last executing test programs:

2.170317944s ago: executing program 0 (id=5135):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00008702040624768f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(r0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000400040008000500", @ANYRES32=0x0, @ANYBLOB="479ec9dd55f999ff52a59e6072cf405c64be423b433bcd1af587beefefa80400001288a54c50f79528d30b88361d4fbe0080d936dbf130008dc4ed547f3932d9dc031c79bd72ec94ce4172be20448c67"], 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) (async)
sendto$inet6(r3, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000200)) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
recvfrom$ax25(r4, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.029335486s ago: executing program 0 (id=5136):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$rxrpc(0x21, 0x2, 0x8f402987a84b1fc)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)=',}%}$%&\'[\xee\x00', 0xb)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000001c0), 0x0, 0x40000d4)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x2}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a5c000000090a010320000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007400000002e080006400000000008000f"], 0x84}}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={<r4=>0x0, 0x2, 0x20}, &(0x7f00000000c0)=0xc)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3d}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x79f464ec881632fa}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x7c}}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r8, 0x0, 0x21, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000140)={0x85af, 0x201, 0x0, 0x5, r4}, &(0x7f0000000200)=0xfffffffffffffff4)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x28}}, 0x8000)

1.967863257s ago: executing program 0 (id=5138):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002000)=@newtfilter={0x11ec, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x2}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x7}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xd35f}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "3c30d312cae2e9136d6df4d7e8cd2f52"}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xff, 0xffffff00, 0xff000000]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1148, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_U32_POLICE={0x834, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x3, 0x6, 0x2, 0x9, 0x7, 0x75, 0x8, 0x9, 0x9, 0x3, 0xfc49, 0x5, 0x4, 0x401, 0x2, 0x2, 0x2, 0x5, 0x400, 0x5, 0x5e71391b, 0x7, 0x4, 0x0, 0x1, 0x7fffffff, 0xfffffa57, 0x2, 0x7, 0x473c7ffa, 0x9, 0x4, 0x81, 0xffff, 0x2, 0xff, 0x7fff, 0x0, 0x7, 0x2, 0x7, 0x7, 0x6dc, 0x2, 0x1, 0xbb, 0x603, 0x1, 0x6, 0x441a7dfc, 0xff, 0x5, 0x80000001, 0xa2, 0x158b, 0x173, 0x80, 0xaa, 0x0, 0x1ff, 0x80000000, 0x5a, 0x37b7000, 0x11, 0x2, 0x10000, 0x0, 0x7fff, 0xf2fd, 0x1, 0x7, 0x0, 0x6, 0x2, 0x6, 0xe31a, 0x5, 0x9, 0x5, 0x40, 0x2, 0x5, 0x1, 0x81, 0xc, 0x2, 0x8, 0x40, 0x53, 0x6, 0x3, 0x8, 0x8000, 0xc25, 0xaf5, 0xffffff56, 0x6, 0x5c4, 0x9, 0x7, 0x4, 0x6, 0x8, 0x2, 0x5, 0x7898ec86, 0x2, 0xfffff6f3, 0x1, 0xe, 0x7f, 0x6, 0x0, 0x0, 0x400, 0x9, 0x0, 0x2, 0x3, 0x7fffffff, 0x1, 0x3, 0x2, 0x100, 0x40, 0x8, 0x3ff, 0x80000000, 0x6, 0xc11, 0x401, 0x9d, 0xfffffffc, 0x6c, 0x7, 0x401, 0x4, 0x2, 0x8, 0x800, 0x3dbf, 0x2, 0xf9, 0x8, 0x8b, 0x6, 0x3, 0x1000, 0x7f, 0x7ff0000, 0x7675218b, 0x4, 0x1, 0x1000, 0x9, 0x5, 0x7, 0x35d, 0x100, 0x4, 0x3, 0x101, 0x3ff, 0x2, 0x4, 0x8, 0x0, 0x3, 0x7fffffff, 0xfffffff9, 0x0, 0x7, 0x2, 0x8, 0x2, 0x6, 0x7f, 0xff, 0xdaab, 0x400, 0x0, 0x10, 0x0, 0x2, 0x81, 0x7d, 0x80000001, 0x9, 0x80000, 0x4, 0x7ff, 0x0, 0x6, 0x5, 0x6e54eeb8, 0x9, 0x3, 0x7, 0x8, 0x1, 0x7, 0xcc5, 0x6, 0x1ff, 0xf20, 0xb, 0x0, 0x5f, 0x2, 0x5, 0x6, 0x5, 0x2, 0xc, 0x8, 0x7, 0x2, 0xfffffff1, 0x9, 0x2, 0x978, 0x80, 0x9, 0x8, 0x7, 0xfd35, 0x4, 0x1, 0x6, 0xe697, 0xfff, 0x4, 0x0, 0x4, 0x7f, 0x94, 0x0, 0x1, 0x6, 0x9, 0xc4, 0x7, 0x4, 0x8, 0x101, 0x3c, 0x1, 0x7, 0x9, 0x200, 0x7f, 0x4, 0x0, 0x28b]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x48ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x7, 0x94e, 0x9, 0x0, 0x8, 0xfffffffd, 0x3, 0x9, 0x909, 0x2, 0x1, 0xa11d, 0xffffbacb, 0xa329, 0x200, 0x0, 0x40, 0x80000000, 0xf, 0x4, 0x6, 0xd, 0x2, 0x1, 0x100, 0xf, 0x0, 0x2, 0x7, 0x7, 0x2, 0x54, 0x1, 0x101, 0xfffffffd, 0x3, 0xfffffc01, 0x7, 0x3, 0x4c5cef0c, 0x5, 0x26, 0x80e, 0x7, 0x4, 0x5, 0x40, 0x4, 0x8, 0x7, 0xfa1, 0x9, 0x8, 0xfff, 0xbc3c, 0x40000000, 0xfd, 0x2, 0x0, 0x9, 0x3, 0x3, 0xffff0000, 0xfffffffc, 0x534b, 0x401, 0x3, 0x9, 0x7, 0x8, 0x4, 0x7, 0xbe, 0x7, 0xb3cf, 0x81, 0x2be, 0x2, 0x0, 0x4, 0x7ff, 0x8, 0x3, 0xfff, 0x4, 0xbae, 0x10, 0x6, 0x8, 0x2, 0x9, 0x95, 0x6af, 0x0, 0xfffff801, 0x1, 0x1, 0x3, 0x1, 0x3a16, 0xff, 0xffffffff, 0x8000, 0xe, 0x3, 0x5, 0x5, 0x7fffffff, 0x7fffffff, 0xde, 0x80000001, 0x1, 0x4, 0x6, 0x2, 0x1, 0x6, 0x3, 0x8000, 0x3, 0x8, 0x2, 0xb, 0x1, 0x8, 0x9, 0x9, 0x7f, 0x8, 0xf, 0x7, 0x9, 0x9, 0xfffffffe, 0x80, 0x31e4, 0xf075, 0x64, 0x10, 0xc72, 0x3, 0x0, 0x1, 0x0, 0x7ff, 0x5, 0x1, 0x9b6, 0xb, 0x2, 0x4, 0x8, 0x9, 0x8, 0x3, 0x4425, 0xa22, 0x1, 0x5, 0x200000, 0x2, 0x9, 0x3, 0x5, 0x2, 0x5, 0x1, 0x6, 0xffff0001, 0x8000, 0x9, 0xd, 0x7ff, 0x7, 0x3, 0xb542, 0x400, 0x1, 0x7, 0x4, 0x0, 0x3, 0x4, 0xffff8001, 0x3, 0x5, 0x0, 0x10, 0x2, 0x884, 0x8, 0xfff, 0xfffeffff, 0x9, 0x4, 0x3, 0x1, 0x7, 0xfffffff7, 0x8, 0x702337e7, 0x3, 0x0, 0xdb, 0x401, 0x4, 0x66, 0x9, 0xfffffffc, 0x4f35, 0x71d, 0x5, 0x3, 0x4, 0xffff, 0x3, 0x4, 0x10, 0x5, 0x80, 0x9, 0x0, 0x7, 0xbcac, 0xfc000000, 0x1, 0x896, 0xb, 0x8, 0x8, 0x9, 0xa, 0xf90, 0x1, 0x4, 0x313, 0x80, 0x3ff, 0x7, 0xd, 0x4, 0x0, 0x4dc, 0x45, 0xffff2112, 0xffffffff, 0x5, 0x3, 0x0, 0xfffffff0, 0x10, 0x1fdd, 0x9, 0x1, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x785f}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc8}, @TCA_U32_ACT={0x73c, 0x7, [@m_nat={0x1b8, 0x2, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x8000, 0x2, 0x6, 0x5590}, @empty, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffd, 0x0, 0x0, 0x80000001}, @rand_addr=0x64010100, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff0a, 0x6, 0x3, 0x4, 0x3}, @private=0xa010100, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xe4, 0x4, 0x8000, 0x29d}, @rand_addr=0x64010100, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x2, 0x7fffffff, 0x90000000}, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x46, 0x6, 0x2, 0x3, 0x7fffffff}, @empty, @broadcast, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x0, 0x5, 0xd4f}, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0x1, 0x1, 0x6}, @private=0xa010101, @rand_addr=0x64010100, 0xff, 0x1}}]}, {0x4d, 0x6, "45bab9e23ccb6d64585d433682a6cd148ea7d6fe97c988f03dccf7f006f80ef15c55a634efd7538f1d962ecba392ca77493deebd1f8b97e52b1a69a711ba623cfbbc54671c2e581c3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0xfc, 0x0, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xf, 0x10000000, 0x9, 0x200}, @local, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff7ea, 0x1, 0x5, 0x9, 0x1000}, @multicast2, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0x9, 0x2}, @broadcast, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x81, 0x3, 0x3, 0x853}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x9, 0x3, 0x8, 0x3}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}]}, {0xa, 0x6, "e9d4c916b5ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xc0, 0x10, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9d6b}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xe0b}]}]}, {0x75, 0x6, "fce1ee5238b3e84883ca7df7886131168ac3d75f5ec5f45a8a3e080867a51af9cccfc442a95dc045ba43d0200d5dff7d006270554e2fc360b68733901dcaf7fe7116970ab491f6da626f918efefdd703988718925b321db7319e1dc5803861b709f6a3b90536952588046de89ccfa242a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xc84e}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "01a0889202b526d857ae8e58825124d9"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x84, 0x6, "8796c4f73b0658ac20fec47bba946c05d46240295cf8d01e98d4491bb9b70fcfd7eaa616764b2f5be8158ab464e8ff2c6f7cf34b7c590a8c85c774b0ae93e84922b389fa6fbb6f841906cfa57b206529a0677993b0ad628426ccfeb38cbfdf98694b46577eb3d08469242eb047adefa119900fbc39fe9e14fa47886c1ad63aa4"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x144, 0xc, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x10000000, 0x4, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3, 0x10000000, 0x9, 0x80000000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x0, 0x7}, 0x7b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe2, 0x45414fde, 0x3, 0x8, 0x94c0}, 0xbe2f}}]}, {0xa1, 0x6, "e520fd0afc0dc4edb3f8e64b1c5a685380c4ee95c203d1b9b6ca2a41c6cb83500189f62991019a4ed3dde269a22f13b7033dd0dcf1c5436c8fbcdef246f982b2e0ef3519596b51ca2b5aefec6945a0f6340b16b6e6357e7dc37b257e538ba4cd7b5a0ec0c01162c4a963206fc63a3a1e123d6170a0cdc228e066bec655a91ab4ebafdb681f9e3d44a734453fa54724359614f24bcfdf384bf4896d0e83"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x168, 0x11, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x37}, @TCA_IPT_TARG={0x4f, 0x6, {0x0, 'security\x00', 0xee, 0x3, "b584964f196dc26c4a20aedd4191272a5e244988579dcac56c4655883122367852206db6c1"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x96, 0x6, "1fd9739c40074dcaaabcf26c1d071713e472b9c4286d1e4ef8158352a2f58c6afb03a2bf13c827c04f4460bf91e5660620d5728f4996e3e102ea472332e04b8366e4a655183fc5324812884e1f0de729bf2bce712cd9cc603cdaad4632708055590f2de44a593a9836bc9af15883e9d3182f42f62b2fdd33381125f0bcae41e94f8bd0bf7fb675fa9e7275f64f4e6a09e8f1"}, {0xc}, {0xc, 0x8, {0x1, 0xc9601c5d5e27bacb}}}}]}, @TCA_U32_ACT={0x1b4, 0x7, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x7ff, 0x20000000, 0x4, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x400, 0x8, 0x40, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x47e9, 0xf, 0x10000000, 0x0, 0x7fff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5458, 0x9, 0x20000000, 0x6, 0xb0}, 0x3}}]}, {0x32, 0x6, "3cf102f57615db346f2c5b9a74741158fc0b86cbd4662c995b75a4c76e868ef655a1efeadc403032cbb222f3408f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x12000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x3, 0x1, 0x6, 0x7fff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7ff, 0x3, 0x2, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfff, 0x2, 0x4, 0x8001}}]}, {0x33, 0x6, "3533d55394be476373be3d022578e52d0cb0d33915b24f467ea941ff01519c022279a50f718823243e9fe07e70af69"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x11ec}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000005000000dbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0xc4, 0x0, 0x1, 0x70bd2a, 0x25dfdc00, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}}, 0x8040)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @handle=@pci={{0x8}, {0x11}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x40000)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="051f00000000080000000600000008000300db6ad71a363f94bb47f98aadb5575757386943363b8e707be9c3286cce5d2d06751329206a3b210099f86d415d3b3551c79c311983aecca0931a97cbf906d4824abd047fa6e560751cce2cb9b0897950429e7526173fd450c66c692f0ba0e8983fb0fecc896d521b00"/132, @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008002300610033f70fb3681174f9f09f94ff012afa74f29577", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000b80)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void, [{0xdd, 0xa7, "49c4a4b0168be4bde94ca0473f2f0c09dfd72049b06ddd7c09c0f81e0453378319a0904113d27778014854cd66de02be79afd0b7129a142397ddefd26b7ea745bbec69d1362e1a84ab05b7e334e08bd328e21fbf6ab5cd464b59c2e708c09b4dd7322c546e73b0521ee95aee0be4a1f68a36b1f8aaa4b7077c4bdc5d35d55af93de67a78fbd1d03204ef00b40e8a006100553525a6e648dc0832738188a8e0ce80d372abf31a37"}, {0xdd, 0xad, "3434a431b1d1020a03258f8b015f6231fa8ad00dc245db9afac6595a90642812225325bc63ba17775a2d2539f9d5623f72b2de969db767ffed1cc73f7b49d99131542e14962966b65ad3e24d41bcbb82347a9472efaa92c2413797d3f25b2df8152eca67cf9d663267b354e84f65ce40f8aa0e1fae044638b06ae247f169eb0064feb883e8edc5b2ce2763e2f0b61cd09210eadf6bdac169c8c9966fb410f15110060174a5d7c8a382a174e24f"}]}, 0x176)

1.580977554s ago: executing program 1 (id=5141):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0x5, ['\x00', '\x00']}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

1.469187762s ago: executing program 1 (id=5142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r13 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000005c0)="edce35b49b1b4d2fef70c40aef4fedc3", 0x10}], 0x2)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.467349945s ago: executing program 2 (id=5143):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x6, 0x4, 0xf, 0xfff}, 0x14)
setsockopt(r5, 0x84, 0x7f, 0x0, 0x0)
syz_emit_ethernet(0x5e9, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b3, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f7"}}}}}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.199756332s ago: executing program 1 (id=5144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0xc094}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f00000000c0)=0x1000, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)={0x9, {{0xa, 0x4e21, 0x9, @local}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x56, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8}}]}, 0x110)
clock_gettime(0x0, &(0x7f0000000240)={<r6=>0x0, <r7=>0x0})
accept4$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x0)
ppoll(&(0x7f0000000200)=[{r4, 0x2080}, {r4, 0x8000}, {r4, 0x4400}, {r0, 0x2000}, {r4, 0x40}], 0x5, &(0x7f0000000280)={r6, r7+60000000}, &(0x7f00000002c0)={[0x401]}, 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="0100000000eb"})
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0xc094}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f00000000c0)=0x1000, 0x4) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)={0x9, {{0xa, 0x4e21, 0x9, @local}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x56, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8}}]}, 0x110) (async)
clock_gettime(0x0, &(0x7f0000000240)) (async)
accept4$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x0) (async)
ppoll(&(0x7f0000000200)=[{r4, 0x2080}, {r4, 0x8000}, {r4, 0x4400}, {r0, 0x2000}, {r4, 0x40}], 0x5, &(0x7f0000000280)={r6, r7+60000000}, &(0x7f00000002c0)={[0x401]}, 0x8) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="0100000000eb"}) (async)

