlink: 'syz.2.4738': attribute type 1 has an invalid length.
[  448.024681][T25528] xt_bpf: check failed: parse error
[  448.725011][T25598] __nla_validate_parse: 11 callbacks suppressed
[  448.725028][T25598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4758'.
[  448.735142][T25597] netlink: 'syz.1.4757': attribute type 9 has an invalid length.
[  448.853242][T25603] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  448.856160][T25603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  448.880694][T25603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  448.950378][T25615] netlink: 'syz.0.4764': attribute type 10 has an invalid length.
[  448.960930][T25615] tipc: Resetting bearer <eth:batadv0>
[  448.969288][T25615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.973274][T25615] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  448.985544][T25606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'.
[  448.989946][T25615] tipc: Resetting bearer <eth:batadv0>
[  448.993291][T25615] tipc: Resetting bearer <eth:syzkaller0>
[  449.012079][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'.
[  449.069613][T25629] IPv6: NLM_F_REPLACE set, but no existing node found!
[  449.128733][T25633] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4768'.
[  449.421648][T25644] tipc: Resetting bearer <eth:syzkaller0>
[  449.534377][T25660] dummy0: left promiscuous mode
[  449.543896][T25660] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  449.553890][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4776'.
[  449.625314][T25674] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  449.728442][T25683] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  449.859265][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'.
[  449.885354][T25693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'.
[  449.919015][T25700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4785'.
[  449.936706][T25700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4785'.
[  450.011575][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4788'.
[  450.032000][T25708] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  450.036733][T25708] CPU: 0 UID: 0 PID: 25708 Comm: syz.0.4788 Not tainted syzkaller #0 PREEMPT(full) 
[  450.036783][T25708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  450.036794][T25708] Call Trace:
[  450.036801][T25708]  <TASK>
[  450.036810][T25708]  dump_stack_lvl+0x189/0x250
[  450.036837][T25708]  ? __pfx_dump_stack_lvl+0x10/0x10
[  450.036853][T25708]  ? __pfx__printk+0x10/0x10
[  450.036877][T25708]  ? kernfs_path_from_node+0x2f/0x290
[  450.036896][T25708]  ? kernfs_path_from_node+0x250/0x290
[  450.036913][T25708]  ? kernfs_path_from_node+0x2f/0x290
[  450.036936][T25708]  sysfs_warn_dup+0x8e/0xa0
[  450.036974][T25708]  sysfs_do_create_link_sd+0xc0/0x110
[  450.037002][T25708]  device_add_class_symlinks+0x1cf/0x240
[  450.037025][T25708]  device_add+0x475/0xb50
[  450.037048][T25708]  wiphy_register+0x1c81/0x2aa0
[  450.037084][T25708]  ? __pfx_wiphy_register+0x10/0x10
[  450.037103][T25708]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  450.037126][T25708]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  450.037145][T25708]  ieee80211_register_hw+0x3442/0x40a0
[  450.037173][T25708]  ? ieee80211_register_hw+0x1411/0x40a0
[  450.037198][T25708]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  450.037217][T25708]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  450.037244][T25708]  ? __hrtimer_setup+0x187/0x210
[  450.037265][T25708]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  450.037284][T25708]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  450.037333][T25708]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  450.037353][T25708]  ? trace_kmalloc+0x1f/0xd0
[  450.037369][T25708]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  450.037386][T25708]  ? __x64_sys_sendmsg+0x19b/0x260
[  450.037400][T25708]  ? kstrndup+0xbf/0x160
[  450.037424][T25708]  hwsim_new_radio_nl+0xea4/0x1b10
[  450.037452][T25708]  ? __pfx___nla_validate_parse+0x10/0x10
[  450.037486][T25708]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  450.037513][T25708]  ? rcu_is_watching+0x15/0xb0
[  450.037539][T25708]  ? __nla_parse+0x40/0x60
[  450.037563][T25708]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  450.037587][T25708]  genl_family_rcv_msg_doit+0x215/0x300
[  450.037610][T25708]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  450.037632][T25708]  ? bpf_lsm_capable+0x9/0x20
[  450.037650][T25708]  ? security_capable+0x7e/0x2e0
[  450.037672][T25708]  genl_rcv_msg+0x60e/0x790
[  450.037693][T25708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.037707][T25708]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  450.037766][T25708]  netlink_rcv_skb+0x208/0x470
[  450.037787][T25708]  ? __lock_acquire+0xab9/0xd20
[  450.037807][T25708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.037823][T25708]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.037860][T25708]  ? down_read+0x1ad/0x2e0
[  450.037877][T25708]  genl_rcv+0x28/0x40
[  450.037890][T25708]  netlink_unicast+0x82f/0x9e0
[  450.037916][T25708]  ? __pfx_netlink_unicast+0x10/0x10
[  450.037936][T25708]  ? netlink_sendmsg+0x642/0xb30
[  450.037953][T25708]  ? skb_put+0x11b/0x210
[  450.037977][T25708]  netlink_sendmsg+0x805/0xb30
[  450.038014][T25708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.038038][T25708]  ? aa_sock_msg_perm+0xf1/0x1d0
[  450.038057][T25708]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.038070][T25708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.038091][T25708]  __sock_sendmsg+0x21c/0x270
[  450.038111][T25708]  ____sys_sendmsg+0x505/0x830
[  450.038130][T25708]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.038152][T25708]  ? import_iovec+0x74/0xa0
[  450.038170][T25708]  ___sys_sendmsg+0x21f/0x2a0
[  450.038187][T25708]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.038234][T25708]  ? __fget_files+0x2a/0x420
[  450.038248][T25708]  ? __fget_files+0x3a0/0x420
[  450.038271][T25708]  __x64_sys_sendmsg+0x19b/0x260
[  450.038287][T25708]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.038316][T25708]  ? do_syscall_64+0xbe/0xfa0
[  450.038339][T25708]  do_syscall_64+0xfa/0xfa0
[  450.038358][T25708]  ? lockdep_hardirqs_on+0x9c/0x150
[  450.038377][T25708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.038391][T25708]  ? exc_page_fault+0xab/0x100
[  450.038412][T25708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.038425][T25708] RIP: 0033:0x7f8f6298eba9
[  450.038439][T25708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.038452][T25708] RSP: 002b:00007f8f638f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.038469][T25708] RAX: ffffffffffffffda RBX: 00007f8f62bd5fa0 RCX: 00007f8f6298eba9
[  450.038479][T25708] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  450.038489][T25708] RBP: 00007f8f62a11e19 R08: 0000000000000000 R09: 0000000000000000
[  450.038498][T25708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  450.038506][T25708] R13: 00007f8f62bd6038 R14: 00007f8f62bd5fa0 R15: 00007ffc1f0cf3f8
[  450.038533][T25708]  </TASK>
[  450.340896][T25717] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  450.343284][T25717] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  450.345953][T25716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.639336][T25740] netlink: 'syz.0.4796': attribute type 11 has an invalid length.
[  451.029158][T25758] syzkaller1: entered promiscuous mode
[  451.033841][T25758] syzkaller1: entered allmulticast mode
[  451.304894][T25775] mac80211_hwsim hwsim440 wlan1: entered allmulticast mode
[  451.651473][T25817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  451.852859][T25838] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  451.856455][T25838] tipc: Resetting bearer <eth:syzkaller0>
[  452.309530][T25879] validate_nla: 11 callbacks suppressed
[  452.309546][T25879] netlink: 'syz.0.4831': attribute type 10 has an invalid length.
[  452.316455][T25879] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  452.321653][T25879] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  452.325317][T25879] tipc: Resetting bearer <eth:syzkaller0>
[  452.521621][T25884] tipc: Resetting bearer <eth:syzkaller0>
[  452.535214][T25884] mac80211_hwsim hwsim440 wlan1: left allmulticast mode
[  452.905017][T25918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.914905][T25918] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  452.919388][T25918] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  452.922076][T25918] tipc: Resetting bearer <eth:syzkaller0>
[  452.961608][T25920] tipc: Resetting bearer <eth:syzkaller0>
[  453.076838][T25925] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  453.081721][T25925] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  453.134299][T25931] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  453.140042][T25931] CPU: 1 UID: 0 PID: 25931 Comm: syz.1.4845 Not tainted syzkaller #0 PREEMPT(full) 
[  453.140065][T25931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  453.140075][T25931] Call Trace:
[  453.140082][T25931]  <TASK>
[  453.140089][T25931]  dump_stack_lvl+0x189/0x250
[  453.140117][T25931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.140136][T25931]  ? __pfx__printk+0x10/0x10
[  453.140155][T25931]  ? kernfs_path_from_node+0x2f/0x290
[  453.140173][T25931]  ? kernfs_path_from_node+0x250/0x290
[  453.140190][T25931]  ? kernfs_path_from_node+0x2f/0x290
[  453.140212][T25931]  sysfs_warn_dup+0x8e/0xa0
[  453.140227][T25931]  sysfs_do_create_link_sd+0xc0/0x110
[  453.140238][T25931]  device_add_class_symlinks+0x1cf/0x240
[  453.140250][T25931]  device_add+0x475/0xb50
[  453.140262][T25931]  wiphy_register+0x1c81/0x2aa0
[  453.140287][T25931]  ? __pfx_wiphy_register+0x10/0x10
[  453.140309][T25931]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  453.140333][T25931]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  453.140352][T25931]  ieee80211_register_hw+0x3442/0x40a0
[  453.140374][T25931]  ? ieee80211_register_hw+0x1411/0x40a0
[  453.140397][T25931]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  453.140417][T25931]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  453.140441][T25931]  ? __hrtimer_setup+0x187/0x210
[  453.140454][T25931]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  453.140472][T25931]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  453.140552][T25931]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  453.140575][T25931]  ? trace_kmalloc+0x1f/0xd0
[  453.140595][T25931]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  453.140614][T25931]  ? __x64_sys_sendmsg+0x19b/0x260
[  453.140625][T25931]  ? kstrndup+0xbf/0x160
[  453.140652][T25931]  hwsim_new_radio_nl+0xea4/0x1b10
[  453.140678][T25931]  ? __pfx___nla_validate_parse+0x10/0x10
[  453.140714][T25931]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.140733][T25931]  ? rcu_is_watching+0x15/0xb0
[  453.140760][T25931]  ? __nla_parse+0x40/0x60
[  453.140792][T25931]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  453.140818][T25931]  genl_family_rcv_msg_doit+0x215/0x300
[  453.140844][T25931]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  453.140864][T25931]  ? bpf_lsm_capable+0x9/0x20
[  453.140885][T25931]  ? security_capable+0x7e/0x2e0
[  453.140910][T25931]  genl_rcv_msg+0x60e/0x790
[  453.140933][T25931]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.140948][T25931]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  453.140981][T25931]  netlink_rcv_skb+0x208/0x470
[  453.140993][T25931]  ? __lock_acquire+0xab9/0xd20
[  453.141013][T25931]  ? __pfx_genl_rcv_msg+0x10/0x10
[  453.141028][T25931]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.141065][T25931]  ? down_read+0x1ad/0x2e0
[  453.141082][T25931]  genl_rcv+0x28/0x40
[  453.141097][T25931]  netlink_unicast+0x82f/0x9e0
[  453.141118][T25931]  ? __pfx_netlink_unicast+0x10/0x10
[  453.141140][T25931]  ? netlink_sendmsg+0x642/0xb30
[  453.141159][T25931]  ? skb_put+0x11b/0x210
[  453.141183][T25931]  netlink_sendmsg+0x805/0xb30
[  453.141214][T25931]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.141235][T25931]  ? aa_sock_msg_perm+0xf1/0x1d0
[  453.141248][T25931]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.141263][T25931]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.141285][T25931]  __sock_sendmsg+0x21c/0x270
[  453.141306][T25931]  ____sys_sendmsg+0x505/0x830
[  453.141327][T25931]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.141350][T25931]  ? import_iovec+0x74/0xa0
[  453.141364][T25931]  ___sys_sendmsg+0x21f/0x2a0
[  453.141376][T25931]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.141424][T25931]  ? __fget_files+0x2a/0x420
[  453.141439][T25931]  ? __fget_files+0x3a0/0x420
[  453.141463][T25931]  __x64_sys_sendmsg+0x19b/0x260
[  453.141482][T25931]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  453.141545][T25931]  ? do_syscall_64+0xbe/0xfa0
[  453.141573][T25931]  do_syscall_64+0xfa/0xfa0
[  453.141594][T25931]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.141614][T25931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.141623][T25931]  ? exc_page_fault+0xab/0x100
[  453.141642][T25931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.141656][T25931] RIP: 0033:0x7fd516d8eba9
[  453.141669][T25931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.141682][T25931] RSP: 002b:00007fd514ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.141699][T25931] RAX: ffffffffffffffda RBX: 00007fd516fd5fa0 RCX: 00007fd516d8eba9
[  453.141710][T25931] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  453.141720][T25931] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  453.141729][T25931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.141738][T25931] R13: 00007fd516fd6038 R14: 00007fd516fd5fa0 R15: 00007ffcfde3c328
[  453.141758][T25931]  </TASK>
[  453.434193][T25941] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  453.569614][T25951] netlink: 'syz.0.4851': attribute type 10 has an invalid length.
[  453.585325][T25953] netlink: 'syz.1.4852': attribute type 10 has an invalid length.
[  453.593858][T25953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  453.597318][T25953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  453.921873][T25977] netlink: 'syz.0.4858': attribute type 16 has an invalid length.
[  453.924475][T25977] netlink: 'syz.0.4858': attribute type 17 has an invalid length.
[  453.929576][T25977] __nla_validate_parse: 20 callbacks suppressed
[  453.929588][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4858'.
[  453.958244][T25977] IPv6: NLM_F_REPLACE set, but no existing node found!
[  453.996820][T25980] netlink: 'syz.0.4859': attribute type 10 has an invalid length.
[  454.462365][T25984] netlink: 'syz.1.4860': attribute type 16 has an invalid length.
[  454.465715][T25984] netlink: 'syz.1.4860': attribute type 17 has an invalid length.
