last executing test programs:

2.227376288s ago: executing program 0 (id=3641):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES8=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESHEX=r2], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
socket$inet(0x2, 0x3, 0x4) (async)
r5 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_1\x00', 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x65055, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x65055, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, 0x0, 0x8004) (async)
sendmsg$NFT_MSG_GETRULE(r6, 0x0, 0x8004)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r7, 0xba, 0x8, 0x0, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000340)=0x5, 0x4) (async)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000340)=0x5, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x10) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

2.168619165s ago: executing program 0 (id=3643):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000002c0)={0x6, 0xfb})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r5, r5, 0x0, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r9, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={0xffffffffffffffff}, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f00000012c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e00)={0x7c, r11, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x6}, @device_b}}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @random="104480753b6a", @broadcast, @broadcast, {0x3, 0x1}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x23, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@device_b, {0x8, 0x9}, @value=@ver_80211n={0x0, 0x200, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @smps}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10008801}, 0x840)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.110876123s ago: executing program 1 (id=3644):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x800)
accept4$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x100d76}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11)
getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0x800, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xfff3, 0xb}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=<r13=>0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000130020002bbd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="6040010011000000600012800e00010069703665727370616e0000004c00028006000e000300000008000c00ff0f000008001400050000000400120014000700fe80000000000000000000000000002205000b007f00000008000100", @ANYRES32=r12, @ANYBLOB="080004fd0044000008001300", @ANYRES32=r13, @ANYBLOB], 0x88}}, 0x0)

2.002044545s ago: executing program 0 (id=3645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r2, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)

1.999227957s ago: executing program 1 (id=3646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004094}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="6320233a2a201a6d10c5883ff45b2c8369374009e9b6976e929eea252a5767f158a4f6a60af1f702f943bc6aad2be87971365ed647108b0142c7f185a010a378d1bae30b92b04ade1732e58433067307763574646e886b86e1e8b5a8e2be98fe89393340129ca52b4639506af964cd5ea9460d96ef5b61f2ec74cb5c978e57d58197855e013a98b8c557"], 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000012000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRESDEC=r7, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000200000003030000ae771958a0cb06cc"], 0x48}}, 0x11)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000240)=0x10001)

1.62210818s ago: executing program 2 (id=3648):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x47, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240040324a2f36f01f8c40c043aadab912497cef2f440000", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050007000000"], 0x24}}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x87) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) (async)
sendmsg$netlink(r8, &(0x7f0000000240), 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x24}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) (async, rerun: 64)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f00000002c0)="a5cd3e7d4e444147884a9fabce311da2ad52150c66ad5003828f3855bf5e356f1d2d74867c10f6fe68a65e5ca072b0b58c20ed8a7ab4503fe9caec8ddcf2cd87f41d", 0x42}], 0x2}, 0x10000804)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
connect$inet(r10, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) (async, rerun: 32)
sendmmsg$inet(r10, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) (async)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)

409.333718ms ago: executing program 2 (id=3649):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r3, r3, 0x0, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

405.182303ms ago: executing program 0 (id=3650):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910426000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"})