1.120960531s ago: executing program 1 (id=5145):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r7, &(0x7f0000000280), 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)

600.071438ms ago: executing program 0 (id=5146):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
close(0x3) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bind(0xffffffffffffffff, &(0x7f0000001340)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x24008800) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r4)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x80000010}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)="2df7b17ff6d720c6979367485851e978ae7b45b0", &(0x7f0000000340)=""/4096}, 0x20)

599.489656ms ago: executing program 2 (id=5147):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
getsockopt$packet_int(r6, 0x107, 0x11, 0x0, &(0x7f0000000100)) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r10, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x20000) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r9, 0xfffff000) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
write$tun(r11, &(0x7f0000000080)=ANY=[], 0xfdef) (async, rerun: 32)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) (async, rerun: 32)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000002c0)={0x0, 0xffffffb7, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r12, @ANYBLOB="010029bd7000000000003a00000008000300", @ANYRES32=r1, @ANYRESOCT=r7], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

548.941779ms ago: executing program 0 (id=5148):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x6000000000000001, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000064}, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x0, 0x3, 0x3ff, 0x2, @empty, @private0, 0x8, 0x8000, 0x718}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000380)=""/146, 0x2c, 0x92, 0x1, 0x0, 0xc071691778324d00}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000009000000f8ffffff0020000080010000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="08a7e59488412f880fc3033f6a030000000100"/28], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="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"/282], 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

548.02705ms ago: executing program 1 (id=5149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0xffffc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000b0a0102e20000000000000007000003140000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d00000000"], 0x6c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r10, @ANYBLOB="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"/314], 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x8880)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000401000100ffdbdf25270000000600360087010000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008095)
writev(r1, &(0x7f00000023c0)=[{&(0x7f0000002200)="b3158e2471", 0x5}], 0x1)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r9)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_ifreq(r11, 0x8932, &(0x7f0000000140)={'team_slave_1\x00', @ifru_map={0x2, 0x38, 0x59, 0x8, 0x1, 0x9}})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010ffffffff000000000000000700000a147d2a3a9c00010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r12 = socket(0x6, 0x400, 0x8)
sendmsg$nl_route(r12, 0x0, 0x0)

481.393084ms ago: executing program 2 (id=5150):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000100626f5c64000000000c00020008000100060000"], 0x3c}}, 0x24000004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

370.685009ms ago: executing program 2 (id=5151):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000012701cf7e740357f8df901d01000000"], 0x14}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000894}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000003a8b1f6a19dd1dfeb8d0181257e279cb08d0b710c1526a1eb1515ef2c5d2b47e273a08d78ec1fc1df93ffb54e20924fd07f2d52992e9de92b11b6be44925b0491100141b58a2ee50b53fe263203e7b86f87e0e0000000000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="64719b1e2a95fe11a3290712cdfcd0e7d9173000135e73746b93ec5a3327e7f49379ebeff569012f552020c33d2b5b606f60d9024b377edda46de53805cfff8bf77f19179fa88323298a95e166bf5ae73d365ddfd14fd8cdb2fe865a2f90fa10ece026577f8f1080a3d3a2718ad2e4706e5bf908d0867f1f28cb35dba01cddbbea59f2809bf8fbdb88cf94e78e2923dcb2419d04a1bb7584aff11ea4", @ANYRES64=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

271.470276ms ago: executing program 0 (id=5152):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0)

269.151859ms ago: executing program 1 (id=5153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, &(0x7f0000000080)=0x81)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e22, 0x28000, @local, 0x2}}, 0x44, 0x19a, 0xa, 0x190000, 0xcd1904906ea09c6f, 0xffffffff, 0x77}, &(0x7f00000003c0)=0x9c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000480)={r4, 0x5}, &(0x7f00000005c0)=0x6)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18)
socket(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c8660"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

210.995156ms ago: executing program 2 (id=5154):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x6000000000000001, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000540)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000064}, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r7=>0x0, 0x29, 0x0, 0x3, 0x3ff, 0x2, @empty, @private0, 0x8, 0x8000, 0x718}})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000380)=""/146, 0x2c, 0x92, 0x1, 0x0, 0xc071691778324d00}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x9, 0xfffffff8, 0x2000, 0x180, 0xffffffffffffffff, 0x2, '\x00', r7, r8, 0x3, 0x1, 0x3, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRESOCT=r11, @ANYBLOB="04005b00ff01000040000000"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="c02cedea1a55a3efeeb90fc57761cbaa72dba756675dcc58a9a6eb50955dad03d52998892f50c8be13349021f9497027687514aead4566fbef9c6bff587e10a0ef7419e2f0e44845213e0f4dee0e4624dc26bc116f27befdd8a0cf9fe65f947717d86b8cb900634f257a546b26bde7a405c3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x95840ac3a4b9672f}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x94}}, 0x0)

0s ago: executing program 2 (id=5155):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x1, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x1}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0xfffffffffffffffa)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000060000000600000002000000", @ANYRES32, @ANYBLOB="0300000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)="d5d53539db8361a3fd21a350f4ac06ffb72b92ecfe015d49ec3ac77142130749f366453d3d9a123f7a09339f928c6977308ba0c39f27ba21b122464d9f", &(0x7f0000000580), 0xf10, r11}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x20, 0xfd, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="6001000016000100000000000000000000000000000000000000000000000001ffffffff00000000000000000000000000000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c00000000000000000000000000ffffacdf0101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000024001700020000002bbd700028bd700029bd70002bbd7000f25f4036f42700000700000044000500fe880000000000000000000000000001000004d23c0000000a000000e000000100000000000000000000000003350000010204000000000007000000ff070000"], 0x160}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000380)={'vcan0\x00'})

kernel console output (not intermixed with test programs):