[  454.471185][T25984] lo: entered promiscuous mode
[  454.473206][T25984] lo: entered allmulticast mode
[  454.475744][T25984] tunl0: entered promiscuous mode
[  454.479788][T25984] tunl0: entered allmulticast mode
[  454.482737][T25984] gre0: entered promiscuous mode
[  454.484861][T25984] gre0: entered allmulticast mode
[  454.487520][T25984] gretap0: entered promiscuous mode
[  454.490441][T25984] gretap0: entered allmulticast mode
[  454.493768][T25984] erspan0: entered promiscuous mode
[  454.495618][T25984] erspan0: entered allmulticast mode
[  454.498871][T25984] ip_vti0: entered promiscuous mode
[  454.500657][T25984] ip_vti0: entered allmulticast mode
[  454.502523][T25984] ip6_vti0: entered promiscuous mode
[  454.504323][T25984] ip6_vti0: entered allmulticast mode
[  454.506233][T25984] sit0: entered promiscuous mode
[  454.508205][T25984] sit0: entered allmulticast mode
[  454.510006][T25984] ip6tnl0: entered promiscuous mode
[  454.511761][T25984] ip6tnl0: entered allmulticast mode
[  454.513988][T25984] ip6gre0: entered promiscuous mode
[  454.515899][T25984] ip6gre0: entered allmulticast mode
[  454.519295][T25984] syz_tun: entered promiscuous mode
[  454.521217][T25984] syz_tun: entered allmulticast mode
[  454.523206][T25984] ip6gretap0: entered promiscuous mode
[  454.525063][T25984] ip6gretap0: entered allmulticast mode
[  454.527367][T25984] team0: entered promiscuous mode
[  454.529207][T25984] team0: entered allmulticast mode
[  454.531190][T25984] dummy0: entered promiscuous mode
[  454.533055][T25984] dummy0: entered allmulticast mode
[  454.534998][T25984] nlmon0: entered promiscuous mode
[  454.536755][T25984] nlmon0: entered allmulticast mode
[  454.540233][T25984] caif0: entered promiscuous mode
[  454.542169][T25984] caif0: entered allmulticast mode
[  454.544149][T25984] batadv0: entered promiscuous mode
[  454.545938][T25984] batadv0: entered allmulticast mode
[  454.548162][T25984] veth0: entered promiscuous mode
[  454.550119][T25984] veth0: entered allmulticast mode
[  454.551960][T25984] veth1: entered promiscuous mode
[  454.553858][T25984] veth1: entered allmulticast mode
[  454.556027][T25984] wg0: entered promiscuous mode
[  454.559987][T25984] wg0: entered allmulticast mode
[  454.562178][T25984] wg1: entered promiscuous mode
[  454.564498][T25984] wg1: entered allmulticast mode
[  454.566461][T25984] wg2: entered promiscuous mode
[  454.568506][T25984] wg2: entered allmulticast mode
[  454.570492][T25984] veth0_to_bridge: entered promiscuous mode
[  454.572655][T25984] veth0_to_bridge: entered allmulticast mode
[  454.575270][T25984] bridge_slave_0: entered promiscuous mode
[  454.579183][T25984] bridge_slave_0: entered allmulticast mode
[  454.581637][T25984] veth1_to_bridge: entered promiscuous mode
[  454.583716][T25984] veth1_to_bridge: entered allmulticast mode
[  454.585874][T25984] bridge_slave_1: entered promiscuous mode
[  454.588244][T25984] bridge_slave_1: entered allmulticast mode
[  454.590576][T25984] veth0_to_bond: entered promiscuous mode
[  454.592838][T25984] veth0_to_bond: entered allmulticast mode
[  454.594901][T25984] bond_slave_0: entered promiscuous mode
[  454.597591][T25984] bond_slave_0: entered allmulticast mode
[  454.599985][T25984] veth1_to_bond: entered promiscuous mode
[  454.602163][T25984] veth1_to_bond: entered allmulticast mode
[  454.604424][T25984] bond_slave_1: entered promiscuous mode
[  454.606471][T25984] bond_slave_1: entered allmulticast mode
[  454.609007][T25984] veth1_to_team: entered promiscuous mode
[  454.611157][T25984] veth1_to_team: entered allmulticast mode
[  454.613299][T25984] team_slave_1: entered promiscuous mode
[  454.615300][T25984] team_slave_1: entered allmulticast mode
[  454.618211][T25984] veth0_to_batadv: entered promiscuous mode
[  454.620312][T25984] veth0_to_batadv: entered allmulticast mode
[  454.623159][T25984] batadv_slave_0: entered promiscuous mode
[  454.625149][T25984] batadv_slave_0: entered allmulticast mode
[  454.628095][T25984] xfrm0: entered promiscuous mode
[  454.630027][T25984] xfrm0: entered allmulticast mode
[  454.632281][T25984] veth0_to_hsr: entered promiscuous mode
[  454.634476][T25984] veth0_to_hsr: entered allmulticast mode
[  454.652475][T25984] hsr_slave_0: entered promiscuous mode
[  454.654981][T25984] hsr_slave_0: entered allmulticast mode
[  454.657752][T25984] veth1_to_hsr: entered promiscuous mode
[  454.678202][T25984] veth1_to_hsr: entered allmulticast mode
[  454.680658][T25984] hsr_slave_1: entered promiscuous mode
[  454.683055][T25984] hsr_slave_1: entered allmulticast mode
[  454.685563][T25984] veth1_virt_wifi: entered promiscuous mode
[  454.689967][T25984] veth1_virt_wifi: entered allmulticast mode
[  454.692711][T25984] veth0_virt_wifi: entered promiscuous mode
[  454.695236][T25984] veth0_virt_wifi: entered allmulticast mode
[  454.699966][T25984] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  454.703232][T25984] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  454.706444][T25984] veth1_vlan: entered allmulticast mode
[  454.711129][T25984] veth0_vlan: entered allmulticast mode
[  454.713751][T25984] vlan1: entered promiscuous mode
[  454.716067][T25984] vlan1: entered allmulticast mode
[  454.719077][T25984] macvlan0: entered promiscuous mode
[  454.721142][T25984] macvlan0: entered allmulticast mode
[  454.724413][T25984] macvlan1: entered promiscuous mode
[  454.726436][T25984] macvlan1: entered allmulticast mode
[  454.729246][T25984] ipvlan0: entered promiscuous mode
[  454.732415][T25984] ipvlan0: entered allmulticast mode
[  454.735071][T25984] ipvlan1: entered promiscuous mode
[  454.737977][T25984] ipvlan1: entered allmulticast mode
[  454.740305][T25984] veth1_macvtap: entered allmulticast mode
[  454.742863][T25984] veth0_macvtap: entered allmulticast mode
[  454.745392][T25984] macvtap0: entered promiscuous mode
[  454.748244][T25984] macvtap0: entered allmulticast mode
[  454.750582][T25984] macsec0: entered promiscuous mode
[  454.752690][T25984] macsec0: entered allmulticast mode
[  454.754945][T25984] geneve0: entered promiscuous mode
[  454.760571][T25984] geneve0: entered allmulticast mode
[  454.764274][T25984] geneve1: entered promiscuous mode
[  454.766754][T25984] geneve1: entered allmulticast mode
[  454.772724][T25984] pimreg: entered promiscuous mode
[  454.775330][T25984] mac80211_hwsim hwsim8 wlan2: entered promiscuous mode
[  454.779928][T25984] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[  454.782540][T25984] mac80211_hwsim hwsim9 wlan3: entered promiscuous mode
[  454.785047][T25984] mac80211_hwsim hwsim9 wlan3: entered allmulticast mode
[  454.788691][T25984] bridge1: entered promiscuous mode
[  454.791256][T25984] bridge1: entered allmulticast mode
[  454.793801][T25984] mac80211_hwsim hwsim10 wlan4: entered promiscuous mode
[  454.796703][T25984] mac80211_hwsim hwsim10 wlan4: entered allmulticast mode
[  454.801049][T25984] mac80211_hwsim hwsim11 wlan5: entered promiscuous mode
[  454.803793][T25984] mac80211_hwsim hwsim11 wlan5: entered allmulticast mode
[  454.806886][T25984] mac80211_hwsim hwsim19 wlan6: entered promiscuous mode
[  454.809301][T25984] mac80211_hwsim hwsim19 wlan6: entered allmulticast mode
[  454.812146][T25984] pimreg3: entered promiscuous mode
[  454.814328][T25984] ip6gretap1: entered promiscuous mode
[  454.816132][T25984] ip6gretap1: entered allmulticast mode
[  454.823896][T25984] mac80211_hwsim hwsim35 wlan7: entered promiscuous mode
[  454.826584][T25984] mac80211_hwsim hwsim35 wlan7: entered allmulticast mode
[  454.830130][T25984] vti0: entered promiscuous mode
[  454.832754][T25984] vti0: entered allmulticast mode
[  454.836562][T25984] bridge2: entered promiscuous mode
[  454.838604][T25984] bridge2: entered allmulticast mode
[  454.840934][T25984] bridge3: entered promiscuous mode
[  454.844000][T25984] bridge3: entered allmulticast mode
[  454.846006][T25984] veth0_to_bond.2: entered promiscuous mode
[  454.848076][T25984] veth0_to_bond.2: entered allmulticast mode
[  454.850091][T25984] gre1: entered promiscuous mode
[  454.851745][T25984] gre1: entered allmulticast mode
[  454.853467][T25984] bond1: entered promiscuous mode
[  454.855210][T25984] bond1: entered allmulticast mode
[  454.857713][T25984] gretap1: entered promiscuous mode
[  454.859835][T25984] gretap1: entered allmulticast mode
[  454.862270][T25984] batadv_slave_0.: entered promiscuous mode
[  454.864214][T25984] batadv_slave_0.: entered allmulticast mode
[  454.866191][T25984] sit1: entered promiscuous mode
[  454.868260][T25984] sit1: entered allmulticast mode
[  454.870096][T25984] bridge4: entered promiscuous mode
[  454.871742][T25984] bridge4: entered allmulticast mode
[  454.873653][T25984] mac80211_hwsim hwsim62 wlan8: entered promiscuous mode
[  454.875886][T25984] mac80211_hwsim hwsim62 wlan8: entered allmulticast mode
[  454.878786][T25984] mac80211_hwsim hwsim69 wlan9: entered promiscuous mode
[  454.881465][T25984] mac80211_hwsim hwsim69 wlan9: entered allmulticast mode
[  454.884916][T25984] @: entered promiscuous mode
[  454.886815][T25984] @: entered allmulticast mode
[  454.889239][T25984] mac80211_hwsim hwsim84 wlan10: entered promiscuous mode
[  454.891917][T25984] mac80211_hwsim hwsim84 wlan10: entered allmulticast mode
[  454.894513][T25984] bridge5: entered promiscuous mode
[  454.896442][T25984] bridge5: entered allmulticast mode
[  454.898802][T25984] veth2: entered promiscuous mode
[  454.900848][T25984] veth2: entered allmulticast mode
[  454.902616][T25984] veth3: entered promiscuous mode
[  454.904222][T25984] veth3: entered allmulticast mode
[  454.905936][T25984] mac80211_hwsim hwsim85 wlan11: entered promiscuous mode
[  454.908413][T25984] mac80211_hwsim hwsim85 wlan11: entered allmulticast mode
[  454.911110][T25984] mac80211_hwsim hwsim86 wlan12: entered promiscuous mode
[  454.913417][T25984] mac80211_hwsim hwsim86 wlan12: entered allmulticast mode
[  454.915861][T25984] mac80211_hwsim hwsim88 wlan13: entered promiscuous mode
[  454.919092][T25984] mac80211_hwsim hwsim88 wlan13: entered allmulticast mode
[  454.921841][T25984] vxlan0: entered promiscuous mode
[  454.923530][T25984] vxlan0: entered allmulticast mode
[  454.925403][T25984] bridge6: entered promiscuous mode
[  454.927288][T25984] bridge6: entered allmulticast mode
[  454.929430][T25984] veth4: entered promiscuous mode
[  454.931073][T25984] veth4: entered allmulticast mode
[  454.933014][T25984] veth5: entered promiscuous mode
[  454.934717][T25984] veth5: entered allmulticast mode
[  454.936573][T25984] mac80211_hwsim hwsim96 wlan14: entered promiscuous mode
[  454.939542][T25984] mac80211_hwsim hwsim96 wlan14: entered allmulticast mode
[  454.942284][T25984] mac80211_hwsim hwsim100 wlan15: entered promiscuous mode
[  454.945215][T25984] mac80211_hwsim hwsim100 wlan15: entered allmulticast mode
[  454.948772][T25984] bridge7: entered promiscuous mode
[  454.950979][T25984] bridge7: entered allmulticast mode
[  454.952923][T25984] mac80211_hwsim hwsim104 wlan16: entered promiscuous mode
[  454.955444][T25984] mac80211_hwsim hwsim104 wlan16: entered allmulticast mode
[  454.958309][T25984] bridge8: entered promiscuous mode
[  454.960268][T25984] bridge8: entered allmulticast mode
[  454.962324][T25984] mac80211_hwsim hwsim108 wlan17: entered promiscuous mode
[  454.964934][T25984] mac80211_hwsim hwsim108 wlan17: entered allmulticast mode
[  454.968206][T25984] mac80211_hwsim hwsim143 wlan18: entered promiscuous mode
[  454.970916][T25984] mac80211_hwsim hwsim143 wlan18: entered allmulticast mode
[  454.973487][T25984] sit2: entered promiscuous mode
[  454.975253][T25984] sit2: entered allmulticast mode
[  454.978270][T25984] mac80211_hwsim hwsim149 wlan19: entered promiscuous mode
[  454.981211][T25984] mac80211_hwsim hwsim149 wlan19: entered allmulticast mode
[  454.984191][T25984] mac80211_hwsim hwsim166 wlan20: entered promiscuous mode
[  454.986531][T25984] mac80211_hwsim hwsim166 wlan20: entered allmulticast mode
[  454.989470][T25984] mac80211_hwsim hwsim169 wlan21: entered promiscuous mode
[  454.992124][T25984] mac80211_hwsim hwsim169 wlan21: entered allmulticast mode
[  454.994804][T25984] mac80211_hwsim hwsim175 wlan0: entered promiscuous mode
[  454.997148][T25984] mac80211_hwsim hwsim175 wlan0: entered allmulticast mode
[  454.999741][T25984] veth6: entered promiscuous mode
[  455.001389][T25984] veth6: entered allmulticast mode
[  455.003308][T25984] veth7: entered promiscuous mode
[  455.005177][T25984] veth7: entered allmulticast mode
[  455.007690][T25984] mac80211_hwsim hwsim188 wlan22: entered promiscuous mode
[  455.009968][T25984] mac80211_hwsim hwsim188 wlan22: entered allmulticast mode
[  455.012248][T25984] mac80211_hwsim hwsim189 wlan23: entered promiscuous mode
[  455.014549][T25984] mac80211_hwsim hwsim189 wlan23: entered allmulticast mode
[  455.019445][T25984] bridge9: entered promiscuous mode
[  455.022121][T25984] bridge9: entered allmulticast mode
[  455.024466][T25984] ip6tnl1: entered promiscuous mode
[  455.026685][T25984] ip6tnl1: entered allmulticast mode
[  455.028943][T25984] ieee802154 phy1 wpan1: entered promiscuous mode
[  455.031272][T25984] ieee802154 phy1 wpan1: entered allmulticast mode
[  455.033807][T25984] mac80211_hwsim hwsim195 wlan24: entered promiscuous mode
[  455.036399][T25984] mac80211_hwsim hwsim195 wlan24: entered allmulticast mode
[  455.039145][T25984] ip6erspan0: entered promiscuous mode