399.991496ms ago: executing program 2 (id=3651):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="7e38880853c7ee5506089863ab7de87978f95197ac183f0c", 0x18, 0x20040080, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r1 = socket$inet(0x2, 0x800, 0xffffffff)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4)
recvmmsg(r1, &(0x7f0000004f40)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/45, 0x2d}], 0x4, &(0x7f0000000400)=""/77, 0x4d}, 0x6}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/241, 0xf1}], 0x2, &(0x7f0000000740)=""/223, 0xdf}}, {{&(0x7f0000000840)=@xdp, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)=""/31, 0x1f}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/185, 0xb9}], 0x5, &(0x7f0000001b40)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000002b40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/7, 0x7}, {&(0x7f0000002c00)=""/117, 0x75}, {&(0x7f0000002c80)=""/94, 0x5e}, {&(0x7f0000002d00)=""/138, 0x8a}], 0x4, &(0x7f0000002e00)=""/151, 0x97}, 0xffffffff}, {{&(0x7f0000002ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f40)=""/181, 0xb5}], 0x1, &(0x7f0000003040)=""/148, 0x94}, 0xa4}, {{&(0x7f0000003100)=@in6, 0x80, &(0x7f0000004380)=[{&(0x7f0000003180)=""/34, 0x22}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/20, 0x14}, {&(0x7f0000004200)=""/6, 0x6}, {&(0x7f0000004240)=""/99, 0x63}, {&(0x7f00000042c0)=""/142, 0x8e}], 0x6, &(0x7f0000004400)=""/29, 0x1d}, 0x6}, {{&(0x7f0000004440)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004800)=[{&(0x7f00000044c0)=""/232, 0xe8}, {&(0x7f00000045c0)=""/226, 0xe2}, {&(0x7f00000046c0)=""/29, 0x1d}, {&(0x7f0000004700)=""/251, 0xfb}], 0x4, &(0x7f0000004840)=""/239, 0xef}, 0x9}, {{&(0x7f0000004940)=@x25={0x9, @remote}, 0x80, &(0x7f0000004e80)=[{&(0x7f00000049c0)=""/129, 0x81}, {&(0x7f0000004a80)=""/110, 0x6e}, {&(0x7f0000004b00)=""/10, 0xa}, {&(0x7f0000004b40)=""/43, 0x2b}, {&(0x7f0000004b80)=""/139, 0x8b}, {&(0x7f0000004c40)=""/44, 0x2c}, {&(0x7f0000004c80)=""/230, 0xe6}, {&(0x7f0000004d80)=""/251, 0xfb}], 0x8, &(0x7f0000004f00)=""/4, 0x4}, 0x4}], 0x8, 0x10100, &(0x7f0000005140)={0x0, 0x989680}) (async)
recvmmsg(r1, &(0x7f0000004f40)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/45, 0x2d}], 0x4, &(0x7f0000000400)=""/77, 0x4d}, 0x6}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/241, 0xf1}], 0x2, &(0x7f0000000740)=""/223, 0xdf}}, {{&(0x7f0000000840)=@xdp={0x2c, 0x0, <r2=>0x0}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)=""/31, 0x1f}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/185, 0xb9}], 0x5, &(0x7f0000001b40)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000002b40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/7, 0x7}, {&(0x7f0000002c00)=""/117, 0x75}, {&(0x7f0000002c80)=""/94, 0x5e}, {&(0x7f0000002d00)=""/138, 0x8a}], 0x4, &(0x7f0000002e00)=""/151, 0x97}, 0xffffffff}, {{&(0x7f0000002ec0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f40)=""/181, 0xb5}], 0x1, &(0x7f0000003040)=""/148, 0x94}, 0xa4}, {{&(0x7f0000003100)=@in6, 0x80, &(0x7f0000004380)=[{&(0x7f0000003180)=""/34, 0x22}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/20, 0x14}, {&(0x7f0000004200)=""/6, 0x6}, {&(0x7f0000004240)=""/99, 0x63}, {&(0x7f00000042c0)=""/142, 0x8e}], 0x6, &(0x7f0000004400)=""/29, 0x1d}, 0x6}, {{&(0x7f0000004440)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004800)=[{&(0x7f00000044c0)=""/232, 0xe8}, {&(0x7f00000045c0)=""/226, 0xe2}, {&(0x7f00000046c0)=""/29, 0x1d}, {&(0x7f0000004700)=""/251, 0xfb}], 0x4, &(0x7f0000004840)=""/239, 0xef}, 0x9}, {{&(0x7f0000004940)=@x25={0x9, @remote}, 0x80, &(0x7f0000004e80)=[{&(0x7f00000049c0)=""/129, 0x81}, {&(0x7f0000004a80)=""/110, 0x6e}, {&(0x7f0000004b00)=""/10, 0xa}, {&(0x7f0000004b40)=""/43, 0x2b}, {&(0x7f0000004b80)=""/139, 0x8b}, {&(0x7f0000004c40)=""/44, 0x2c}, {&(0x7f0000004c80)=""/230, 0xe6}, {&(0x7f0000004d80)=""/251, 0xfb}], 0x8, &(0x7f0000004f00)=""/4, 0x4}, 0x4}], 0x8, 0x10100, &(0x7f0000005140)={0x0, 0x989680})
sendmsg$kcm(r3, &(0x7f0000006800)={&(0x7f0000005180)=@hci, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005200)="595b0b64da6ca3774fce651d41c0f8ef7f9fd31011be4b62cea8a66773d164c42b3f789a6963ba338959935322842285459207009e297d49fd5735dc2b12a89d22eb013ad20439", 0x47}, {&(0x7f0000005280)="a7f5f33cb73b3b4bf397ace2e79e5ab4fde444dcb898b3f3e28f4b70722578eb5a3a0d45adb1c7d4d660a146212c47ffdf6c4cf5db7605cb0811eb8558fab1ad633098b76ebe6153e24342ae96f41e878390fbfc5c33e6b82983ccdaf719271360335eb87321c95ba4bb89f35663956fd3ff7188c8cb98096153bb6c14237430435c7147e4e4413dee16b1260ed5f20d3d16a40ec9c1faa18bf6d26538458896948e193a79757db784458c856a9597c35bbf58499db5c299ae336c70e4341c171a51f3348bb199f10824a4e7467311", 0xcf}, {&(0x7f0000005380)="d1e9f3155a316b04d58ab2e78cf47f5beb11972949244627204add01208f634f798f27", 0x23}], 0x3, &(0x7f0000005400)=[{0xc0, 0x10b, 0x8, "50f2d1e5f9f4954df869cb41a231c52f1b26f7e45e3b00417f764b2ef38501db512e91845ca569d3c20e5c51f0ad16bcbeb5c0ecd8a8b7031ad744aaccd9fcff6ae1ce9545bfc8b8e18176a8968609478c73550ab6d6b62d4ab03c0c2ebae605d2866a17cf7eab213e68cbe6af73725f82d6938ce27f2ee1971e388a1bd731c04cf2821e976e0364b5de266085346d58e4ef4e2cf1a4b3d5a454d926f2e3a39b0ffd50b254c383e8df34"}, {0x40, 0x1, 0x80000001, "17b1355a553dff9c3618790e5b6fab521b8436db1fcc3fb2c5462711c0a402c641a20a827d4123f872e2a4daae3e"}, {0x88, 0x10d, 0x3, "be215004cb10e9f46743859eefb5b7b596946ff5c9b81eaf8a350db1d4a63d8fd36fbe083a2b40055970ba9be01b0f084f07ef14157683314c1100cad819d799ec74adb6f2bcc4d53fd3377d42e6ab84013840e03b057fe0a8552c9721410101b52711137ff18046f99abc1a3f01773d7bfd8344ae9155"}, {0xb0, 0x10b, 0x4, "2ae18b1f1d0bb20ef691b18d44d109ae80a430885a60b9dfcf27b84a7f8afa437db6286888ea9f80eee90ed8d80ee964050f53adaf80d4e8f5833b48f7ae75749f986c30376b7d464fc2d74d79340817d77c5758869916eaa1a58bbeebacd29ba8a141d9f4780ca5d7f04afe93fd830f368d0cf502e2f1dcf2c81857704e610f17f16d9ba9e04f5259fc0f0dd85e3b05d75cc97949c76d3af3c8ef348779"}, {0xb8, 0x116, 0x10001, "f1e6f0bd58e0c7a44abad31c4929fd58000ef2cfee2c21f1e32970a8ef35219bb3b1650e56f5d78645e03be10afc601d147f62750ed47ac868a47e129a102da51f65dd0ab5ab051ae3f879e61694f203885be2323d6c97247a280ccd55ececd85b61431cc207f058720f7cc27585d104ee027ef1e7c66c35641c600217bcfaa76c63175886faae5f85bead47b25861705fb66e5e1831f179645d6485370133a5c04876b1947a"}, {0x50, 0xe9, 0x4, "05c7f781bfdd16d9c2dd93e89a246070637b715bb516aa84c86bdbf425db39e7a795c68147a23f4954f1fc1f144220ef6d6337318e4e30b5bcd7ff"}, {0x1010, 0x114, 0x2, "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"}, {0x90, 0x109, 0x0, "65b16234ba81597067acc62e2394f0310ce94bc11dd088fb56ed1799d6c404cbcb5a2916e638374b7ccd07bbe78fc5f8951f0013d89e717674a2a7c46fd340849f817d2b4fe98a3129cfaa83d17dbd326909edd5e56993ba02da0921c1eb12b9b59eb820efc703a33c430a1fe928575ffc3502db75bcc19b60fb"}], 0x13e0}, 0x20000000)
r4 = epoll_create1(0x0)
epoll_wait(r4, &(0x7f0000006840)=[{}, {}], 0x2, 0x7) (async)
epoll_wait(r4, &(0x7f0000006840)=[{}, {}], 0x2, 0x7)
vmsplice(r3, &(0x7f00000069c0)=[{&(0x7f0000006880)="64dfe92b9d6513b10c6ced5c3c745e34b11232fce25d2f784302db2870f2c1318c6a9fcc6dccd6b252b8721faa05ece5ea1e8af19f19097686f863107e6d13a5ac6a1a8e26d788a19116c13797a3b23243b9788235529fa92d9c6b7a6ee449033a1a156640b15c29e9e1a5f40458b8398a43bfa2353418e98232ce2d1c56caa108", 0x81}, {&(0x7f0000006940)="2ed27f9e9483c69c0bf548b49f903b79ab779f7e6d47c55cdebde4b5cbc23c4ce5436b04c1a8e227d572def8e7b8dba400f431db64cf968fe3ec93b11758e09e0275a1fa8fc50e21c24beaff36bc74dfddbb77331ba58010425f7b69c8d59ffd7cdc3e4e1d6ba0baab4d07b6adc92d0442c8286f8bcb29", 0x77}], 0x2, 0x5)
setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000006a00)="5ca9677fc213250c4eba41f5a5a08b7f85cfd3b9bdba21e7f85e606d9b86fff2a1a03b1c029437d347ce7f807679b277d16e035a698e4ed56ce95bae1250df251bf09ee911d704b0783232544df2d421bbac2cca3d41238e5f1bbfc27534db22637c21a323e39b3d20cd228adc50ab0e9c2ccaf599e7d633303b975d518530eebe5a4e456690a4823c8f7061eb67f79338f68cd769851b08362be549cdb1cc2053f2bdad5a2b5d90d5d3a23b24402c", 0xaf) (async)
setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000006a00)="5ca9677fc213250c4eba41f5a5a08b7f85cfd3b9bdba21e7f85e606d9b86fff2a1a03b1c029437d347ce7f807679b277d16e035a698e4ed56ce95bae1250df251bf09ee911d704b0783232544df2d421bbac2cca3d41238e5f1bbfc27534db22637c21a323e39b3d20cd228adc50ab0e9c2ccaf599e7d633303b975d518530eebe5a4e456690a4823c8f7061eb67f79338f68cd769851b08362be549cdb1cc2053f2bdad5a2b5d90d5d3a23b24402c", 0xaf)
getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000006ac0), &(0x7f0000006b00)=0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000006b80), r3)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000006c40)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006bc0)={0x30, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008091)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000006dc0)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006d80)={&(0x7f0000006cc0)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x81}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000006e00)={0x2, {0xc, 0x31c0000, 0x0, 0x8, 0x8}}) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000006e00)={0x2, {0xc, 0x31c0000, 0x0, 0x8, 0x8}})
r6 = epoll_create1(0x80000)
epoll_pwait(r6, &(0x7f0000006e40)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000006ec0)={[0x6]}, 0x8)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000006f00)={'filter\x00', 0x55, "845faa28f8aac7f23535f28f3e994667541bc3d7de72b220780595a7f37d1cfeb823a882d2eb023c360e73a244ca2cce42a31a1a91fe0fda232167d354df2440de4cb8cb6966fba30e2e6139c7278c73b83818c4c1"}, &(0x7f0000006f80)=0x79)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000006fc0)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007000)={'ip_vti0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000007100)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000070c0)={&(0x7f0000007080)=@newchain={0x38, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xb}, {0xe, 0x5}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000040) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000007100)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000070c0)={&(0x7f0000007080)=@newchain={0x38, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xb}, {0xe, 0x5}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000040)
r7 = accept4$llc(r3, 0x0, &(0x7f0000007140), 0xc1800)
ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000007180))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007200)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000007300)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000007340)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000007440)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000007500)={{{@in6=@initdev, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000007600)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000007500)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000007600)=0xe8)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007d00)) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000007d00)=<r11=>0x0)
sendmsg$netlink(r3, &(0x7f0000007ec0)={&(0x7f00000071c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007e40)=[{&(0x7f0000007480)={0x5c, 0x42, 0x400, 0x70bd29, 0x25dfdbfc, "", [@nested={0x18, 0xfb, 0x0, 0x1, [@typed={0x4, 0xb0}, @typed={0x8, 0x19, 0x0, 0x0, @uid=r8}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r9}]}, @nested={0x31, 0x104, 0x0, 0x1, [@generic="9f7a06b1a4db51b0c35b8802a219ffa79f8c3c9980ddf9a4b6d4cf1a56bc5d60e2d224f561", @typed={0x8, 0x12c, 0x0, 0x0, @fd=r6}]}]}, 0x5c}, {&(0x7f0000007640)={0x4a4, 0x1e, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @nested={0x127, 0x49, 0x0, 0x1, [@typed={0xc, 0x101, 0x0, 0x0, @u64=0xaf}, @typed={0x8, 0xe5, 0x0, 0x0, @fd=r0}, @generic="529ce41b8b143e3699c5923641e132906bf7379096da73cb880946b8ba61e76df334ad474b2d0f1b9d2d74d852b6f2088333da58a9f0d83d5a35c971ca1472f5e9a6df337a21280b3da61974328c37be28ef847d81e4de291e5424f07c57d04b3a045bf482b33641c261545bb81f2cfda9922a8d8588047f8bafc7fea6465fd3ec", @nested={0x4, 0x63}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x17, 0x0, 0x0, @uid=r10}, @nested={0x4, 0x5}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@multicast2}, @generic="1c4c6f57e2c9fcf12bb371341900d2c0d6b140f7873f13a7a3af7c9c035a8617cfb73738e2882e53305defb57f546a8faef835eaae34974eddcc4bbc96a6888f7589489ab50750c42f56f10b7c260cd2f6a3d3cf674549a1adc5f9bb00a31a28c16b"]}, @nested={0x8, 0x13e, 0x0, 0x1, [@nested={0x4, 0x11c}]}, @typed={0x14, 0xab, 0x0, 0x0, @ipv6=@remote}, @nested={0xed, 0x62, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="ebccf66303d10d725ecc19e0719d234084133b14fe970e00597df8e59ecb9d4355e562f4ae216ec4d3d934ebcb764cfa46d99f291cc762e016ead0fc1d6c412345cf8a63feda741c9a413ae9535cd1503fcab276cc763da062d78d2086edf661", @generic="42484e7da296edcf75c6057368671c684af86fe9e6d1cf60a0c622f91fa44afac0a923732a08d7f3312176440bbc481c54d4dc928796917abc4c5777f61b94c23dff9c1f9b0a90589ae9f6076b460921d8164ecbc0965ba82949cd74fdbba132068fbb36e1ae79dab77d93c8529b93376f7a6d6b3c25a7fcde31a7944d3743d524"]}, @nested={0xfc, 0xc5, 0x0, 0x1, [@typed={0xeb, 0x73, 0x0, 0x0, @binary="32ecc7fba8c71ef028f12b6d702bbf67a7e589f70a9c7c77039aa91df50864ee1f081fae329038ee1465d0a5b8fc40934e507997a8c34809d98df0d083c61659fcd5ffc5654ef01a6da840e9d785da8c5a4416d32855b37c1d336087346502d8d92f0a85b8f26ddad1396057e8d2ada0307b9c58797604985dc509185652e50a760e89deb9143d6b09af1754e71b3d0f1618e6acc0d292acbd0dc566edb58294bd6b075d45783bb8e10932e4f27252133db97e7eb00ead577fe897fbbb0b0c1d10083d06dfd2180ed50ad43dff57a6e5d0cf83d371ea3dc79dbe0f01a938a733121cbd2b422fa5"}, @nested={0x4, 0xbe}, @typed={0x6, 0x12d, 0x0, 0x0, @str='#\x00'}]}, @nested={0x15b, 0xd5, 0x0, 0x1, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @nested={0x4, 0xd3}, @generic="68419e06aca79085d660b6ae4e0fa930ec037e6c78c8124f1248ba23911ae4accdd2e52fc4ca0bb29eed45100d362b27c1ef7cff7967a50326195e434699b6897cda2bb7593d869e4ae38561fe4c2897735d319f3d0422c93105bde72807d5db9f4b1f9ae75104877f335ce77010beac07c8584eff50401254e5fd35bad312ef795844e1c004786048742eb900c1f95c2af915d6677081107f857725a651d84102f4a7da34ddc67a9f0574197e941a0db0f2a6950333cbaeeb3fce", @generic="170c38edb1314e31d120a1e459cf9704b9fb8ccd7a7e399910e00a27e203f18891eda17dd6614cb7a3f42a8ba47739f64bd0565f029953fe847b30506098b9a359ae321490c1286e48b39b24eadb2a6097efa2f97b9699bd57b05a993d3aaa51fc82f046ef2bce349bfa81fe0fb5cc5839d4d5bffd52a0ef8a725983763c1aaa", @nested={0x4, 0x129}]}]}, 0x4a4}, {&(0x7f0000007b00)={0x74, 0x3a, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@generic="77f8f048488c09716c2c91e2c34a2f10c6c43bca3a28df82655219eb84ef82eeac41ecc1b2b99cc992b11991c411863377c691baef022e2dba558c878d0f56deba8f444bb20bfcc1501bd591b7", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}, 0x74}, {&(0x7f0000007b80)={0x164, 0x38, 0x100, 0x70bd2a, 0x25dfdbff, "", [@generic="e3c4a1a0c3ac511460a45e89c5f90f77e92334136e146f04438ca5b88d4c0d8bdae948bfc9d2e80546f19735f1d6f9b19489cdca608fda79bd83c0124c5469ecb54927b8c2f5eb7d85f6ea29e25805ff71e179b728f5394459885788365e06aa1b5b718b0e458729b10188a346ba83740baa923ae53ce8587800db557aa24aab2cb3f38234f06dc6ca34522dc47f2b969e3124c6c32d7850d37c1fca7e28d357663bed862b4639a1472868783349c7361ca435bdc7ec6912d95030fcfc172610d35b0f39efeb8e40334f8387914575385eb4962f8f6b4cf34dc6d89b09ed9f5c3198fd2e8f230cb6", @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="997902db09904bcde6bc5624b368370b3abc05a3956a8786f2261efd8e39128e0b0430e40514aa72370f3a91f75cb2e70bf1f580ac7b033736171138194ba690b64e855a98db0e1413ce64ca392e585a754736c9369956373529eb14b586cf3ef5bdb1"]}, 0x164}, {&(0x7f0000007d40)={0xf4, 0x17, 0x2, 0x70bd26, 0x25dfdbfb, "", [@nested={0xe3, 0x7e, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x13d}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x126}, @typed={0x8, 0x10b, 0x0, 0x0, @uid=r11}, @typed={0x8, 0xa1, 0x0, 0x0, @u32=0x1e}, @generic="23f5d3c768b8038e1cafdeb68f34ec7bad41aa03e7e1cfec724cb5b3916a1347da600bbccb0cbf78883c48deb2c3bf16c6c9005156a06648d60dfcb0b57a5becdf32cafca2bc212e2bed6fa7e73e885e39c6c1e3c2cc1127f8bafc70937c232636675e00cffd51485ab8fc55dc9e173c1e16e7f97688adb7dc93b2b00ec5feb96129d01fe4862ed319e79691d4e622d1a99634d27588a34da12f2ea7fac0e32a37a16dfbc40fda9005d6e2fc8a58a4", @typed={0x8, 0x131, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xb6}]}]}, 0xf4}], 0x5, 0x0, 0x0, 0x20000000}, 0x48000)
sendmmsg(r1, &(0x7f0000008700)=[{{&(0x7f0000007f00)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007f80)="84ea117cff0ea25a4ab7842811ff576a091fe3ff72ef50f3a83ca348b2cab77ae6a2e999faa85a4cf2c80cc3da2328fb1dcb5cf890bca294b40fafa8059d54d78c84dd605a1fae737ef2f6f9b411743f881b7bfbe916e5abacc31b8655fda7e0bd9f384368901acb3804b0ddb0be14aa51f924b97c64fd0e9fdefa9141ea21540abd920ed5348ff966e353788eed87ce2ec39e16e14e79bfda65b26848f2a1519978bcfb05d6d324ee5f", 0xaa}], 0x1, &(0x7f0000008080)=[{0x40, 0x113, 0x9, "ecd7ca1dfa4598fc6fc8638a37a6597f4b47b7a51fbebdce13edf65216458b651a858ae5d07e34dad8b40483d45e8f"}, {0xe8, 0x111, 0x3, "028819a9b3e68ce4fe1d146aa664fdb31b3efacea2298d08aca62af991cb4720ac9ec92a5ec3eed17e5e7310cf7e549578f768b79fe5ad2a5c00a6c0e00bfee84d4f2f69d436950b904094555370ebebab74703c70ac3160f42d67690758bb03fb8258a5c913223d8f2ed1ac88e9feefedcac67fe2cae5d11ef879ce17c010eeba1dabf50f74509253744d8e90747d2a701af976101dcb46e5addaaa47bc450d343d888eb19256bd245452fb60cc75e507f48582d8ad5fa0b8946123fcc516c78700d6bccb03271b7ea65bbf7dbb4220d22fc16e659f"}, {0xc0, 0x10c, 0xa3c4, "1c2d8853642e4e37f4a5dfa0bc832a258ccd2fb3bbb5b98ccb3f17041056717e996d6a720fb7e88705f3412f142769118368882d17e4ad2596d737a48c83ce29bd602e67aa448c50d1e56bc86a1f44b788c8b180012b157755fa5eb67d172197c627b1e304a0ac8b80c1115ecb133af1da7c3a4df026bc251e0e9c52df7f90d8496019799b74713d4c3a0340ee0cfe57b46b6d6df41457e2ace054070fd1c9386e33be8d0dc1412b99cf"}, {0x58, 0x113, 0x9, "5b5f3827b2b8709af5cd138933b2b17f559456e0489c94d291119ee3ae5f05d4b01b4d060dd50cfe0183f06e99be590c64d31bb720a3a5d467c0443e4de5ce5f202e"}, {0x50, 0x10d, 0x1, "d363aedec5c2fdbeb8295fa073640109deab26ef36b8a7dc247c730d645b9a0b73058d0a186e1d027f6c91b17dcc5277546c9158d2795805b3e8a75b0988"}, {0x108, 0x107, 0x9, "bd9246000816bb75833dac751e50644b0da0f958bebc368943eee2370be7fc94ac2fd313ba00ec7f27a93192e98f1b48281d9713e6e4bdedd76761396b049063891cc1b791d94e3201d668c620c56d0309935bb0dfb8365d1ba33cebcc682426600175ccff7888691e1c5d1a8db482213797b78846c00d8bdc33745183efb58b989da31b0e650983366413a6adbcfe5e39049f8f55eab767f6d19d950381c8d5f00bc5f9c8c703d3397e8f7705dea2337730925ff212b553b39d7822d46ebd1480fabcd6ae126dfa5c9fa9948ca06d447afd3693ddfbf2b29b34694b4388b307a89a617b02e9de73b9d3a6459e7a9119c79634"}], 0x398}}, {{&(0x7f0000008440)=@ll={0x11, 0x17, 0x0, 0x1, 0xc3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x80, &(0x7f00000084c0), 0x0, &(0x7f0000008500)=[{0x20, 0x29, 0x3, "a46d8759f0ed40b6dce9e1c25773a19e"}, {0xf8, 0x0, 0x7, "6a2c7f86ed921b404ad217203c694dab3b50f640566095791d192a273ac1c04d3b5f020c932f3d130bac163ee8755cc5cf236fbf26cc233d17e2e07921bfb7f2e420104e91cfff62bb3a3f03e348f6839c80b1e808168165783f15d39934f0829b9f3d53e34fdeae1a1ffa4a983d448e9c53416bd2633f92aa5a6474b54413d4ca91ff7206f80c9d39460a3b02b2272203a9b852bd75e0d3820c966fcdf195b2a4c19ca0ac0e1eff28e280b6e00ecfc8a57bdea112a1091a66918fc1ddb49862fff358773112df0a19ba31b1bd6c6a9cd9f692d70349dca93e833ab66726882270750a"}, {0xd0, 0x0, 0x34d, "7cf4459f83c9fbc7c94b49acd563fba51276f555c8e47dba0c0bc7f3346575b1b0bda4d4f37eeaeebaa2d7ca09e3c5573452d198f3aac08daefb0ce7ba81c2c864f6d586493fa45c646ff723dee2ce1a8205adb3ad09042e2513768ca9f4d372f3d1a037f8c262e9f2d68267207a5cdd685a6e894f694fec6909a29fef5aec815ce9d23e294c16fe74872204def3ed2347d3b15d0e0e4f0bfbce81c5752b10124d52fb1e8e64129a51bc6741d2ba3b6ee31135948632c763c33797"}, {0x10, 0x113, 0x9}], 0x1f8}}], 0x2, 0x4) (async)
sendmmsg(r1, &(0x7f0000008700)=[{{&(0x7f0000007f00)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007f80)="84ea117cff0ea25a4ab7842811ff576a091fe3ff72ef50f3a83ca348b2cab77ae6a2e999faa85a4cf2c80cc3da2328fb1dcb5cf890bca294b40fafa8059d54d78c84dd605a1fae737ef2f6f9b411743f881b7bfbe916e5abacc31b8655fda7e0bd9f384368901acb3804b0ddb0be14aa51f924b97c64fd0e9fdefa9141ea21540abd920ed5348ff966e353788eed87ce2ec39e16e14e79bfda65b26848f2a1519978bcfb05d6d324ee5f", 0xaa}], 0x1, &(0x7f0000008080)=[{0x40, 0x113, 0x9, "ecd7ca1dfa4598fc6fc8638a37a6597f4b47b7a51fbebdce13edf65216458b651a858ae5d07e34dad8b40483d45e8f"}, {0xe8, 0x111, 0x3, "028819a9b3e68ce4fe1d146aa664fdb31b3efacea2298d08aca62af991cb4720ac9ec92a5ec3eed17e5e7310cf7e549578f768b79fe5ad2a5c00a6c0e00bfee84d4f2f69d436950b904094555370ebebab74703c70ac3160f42d67690758bb03fb8258a5c913223d8f2ed1ac88e9feefedcac67fe2cae5d11ef879ce17c010eeba1dabf50f74509253744d8e90747d2a701af976101dcb46e5addaaa47bc450d343d888eb19256bd245452fb60cc75e507f48582d8ad5fa0b8946123fcc516c78700d6bccb03271b7ea65bbf7dbb4220d22fc16e659f"}, {0xc0, 0x10c, 0xa3c4, "1c2d8853642e4e37f4a5dfa0bc832a258ccd2fb3bbb5b98ccb3f17041056717e996d6a720fb7e88705f3412f142769118368882d17e4ad2596d737a48c83ce29bd602e67aa448c50d1e56bc86a1f44b788c8b180012b157755fa5eb67d172197c627b1e304a0ac8b80c1115ecb133af1da7c3a4df026bc251e0e9c52df7f90d8496019799b74713d4c3a0340ee0cfe57b46b6d6df41457e2ace054070fd1c9386e33be8d0dc1412b99cf"}, {0x58, 0x113, 0x9, "5b5f3827b2b8709af5cd138933b2b17f559456e0489c94d291119ee3ae5f05d4b01b4d060dd50cfe0183f06e99be590c64d31bb720a3a5d467c0443e4de5ce5f202e"}, {0x50, 0x10d, 0x1, "d363aedec5c2fdbeb8295fa073640109deab26ef36b8a7dc247c730d645b9a0b73058d0a186e1d027f6c91b17dcc5277546c9158d2795805b3e8a75b0988"}, {0x108, 0x107, 0x9, "bd9246000816bb75833dac751e50644b0da0f958bebc368943eee2370be7fc94ac2fd313ba00ec7f27a93192e98f1b48281d9713e6e4bdedd76761396b049063891cc1b791d94e3201d668c620c56d0309935bb0dfb8365d1ba33cebcc682426600175ccff7888691e1c5d1a8db482213797b78846c00d8bdc33745183efb58b989da31b0e650983366413a6adbcfe5e39049f8f55eab767f6d19d950381c8d5f00bc5f9c8c703d3397e8f7705dea2337730925ff212b553b39d7822d46ebd1480fabcd6ae126dfa5c9fa9948ca06d447afd3693ddfbf2b29b34694b4388b307a89a617b02e9de73b9d3a6459e7a9119c79634"}], 0x398}}, {{&(0x7f0000008440)=@ll={0x11, 0x17, 0x0, 0x1, 0xc3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x80, &(0x7f00000084c0), 0x0, &(0x7f0000008500)=[{0x20, 0x29, 0x3, "a46d8759f0ed40b6dce9e1c25773a19e"}, {0xf8, 0x0, 0x7, "6a2c7f86ed921b404ad217203c694dab3b50f640566095791d192a273ac1c04d3b5f020c932f3d130bac163ee8755cc5cf236fbf26cc233d17e2e07921bfb7f2e420104e91cfff62bb3a3f03e348f6839c80b1e808168165783f15d39934f0829b9f3d53e34fdeae1a1ffa4a983d448e9c53416bd2633f92aa5a6474b54413d4ca91ff7206f80c9d39460a3b02b2272203a9b852bd75e0d3820c966fcdf195b2a4c19ca0ac0e1eff28e280b6e00ecfc8a57bdea112a1091a66918fc1ddb49862fff358773112df0a19ba31b1bd6c6a9cd9f692d70349dca93e833ab66726882270750a"}, {0xd0, 0x0, 0x34d, "7cf4459f83c9fbc7c94b49acd563fba51276f555c8e47dba0c0bc7f3346575b1b0bda4d4f37eeaeebaa2d7ca09e3c5573452d198f3aac08daefb0ce7ba81c2c864f6d586493fa45c646ff723dee2ce1a8205adb3ad09042e2513768ca9f4d372f3d1a037f8c262e9f2d68267207a5cdd685a6e894f694fec6909a29fef5aec815ce9d23e294c16fe74872204def3ed2347d3b15d0e0e4f0bfbce81c5752b10124d52fb1e8e64129a51bc6741d2ba3b6ee31135948632c763c33797"}, {0x10, 0x113, 0x9}], 0x1f8}}], 0x2, 0x4)