] Node 0 DMA32: 1*4kB (E) 12*8kB (ME) 207*16kB (UME) 332*32kB (UME) 162*64kB (UME) 60*128kB (UME) 21*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 3*2048kB (ME) 32*4096kB (UM) = 179796kB
[  302.913420][T21589] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  302.921633][T21589] Node 1 Normal: 992*4kB (U) 241*8kB (UE) 75*16kB (U) 313*32kB (UE) 145*64kB (UE) 31*128kB (UM) 29*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 7*2048kB (UM) 46*4096kB (UM) = 249240kB
[  302.939708][T21589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  302.942832][T21589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  302.946449][T21589] 42495 total pagecache pages
[  302.948246][T21589] 0 pages in swap cache
[  302.949794][T21589] Free swap  = 124996kB
[  302.950157][T21592] bond30 (unregistering): Released all slaves
[  302.951147][T21589] Total swap = 124996kB
[  302.951156][T21589] 786301 pages RAM
[  302.956485][T21589] 0 pages HighMem/MovableOnly
[  302.963060][T21589] 241346 pages reserved
[  302.968074][T21589] 0 pages cma reserved
[  303.185931][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'.
[  303.244192][  T261] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  303.365857][ T5867] bond30: (slave wlan0): failed to get link speed/duplex
[  303.416554][T21627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  303.476507][   T12] bond30: (slave wlan0): failed to get link speed/duplex
[  303.570117][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3546'.
[  303.596852][ T5867] bond30: (slave wlan0): failed to get link speed/duplex
[  303.706200][   T12] bond30: (slave wlan0): failed to get link speed/duplex
[  303.767018][T21637] validate_nla: 8 callbacks suppressed
[  303.767033][T21637] netlink: 'syz.0.3547': attribute type 10 has an invalid length.
[  303.816176][ T5867] bond30: (slave wlan0): failed to get link speed/duplex
[  303.936442][   T12] bond30: (slave wlan0): failed to get link speed/duplex
[  303.957438][T21655] netlink: 'syz.0.3550': attribute type 13 has an invalid length.
[  303.960653][T21655] netlink: 'syz.0.3550': attribute type 17 has an invalid length.
[  303.964173][T21655] netlink: 'syz.0.3550': attribute type 5 has an invalid length.
[  304.000440][T21658] netlink: 'syz.1.3551': attribute type 6 has an invalid length.
[  304.066814][   T12] bond30: (slave wlan0): failed to get link speed/duplex
[  304.099197][T21654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3550'.
[  304.176043][ T5867] bond30: (slave wlan0): failed to get link speed/duplex
[  304.219482][T21674] netlink: 'syz.1.3553': attribute type 10 has an invalid length.
[  304.328182][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'.
[  304.332000][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'.
[  304.344751][T21677] netlink: 'syz.1.3554': attribute type 1 has an invalid length.
[  304.405275][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'.
[  304.756066][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'.
[  304.758955][T21704] nbd: must specify a device to reconfigure
[  305.084725][T21728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3568'.
[  305.703308][T21773] netlink: 'syz.2.3576': attribute type 10 has an invalid length.
[  305.804266][T21782] dvmrp8: entered allmulticast mode
[  305.861715][T21785] netlink: 'syz.0.3578': attribute type 23 has an invalid length.
[  306.167564][T21808] netlink: 'syz.2.3583': attribute type 4 has an invalid length.
[  306.197573][T21811] netlink: 'syz.1.3584': attribute type 11 has an invalid length.
[  306.429868][T21819] bond30: (slave wlan0): Releasing active interface
[  306.460013][T21821] nbd: device at index 2 is going down
[  306.515924][T21825] 8021q: adding VLAN 0 to HW filter on device bond30
[  306.534398][T21824] 8021q: adding VLAN 0 to HW filter on device bond30
[  306.539781][T21824] bond30: (slave vxcan5): The slave device specified does not support setting the MAC address
[  306.545347][T21824] bond30: (slave vxcan5): Error -95 calling set_mac_address
[  306.583908][T21825] veth39: entered promiscuous mode
[  306.610552][T21825] bond30: (slave veth39): Enslaving as an active interface with a down link
[  306.851413][T21833] __nla_validate_parse: 8 callbacks suppressed
[  306.851463][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'.
[  307.213201][T21838] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20002
[  307.704893][T21858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3596'.
[  307.839780][T21865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.843727][T21865] syzkaller0: entered promiscuous mode
[  307.845979][T21865] syzkaller0: entered allmulticast mode
[  307.944234][T21872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  308.015233][T21878] netlink: 604 bytes leftover after parsing attributes in process `syz.2.3602'.
[  308.028824][T21881] netlink: 604 bytes leftover after parsing attributes in process `syz.2.3602'.
[  308.057682][T21878] syzkaller1: entered promiscuous mode
[  308.059573][T21878] syzkaller1: entered allmulticast mode
[  308.150578][T21889] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  308.880699][T21950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3614'.
[  308.960617][T21950] validate_nla: 7 callbacks suppressed
[  308.960637][T21950] netlink: 'syz.2.3614': attribute type 10 has an invalid length.
[  309.071336][T21943] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.3614'.
[  309.101969][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'.
[  309.121509][T21960] netlink: 'syz.0.3617': attribute type 30 has an invalid length.
[  309.126651][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'.
[  309.270954][T21972] netlink: 'syz.0.3619': attribute type 3 has an invalid length.
[  309.552109][T22000] netlink: 'syz.1.3625': attribute type 1 has an invalid length.
[  309.578126][T22000] 8021q: adding VLAN 0 to HW filter on device bond32
[  309.640314][T22007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3626'.
[  309.817939][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'.
[  310.495974][T22064] netlink: 'syz.0.3632': attribute type 13 has an invalid length.
[  310.499116][T22064] netlink: 'syz.0.3632': attribute type 17 has an invalid length.
[  310.515248][T22064] net_ratelimit: 19 callbacks suppressed
[  310.515256][T22064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.630813][T22067] !: renamed from dummy0 (while UP)
[  311.177220][T22127] pim6reg1: entered promiscuous mode
[  311.179149][T22127] pim6reg1: entered allmulticast mode
[  311.182203][T22127] netlink: 'syz.1.3641': attribute type 27 has an invalid length.
[  311.263557][T22127] vlan2: left allmulticast mode
[  311.265644][T22127] veth1: left allmulticast mode
[  311.275352][T22127] veth25: left promiscuous mode
[  311.277909][T22127] veth27: left promiscuous mode
[  311.289192][T22127] pim6reg1: left promiscuous mode
[  311.291327][T22127] pim6reg1: left allmulticast mode
[  311.708652][T22164] netlink: 'syz.1.3644': attribute type 10 has an invalid length.
[  312.154048][T22191] __nla_validate_parse: 1 callbacks suppressed
[  312.154067][T22191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3653'.
[  312.362580][T22179] netlink: 'syz.1.3649': attribute type 3 has an invalid length.
[  312.563902][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3656'.
[  312.620431][T22219] netlink: 'syz.1.3656': attribute type 10 has an invalid length.
[  313.096383][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'.
[  313.469624][T22284] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3668'.
[  313.473485][T22284] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  313.478778][T22284] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  313.703179][T22287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3668'.
[  313.775191][T22301] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3671'.
[  313.783822][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'.
[  313.973775][T22323] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  313.984060][T22323] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  314.231918][T22323] netlink: 'syz.0.3675': attribute type 11 has an invalid length.
[  314.550757][T22353] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3681'.
[  314.614751][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'.
[  314.738558][T22356] validate_nla: 1 callbacks suppressed
[  314.738578][T22356] netlink: 'syz.0.3682': attribute type 10 has an invalid length.
[  314.837002][T22371] netlink: 'syz.1.3685': attribute type 1 has an invalid length.
[  314.869614][T22371] 8021q: adding VLAN 0 to HW filter on device bond33
[  314.913307][T22371] 8021q: adding VLAN 0 to HW filter on device bond33
[  314.927283][T22371] bond33: (slave vxcan7): The slave device specified does not support setting the MAC address
[  314.934716][T22371] bond33: (slave vxcan7): Error -95 calling set_mac_address
[  316.254463][T22434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3698'.
[  317.009796][T22456] netlink: 'syz.2.3705': attribute type 10 has an invalid length.
[  317.300493][T22488] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.306648][T22488] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  317.313636][T22488] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  317.318696][T22488] tipc: Resetting bearer <eth:syzkaller0>
[  317.412192][T22498] netlink: 'syz.2.3714': attribute type 12 has an invalid length.
[  317.415233][T22498] __nla_validate_parse: 2 callbacks suppressed
[  317.415247][T22498] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3714'.
[  317.605299][T22514] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  317.693389][T22527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'.
[  317.900933][T22534] netlink: 'syz.1.3725': attribute type 10 has an invalid length.
[  318.163191][T22554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3728'.
[  318.598115][T22564] netlink: 'syz.2.3730': attribute type 10 has an invalid length.
[  318.604202][T22564] bond0: (slave 0!): Releasing backup interface
[  318.611108][T22564] team0: Failed to send options change via netlink (err -105)
[  318.613418][T22564] team0: Port device 0! added
[  318.682514][T22559] netlink: 'syz.0.3729': attribute type 10 has an invalid length.
[  318.809803][T22580] syzkaller1: entered promiscuous mode
[  318.811739][T22580] syzkaller1: entered allmulticast mode
[  318.962085][T22598] netlink: 'syz.2.3740': attribute type 32 has an invalid length.
[  319.019469][T22606] netlink: 'syz.1.3743': attribute type 23 has an invalid length.
[  319.134988][T22617] netlink: 'syz.2.3745': attribute type 10 has an invalid length.
[  319.144420][T22616] syzkaller0: left promiscuous mode
[  319.146403][T22616] syzkaller0: left allmulticast mode
[  319.163350][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3744'.
[  319.180543][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'.
[  319.230655][T22629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3747'.
[  319.298417][T22628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3748'.
[  319.434470][T22655] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  319.763292][T22690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3765'.
[  319.916097][T22708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3769'.
[  319.920220][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'.
[  320.012731][T22718] netlink: 'syz.1.3770': attribute type 1 has an invalid length.
[  320.084927][T22717] bond34: (slave bridge7): making interface the new active one
[  320.091747][T22717] bond34: (slave bridge7): Enslaving as an active interface with an up link
[  320.214833][T22732] netlink: 'syz.2.3773': attribute type 12 has an invalid length.
[  320.501159][T22760] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  320.504349][T22760] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  320.644507][T22776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  320.720956][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.723757][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.784800][T22792] netlink: 'syz.1.3788': attribute type 1 has an invalid length.
[  320.821954][T22792] 8021q: adding VLAN 0 to HW filter on device bond35
[  320.881873][T22792] 8021q: adding VLAN 0 to HW filter on device bond35
[  320.893608][T22792] bond35: (slave vxcan7): The slave device specified does not support setting the MAC address
[  320.899042][T22792] bond35: (slave vxcan7): Error -95 calling set_mac_address
[  320.941898][T22801] veth29: entered promiscuous mode
[  320.947777][T22801] bond35: (slave veth29): Enslaving as an active interface with a down link
[  320.990642][T22811] team0: Port device 0! removed
[  320.999285][T22789] netlink: 'syz.0.3787': attribute type 10 has an invalid length.
[  321.018264][T22811] bond18: (slave veth21): Releasing active interface
[  321.022273][T22811] bond19: (slave veth23): Releasing active interface
[  321.027240][T22811] bond21: (slave veth27): Releasing active interface
[  321.031167][T22811] bond24: (slave veth29): Releasing active interface
[  321.034927][T22811] bond25: (slave veth31): Releasing active interface
[  321.039862][T22811] bond25: (slave veth33): Releasing active interface
[  321.043535][T22811] bond26: (slave veth35): Releasing active interface
[  321.047073][T22811] bond27: (slave veth37): Releasing active interface
[  321.051482][T22811] bond28: (slave bridge5): Releasing active interface
[  321.059518][T22811] bond30: (slave veth39): Releasing active interface
[  321.088895][T22811] netlink: 'syz.2.3789': attribute type 10 has an invalid length.
[  321.242789][   T34] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  321.736142][T22860] netlink: 'syz.1.3800': attribute type 10 has an invalid length.
[  322.130654][T22864] syzkaller0: entered promiscuous mode
[  322.132323][T22864] syzkaller0: entered allmulticast mode
[  322.134395][T22863] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.212757][T22870] netlink: 'syz.1.3802': attribute type 10 has an invalid length.
[  322.312841][T22882] netlink: 'syz.0.3807': attribute type 13 has an invalid length.
[  322.320593][T22882] netlink: 'syz.0.3807': attribute type 17 has an invalid length.
[  322.325421][T22882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.468739][T22894] netlink: 'syz.1.3809': attribute type 1 has an invalid length.
[  322.489388][T22894] 8021q: adding VLAN 0 to HW filter on device bond36
[  322.508953][T22894] 8021q: adding VLAN 0 to HW filter on device bond36
[  322.511298][T22894] bond36: (slave vxcan7): The slave device specified does not support setting the MAC address
[  322.516027][T22894] bond36: (slave vxcan7): Error -95 calling set_mac_address
[  322.582252][T22894] veth31: entered promiscuous mode
[  322.587433][T22894] bond36: (slave veth31): Enslaving as an active interface with a down link
[  322.852974][T22912] __nla_validate_parse: 7 callbacks suppressed
[  322.852993][T22912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3812'.
[  323.084482][T22943] tipc: Resetting bearer <eth:syzkaller0>
[  323.562167][T22948] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3821'.
[  323.743228][T22957] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3823'.
[  323.842112][T22963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'.
[  323.958924][T22974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3827'.
[  324.322199][T23006] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3835'.
[  324.462973][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'.
[  324.618895][T23027] 8021q: adding VLAN 0 to HW filter on device bond33
[  324.642143][T23027] 8021q: adding VLAN 0 to HW filter on device bond33
[  324.645299][T23027] bond33: (slave vxcan9): The slave device specified does not support setting the MAC address
[  324.650894][T23027] bond33: (slave vxcan9): Error -95 calling set_mac_address
[  324.692099][T23029] veth41: entered promiscuous mode
[  324.697604][T23029] bond33: (slave veth41): Enslaving as an active interface with a down link
[  324.708385][T15348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.711856][T15348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.041515][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  325.208741][T23058] validate_nla: 8 callbacks suppressed
[  325.208755][T23058] netlink: 'syz.1.3848': attribute type 1 has an invalid length.
[  325.295625][T15348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.303622][T15348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.439683][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'.
[  325.456880][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'.
[  325.540504][T23093] netlink: 'syz.0.3860': attribute type 1 has an invalid length.
[  325.582852][T23093] 8021q: adding VLAN 0 to HW filter on device bond34
[  325.631751][T23109] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  325.645056][T23109] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  325.665429][T23101] netlink: 'syz.1.3859': attribute type 10 has an invalid length.
[  325.762630][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.767434][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.431854][T23185] netlink: 'syz.2.3877': attribute type 1 has an invalid length.
[  326.452160][T23185] 8021q: adding VLAN 0 to HW filter on device bond32
[  326.477500][T23185] 8021q: adding VLAN 0 to HW filter on device bond32
[  326.480642][T23185] bond32: (slave vxcan5): The slave device specified does not support setting the MAC address
[  326.486798][T23185] bond32: (slave vxcan5): Error -95 calling set_mac_address
[  326.531500][T23189] veth41: entered promiscuous mode
[  326.539366][T23189] bond32: (slave veth41): Enslaving as an active interface with a down link
[  326.596509][T23192] netlink: 'syz.1.3878': attribute type 13 has an invalid length.
[  326.600433][T23192] netlink: 'syz.1.3878': attribute type 17 has an invalid length.
[  326.651589][T23192] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.659316][T23192] 8021q: adding VLAN 0 to HW filter on device team0
[  326.670177][T23192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.903219][T23218] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  326.955144][T23224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  326.970591][T23225] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  326.973175][T23225] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  327.193522][T23234] netlink: 'syz.1.3890': attribute type 10 has an invalid length.
[  327.314666][T23266] bond32: (slave veth41): Releasing active interface
[  327.341068][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  327.802373][T23306] netlink: 'syz.2.3903': attribute type 10 has an invalid length.
[  327.949791][T23309] __nla_validate_parse: 8 callbacks suppressed
[  327.949807][T23309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3905'.
[  327.957628][T23309] tipc: Invalid UDP bearer configuration
[  327.957676][T23309] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  328.001515][T23311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.138268][T23314] bond37: entered promiscuous mode
[  328.209236][T23336] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3912'.
[  328.212383][T23336] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  328.220402][T23336] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  328.274812][T23314] netlink: 'syz.1.3907': attribute type 10 has an invalid length.
[  328.287838][T23345] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001
[  328.406385][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'.
[  328.417265][T23359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3917'.
[  328.423766][T23360] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3917'.
[  328.431820][T23361] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3915'.
[  328.451553][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3915'.
[  328.591370][T23375] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3922'.
[  328.595115][T23375] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  328.611563][T23375] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  328.769845][T23396] netlink: 'syz.0.3926': attribute type 1 has an invalid length.
[  328.803027][T23396] 8021q: adding VLAN 0 to HW filter on device bond35
[  328.835596][T23396] veth43: entered promiscuous mode
[  328.921920][T23404] syzkaller1: entered promiscuous mode
[  328.923870][T23404] syzkaller1: entered allmulticast mode
[  328.933001][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.935456][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.097446][T23418] netlink: 'syz.1.3931': attribute type 11 has an invalid length.
[  329.300734][T23434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'.
[  329.504303][T23457] bridge6: the hash_elasticity option has been deprecated and is always 16