[  455.041177][T25984] ip6erspan0: entered allmulticast mode
[  455.043296][T25984] bridge10: entered promiscuous mode
[  455.045464][T25984] bridge10: entered allmulticast mode
[  455.048030][T25984] mac80211_hwsim hwsim201 wlan25: entered promiscuous mode
[  455.050963][T25984] mac80211_hwsim hwsim201 wlan25: entered allmulticast mode
[  455.053994][T25984] ip6tnl2: entered promiscuous mode
[  455.056151][T25984] ip6tnl2: entered allmulticast mode
[  455.058943][T25984] bridge11: entered promiscuous mode
[  455.061160][T25984] bridge11: entered allmulticast mode
[  455.063444][T25984] batadv0.4: entered promiscuous mode
[  455.065646][T25984] batadv0.4: entered allmulticast mode
[  455.068212][T25984] mac80211_hwsim hwsim240 wlan26: entered promiscuous mode
[  455.070843][T25984] mac80211_hwsim hwsim240 wlan26: entered allmulticast mode
[  455.073948][T25984] mac80211_hwsim hwsim260 wlan27: entered promiscuous mode
[  455.076516][T25984] mac80211_hwsim hwsim260 wlan27: entered allmulticast mode
[  455.079510][T25984] bridge0: entered promiscuous mode
[  455.081613][T25984] bridge0: entered allmulticast mode
[  455.083632][T25984] mac80211_hwsim hwsim267 wlan28: entered promiscuous mode
[  455.086245][T25984] mac80211_hwsim hwsim267 wlan28: entered allmulticast mode
[  455.089618][T25984] mac80211_hwsim hwsim276 wlan29: entered promiscuous mode
[  455.092189][T25984] mac80211_hwsim hwsim276 wlan29: entered allmulticast mode
[  455.094587][T25984] mac80211_hwsim hwsim277 wlan30: entered promiscuous mode
[  455.097077][T25984] mac80211_hwsim hwsim277 wlan30: entered allmulticast mode
[  455.100654][T25984] mac80211_hwsim hwsim175 nicvf0: entered promiscuous mode
[  455.103536][T25984] mac80211_hwsim hwsim175 nicvf0: entered allmulticast mode
[  455.106709][T25984] mac80211_hwsim hwsim296 wlan31: entered promiscuous mode
[  455.110172][T25984] mac80211_hwsim hwsim296 wlan31: entered allmulticast mode
[  455.113423][T25984] bridge12: entered promiscuous mode
[  455.115504][T25984] bridge12: entered allmulticast mode
[  455.117920][T25984] mac80211_hwsim hwsim303 wlan32: entered promiscuous mode
[  455.120811][T25984] mac80211_hwsim hwsim303 wlan32: entered allmulticast mode
[  455.123976][T25984] veth8: entered promiscuous mode
[  455.125644][T25984] veth8: entered allmulticast mode
[  455.127526][T25984] veth9: entered promiscuous mode
[  455.129189][T25984] veth9: entered allmulticast mode
[  455.130968][T25984] mac80211_hwsim hwsim304 wlan33: entered promiscuous mode
[  455.133180][T25984] mac80211_hwsim hwsim304 wlan33: entered allmulticast mode
[  455.135785][T25984] ip6gretap2: entered promiscuous mode
[  455.137757][T25984] ip6gretap2: entered allmulticast mode
[  455.139583][T25984] mac80211_hwsim hwsim330 wlan34: entered promiscuous mode
[  455.141829][T25984] mac80211_hwsim hwsim330 wlan34: entered allmulticast mode
[  455.144280][T25984] netdevsim netdevsim1 eth0: entered promiscuous mode
[  455.146605][T25984] netdevsim netdevsim1 eth0: entered allmulticast mode
[  455.149409][T25984] netdevsim netdevsim1 eth1: entered promiscuous mode
[  455.152019][T25984] netdevsim netdevsim1 eth1: entered allmulticast mode
[  455.154752][T25984] netdevsim netdevsim1 eth2: entered promiscuous mode
[  455.157531][T25984] netdevsim netdevsim1 eth2: entered allmulticast mode
[  455.160533][T25984] netdevsim netdevsim1 eth3: entered promiscuous mode
[  455.163231][T25984] netdevsim netdevsim1 eth3: entered allmulticast mode
[  455.166137][T25984] bridge13: entered promiscuous mode
[  455.168792][T25984] bridge13: entered allmulticast mode
[  455.171106][T25984] mac80211_hwsim hwsim337 wlan35: entered promiscuous mode
[  455.173994][T25984] mac80211_hwsim hwsim337 wlan35: entered allmulticast mode
[  455.176672][T25984] ip6gretap0.2: entered promiscuous mode
[  455.179150][T25984] ip6gretap0.2: entered allmulticast mode
[  455.181821][T25984] mac80211_hwsim hwsim346 wlan36: entered promiscuous mode
[  455.184901][T25984] mac80211_hwsim hwsim346 wlan36: entered allmulticast mode
[  455.188152][T25984] vxlan1: entered promiscuous mode
[  455.190121][T25984] vxlan1: entered allmulticast mode
[  455.192102][T25984] vxlan2: entered promiscuous mode
[  455.193747][T25984] vxlan2: entered allmulticast mode
[  455.195935][T25984] mac80211_hwsim hwsim349 wlan37: entered promiscuous mode
[  455.199597][T25984] mac80211_hwsim hwsim349 wlan37: entered allmulticast mode
[  455.202730][T25984] tun0: entered promiscuous mode
[  455.204759][T25984] tun0: entered allmulticast mode
[  455.207094][T25984] mac80211_hwsim hwsim360 wlan38: entered promiscuous mode
[  455.209885][T25984] mac80211_hwsim hwsim360 wlan38: entered allmulticast mode
[  455.212365][T25984] bridge14: entered promiscuous mode
[  455.214095][T25984] bridge14: entered allmulticast mode
[  455.215826][T25984] mac80211_hwsim hwsim368 wlan39: entered promiscuous mode
[  455.218282][T25984] mac80211_hwsim hwsim368 wlan39: entered allmulticast mode
[  455.220866][T25984] mac80211_hwsim hwsim371 wlan40: entered promiscuous mode
[  455.223433][T25984] mac80211_hwsim hwsim371 wlan40: entered allmulticast mode
[  455.226495][T25984] veth10: entered promiscuous mode
[  455.229002][T25984] veth10: entered allmulticast mode
[  455.231271][T25984] veth11: entered promiscuous mode
[  455.233399][T25984] veth11: entered allmulticast mode
[  455.235650][T25984] mac80211_hwsim hwsim389 wlan41: entered promiscuous mode
[  455.238680][T25984] mac80211_hwsim hwsim389 wlan41: entered allmulticast mode
[  455.241742][T25984] mac80211_hwsim hwsim390 wlan42: entered promiscuous mode
[  455.244703][T25984] mac80211_hwsim hwsim390 wlan42: entered allmulticast mode
[  455.247934][T25984] ip6gre1: entered promiscuous mode
[  455.249731][T25984] ip6gre1: entered allmulticast mode
[  455.251529][T25984] mac80211_hwsim hwsim407 wlan43: entered promiscuous mode
[  455.253826][T25984] mac80211_hwsim hwsim407 wlan43: entered allmulticast mode
[  455.256234][T25984] gre2: entered promiscuous mode
[  455.258639][T25984] gre2: entered allmulticast mode
[  455.260447][T25984] mac80211_hwsim hwsim416 wlan44: entered promiscuous mode
[  455.262764][T25984] mac80211_hwsim hwsim416 wlan44: entered allmulticast mode
[  455.265163][T25984] mac80211_hwsim hwsim417 wlan45: entered promiscuous mode
[  455.267648][T25984] mac80211_hwsim hwsim417 wlan45: entered allmulticast mode
[  455.270272][T25984] mac80211_hwsim hwsim418 wlan46: entered promiscuous mode
[  455.272613][T25984] mac80211_hwsim hwsim418 wlan46: entered allmulticast mode
[  455.275006][T25984] mac80211_hwsim hwsim419 wlan47: entered promiscuous mode
[  455.277368][T25984] mac80211_hwsim hwsim419 wlan47: entered allmulticast mode
[  455.279915][T25984] mac80211_hwsim hwsim421 wlan48: entered promiscuous mode
[  455.282204][T25984] mac80211_hwsim hwsim421 wlan48: entered allmulticast mode
[  455.284732][T25984] mac80211_hwsim hwsim427 wlan49: entered promiscuous mode
[  455.288047][T25984] mac80211_hwsim hwsim427 wlan49: entered allmulticast mode
[  455.291413][T25984] bridge15: entered promiscuous mode
[  455.293753][T25984] bridge15: entered allmulticast mode
[  455.295959][T25984] mac80211_hwsim hwsim428 wlan50: entered promiscuous mode
[  455.298994][T25984] mac80211_hwsim hwsim428 wlan50: entered allmulticast mode
[  455.301703][T25984] gre3: entered promiscuous mode
[  455.303263][T25984] gre3: entered allmulticast mode
[  455.304954][T25984] mac80211_hwsim hwsim435 wlan51: entered promiscuous mode
[  455.307914][T25984] mac80211_hwsim hwsim435 wlan51: entered allmulticast mode
[  455.310485][T25984] mac80211_hwsim hwsim438 wlan1: entered promiscuous mode
[  455.312715][T25984] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  455.315172][T25984] veth12: entered promiscuous mode
[  455.317335][T25984] veth12: entered allmulticast mode
[  455.319094][T25984] veth13: entered promiscuous mode
[  455.320732][T25984] veth13: entered allmulticast mode
[  455.322492][T25984] mac80211_hwsim hwsim444 wlan52: entered promiscuous mode
[  455.324749][T25984] mac80211_hwsim hwsim444 wlan52: entered allmulticast mode
[  455.327603][T25989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4860'.
[  455.608661][T26016] "syz.1.4868" (26016) uses obsolete ecb(arc4) skcipher
[  455.986731][T26044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4873'.
[  456.135389][T26052] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4875'.
[  456.350637][T26059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  456.441825][T26066] mac80211_hwsim hwsim438 wlan1: left promiscuous mode
[  456.445266][T26066] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  457.097925][T26078] netlink: 'syz.2.4882': attribute type 4 has an invalid length.
[  457.097928][T26079] netlink: 'syz.2.4882': attribute type 4 has an invalid length.
[  457.210857][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'.
[  457.349119][T26088] validate_nla: 1 callbacks suppressed
[  457.349192][T26088] netlink: 'syz.2.4885': attribute type 16 has an invalid length.
[  457.354658][T26088] netlink: 'syz.2.4885': attribute type 17 has an invalid length.
[  457.499553][T26092] netlink: 'syz.1.4887': attribute type 10 has an invalid length.
[  457.503972][T26092] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  457.715388][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'.
[  457.721075][T26109] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4889'.
[  457.725644][T26109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4889'.
[  458.223251][T26137] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4897'.
[  458.234652][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4897'.
[  458.295973][T26139] bond0: (slave batadv0): Releasing backup interface
[  458.300750][T26139] tipc: Resetting bearer <eth:batadv0>
[  458.304233][T26139] netlink: 'syz.0.4898': attribute type 10 has an invalid length.
[  458.309495][T26139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  458.313164][T26139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  458.476504][T26144] netlink: 'syz.2.4900': attribute type 10 has an invalid length.
[  458.504698][T26142] lo: left promiscuous mode
[  458.506716][T26142] lo: left allmulticast mode
[  458.511938][T26142] tunl0: left promiscuous mode
[  458.513997][T26142] tunl0: left allmulticast mode
[  458.516265][T26142] gre0: left promiscuous mode
[  458.519014][T26142] gre0: left allmulticast mode
[  458.521353][T26142] gretap0: left promiscuous mode
[  458.523540][T26142] gretap0: left allmulticast mode
[  458.525857][T26142] erspan0: left promiscuous mode
[  458.528557][T26142] erspan0: left allmulticast mode
[  458.530860][T26142] ip_vti0: left promiscuous mode
[  458.532888][T26142] ip_vti0: left allmulticast mode
[  458.535160][T26142] ip6_vti0: left promiscuous mode
[  458.537867][T26142] ip6_vti0: left allmulticast mode
[  458.540167][T26142] sit0: left promiscuous mode
[  458.541930][T26142] sit0: left allmulticast mode
[  458.543738][T26142] ip6tnl0: left promiscuous mode
[  458.545580][T26142] ip6tnl0: left allmulticast mode
[  458.548175][T26142] ip6gre0: left promiscuous mode
[  458.551437][T26142] ip6gre0: left allmulticast mode
[  458.554532][T26142] syz_tun: left promiscuous mode
[  458.556694][T26142] syz_tun: left allmulticast mode
[  458.558958][T26142] team0: left promiscuous mode
[  458.560950][T26142] team0: left allmulticast mode
[  458.563081][T26142] dummy0: left promiscuous mode
[  458.565111][T26142] dummy0: left allmulticast mode
[  458.567849][T26142] nlmon0: left promiscuous mode
[  458.569793][T26142] nlmon0: left allmulticast mode
[  458.571979][T26142] caif0: left promiscuous mode
[  458.573903][T26142] caif0: left allmulticast mode
[  458.576164][T26142] veth0: left promiscuous mode
[  458.578391][T26142] veth0: left allmulticast mode
[  458.580567][T26142] veth1: left promiscuous mode
[  458.582500][T26142] veth1: left allmulticast mode
[  458.584613][T26142] wg0: left promiscuous mode
[  458.586842][T26142] wg0: left allmulticast mode
[  458.589474][T26142] wg1: left promiscuous mode
[  458.591545][T26142] wg1: left allmulticast mode
[  458.593857][T26142] wg2: left promiscuous mode
[  458.595990][T26142] wg2: left allmulticast mode
[  458.598203][T26142] veth0_to_bridge: left promiscuous mode
[  458.600276][T26142] veth0_to_bridge: left allmulticast mode
[  458.602258][T26142] bridge_slave_0: left promiscuous mode
[  458.603971][T26142] bridge_slave_0: left allmulticast mode
[  458.605824][T26142] veth1_to_bridge: left promiscuous mode
[  458.607934][T26142] veth1_to_bridge: left allmulticast mode
[  458.610079][T26142] bridge_slave_1: left promiscuous mode
[  458.612423][T26142] bridge_slave_1: left allmulticast mode
[  458.614961][T26142] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  458.675264][T26152] netlink: 'syz.1.4902': attribute type 23 has an invalid length.
[  458.782471][T26155] netlink: 'syz.1.4903': attribute type 10 has an invalid length.
[  459.205495][T26166] __nla_validate_parse: 1 callbacks suppressed
[  459.205510][T26166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4906'.
[  459.296854][T26167] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  459.307835][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4906'.
[  459.312257][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4906'.
[  459.320081][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4906'.