332.01451ms ago: executing program 1 (id=3652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)

329.535687ms ago: executing program 2 (id=3653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socketpair(0x6, 0x3, 0x7, &(0x7f0000000080))
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x84, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0xfffffffffffffea0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

271.535519ms ago: executing program 0 (id=3654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES16=r0], 0x30}}, 0x801)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

141.778774ms ago: executing program 2 (id=3655):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000680)=r1, 0x4) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x2, 0x84) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00e000ee4e2a5ef21145ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000000a0002000180c2000001000008002900da280000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'wg2\x00', @random="3fe7ed725e41"}) (async)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)

140.885532ms ago: executing program 1 (id=3656):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x9af2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa858712265c6c23}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008890)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x134, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @remote}, {0x0, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x1, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))

57.780001ms ago: executing program 1 (id=3657):
r0 = socket(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/82, 0x52}], 0x1, &(0x7f0000000540)=""/21, 0x15}, 0xff}], 0x1, 0x122, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="dc6f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="d91e42", 0x3}], 0x1}}], 0x2, 0x40480dc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x6, 0xe, 0x4, 0x9, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, @ldst={0x2, 0x0, 0x3, 0x7, 0x9, 0xfffffffffffffff0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000fc0)=""/4096, 0x41000, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x3ff, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x3c}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async, rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (rerun: 32)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff}) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r10, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async)
sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

56.213701ms ago: executing program 0 (id=3658):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000001780)="12dfbd793d", 0x5}], 0x1, 0x8) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) (async)
syz_extract_tcp_res(0x0, 0x3, 0x3) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r3) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x228, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x4040800)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000180)) (async)
sendfile(r0, r8, &(0x7f00000001c0)=0xc, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r10=>0x0, 0x2f, 0x7, 0x3, 0x3, 0x1a, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x9, 0x8}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', r10, 0x20, 0x80, 0x3, 0x6, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x24, 0x42, 0x0, 0x4, [0x401, 0x8, 0x1c, 0x4, 0x2, 0xd, 0x2, 0x0]}, @timestamp_prespec={0x44, 0x14, 0xdb, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x5993}]}, @rr={0x7, 0xb, 0x1b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x20, 0x7, 0x0, 0x1, [0xa, 0x3, 0x6, 0x100, 0x6, 0x15cc, 0xa]}, @ssrr={0x89, 0x1b, 0x3d, [@empty, @local, @local, @empty, @empty, @remote]}]}}}}})

1.734644ms ago: executing program 2 (id=3659):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) (async, rerun: 32)
r4 = accept4(r2, 0x0, 0x0, 0x80000) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) (async, rerun: 64)
sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) (async, rerun: 64)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) (async, rerun: 32)
r8 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r9, &(0x7f00000000c0), 0x10) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async, rerun: 64)
sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0xf) (rerun: 32)
writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async, rerun: 64)
r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)

0s ago: executing program 1 (id=3660):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8)
r5 = gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8)
r7 = socket$kcm(0x2, 0x5, 0x84)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r8=>0x0}, 0x0)
sendmsg$unix(r1, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x58, 0x400}, 0x800)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}, {&(0x7f0000000200)={0x2a0, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x7e, 0x0, 0x1, [@nested={0x4, 0xec}]}, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x54, 0x0, 0x0, @uid=r4}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x100}]}, @nested={0x20, 0x88, 0x0, 0x1, [@nested={0x4, 0x2a}, @nested={0x4, 0x1f}, @nested={0x4, 0x112}, @typed={0x8, 0x12d, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x38}, @nested={0x4, 0x60}]}, @nested={0x191, 0x2d, 0x0, 0x1, [@generic="d513c31b07e5b6d5415ebc4e6e1b7f5c09f97dcd112b596370da2a458cd39871ed43655d1165d9cfef84bce9bcf857a29953a3787a97900322324661b4642c05cce2e338b08e70f8ae072fe76a3c390b011095ba72113ae480370b616fb78958bdd046644b2173f284d6b6261d5176b99c51904375a0139b36487b640a948c13bb12de3951ac29fa07d0e892", @generic="e37d1de01d87bc4df44f9fe43f8f793a370fc73504b455318feb3bf407985e5c01b24ca902cc9a41f38f5ad8e9c674ca3aeb9ead01267861d51f65cf57250feb878c56e9f1851502aaf29e4437cb031fcf12f7203e0332512be0a9034532d5311a2363aefb7ddf235e329654a9cc4db52fd8dd6fd71de5ee9176e0e3a809254bd0e6be6aaec687218e1dc122c54bd07ba2a22608f6c7c87f0997f0b0c42023538f5c5b6d6898f058ed72db85da8145d71dcf25c4e2e22bbf34b295c67e9969ce4f00e8b1c651fdae23da591b1e40e4b2c5af4b5ea6b30bef6a9335acaf2c5504aa3dda900d41dbeffda2bcbaf97c9ded6f", @typed={0x4, 0xee}, @nested={0x4, 0xf}, @typed={0x8, 0x96, 0x0, 0x0, @uid=r9}]}, @generic="da797720d351c2bcc7102eb38ef26bb88e94aeb722aa0048f44cd052354c1197fc9719abde94e6a5bd1ab4eda14d8b", @nested={0x77, 0x79, 0x0, 0x1, [@nested={0x4, 0x5e}, @generic="da9a120cd07c5b65dd3b86e92ec6e5a9cfceb774704b93e491da874509ff78ecb71a71a789e64d05f0e60a1a385987736f1e3838c67d79d2022fd81c4213ab682c65f9021c22f0f134341bac93f08cb4b67f91f5a362c303b9ac08d3f08296a8893ac040bbbe2c1970d20d6e5f44be"]}]}, 0x2a0}], 0x2, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