[  329.507995][T23457] bridge6: entered allmulticast mode
[  329.511800][T23457] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3938'.
[  330.938182][T23546] validate_nla: 5 callbacks suppressed
[  330.938203][T23546] netlink: 'syz.2.3959': attribute type 10 has an invalid length.
[  331.283139][T23593] netlink: 'syz.2.3968': attribute type 1 has an invalid length.
[  331.290443][T23593] netlink: 'syz.2.3968': attribute type 2 has an invalid length.
[  331.614255][T23628] netlink: 'syz.0.3972': attribute type 10 has an invalid length.
[  331.659628][T23614] netlink: 'syz.1.3974': attribute type 10 has an invalid length.
[  332.197844][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.201646][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.247924][T23675] netlink: 'syz.1.3987': attribute type 10 has an invalid length.
[  332.251474][ T5871] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  332.457882][T23713] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.484821][T23716] bond33: (slave veth41): Releasing active interface
[  332.631894][T23732] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  332.634554][T23732] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  332.931721][T23746] veth29: left promiscuous mode
[  332.938072][T23746] veth31: left promiscuous mode
[  332.940198][T23746] bond37: left promiscuous mode
[  333.101466][T23767] __nla_validate_parse: 60 callbacks suppressed
[  333.101479][T23767] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4008'.
[  333.217912][T23776] netlink: 'syz.2.4012': attribute type 16 has an invalid length.
[  333.220868][T23776] netlink: 'syz.2.4012': attribute type 17 has an invalid length.
[  333.293116][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'.
[  333.294641][T23776] tipc: Resetting bearer <ib:ip6gre0>
[  333.331270][T23776] tipc: Resetting bearer <eth:syzkaller0>
[  333.351605][T23784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4009'.
[  333.387082][T23776] IPv6: NLM_F_REPLACE set, but no existing node found!
[  334.623177][T23805] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4019'.
[  334.627260][T23805] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4019'.
[  334.751555][T23809] netlink: 'syz.2.4019': attribute type 11 has an invalid length.
[  335.103490][T23830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4023'.
[  335.264481][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'.
[  335.267069][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'.
[  335.274816][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4026'.
[  335.282429][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'.
[  335.328712][T23836] veth1_macvtap: entered allmulticast mode
[  335.513482][T23860] netlink: 'syz.0.4030': attribute type 1 has an invalid length.
[  335.532841][T23860] 8021q: adding VLAN 0 to HW filter on device bond36
[  335.555406][T23860] 8021q: adding VLAN 0 to HW filter on device bond36
[  335.558706][T23860] bond36: (slave vxcan9): The slave device specified does not support setting the MAC address
[  335.563152][T23860] bond36: (slave vxcan9): Error -95 calling set_mac_address
[  335.604839][T23863] veth45: entered promiscuous mode
[  335.608946][T23863] bond36: (slave veth45): Enslaving as an active interface with a down link
[  335.816846][T23867] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  336.162565][T23878] veth34: entered promiscuous mode
[  336.164448][T23878] veth34: entered allmulticast mode
[  336.780822][T23912] netlink: 'syz.0.4043': attribute type 10 has an invalid length.
[  337.234359][T23971] netlink: 'syz.2.4053': attribute type 13 has an invalid length.
[  337.238138][T23971] netlink: 'syz.2.4053': attribute type 17 has an invalid length.
[  337.277569][T23971] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.280508][T23971] 8021q: adding VLAN 0 to HW filter on device team0
[  337.285199][T23979] netlink: 'syz.0.4055': attribute type 13 has an invalid length.
[  337.298402][T23971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.301139][T23979] netlink: 'syz.0.4055': attribute type 17 has an invalid length.
[  337.342662][T23979] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.349591][T23979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.128663][T24025] __nla_validate_parse: 4 callbacks suppressed
[  338.128681][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'.
[  338.221250][T24036] netlink: 'syz.2.4067': attribute type 1 has an invalid length.
[  338.390634][T24038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4068'.
[  338.404560][T24038] tipc: Invalid UDP bearer configuration
[  338.404621][T24038] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.538513][T24047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4070'.
[  338.613773][T24051] netlink: 'syz.0.4072': attribute type 1 has an invalid length.
[  338.621356][T24051] netlink: 'syz.0.4072': attribute type 3 has an invalid length.
[  338.624375][T24051] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4072'.
[  340.466707][T24133] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  340.588969][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4090'.
[  340.783927][T24152] netlink: 'syz.2.4093': attribute type 13 has an invalid length.
[  340.840129][T24152] netlink: 'syz.2.4093': attribute type 17 has an invalid length.
[  340.943618][T24152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.252257][T24176] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4098'.
[  341.255595][T24176] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  341.259511][T24176] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  341.275525][T24178] netlink: 'syz.0.4099': attribute type 11 has an invalid length.
[  341.330194][T24181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'.
[  341.354833][T24184] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4100'.
[  341.362789][T24184] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  341.366476][T24184] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  341.489307][T24192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'.
[  341.612486][T24205] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.620578][T24205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.680292][T24209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4102'.
[  341.805435][T24213] validate_nla: 2 callbacks suppressed
[  341.805446][T24213] netlink: 'syz.1.4104': attribute type 10 has an invalid length.
[  342.062825][T24250] netlink: 'syz.1.4109': attribute type 1 has an invalid length.
[  342.696674][T24271] netlink: 'syz.0.4114': attribute type 2 has an invalid length.
[  343.003698][T24289] netlink: 'syz.0.4119': attribute type 1 has an invalid length.
[  343.020365][T24289] 8021q: adding VLAN 0 to HW filter on device bond37
[  343.049201][T24289] veth47: entered promiscuous mode
[  343.054882][T24289] bond37: (slave veth47): Enslaving as an active interface with a down link
[  343.061437][   T40] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  343.879983][T24350] __nla_validate_parse: 3 callbacks suppressed
[  343.879998][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4127'.
[  344.200074][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'.
[  344.460268][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4139'.
[  344.469260][T24401] netlink: 'syz.1.4137': attribute type 10 has an invalid length.
[  344.673778][T24431] netlink: 'syz.2.4144': attribute type 13 has an invalid length.
[  344.684426][T24431] netlink: 69 bytes leftover after parsing attributes in process `syz.2.4144'.
[  344.708200][T24418] netlink: 'syz.1.4143': attribute type 10 has an invalid length.
[  344.755288][T24427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4144'.
[  344.893239][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'.
[  344.899441][T24450] netlink: 'syz.1.4147': attribute type 1 has an invalid length.
[  344.971263][  T261] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  345.011270][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'.
[  345.243638][T24489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4154'.
[  345.418257][T24502] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4156'.
[  345.421362][T24502] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  345.423866][T24502] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  345.578891][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4156'.
[  345.931774][T24549] netlink: 'syz.0.4162': attribute type 10 has an invalid length.
[  346.092854][T24555] netlink: 'syz.2.4164': attribute type 10 has an invalid length.
[  346.163593][T24562] veth37: entered promiscuous mode
[  346.210668][T24565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.364043][T24572] syzkaller1: entered promiscuous mode
[  346.366367][T24572] syzkaller1: entered allmulticast mode
[  346.718754][T24601] team0: Port device dummy0 added
[  347.484074][T24668] validate_nla: 4 callbacks suppressed
[  347.484095][T24668] netlink: 'syz.2.4186': attribute type 1 has an invalid length.
[  347.564063][T24671] syzkaller1: tun_chr_ioctl cmd 1074025677
[  347.568008][T24671] syzkaller1: linktype set to 6
[  347.877282][T24677] netlink: 'syz.2.4189': attribute type 10 has an invalid length.
[  347.901826][T24685] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  347.905125][T24685] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  348.878512][T24737] netlink: 'syz.0.4204': attribute type 1 has an invalid length.
[  348.907712][T15348] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  349.042226][T24741] team0: Port device dummy0 removed
[  349.045028][T24741] bond26: (slave veth21): Releasing active interface
[  349.050383][T24741] bond27: (slave veth23): Releasing active interface
[  349.054745][T24741] bond34: (slave bridge7): Releasing active interface
[  349.061380][T24741] bond35: (slave veth29): Releasing active interface
[  349.065036][T24741] bond36: (slave veth31): Releasing active interface
[  349.123413][T24751] netlink: 'syz.1.4205': attribute type 10 has an invalid length.
[  349.178742][T24751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.182532][T24751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.864481][T24788] netlink: 'syz.2.4216': attribute type 1 has an invalid length.
[  349.890967][T24788] 8021q: adding VLAN 0 to HW filter on device bond33
[  349.894567][T24791] __nla_validate_parse: 11 callbacks suppressed
[  349.894581][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'.
[  349.917330][T24788] 8021q: adding VLAN 0 to HW filter on device bond33
[  349.919964][T24788] bond33: (slave vxcan7): The slave device specified does not support setting the MAC address
[  349.924502][T24788] bond33: (slave vxcan7): Error -95 calling set_mac_address
[  349.985270][T24794] veth45: entered promiscuous mode
[  349.994206][T24794] bond33: (slave veth45): Enslaving as an active interface with a down link
[  350.227590][T24813] netlink: 'syz.2.4221': attribute type 13 has an invalid length.
[  350.237278][T24812] netlink: 'syz.1.4220': attribute type 5 has an invalid length.
[  350.252611][T24813] netlink: 'syz.2.4221': attribute type 17 has an invalid length.
[  350.259127][T24813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.642076][T24842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4227'.
[  350.694163][T24849] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  350.790892][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4231'.
[  350.795003][T24858] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4231'.
[  350.877279][T24851] netlink: 'syz.2.4230': attribute type 10 has an invalid length.
[  350.880443][T24851] netlink: 'syz.2.4230': attribute type 10 has an invalid length.
[  351.106196][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'.
[  351.111512][T24887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4236'.
[  351.344941][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.351030][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.354277][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'.
[  351.383579][T15348] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  351.631845][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4250'.
[  351.638330][T24930] bond36: (slave veth45): Releasing active interface
[  351.649904][T24930] bond37: (slave veth47): Releasing active interface
[  351.670347][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4250'.
[  351.718984][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'.
[  351.736805][T24931] hsr_slave_0: left promiscuous mode
[  351.749096][T24931] hsr_slave_1: left promiscuous mode
[  351.923828][T24950] 8021q: adding VLAN 0 to HW filter on device bond34
[  351.940054][T24950] bond34: (slave wlan0): making interface the new active one
[  351.947831][T24950] bond34: (slave wlan0): Enslaving as an active interface with an up link
[  351.975451][T24950] syz.2.4254 (24950) used greatest stack depth: 18744 bytes left
[  351.999560][T24964] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  352.002759][T24964] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  352.204697][T24982] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  352.209629][T24982] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  352.443207][T24998] netlink: 'syz.1.4262': attribute type 11 has an invalid length.
[  352.524634][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.529064][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.575350][T25002] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  352.580176][T25002] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  352.778278][T25011] validate_nla: 2 callbacks suppressed
[  352.778296][T25011] netlink: 'syz.0.4265': attribute type 10 has an invalid length.
[  352.828906][T25020] netlink: 'syz.0.4268': attribute type 1 has an invalid length.
[  352.855113][T25020] 8021q: adding VLAN 0 to HW filter on device bond38
[  352.884255][T25020] 8021q: adding VLAN 0 to HW filter on device bond38
[  352.886920][T25020] bond38: (slave vxcan9): The slave device specified does not support setting the MAC address
[  352.891639][T25020] bond38: (slave vxcan9): Error -95 calling set_mac_address
[  352.935397][T25026] veth51: entered promiscuous mode
[  353.082522][T25035] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  353.085319][T25035] CPU: 0 UID: 0 PID: 25035 Comm: syz.0.4272 Not tainted syzkaller #0 PREEMPT(full) 
[  353.085330][T25035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.085335][T25035] Call Trace:
[  353.085340][T25035]  <TASK>
[  353.085344][T25035]  dump_stack_lvl+0x189/0x250
[  353.085360][T25035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.085370][T25035]  ? __pfx__printk+0x10/0x10
[  353.085384][T25035]  ? kernfs_path_from_node+0x2f/0x290
[  353.085393][T25035]  ? kernfs_path_from_node+0x250/0x290
[  353.085400][T25035]  ? kernfs_path_from_node+0x2f/0x290
[  353.085411][T25035]  sysfs_warn_dup+0x8e/0xa0
[  353.085419][T25035]  sysfs_do_create_link_sd+0xc0/0x110
[  353.085428][T25035]  device_add_class_symlinks+0x1cf/0x240
[  353.085441][T25035]  device_add+0x475/0xb50
[  353.085452][T25035]  wiphy_register+0x1ba6/0x28d0
[  353.085468][T25035]  ? __pfx_wiphy_register+0x10/0x10
[  353.085475][T25035]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  353.085490][T25035]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  353.085503][T25035]  ieee80211_register_hw+0x3484/0x4100
[  353.085521][T25035]  ? ieee80211_register_hw+0x1461/0x4100
[  353.085536][T25035]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  353.085548][T25035]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.085591][T25035]  ? __hrtimer_setup+0x187/0x210
[  353.085599][T25035]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  353.085608][T25035]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  353.085634][T25035]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  353.085645][T25035]  ? trace_kmalloc+0x1f/0xd0
[  353.085654][T25035]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  353.085664][T25035]  ? kstrndup+0xbf/0x160
[  353.085678][T25035]  hwsim_new_radio_nl+0xea4/0x1b10
[  353.085690][T25035]  ? __pfx___nla_validate_parse+0x10/0x10
[  353.085705][T25035]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.085737][T25035]  ? __nla_parse+0x40/0x60
[  353.085749][T25035]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  353.085764][T25035]  genl_family_rcv_msg_doit+0x215/0x300
[  353.085778][T25035]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.085796][T25035]  ? bpf_lsm_capable+0x9/0x20
[  353.085807][T25035]  ? security_capable+0x7e/0x2e0
[  353.085822][T25035]  genl_rcv_msg+0x60e/0x790
[  353.085836][T25035]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.085846][T25035]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.085864][T25035]  netlink_rcv_skb+0x208/0x470
[  353.085871][T25035]  ? __lock_acquire+0xab9/0xd20
[  353.085883][T25035]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.085894][T25035]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.085911][T25035]  ? down_read+0x1ad/0x2e0
[  353.085922][T25035]  genl_rcv+0x28/0x40
[  353.085935][T25035]  netlink_unicast+0x82f/0x9e0
[  353.085957][T25035]  ? __pfx_netlink_unicast+0x10/0x10
[  353.085975][T25035]  ? netlink_sendmsg+0x642/0xb30
[  353.085987][T25035]  ? skb_put+0x11b/0x210
[  353.085999][T25035]  netlink_sendmsg+0x805/0xb30
[  353.086019][T25035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.086037][T25035]  ? aa_sock_msg_perm+0xf1/0x1d0
[  353.086047][T25035]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.086057][T25035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.086072][T25035]  __sock_sendmsg+0x21c/0x270
[  353.086095][T25035]  ____sys_sendmsg+0x505/0x830
[  353.086111][T25035]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.086133][T25035]  ? import_iovec+0x74/0xa0
[  353.086154][T25035]  ___sys_sendmsg+0x21f/0x2a0
[  353.086171][T25035]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.086221][T25035]  ? __fget_files+0x2a/0x420
[  353.086233][T25035]  ? __fget_files+0x3a0/0x420
[  353.086255][T25035]  __x64_sys_sendmsg+0x19b/0x260
[  353.086274][T25035]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.086300][T25035]  ? rcu_is_watching+0x15/0xb0
[  353.086319][T25035]  ? do_syscall_64+0xbe/0x3b0
[  353.086334][T25035]  do_syscall_64+0xfa/0x3b0
[  353.086348][T25035]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.086361][T25035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.086374][T25035]  ? exc_page_fault+0x9f/0xf0
[  353.086389][T25035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.086402][T25035] RIP: 0033:0x7f4d30d8ec29
[  353.086415][T25035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.086427][T25035] RSP: 002b:00007f4d31b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.086440][T25035] RAX: ffffffffffffffda RBX: 00007f4d30fd6090 RCX: 00007f4d30d8ec29
[  353.086449][T25035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  353.086457][T25035] RBP: 00007f4d30e11e41 R08: 0000000000000000 R09: 0000000000000000
[  353.086465][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.086474][T25035] R13: 00007f4d30fd6128 R14: 00007f4d30fd6090 R15: 00007ffdbd12ffe8
[  353.086495][T25035]  </TASK>
[  353.290873][T25045] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  353.293638][T25045] CPU: 1 UID: 0 PID: 25045 Comm: syz.0.4272 Not tainted syzkaller #0 PREEMPT(full) 
[  353.293651][T25045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.293657][T25045] Call Trace:
[  353.293661][T25045]  <TASK>
[  353.293666][T25045]  dump_stack_lvl+0x189/0x250
[  353.293684][T25045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.293694][T25045]  ? __pfx__printk+0x10/0x10
[  353.293709][T25045]  ? kernfs_path_from_node+0x2f/0x290
[  353.293719][T25045]  ? kernfs_path_from_node+0x250/0x290
[  353.293726][T25045]  ? kernfs_path_from_node+0x2f/0x290
[  353.293737][T25045]  sysfs_warn_dup+0x8e/0xa0
[  353.293746][T25045]  sysfs_do_create_link_sd+0xc0/0x110
[  353.293755][T25045]  device_add_class_symlinks+0x1cf/0x240
[  353.293769][T25045]  device_add+0x475/0xb50
[  353.293781][T25045]  wiphy_register+0x1ba6/0x28d0
[  353.293799][T25045]  ? __pfx_wiphy_register+0x10/0x10
[  353.293806][T25045]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  353.293838][T25045]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  353.293852][T25045]  ieee80211_register_hw+0x3484/0x4100
[  353.293872][T25045]  ? ieee80211_register_hw+0x1461/0x4100
[  353.293887][T25045]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  353.293900][T25045]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.293918][T25045]  ? __hrtimer_setup+0x187/0x210