[  460.061876][T26172] netlink: 'syz.1.4907': attribute type 16 has an invalid length.
[  460.064942][T26172] netlink: 'syz.1.4907': attribute type 17 has an invalid length.
[  460.070104][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4907'.
[  460.202652][T26190] netlink: 'syz.0.4911': attribute type 9 has an invalid length.
[  460.405728][T26203] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  460.415005][T26203] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  460.613396][T26216] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  460.619150][T26216] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  461.696852][T26268] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.345141][T26277] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  462.357053][T26277] validate_nla: 2 callbacks suppressed
[  462.357068][T26277] netlink: 'syz.1.4934': attribute type 10 has an invalid length.
[  462.366407][T26277] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  462.526928][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4939'.
[  462.569993][T26291] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  462.660444][T26293] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  462.668937][T26293] netlink: 'syz.0.4940': attribute type 10 has an invalid length.
[  463.140084][T26302] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4941'.
[  463.331682][ T5889] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  463.338760][T26310] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4943'.
[  463.413497][T26309] tipc: Resetting bearer <eth:syzkaller0>
[  463.710546][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4949'.
[  463.809048][T26343] netlink: 11188 bytes leftover after parsing attributes in process `syz.1.4951'.
[  463.999717][T26361] tipc: Resetting bearer <eth:syzkaller0>
[  465.396847][T26365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4957'.
[  465.411704][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'.
[  465.412202][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'.
[  465.575691][T26389] netlink: 'syz.1.4962': attribute type 29 has an invalid length.
[  465.583891][T26389] netlink: 'syz.1.4962': attribute type 29 has an invalid length.
[  465.646519][T26391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4963'.
[  465.696440][T26398] netlink: 'syz.1.4965': attribute type 3 has an invalid length.
[  465.703030][T26405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'.
[  465.706208][T26405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4963'.
[  465.707640][T26403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'.
[  465.710382][T26405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4963'.
[  465.716399][T26405] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4963'.
[  465.726666][T26405] netlink: 'syz.0.4963': attribute type 10 has an invalid length.
[  465.743171][T26405] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  466.005193][T26419] netlink: 'syz.1.4972': attribute type 9 has an invalid length.
[  466.009843][T26419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4972'.
[  466.219372][T26430] bond_slave_0: left promiscuous mode
[  466.221565][T26430] bond_slave_0: left allmulticast mode
[  466.223977][T26430] veth1_to_bond: left promiscuous mode
[  466.226321][T26430] veth1_to_bond: left allmulticast mode
[  466.230715][T26430] bond_slave_1: left promiscuous mode
[  466.232896][T26430] bond_slave_1: left allmulticast mode
[  466.235330][T26430] veth1_to_team: left promiscuous mode
[  466.239026][T26430] veth1_to_team: left allmulticast mode
[  466.241149][T26430] team_slave_1: left promiscuous mode
[  466.243021][T26430] team_slave_1: left allmulticast mode
[  466.245169][T26430] veth0_to_batadv: left promiscuous mode
[  466.248456][T26430] veth0_to_batadv: left allmulticast mode
[  466.251237][T26430] xfrm0: left promiscuous mode
[  466.253360][T26430] xfrm0: left allmulticast mode
[  466.255695][T26430] veth0_to_hsr: left promiscuous mode
[  466.259689][T26430] veth0_to_hsr: left allmulticast mode
[  466.262221][T26430] hsr_slave_0: left promiscuous mode
[  466.264489][T26430] hsr_slave_0: left allmulticast mode
[  466.266932][T26430] veth1_to_hsr: left promiscuous mode
[  466.269998][T26430] veth1_to_hsr: left allmulticast mode
[  466.272460][T26430] hsr_slave_1: left promiscuous mode
[  466.274663][T26430] hsr_slave_1: left allmulticast mode
[  466.278743][T26430] veth1_virt_wifi: left promiscuous mode
[  466.281122][T26430] veth1_virt_wifi: left allmulticast mode
[  466.283812][T26430] veth0_virt_wifi: left promiscuous mode
[  466.286223][T26430] veth0_virt_wifi: left allmulticast mode
[  466.289559][T26430] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  466.292671][T26430] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  466.295822][T26430] veth1_vlan: left allmulticast mode
[  466.298959][T26430] vlan1: left promiscuous mode
[  466.301031][T26430] vlan1: left allmulticast mode
[  466.303376][T26430] macvlan0: left promiscuous mode
[  466.305573][T26430] macvlan0: left allmulticast mode
[  466.308021][T26430] macvlan1: left promiscuous mode
[  466.310090][T26430] macvlan1: left allmulticast mode
[  466.312390][T26430] ipvlan0: left promiscuous mode
[  466.314630][T26430] ipvlan0: left allmulticast mode
[  466.317093][T26430] ipvlan1: left promiscuous mode
[  466.319194][T26430] ipvlan1: left allmulticast mode
[  466.321356][T26430] veth0_vlan: left allmulticast mode
[  466.323640][T26430] veth1_macvtap: left allmulticast mode
[  466.326237][T26430] veth0_macvtap: left allmulticast mode
[  466.328794][T26430] macvtap0: left promiscuous mode
[  466.330876][T26430] macvtap0: left allmulticast mode
[  466.333110][T26430] macsec0: left promiscuous mode
[  466.335037][T26430] macsec0: left allmulticast mode
[  466.337593][T26430] geneve0: left promiscuous mode
[  466.339696][T26430] geneve0: left allmulticast mode
[  466.341895][T26430] geneve1: left promiscuous mode
[  466.343924][T26430] geneve1: left allmulticast mode
[  466.346219][T26430] pimreg: left promiscuous mode
[  466.348636][T26430] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  466.351361][T26430] mac80211_hwsim hwsim8 wlan2: left allmulticast mode
[  466.354250][T26430] mac80211_hwsim hwsim9 wlan3: left promiscuous mode
[  466.357088][T26430] mac80211_hwsim hwsim9 wlan3: left allmulticast mode
[  466.360223][T26430] bridge1: left promiscuous mode
[  466.362283][T26430] bridge1: left allmulticast mode
[  466.364544][T26430] mac80211_hwsim hwsim10 wlan4: left promiscuous mode
[  466.367568][T26430] mac80211_hwsim hwsim10 wlan4: left allmulticast mode
[  466.370751][T26430] mac80211_hwsim hwsim11 wlan5: left promiscuous mode
[  466.373568][T26430] mac80211_hwsim hwsim11 wlan5: left allmulticast mode
[  466.376574][T26430] mac80211_hwsim hwsim19 wlan6: left promiscuous mode
[  466.379951][T26430] mac80211_hwsim hwsim19 wlan6: left allmulticast mode
[  466.383184][T26430] pimreg3: left promiscuous mode
[  466.385513][T26430] ip6gretap1: left promiscuous mode
[  466.387824][T26430] ip6gretap1: left allmulticast mode
[  466.390133][T26430] mac80211_hwsim hwsim35 wlan7: left promiscuous mode
[  466.392849][T26430] mac80211_hwsim hwsim35 wlan7: left allmulticast mode
[  466.395879][T26430] vti0: left promiscuous mode
[  466.398207][T26430] vti0: left allmulticast mode
[  466.400436][T26430] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode
[  466.403336][T26430] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  466.406695][T26430] bridge2: left promiscuous mode
[  466.408908][T26430] bridge2: left allmulticast mode
[  466.411103][T26430] bridge3: left promiscuous mode
[  466.413163][T26430] bridge3: left allmulticast mode
[  466.415322][T26430] veth0_to_bond.2: left promiscuous mode
[  466.417771][T26430] veth0_to_bond: left promiscuous mode
[  466.420194][T26430] veth0_to_bond.2: left allmulticast mode
[  466.422493][T26430] veth0_to_bond: left allmulticast mode
[  466.424936][T26430] gre1: left promiscuous mode
[  466.426935][T26430] gre1: left allmulticast mode
[  466.429306][T26430] bond1: left promiscuous mode
[  466.431209][T26430] bond1: left allmulticast mode
[  466.433357][T26430] gretap1: left promiscuous mode
[  466.435455][T26430] gretap1: left allmulticast mode
[  466.437762][T26430] batadv_slave_0.: left promiscuous mode
[  466.440228][T26430] batadv_slave_0: left promiscuous mode
[  466.442707][T26430] batadv_slave_0.: left allmulticast mode
[  466.444989][T26430] batadv_slave_0: left allmulticast mode
[  466.447668][T26430] sit1: left promiscuous mode
[  466.449614][T26430] sit1: left allmulticast mode
[  466.451805][T26430] bridge4: left promiscuous mode
[  466.453829][T26430] bridge4: left allmulticast mode
[  466.455977][T26430] mac80211_hwsim hwsim62 wlan8: left promiscuous mode
[  466.458733][T26430] mac80211_hwsim hwsim62 wlan8: left allmulticast mode
[  466.461707][T26430] mac80211_hwsim hwsim69 wlan9: left promiscuous mode
[  466.464540][T26430] mac80211_hwsim hwsim69 wlan9: left allmulticast mode
[  466.467593][T26430] @: left promiscuous mode
[  466.469422][T26430] @: left allmulticast mode
[  466.471432][T26430] mac80211_hwsim hwsim84 wlan10: left promiscuous mode
[  466.474372][T26430] mac80211_hwsim hwsim84 wlan10: left allmulticast mode
[  466.477517][T26430] bridge5: left promiscuous mode
[  466.479638][T26430] bridge5: left allmulticast mode
[  466.481902][T26430] veth2: left promiscuous mode
[  466.483891][T26430] veth2: left allmulticast mode
[  466.486178][T26430] veth3: left promiscuous mode
[  466.488417][T26430] veth3: left allmulticast mode
[  466.490542][T26430] mac80211_hwsim hwsim85 wlan11: left promiscuous mode
[  466.493286][T26430] mac80211_hwsim hwsim85 wlan11: left allmulticast mode
[  466.496415][T26430] mac80211_hwsim hwsim86 wlan12: left promiscuous mode
[  466.499300][T26430] mac80211_hwsim hwsim86 wlan12: left allmulticast mode
[  466.502202][T26430] mac80211_hwsim hwsim88 wlan13: left promiscuous mode
[  466.504851][T26430] mac80211_hwsim hwsim88 wlan13: left allmulticast mode
[  466.507848][T26430] vxlan0: left promiscuous mode
[  466.509749][T26430] vxlan0: left allmulticast mode
[  466.511806][T26430] bridge6: left promiscuous mode
[  466.513759][T26430] bridge6: left allmulticast mode
[  466.515949][T26430] veth4: left promiscuous mode
[  466.518108][T26430] veth4: left allmulticast mode
[  466.520348][T26430] veth5: left promiscuous mode
[  466.522277][T26430] veth5: left allmulticast mode
[  466.524322][T26430] mac80211_hwsim hwsim96 wlan14: left promiscuous mode
[  466.527295][T26430] mac80211_hwsim hwsim96 wlan14: left allmulticast mode
[  466.530260][T26430] mac80211_hwsim hwsim100 wlan15: left promiscuous mode
[  466.533035][T26430] mac80211_hwsim hwsim100 wlan15: left allmulticast mode
[  466.535999][T26430] bridge7: left promiscuous mode
[  466.538768][T26430] bridge7: left allmulticast mode
[  466.541098][T26430] mac80211_hwsim hwsim104 wlan16: left promiscuous mode
[  466.543777][T26430] mac80211_hwsim hwsim104 wlan16: left allmulticast mode
[  466.546781][T26430] bridge8: left promiscuous mode
[  466.548981][T26430] bridge8: left allmulticast mode
[  466.551191][T26430] mac80211_hwsim hwsim108 wlan17: left promiscuous mode
[  466.554068][T26430] mac80211_hwsim hwsim108 wlan17: left allmulticast mode
[  466.557480][T26430] mac80211_hwsim hwsim143 wlan18: left promiscuous mode
[  466.560291][T26430] mac80211_hwsim hwsim143 wlan18: left allmulticast mode
[  466.563372][T26430] sit2: left promiscuous mode
[  466.565228][T26430] sit2: left allmulticast mode
[  466.567532][T26430] mac80211_hwsim hwsim149 wlan19: left promiscuous mode
[  466.570272][T26430] mac80211_hwsim hwsim149 wlan19: left allmulticast mode
[  466.573188][T26430] mac80211_hwsim hwsim166 wlan20: left promiscuous mode
[  466.575990][T26430] mac80211_hwsim hwsim166 wlan20: left allmulticast mode
[  466.579043][T26430] mac80211_hwsim hwsim169 wlan21: left promiscuous mode
[  466.581868][T26430] mac80211_hwsim hwsim169 wlan21: left allmulticast mode
[  466.584766][T26430] mac80211_hwsim hwsim175 wlan0: left promiscuous mode
[  466.587704][T26430] mac80211_hwsim hwsim175 wlan0: left allmulticast mode
[  466.590597][T26430] veth6: left promiscuous mode
[  466.592465][T26430] veth6: left allmulticast mode
[  466.594680][T26430] veth7: left promiscuous mode
[  466.596645][T26430] veth7: left allmulticast mode
[  466.598816][T26430] mac80211_hwsim hwsim188 wlan22: left promiscuous mode
[  466.601611][T26430] mac80211_hwsim hwsim188 wlan22: left allmulticast mode
[  466.604546][T26430] mac80211_hwsim hwsim189 wlan23: left promiscuous mode
[  466.607582][T26430] mac80211_hwsim hwsim189 wlan23: left allmulticast mode
[  466.610469][T26430] bridge9: left promiscuous mode
[  466.612433][T26430] bridge9: left allmulticast mode
[  466.614624][T26430] ip6tnl1: left promiscuous mode
[  466.616572][T26430] ip6tnl1: left allmulticast mode
[  466.618753][T26430] ieee802154 phy1 wpan1: left promiscuous mode
[  466.621205][T26430] ieee802154 phy1 wpan1: left allmulticast mode
[  466.623859][T26430] mac80211_hwsim hwsim195 wlan24: left promiscuous mode
[  466.626538][T26430] mac80211_hwsim hwsim195 wlan24: left allmulticast mode
[  466.629617][T26430] ip6erspan0: left promiscuous mode
[  466.631638][T26430] ip6erspan0: left allmulticast mode
[  466.633816][T26430] bridge10: left promiscuous mode
[  466.635777][T26430] bridge10: left allmulticast mode
[  466.638461][T26430] mac80211_hwsim hwsim201 wlan25: left promiscuous mode
[  466.641153][T26430] mac80211_hwsim hwsim201 wlan25: left allmulticast mode
[  466.644131][T26430] ip6tnl2: left promiscuous mode
[  466.646068][T26430] ip6tnl2: left allmulticast mode
[  466.648453][T26430] bridge11: left promiscuous mode
[  466.650517][T26430] bridge11: left allmulticast mode
[  466.652619][T26430] batadv0.4: left promiscuous mode
[  466.654688][T26430] batadv0: left promiscuous mode
[  466.656883][T26430] batadv0.4: left allmulticast mode
[  466.659072][T26430] batadv0: left allmulticast mode
[  466.661293][T26430] mac80211_hwsim hwsim240 wlan26: left promiscuous mode
[  466.664115][T26430] mac80211_hwsim hwsim240 wlan26: left allmulticast mode
[  466.667118][T26430] mac80211_hwsim hwsim260 wlan27: left promiscuous mode
[  466.669934][T26430] mac80211_hwsim hwsim260 wlan27: left allmulticast mode
[  466.672852][T26430] bridge0: left promiscuous mode
[  466.674843][T26430] bridge0: left allmulticast mode
[  466.677206][T26430] mac80211_hwsim hwsim267 wlan28: left promiscuous mode
[  466.680043][T26430] mac80211_hwsim hwsim267 wlan28: left allmulticast mode
[  466.683029][T26430] mac80211_hwsim hwsim276 wlan29: left promiscuous mode
[  466.685911][T26430] mac80211_hwsim hwsim276 wlan29: left allmulticast mode
[  466.689405][T26430] mac80211_hwsim hwsim277 wlan30: left promiscuous mode
[  466.692413][T26430] mac80211_hwsim hwsim277 wlan30: left allmulticast mode
[  466.695539][T26430] mac80211_hwsim hwsim175 nicvf0: left promiscuous mode
[  466.698785][T26430] mac80211_hwsim hwsim175 nicvf0: left allmulticast mode