ackup interface with a down link
[  252.654431][T16636] netlink: 'syz.2.2277': attribute type 11 has an invalid length.
[  252.839180][T16663] netlink: 'syz.0.2280': attribute type 11 has an invalid length.
[  253.166665][T16705] netlink: 'syz.0.2288': attribute type 13 has an invalid length.
[  253.169719][T16705] netlink: 'syz.0.2288': attribute type 17 has an invalid length.
[  253.216028][T16705] 8021q: adding VLAN 0 to HW filter on device team0
[  253.232171][T16705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.372298][T16711] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  253.376112][T16711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.548940][T16726] netlink: 'syz.2.2293': attribute type 16 has an invalid length.
[  253.551700][T16726] netlink: 'syz.2.2293': attribute type 3 has an invalid length.
[  253.554257][T16726] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2293'.
[  253.597783][T16725] netlink: 'syz.1.2292': attribute type 10 has an invalid length.
[  253.763050][T16736] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  253.766860][T16736] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  254.600538][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  254.663141][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  254.871324][T16768] mac80211_hwsim hwsim208 wlan1: left allmulticast mode
[  254.875808][T16768] veth35: left promiscuous mode
[  254.876372][T16769] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2303'.
[  255.512392][T16781] batadv_slave_1: entered promiscuous mode
[  255.521658][T16780] batadv_slave_1: left promiscuous mode
[  255.578893][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.691310][T16801] netlink: 'syz.1.2309': attribute type 10 has an invalid length.
[  256.711567][T16825] netlink: 'syz.0.2317': attribute type 1 has an invalid length.
[  256.781509][T16830] veth37: entered promiscuous mode
[  256.799141][T16830] bond20: (slave veth37): Enslaving as a backup interface with a down link
[  257.198974][T16852] netlink: 'syz.2.2322': attribute type 11 has an invalid length.
[  257.429652][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'.
[  257.783203][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'.
[  257.968549][T16900] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.462372][T16939] netlink: 'syz.1.2340': attribute type 9 has an invalid length.
[  258.568534][T16943] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2341'.
[  258.750432][T16953] netlink: 'syz.2.2343': attribute type 1 has an invalid length.
[  258.790575][T16953] veth27: entered promiscuous mode
[  258.797103][T16953] bond0: (slave veth27): Enslaving as a backup interface with a down link
[  258.827936][T16956] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2345'.
[  258.899084][T16962] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.982150][T16969] netlink: zone id is out of range
[  258.987909][T16969] netlink: zone id is out of range
[  258.989937][T16969] netlink: zone id is out of range
[  258.992626][T16969] netlink: zone id is out of range
[  258.994413][T16969] netlink: zone id is out of range
[  258.998451][T16969] netlink: zone id is out of range
[  259.000138][T16969] netlink: zone id is out of range
[  259.021424][T16969] netlink: set zone limit has 4 unknown bytes
[  259.059789][T16973] mac80211_hwsim hwsim225 wlan1: entered allmulticast mode
[  259.080623][T16973] bond0: (slave veth27): Releasing backup interface
[  259.097757][T16973] netlink: 'syz.2.2352': attribute type 10 has an invalid length.
[  259.110862][T16973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.116813][T16973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.418888][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'.
[  259.942215][T16994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2357'.
[  259.951342][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2357'.
[  260.009460][T16996] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  260.012495][T16996] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2358'.
[  260.227024][T17011] netlink: 'syz.2.2363': attribute type 21 has an invalid length.
[  260.229812][T17011] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2363'.
[  260.232895][T17002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  260.236687][T17011] netlink: 'syz.2.2363': attribute type 4 has an invalid length.
[  260.239612][T17011] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2363'.
[  260.875064][T17040] mac80211_hwsim hwsim222 wlan0: entered promiscuous mode
[  260.878388][T17040] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  261.393515][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.398671][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.472101][T17058] netlink: 'syz.1.2374': attribute type 1 has an invalid length.
[  261.519277][T17058] 8021q: adding VLAN 0 to HW filter on device bond25
[  261.554239][T17058] veth31: entered promiscuous mode
[  261.568691][T17058] bond25: (slave veth31): Enslaving as a backup interface with a down link
[  261.661080][T17068] tipc: Resetting bearer <eth:syzkaller0>
[  261.666845][T17068] syzkaller0: left promiscuous mode
[  261.669051][T17068] syzkaller0: left allmulticast mode
[  261.678965][T17068] veth23: left promiscuous mode
[  261.680776][T17068] veth25: left promiscuous mode
[  261.683545][T17068] veth27: left promiscuous mode
[  261.688130][T17068] veth29: left promiscuous mode
[  261.715122][T17068] veth31: left promiscuous mode
[  261.727431][T17074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  261.959803][T17100] syzkaller0: entered promiscuous mode
[  261.966065][T17100] syzkaller0: entered allmulticast mode
[  262.029271][T17103] netlink: 'syz.0.2380': attribute type 4 has an invalid length.
[  262.130414][T17105] 8021q: adding VLAN 0 to HW filter on device bond12
[  262.287186][T17117] netlink: 'syz.2.2390': attribute type 29 has an invalid length.
[  262.293993][T17117] netlink: 'syz.2.2390': attribute type 29 has an invalid length.
[  262.630409][T17146] syzkaller1: entered promiscuous mode
[  262.632612][T17146] syzkaller1: entered allmulticast mode
[  262.723850][T17142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.276719][T17189] veth33: entered promiscuous mode
[  263.282684][T17189] bond26: (slave veth33): Enslaving as a backup interface with a down link
[  263.597140][T17204] mac80211_hwsim hwsim208 wlan1: entered allmulticast mode
[  263.610828][T17204] bond20: (slave veth37): Releasing backup interface
[  263.647680][T17204] validate_nla: 4 callbacks suppressed
[  263.647695][T17204] netlink: 'syz.0.2408': attribute type 10 has an invalid length.
[  263.658673][T17204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.662914][T17204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.915178][T17224] __nla_validate_parse: 13 callbacks suppressed
[  263.915196][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'.
[  264.083474][T17233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2416'.
[  264.627612][T17254] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.630606][T17254] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.684213][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'.
[  264.690105][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'.
[  264.863258][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'.
[  264.868777][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'.
[  264.927285][T17282] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  264.990765][T17285] netlink: 'syz.0.2428': attribute type 21 has an invalid length.
[  264.994032][T17285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2428'.
[  265.007675][T17285] veth0: entered promiscuous mode
[  265.010071][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  265.033569][T17285] veth0 (unregistering): left promiscuous mode
[  265.222028][T17292] netlink: 'syz.0.2430': attribute type 10 has an invalid length.
[  265.266798][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  265.270523][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  265.477982][T17310] can: request_module (can-proto-0) failed.
[  265.548798][T17318] netlink: 'syz.1.2435': attribute type 1 has an invalid length.
[  265.596824][T17318] veth35: entered promiscuous mode
[  265.603351][T17318] bond27: (slave veth35): Enslaving as a backup interface with a down link
[  265.873534][T17353] netlink: 'syz.2.2443': attribute type 1 has an invalid length.
[  265.883511][T17353] netlink: 'syz.2.2443': attribute type 2 has an invalid length.
[  266.892369][T17417] batadv_slave_1: entered promiscuous mode
[  267.053923][T17404] batadv_slave_1: left promiscuous mode
[  267.387721][T17459] mac80211_hwsim hwsim208 wlan1: left allmulticast mode
[  267.464440][T17459] netlink: 'syz.0.2463': attribute type 10 has an invalid length.
[  267.796536][T17509] netlink: 'syz.1.2472': attribute type 9 has an invalid length.
[  267.937745][T17514] netlink: 'syz.0.2473': attribute type 10 has an invalid length.
[  268.687724][T17554] netlink: 'syz.2.2485': attribute type 10 has an invalid length.
[  268.726041][T17554] netlink: 'syz.2.2485': attribute type 1 has an invalid length.
[  268.759938][T17556] netlink: 'syz.0.2486': attribute type 10 has an invalid length.
[  268.781829][T17558] mac80211_hwsim hwsim225 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  268.957252][T17576] __nla_validate_parse: 8 callbacks suppressed
[  268.957263][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'.
[  269.065269][T17576] netlink: 'syz.2.2491': attribute type 10 has an invalid length.
[  269.176834][T17599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2498'.
[  269.189166][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'.
[  269.444245][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'.
[  269.624129][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'.
[  269.977935][T17634] netlink: 'syz.0.2506': attribute type 2 has an invalid length.
[  269.981734][T17634] netlink: 'syz.0.2506': attribute type 2 has an invalid length.
[  270.203424][T17649] xt_limit: Overflow, try lower: 271964/0
[  270.259294][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  270.262874][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  270.572074][T17692] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  270.588018][T17693] netlink: 'syz.0.2519': attribute type 10 has an invalid length.
[  270.593131][T17693] team0: Port device 0! added
[  270.605713][T17693] netlink: 'syz.0.2519': attribute type 10 has an invalid length.
[  270.611297][T17693] team0: Port device 0! removed
[  270.673089][T17702] ip_vti0: entered allmulticast mode
[  270.680576][T17702] dvmrp8: entered allmulticast mode
[  270.838443][T17701] ip_vti0: left allmulticast mode
[  270.841965][T17701] dvmrp8: left allmulticast mode
[  271.286754][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'.
[  271.476453][T17740] mac80211_hwsim hwsim229 wlan0: entered promiscuous mode
[  271.479321][T17740] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  271.584397][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  271.634375][T17750] netlink: 'syz.2.2532': attribute type 1 has an invalid length.
[  271.718218][T17750] 8021q: adding VLAN 0 to HW filter on device bond13
[  271.746139][T17750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2532'.
[  272.088037][T17776] netlink: 'syz.2.2539': attribute type 1 has an invalid length.
[  272.855199][T17850] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002
[  272.912218][T17850] pim6reg: entered allmulticast mode
[  273.151805][T17868] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  273.710001][T17897] veth29: entered promiscuous mode
[  273.716353][T17897] bond14: (slave veth29): Enslaving as a backup interface with a down link
[  273.724861][T17897] bond14: (slave veth29): Releasing backup interface
[  273.981722][T17906] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.986342][T17906] mac80211_hwsim hwsim225 syzkaller0: entered promiscuous mode
[  273.989353][T17906] mac80211_hwsim hwsim225 syzkaller0: entered allmulticast mode
[  274.003340][T17906] tipc: Resetting bearer <eth:syzkaller0>
[  274.009918][T17906] __nla_validate_parse: 6 callbacks suppressed
[  274.009934][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'.
[  274.154099][T17911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2569'.
[  274.314069][T17913] validate_nla: 3 callbacks suppressed
[  274.314087][T17913] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[  274.352300][T17913] veth1: entered promiscuous mode
[  274.355886][T17913] bond21: (slave veth1): Enslaving as a backup interface with a down link
[  274.360423][T17913] bond21: (slave veth1): Releasing backup interface
[  274.439452][T17931] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:2
[  274.744341][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  274.856381][T17956] netlink: 'syz.1.2580': attribute type 10 has an invalid length.
[  274.973687][T17981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2585'.
[  275.072340][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'.
[  275.356874][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'.
[  276.673849][T18012] veth33: left promiscuous mode
[  276.686638][T18012] veth35: left promiscuous mode
[  276.729116][T18016] mac80211_hwsim hwsim225 wlan1: left allmulticast mode
[  276.850891][T18016] netlink: 'syz.2.2593': attribute type 10 has an invalid length.
[  277.033242][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2600'.
[  277.117814][T18051] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2600'.
[  277.210408][T18055] netlink: 'syz.2.2602': attribute type 9 has an invalid length.
[  277.212877][T18055] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2602'.
[  277.293309][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'.
[  277.378047][T18066] netlink: 'syz.0.2606': attribute type 1 has an invalid length.
[  277.547237][T18072] veth39: entered promiscuous mode
[  277.553045][T18072] bond22: (slave veth39): Enslaving as a backup interface with a down link
[  277.562594][T18066] bond22: (slave veth39): Releasing backup interface
[  277.940058][T18105] netlink: 'syz.2.2614': attribute type 10 has an invalid length.
[  278.064467][T18118] netlink: 'syz.0.2617': attribute type 1 has an invalid length.
[  278.096414][T18116] tipc: Resetting bearer <eth:gre0>
[  278.178932][T18118] veth41: entered promiscuous mode
[  278.186482][T18118] bond23: (slave veth41): Enslaving as a backup interface with a down link
[  278.190059][T18120] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  278.200419][T18121] bond23: (slave veth41): Releasing backup interface
[  278.310687][T18127] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  278.361101][T18132] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  278.424479][T18135] macsec2: entered promiscuous mode
[  278.427526][T18135] mac80211_hwsim hwsim208 wlan1: entered promiscuous mode
[  278.432467][T18135] mac80211_hwsim hwsim208 wlan1: left promiscuous mode
[  278.698030][T18141] bond24: (slave veth29): Releasing backup interface
[  278.704284][T18141] bond25: (slave veth31): Releasing backup interface
[  278.715449][T18141] bond26: (slave veth33): Releasing backup interface
[  278.722103][T18141] bond27: (slave veth35): Releasing backup interface
[  278.732119][T18141] netlink: 'syz.1.2622': attribute type 10 has an invalid length.
[  278.793490][T18144] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  278.801814][T18144] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.014597][T18161] __nla_validate_parse: 73 callbacks suppressed
[  279.014608][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.019674][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.023085][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.026913][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.075603][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.136017][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.196280][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.256508][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.307952][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.335891][T18167] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  279.340304][T18167] netlink: 'syz.2.2627': attribute type 2 has an invalid length.
[  279.343469][T18167] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  279.346757][T18167] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  279.349976][T18167] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  279.353245][T18167] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  279.358093][T18164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2626'.
[  279.688982][T18178] bond0 (unregistering): Released all slaves
[  279.829971][T18185] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  279.872405][T18185] veth37: entered promiscuous mode
[  279.879528][T18185] bond0: (slave veth37): Enslaving as a backup interface with a down link
[  279.887573][T18185] bond0: (slave veth37): Releasing backup interface
[  279.994465][T18194] netlink: 'syz.1.2636': attribute type 1 has an invalid length.