[  353.293926][T25045]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  353.293936][T25045]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  353.293964][T25045]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  353.293974][T25045]  ? trace_kmalloc+0x1f/0xd0
[  353.293984][T25045]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  353.293995][T25045]  ? kstrndup+0xbf/0x160
[  353.294014][T25045]  hwsim_new_radio_nl+0xea4/0x1b10
[  353.294027][T25045]  ? __pfx___nla_validate_parse+0x10/0x10
[  353.294043][T25045]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.294061][T25045]  ? __nla_parse+0x40/0x60
[  353.294071][T25045]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  353.294087][T25045]  genl_family_rcv_msg_doit+0x215/0x300
[  353.294102][T25045]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.294119][T25045]  ? bpf_lsm_capable+0x9/0x20
[  353.294131][T25045]  ? security_capable+0x7e/0x2e0
[  353.294147][T25045]  genl_rcv_msg+0x60e/0x790
[  353.294161][T25045]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.294171][T25045]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.294189][T25045]  netlink_rcv_skb+0x208/0x470
[  353.294197][T25045]  ? __lock_acquire+0xab9/0xd20
[  353.294209][T25045]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.294222][T25045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.294247][T25045]  ? down_read+0x1ad/0x2e0
[  353.294262][T25045]  genl_rcv+0x28/0x40
[  353.294274][T25045]  netlink_unicast+0x82f/0x9e0
[  353.294297][T25045]  ? __pfx_netlink_unicast+0x10/0x10
[  353.294314][T25045]  ? netlink_sendmsg+0x642/0xb30
[  353.294324][T25045]  ? skb_put+0x11b/0x210
[  353.294340][T25045]  netlink_sendmsg+0x805/0xb30
[  353.294360][T25045]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.294375][T25045]  ? aa_sock_msg_perm+0xf1/0x1d0
[  353.294389][T25045]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.294402][T25045]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.294415][T25045]  __sock_sendmsg+0x21c/0x270
[  353.294435][T25045]  ____sys_sendmsg+0x505/0x830
[  353.294456][T25045]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.294475][T25045]  ? import_iovec+0x74/0xa0
[  353.294516][T25045]  ___sys_sendmsg+0x21f/0x2a0
[  353.294529][T25045]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.294581][T25045]  ? __fget_files+0x2a/0x420
[  353.294589][T25045]  ? __fget_files+0x3a0/0x420
[  353.294601][T25045]  __x64_sys_sendmsg+0x19b/0x260
[  353.294613][T25045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.294632][T25045]  ? do_syscall_64+0xbe/0x3b0
[  353.294643][T25045]  do_syscall_64+0xfa/0x3b0
[  353.294651][T25045]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.294660][T25045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.294667][T25045]  ? exc_page_fault+0x9f/0xf0
[  353.294676][T25045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.294683][T25045] RIP: 0033:0x7f4d30d8ec29
[  353.294693][T25045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.294700][T25045] RSP: 002b:00007f4d2eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.294709][T25045] RAX: ffffffffffffffda RBX: 00007f4d30fd6180 RCX: 00007f4d30d8ec29
[  353.294715][T25045] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  353.294720][T25045] RBP: 00007f4d30e11e41 R08: 0000000000000000 R09: 0000000000000000
[  353.294725][T25045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.294729][T25045] R13: 00007f4d30fd6218 R14: 00007f4d30fd6180 R15: 00007ffdbd12ffe8
[  353.294743][T25045]  </TASK>
[  353.602279][T25056] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  353.605510][T25056] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  353.943792][T25080] netlink: 'syz.1.4279': attribute type 13 has an invalid length.
[  353.954292][T25080] netlink: 'syz.1.4279': attribute type 17 has an invalid length.
[  353.983707][T25080] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.988402][T25080] 8021q: adding VLAN 0 to HW filter on device team0
[  353.992749][T25080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.572676][T25122] tipc: Resetting bearer <ib:ip6gre0>
[  354.613406][T25122] tipc: Resetting bearer <eth:syzkaller0>
[  355.007640][T25130] __nla_validate_parse: 11 callbacks suppressed
[  355.007661][T25130] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4292'.
[  355.018283][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4292'.
[  355.098057][T25132] netlink: 'syz.0.4293': attribute type 10 has an invalid length.
[  355.104295][T25132] team0: Port device dummy0 added
[  355.253266][T25136] netlink: 'syz.0.4294': attribute type 10 has an invalid length.
[  355.261969][T25139] netlink: 'syz.1.4295': attribute type 1 has an invalid length.
[  355.294672][T25139] 8021q: adding VLAN 0 to HW filter on device bond38
[  355.365178][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'.
[  355.371730][T25139] bond38: (slave veth37): Enslaving as an active interface with a down link
[  355.441619][T25149] netlink: 'syz.0.4298': attribute type 21 has an invalid length.
[  355.444327][T25149] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4298'.
[  355.459019][T25149] netlink: 'syz.0.4298': attribute type 4 has an invalid length.
[  355.461546][T25149] netlink: 'syz.0.4298': attribute type 3 has an invalid length.
[  355.464330][T25149] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4298'.
[  356.149174][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4307'.
[  356.309259][T25206] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4312'.
[  356.312187][T25206] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  356.390178][T25204] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode
[  356.395225][T25204] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode
[  356.483705][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4312'.
[  356.512827][T25218] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004
[  356.631907][T25226] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.634742][T25226] 8021q: adding VLAN 0 to HW filter on device team0
[  356.828493][T25236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4317'.
[  356.831414][T25236] tipc: Invalid UDP bearer configuration
[  356.831448][T25236] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  356.880771][T25241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4318'.
[  356.934415][T25243] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.938265][T25243] tipc: Resetting bearer <eth:syzkaller0>
[  357.410655][T25260] sctp: [Deprecated]: syz.2.4325 (pid 25260) Use of int in maxseg socket option.
[  357.410655][T25260] Use struct sctp_assoc_value instead
[  358.602677][T25312] net_ratelimit: 2 callbacks suppressed
[  358.602688][T25312] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  358.650474][T25299] validate_nla: 3 callbacks suppressed
[  358.650486][T25299] netlink: 'syz.0.4332': attribute type 10 has an invalid length.
[  360.189581][T25401] batadv_slave_1: entered promiscuous mode
[  360.204421][T25401] __nla_validate_parse: 12 callbacks suppressed
[  360.204442][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'.
[  360.247391][T25401] batadv_slave_1 (unregistering): left promiscuous mode
[  360.347233][T25406] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4354'.
[  360.351887][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4354'.
[  360.505972][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  360.640922][T25423] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4357'.
[  360.749919][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'.
[  360.815661][T25437] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4358'.
[  360.920534][T25430] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode
[  360.923503][T25430] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode
[  360.928555][T25430] veth34: left promiscuous mode
[  360.930359][T25430] veth34: left allmulticast mode
[  360.949406][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4358'.
[  361.169727][T25454] netlink: 'syz.0.4363': attribute type 10 has an invalid length.
[  361.175005][T25454] tipc: Resetting bearer <eth:syzkaller0>
[  361.194414][T25454] tipc: Disabling bearer <eth:syzkaller0>
[  361.220544][T25455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'.
[  361.223469][T25455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4363'.
[  361.227343][T25455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'.
[  361.553007][T25469] netlink: 'syz.0.4365': attribute type 10 has an invalid length.
[  361.811499][T25493] netlink: 'syz.0.4371': attribute type 1 has an invalid length.
[  361.923082][T25493] netlink: 'syz.0.4371': attribute type 3 has an invalid length.
[  361.981324][T25517] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode
[  361.984373][T25517] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode
[  362.609842][T25550] netlink: 'syz.0.4382': attribute type 1 has an invalid length.
[  362.628825][T25550] 8021q: adding VLAN 0 to HW filter on device bond39
[  362.646354][T25550] vlan2: entered allmulticast mode
[  362.971256][T25579] veth1_macvtap: left allmulticast mode
[  362.982260][T25579] veth41: left promiscuous mode
[  362.984395][T25579] veth43: left promiscuous mode
[  362.986803][T25579] bridge6: left allmulticast mode
[  362.989008][T25579] veth45: left promiscuous mode
[  362.991285][T25579] veth47: left promiscuous mode
[  362.993778][T25579] veth51: left promiscuous mode
[  363.167571][T25584] netlink: 'syz.0.4390': attribute type 10 has an invalid length.
[  363.212278][T25592] netlink: 'syz.0.4391': attribute type 1 has an invalid length.
[  363.247905][T25592] 8021q: adding VLAN 0 to HW filter on device bond40
[  363.811753][T25625] netlink: 'syz.1.4399': attribute type 10 has an invalid length.
[  364.115013][T25641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.139400][T25641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  364.279733][   T54] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  364.351336][T25652] netlink: 'syz.1.4406': attribute type 1 has an invalid length.
[  364.376363][T25652] 8021q: adding VLAN 0 to HW filter on device bond39
[  364.398234][T25652] veth39: entered promiscuous mode
[  364.404129][T25652] bond39: (slave veth39): Enslaving as an active interface with a down link
[  364.419837][T25653] veth41: entered promiscuous mode
[  364.424664][T25653] bond39: (slave veth41): Enslaving as an active interface with a down link
[  364.523577][T25662] syzkaller0: entered promiscuous mode
[  364.525353][T25662] syzkaller0: entered allmulticast mode
[  364.529693][T25663] syzkaller0: tun_chr_ioctl cmd 1074025677
[  364.535983][T25663] syzkaller0: Linktype set failed because interface is up
[  364.543337][T25669] netlink: 'syz.1.4410': attribute type 1 has an invalid length.
[  364.580658][T25669] 8021q: adding VLAN 0 to HW filter on device bond40
[  364.727479][T25678] netlink: 'syz.1.4414': attribute type 10 has an invalid length.
[  365.021722][T25706] netlink: 'syz.1.4422': attribute type 13 has an invalid length.
[  365.024920][T25706] netlink: 'syz.1.4422': attribute type 17 has an invalid length.
[  365.064621][T25706] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.068044][T25706] 8021q: adding VLAN 0 to HW filter on device team0
[  365.075259][T25706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.091340][T25704] netlink: 'syz.2.4423': attribute type 10 has an invalid length.
[  365.831826][T25727] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  365.842416][T25727] CPU: 0 UID: 0 PID: 25727 Comm: syz.0.4427 Not tainted syzkaller #0 PREEMPT(full) 
[  365.842430][T25727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  365.842435][T25727] Call Trace:
[  365.842439][T25727]  <TASK>
[  365.842443][T25727]  dump_stack_lvl+0x189/0x250
[  365.842484][T25727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.842494][T25727]  ? __pfx__printk+0x10/0x10
[  365.842509][T25727]  ? kernfs_path_from_node+0x2f/0x290
[  365.842520][T25727]  ? kernfs_path_from_node+0x250/0x290
[  365.842527][T25727]  ? kernfs_path_from_node+0x2f/0x290
[  365.842537][T25727]  sysfs_warn_dup+0x8e/0xa0
[  365.842546][T25727]  sysfs_do_create_link_sd+0xc0/0x110
[  365.842556][T25727]  device_add_class_symlinks+0x1cf/0x240
[  365.842570][T25727]  device_add+0x475/0xb50
[  365.842581][T25727]  wiphy_register+0x1ba6/0x28d0
[  365.842600][T25727]  ? __pfx_wiphy_register+0x10/0x10
[  365.842607][T25727]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  365.842623][T25727]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  365.842638][T25727]  ieee80211_register_hw+0x3484/0x4100
[  365.842658][T25727]  ? ieee80211_register_hw+0x1461/0x4100
[  365.842672][T25727]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  365.842684][T25727]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  365.842703][T25727]  ? __hrtimer_setup+0x187/0x210
[  365.842711][T25727]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  365.842722][T25727]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  365.842750][T25727]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  365.842793][T25727]  ? trace_kmalloc+0x1f/0xd0
[  365.842805][T25727]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  365.842816][T25727]  ? kstrndup+0xbf/0x160
[  365.842831][T25727]  hwsim_new_radio_nl+0xea4/0x1b10
[  365.842843][T25727]  ? __pfx___nla_validate_parse+0x10/0x10
[  365.842860][T25727]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  365.842877][T25727]  ? __nla_parse+0x40/0x60
[  365.842887][T25727]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  365.842904][T25727]  genl_family_rcv_msg_doit+0x215/0x300
[  365.842918][T25727]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  365.842934][T25727]  ? bpf_lsm_capable+0x9/0x20
[  365.842947][T25727]  ? security_capable+0x7e/0x2e0
[  365.842964][T25727]  genl_rcv_msg+0x60e/0x790
[  365.842978][T25727]  ? __pfx_genl_rcv_msg+0x10/0x10
[  365.842988][T25727]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  365.843006][T25727]  netlink_rcv_skb+0x208/0x470
[  365.843013][T25727]  ? __lock_acquire+0xab9/0xd20
[  365.843026][T25727]  ? __pfx_genl_rcv_msg+0x10/0x10
[  365.843037][T25727]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  365.843055][T25727]  ? down_read+0x1ad/0x2e0
[  365.843067][T25727]  genl_rcv+0x28/0x40
[  365.843076][T25727]  netlink_unicast+0x82f/0x9e0
[  365.843094][T25727]  ? __pfx_netlink_unicast+0x10/0x10
[  365.843107][T25727]  ? netlink_sendmsg+0x642/0xb30
[  365.843114][T25727]  ? skb_put+0x11b/0x210
[  365.843127][T25727]  netlink_sendmsg+0x805/0xb30
[  365.843139][T25727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.843149][T25727]  ? aa_sock_msg_perm+0xf1/0x1d0
[  365.843160][T25727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  365.843169][T25727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.843177][T25727]  __sock_sendmsg+0x21c/0x270
[  365.843193][T25727]  ____sys_sendmsg+0x505/0x830
[  365.843205][T25727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.843235][T25727]  ? import_iovec+0x74/0xa0
[  365.843250][T25727]  ___sys_sendmsg+0x21f/0x2a0
[  365.843261][T25727]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.843289][T25727]  ? __fget_files+0x2a/0x420
[  365.843296][T25727]  ? __fget_files+0x3a0/0x420
[  365.843312][T25727]  __x64_sys_sendmsg+0x19b/0x260
[  365.843323][T25727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  365.843338][T25727]  ? rcu_is_watching+0x15/0xb0
[  365.843349][T25727]  ? do_syscall_64+0xbe/0x3b0
[  365.843361][T25727]  do_syscall_64+0xfa/0x3b0
[  365.843369][T25727]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.843377][T25727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.843385][T25727]  ? exc_page_fault+0x9f/0xf0
[  365.843394][T25727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.843401][T25727] RIP: 0033:0x7f4d30d8ec29
[  365.843409][T25727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.843416][T25727] RSP: 002b:00007f4d31b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.843425][T25727] RAX: ffffffffffffffda RBX: 00007f4d30fd5fa0 RCX: 00007f4d30d8ec29
[  365.843431][T25727] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  365.843436][T25727] RBP: 00007f4d30e11e41 R08: 0000000000000000 R09: 0000000000000000
[  365.843440][T25727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.843445][T25727] R13: 00007f4d30fd6038 R14: 00007f4d30fd5fa0 R15: 00007ffdbd12ffe8
[  365.843458][T25727]  </TASK>
[  366.029066][T25726] delete_channel: no stack
[  366.172038][T25740] __nla_validate_parse: 22 callbacks suppressed
[  366.172053][T25740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'.
[  366.383811][T25758] netlink: 'syz.0.4432': attribute type 10 has an invalid length.
[  366.491416][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4436'.
[  366.687769][T25770] netlink: 'syz.2.4438': attribute type 10 has an invalid length.
[  366.809406][T25788] netlink: 'syz.2.4444': attribute type 3 has an invalid length.
[  367.182567][T25802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4447'.
[  367.301332][T25813] 8021q: adding VLAN 0 to HW filter on device bond41
[  367.322756][T25813] 8021q: adding VLAN 0 to HW filter on device bond41
[  367.325441][T25813] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  367.337250][T25813] bond41: (slave vxcan7): Error -95 calling set_mac_address
[  367.408518][T25816] veth43: entered promiscuous mode
[  367.421829][T25816] bond41: (slave veth43): Enslaving as an active interface with a down link
[  367.437023][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.439763][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.465040][T25827] netlink: 'syz.0.4453': attribute type 11 has an invalid length.
[  367.542343][T25830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.644281][T25834] syzkaller0: entered promiscuous mode
[  367.647290][T25834] syzkaller0: entered allmulticast mode
[  367.683772][T25831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4454'.
[  367.687789][T25832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4454'.
[  367.941363][T25844] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.951438][T25844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.971277][T25846] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4460'.
[  368.114067][T25844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4458'.
[  368.133447][T25853] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4461'.
[  368.602297][T25879] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.4467'.
[  368.623047][T25879] bond0: (slave 0!): Enslaving as an active interface with an up link
[  368.753307][T25890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4469'.
[  368.998141][T25909] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  369.001429][T25909] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  369.010442][T25911] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  369.013698][T25911] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  369.152619][T25927] validate_nla: 10 callbacks suppressed
[  369.152630][T25927] netlink: 'syz.2.4478': attribute type 5 has an invalid length.
[  369.530241][T25945] netlink: 'syz.1.4483': attribute type 10 has an invalid length.
[  369.552445][T25948] netlink: 'syz.0.4484': attribute type 10 has an invalid length.
[  369.649622][  T261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.655461][  T261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.737722][T25966] syzkaller1: entered promiscuous mode
[  369.739922][T25966] syzkaller1: entered allmulticast mode
[  369.779440][T25975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.783010][T25975] syzkaller0: entered promiscuous mode
[  369.785261][T25975] syzkaller0: entered allmulticast mode
[  369.803384][T25975] tipc: Resetting bearer <eth:syzkaller0>
[  369.809772][T25974] tipc: Resetting bearer <eth:syzkaller0>
[  369.826881][T25974] tipc: Disabling bearer <eth:syzkaller0>
[  370.023777][T25983] netlink: 'syz.2.4489': attribute type 10 has an invalid length.
[  370.595139][T26017] netlink: 'syz.0.4497': attribute type 10 has an invalid length.
[  371.363594][T26087] netlink: 'syz.1.4508': attribute type 10 has an invalid length.
[  371.441953][T26099] __nla_validate_parse: 11 callbacks suppressed
[  371.441972][T26099] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4511'.
[  371.605346][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'.
[  371.606093][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'.
[  371.610847][T26118] netlink: 'syz.2.4516': attribute type 1 has an invalid length.
[  371.646149][T26118] 8021q: adding VLAN 0 to HW filter on device bond35
[  371.666049][T26118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'.
[  371.681225][T26126] netlink: 'syz.0.4517': attribute type 1 has an invalid length.
[  371.728111][T26126] 8021q: adding VLAN 0 to HW filter on device bond41
[  371.758589][T26126] 8021q: adding VLAN 0 to HW filter on device bond41