[  466.701950][T26430] mac80211_hwsim hwsim296 wlan31: left promiscuous mode
[  466.704945][T26430] mac80211_hwsim hwsim296 wlan31: left allmulticast mode
[  466.708189][T26430] bridge12: left promiscuous mode
[  466.710408][T26430] bridge12: left allmulticast mode
[  466.712853][T26430] mac80211_hwsim hwsim303 wlan32: left promiscuous mode
[  466.715825][T26430] mac80211_hwsim hwsim303 wlan32: left allmulticast mode
[  466.719291][T26430] veth8: left promiscuous mode
[  466.721238][T26430] veth8: left allmulticast mode
[  466.723445][T26430] veth9: left promiscuous mode
[  466.725441][T26430] veth9: left allmulticast mode
[  466.727742][T26430] mac80211_hwsim hwsim304 wlan33: left promiscuous mode
[  466.730524][T26430] mac80211_hwsim hwsim304 wlan33: left allmulticast mode
[  466.733449][T26430] ip6gretap2: left promiscuous mode
[  466.735596][T26430] ip6gretap2: left allmulticast mode
[  466.738015][T26430] mac80211_hwsim hwsim330 wlan34: left promiscuous mode
[  466.740897][T26430] mac80211_hwsim hwsim330 wlan34: left allmulticast mode
[  466.743845][T26430] netdevsim netdevsim1 eth0: left promiscuous mode
[  466.746406][T26430] netdevsim netdevsim1 eth0: left allmulticast mode
[  466.749494][T26430] netdevsim netdevsim1 eth1: left promiscuous mode
[  466.751979][T26430] netdevsim netdevsim1 eth1: left allmulticast mode
[  466.754695][T26430] netdevsim netdevsim1 eth2: left promiscuous mode
[  466.757317][T26430] netdevsim netdevsim1 eth2: left allmulticast mode
[  466.760141][T26430] netdevsim netdevsim1 eth3: left promiscuous mode
[  466.762706][T26430] netdevsim netdevsim1 eth3: left allmulticast mode
[  466.765661][T26430] bridge13: left promiscuous mode
[  466.767968][T26430] bridge13: left allmulticast mode
[  466.770197][T26430] mac80211_hwsim hwsim337 wlan35: left promiscuous mode
[  466.773023][T26430] mac80211_hwsim hwsim337 wlan35: left allmulticast mode
[  466.775500][T26430] ip6gretap0.2: left promiscuous mode
[  466.777272][T26430] ip6gretap0: left promiscuous mode
[  466.779125][T26430] ip6gretap0.2: left allmulticast mode
[  466.780910][T26430] ip6gretap0: left allmulticast mode
[  466.782839][T26430] mac80211_hwsim hwsim346 wlan36: left promiscuous mode
[  466.785201][T26430] mac80211_hwsim hwsim346 wlan36: left allmulticast mode
[  466.792119][T26430] vxlan1: left promiscuous mode
[  466.793840][T26430] vxlan1: left allmulticast mode
[  466.795613][T26430] vxlan2: left promiscuous mode
[  466.797484][T26430] vxlan2: left allmulticast mode
[  466.799565][T26430] mac80211_hwsim hwsim349 wlan37: left promiscuous mode
[  466.802828][T26430] mac80211_hwsim hwsim349 wlan37: left allmulticast mode
[  466.805541][T26430] tun0: left promiscuous mode
[  466.807322][T26430] tun0: left allmulticast mode
[  466.809199][T26430] mac80211_hwsim hwsim360 wlan38: left promiscuous mode
[  466.811772][T26430] mac80211_hwsim hwsim360 wlan38: left allmulticast mode
[  466.814492][T26430] bridge14: left promiscuous mode
[  466.816148][T26430] bridge14: left allmulticast mode
[  466.818318][T26430] mac80211_hwsim hwsim368 wlan39: left promiscuous mode
[  466.820672][T26430] mac80211_hwsim hwsim368 wlan39: left allmulticast mode
[  466.823052][T26430] mac80211_hwsim hwsim371 wlan40: left promiscuous mode
[  466.825330][T26430] mac80211_hwsim hwsim371 wlan40: left allmulticast mode
[  466.828464][T26430] veth10: left promiscuous mode
[  466.830681][T26430] veth10: left allmulticast mode
[  466.832784][T26430] veth11: left promiscuous mode
[  466.834635][T26430] veth11: left allmulticast mode
[  466.836773][T26430] mac80211_hwsim hwsim389 wlan41: left promiscuous mode
[  466.839418][T26430] mac80211_hwsim hwsim389 wlan41: left allmulticast mode
[  466.842062][T26430] mac80211_hwsim hwsim390 wlan42: left promiscuous mode
[  466.844484][T26430] mac80211_hwsim hwsim390 wlan42: left allmulticast mode
[  466.846794][T26430] ip6gre1: left promiscuous mode
[  466.848597][T26430] ip6gre1: left allmulticast mode
[  466.850298][T26430] mac80211_hwsim hwsim407 wlan43: left promiscuous mode
[  466.852532][T26430] mac80211_hwsim hwsim407 wlan43: left allmulticast mode
[  466.854939][T26430] gre2: left promiscuous mode
[  466.856678][T26430] gre2: left allmulticast mode
[  466.859696][T26430] mac80211_hwsim hwsim416 wlan44: left promiscuous mode
[  466.862436][T26430] mac80211_hwsim hwsim416 wlan44: left allmulticast mode
[  466.865442][T26430] mac80211_hwsim hwsim417 wlan45: left promiscuous mode
[  466.868375][T26430] mac80211_hwsim hwsim417 wlan45: left allmulticast mode
[  466.871327][T26430] mac80211_hwsim hwsim418 wlan46: left promiscuous mode
[  466.874278][T26430] mac80211_hwsim hwsim418 wlan46: left allmulticast mode
[  466.877666][T26430] mac80211_hwsim hwsim419 wlan47: left promiscuous mode
[  466.880337][T26430] mac80211_hwsim hwsim419 wlan47: left allmulticast mode
[  466.882881][T26430] mac80211_hwsim hwsim421 wlan48: left promiscuous mode
[  466.885638][T26430] mac80211_hwsim hwsim421 wlan48: left allmulticast mode
[  466.888544][T26430] mac80211_hwsim hwsim427 wlan49: left promiscuous mode
[  466.891115][T26430] mac80211_hwsim hwsim427 wlan49: left allmulticast mode
[  466.893726][T26430] bridge15: left promiscuous mode
[  466.895517][T26430] bridge15: left allmulticast mode
[  466.897678][T26430] mac80211_hwsim hwsim428 wlan50: left promiscuous mode
[  466.900517][T26430] mac80211_hwsim hwsim428 wlan50: left allmulticast mode
[  466.903282][T26430] gre3: left promiscuous mode
[  466.904884][T26430] gre3: left allmulticast mode
[  466.906481][T26430] mac80211_hwsim hwsim435 wlan51: left promiscuous mode
[  466.908893][T26430] mac80211_hwsim hwsim435 wlan51: left allmulticast mode
[  466.911278][T26430] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  466.913889][T26430] veth12: left promiscuous mode
[  466.915391][T26430] veth12: left allmulticast mode
[  466.917123][T26430] veth13: left promiscuous mode
[  466.918619][T26430] veth13: left allmulticast mode
[  466.920543][T26430] mac80211_hwsim hwsim444 wlan52: left promiscuous mode
[  466.923086][T26430] mac80211_hwsim hwsim444 wlan52: left allmulticast mode
[  466.946185][T26438] netlink: 'syz.0.4976': attribute type 10 has an invalid length.
[  467.126627][T26466] netlink: 'syz.0.4983': attribute type 12 has an invalid length.
[  467.511962][T26501] netlink: 'syz.2.4987': attribute type 10 has an invalid length.
[  467.558515][T26489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  467.561733][T26489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  467.643363][T26512] netlink: 'syz.1.4991': attribute type 10 has an invalid length.
[  467.647782][T26512] mac80211_hwsim hwsim438 wlan1: entered allmulticast mode
[  467.755868][T26523] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  467.805184][T26527] netlink: 'syz.0.4995': attribute type 16 has an invalid length.
[  467.809365][T26527] netlink: 'syz.0.4995': attribute type 17 has an invalid length.
[  467.822831][T26527] IPv6: NLM_F_REPLACE set, but no existing node found!
[  467.961958][T26542] netlink: 'syz.1.4999': attribute type 10 has an invalid length.
[  468.016809][T26544] netlink: 'syz.1.5000': attribute type 9 has an invalid length.
[  468.112580][T26546] netlink: 'syz.0.5001': attribute type 6 has an invalid length.
[  468.159929][T26552] netlink: 'syz.1.5002': attribute type 10 has an invalid length.
[  468.161580][T26551] tipc: Invalid UDP bearer configuration
[  468.163151][T26551] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  468.309858][T26565] netlink: 'syz.0.5006': attribute type 23 has an invalid length.
[  468.344467][   T33] audit: type=1107 audit(1758175209.883:8): pid=26560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  468.409897][T26572] netlink: 'syz.1.5007': attribute type 16 has an invalid length.
[  468.643045][T26592] NCSI netlink: No device for ifindex 0
[  470.289682][T26689] xt_policy: too many policy elements
[  470.342963][T26696] mac80211_hwsim hwsim438 wlan1: left allmulticast mode
[  470.356721][T26696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.361007][T26696] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  470.363592][T26696] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  470.405055][T26698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.429169][T26698] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  470.432083][T26698] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  470.440383][T26700] __nla_validate_parse: 27 callbacks suppressed
[  470.440395][T26700] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5041'.
[  470.449482][T26700] batadv1: entered promiscuous mode
[  470.451339][T26700] batadv1: entered allmulticast mode
[  470.998585][T26735] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5047'.
[  471.012454][T26735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5047'.
[  471.266302][T26753] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  471.271411][T26753] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  471.358339][T26751] bond0: (slave netdevsim0): Releasing backup interface
[  472.176240][T26807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5060'.
[  472.180792][T26807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5060'.
[  472.405635][T26817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  472.411449][T26817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  472.673670][T26853] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5068'.
[  472.682100][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5068'.
[  472.843074][T26868] validate_nla: 17 callbacks suppressed
[  472.843092][T26868] netlink: 'syz.0.5070': attribute type 12 has an invalid length.
[  472.855055][T26868] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5070'.
[  474.030559][T26916] bridge16: entered allmulticast mode
[  474.115046][T26922] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  474.120132][T26922] CPU: 0 UID: 0 PID: 26922 Comm: syz.1.5080 Not tainted syzkaller #0 PREEMPT(full) 
[  474.120149][T26922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  474.120157][T26922] Call Trace:
[  474.120163][T26922]  <TASK>
[  474.120170][T26922]  dump_stack_lvl+0x189/0x250
[  474.120192][T26922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.120206][T26922]  ? __pfx__printk+0x10/0x10
[  474.120229][T26922]  ? kernfs_path_from_node+0x2f/0x290
[  474.120247][T26922]  ? kernfs_path_from_node+0x250/0x290
[  474.120260][T26922]  ? kernfs_path_from_node+0x2f/0x290
[  474.120277][T26922]  sysfs_warn_dup+0x8e/0xa0
[  474.120294][T26922]  sysfs_do_create_link_sd+0xc0/0x110
[  474.120311][T26922]  device_add_class_symlinks+0x1cf/0x240
[  474.120333][T26922]  device_add+0x475/0xb50
[  474.120353][T26922]  wiphy_register+0x1c81/0x2aa0
[  474.120383][T26922]  ? __pfx_wiphy_register+0x10/0x10
[  474.120399][T26922]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  474.120417][T26922]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  474.120431][T26922]  ieee80211_register_hw+0x3442/0x40a0
[  474.120452][T26922]  ? ieee80211_register_hw+0x1411/0x40a0
[  474.120474][T26922]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  474.120487][T26922]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  474.120507][T26922]  ? __hrtimer_setup+0x187/0x210
[  474.120523][T26922]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  474.120538][T26922]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  474.120578][T26922]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  474.120594][T26922]  ? trace_kmalloc+0x1f/0xd0
[  474.120611][T26922]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  474.120627][T26922]  ? __x64_sys_sendmsg+0x19b/0x260
[  474.120640][T26922]  ? kstrndup+0xbf/0x160
[  474.120663][T26922]  hwsim_new_radio_nl+0xea4/0x1b10
[  474.120684][T26922]  ? __pfx___nla_validate_parse+0x10/0x10
[  474.120715][T26922]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  474.120739][T26922]  ? rcu_is_watching+0x15/0xb0
[  474.120793][T26922]  ? __nla_parse+0x40/0x60
[  474.120814][T26922]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  474.120837][T26922]  genl_family_rcv_msg_doit+0x215/0x300
[  474.120859][T26922]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  474.120886][T26922]  ? bpf_lsm_capable+0x9/0x20
[  474.120902][T26922]  ? security_capable+0x7e/0x2e0
[  474.120925][T26922]  genl_rcv_msg+0x60e/0x790
[  474.120946][T26922]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.120960][T26922]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  474.120992][T26922]  netlink_rcv_skb+0x208/0x470
[  474.121008][T26922]  ? __lock_acquire+0xab9/0xd20
[  474.121034][T26922]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.121051][T26922]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  474.121085][T26922]  ? down_read+0x1ad/0x2e0
[  474.121102][T26922]  genl_rcv+0x28/0x40
[  474.121115][T26922]  netlink_unicast+0x82f/0x9e0
[  474.121141][T26922]  ? __pfx_netlink_unicast+0x10/0x10
[  474.121160][T26922]  ? netlink_sendmsg+0x642/0xb30
[  474.121176][T26922]  ? skb_put+0x11b/0x210
[  474.121198][T26922]  netlink_sendmsg+0x805/0xb30
[  474.121220][T26922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.121239][T26922]  ? aa_sock_msg_perm+0xf1/0x1d0
[  474.121254][T26922]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  474.121266][T26922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.121283][T26922]  __sock_sendmsg+0x21c/0x270
[  474.121303][T26922]  ____sys_sendmsg+0x505/0x830
[  474.121320][T26922]  ? __pfx_____sys_sendmsg+0x10/0x10
[  474.121341][T26922]  ? import_iovec+0x74/0xa0
[  474.121358][T26922]  ___sys_sendmsg+0x21f/0x2a0
[  474.121374][T26922]  ? __pfx____sys_sendmsg+0x10/0x10
[  474.121421][T26922]  ? __fget_files+0x2a/0x420
[  474.121433][T26922]  ? __fget_files+0x3a0/0x420
[  474.121453][T26922]  __x64_sys_sendmsg+0x19b/0x260
[  474.121469][T26922]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  474.121491][T26922]  ? do_user_addr_fault+0xc8a/0x1390
[  474.121515][T26922]  ? do_syscall_64+0xbe/0xfa0
[  474.121538][T26922]  do_syscall_64+0xfa/0xfa0
[  474.121555][T26922]  ? lockdep_hardirqs_on+0x9c/0x150
[  474.121572][T26922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.121585][T26922]  ? exc_page_fault+0xab/0x100
[  474.121603][T26922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.121616][T26922] RIP: 0033:0x7fd516d8eba9
[  474.121630][T26922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.121642][T26922] RSP: 002b:00007fd514fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.121656][T26922] RAX: ffffffffffffffda RBX: 00007fd516fd6180 RCX: 00007fd516d8eba9
[  474.121665][T26922] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  474.121673][T26922] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  474.121680][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.121688][T26922] R13: 00007fd516fd6218 R14: 00007fd516fd6180 R15: 00007ffcfde3c328
[  474.121711][T26922]  </TASK>
[  474.426433][T26925] netlink: 'syz.2.5081': attribute type 10 has an invalid length.