[  280.042309][T18200] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  280.070888][T18200] 8021q: adding VLAN 0 to HW filter on device bond28
[  280.457850][T18230] netlink: 'syz.0.2645': attribute type 13 has an invalid length.
[  280.563850][T18230] 8021q: adding VLAN 0 to HW filter on device team0
[  280.572575][T18230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.673345][T18238] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  280.683536][T18238] CPU: 0 UID: 0 PID: 18238 Comm: syz.1.2648 Not tainted syzkaller #0 PREEMPT(full) 
[  280.683560][T18238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.683571][T18238] Call Trace:
[  280.683577][T18238]  <TASK>
[  280.683585][T18238]  dump_stack_lvl+0x189/0x250
[  280.683613][T18238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.683631][T18238]  ? __pfx__printk+0x10/0x10
[  280.683655][T18238]  ? kernfs_path_from_node+0x2f/0x290
[  280.683672][T18238]  ? kernfs_path_from_node+0x250/0x290
[  280.683686][T18238]  ? kernfs_path_from_node+0x2f/0x290
[  280.683705][T18238]  sysfs_warn_dup+0x8e/0xa0
[  280.683720][T18238]  sysfs_do_create_link_sd+0xc0/0x110
[  280.683738][T18238]  device_add_class_symlinks+0x1cf/0x240
[  280.683757][T18238]  device_add+0x475/0xb50
[  280.683775][T18238]  wiphy_register+0x1ba6/0x28d0
[  280.683822][T18238]  ? __pfx_wiphy_register+0x10/0x10
[  280.683843][T18238]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  280.683867][T18238]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  280.683887][T18238]  ieee80211_register_hw+0x3425/0x4080
[  280.683918][T18238]  ? ieee80211_register_hw+0x1471/0x4080
[  280.683941][T18238]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.683960][T18238]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.683986][T18238]  ? __hrtimer_setup+0x187/0x210
[  280.683999][T18238]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.684053][T18238]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  280.684100][T18238]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.684117][T18238]  ? trace_kmalloc+0x1f/0xd0
[  280.684134][T18238]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  280.684154][T18238]  ? kstrndup+0xbf/0x160
[  280.684177][T18238]  hwsim_new_radio_nl+0xea4/0x1b10
[  280.684196][T18238]  ? __pfx___nla_validate_parse+0x10/0x10
[  280.684228][T18238]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.684259][T18238]  ? __nla_parse+0x40/0x60
[  280.684283][T18238]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.684310][T18238]  genl_family_rcv_msg_doit+0x215/0x300
[  280.684334][T18238]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.684363][T18238]  ? bpf_lsm_capable+0x9/0x20
[  280.684379][T18238]  ? security_capable+0x7e/0x2e0
[  280.684404][T18238]  genl_rcv_msg+0x60e/0x790
[  280.684427][T18238]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.684444][T18238]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.684475][T18238]  netlink_rcv_skb+0x208/0x470
[  280.684496][T18238]  ? __lock_acquire+0xab9/0xd20
[  280.684538][T18238]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.684557][T18238]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.684596][T18238]  ? down_read+0x1ad/0x2e0
[  280.684614][T18238]  genl_rcv+0x28/0x40
[  280.684628][T18238]  netlink_unicast+0x82f/0x9e0
[  280.684655][T18238]  ? __pfx_netlink_unicast+0x10/0x10
[  280.684677][T18238]  ? netlink_sendmsg+0x642/0xb30
[  280.684697][T18238]  ? skb_put+0x11b/0x210
[  280.684715][T18238]  netlink_sendmsg+0x805/0xb30
[  280.684746][T18238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.684768][T18238]  ? aa_sock_msg_perm+0xf1/0x1d0
[  280.684783][T18238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.684805][T18238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.684827][T18238]  __sock_sendmsg+0x21c/0x270
[  280.684851][T18238]  ____sys_sendmsg+0x505/0x830
[  280.684872][T18238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.684896][T18238]  ? import_iovec+0x74/0xa0
[  280.684916][T18238]  ___sys_sendmsg+0x21f/0x2a0
[  280.684933][T18238]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.684979][T18238]  ? __fget_files+0x2a/0x420
[  280.684998][T18238]  ? __fget_files+0x3a0/0x420
[  280.685053][T18238]  __x64_sys_sendmsg+0x19b/0x260
[  280.685074][T18238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.685100][T18238]  ? rcu_is_watching+0x15/0xb0
[  280.685121][T18238]  ? do_syscall_64+0xbe/0x3b0
[  280.685146][T18238]  do_syscall_64+0xfa/0x3b0
[  280.685165][T18238]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.685184][T18238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.685198][T18238]  ? exc_page_fault+0x9f/0xf0
[  280.685219][T18238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.685232][T18238] RIP: 0033:0x7f409ab8ebe9
[  280.685247][T18238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.685259][T18238] RSP: 002b:00007f409ba68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.685276][T18238] RAX: ffffffffffffffda RBX: 00007f409adb5fa0 RCX: 00007f409ab8ebe9
[  280.685287][T18238] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.685297][T18238] RBP: 00007f409ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  280.685306][T18238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.685315][T18238] R13: 00007f409adb6038 R14: 00007f409adb5fa0 R15: 00007fffd7a88a78
[  280.685340][T18238]  </TASK>
[  280.992142][T18249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.033389][T18247] veth39: entered promiscuous mode
[  281.037341][T18247] bond29: (slave veth39): Enslaving as a backup interface with a down link
[  281.059987][T18248] veth41: entered promiscuous mode
[  281.063790][T18248] bond29: (slave veth41): Enslaving as a backup interface with a down link
[  281.476990][T18271] bond29: (slave veth39): Releasing backup interface
[  281.479947][T18271] bond29: (slave veth39): the permanent HWaddr of slave - 02:47:e6:8e:d5:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  281.494391][T18271] bond29: (slave veth41): Releasing backup interface
[  281.569669][T18276] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  281.574228][T18276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  282.180048][T18317] macvtap1: entered promiscuous mode
[  282.182270][T18317] veth0_to_batadv: entered promiscuous mode
[  282.185142][T18317] macvtap1: entered allmulticast mode
[  282.187289][T18317] veth0_to_batadv: entered allmulticast mode
[  282.362610][T18342] mac80211_hwsim hwsim208 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  282.470205][T18355] mac80211_hwsim hwsim208 wlan1: entered allmulticast mode
[  282.471726][T18359] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  282.887513][T18392] mac80211_hwsim hwsim208 wlan1: left allmulticast mode
[  283.142047][T18410] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  283.149244][T18410] CPU: 0 UID: 0 PID: 18410 Comm: syz.0.2685 Not tainted syzkaller #0 PREEMPT(full) 
[  283.149267][T18410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.149277][T18410] Call Trace:
[  283.149283][T18410]  <TASK>
[  283.149291][T18410]  dump_stack_lvl+0x189/0x250
[  283.149317][T18410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.149335][T18410]  ? __pfx__printk+0x10/0x10
[  283.149360][T18410]  ? kernfs_path_from_node+0x2f/0x290
[  283.149376][T18410]  ? kernfs_path_from_node+0x250/0x290
[  283.149390][T18410]  ? kernfs_path_from_node+0x2f/0x290
[  283.149408][T18410]  sysfs_warn_dup+0x8e/0xa0
[  283.149442][T18410]  sysfs_do_create_link_sd+0xc0/0x110
[  283.149461][T18410]  device_add_class_symlinks+0x1cf/0x240
[  283.149480][T18410]  device_add+0x475/0xb50
[  283.149498][T18410]  wiphy_register+0x1ba6/0x28d0
[  283.149532][T18410]  ? __pfx_wiphy_register+0x10/0x10
[  283.149553][T18410]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  283.149575][T18410]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  283.149594][T18410]  ieee80211_register_hw+0x3425/0x4080
[  283.149629][T18410]  ? ieee80211_register_hw+0x1471/0x4080
[  283.149652][T18410]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  283.149670][T18410]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.149696][T18410]  ? __hrtimer_setup+0x187/0x210
[  283.149711][T18410]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  283.149734][T18410]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  283.149780][T18410]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  283.149798][T18410]  ? trace_kmalloc+0x1f/0xd0
[  283.149815][T18410]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.149834][T18410]  ? kstrndup+0xbf/0x160
[  283.149884][T18410]  hwsim_new_radio_nl+0xea4/0x1b10
[  283.149907][T18410]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.149941][T18410]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.149970][T18410]  ? __nla_parse+0x40/0x60
[  283.149994][T18410]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.150020][T18410]  genl_family_rcv_msg_doit+0x215/0x300
[  283.150044][T18410]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.150072][T18410]  ? bpf_lsm_capable+0x9/0x20
[  283.150091][T18410]  ? security_capable+0x7e/0x2e0
[  283.150117][T18410]  genl_rcv_msg+0x60e/0x790
[  283.150139][T18410]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.150154][T18410]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.150185][T18410]  netlink_rcv_skb+0x208/0x470
[  283.150204][T18410]  ? __lock_acquire+0xab9/0xd20
[  283.150224][T18410]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.150242][T18410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.150280][T18410]  ? down_read+0x1ad/0x2e0
[  283.150296][T18410]  genl_rcv+0x28/0x40
[  283.150309][T18410]  netlink_unicast+0x82f/0x9e0
[  283.150335][T18410]  ? __pfx_netlink_unicast+0x10/0x10
[  283.150356][T18410]  ? netlink_sendmsg+0x642/0xb30
[  283.150375][T18410]  ? skb_put+0x11b/0x210
[  283.150392][T18410]  netlink_sendmsg+0x805/0xb30
[  283.150421][T18410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.150445][T18410]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.150459][T18410]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.150474][T18410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.150497][T18410]  __sock_sendmsg+0x21c/0x270
[  283.150519][T18410]  ____sys_sendmsg+0x505/0x830
[  283.150540][T18410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.150564][T18410]  ? import_iovec+0x74/0xa0
[  283.150584][T18410]  ___sys_sendmsg+0x21f/0x2a0
[  283.150602][T18410]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.150660][T18410]  ? __fget_files+0x2a/0x420
[  283.150681][T18410]  ? __fget_files+0x3a0/0x420
[  283.150712][T18410]  __x64_sys_sendmsg+0x19b/0x260
[  283.150732][T18410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.150757][T18410]  ? rcu_is_watching+0x15/0xb0
[  283.150773][T18410]  ? do_syscall_64+0xbe/0x3b0
[  283.150798][T18410]  do_syscall_64+0xfa/0x3b0
[  283.150816][T18410]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.150834][T18410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.150875][T18410]  ? exc_page_fault+0x9f/0xf0
[  283.150896][T18410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.150911][T18410] RIP: 0033:0x7f2a3298ebe9
[  283.150926][T18410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.150939][T18410] RSP: 002b:00007f2a337d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.150956][T18410] RAX: ffffffffffffffda RBX: 00007f2a32bb5fa0 RCX: 00007f2a3298ebe9
[  283.150967][T18410] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  283.150977][T18410] RBP: 00007f2a32a11e19 R08: 0000000000000000 R09: 0000000000000000
[  283.150986][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.150995][T18410] R13: 00007f2a32bb6038 R14: 00007f2a32bb5fa0 R15: 00007ffc57514e78
[  283.151020][T18410]  </TASK>
[  283.386296][T18422] veth37: left promiscuous mode
[  283.390112][T18422] veth39: left promiscuous mode
[  283.392293][T18422] veth41: left promiscuous mode
[  283.397563][T18419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.478094][T18438] delete_channel: no stack
[  284.119136][T18476] batadv_slave_1: entered promiscuous mode
[  284.141745][T18475] batadv_slave_1: left promiscuous mode
[  284.279121][T18490] __nla_validate_parse: 31 callbacks suppressed
[  284.279138][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'.
[  284.281044][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'.
[  284.297354][T18490] 8021q: adding VLAN 0 to HW filter on device bond30
[  284.623996][T18518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.662535][T18526] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  284.883801][T18532] validate_nla: 9 callbacks suppressed
[  284.883817][T18532] netlink: 'syz.2.2711': attribute type 10 has an invalid length.
[  284.999277][T18537] netlink: 'syz.2.2712': attribute type 10 has an invalid length.
[  285.423293][T18547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2714'.
[  285.735319][T18567] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2718'.
[  285.788952][T18567] netlink: 'syz.0.2718': attribute type 23 has an invalid length.
[  286.066910][T18575] netlink: 'syz.0.2720': attribute type 10 has an invalid length.
[  286.109849][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'.
[  286.299987][T18598] netlink: 'syz.1.2725': attribute type 10 has an invalid length.
[  286.617039][T18626] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2729'.
[  286.908819][T18642] dvmrp8: entered allmulticast mode
[  287.348034][T18642] dvmrp8: left allmulticast mode
[  287.531573][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'.
[  288.487088][T18697] netlink: 'syz.1.2746': attribute type 10 has an invalid length.
[  289.413140][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'.
[  289.442093][T18719] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  289.446554][T18719] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  289.451300][T18719] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.780613][T18732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.937922][T18756] netlink: 'syz.2.2758': attribute type 1 has an invalid length.
[  289.995912][T18756] veth31: entered promiscuous mode
[  290.006914][T18756] bond15: (slave veth31): Enslaving as a backup interface with a down link
[  290.487892][T18789] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  290.552905][T18789] veth43: entered promiscuous mode
[  290.561167][T18789] bond31: (slave veth43): Enslaving as a backup interface with a down link
[  290.912511][T18833] team0: entered allmulticast mode
[  290.962460][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'.
[  291.070872][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  291.587862][T18886] syz.2.2783: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  291.594110][T18886] CPU: 0 UID: 0 PID: 18886 Comm: syz.2.2783 Not tainted syzkaller #0 PREEMPT(full) 
[  291.594125][T18886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.594132][T18886] Call Trace:
[  291.594138][T18886]  <TASK>
[  291.594143][T18886]  dump_stack_lvl+0x189/0x250
[  291.594159][T18886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.594170][T18886]  ? __pfx__printk+0x10/0x10
[  291.594182][T18886]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  291.594192][T18886]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  291.594202][T18886]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  291.594212][T18886]  warn_alloc+0x214/0x310
[  291.594225][T18886]  ? stack_depot_save_flags+0x40/0x860
[  291.594264][T18886]  ? __pfx_warn_alloc+0x10/0x10
[  291.594277][T18886]  ? kasan_save_track+0x4f/0x80
[  291.594289][T18886]  ? xskq_create+0x56/0x170
[  291.594302][T18886]  ? xsk_init_queue+0xb0/0x110
[  291.594311][T18886]  ? xsk_setsockopt+0x4dc/0x8d0
[  291.594320][T18886]  ? do_sock_setsockopt+0x17c/0x1b0
[  291.594327][T18886]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  291.594333][T18886]  ? do_syscall_64+0xfa/0x3b0
[  291.594344][T18886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.594356][T18886]  __vmalloc_node_range_noprof+0x125/0x12f0
[  291.594382][T18886]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  291.594396][T18886]  ? __kasan_kmalloc+0x93/0xb0
[  291.594407][T18886]  vmalloc_user_noprof+0xad/0xf0
[  291.594419][T18886]  ? xskq_create+0xbf/0x170
[  291.594429][T18886]  xskq_create+0xbf/0x170
[  291.594442][T18886]  xsk_init_queue+0xb0/0x110
[  291.594453][T18886]  xsk_setsockopt+0x4dc/0x8d0
[  291.594464][T18886]  ? __pfx_xsk_setsockopt+0x10/0x10
[  291.594473][T18886]  ? __pfx_aa_sk_perm+0x10/0x10
[  291.594487][T18886]  ? aa_sock_opt_perm+0xff/0x1b0
[  291.594495][T18886]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  291.594520][T18886]  ? __pfx_xsk_setsockopt+0x10/0x10
[  291.594531][T18886]  do_sock_setsockopt+0x17c/0x1b0
[  291.594541][T18886]  __x64_sys_setsockopt+0x13f/0x1b0
[  291.594553][T18886]  do_syscall_64+0xfa/0x3b0
[  291.594565][T18886]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.594576][T18886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.594583][T18886]  ? exc_page_fault+0x9f/0xf0
[  291.594595][T18886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.594603][T18886] RIP: 0033:0x7f901258ebe9