[  371.760984][T26126] bond41: (slave vxcan9): The slave device specified does not support setting the MAC address
[  371.765207][T26126] bond41: (slave vxcan9): Error -95 calling set_mac_address
[  371.810515][T26134] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.4519'.
[  371.810522][T26132] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.4519'.
[  371.823660][T26130] veth53: entered promiscuous mode
[  371.831112][T26130] bond41: (slave veth53): Enslaving as an active interface with a down link
[  371.977568][T26144] sctp: [Deprecated]: syz.2.4522 (pid 26144) Use of int in max_burst socket option deprecated.
[  371.977568][T26144] Use struct sctp_assoc_value instead
[  372.128298][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4526'.
[  372.187573][T26168] netlink: 'syz.2.4527': attribute type 1 has an invalid length.
[  372.202981][T26168] 8021q: adding VLAN 0 to HW filter on device bond36
[  372.222969][T26168] 8021q: adding VLAN 0 to HW filter on device bond36
[  372.225518][T26168] bond36: (slave vxcan7): The slave device specified does not support setting the MAC address
[  372.229959][T26168] bond36: (slave vxcan7): Error -95 calling set_mac_address
[  372.270185][T26168] veth47: entered promiscuous mode
[  372.274246][T26168] bond36: (slave veth47): Enslaving as an active interface with a down link
[  372.284412][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  372.290391][T26172] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.4528'.
[  372.459741][T26181] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  372.467510][T26182] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4530'.
[  372.470829][T26182] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  372.473699][T26182] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  372.508711][T26188] netlink: 'syz.0.4532': attribute type 1 has an invalid length.
[  372.538687][T26188] 8021q: adding VLAN 0 to HW filter on device bond42
[  372.564906][T26188] 8021q: adding VLAN 0 to HW filter on device bond42
[  372.567597][T26188] bond42: (slave vxcan9): The slave device specified does not support setting the MAC address
[  372.572269][T26188] bond42: (slave vxcan9): Error -95 calling set_mac_address
[  372.614412][T26193] veth55: entered promiscuous mode
[  372.621135][T26193] bond42: (slave veth55): Enslaving as an active interface with a down link
[  372.641475][T26182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4530'.
[  373.445318][T26246] ipvlan0: entered promiscuous mode
[  373.530158][T26250] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  374.018805][T26300] 8021q: adding VLAN 0 to HW filter on device bond42
[  374.023696][T26303] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  374.028872][T26303] CPU: 0 UID: 0 PID: 26303 Comm: syz.0.4557 Not tainted syzkaller #0 PREEMPT(full) 
[  374.028898][T26303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.028908][T26303] Call Trace:
[  374.028917][T26303]  <TASK>
[  374.028924][T26303]  dump_stack_lvl+0x189/0x250
[  374.028965][T26303]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.028985][T26303]  ? __pfx__printk+0x10/0x10
[  374.029012][T26303]  ? kernfs_path_from_node+0x2f/0x290
[  374.029030][T26303]  ? kernfs_path_from_node+0x250/0x290
[  374.029044][T26303]  ? kernfs_path_from_node+0x2f/0x290
[  374.029063][T26303]  sysfs_warn_dup+0x8e/0xa0
[  374.029079][T26303]  sysfs_do_create_link_sd+0xc0/0x110
[  374.029098][T26303]  device_add_class_symlinks+0x1cf/0x240
[  374.029120][T26303]  device_add+0x475/0xb50
[  374.029143][T26303]  wiphy_register+0x1ba6/0x28d0
[  374.029176][T26303]  ? __pfx_wiphy_register+0x10/0x10
[  374.029191][T26303]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  374.029219][T26303]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  374.029276][T26303]  ieee80211_register_hw+0x3484/0x4100
[  374.029314][T26303]  ? ieee80211_register_hw+0x1461/0x4100
[  374.029343][T26303]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  374.029366][T26303]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  374.029395][T26303]  ? __hrtimer_setup+0x187/0x210
[  374.029408][T26303]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  374.029427][T26303]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  374.029472][T26303]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  374.029491][T26303]  ? trace_kmalloc+0x1f/0xd0
[  374.029509][T26303]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  374.029528][T26303]  ? kstrndup+0xbf/0x160
[  374.029551][T26303]  hwsim_new_radio_nl+0xea4/0x1b10
[  374.029573][T26303]  ? __pfx___nla_validate_parse+0x10/0x10
[  374.029599][T26303]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  374.029627][T26303]  ? __nla_parse+0x40/0x60
[  374.029642][T26303]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  374.029668][T26303]  genl_family_rcv_msg_doit+0x215/0x300
[  374.029692][T26303]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  374.029719][T26303]  ? bpf_lsm_capable+0x9/0x20
[  374.029738][T26303]  ? security_capable+0x7e/0x2e0
[  374.029763][T26303]  genl_rcv_msg+0x60e/0x790
[  374.029783][T26303]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.029798][T26303]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  374.029829][T26303]  netlink_rcv_skb+0x208/0x470
[  374.029842][T26303]  ? __lock_acquire+0xab9/0xd20
[  374.029864][T26303]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.029881][T26303]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.029910][T26303]  ? down_read+0x1ad/0x2e0
[  374.029926][T26303]  genl_rcv+0x28/0x40
[  374.029951][T26303]  netlink_unicast+0x82f/0x9e0
[  374.029977][T26303]  ? __pfx_netlink_unicast+0x10/0x10
[  374.029997][T26303]  ? netlink_sendmsg+0x642/0xb30
[  374.030009][T26303]  ? skb_put+0x11b/0x210
[  374.030026][T26303]  netlink_sendmsg+0x805/0xb30
[  374.030049][T26303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.030066][T26303]  ? aa_sock_msg_perm+0xf1/0x1d0
[  374.030084][T26303]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  374.030099][T26303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.030115][T26303]  __sock_sendmsg+0x21c/0x270
[  374.030139][T26303]  ____sys_sendmsg+0x505/0x830
[  374.030160][T26303]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.030187][T26303]  ? import_iovec+0x74/0xa0
[  374.030209][T26303]  ___sys_sendmsg+0x21f/0x2a0
[  374.030225][T26303]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.030295][T26303]  ? __fget_files+0x2a/0x420
[  374.030310][T26303]  ? __fget_files+0x3a0/0x420
[  374.030328][T26303]  __x64_sys_sendmsg+0x19b/0x260
[  374.030349][T26303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.030375][T26303]  ? rcu_is_watching+0x15/0xb0
[  374.030396][T26303]  ? do_syscall_64+0xbe/0x3b0
[  374.030412][T26303]  do_syscall_64+0xfa/0x3b0
[  374.030425][T26303]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.030439][T26303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.030453][T26303]  ? exc_page_fault+0x9f/0xf0
[  374.030468][T26303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.030482][T26303] RIP: 0033:0x7f4d30d8ec29
[  374.030500][T26303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.030512][T26303] RSP: 002b:00007f4d31b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.030530][T26303] RAX: ffffffffffffffda RBX: 00007f4d30fd5fa0 RCX: 00007f4d30d8ec29
[  374.030539][T26303] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  374.030549][T26303] RBP: 00007f4d30e11e41 R08: 0000000000000000 R09: 0000000000000000
[  374.030560][T26303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.030571][T26303] R13: 00007f4d30fd6038 R14: 00007f4d30fd5fa0 R15: 00007ffdbd12ffe8
[  374.030592][T26303]  </TASK>
[  374.214303][T26300] 8021q: adding VLAN 0 to HW filter on device bond42
[  374.217609][T26300] bond42: (slave vxcan7): The slave device specified does not support setting the MAC address
[  374.223364][T26300] bond42: (slave vxcan7): Error -95 calling set_mac_address
[  374.330923][T26310] veth45: entered promiscuous mode
[  374.348872][T26310] bond42: (slave veth45): Enslaving as an active interface with a down link
[  374.353461][T26321] validate_nla: 4 callbacks suppressed
[  374.353478][T26321] netlink: 'syz.0.4561': attribute type 1 has an invalid length.
[  374.395825][T26321] 8021q: adding VLAN 0 to HW filter on device bond43
[  374.435962][T26321] 8021q: adding VLAN 0 to HW filter on device bond43
[  374.442488][T26321] bond43: (slave vxcan9): The slave device specified does not support setting the MAC address
[  374.451413][T26321] bond43: (slave vxcan9): Error -95 calling set_mac_address
[  374.508272][ T1093] wlan0: Trigger new scan to find an IBSS to join
[  374.583621][T26338] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  374.596548][T26338] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  374.697888][T26348] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  375.080276][T26385] netlink: 'syz.2.4577': attribute type 16 has an invalid length.
[  375.083142][T26385] netlink: 'syz.2.4577': attribute type 17 has an invalid length.
[  375.135611][T26385] tipc: Resetting bearer <ib:ip6gre0>
[  375.519326][T26407] netlink: 'syz.2.4580': attribute type 10 has an invalid length.
[  376.251240][T15348] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  376.567009][T26473] netlink: 'syz.0.4593': attribute type 1 has an invalid length.
[  376.598550][T26473] 8021q: adding VLAN 0 to HW filter on device bond44
[  376.639975][T26473] 8021q: adding VLAN 0 to HW filter on device bond44
[  376.645695][T26473] bond44: (slave vxcan9): The slave device specified does not support setting the MAC address
[  376.655467][T26473] bond44: (slave vxcan9): Error -95 calling set_mac_address
[  376.687193][T26479] veth57: entered promiscuous mode
[  376.690852][T26479] bond44: (slave veth57): Enslaving as an active interface with a down link
[  376.754380][T26474] netlink: 'syz.2.4594': attribute type 10 has an invalid length.
[  376.787688][T26487] __nla_validate_parse: 75 callbacks suppressed
[  376.787699][T26487] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4596'.
[  376.792608][T26487] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  376.795197][T26487] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  376.937493][T26500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'.
[  377.013205][T26505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4597'.
[  377.018148][T26505] netlink: 'syz.0.4597': attribute type 10 has an invalid length.
[  377.062229][T26499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4597'.
[  377.070666][T26499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.074215][T26499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  377.181201][T26508] netlink: 'syz.2.4598': attribute type 10 has an invalid length.
[  377.247758][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'.
[  377.257274][T26521] macsec2: entered promiscuous mode
[  377.259511][T26521] bridge0: entered promiscuous mode
[  377.262439][T26521] bridge0: port 1(macsec2) entered blocking state
[  377.265366][T26521] bridge0: port 1(macsec2) entered disabled state
[  377.268904][T26521] macsec2: entered allmulticast mode
[  377.272027][T26521] bridge0: entered allmulticast mode
[  377.278566][T26521] macsec2: left allmulticast mode
[  377.280430][T26521] bridge0: left allmulticast mode
[  377.283702][T26521] bridge0: left promiscuous mode
[  377.478321][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[  377.573301][T26532] netlink: 'syz.1.4601': attribute type 2 has an invalid length.
[  377.588401][T26532] : entered promiscuous mode
[  377.792675][T26532] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode
[  377.797104][T26532] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode
[  377.811647][T26532] veth39: left promiscuous mode
[  377.817178][T26532] veth41: left promiscuous mode
[  377.825531][T26532] veth43: left promiscuous mode
[  377.835609][T26532] veth45: left promiscuous mode
[  377.939504][T26540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4603'.
[  378.030626][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'.
[  378.147437][T26559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4607'.
[  378.153699][T26559] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  378.157462][T26559] CPU: 0 UID: 0 PID: 26559 Comm: syz.0.4607 Not tainted syzkaller #0 PREEMPT(full) 
[  378.157476][T26559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.157482][T26559] Call Trace:
[  378.157487][T26559]  <TASK>
[  378.157491][T26559]  dump_stack_lvl+0x189/0x250
[  378.157511][T26559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.157523][T26559]  ? __pfx__printk+0x10/0x10
[  378.157541][T26559]  ? kernfs_path_from_node+0x2f/0x290
[  378.157552][T26559]  ? kernfs_path_from_node+0x250/0x290
[  378.157560][T26559]  ? kernfs_path_from_node+0x2f/0x290
[  378.157570][T26559]  sysfs_warn_dup+0x8e/0xa0
[  378.157580][T26559]  sysfs_do_create_link_sd+0xc0/0x110
[  378.157589][T26559]  device_add_class_symlinks+0x1cf/0x240
[  378.157611][T26559]  device_add+0x475/0xb50
[  378.157629][T26559]  wiphy_register+0x1ba6/0x28d0
[  378.157670][T26559]  ? __pfx_wiphy_register+0x10/0x10
[  378.157682][T26559]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  378.157701][T26559]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  378.157719][T26559]  ieee80211_register_hw+0x3484/0x4100
[  378.157752][T26559]  ? ieee80211_register_hw+0x1461/0x4100
[  378.157770][T26559]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  378.157785][T26559]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  378.157803][T26559]  ? __hrtimer_setup+0x187/0x210
[  378.157811][T26559]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  378.157822][T26559]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  378.157850][T26559]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  378.157862][T26559]  ? trace_kmalloc+0x1f/0xd0
[  378.157874][T26559]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  378.157887][T26559]  ? kstrndup+0xbf/0x160
[  378.157902][T26559]  hwsim_new_radio_nl+0xea4/0x1b10
[  378.157915][T26559]  ? __pfx___nla_validate_parse+0x10/0x10
[  378.157931][T26559]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  378.157949][T26559]  ? __nla_parse+0x40/0x60
[  378.157959][T26559]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  378.158021][T26559]  genl_family_rcv_msg_doit+0x215/0x300
[  378.158043][T26559]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  378.158062][T26559]  ? bpf_lsm_capable+0x9/0x20
[  378.158076][T26559]  ? security_capable+0x7e/0x2e0
[  378.158092][T26559]  genl_rcv_msg+0x60e/0x790
[  378.158106][T26559]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.158117][T26559]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  378.158135][T26559]  netlink_rcv_skb+0x208/0x470
[  378.158142][T26559]  ? __lock_acquire+0xab9/0xd20
[  378.158155][T26559]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.158166][T26559]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  378.158184][T26559]  ? down_read+0x1ad/0x2e0
[  378.158195][T26559]  genl_rcv+0x28/0x40
[  378.158204][T26559]  netlink_unicast+0x82f/0x9e0
[  378.158221][T26559]  ? __pfx_netlink_unicast+0x10/0x10
[  378.158234][T26559]  ? netlink_sendmsg+0x642/0xb30
[  378.158242][T26559]  ? skb_put+0x11b/0x210
[  378.158254][T26559]  netlink_sendmsg+0x805/0xb30
[  378.158267][T26559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.158277][T26559]  ? aa_sock_msg_perm+0xf1/0x1d0
[  378.158287][T26559]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.158296][T26559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.158308][T26559]  __sock_sendmsg+0x21c/0x270
[  378.158330][T26559]  ____sys_sendmsg+0x505/0x830
[  378.158345][T26559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.158364][T26559]  ? import_iovec+0x74/0xa0
[  378.158402][T26559]  ___sys_sendmsg+0x21f/0x2a0
[  378.158428][T26559]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.158460][T26559]  ? __fget_files+0x2a/0x420
[  378.158468][T26559]  ? __fget_files+0x3a0/0x420
[  378.158480][T26559]  __x64_sys_sendmsg+0x19b/0x260
[  378.158492][T26559]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.158507][T26559]  ? rcu_is_watching+0x15/0xb0
[  378.158518][T26559]  ? do_syscall_64+0xbe/0x3b0
[  378.158531][T26559]  do_syscall_64+0xfa/0x3b0
[  378.158539][T26559]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.158547][T26559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.158557][T26559]  ? exc_page_fault+0x9f/0xf0
[  378.158567][T26559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.158576][T26559] RIP: 0033:0x7f4d30d8ec29
[  378.158586][T26559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.158599][T26559] RSP: 002b:00007f4d31b51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.158608][T26559] RAX: ffffffffffffffda RBX: 00007f4d30fd5fa0 RCX: 00007f4d30d8ec29
[  378.158616][T26559] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  378.158621][T26559] RBP: 00007f4d30e11e41 R08: 0000000000000000 R09: 0000000000000000
[  378.158627][T26559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.158632][T26559] R13: 00007f4d30fd6038 R14: 00007f4d30fd5fa0 R15: 00007ffdbd12ffe8
[  378.158647][T26559]  </TASK>
[  378.378416][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4608'.
[  378.401270][T26567] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  378.405344][T26567] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  378.451545][T26572] netlink: 'syz.1.4610': attribute type 13 has an invalid length.
[  378.521790][T26572] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.528269][T26572] 8021q: adding VLAN 0 to HW filter on device team0
[  378.534678][T26572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.669383][T26580] 8021q: adding VLAN 0 to HW filter on device bond45
[  378.704473][T26587] 8021q: adding VLAN 0 to HW filter on device bond45
[  378.708082][T26587] bond45: (slave vxcan9): The slave device specified does not support setting the MAC address
[  378.717562][T26587] bond45: (slave vxcan9): Error -95 calling set_mac_address
[  378.784501][T26580] veth59: entered promiscuous mode
[  378.807450][T26580] bond45: (slave veth59): Enslaving as an active interface with a down link
[  378.816254][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.820466][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.981737][T26598] 8021q: adding VLAN 0 to HW filter on device bond37
[  379.650191][T26634] validate_nla: 3 callbacks suppressed
[  379.650202][T26634] netlink: 'syz.2.4625': attribute type 1 has an invalid length.
[  379.655013][T26634] netlink: 'syz.2.4625': attribute type 1 has an invalid length.
[  379.981870][T26648] netlink: 'syz.1.4627': attribute type 10 has an invalid length.
[  380.248278][T26663] mac80211_hwsim hwsim130 wlan0: entered promiscuous mode
[  380.276928][T26664] netlink: 'syz.0.4629': attribute type 10 has an invalid length.
[  380.288726][T26664] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.292464][T26664] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  380.723411][T26685] netlink: 'syz.2.4640': attribute type 10 has an invalid length.
[  381.067312][T26696] netlink: 'syz.0.4644': attribute type 10 has an invalid length.
[  381.195228][T26704] netlink: 'syz.0.4646': attribute type 1 has an invalid length.
[  381.217260][T26704] 8021q: adding VLAN 0 to HW filter on device bond46
[  381.240608][T26704] 8021q: adding VLAN 0 to HW filter on device bond46
[  381.243209][T26704] bond46: (slave vxcan9): The slave device specified does not support setting the MAC address
[  381.248178][T26704] bond46: (slave vxcan9): Error -95 calling set_mac_address
[  381.300582][T26706] veth61: entered promiscuous mode
[  381.305536][T26706] bond46: (slave veth61): Enslaving as an active interface with a down link
[  381.314932][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  381.409344][T26710] netlink: 'syz.1.4647': attribute type 10 has an invalid length.
[  381.596519][  T261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.602342][  T261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.102634][T26752] netlink: 'syz.1.4657': attribute type 10 has an invalid length.
[  382.528217][T26761] __nla_validate_parse: 12 callbacks suppressed
[  382.528240][T26761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4658'.
[  382.534100][T26761] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  382.537846][T26761] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  382.610252][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'.
[  382.944985][T26786] netlink: 'syz.2.4665': attribute type 1 has an invalid length.
[  382.991439][T26786] 8021q: adding VLAN 0 to HW filter on device bond38
[  383.017932][T26789] 8021q: adding VLAN 0 to HW filter on device bond38