[  474.471819][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5083'.
[  474.527575][T26937] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5084'.
[  474.935319][T26963] netlink: 'syz.0.5093': attribute type 10 has an invalid length.
[  474.975989][T26963] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  474.980776][T26963] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  475.086305][T26980] xfrm0: entered promiscuous mode
[  475.089106][T26980] xfrm0: entered allmulticast mode
[  475.283357][T27000] netlink: 'syz.1.5098': attribute type 10 has an invalid length.
[  475.312804][T26989] netlink: 'syz.2.5097': attribute type 10 has an invalid length.
[  475.746760][T27026] __nla_validate_parse: 4 callbacks suppressed
[  475.746778][T27026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5105'.
[  475.998671][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5108'.
[  476.124262][T27048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5108'.
[  476.921870][T27075] netlink: 'syz.0.5115': attribute type 10 has an invalid length.
[  477.269912][T27092] netlink: 'syz.0.5120': attribute type 1 has an invalid length.
[  477.443280][T27095] netlink: 'syz.0.5120': attribute type 10 has an invalid length.
[  477.733709][T27110] netlink: 'syz.1.5121': attribute type 10 has an invalid length.
[  477.816423][T27124] batman_adv: batadv0: Adding interface: ip6gretap2
[  477.823273][T27124] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  477.834629][T27124] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  477.905087][T27134] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  477.918093][T27134] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  477.920932][T27134] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  477.924267][T27134] tipc: Resetting bearer <eth:syzkaller0>
[  477.943225][T27131] sch_tbf: peakrate 4096 is lower than or equals to rate 185707055559232049 !
[  477.974228][T27139] netlink: 'syz.0.5128': attribute type 10 has an invalid length.
[  478.188036][T27160] tipc: Resetting bearer <eth:syzkaller0>
[  478.289759][T27163] syzkaller1: entered promiscuous mode
[  478.296460][T27163] syzkaller1: entered allmulticast mode
[  478.307252][T27163] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5132'.
[  479.022193][T27191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5139'.
[  479.049923][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5140'.
[  479.055845][T27193] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  479.064959][T27193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  479.493196][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5146'.
[  479.503728][T27210] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  479.506015][T27210] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  479.531803][T27210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5146'.
[  479.571939][T27214] netlink: 'syz.0.5147': attribute type 9 has an invalid length.
[  479.575081][T27214] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5147'.
[  479.999129][T27239] batman_adv: batadv0: Removing interface: ip6gretap2
[  480.054786][T27239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  480.063851][T27239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  480.234656][T27266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5156'.
[  480.331496][T27276] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  480.334326][T27276] CPU: 0 UID: 0 PID: 27276 Comm: syz.1.5158 Not tainted syzkaller #0 PREEMPT(full) 
[  480.334339][T27276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.334345][T27276] Call Trace:
[  480.334350][T27276]  <TASK>
[  480.334355][T27276]  dump_stack_lvl+0x189/0x250
[  480.334371][T27276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.334381][T27276]  ? __pfx__printk+0x10/0x10
[  480.334395][T27276]  ? kernfs_path_from_node+0x2f/0x290
[  480.334406][T27276]  ? kernfs_path_from_node+0x250/0x290
[  480.334415][T27276]  ? kernfs_path_from_node+0x2f/0x290
[  480.334426][T27276]  sysfs_warn_dup+0x8e/0xa0
[  480.334436][T27276]  sysfs_do_create_link_sd+0xc0/0x110
[  480.334447][T27276]  device_add_class_symlinks+0x1cf/0x240
[  480.334459][T27276]  device_add+0x475/0xb50
[  480.334470][T27276]  wiphy_register+0x1c81/0x2aa0
[  480.334491][T27276]  ? __pfx_wiphy_register+0x10/0x10
[  480.334502][T27276]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  480.334514][T27276]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  480.334525][T27276]  ieee80211_register_hw+0x3442/0x40a0
[  480.334541][T27276]  ? ieee80211_register_hw+0x1411/0x40a0
[  480.334555][T27276]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  480.334565][T27276]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  480.334581][T27276]  ? __hrtimer_setup+0x187/0x210
[  480.334591][T27276]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  480.334608][T27276]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  480.334634][T27276]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  480.334645][T27276]  ? trace_kmalloc+0x1f/0xd0
[  480.334655][T27276]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  480.334666][T27276]  ? __x64_sys_sendmsg+0x19b/0x260
[  480.334674][T27276]  ? kstrndup+0xbf/0x160
[  480.334688][T27276]  hwsim_new_radio_nl+0xea4/0x1b10
[  480.334701][T27276]  ? __pfx___nla_validate_parse+0x10/0x10
[  480.334720][T27276]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  480.334735][T27276]  ? rcu_is_watching+0x15/0xb0
[  480.334748][T27276]  ? __nla_parse+0x40/0x60
[  480.334761][T27276]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  480.334774][T27276]  genl_family_rcv_msg_doit+0x215/0x300
[  480.334787][T27276]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  480.334802][T27276]  ? bpf_lsm_capable+0x9/0x20
[  480.334814][T27276]  ? security_capable+0x7e/0x2e0
[  480.334827][T27276]  genl_rcv_msg+0x60e/0x790
[  480.334839][T27276]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.334847][T27276]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  480.334866][T27276]  netlink_rcv_skb+0x208/0x470
[  480.334876][T27276]  ? __lock_acquire+0xab9/0xd20
[  480.334887][T27276]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.334896][T27276]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  480.334916][T27276]  ? down_read+0x1ad/0x2e0
[  480.334925][T27276]  genl_rcv+0x28/0x40
[  480.334933][T27276]  netlink_unicast+0x82f/0x9e0
[  480.334947][T27276]  ? __pfx_netlink_unicast+0x10/0x10
[  480.334958][T27276]  ? netlink_sendmsg+0x642/0xb30
[  480.334967][T27276]  ? skb_put+0x11b/0x210
[  480.334981][T27276]  netlink_sendmsg+0x805/0xb30
[  480.334997][T27276]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.335009][T27276]  ? aa_sock_msg_perm+0xf1/0x1d0
[  480.335020][T27276]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  480.335028][T27276]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.335039][T27276]  __sock_sendmsg+0x21c/0x270
[  480.335050][T27276]  ____sys_sendmsg+0x505/0x830
[  480.335061][T27276]  ? __pfx_____sys_sendmsg+0x10/0x10
[  480.335073][T27276]  ? import_iovec+0x74/0xa0
[  480.335083][T27276]  ___sys_sendmsg+0x21f/0x2a0
[  480.335092][T27276]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.335118][T27276]  ? __fget_files+0x2a/0x420
[  480.335126][T27276]  ? __fget_files+0x3a0/0x420
[  480.335139][T27276]  __x64_sys_sendmsg+0x19b/0x260
[  480.335148][T27276]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  480.335164][T27276]  ? do_syscall_64+0xbe/0xfa0
[  480.335177][T27276]  do_syscall_64+0xfa/0xfa0
[  480.335187][T27276]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.335197][T27276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.335205][T27276]  ? exc_page_fault+0xab/0x100
[  480.335217][T27276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.335224][T27276] RIP: 0033:0x7fd516d8eba9
[  480.335233][T27276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.335262][T27276] RSP: 002b:00007fd514fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.335272][T27276] RAX: ffffffffffffffda RBX: 00007fd516fd6090 RCX: 00007fd516d8eba9
[  480.335278][T27276] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  480.335283][T27276] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  480.335287][T27276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  480.335292][T27276] R13: 00007fd516fd6128 R14: 00007fd516fd6090 R15: 00007ffcfde3c328
[  480.335307][T27276]  </TASK>
[  481.172888][T27302] netlink: 'syz.0.5166': attribute type 10 has an invalid length.
[  481.285382][T27328] netlink: 'syz.2.5171': attribute type 12 has an invalid length.
[  481.298368][T27328] __nla_validate_parse: 4 callbacks suppressed
[  481.298382][T27328] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5171'.
[  481.520791][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'.
[  481.595455][T27343] netlink: 'syz.1.5175': attribute type 10 has an invalid length.
[  481.635712][T27343] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  481.639722][T27343] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  481.774750][T27361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5177'.
[  481.810108][T27367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5178'.
[  481.815918][T27367] netlink: 'syz.0.5178': attribute type 5 has an invalid length.
[  482.313452][T27388] netlink: 'syz.2.5183': attribute type 10 has an invalid length.
[  482.314279][T27389] netlink: 'syz.2.5183': attribute type 10 has an invalid length.
[  482.569403][T27405] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  482.662277][T27421] pim6reg: entered allmulticast mode
[  482.665638][T27423] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.5191'.
[  482.736266][T27424] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.5191'.
[  482.802254][T27421] pim6reg: left allmulticast mode
[  482.841092][T27421] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5190'.
[  483.109121][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5195'.
[  483.120044][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'.
[  483.152876][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5194'.
[  483.262816][T27451] netlink: 'syz.1.5198': attribute type 10 has an invalid length.
[  483.271188][T27451] netlink: 'syz.1.5198': attribute type 1 has an invalid length.
[  483.875271][T27488] netlink: 'syz.0.5206': attribute type 10 has an invalid length.
[  483.938021][T27491] netlink: 'syz.1.5205': attribute type 10 has an invalid length.
[  484.003998][T27497] netlink: 'syz.1.5208': attribute type 23 has an invalid length.
[  484.083699][T27501] netlink: 'syz.0.5209': attribute type 11 has an invalid length.
[  484.404530][T27517] netlink: 'syz.1.5211': attribute type 10 has an invalid length.
[  484.487889][T27535] netlink: 'syz.2.5216': attribute type 16 has an invalid length.
[  484.492057][T27535] netlink: 'syz.2.5216': attribute type 17 has an invalid length.
[  484.709373][T27561] netlink: 'syz.2.5225': attribute type 16 has an invalid length.
[  484.716787][T27561] netlink: 'syz.2.5225': attribute type 17 has an invalid length.
[  484.866441][T27585] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  485.114614][T27613] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  485.535255][T27654] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  485.542559][T27654] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  486.393897][T27673] __nla_validate_parse: 43 callbacks suppressed
[  486.393914][T27673] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5247'.
[  486.411076][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5247'.
[  486.452290][T27679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5246'.
[  486.482799][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5246'.
[  486.526198][T27681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'.
[  487.334692][T27712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  487.341471][T27713] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  487.345280][T27712] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  487.349429][T27712] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  487.353219][T27712] tipc: Resetting bearer <eth:syzkaller0>
[  487.463716][T27726] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5258'.
[  487.532925][T27733] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode
[  487.539303][T27733] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  487.544038][T27733] tipc: Resetting bearer <eth:syzkaller0>
[  487.789075][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[  487.798921][T27751] tipc: Resetting bearer <eth:syzkaller0>
[  487.829204][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'.
[  487.852329][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5266'.
[  487.877086][T27757] netlink: 1552 bytes leftover after parsing attributes in process `syz.2.5267'.
[  516.783989][T27773] validate_nla: 9 callbacks suppressed
[  516.784008][T27773] netlink: 'syz.0.5269': attribute type 16 has an invalid length.
[  516.791178][T27773] netlink: 'syz.0.5269': attribute type 17 has an invalid length.
[  516.794854][T27773] tipc: Resetting bearer <eth:syzkaller0>
[  516.815764][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5269'.
[  516.823936][T27773] IPv6: NLM_F_REPLACE set, but no existing node found!
[  516.859562][T27779] netlink: 'syz.2.5273': attribute type 16 has an invalid length.
[  516.862271][T27779] netlink: 'syz.2.5273': attribute type 17 has an invalid length.
[  516.951714][T27785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  516.960493][T27770] block nbd1: Unsupported socket: should be TCP or UNIX.
[  516.999161][T27792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5277'.
[  517.026599][T27794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5278'.
[  517.220174][T27800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5281'.
[  517.226563][T27800] netlink: 'syz.0.5281': attribute type 10 has an invalid length.
[  517.275473][T27800] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  517.281376][T27800] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  517.805618][T27810] netlink: 'syz.1.5282': attribute type 1 has an invalid length.
[  517.809537][T27810] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5282'.
[  518.027991][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'.
[  518.068391][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5283'.
[  518.372532][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5288'.
[  518.377632][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5288'.
[  519.238498][T27874] netlink: 'syz.1.5296': attribute type 10 has an invalid length.
[  519.270268][T27888] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  520.284461][T27930] netlink: 'syz.0.5309': attribute type 16 has an invalid length.
[  520.287911][T27930] netlink: 'syz.0.5309': attribute type 17 has an invalid length.