[  291.594611][T18886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.594618][T18886] RSP: 002b:00007f9013319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  291.594627][T18886] RAX: ffffffffffffffda RBX: 00007f90127b5fa0 RCX: 00007f901258ebe9
[  291.594633][T18886] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  291.594638][T18886] RBP: 00007f9012611e19 R08: 0000000000000004 R09: 0000000000000000
[  291.594642][T18886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.594647][T18886] R13: 00007f90127b6038 R14: 00007f90127b5fa0 R15: 00007ffd2bd2ee18
[  291.594661][T18886]  </TASK>
[  291.700897][T18886] Mem-Info:
[  291.702310][T18886] active_anon:4607 inactive_anon:0 isolated_anon:0
[  291.702310][T18886]  active_file:1495 inactive_file:38300 isolated_file:0
[  291.702310][T18886]  unevictable:1779 dirty:75 writeback:0
[  291.702310][T18886]  slab_reclaimable:15321 slab_unreclaimable:127239
[  291.702310][T18886]  mapped:18195 shmem:2482 pagetables:989
[  291.702310][T18886]  sec_pagetables:0 bounce:0
[  291.702310][T18886]  kernel_misc_reclaimable:0
[  291.702310][T18886]  free:217490 free_pcp:17592 free_cma:0
[  291.720743][T18886] Node 0 active_anon:10024kB inactive_anon:0kB active_file:4924kB inactive_file:44748kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31628kB dirty:232kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9972kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  291.733061][T18886] Node 1 active_anon:8456kB inactive_anon:0kB active_file:1056kB inactive_file:108452kB unevictable:3580kB isolated(anon):0kB isolated(file):0kB mapped:41132kB dirty:68kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4476kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  291.745249][T18886] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  291.756388][T18886] lowmem_reserve[]: 0 811 811 811 811
[  291.758632][T18886] Node 0 DMA32 free:182184kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9948kB inactive_anon:0kB active_file:4924kB inactive_file:44748kB unevictable:3536kB writepending:232kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:30992kB local_pcp:15620kB free_cma:0kB
[  291.771471][T18886] lowmem_reserve[]: 0 0 0 0 0
[  291.773408][T18886] Node 1 DMA32 free:457748kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:860kB local_pcp:0kB free_cma:0kB
[  291.786274][T18886] lowmem_reserve[]: 0 0 854 854 854
[  291.788316][T18886] Node 1 Normal free:214356kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8416kB inactive_anon:0kB active_file:1056kB inactive_file:108452kB unevictable:3548kB writepending:68kB present:1048576kB managed:874952kB mlocked:12kB bounce:0kB free_pcp:38936kB local_pcp:17696kB free_cma:0kB
[  291.799820][T18886] lowmem_reserve[]: 0 0 0 0 0
[  291.801475][T18886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  291.806667][T18886] Node 0 DMA32: 372*4kB (U) 639*8kB (UME) 532*16kB (UME) 459*32kB (UM) 133*64kB (UM) 36*128kB (UME) 12*256kB (ME) 12*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 29*4096kB (UM) = 182184kB
[  291.824110][T18886] Node 1 DMA32: 1*4kB (U) 0*8kB 1*16kB (M) 0*32kB 0*64kB 2*128kB (UM) 1*256kB (U) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 457748kB
[  291.833380][T18886] Node 1 Normal: 1823*4kB (UME) 563*8kB (UME) 84*16kB (UME) 220*32kB (UME) 84*64kB (UME) 15*128kB (UME) 18*256kB (UM) 8*512kB (UME) 6*1024kB (UM) 8*2048kB (UME) 38*4096kB (UM) = 214356kB
[  291.843161][T18886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  291.847380][T18886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  291.850966][T18886] 42277 total pagecache pages
[  291.852823][T18886] 0 pages in swap cache
[  291.854165][T18886] Free swap  = 124996kB
[  291.855814][T18886] Total swap = 124996kB
[  291.857511][T18886] 786301 pages RAM
[  291.858979][T18886] 0 pages HighMem/MovableOnly
[  291.860838][T18886] 241337 pages reserved
[  291.862445][T18886] 0 pages cma reserved
[  291.888163][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'.
[  291.919800][T18910] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2790'.
[  292.823232][T18942] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2797'.
[  292.949681][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  292.953796][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  292.959482][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  292.964086][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  292.975924][T18947] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  293.658446][T18971] netlink: 'syz.1.2804': attribute type 10 has an invalid length.
[  293.733307][T18975] netlink: 'syz.2.2806': attribute type 1 has an invalid length.
[  293.770968][T18975] veth33: entered promiscuous mode
[  293.777420][T18975] bond16: (slave veth33): Enslaving as a backup interface with a down link
[  293.820227][T18980] netlink: 'syz.2.2808': attribute type 10 has an invalid length.
[  293.830354][T18980] netlink: 'syz.2.2808': attribute type 10 has an invalid length.
[  294.490947][T19007] netlink: 'syz.0.2814': attribute type 12 has an invalid length.
[  294.493559][T19007] __nla_validate_parse: 3 callbacks suppressed
[  294.493569][T19007] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2814'.
[  294.662316][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'.
[  294.797988][T19013] netlink: 'syz.0.2817': attribute type 10 has an invalid length.
[  294.939088][T19016] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2818'.
[  295.107650][T19035] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  295.303671][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'.
[  295.473775][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'.
[  295.869656][T19093] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  295.883668][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'.
[  295.888655][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'.
[  295.920048][T19105] netlink: 'syz.1.2834': attribute type 10 has an invalid length.
[  296.495134][T19133] netlink: 'syz.2.2840': attribute type 1 has an invalid length.
[  296.529730][T19133] veth35: entered promiscuous mode
[  296.541014][T19133] bond17: (slave veth35): Enslaving as a backup interface with a down link
[  296.760596][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'.
[  296.777528][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'.
[  296.783542][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'.
[  297.573029][T19213] netlink: 'syz.2.2855': attribute type 1 has an invalid length.
[  297.604318][T19213] veth37: entered promiscuous mode
[  297.618337][T19213] bond18: (slave veth37): Enslaving as a backup interface with a down link
[  298.904846][T19310] tap0: tun_chr_ioctl cmd 2148553947
[  299.101129][ T8046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  299.104484][ T8046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  299.108955][ T8046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  299.112322][ T8046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  300.343038][T19388] __nla_validate_parse: 3 callbacks suppressed
[  300.343054][T19388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2891'.
[  300.541530][T19403] netlink: 'syz.0.2894': attribute type 6 has an invalid length.
[  300.697070][T19413] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2895'.
[  300.702882][T19410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'.
[  301.070467][T19441] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  301.081889][T19441] CPU: 0 UID: 0 PID: 19441 Comm: syz.2.2901 Not tainted syzkaller #0 PREEMPT(full) 
[  301.081912][T19441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.081922][T19441] Call Trace:
[  301.081929][T19441]  <TASK>
[  301.081935][T19441]  dump_stack_lvl+0x189/0x250
[  301.081960][T19441]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.081978][T19441]  ? __pfx__printk+0x10/0x10
[  301.082004][T19441]  ? kernfs_path_from_node+0x2f/0x290
[  301.082019][T19441]  ? kernfs_path_from_node+0x250/0x290
[  301.082033][T19441]  ? kernfs_path_from_node+0x2f/0x290
[  301.082052][T19441]  sysfs_warn_dup+0x8e/0xa0
[  301.082067][T19441]  sysfs_do_create_link_sd+0xc0/0x110
[  301.082085][T19441]  device_add_class_symlinks+0x1cf/0x240
[  301.082103][T19441]  device_add+0x475/0xb50
[  301.082122][T19441]  wiphy_register+0x1ba6/0x28d0
[  301.082156][T19441]  ? __pfx_wiphy_register+0x10/0x10
[  301.082176][T19441]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  301.082198][T19441]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  301.082217][T19441]  ieee80211_register_hw+0x3425/0x4080
[  301.082246][T19441]  ? ieee80211_register_hw+0x1471/0x4080
[  301.082269][T19441]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  301.082287][T19441]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  301.082314][T19441]  ? __hrtimer_setup+0x187/0x210
[  301.082326][T19441]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  301.082349][T19441]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  301.082400][T19441]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  301.082418][T19441]  ? trace_kmalloc+0x1f/0xd0
[  301.082435][T19441]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  301.082455][T19441]  ? kstrndup+0xbf/0x160
[  301.082478][T19441]  hwsim_new_radio_nl+0xea4/0x1b10
[  301.082498][T19441]  ? __pfx___nla_validate_parse+0x10/0x10
[  301.082531][T19441]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  301.082586][T19441]  ? __nla_parse+0x40/0x60
[  301.082612][T19441]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  301.082638][T19441]  genl_family_rcv_msg_doit+0x215/0x300
[  301.082661][T19441]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  301.082689][T19441]  ? bpf_lsm_capable+0x9/0x20
[  301.082708][T19441]  ? security_capable+0x7e/0x2e0
[  301.082734][T19441]  genl_rcv_msg+0x60e/0x790
[  301.082756][T19441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.082771][T19441]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  301.082802][T19441]  netlink_rcv_skb+0x208/0x470
[  301.082821][T19441]  ? __lock_acquire+0xab9/0xd20
[  301.082841][T19441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.082859][T19441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  301.082895][T19441]  ? down_read+0x1ad/0x2e0
[  301.082911][T19441]  genl_rcv+0x28/0x40
[  301.082925][T19441]  netlink_unicast+0x82f/0x9e0
[  301.082952][T19441]  ? __pfx_netlink_unicast+0x10/0x10
[  301.082972][T19441]  ? netlink_sendmsg+0x642/0xb30
[  301.082991][T19441]  ? skb_put+0x11b/0x210
[  301.083008][T19441]  netlink_sendmsg+0x805/0xb30
[  301.083038][T19441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.083061][T19441]  ? aa_sock_msg_perm+0xf1/0x1d0
[  301.083076][T19441]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  301.083091][T19441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.083113][T19441]  __sock_sendmsg+0x21c/0x270
[  301.083135][T19441]  ____sys_sendmsg+0x505/0x830
[  301.083155][T19441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.083178][T19441]  ? import_iovec+0x74/0xa0
[  301.083197][T19441]  ___sys_sendmsg+0x21f/0x2a0
[  301.083214][T19441]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.083260][T19441]  ? __fget_files+0x2a/0x420
[  301.083281][T19441]  ? __fget_files+0x3a0/0x420
[  301.083310][T19441]  __x64_sys_sendmsg+0x19b/0x260
[  301.083328][T19441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.083360][T19441]  ? do_syscall_64+0xbe/0x3b0
[  301.083391][T19441]  do_syscall_64+0xfa/0x3b0
[  301.083411][T19441]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.083431][T19441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.083445][T19441]  ? exc_page_fault+0x9f/0xf0
[  301.083466][T19441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.083480][T19441] RIP: 0033:0x7f901258ebe9
[  301.083494][T19441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.083506][T19441] RSP: 002b:00007f9013319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.083522][T19441] RAX: ffffffffffffffda RBX: 00007f90127b5fa0 RCX: 00007f901258ebe9
[  301.083534][T19441] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  301.083544][T19441] RBP: 00007f9012611e19 R08: 0000000000000000 R09: 0000000000000000
[  301.083553][T19441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.083589][T19441] R13: 00007f90127b6038 R14: 00007f90127b5fa0 R15: 00007ffd2bd2ee18
[  301.083615][T19441]  </TASK>
[  301.733026][T19482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'.
[  301.880000][T19490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2908'.
[  302.279889][T19521] netlink: 'syz.0.2916': attribute type 1 has an invalid length.
[  302.283256][T19521] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2916'.
[  302.512530][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'.
[  302.520380][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2917'.
[  302.529570][T19528] netlink: 'syz.1.2917': attribute type 10 has an invalid length.
[  302.584238][T19537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.592202][T19537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.890639][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'.
[  303.007956][T19562] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2924'.
[  303.242337][T19573] netlink: 'syz.2.2927': attribute type 1 has an invalid length.
[  303.253372][T19573] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  303.297042][T19533] delete_channel: no stack
[  303.693017][T19618] netlink: 'syz.2.2937': attribute type 13 has an invalid length.
[  303.702421][T19618] netlink: 'syz.2.2937': attribute type 17 has an invalid length.
[  303.729902][T19618] 8021q: adding VLAN 0 to HW filter on device team0
[  303.740010][T19618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.816422][T19624] syzkaller1: entered allmulticast mode
[  303.818765][T19621] delete_channel: no stack
[  303.994979][T19636] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  303.998703][T19636] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  304.427985][T19673] netlink: 'syz.1.2948': attribute type 10 has an invalid length.
[  304.739169][T19699] netlink: 'syz.1.2953': attribute type 12 has an invalid length.
[  304.888892][T19723] netlink: 'syz.1.2957': attribute type 1 has an invalid length.
[  304.986465][T19723] veth45: entered promiscuous mode
[  304.994071][T19723] bond32: (slave veth45): Enslaving as a backup interface with a down link
[  305.412526][T19771] __nla_validate_parse: 4 callbacks suppressed
[  305.412544][T19771] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2963'.
[  305.519418][T19776] netlink: 'syz.2.2966': attribute type 1 has an invalid length.
[  305.535645][T19755] nbd1: detected capacity change from 0 to 63
[  305.538723][T19755] block nbd1: NBD_DISCONNECT
[  305.542000][T19755] block nbd1: Disconnected due to user request.
[  305.548373][T19755] block nbd1: shutting down sockets
[  305.562749][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'.
[  305.624465][T19776] veth41: entered promiscuous mode
[  305.628742][T19776] bond19: (slave veth41): Enslaving as a backup interface with a down link
[  305.686428][T19787] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.2969'.
[  305.941873][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'.
[  306.011622][T19804] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2973'.
[  306.108171][T19803] delete_channel: no stack
[  306.172379][T19814] netlink: 'syz.2.2974': attribute type 12 has an invalid length.
[  306.177378][T19814] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2974'.
[  306.365636][T19821] mac80211_hwsim hwsim259 wlan0: entered promiscuous mode
[  306.368287][T19821] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  306.408488][T19826] mac80211_hwsim hwsim261 wlan0: entered promiscuous mode
[  306.410884][T19826] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  306.546538][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2979'.
[  317.012687][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  336.500804][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'.
[  336.567300][T19850] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  336.602311][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'.
[  336.605871][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'.
[  336.613706][T19853] validate_nla: 1 callbacks suppressed
[  336.613721][T19853] netlink: 'syz.2.2982': attribute type 1 has an invalid length.
[  336.618995][T19853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2982'.
[  336.706909][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'.
[  336.710100][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'.
[  336.783854][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'.
[  336.787477][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'.
[  336.791493][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'.
[  336.796650][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'.
[  336.978059][T19875] netlink: 'syz.1.2991': attribute type 9 has an invalid length.
[  337.551981][T19915] hsr_slave_1 (unregistering): left promiscuous mode