[  383.021210][T26789] bond38: (slave vxcan7): The slave device specified does not support setting the MAC address
[  383.027465][T26789] bond38: (slave vxcan7): Error -95 calling set_mac_address
[  383.071889][T26786] veth49: entered promiscuous mode
[  383.079012][T26786] bond38: (slave veth49): Enslaving as an active interface with a down link
[  383.537451][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'.
[  383.598464][T26814] 8021q: adding VLAN 0 to HW filter on device bond47
[  383.619446][T26814] 8021q: adding VLAN 0 to HW filter on device bond47
[  383.622005][T26814] bond47: (slave vxcan9): The slave device specified does not support setting the MAC address
[  383.627119][T26814] bond47: (slave vxcan9): Error -95 calling set_mac_address
[  383.664379][T26820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4670'.
[  383.805511][T26826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4674'.
[  383.863318][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.868704][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.135242][T26854] IPVS: set_ctl: invalid protocol: 51 10.1.1.10:20003
[  384.149932][T26853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  384.155477][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.162592][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.261715][T26853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4680'.
[  384.269679][T26863] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4683'.
[  384.273250][T26863] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  384.278726][T26863] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  384.407169][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4683'.
[  384.668833][T26880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4685'.
[  384.799914][T26891] validate_nla: 4 callbacks suppressed
[  384.799925][T26891] netlink: 'syz.1.4689': attribute type 2 has an invalid length.
[  384.804637][T26891] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.4689'.
[  385.080292][T26905] netlink: 'syz.1.4694': attribute type 13 has an invalid length.
[  385.083357][T26905] netlink: 'syz.1.4694': attribute type 17 has an invalid length.
[  385.112423][T26905] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.117930][T26905] 8021q: adding VLAN 0 to HW filter on device team0
[  385.123953][T26905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.300077][T26918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  385.303788][T26918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  385.493982][T26928] netlink: 'syz.0.4700': attribute type 1 has an invalid length.
[  385.530013][T26928] veth63: entered promiscuous mode
[  385.677475][T26941] netlink: 'syz.0.4703': attribute type 13 has an invalid length.
[  385.681069][T26941] netlink: 'syz.0.4703': attribute type 17 has an invalid length.
[  385.689060][T26941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.843373][T26946] veth47: entered promiscuous mode
[  385.866910][ T1091] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  386.078401][T26961] netlink: 'syz.1.4706': attribute type 1 has an invalid length.
[  386.104830][T26961] 8021q: adding VLAN 0 to HW filter on device bond43
[  386.134899][T26961] veth47: entered promiscuous mode
[  386.298146][T26972] netlink: 'syz.2.4709': attribute type 23 has an invalid length.
[  386.713628][T26999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.349511][T27042] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  387.352784][T27042] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  387.537315][T27049] __nla_validate_parse: 13 callbacks suppressed
[  387.537336][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4726'.
[  387.600943][T27060] netlink: 'syz.2.4730': attribute type 23 has an invalid length.
[  387.668001][T27065] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4732'.
[  387.853615][T27077] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4735'.
[  387.858054][T27077] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  387.861443][T27077] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  388.021112][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4735'.
[  388.025897][T27077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'.
[  388.228587][T27104] team0: Port device dummy0 removed
[  388.232330][T27104] bond41: (slave veth53): Releasing active interface
[  388.245549][T27104] bond42: (slave veth55): Releasing active interface
[  388.251568][T27104] bond44: (slave veth57): Releasing active interface
[  388.256853][T27104] bond45: (slave veth59): Releasing active interface
[  388.261298][T27104] bond46: (slave veth61): Releasing active interface
[  388.282554][T27104] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  388.514687][T27126] netlink: 'syz.0.4746': attribute type 1 has an invalid length.
[  388.538634][T27126] 8021q: adding VLAN 0 to HW filter on device bond48
[  388.569003][T27126] bond48: (slave wlan0): Enslaving as an active interface with a down link
[  388.579088][T27126] vlan2: entered allmulticast mode
[  388.581321][T27126] bond48: (slave vlan2): Opening slave failed
[  388.779233][T27144] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  388.784146][T27144] CPU: 1 UID: 0 PID: 27144 Comm: syz.1.4750 Not tainted syzkaller #0 PREEMPT(full) 
[  388.784171][T27144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  388.784182][T27144] Call Trace:
[  388.784190][T27144]  <TASK>
[  388.784198][T27144]  dump_stack_lvl+0x189/0x250
[  388.784230][T27144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  388.784281][T27144]  ? __pfx__printk+0x10/0x10
[  388.784309][T27144]  ? kernfs_path_from_node+0x2f/0x290
[  388.784355][T27144]  ? kernfs_path_from_node+0x250/0x290
[  388.784371][T27144]  ? kernfs_path_from_node+0x2f/0x290
[  388.784393][T27144]  sysfs_warn_dup+0x8e/0xa0
[  388.784410][T27144]  sysfs_do_create_link_sd+0xc0/0x110
[  388.784430][T27144]  device_add_class_symlinks+0x1cf/0x240
[  388.784454][T27144]  device_add+0x475/0xb50
[  388.784476][T27144]  wiphy_register+0x1ba6/0x28d0
[  388.784510][T27144]  ? __pfx_wiphy_register+0x10/0x10
[  388.784526][T27144]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  388.784555][T27144]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  388.784583][T27144]  ieee80211_register_hw+0x3484/0x4100
[  388.784617][T27144]  ? ieee80211_register_hw+0x1461/0x4100
[  388.784646][T27144]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  388.784669][T27144]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  388.784699][T27144]  ? __hrtimer_setup+0x187/0x210
[  388.784713][T27144]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  388.784732][T27144]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  388.784778][T27144]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  388.784798][T27144]  ? trace_kmalloc+0x1f/0xd0
[  388.784816][T27144]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  388.784836][T27144]  ? kstrndup+0xbf/0x160
[  388.784860][T27144]  hwsim_new_radio_nl+0xea4/0x1b10
[  388.784884][T27144]  ? __pfx___nla_validate_parse+0x10/0x10
[  388.784913][T27144]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  388.784946][T27144]  ? __nla_parse+0x40/0x60
[  388.784964][T27144]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  388.784993][T27144]  genl_family_rcv_msg_doit+0x215/0x300
[  388.785027][T27144]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  388.785056][T27144]  ? bpf_lsm_capable+0x9/0x20
[  388.785077][T27144]  ? security_capable+0x7e/0x2e0
[  388.785100][T27144]  genl_rcv_msg+0x60e/0x790
[  388.785145][T27144]  ? __pfx_genl_rcv_msg+0x10/0x10
[  388.785167][T27144]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  388.785204][T27144]  netlink_rcv_skb+0x208/0x470
[  388.785220][T27144]  ? __lock_acquire+0xab9/0xd20
[  388.785244][T27144]  ? __pfx_genl_rcv_msg+0x10/0x10
[  388.785266][T27144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  388.785300][T27144]  ? down_read+0x1ad/0x2e0
[  388.785320][T27144]  genl_rcv+0x28/0x40
[  388.785364][T27144]  netlink_unicast+0x82f/0x9e0
[  388.785399][T27144]  ? __pfx_netlink_unicast+0x10/0x10
[  388.785425][T27144]  ? netlink_sendmsg+0x642/0xb30
[  388.785441][T27144]  ? skb_put+0x11b/0x210
[  388.785463][T27144]  netlink_sendmsg+0x805/0xb30
[  388.785489][T27144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  388.785507][T27144]  ? aa_sock_msg_perm+0xf1/0x1d0
[  388.785524][T27144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  388.785540][T27144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  388.785557][T27144]  __sock_sendmsg+0x21c/0x270
[  388.785582][T27144]  ____sys_sendmsg+0x505/0x830
[  388.785604][T27144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  388.785632][T27144]  ? import_iovec+0x74/0xa0
[  388.785655][T27144]  ___sys_sendmsg+0x21f/0x2a0
[  388.785676][T27144]  ? __pfx____sys_sendmsg+0x10/0x10
[  388.785728][T27144]  ? __fget_files+0x2a/0x420
[  388.785741][T27144]  ? __fget_files+0x3a0/0x420
[  388.785764][T27144]  __x64_sys_sendmsg+0x19b/0x260
[  388.785784][T27144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  388.785826][T27144]  do_syscall_64+0xfa/0x3b0
[  388.785842][T27144]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.785857][T27144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.785871][T27144]  ? exc_page_fault+0x9f/0xf0
[  388.785888][T27144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.785902][T27144] RIP: 0033:0x7f8cfc78ec29
[  388.785916][T27144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.785929][T27144] RSP: 002b:00007f8cfd6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  388.785946][T27144] RAX: ffffffffffffffda RBX: 00007f8cfc9d5fa0 RCX: 00007f8cfc78ec29
[  388.785958][T27144] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  388.785968][T27144] RBP: 00007f8cfc811e41 R08: 0000000000000000 R09: 0000000000000000
[  388.785997][T27144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.786007][T27144] R13: 00007f8cfc9d6038 R14: 00007f8cfc9d5fa0 R15: 00007ffea0e4e298
[  388.786041][T27144]  </TASK>
[  389.165360][T27154] team0: Device ipip1 is up. Set it down before adding it as a team port
[  389.283847][T27160] mac80211_hwsim hwsim130 wlan0: left promiscuous mode
[  389.340810][T27168] IPVS: Scheduler module ip_vs_sip not found
[  389.357058][T27160] veth47: left promiscuous mode
[  389.509342][T27180] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4758'.
[  389.512880][T27180] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  389.517349][T27180] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  389.581965][T27185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4758'.
[  389.671356][T27187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4761'.
[  389.901131][T27190] validate_nla: 2 callbacks suppressed
[  389.901146][T27190] netlink: 'syz.0.4762': attribute type 10 has an invalid length.
[  390.076794][T27206] netlink: 'syz.1.4765': attribute type 1 has an invalid length.
[  390.099420][  T261] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  390.154078][T27217] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000
[  390.173629][T27213] bond48: (slave wlan0): Releasing active interface
[  390.395413][T27239] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4774'.
[  390.402627][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'.
[  390.625046][T27241] netlink: 'syz.1.4775': attribute type 10 has an invalid length.
[  390.819047][T27256] netlink: 'syz.1.4778': attribute type 1 has an invalid length.
[  390.845428][T27256] 8021q: adding VLAN 0 to HW filter on device bond44
[  390.860864][T27256] 8021q: adding VLAN 0 to HW filter on device bond44
[  390.863621][T27256] bond44: (slave vxcan11): The slave device specified does not support setting the MAC address
[  390.868142][T27256] bond44: (slave vxcan11): Error -95 calling set_mac_address
[  390.985658][T27271] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  390.990553][T27271] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  391.139979][ T1091] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  391.364355][T27312] netlink: 'syz.2.4790': attribute type 1 has an invalid length.
[  392.137341][   T54] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  392.225142][T27369] netlink: 'syz.2.4800': attribute type 10 has an invalid length.
[  392.292607][T27380] netlink: 'syz.1.4804': attribute type 2 has an invalid length.
[  393.189679][T27436] __nla_validate_parse: 11 callbacks suppressed
[  393.189691][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'.
[  393.298484][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'.
[  393.301838][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4818'.
[  393.438485][T27447] netlink: 'syz.1.4819': attribute type 10 has an invalid length.
[  393.601902][T27463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.604954][T27463] mac80211_hwsim hwsim94 syzkaller0: entered promiscuous mode
[  393.608261][T27463] mac80211_hwsim hwsim94 syzkaller0: entered allmulticast mode
[  393.612076][T27463] tipc: Resetting bearer <eth:syzkaller0>
[  393.659238][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4822'.
[  393.874562][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4826'.
[  393.879508][T27484] netlink: 'syz.1.4826': attribute type 1 has an invalid length.
[  394.082488][T27504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4830'.
[  394.094099][T27504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4830'.
[  394.117657][T27508] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4831'.
[  394.121510][T27508] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  394.124912][T27508] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  394.170179][T27510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4832'.
[  394.227859][T27524] netlink: 'syz.0.4832': attribute type 10 has an invalid length.
[  394.236367][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'.
[  394.708862][T27563] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  394.712229][T27563] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  395.134048][T27599] validate_nla: 1 callbacks suppressed
[  395.134068][T27599] netlink: 'syz.2.4848': attribute type 13 has an invalid length.
[  395.142313][T27599] netlink: 'syz.2.4848': attribute type 17 has an invalid length.
[  395.198046][T27599] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.211505][T27599] 8021q: adding VLAN 0 to HW filter on device team0
[  395.223429][T27599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.793387][T27637] netlink: 'syz.0.4854': attribute type 10 has an invalid length.
[  396.171793][T27660] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  397.107944][T27735] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  397.151017][T27735] 8021q: adding VLAN 0 to HW filter on device bond45
[  397.191116][T27735] 8021q: adding VLAN 0 to HW filter on device bond45
[  397.193520][T27735] bond45: (slave vxcan13): The slave device specified does not support setting the MAC address
[  397.198388][T27735] bond45: (slave vxcan13): Error -95 calling set_mac_address
[  397.279628][T27748] veth55: entered promiscuous mode
[  397.289092][T27748] bond45: (slave veth55): Enslaving as an active interface with a down link
[  397.508977][  T261] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  397.525133][T27763] netlink: 'syz.2.4879': attribute type 10 has an invalid length.
[  397.660341][T27768] netlink: 'syz.0.4881': attribute type 10 has an invalid length.
[  397.675219][  T261] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  397.748224][T27782] netlink: 'syz.2.4884': attribute type 12 has an invalid length.
[  397.874327][T27799] netlink: 'syz.2.4888': attribute type 1 has an invalid length.
[  397.902349][T27799] 8021q: adding VLAN 0 to HW filter on device bond39
[  397.933125][T27799] 8021q: adding VLAN 0 to HW filter on device bond39
[  397.935416][T27799] bond39: (slave vxcan7): The slave device specified does not support setting the MAC address
[  397.939710][T27799] bond39: (slave vxcan7): Error -95 calling set_mac_address
[  397.991823][T27804] veth51: entered promiscuous mode
[  397.999674][T27809] netlink: 'syz.1.4891': attribute type 1 has an invalid length.
[  398.003430][T27806] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  398.037216][T27809] 8021q: adding VLAN 0 to HW filter on device bond46
[  399.346661][T27809] 8021q: adding VLAN 0 to HW filter on device bond46
[  399.349816][T27809] bond46: (slave vxcan13): The slave device specified does not support setting the MAC address
[  399.355144][T27809] bond46: (slave vxcan13): Error -95 calling set_mac_address
[  399.461829][T27833] netlink: 'syz.1.4896': attribute type 1 has an invalid length.
[  399.505410][T27837] __nla_validate_parse: 51 callbacks suppressed
[  399.505426][T27837] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4898'.
[  399.511320][T27837] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  399.518147][T27837] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  399.850234][T27882] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4907'.
[  400.019100][T27895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.027732][T27891] syzkaller0: entered promiscuous mode
[  400.029451][T27891] syzkaller0: entered allmulticast mode
[  400.033272][T27890] tipc: Resetting bearer <eth:syzkaller0>
[  400.054295][T27890] tipc: Disabling bearer <eth:syzkaller0>
[  400.074424][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4910'.
[  400.183084][T27909] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4912'.
[  400.187535][T27909] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  400.190119][T27909] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  400.244376][T27910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4912'.
[  400.251183][T27909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4912'.
[  400.455070][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'.
[  400.500829][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4916'.
[  400.648397][T27941] xt_l2tp: missing protocol rule (udp|l2tpip)
[  400.928665][T27951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4918'.
[  400.934312][T27974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4924'.
[  401.967596][T27998] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  401.970769][T27998] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  402.408570][T28030] validate_nla: 2 callbacks suppressed
[  402.408584][T28030] netlink: 'syz.0.4936': attribute type 1 has an invalid length.
[  403.051384][T28070] netlink: 'syz.0.4943': attribute type 13 has an invalid length.
[  403.055972][T28070] netlink: 'syz.0.4943': attribute type 17 has an invalid length.
[  403.096367][T28070] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.103280][T28070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.367464][T28079] netlink: 'syz.0.4944': attribute type 10 has an invalid length.
[  403.557214][T28099] netlink: 'syz.0.4947': attribute type 13 has an invalid length.
[  403.559951][T28099] netlink: 'syz.0.4947': attribute type 17 has an invalid length.
[  403.569102][T28099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.925123][T28117] tipc: Resetting bearer <eth:syzkaller0>
[  404.090515][T28128] netlink: 'syz.1.4952': attribute type 13 has an invalid length.
[  404.093268][T28128] netlink: 'syz.1.4952': attribute type 17 has an invalid length.
[  404.127763][T28128] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.130631][T28128] 8021q: adding VLAN 0 to HW filter on device team0
[  404.137230][T28128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.192201][T28131] netlink: 'syz.2.4954': attribute type 1 has an invalid length.
[  404.234435][T28131] 8021q: adding VLAN 0 to HW filter on device bond40
[  404.288093][T28131] 8021q: adding VLAN 0 to HW filter on device bond40
[  404.291192][T28131] bond40: (slave vxcan7): The slave device specified does not support setting the MAC address
[  404.300718][T28131] bond40: (slave vxcan7): Error -95 calling set_mac_address
[  404.312799][T28137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  404.356994][T28134] veth53: entered promiscuous mode
[  404.363861][T28134] bond40: (slave veth53): Enslaving as an active interface with a down link
[  404.508302][ T1093] wlan0: Trigger new scan to find an IBSS to join
[  405.199526][T28180] __nla_validate_parse: 9 callbacks suppressed
[  405.199544][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4962'.
[  405.214446][T28180] netlink: 'syz.1.4962': attribute type 10 has an invalid length.
[  405.305496][T28184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4964'.
[  405.348491][T28184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'.
[  405.627932][T28202] 8021q: adding VLAN 0 to HW filter on device bond41
[  405.651897][T28202] 8021q: adding VLAN 0 to HW filter on device bond41