[  520.295134][T27930] IPv6: NLM_F_REPLACE set, but no existing node found!
[  520.736871][T27940] netlink: 'syz.1.5312': attribute type 10 has an invalid length.
[  521.914643][T28018] validate_nla: 4 callbacks suppressed
[  521.914665][T28018] netlink: 'syz.2.5331': attribute type 10 has an invalid length.
[  521.926413][T28018] tipc: Resetting bearer <eth:syzkaller0>
[  522.090339][T28021] __nla_validate_parse: 10 callbacks suppressed
[  522.090363][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5332'.
[  522.099237][T28021] tipc: Resetting bearer <eth:syzkaller0>
[  522.131163][T28021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5332'.
[  522.285650][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'.
[  522.285680][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'.
[  522.291883][T28027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5333'.
[  522.293131][T28029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5333'.
[  522.303581][T28027] geneve4: entered promiscuous mode
[  522.305517][T28027] geneve4: entered allmulticast mode
[  522.309656][ T5740] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.317396][ T5740] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.320744][ T5740] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.324178][ T5740] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.178422][T28049] netlink: 'syz.0.5340': attribute type 10 has an invalid length.
[  523.181402][T28050] netlink: 'syz.0.5340': attribute type 10 has an invalid length.
[  523.192816][T28049] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  523.195124][T28049] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  524.214376][T28082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5347'.
[  524.222593][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'.
[  524.251652][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'.
[  524.257346][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'.
[  524.353766][T28096] netlink: 'syz.1.5351': attribute type 1 has an invalid length.
[  524.564974][T28122] netlink: 'syz.0.5355': attribute type 10 has an invalid length.
[  524.809196][T28132] macvtap0: entered promiscuous mode
[  524.811794][T28132] macvtap0: entered allmulticast mode
[  524.814249][T28132] veth0_macvtap: entered allmulticast mode
[  524.821176][T28131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  524.872886][T28136] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  524.875848][T28136] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  525.121662][T28139] netlink: 'syz.0.5359': attribute type 10 has an invalid length.
[  525.640528][T28177] netlink: 'syz.1.5367': attribute type 10 has an invalid length.
[  525.700051][T28184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  525.703383][T28184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  526.268853][T28192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  526.487483][T28214] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  526.920641][T28249] netlink: 'syz.2.5384': attribute type 16 has an invalid length.
[  526.923892][T28249] netlink: 'syz.2.5384': attribute type 17 has an invalid length.
[  526.934983][ T5874] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.939026][ T5874] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.943180][ T5874] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.946904][ T5874] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.989864][T28251] netlink: 'syz.2.5385': attribute type 10 has an invalid length.
[  526.996206][T28251] tipc: Resetting bearer <eth:syzkaller0>
[  527.052730][T28253] netlink: 'syz.2.5386': attribute type 14 has an invalid length.
[  527.345616][T28277] __nla_validate_parse: 43 callbacks suppressed
[  527.345635][T28277] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5392'.
[  527.352113][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5392'.
[  527.412217][T28283] netlink: 'syz.1.5394': attribute type 16 has an invalid length.
[  527.414800][T28283] netlink: 'syz.1.5394': attribute type 17 has an invalid length.
[  527.422391][T28283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5394'.
[  527.582479][T28291] netlink: 'syz.1.5396': attribute type 16 has an invalid length.
[  527.584926][T28291] netlink: 'syz.1.5396': attribute type 17 has an invalid length.
[  527.641075][T28294] pim6reg1: entered promiscuous mode
[  527.643309][T28294] pim6reg1: entered allmulticast mode
[  527.808843][T28306] netlink: 'syz.0.5399': attribute type 6 has an invalid length.
[  527.933900][T28306] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  527.936325][T28306] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  527.946344][T28306] tipc: Resetting bearer <eth:syzkaller0>
[  528.071522][T28313] netlink: 'syz.1.5400': attribute type 10 has an invalid length.
[  528.268554][T28352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  528.280924][T28352] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  528.283481][T28352] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  528.344715][T28360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  528.350245][T28360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  529.170638][T28380] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  529.569138][T28394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5419'.
[  529.613153][T28411] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5421'.
[  529.749070][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'.
[  529.753949][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'.
[  530.264003][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5429'.
[  530.619717][T28442] GUP no longer grows the stack in syz.1.5430 (28442): 200000003000-20000000a000 (200000001000)
[  530.624327][T28442] CPU: 1 UID: 0 PID: 28442 Comm: syz.1.5430 Not tainted syzkaller #0 PREEMPT(full) 
[  530.624350][T28442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.624362][T28442] Call Trace:
[  530.624369][T28442]  <TASK>
[  530.624379][T28442]  dump_stack_lvl+0x189/0x250
[  530.624405][T28442]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.624421][T28442]  ? __pfx__printk+0x10/0x10
[  530.624437][T28442]  ? find_vma+0xe7/0x160
[  530.624465][T28442]  __get_user_pages+0x2470/0x2a00
[  530.624491][T28442]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  530.624524][T28442]  ? rcu_is_watching+0x15/0xb0
[  530.624548][T28442]  __gup_longterm_locked+0xde9/0x1660
[  530.624574][T28442]  ? sanity_check_pinned_pages+0x123a/0x1300
[  530.624608][T28442]  gup_fast_fallback+0x1d65/0x22d0
[  530.624629][T28442]  ? is_bpf_text_address+0x26/0x2b0
[  530.624684][T28442]  ? __pfx_gup_fast_fallback+0x10/0x10
[  530.624703][T28442]  ? stack_trace_save+0x9c/0xe0
[  530.624722][T28442]  ? stack_depot_save_flags+0x40/0x860
[  530.624747][T28442]  ? pin_user_pages_fast+0x4d/0xb0
[  530.624768][T28442]  iov_iter_extract_pages+0x35f/0x5e0
[  530.624790][T28442]  extract_iter_to_sg+0xe46/0x24e0
[  530.624826][T28442]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  530.624863][T28442]  ? __asan_memset+0x22/0x50
[  530.624886][T28442]  af_alg_get_rsgl+0x436/0x810
[  530.624917][T28442]  aead_recvmsg+0x4cc/0x13f0
[  530.624943][T28442]  ? rcu_is_watching+0x15/0xb0
[  530.624971][T28442]  ? __pfx_aead_recvmsg+0x10/0x10
[  530.624990][T28442]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  530.625007][T28442]  ? __pfx_aead_recvmsg+0x10/0x10
[  530.625025][T28442]  sock_recvmsg_nosec+0x186/0x1c0
[  530.625047][T28442]  ____sys_recvmsg+0x3aa/0x460
[  530.625072][T28442]  ? __pfx_____sys_recvmsg+0x10/0x10
[  530.625133][T28442]  ? import_iovec+0x74/0xa0
[  530.625153][T28442]  ___sys_recvmsg+0x1b5/0x510
[  530.625174][T28442]  ? __pfx____sys_recvmsg+0x10/0x10
[  530.625213][T28442]  ? __might_fault+0xb0/0x130
[  530.625238][T28442]  do_recvmmsg+0x307/0x770
[  530.625261][T28442]  ? __pfx_do_recvmmsg+0x10/0x10
[  530.625288][T28442]  ? __pfx_do_futex+0x10/0x10
[  530.625318][T28442]  __x64_sys_recvmmsg+0x190/0x240
[  530.625336][T28442]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  530.625355][T28442]  ? do_syscall_64+0xbe/0xfa0
[  530.625380][T28442]  do_syscall_64+0xfa/0xfa0
[  530.625399][T28442]  ? lockdep_hardirqs_on+0x9c/0x150
[  530.625419][T28442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.625433][T28442]  ? exc_page_fault+0xab/0x100
[  530.625455][T28442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.625469][T28442] RIP: 0033:0x7fd516d8eba9
[  530.625484][T28442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.625497][T28442] RSP: 002b:00007fd514ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  530.625513][T28442] RAX: ffffffffffffffda RBX: 00007fd516fd5fa0 RCX: 00007fd516d8eba9
[  530.625524][T28442] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a
[  530.625534][T28442] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  530.625545][T28442] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  530.625555][T28442] R13: 00007fd516fd6038 R14: 00007fd516fd5fa0 R15: 00007ffcfde3c328
[  530.625588][T28442]  </TASK>
[  530.888534][T28447] tipc: Resetting bearer <eth:syzkaller0>
[  531.072620][T28457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5436'.
[  531.075692][T28457] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5436'.
[  531.232659][T28468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.210039][T28496] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  532.212868][T28496] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  532.223999][T28496] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  532.391795][T28511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.397194][T28511] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  532.400530][T28511] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  532.403973][T28511] tipc: Resetting bearer <eth:syzkaller0>
[  532.408411][T28511] netem: change failed
[  532.414149][T28511] __nla_validate_parse: 8 callbacks suppressed
[  532.414168][T28511] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5452'.
[  532.421158][T28514] validate_nla: 11 callbacks suppressed
[  532.421201][T28514] netlink: 'syz.1.5453': attribute type 10 has an invalid length.
[  532.551445][T28527] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.5455'.
[  532.698388][T28539] netlink: 'syz.1.5457': attribute type 16 has an invalid length.
[  532.704627][T28539] netlink: 'syz.1.5457': attribute type 17 has an invalid length.
[  532.718027][T28539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5457'.
[  532.722691][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'.
[  532.770836][T28543] netlink: 'syz.1.5458': attribute type 4 has an invalid length.
[  532.816778][T28548] netlink: 'syz.1.5461': attribute type 10 has an invalid length.
[  532.869837][T28552] netlink: 'syz.1.5462': attribute type 9 has an invalid length.
[  532.961268][T28555] tipc: Resetting bearer <eth:syzkaller0>
[  532.979654][T28555] tipc: Resetting bearer <eth:syzkaller0>
[  533.044616][T28557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5463'.
[  533.094804][T28559] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  533.097491][T28559] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  533.267195][T28569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5466'.
[  533.273786][T28570] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  533.276823][T28570] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  533.279952][T28570] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  533.283657][T28570] geneve4: left promiscuous mode
[  533.285633][T28570] geneve4: left allmulticast mode
[  533.366807][T28574] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5468'.
[  533.496186][T28580] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.5470'.
[  533.528004][T28580] netlink: 'syz.2.5470': attribute type 10 has an invalid length.
[  533.546264][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'.
[  533.561800][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'.
[  533.746431][T28597] netlink: 'syz.2.5476': attribute type 28 has an invalid length.
[  533.773540][T28596] netlink: 'syz.0.5475': attribute type 10 has an invalid length.
[  533.943202][T28611] netlink: 'syz.2.5481': attribute type 16 has an invalid length.
[  534.254060][T28635] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  534.818489][T28672] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  535.768599][T28750] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  535.849347][T28762] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  535.898383][T28769] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode
[  535.901248][T28769] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  535.916334][T28771] smc: net device bond0 applied user defined pnetid SYZ2
[  536.485323][T28805] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001
[  537.163088][T28829] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  537.166368][T28829] CPU: 0 UID: 0 PID: 28829 Comm: syz.1.5530 Not tainted syzkaller #0 PREEMPT(full) 
[  537.166391][T28829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  537.166402][T28829] Call Trace:
[  537.166411][T28829]  <TASK>
[  537.166420][T28829]  dump_stack_lvl+0x189/0x250
[  537.166450][T28829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.166468][T28829]  ? __pfx__printk+0x10/0x10
[  537.166493][T28829]  ? kernfs_path_from_node+0x2f/0x290
[  537.166512][T28829]  ? kernfs_path_from_node+0x250/0x290
[  537.166528][T28829]  ? kernfs_path_from_node+0x2f/0x290
[  537.166582][T28829]  sysfs_warn_dup+0x8e/0xa0
[  537.166603][T28829]  sysfs_do_create_link_sd+0xc0/0x110
[  537.166624][T28829]  device_add_class_symlinks+0x1cf/0x240
[  537.166647][T28829]  device_add+0x475/0xb50
[  537.166669][T28829]  wiphy_register+0x1c81/0x2aa0
[  537.166705][T28829]  ? __pfx_wiphy_register+0x10/0x10
[  537.166725][T28829]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  537.166747][T28829]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  537.166767][T28829]  ieee80211_register_hw+0x3442/0x40a0
[  537.166796][T28829]  ? ieee80211_register_hw+0x1411/0x40a0
[  537.166820][T28829]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  537.166839][T28829]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  537.166867][T28829]  ? __hrtimer_setup+0x187/0x210
[  537.166887][T28829]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.166907][T28829]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  537.166974][T28829]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  537.166995][T28829]  ? trace_kmalloc+0x1f/0xd0
[  537.167016][T28829]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  537.167036][T28829]  ? __x64_sys_sendmsg+0x19b/0x260
[  537.167050][T28829]  ? kstrndup+0xbf/0x160
[  537.167076][T28829]  hwsim_new_radio_nl+0xea4/0x1b10
[  537.167099][T28829]  ? __pfx___nla_validate_parse+0x10/0x10
[  537.167132][T28829]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  537.167159][T28829]  ? rcu_is_watching+0x15/0xb0
[  537.167185][T28829]  ? __nla_parse+0x40/0x60
[  537.167208][T28829]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  537.167237][T28829]  genl_family_rcv_msg_doit+0x215/0x300
[  537.167261][T28829]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  537.167290][T28829]  ? bpf_lsm_capable+0x9/0x20
[  537.167308][T28829]  ? security_capable+0x7e/0x2e0
[  537.167329][T28829]  genl_rcv_msg+0x60e/0x790
[  537.167350][T28829]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.167365][T28829]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  537.167399][T28829]  netlink_rcv_skb+0x208/0x470
[  537.167416][T28829]  ? __lock_acquire+0xab9/0xd20
[  537.167434][T28829]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.167451][T28829]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  537.167486][T28829]  ? down_read+0x1ad/0x2e0
[  537.167504][T28829]  genl_rcv+0x28/0x40
[  537.167518][T28829]  netlink_unicast+0x82f/0x9e0
[  537.167576][T28829]  ? __pfx_netlink_unicast+0x10/0x10
[  537.167598][T28829]  ? netlink_sendmsg+0x642/0xb30
[  537.167616][T28829]  ? skb_put+0x11b/0x210
[  537.167644][T28829]  netlink_sendmsg+0x805/0xb30
[  537.167672][T28829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.167695][T28829]  ? aa_sock_msg_perm+0xf1/0x1d0
[  537.167716][T28829]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.167729][T28829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.167749][T28829]  __sock_sendmsg+0x21c/0x270
[  537.167770][T28829]  ____sys_sendmsg+0x505/0x830
[  537.167790][T28829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.167814][T28829]  ? import_iovec+0x74/0xa0
[  537.167832][T28829]  ___sys_sendmsg+0x21f/0x2a0
[  537.167848][T28829]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.167868][T28829]  ? futex_wait+0x285/0x360
[  537.167926][T28829]  __x64_sys_sendmsg+0x19b/0x260
[  537.167944][T28829]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  537.167973][T28829]  ? do_syscall_64+0xbe/0xfa0
[  537.167996][T28829]  do_syscall_64+0xfa/0xfa0
[  537.168015][T28829]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.168038][T28829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.168052][T28829]  ? exc_page_fault+0xab/0x100
[  537.168074][T28829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.168089][T28829] RIP: 0033:0x7fd516d8eba9
[  537.168105][T28829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  537.168120][T28829] RSP: 002b:00007fd514ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.168138][T28829] RAX: ffffffffffffffda RBX: 00007fd516fd5fa0 RCX: 00007fd516d8eba9
[  537.168151][T28829] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  537.168161][T28829] RBP: 00007fd516e11e19 R08: 0000000000000000 R09: 0000000000000000
[  537.168171][T28829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.168180][T28829] R13: 00007fd516fd6038 R14: 00007fd516fd5fa0 R15: 00007ffcfde3c328
[  537.168209][T28829]  </TASK>
[  537.513498][T28845] 8021q: VLANs not supported on nlmon0
[  537.581325][T28853] __nla_validate_parse: 17 callbacks suppressed
[  537.581346][T28853] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5534'.