[  337.647239][T19918] netlink: 'syz.2.2999': attribute type 10 has an invalid length.
[  337.701146][T19939] netlink: 'syz.2.3003': attribute type 12 has an invalid length.
[  338.151028][   T33] audit: type=1107 audit(1756395357.342:3): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='΄S?A`wVMSC,BA0`\NPߗE_m[]?N6vգGWPHؘ58Tk\xiMhd`_lakMG:T?OaseG~R? x-/w]/6".ٲS]1'
[  338.380813][T19995] lo speed is unknown, defaulting to 1000
[  338.382846][T19995] lo speed is unknown, defaulting to 1000
[  338.390613][T19995] lo speed is unknown, defaulting to 1000
[  338.411156][T19995] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  338.418576][T20001] netlink: 'syz.1.3015': attribute type 4 has an invalid length.
[  338.433047][T19995] lo speed is unknown, defaulting to 1000
[  338.436202][T19995] lo speed is unknown, defaulting to 1000
[  338.438792][T19995] lo speed is unknown, defaulting to 1000
[  338.694458][T20027] wg0: entered promiscuous mode
[  338.703222][T20027] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  338.936090][T20034] mac80211_hwsim hwsim263 wlan0: entered promiscuous mode
[  338.939522][T20034] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  338.947379][T20036] netlink: 'syz.0.3023': attribute type 12 has an invalid length.
[  339.030244][T20038] mac80211_hwsim hwsim268 wlan0: entered promiscuous mode
[  339.032680][T20038] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  339.040620][T20039] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  339.075981][T20042] tc_dump_action: action bad kind
[  339.309047][T20051] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  339.350914][T20051] 8021q: adding VLAN 0 to HW filter on device bond20
[  339.367257][T20051] veth43: entered promiscuous mode
[  339.371494][T20051] bond20: (slave veth43): Enslaving as a backup interface with a down link
[  339.699580][T20069] bond15: (slave veth31): Releasing backup interface
[  339.709599][T20069] bond16: (slave veth33): Releasing backup interface
[  339.723316][T20069] bond17: (slave veth35): Releasing backup interface
[  339.739183][T20069] bond18: (slave veth37): Releasing backup interface
[  339.745266][T20069] bond19: (slave veth41): Releasing backup interface
[  339.750213][T20069] bond20: (slave veth43): Releasing backup interface
[  339.852185][T20076] netlink: 'syz.2.3034': attribute type 10 has an invalid length.
[  339.866703][T20074] delete_channel: no stack
[  340.115971][T20094] netlink: 'syz.1.3038': attribute type 13 has an invalid length.
[  340.119406][T20094] netlink: 'syz.1.3038': attribute type 17 has an invalid length.
[  340.173033][T20094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  340.179506][   T24] lo speed is unknown, defaulting to 1000
[  340.185011][   T24] syz2: Port: 1 Link ACTIVE
[  340.198940][T20098] lo speed is unknown, defaulting to 1000
[  340.389073][T20109] batadv_slave_1: entered promiscuous mode
[  340.412389][T20106] batadv_slave_1: left promiscuous mode
[  341.127995][T20130] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  341.466897][T20140] lo speed is unknown, defaulting to 1000
[  341.478249][T20144] sctp: [Deprecated]: syz.0.3051 (pid 20144) Use of int in max_burst socket option.
[  341.478249][T20144] Use struct sctp_assoc_value instead
[  341.520319][T20144] __nla_validate_parse: 22 callbacks suppressed
[  341.520334][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'.
[  341.527521][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'.
[  341.742796][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  341.806608][T20160] validate_nla: 1 callbacks suppressed
[  341.806621][T20160] netlink: 'syz.2.3055': attribute type 13 has an invalid length.
[  341.810787][T20160] netlink: 'syz.2.3055': attribute type 17 has an invalid length.
[  341.817082][T20160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.839723][T20159] lo speed is unknown, defaulting to 1000
[  341.857789][T20160] lo speed is unknown, defaulting to 1000
[  342.102002][T20167] netlink: 'syz.1.3057': attribute type 13 has an invalid length.
[  342.105241][T20167] netlink: 'syz.1.3057': attribute type 17 has an invalid length.
[  342.114029][T20167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.166867][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'.
[  342.267229][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'.
[  342.333736][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'.
[  342.342666][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'.
[  342.588027][T20198] netlink: 'syz.1.3066': attribute type 1 has an invalid length.
[  342.623956][T20198] 8021q: adding VLAN 0 to HW filter on device bond33
[  342.642900][T20198] veth47: entered promiscuous mode
[  342.649235][T20198] bond33: (slave veth47): Enslaving as a backup interface with a down link
[  342.665211][T20198] bond31: (slave veth43): Releasing backup interface
[  342.672474][T20198] bond32: (slave veth45): Releasing backup interface
[  342.681264][T20198] bond33: (slave veth47): Releasing backup interface
[  342.844818][T20211] mac80211_hwsim hwsim273 wlan0: entered promiscuous mode
[  342.847758][T20211] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  342.878324][T20213] netlink: 'syz.0.3069': attribute type 1 has an invalid length.
[  342.917210][T20213] veth43: entered promiscuous mode
[  342.921134][T20213] bond24: (slave veth43): Enslaving as a backup interface with a down link
[  342.929908][T20213] bond24: (slave veth43): Releasing backup interface
[  343.114907][T20220] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  343.119884][T20220] CPU: 1 UID: 0 PID: 20220 Comm: syz.0.3072 Not tainted syzkaller #0 PREEMPT(full) 
[  343.119907][T20220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.119917][T20220] Call Trace:
[  343.119924][T20220]  <TASK>
[  343.119933][T20220]  dump_stack_lvl+0x189/0x250
[  343.119962][T20220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.119980][T20220]  ? __pfx__printk+0x10/0x10
[  343.120013][T20220]  ? kernfs_path_from_node+0x2f/0x290
[  343.120031][T20220]  ? kernfs_path_from_node+0x250/0x290
[  343.120047][T20220]  ? kernfs_path_from_node+0x2f/0x290
[  343.120068][T20220]  sysfs_warn_dup+0x8e/0xa0
[  343.120084][T20220]  sysfs_do_create_link_sd+0xc0/0x110
[  343.120103][T20220]  device_add_class_symlinks+0x1cf/0x240
[  343.120120][T20220]  device_add+0x475/0xb50
[  343.120139][T20220]  wiphy_register+0x1ba6/0x28d0
[  343.120175][T20220]  ? __pfx_wiphy_register+0x10/0x10
[  343.120194][T20220]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  343.120222][T20220]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  343.120240][T20220]  ieee80211_register_hw+0x3425/0x4080
[  343.120267][T20220]  ? ieee80211_register_hw+0x1471/0x4080
[  343.120287][T20220]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  343.120304][T20220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  343.120329][T20220]  ? __hrtimer_setup+0x187/0x210
[  343.120342][T20220]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  343.120366][T20220]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  343.120409][T20220]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  343.120425][T20220]  ? trace_kmalloc+0x1f/0xd0
[  343.120442][T20220]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  343.120462][T20220]  ? kstrndup+0xbf/0x160
[  343.120485][T20220]  hwsim_new_radio_nl+0xea4/0x1b10
[  343.120505][T20220]  ? __pfx___nla_validate_parse+0x10/0x10
[  343.120571][T20220]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  343.120608][T20220]  ? __nla_parse+0x40/0x60
[  343.120633][T20220]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  343.120659][T20220]  genl_family_rcv_msg_doit+0x215/0x300
[  343.120682][T20220]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  343.120710][T20220]  ? bpf_lsm_capable+0x9/0x20
[  343.120729][T20220]  ? security_capable+0x7e/0x2e0
[  343.120755][T20220]  genl_rcv_msg+0x60e/0x790
[  343.120777][T20220]  ? __pfx_genl_rcv_msg+0x10/0x10
[  343.120792][T20220]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  343.120822][T20220]  netlink_rcv_skb+0x208/0x470
[  343.120841][T20220]  ? __lock_acquire+0xab9/0xd20
[  343.120862][T20220]  ? __pfx_genl_rcv_msg+0x10/0x10
[  343.120879][T20220]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  343.120936][T20220]  ? down_read+0x1ad/0x2e0
[  343.120953][T20220]  genl_rcv+0x28/0x40
[  343.120968][T20220]  netlink_unicast+0x82f/0x9e0
[  343.120995][T20220]  ? __pfx_netlink_unicast+0x10/0x10
[  343.121016][T20220]  ? netlink_sendmsg+0x642/0xb30
[  343.121037][T20220]  ? skb_put+0x11b/0x210
[  343.121055][T20220]  netlink_sendmsg+0x805/0xb30
[  343.121090][T20220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.121114][T20220]  ? aa_sock_msg_perm+0xf1/0x1d0
[  343.121130][T20220]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  343.121144][T20220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.121164][T20220]  __sock_sendmsg+0x21c/0x270
[  343.121184][T20220]  ____sys_sendmsg+0x505/0x830
[  343.121203][T20220]  ? __pfx_____sys_sendmsg+0x10/0x10
[  343.121227][T20220]  ? import_iovec+0x74/0xa0
[  343.121246][T20220]  ___sys_sendmsg+0x21f/0x2a0
[  343.121263][T20220]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.121308][T20220]  ? __fget_files+0x2a/0x420
[  343.121327][T20220]  ? __fget_files+0x3a0/0x420
[  343.121354][T20220]  __x64_sys_sendmsg+0x19b/0x260
[  343.121371][T20220]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  343.121393][T20220]  ? rcu_is_watching+0x15/0xb0
[  343.121413][T20220]  ? do_syscall_64+0xbe/0x3b0
[  343.121437][T20220]  do_syscall_64+0xfa/0x3b0
[  343.121456][T20220]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.121476][T20220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.121490][T20220]  ? exc_page_fault+0x9f/0xf0
[  343.121511][T20220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.121524][T20220] RIP: 0033:0x7f2a3298ebe9
[  343.121571][T20220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.121590][T20220] RSP: 002b:00007f2a337d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.121607][T20220] RAX: ffffffffffffffda RBX: 00007f2a32bb5fa0 RCX: 00007f2a3298ebe9
[  343.121618][T20220] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  343.121627][T20220] RBP: 00007f2a32a11e19 R08: 0000000000000000 R09: 0000000000000000
[  343.121635][T20220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.121644][T20220] R13: 00007f2a32bb6038 R14: 00007f2a32bb5fa0 R15: 00007ffc57514e78
[  343.121667][T20220]  </TASK>
[  343.444002][T20234] lo speed is unknown, defaulting to 1000
[  343.457630][T20236] netlink: 'syz.1.3077': attribute type 1 has an invalid length.
[  343.487116][T20239] nr0: entered promiscuous mode
[  343.493653][T20239] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  343.521766][T20236] veth49: entered promiscuous mode
[  343.527639][T20236] bond34: (slave veth49): Enslaving as a backup interface with a down link
[  343.541641][T20236] bond34: (slave veth49): Releasing backup interface
[  343.653385][T20242] lo speed is unknown, defaulting to 1000
[  343.715734][T20247] netlink: 'syz.2.3080': attribute type 11 has an invalid length.
[  343.792447][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  343.898803][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'.
[  343.946966][T20262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3084'.
[  344.412507][T20282] netlink: 'syz.1.3088': attribute type 10 has an invalid length.
[  344.419333][T20282] xt_limit: Overflow, try lower: 604147548/4200216962
[  344.457964][T20284] netlink: 'syz.1.3089': attribute type 10 has an invalid length.
[  344.615917][T20291] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  344.658221][T20293] netlink: 'syz.0.3092': attribute type 1 has an invalid length.
[  344.750367][T20297] veth51: entered promiscuous mode
[  344.761611][T20297] bond35: (slave veth51): Enslaving as a backup interface with a down link
[  344.780018][T20295] bond35: (slave veth51): Releasing backup interface
[  344.828870][T20304] mac80211_hwsim hwsim269 wlan1: entered allmulticast mode
[  345.263640][T20333] veth45: entered promiscuous mode
[  345.271216][T20333] bond21: (slave veth45): Enslaving as a backup interface with a down link
[  345.280264][T20333] bond21: (slave veth45): Releasing backup interface
[  345.704866][T20355] batadv_slave_1: entered promiscuous mode
[  345.749002][T20351] batadv_slave_1: left promiscuous mode
[  345.778138][T20359] veth45: entered promiscuous mode
[  345.783846][T20359] bond25: (slave veth45): Enslaving as a backup interface with a down link
[  345.792086][T20359] bond25: (slave veth45): Releasing backup interface
[  345.811136][T20362] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  345.817229][T20362] CPU: 0 UID: 0 PID: 20362 Comm: syz.1.3112 Not tainted syzkaller #0 PREEMPT(full) 
[  345.817252][T20362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.817261][T20362] Call Trace:
[  345.817268][T20362]  <TASK>
[  345.817275][T20362]  dump_stack_lvl+0x189/0x250
[  345.817301][T20362]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.817319][T20362]  ? __pfx__printk+0x10/0x10
[  345.817410][T20362]  ? kernfs_path_from_node+0x2f/0x290
[  345.817428][T20362]  ? kernfs_path_from_node+0x250/0x290
[  345.817440][T20362]  ? kernfs_path_from_node+0x2f/0x290
[  345.817459][T20362]  sysfs_warn_dup+0x8e/0xa0
[  345.817484][T20362]  sysfs_do_create_link_sd+0xc0/0x110
[  345.817499][T20362]  device_add_class_symlinks+0x1cf/0x240
[  345.817519][T20362]  device_add+0x475/0xb50
[  345.817536][T20362]  wiphy_register+0x1ba6/0x28d0
[  345.817575][T20362]  ? __pfx_wiphy_register+0x10/0x10
[  345.817597][T20362]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  345.817620][T20362]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  345.817640][T20362]  ieee80211_register_hw+0x3425/0x4080
[  345.817670][T20362]  ? ieee80211_register_hw+0x1471/0x4080
[  345.817712][T20362]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  345.817732][T20362]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  345.817758][T20362]  ? __hrtimer_setup+0x187/0x210
[  345.817772][T20362]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  345.817797][T20362]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  345.817839][T20362]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  345.817857][T20362]  ? trace_kmalloc+0x1f/0xd0
[  345.817873][T20362]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  345.817892][T20362]  ? kstrndup+0xbf/0x160
[  345.817916][T20362]  hwsim_new_radio_nl+0xea4/0x1b10
[  345.817936][T20362]  ? __pfx___nla_validate_parse+0x10/0x10
[  345.817968][T20362]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  345.817998][T20362]  ? __nla_parse+0x40/0x60
[  345.818023][T20362]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  345.818049][T20362]  genl_family_rcv_msg_doit+0x215/0x300
[  345.818071][T20362]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  345.818099][T20362]  ? bpf_lsm_capable+0x9/0x20
[  345.818118][T20362]  ? security_capable+0x7e/0x2e0
[  345.818144][T20362]  genl_rcv_msg+0x60e/0x790
[  345.818186][T20362]  ? __pfx_genl_rcv_msg+0x10/0x10
[  345.818203][T20362]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  345.818227][T20362]  netlink_rcv_skb+0x208/0x470
[  345.818241][T20362]  ? __lock_acquire+0xab9/0xd20
[  345.818257][T20362]  ? __pfx_genl_rcv_msg+0x10/0x10
[  345.818270][T20362]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  345.818300][T20362]  ? down_read+0x1ad/0x2e0
[  345.818312][T20362]  genl_rcv+0x28/0x40
[  345.818325][T20362]  netlink_unicast+0x82f/0x9e0
[  345.818377][T20362]  ? __pfx_netlink_unicast+0x10/0x10
[  345.818396][T20362]  ? netlink_sendmsg+0x642/0xb30
[  345.818411][T20362]  ? skb_put+0x11b/0x210
[  345.818426][T20362]  netlink_sendmsg+0x805/0xb30
[  345.818452][T20362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.818483][T20362]  ? aa_sock_msg_perm+0xf1/0x1d0
[  345.818500][T20362]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  345.818517][T20362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.818541][T20362]  __sock_sendmsg+0x21c/0x270
[  345.818576][T20362]  ____sys_sendmsg+0x505/0x830
[  345.818598][T20362]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.818623][T20362]  ? import_iovec+0x74/0xa0
[  345.818646][T20362]  ___sys_sendmsg+0x21f/0x2a0
[  345.818665][T20362]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.818716][T20362]  ? __fget_files+0x2a/0x420
[  345.818736][T20362]  ? __fget_files+0x3a0/0x420
[  345.818771][T20362]  __x64_sys_sendmsg+0x19b/0x260
[  345.818789][T20362]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  345.818815][T20362]  ? rcu_is_watching+0x15/0xb0
[  345.818836][T20362]  ? do_syscall_64+0xbe/0x3b0
[  345.818861][T20362]  do_syscall_64+0xfa/0x3b0
[  345.818881][T20362]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.818902][T20362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.818918][T20362]  ? exc_page_fault+0x9f/0xf0
[  345.818940][T20362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.818954][T20362] RIP: 0033:0x7f409ab8ebe9