[  405.654260][T28202] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  405.659550][T28202] bond41: (slave vxcan7): Error -95 calling set_mac_address
[  405.697680][T28208] veth55: entered promiscuous mode
[  405.892349][T28215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4969'.
[  406.047658][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'.
[  406.114598][T28233] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4975'.
[  406.122092][T28233] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  406.125342][T28233] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  406.298360][T28243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4975'.
[  406.471015][T28261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'.
[  406.545128][T28265] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.602756][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'.
[  407.577913][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'.
[  407.674290][T28315] validate_nla: 3 callbacks suppressed
[  407.674303][T28315] netlink: 'syz.0.4992': attribute type 10 has an invalid length.
[  408.348606][T28377] can: request_module (can-proto-5) failed.
[  408.516997][T28396] netlink: 'syz.1.5000': attribute type 10 has an invalid length.
[  408.586055][   T34] wlan0: Trigger new scan to find an IBSS to join
[  408.841857][T28419] netlink: 'syz.2.5006': attribute type 2 has an invalid length.
[  408.845515][T28419] nbd: must specify a device to reconfigure
[  408.851546][T28419] netlink: 'syz.2.5006': attribute type 1 has an invalid length.
[  408.889488][T28421] tipc: Resetting bearer <eth:syzkaller0>
[  408.893360][T28421] bond38: (slave veth37): Releasing active interface
[  408.899941][T28421] bond39: (slave veth39): Releasing active interface
[  408.902648][T28421] bond39: (slave veth39): the permanent HWaddr of slave - a2:a0:72:bb:19:89 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  408.913427][T28421] bond39: (slave veth41): Releasing active interface
[  408.918637][T28421] bond41: (slave veth43): Releasing active interface
[  408.922971][T28421] bond42: (slave veth45): Releasing active interface
[  408.931329][T28421] bond45: (slave veth55): Releasing active interface
[  408.946591][T28421] netlink: 'syz.1.5007': attribute type 10 has an invalid length.
[  409.000860][T28421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  409.003799][T28421] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  409.708754][T28447] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  409.712074][T28447] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  409.809370][T28459] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  409.813565][T28459] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  410.072896][T28482] netlink: 'syz.1.5018': attribute type 13 has an invalid length.
[  410.076214][T28482] netlink: 'syz.1.5018': attribute type 17 has an invalid length.
[  410.102478][T28482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  410.138425][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.156490][T28494] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  410.170902][T28494] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  410.304949][T28499] netlink: 'syz.0.5022': attribute type 4 has an invalid length.
[  410.314915][T28499] netlink: 'syz.0.5022': attribute type 4 has an invalid length.
[  411.179424][T28542] __nla_validate_parse: 48 callbacks suppressed
[  411.179444][T28542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5028'.
[  411.199629][T28556] netlink: 'syz.2.5032': attribute type 1 has an invalid length.
[  411.228235][T28556] 8021q: adding VLAN 0 to HW filter on device bond42
[  411.249799][T28556] 8021q: adding VLAN 0 to HW filter on device bond42
[  411.252617][T28556] bond42: (slave vxcan7): The slave device specified does not support setting the MAC address
[  411.257145][T28556] bond42: (slave vxcan7): Error -95 calling set_mac_address
[  411.297285][T28561] veth57: entered promiscuous mode
[  411.302315][T28561] bond42: (slave veth57): Enslaving as an active interface with a down link
[  411.361994][T28566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5034'.
[  411.479623][T15348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.482598][T15348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.514900][T28572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  411.571552][T28580] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5038'.
[  411.684092][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'.
[  411.715649][T28584] tipc: Resetting bearer <eth:syzkaller0>
[  411.722882][T28584] mac80211_hwsim hwsim94 syzkaller0: left promiscuous mode
[  411.727643][T28584] mac80211_hwsim hwsim94 syzkaller0: left allmulticast mode
[  411.742175][T28584] veth55: left promiscuous mode
[  411.783346][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5040'.
[  411.918539][T28599] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5043'.
[  411.921746][T28599] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  411.924562][T28599] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  411.950363][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'.
[  412.027321][T28605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5041'.
[  412.130644][T28607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'.
[  412.250174][T28613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5045'.
[  412.465982][T28631] sch_tbf: burst 5 is lower than device lo mtu (11337746) !
[  412.763786][T28646] validate_nla: 3 callbacks suppressed
[  412.763804][T28646] netlink: 'syz.2.5052': attribute type 10 has an invalid length.
[  413.168667][T28668] netlink: 'syz.0.5059': attribute type 1 has an invalid length.
[  413.397581][T28691] netlink: 'syz.2.5063': attribute type 13 has an invalid length.
[  413.400784][T28691] netlink: 'syz.2.5063': attribute type 17 has an invalid length.
[  413.414180][T28691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  413.858567][T28698] netlink: 'syz.0.5066': attribute type 9 has an invalid length.
[  413.881389][T28697] netlink: 'syz.0.5066': attribute type 9 has an invalid length.
[  414.209074][T28706] netlink: 'syz.2.5068': attribute type 13 has an invalid length.
[  414.212124][T28706] netlink: 'syz.2.5068': attribute type 17 has an invalid length.
[  414.222932][T28706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.559095][T28714] bridge_slave_0: default FDB implementation only supports local addresses
[  414.777307][T28732] netlink: 'syz.0.5075': attribute type 9 has an invalid length.
[  415.125169][T28751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.130364][T28751] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  415.297596][T28767] netlink: 'syz.2.5084': attribute type 13 has an invalid length.
[  415.749066][T28772] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  415.752479][T28772] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  416.213673][T28797] __nla_validate_parse: 15 callbacks suppressed
[  416.213692][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5089'.
[  416.256661][T28802] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5090'.
[  416.272026][T28805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5091'.
[  416.275901][T28805] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  416.279203][T28805] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  416.349395][T28805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5091'.
[  416.352929][T28805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5091'.
[  416.390433][T28805] bond43: entered promiscuous mode
[  416.392803][T28805] bond43: entered allmulticast mode
[  416.395309][T28805] 8021q: adding VLAN 0 to HW filter on device bond43
[  416.598366][T28824] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR
[  416.708331][T28835] openvswitch: netlink: Key type 29 is not supported
[  416.730967][T28835] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5095'.
[  416.831957][T28836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5095'.
[  416.838538][T28840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5096'.
[  416.934969][T28847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.243662][T28877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5101'.
[  417.275041][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5102'.
[  417.379745][T28889] veth59: entered promiscuous mode
[  418.169841][T28936] validate_nla: 5 callbacks suppressed
[  418.169859][T28936] netlink: 'syz.1.5108': attribute type 6 has an invalid length.
[  418.174780][T28937] netlink: 'syz.1.5108': attribute type 6 has an invalid length.
[  418.449425][T28948] netlink: 'syz.2.5110': attribute type 10 has an invalid length.
[  418.806533][T28998] netlink: 'syz.1.5119': attribute type 23 has an invalid length.
[  418.849345][T29000] pim6reg1: entered promiscuous mode
[  418.851515][T29000] pim6reg1: entered allmulticast mode
[  418.856082][T29000] netlink: 'syz.2.5120': attribute type 27 has an invalid length.
[  418.911759][T29000] tipc: Resetting bearer <ib:ip6gre0>
[  418.954808][T29000] ipvlan0: left promiscuous mode
[  418.961368][T29000] tipc: Resetting bearer <eth:syzkaller0>
[  418.965273][T29000] syzkaller0: left promiscuous mode
[  418.967469][T29000] syzkaller0: left allmulticast mode
[  418.978403][T29000] veth35: left promiscuous mode
[  418.980648][T29000] ip6gre1: left allmulticast mode
[  418.982974][T29000] veth37: left promiscuous mode
[  418.985670][T29000] bond29: left promiscuous mode
[  418.987739][T29000] bond29: left allmulticast mode
[  418.989948][T29000] veth39: left promiscuous mode
[  418.992372][T29000] veth41: left promiscuous mode
[  418.995158][T29000] veth45: left promiscuous mode
[  419.006339][T29000] veth47: left promiscuous mode
[  419.008597][T29000] veth49: left promiscuous mode
[  419.010909][T29000] veth51: left promiscuous mode
[  419.013822][T29000] veth53: left promiscuous mode
[  419.019853][T29000] veth55: left promiscuous mode
[  419.022727][T29000] veth57: left promiscuous mode
[  419.028932][T29000] bond43: left promiscuous mode
[  419.031009][T29000] bond43: left allmulticast mode
[  419.035429][T29000] pim6reg1: left promiscuous mode
[  419.037743][T29000] pim6reg1: left allmulticast mode
[  419.043035][T29014] netlink: 'syz.1.5123': attribute type 1 has an invalid length.
[  419.072235][T29014] 8021q: adding VLAN 0 to HW filter on device bond47
[  419.091130][T29014] 8021q: adding VLAN 0 to HW filter on device bond47
[  419.093634][T29014] bond47: (slave vxcan15): The slave device specified does not support setting the MAC address
[  419.104239][T29014] bond47: (slave vxcan15): Error -95 calling set_mac_address
[  419.144335][T29018] veth57: entered promiscuous mode
[  419.153065][T29018] bond47: (slave veth57): Enslaving as an active interface with a down link
[  419.699081][T29047] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  419.711902][T29047] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  419.945356][T29064] netlink: 'syz.2.5131': attribute type 6 has an invalid length.
[  420.052140][T29072] bond34: (slave wlan0): Releasing active interface
[  420.059742][T29072] bond0: (slave 0!): Releasing backup interface
[  420.065672][T29072] bond33: (slave veth45): Releasing active interface
[  420.073139][T29072] bond36: (slave veth47): Releasing active interface
[  420.074168][T29060] netlink: 'syz.0.5130': attribute type 10 has an invalid length.
[  420.081830][T29072] bond38: (slave veth49): Releasing active interface
[  420.088471][T29072] bond40: (slave veth53): Releasing active interface
[  420.092802][T29072] bond42: (slave veth57): Releasing active interface
[  420.101144][T29072] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  420.131502][T29075] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  420.135129][T29075] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  420.412587][T29095] tipc: Invalid UDP bearer configuration
[  420.412634][T29095] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  420.737257][T29106] netlink: 'syz.1.5140': attribute type 10 has an invalid length.
[  420.943107][T29125] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  421.158617][T29139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.201801][T29142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.830610][T29157] __nla_validate_parse: 18 callbacks suppressed
[  421.830628][T29157] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5148'.
[  421.840050][T29157] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  421.861373][T29157] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  421.963766][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'.
[  421.997612][T29173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5149'.
[  422.001546][T29173] tipc: Invalid UDP bearer configuration
[  422.001597][T29173] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  422.096816][T29180] netlink: 'syz.2.5151': attribute type 1 has an invalid length.
[  422.099552][T29180] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5151'.
[  422.116725][T29180] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5151'.
[  422.150337][T29190] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5154'.
[  422.153641][T29190] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  422.157137][T29190] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  422.322449][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5154'.
[  422.394740][T29208] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  422.399148][T29208] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  422.402707][T29208] CPU: 0 UID: 0 PID: 29208 Comm: syz.2.5155 Not tainted syzkaller #0 PREEMPT(full) 
[  422.407086][T29208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  422.410983][T29208] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  422.413145][T29208] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 26 b7 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 ef b7 00 f8 4d 89 3e
[  422.420513][T29208] RSP: 0018:ffffc900271670e0 EFLAGS: 00010246
[  422.422898][T29208] RAX: 0000000000000000 RBX: 1ffff11004830756 RCX: dffffc0000000000
[  422.426005][T29208] RDX: ffffc90003ff9000 RSI: 00000000000001b4 RDI: 00000000000001b5
[  422.429117][T29208] RBP: ffffc90027167230 R08: ffff888037811cc0 R09: 0000000000000002
[  422.432208][T29208] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11004830756
[  422.435222][T29208] R13: ffff888024183ab0 R14: 0000000000000000 R15: ffff888024183aa8
[  422.438281][T29208] FS:  00007f0ba739b6c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  422.441623][T29208] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  422.444077][T29208] CR2: 0000200000ab9ff0 CR3: 000000003214e000 CR4: 00000000000006f0
[  422.447305][T29208] Call Trace:
[  422.448620][T29208]  <TASK>
[  422.449832][T29208]  ? xfrm_alloc_spi+0x2a0/0xf30
[  422.451755][T29208]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  422.453783][T29208]  ? xfrm_find_acq+0x87/0xa0
[  422.455632][T29208]  xfrm_alloc_userspi+0x70b/0xc90
[  422.457653][T29208]  ? apparmor_capable+0x137/0x1b0
[  422.459616][T29208]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  422.461773][T29208]  ? __nla_parse+0x40/0x60
[  422.463544][T29208]  xfrm_user_rcv_msg+0x7a3/0xab0
[  422.465406][T29208]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  422.467521][T29208]  ? __pfx___mutex_trylock_common+0x10/0x10
[  422.469868][T29208]  ? rcu_is_watching+0x15/0xb0
[  422.471691][T29208]  ? trace_contention_end+0x39/0x120
[  422.473723][T29208]  ? __mutex_lock+0x335/0x1350
[  422.475600][T29208]  netlink_rcv_skb+0x208/0x470
[  422.477450][T29208]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  422.479600][T29208]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  422.481698][T29208]  ? netlink_deliver_tap+0x2e/0x1b0
[  422.483749][T29208]  ? netlink_deliver_tap+0x2e/0x1b0
[  422.485782][T29208]  xfrm_netlink_rcv+0x79/0x90
[  422.487628][T29208]  netlink_unicast+0x82f/0x9e0
[  422.489490][T29208]  ? __pfx_netlink_unicast+0x10/0x10
[  422.491540][T29208]  ? netlink_sendmsg+0x642/0xb30
[  422.493414][T29208]  ? skb_put+0x11b/0x210
[  422.495027][T29208]  netlink_sendmsg+0x805/0xb30
[  422.496951][T29208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.499019][T29208]  ? aa_sock_msg_perm+0xf1/0x1d0
[  422.500905][T29208]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  422.502945][T29208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.505010][T29208]  __sock_sendmsg+0x21c/0x270
[  422.506865][T29208]  ____sys_sendmsg+0x505/0x830
[  422.508780][T29208]  ? __pfx_____sys_sendmsg+0x10/0x10
[  422.510869][T29208]  ? import_iovec+0x74/0xa0
[  422.512693][T29208]  ___sys_sendmsg+0x21f/0x2a0
[  422.514585][T29208]  ? __pfx____sys_sendmsg+0x10/0x10
[  422.516708][T29208]  ? __fget_files+0x2a/0x420
[  422.518529][T29208]  ? __fget_files+0x3a0/0x420
[  422.520360][T29208]  __x64_sys_sendmsg+0x19b/0x260
[  422.522315][T29208]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  422.524485][T29208]  ? rcu_is_watching+0x15/0xb0
[  422.526397][T29208]  ? do_syscall_64+0xbe/0x3b0
[  422.528253][T29208]  do_syscall_64+0xfa/0x3b0
[  422.530062][T29208]  ? lockdep_hardirqs_on+0x9c/0x150
[  422.532117][T29208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.534528][T29208]  ? exc_page_fault+0x9f/0xf0
[  422.536384][T29208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.538683][T29208] RIP: 0033:0x7f0ba658ec29
[  422.540435][T29208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.547712][T29208] RSP: 002b:00007f0ba739b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.550913][T29208] RAX: ffffffffffffffda RBX: 00007f0ba67d5fa0 RCX: 00007f0ba658ec29
[  422.553947][T29208] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  422.557022][T29208] RBP: 00007f0ba6611e41 R08: 0000000000000000 R09: 0000000000000000
[  422.560111][T29208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  422.563206][T29208] R13: 00007f0ba67d6038 R14: 00007f0ba67d5fa0 R15: 00007ffdd1debf28
[  422.566323][T29208]  </TASK>
[  422.567510][T29208] Modules linked in:
[  422.569190][T29208] ---[ end trace 0000000000000000 ]---
[  422.571354][T29208] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  422.573484][T29208] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 26 b7 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 ef b7 00 f8 4d 89 3e
[  422.580929][T29208] RSP: 0018:ffffc900271670e0 EFLAGS: 00010246
[  422.583298][T29208] RAX: 0000000000000000 RBX: 1ffff11004830756 RCX: dffffc0000000000
[  422.586486][T29208] RDX: ffffc90003ff9000 RSI: 00000000000001b4 RDI: 00000000000001b5
[  422.589584][T29208] RBP: ffffc90027167230 R08: ffff888037811cc0 R09: 0000000000000002
[  422.592659][T29208] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11004830756
[  422.595880][T29208] R13: ffff888024183ab0 R14: 0000000000000000 R15: ffff888024183aa8
[  422.598976][T29208] FS:  00007f0ba739b6c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  422.602327][T29208] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  422.604887][T29208] CR2: 0000200000ab9ff0 CR3: 000000003214e000 CR4: 00000000000006f0
[  422.608037][T29208] Kernel panic - not syncing: Fatal exception in interrupt
[  422.611507][T29208] Kernel Offset: disabled
[  422.613250][T29208] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:13:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001310 RDI=0000000000001311 RBP=00000000000003f8 RSP=ffffc90027166870
R8 =ffff888107710237 R9 =1ffff11020ee2046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b038ca R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0ba739b6c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000ab9ff0 CR3=000000003214e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ba67a7498 00007f0ba67a7470 XMM03=00007f0ba67a74a8 00007f0ba67a74a0
XMM04=00007f0ba730d100 00007f0ba67a7460 XMM05=00007f0ba67a7478 00007f0ba67a74c0
XMM06=00007f0ba67a74b8 00007f0ba67a74b0 XMM07=00007f0ba67a74a8 00007f0ba67a74a0
XMM08=0000000000000000 00007f0ba6612f0f XMM09=0000000000000000 00007f0ba6612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8881366283e0 RBX=ffff888136627b50 RCX=ffff8881006b0000 RDX=0000000000010000
RSI=ffff888136627b50 RDI=ffffc90003707d40 RBP=1ffff920006e0fa8 RSP=ffffc900001e0d00
R8 =ffffffff8fa3a837 R9 =1ffffffff1f47506 R10=dffffc0000000000 R11=fffffbfff1f47507
R12=ffff888136627b58 R13=dffffc0000000000 R14=ffffc90003707d40 R15=1ffff11026cc4f6b
RIP=ffffffff8b75d370 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000120bde000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4d30e12e7b
XMM06=0000000000000000 00007f4d30e12e75 XMM07=0000000000000000 00007f4d30e12e89
XMM08=0000000000000000 00007f4d30e12f0f XMM09=0000000000000000 00007f4d30e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