[  537.590235][T28853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5534'.
[  537.631734][T28855] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5535'.
[  537.641568][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5535'.
[  538.052128][ T5874] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  538.267398][T28882] validate_nla: 14 callbacks suppressed
[  538.267409][T28882] netlink: 'syz.0.5541': attribute type 74 has an invalid length.
[  538.272637][T28882] netlink: 'syz.0.5541': attribute type 10 has an invalid length.
[  538.317236][T28882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  538.321321][T28882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  538.361829][T28890] netlink: 'syz.2.5542': attribute type 10 has an invalid length.
[  539.651711][T28929] netlink: 'syz.1.5553': attribute type 10 has an invalid length.
[  539.701798][T28929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  539.705688][T28929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  540.082428][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5554'.
[  540.265973][T28953] netlink: 'syz.0.5556': attribute type 10 has an invalid length.
[  540.440032][T28962] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5558'.
[  540.471776][T28966] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5560'.
[  540.475686][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5560'.
[  540.511767][T28969] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  540.514739][T28969] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  540.520093][T28969] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  541.167408][T29013] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  541.286509][T29023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5573'.
[  541.300429][T29023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5573'.
[  541.492491][T29036] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  541.862234][T29074] netlink: 'syz.0.5582': attribute type 10 has an invalid length.
[  541.864876][T29073] netlink: 'syz.0.5582': attribute type 10 has an invalid length.
[  541.920343][T29073] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  541.923119][T29073] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  542.421017][T29101] netlink: 'syz.2.5587': attribute type 16 has an invalid length.
[  542.423748][T29101] netlink: 'syz.2.5587': attribute type 17 has an invalid length.
[  542.864430][T29113] __nla_validate_parse: 1 callbacks suppressed
[  542.864445][T29113] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5589'.
[  543.347292][T29111] netlink: 'syz.1.5589': attribute type 29 has an invalid length.
[  543.385838][T29112] netlink: 'syz.1.5589': attribute type 29 has an invalid length.
[  543.611106][T29126] netlink: 'syz.0.5592': attribute type 16 has an invalid length.
[  543.614559][T29126] netlink: 'syz.0.5592': attribute type 17 has an invalid length.
[  543.628848][T29126] veth0_macvtap: left allmulticast mode
[  543.638646][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5592'.
[  543.643967][T29126] IPv6: NLM_F_REPLACE set, but no existing node found!
[  543.770619][T29140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5596'.
[  543.821682][T29150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'.
[  543.825307][T29150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5596'.
[  543.829301][T29150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5596'.
[  543.832843][T29150] netlink: 540 bytes leftover after parsing attributes in process `syz.2.5596'.
[  543.836246][T29150] netlink: 'syz.2.5596': attribute type 10 has an invalid length.
[  543.839132][T29139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5596'.
[  544.088934][T29168] netlink: 'syz.2.5598': attribute type 21 has an invalid length.
[  544.091761][T29168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5598'.
[  544.254730][T29167] netlink: 'syz.1.5600': attribute type 10 has an invalid length.
[  544.456837][T29179] netlink: 'syz.0.5601': attribute type 10 has an invalid length.
[  544.786732][T29191] syzkaller1: entered promiscuous mode
[  544.792869][T29191] syzkaller1: entered allmulticast mode
[  544.815406][T29191] macvtap0: left promiscuous mode
[  544.817638][T29191] macvtap0: left allmulticast mode
[  544.833280][T29191] syzkaller1: left promiscuous mode
[  544.835039][T29191] syzkaller1: left allmulticast mode
[  545.231599][T29227] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5615'.
[  545.371122][T29239] netlink: 'syz.2.5619': attribute type 10 has an invalid length.
[  545.377739][T29239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  545.380855][T29239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  545.508606][T29240] netlink: 'syz.0.5618': attribute type 10 has an invalid length.
[  546.045202][T29272] bond6: entered promiscuous mode
[  546.230378][T29280] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  546.233661][T29280] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  546.738916][T29315] batadv1: entered promiscuous mode
[  546.741114][T29315] batadv1: entered allmulticast mode
[  547.300466][T29328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  547.303821][T29328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  548.282267][T29387] __nla_validate_parse: 10 callbacks suppressed
[  548.282284][T29387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5655'.
[  548.333885][T29393] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  548.339796][T29393] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  548.342756][T29393] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  548.345724][T29393] tipc: Resetting bearer <eth:syzkaller0>
[  548.439998][T29402] validate_nla: 9 callbacks suppressed
[  548.440015][T29402] netlink: 'syz.0.5658': attribute type 10 has an invalid length.
[  548.526925][T29406] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  548.641436][T29416] netlink: 'syz.1.5662': attribute type 10 has an invalid length.
[  548.654243][T29411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5660'.
[  548.928161][T29423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5665'.
[  548.934087][T29423] bridge16: left allmulticast mode
[  548.944141][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5665'.
[  549.276939][T29443] netlink: 'syz.2.5669': attribute type 10 has an invalid length.
[  549.325982][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5670'.
[  549.335198][T29445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5670'.
[  549.342593][T29445] mac80211_hwsim hwsim506 wlan1: entered allmulticast mode
[  549.393913][T29447] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  549.398357][T29447] CPU: 1 UID: 0 PID: 29447 Comm: syz.2.5671 Not tainted syzkaller #0 PREEMPT(full) 
[  549.398380][T29447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.398387][T29447] Call Trace:
[  549.398393][T29447]  <TASK>
[  549.398399][T29447]  dump_stack_lvl+0x189/0x250
[  549.398419][T29447]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.398429][T29447]  ? __pfx__printk+0x10/0x10
[  549.398445][T29447]  ? kernfs_path_from_node+0x2f/0x290
[  549.398456][T29447]  ? kernfs_path_from_node+0x250/0x290
[  549.398466][T29447]  ? kernfs_path_from_node+0x2f/0x290
[  549.398477][T29447]  sysfs_warn_dup+0x8e/0xa0
[  549.398487][T29447]  sysfs_do_create_link_sd+0xc0/0x110
[  549.398499][T29447]  device_add_class_symlinks+0x1cf/0x240
[  549.398512][T29447]  device_add+0x475/0xb50
[  549.398523][T29447]  wiphy_register+0x1c81/0x2aa0
[  549.398586][T29447]  ? __pfx_wiphy_register+0x10/0x10
[  549.398606][T29447]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  549.398623][T29447]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  549.398635][T29447]  ieee80211_register_hw+0x3442/0x40a0
[  549.398653][T29447]  ? ieee80211_register_hw+0x1411/0x40a0
[  549.398666][T29447]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  549.398677][T29447]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  549.398693][T29447]  ? __hrtimer_setup+0x187/0x210
[  549.398704][T29447]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  549.398715][T29447]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  549.398761][T29447]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  549.398774][T29447]  ? trace_kmalloc+0x1f/0xd0
[  549.398787][T29447]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  549.398799][T29447]  ? __x64_sys_sendmsg+0x19b/0x260
[  549.398807][T29447]  ? kstrndup+0xbf/0x160
[  549.398821][T29447]  hwsim_new_radio_nl+0xea4/0x1b10
[  549.398835][T29447]  ? __pfx___nla_validate_parse+0x10/0x10
[  549.398853][T29447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  549.398868][T29447]  ? rcu_is_watching+0x15/0xb0
[  549.398883][T29447]  ? __nla_parse+0x40/0x60
[  549.398896][T29447]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  549.398917][T29447]  genl_family_rcv_msg_doit+0x215/0x300
[  549.398931][T29447]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  549.398947][T29447]  ? bpf_lsm_capable+0x9/0x20
[  549.398958][T29447]  ? security_capable+0x7e/0x2e0
[  549.398978][T29447]  genl_rcv_msg+0x60e/0x790
[  549.398992][T29447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  549.399001][T29447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  549.399020][T29447]  netlink_rcv_skb+0x208/0x470
[  549.399031][T29447]  ? __lock_acquire+0xab9/0xd20
[  549.399042][T29447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  549.399051][T29447]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  549.399071][T29447]  ? down_read+0x1ad/0x2e0
[  549.399081][T29447]  genl_rcv+0x28/0x40
[  549.399089][T29447]  netlink_unicast+0x82f/0x9e0
[  549.399104][T29447]  ? __pfx_netlink_unicast+0x10/0x10
[  549.399115][T29447]  ? netlink_sendmsg+0x642/0xb30
[  549.399125][T29447]  ? skb_put+0x11b/0x210
[  549.399139][T29447]  netlink_sendmsg+0x805/0xb30
[  549.399156][T29447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.399170][T29447]  ? aa_sock_msg_perm+0xf1/0x1d0
[  549.399182][T29447]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  549.399190][T29447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.399209][T29447]  __sock_sendmsg+0x21c/0x270
[  549.399223][T29447]  ____sys_sendmsg+0x505/0x830
[  549.399234][T29447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  549.399247][T29447]  ? import_iovec+0x74/0xa0
[  549.399260][T29447]  ___sys_sendmsg+0x21f/0x2a0
[  549.399270][T29447]  ? __pfx____sys_sendmsg+0x10/0x10
[  549.399299][T29447]  ? __fget_files+0x2a/0x420
[  549.399308][T29447]  ? __fget_files+0x3a0/0x420
[  549.399322][T29447]  __x64_sys_sendmsg+0x19b/0x260
[  549.399331][T29447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  549.399348][T29447]  ? do_syscall_64+0xbe/0xfa0
[  549.399366][T29447]  do_syscall_64+0xfa/0xfa0
[  549.399382][T29447]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.399400][T29447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.399416][T29447]  ? exc_page_fault+0xab/0x100
[  549.399438][T29447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.399451][T29447] RIP: 0033:0x7f98d018eba9
[  549.399469][T29447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.399482][T29447] RSP: 002b:00007f98d0fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.399499][T29447] RAX: ffffffffffffffda RBX: 00007f98d03d5fa0 RCX: 00007f98d018eba9
[  549.399510][T29447] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  549.399519][T29447] RBP: 00007f98d0211e19 R08: 0000000000000000 R09: 0000000000000000
[  549.399529][T29447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.399565][T29447] R13: 00007f98d03d6038 R14: 00007f98d03d5fa0 R15: 00007ffcb01a2c08
[  549.399591][T29447]  </TASK>
[  549.790016][T29460] netlink: 'syz.1.5676': attribute type 10 has an invalid length.
[  549.954981][T29486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5680'.
[  549.963701][T29488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.023708][T29496] netlink: 'syz.1.5681': attribute type 10 has an invalid length.
[  550.052653][T29486] tipc: Resetting bearer <eth:syzkaller0>
[  550.067353][T29486] netlink: 'syz.0.5680': attribute type 10 has an invalid length.
[  550.255685][T29504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  550.315865][T29512] netlink: 'syz.0.5682': attribute type 10 has an invalid length.
[  550.503085][T29525] netlink: 'syz.0.5685': attribute type 10 has an invalid length.
[  550.506570][T29526] netlink: 'syz.0.5685': attribute type 10 has an invalid length.
[  550.534495][   T58] block nbd1: Receive control failed (result -32)
[  550.572306][T29526] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5685'.
[  550.587813][T29532] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5685'.
[  550.630582][T29527] netlink: 'syz.1.5684': attribute type 10 has an invalid length.
[  550.655947][T29526] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  550.667457][T29526] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  550.670735][T29526] tipc: Resetting bearer <eth:syzkaller0>
[  550.853448][T29539] tipc: Resetting bearer <eth:syzkaller0>
[  550.889173][T29539] bond6: left promiscuous mode
[  550.935247][T29555] tipc: Resetting bearer <eth:syzkaller0>
[  551.021981][T29561] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  551.024922][T29561] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  551.033881][T29562] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  551.036512][T29562] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  551.041053][T29562] tipc: Resetting bearer <eth:syzkaller0>
[  551.795657][T29620] tipc: Resetting bearer <eth:syzkaller0>
[  552.326894][T29654] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  552.341108][T29654] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  552.630062][T29675] mac80211_hwsim hwsim506 wlan1: left allmulticast mode

VM DIAGNOSIS:
06:06:37  Registers:
info registers vcpu 0

CPU#0
RAX=b888da4b6a568200 RBX=ffffffff81969548 RCX=b888da4b6a568200 RDX=0000000000000001
RSI=ffffffff8dbc0fba RDI=ffffffff8c038200 RBP=ffffffff8e007ea8 RSP=ffffffff8e007d80
R8 =ffff88804b032fdb R9 =1ffff110096065fb R10=dffffc0000000000 R11=ffffed10096065fc
R12=ffffffff8fc43c30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1c12a38
RIP=ffffffff8b83fde3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f69eba2a440 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f9fdf5a7d20
XMM02=ffffffff41000000 0000000000070014 XMM03=021000300301c010 00069003feffffff
XMM04=e002080060030010 0050030010004003 XMM05=010480a080801000 0004010000000806
XMM06=060168e002080060 0300100050030010 XMM07=0040030210003003 01c01000069003fe
XMM08=ffffffffffffff41 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e2ff5b1b98399800 RBX=ffffffff81969548 RCX=e2ff5b1b98399800 RDX=0000000000000001
RSI=ffffffff8dbc0fba RDI=ffffffff8c038200 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc43c30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b83fde3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055930a2a3131 CR3=000000010e790000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f9fdf5a7d20
XMM02=ffffffff41000000 0000000000070014 XMM03=021000300301c010 00069003feffffff
XMM04=e002080060030010 0050030010004003 XMM05=010480a080801000 0004010000000806
XMM06=060168e002080060 0300100050030010 XMM07=0040030210003003 01c01000069003fe
XMM08=ffffffffffffff41 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