[  345.818969][T20362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.818983][T20362] RSP: 002b:00007f409ba68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.819000][T20362] RAX: ffffffffffffffda RBX: 00007f409adb5fa0 RCX: 00007f409ab8ebe9
[  345.819012][T20362] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  345.819023][T20362] RBP: 00007f409ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  345.819032][T20362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.819041][T20362] R13: 00007f409adb6038 R14: 00007f409adb5fa0 R15: 00007fffd7a88a78
[  345.819068][T20362]  </TASK>
[  345.899203][T20364] lo speed is unknown, defaulting to 1000
[  346.453400][T20398] lo speed is unknown, defaulting to 1000
[  346.466043][T20397] lo speed is unknown, defaulting to 1000
[  346.842835][T20407] validate_nla: 5 callbacks suppressed
[  346.842850][T20407] netlink: 'syz.2.3119': attribute type 1 has an invalid length.
[  346.848232][T20407] __nla_validate_parse: 8 callbacks suppressed
[  346.848249][T20407] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3119'.
[  346.905367][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'.
[  347.078783][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'.
[  347.139784][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3125'.
[  347.199305][T20434] pim6reg9: entered allmulticast mode
[  347.794731][T20459] lo speed is unknown, defaulting to 1000
[  347.919267][T20463] nr0: left promiscuous mode
[  347.967668][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'.
[  347.970753][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'.
[  347.979739][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3137'.
[  348.107201][T20474] lo speed is unknown, defaulting to 1000
[  348.261065][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  348.473439][T20496] veth0_to_hsr: entered promiscuous mode
[  348.479762][T20496] veth0_to_hsr: entered allmulticast mode
[  348.525964][T20503] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3146'.
[  348.588226][T20507] netlink: 'syz.0.3147': attribute type 1 has an invalid length.
[  348.660266][T20507] 8021q: adding VLAN 0 to HW filter on device bond26
[  348.679071][T20507] veth47: entered promiscuous mode
[  348.685224][T20507] bond26: (slave veth47): Enslaving as a backup interface with a down link
[  348.699483][T20507] bond26: (slave veth47): Releasing backup interface
[  348.777773][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'.
[  349.043261][T20546] netlink: 'syz.0.3157': attribute type 6 has an invalid length.
[  349.047715][T20547] netlink: 'syz.0.3157': attribute type 6 has an invalid length.
[  349.051368][T20546] netlink: 'syz.0.3157': attribute type 6 has an invalid length.
[  349.209240][T20554] netlink: 'syz.0.3159': attribute type 9 has an invalid length.
[  349.888331][T20578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.899145][T20571] netlink: 'syz.1.3163': attribute type 10 has an invalid length.
[  349.908711][T20578] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  349.912783][T20578] CPU: 0 UID: 0 PID: 20578 Comm: syz.2.3164 Not tainted syzkaller #0 PREEMPT(full) 
[  349.912797][T20578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  349.912804][T20578] Call Trace:
[  349.912812][T20578]  <TASK>
[  349.912821][T20578]  dump_stack_lvl+0x189/0x250
[  349.912856][T20578]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.912872][T20578]  ? __pfx__printk+0x10/0x10
[  349.912898][T20578]  ? kernfs_path_from_node+0x2f/0x290
[  349.912913][T20578]  ? kernfs_path_from_node+0x250/0x290
[  349.912926][T20578]  ? kernfs_path_from_node+0x2f/0x290
[  349.912946][T20578]  sysfs_warn_dup+0x8e/0xa0
[  349.912960][T20578]  sysfs_do_create_link_sd+0xc0/0x110
[  349.912975][T20578]  device_add_class_symlinks+0x1cf/0x240
[  349.912995][T20578]  device_add+0x475/0xb50
[  349.913013][T20578]  wiphy_register+0x1ba6/0x28d0
[  349.913077][T20578]  ? __pfx_wiphy_register+0x10/0x10
[  349.913097][T20578]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  349.913112][T20578]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  349.913124][T20578]  ieee80211_register_hw+0x3425/0x4080
[  349.913142][T20578]  ? ieee80211_register_hw+0x1471/0x4080
[  349.913156][T20578]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  349.913167][T20578]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.913182][T20578]  ? __hrtimer_setup+0x187/0x210
[  349.913190][T20578]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  349.913203][T20578]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  349.913229][T20578]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  349.913239][T20578]  ? trace_kmalloc+0x1f/0xd0
[  349.913249][T20578]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  349.913260][T20578]  ? kstrndup+0xbf/0x160
[  349.913273][T20578]  hwsim_new_radio_nl+0xea4/0x1b10
[  349.913285][T20578]  ? __pfx___nla_validate_parse+0x10/0x10
[  349.913304][T20578]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  349.913321][T20578]  ? __nla_parse+0x40/0x60
[  349.913334][T20578]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  349.913348][T20578]  genl_family_rcv_msg_doit+0x215/0x300
[  349.913362][T20578]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  349.913378][T20578]  ? bpf_lsm_capable+0x9/0x20
[  349.913389][T20578]  ? security_capable+0x7e/0x2e0
[  349.913404][T20578]  genl_rcv_msg+0x60e/0x790
[  349.913416][T20578]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.913425][T20578]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  349.913442][T20578]  netlink_rcv_skb+0x208/0x470
[  349.913453][T20578]  ? __lock_acquire+0xab9/0xd20
[  349.913465][T20578]  ? __pfx_genl_rcv_msg+0x10/0x10
[  349.913475][T20578]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  349.913495][T20578]  ? down_read+0x1ad/0x2e0
[  349.913504][T20578]  genl_rcv+0x28/0x40
[  349.913512][T20578]  netlink_unicast+0x82f/0x9e0
[  349.913527][T20578]  ? __pfx_netlink_unicast+0x10/0x10
[  349.913539][T20578]  ? netlink_sendmsg+0x642/0xb30
[  349.913550][T20578]  ? skb_put+0x11b/0x210
[  349.913560][T20578]  netlink_sendmsg+0x805/0xb30
[  349.913577][T20578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.913590][T20578]  ? aa_sock_msg_perm+0xf1/0x1d0
[  349.913599][T20578]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  349.913608][T20578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.913620][T20578]  __sock_sendmsg+0x21c/0x270
[  349.913632][T20578]  ____sys_sendmsg+0x505/0x830
[  349.913643][T20578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.913656][T20578]  ? import_iovec+0x74/0xa0
[  349.913667][T20578]  ___sys_sendmsg+0x21f/0x2a0
[  349.913677][T20578]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.913703][T20578]  ? __fget_files+0x2a/0x420
[  349.913714][T20578]  ? __fget_files+0x3a0/0x420
[  349.913731][T20578]  __x64_sys_sendmsg+0x19b/0x260
[  349.913741][T20578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  349.913754][T20578]  ? rcu_is_watching+0x15/0xb0
[  349.913765][T20578]  ? do_syscall_64+0xbe/0x3b0
[  349.913780][T20578]  do_syscall_64+0xfa/0x3b0
[  349.913790][T20578]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.913801][T20578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.913809][T20578]  ? exc_page_fault+0x9f/0xf0
[  349.913821][T20578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.913829][T20578] RIP: 0033:0x7f901258ebe9
[  349.913847][T20578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.913856][T20578] RSP: 002b:00007f9013319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.913866][T20578] RAX: ffffffffffffffda RBX: 00007f90127b5fa0 RCX: 00007f901258ebe9
[  349.913873][T20578] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  349.913879][T20578] RBP: 00007f9012611e19 R08: 0000000000000000 R09: 0000000000000000
[  349.913884][T20578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.913889][T20578] R13: 00007f90127b6038 R14: 00007f90127b5fa0 R15: 00007ffd2bd2ee18
[  349.913904][T20578]  </TASK>
[  350.161935][T20586] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  350.237704][T20586] 8021q: adding VLAN 0 to HW filter on device bond22
[  350.250136][T20586] veth47: entered promiscuous mode
[  350.256225][T20586] bond22: (slave veth47): Enslaving as a backup interface with a down link
[  350.305468][T20592] netlink: 'syz.2.3168': attribute type 7 has an invalid length.
[  350.382077][T20596] lo speed is unknown, defaulting to 1000
[  351.023825][T20616] netlink: 'syz.0.3174': attribute type 1 has an invalid length.
[  351.030444][T20616] mac80211_hwsim hwsim286 wlan0: entered promiscuous mode
[  351.033594][T20616] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  351.143857][T20619] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  351.601647][T20632] lo speed is unknown, defaulting to 1000
[  351.735103][T20642] mac80211_hwsim hwsim287 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  351.773523][T20639] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  352.018273][T20662] tipc: Invalid UDP bearer configuration
[  352.018303][T20662] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  352.046495][T20665] __nla_validate_parse: 5 callbacks suppressed
[  352.046508][T20665] netlink: 304 bytes leftover after parsing attributes in process `syz.2.3189'.
[  352.254357][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'.
[  352.262588][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  352.436988][T20707] veth53: entered promiscuous mode
[  352.461351][T20711] erspan0: entered allmulticast mode
[  352.481322][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'.
[  352.485231][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'.
[  352.563001][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'.
[  352.794438][T20742] bond22: (slave veth47): Releasing backup interface
[  352.864018][T20744] netlink: 'syz.1.3208': attribute type 10 has an invalid length.
[  352.942291][T20756] mac80211_hwsim hwsim269 wlan1: left allmulticast mode
[  353.008427][T20756] netlink: 'syz.0.3210': attribute type 10 has an invalid length.
[  353.169548][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'.
[  353.173269][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'.
[  353.485003][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.588254][T20765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'.
[  353.603000][T20763] netlink: 'syz.2.3212': attribute type 10 has an invalid length.
[  353.629864][T20765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3213'.
[  353.636642][T20765] syzkaller0: entered promiscuous mode
[  353.638522][T20765] syzkaller0: entered allmulticast mode
[  353.641959][T20765] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  353.653641][T20765] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  353.724235][T20773] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  353.730061][T20773] CPU: 0 UID: 0 PID: 20773 Comm: syz.2.3214 Not tainted syzkaller #0 PREEMPT(full) 
[  353.730077][T20773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.730084][T20773] Call Trace:
[  353.730088][T20773]  <TASK>
[  353.730093][T20773]  dump_stack_lvl+0x189/0x250
[  353.730110][T20773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.730120][T20773]  ? __pfx__printk+0x10/0x10
[  353.730135][T20773]  ? kernfs_path_from_node+0x2f/0x290
[  353.730144][T20773]  ? kernfs_path_from_node+0x250/0x290
[  353.730152][T20773]  ? kernfs_path_from_node+0x2f/0x290
[  353.730164][T20773]  sysfs_warn_dup+0x8e/0xa0
[  353.730173][T20773]  sysfs_do_create_link_sd+0xc0/0x110
[  353.730183][T20773]  device_add_class_symlinks+0x1cf/0x240
[  353.730194][T20773]  device_add+0x475/0xb50
[  353.730205][T20773]  wiphy_register+0x1ba6/0x28d0
[  353.730226][T20773]  ? __pfx_wiphy_register+0x10/0x10
[  353.730237][T20773]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  353.730250][T20773]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  353.730262][T20773]  ieee80211_register_hw+0x3425/0x4080
[  353.730279][T20773]  ? ieee80211_register_hw+0x1471/0x4080
[  353.730292][T20773]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  353.730303][T20773]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.730337][T20773]  ? __hrtimer_setup+0x187/0x210
[  353.730345][T20773]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  353.730360][T20773]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  353.730390][T20773]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  353.730400][T20773]  ? trace_kmalloc+0x1f/0xd0
[  353.730410][T20773]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  353.730422][T20773]  ? kstrndup+0xbf/0x160
[  353.730436][T20773]  hwsim_new_radio_nl+0xea4/0x1b10
[  353.730447][T20773]  ? __pfx___nla_validate_parse+0x10/0x10
[  353.730467][T20773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.730483][T20773]  ? __nla_parse+0x40/0x60
[  353.730497][T20773]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  353.730511][T20773]  genl_family_rcv_msg_doit+0x215/0x300
[  353.730524][T20773]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.730540][T20773]  ? bpf_lsm_capable+0x9/0x20
[  353.730555][T20773]  ? security_capable+0x7e/0x2e0
[  353.730576][T20773]  genl_rcv_msg+0x60e/0x790
[  353.730595][T20773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.730608][T20773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.730628][T20773]  netlink_rcv_skb+0x208/0x470
[  353.730641][T20773]  ? __lock_acquire+0xab9/0xd20
[  353.730662][T20773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.730675][T20773]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.730703][T20773]  ? down_read+0x1ad/0x2e0
[  353.730717][T20773]  genl_rcv+0x28/0x40
[  353.730728][T20773]  netlink_unicast+0x82f/0x9e0
[  353.730750][T20773]  ? __pfx_netlink_unicast+0x10/0x10
[  353.730769][T20773]  ? netlink_sendmsg+0x642/0xb30
[  353.730817][T20773]  ? skb_put+0x11b/0x210
[  353.730833][T20773]  netlink_sendmsg+0x805/0xb30
[  353.730858][T20773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.730873][T20773]  ? aa_sock_msg_perm+0xf1/0x1d0
[  353.730882][T20773]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.730892][T20773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.730905][T20773]  __sock_sendmsg+0x21c/0x270
[  353.730926][T20773]  ____sys_sendmsg+0x505/0x830
[  353.730945][T20773]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.730968][T20773]  ? import_iovec+0x74/0xa0
[  353.730989][T20773]  ___sys_sendmsg+0x21f/0x2a0
[  353.731006][T20773]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.731049][T20773]  ? __fget_files+0x2a/0x420
[  353.731071][T20773]  ? __fget_files+0x3a0/0x420
[  353.731095][T20773]  __x64_sys_sendmsg+0x19b/0x260
[  353.731106][T20773]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.731124][T20773]  ? do_syscall_64+0xbe/0x3b0
[  353.731138][T20773]  do_syscall_64+0xfa/0x3b0
[  353.731149][T20773]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.731161][T20773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.731169][T20773]  ? exc_page_fault+0x9f/0xf0
[  353.731182][T20773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.731194][T20773] RIP: 0033:0x7f901258ebe9
[  353.731208][T20773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.731221][T20773] RSP: 002b:00007f90107f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.731242][T20773] RAX: ffffffffffffffda RBX: 00007f90127b6090 RCX: 00007f901258ebe9
[  353.731253][T20773] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  353.731261][T20773] RBP: 00007f9012611e19 R08: 0000000000000000 R09: 0000000000000000
[  353.731268][T20773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.731275][T20773] R13: 00007f90127b6128 R14: 00007f90127b6090 R15: 00007ffd2bd2ee18
[  353.731297][T20773]  </TASK>
[  354.021239][T20788] lo speed is unknown, defaulting to 1000
[  355.189241][T20876] netlink: 'syz.1.3234': attribute type 12 has an invalid length.
[  355.390318][T20885] netlink: 'syz.2.3236': attribute type 10 has an invalid length.
[  355.658954][T20904] lo speed is unknown, defaulting to 1000
[  355.688701][T20906] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001
[  355.695313][T20906] ieee802154 phy0 wpan0: encryption failed: -22
[  355.711729][T20905] mac80211_hwsim hwsim294 wlan0: entered promiscuous mode
[  355.715162][T20905] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  356.168340][T20917] netlink: 'syz.0.3243': attribute type 10 has an invalid length.
[  356.175423][T20914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.179038][T20914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.870896][T20936] netlink: 'syz.2.3249': attribute type 10 has an invalid length.
[  357.112077][T20969] netlink: 'syz.2.3255': attribute type 1 has an invalid length.
[  357.128891][T20957] netlink: 'syz.0.3253': attribute type 10 has an invalid length.
[  357.149423][T20969] 8021q: adding VLAN 0 to HW filter on device bond23
[  357.253180][T20977] lo speed is unknown, defaulting to 1000
[  357.488939][T20989] mac80211_hwsim hwsim271 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  357.626994][T20998] __nla_validate_parse: 5 callbacks suppressed
[  357.627012][T20998] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3261'.
[  357.633901][T20998] netlink: 'syz.2.3261': attribute type 1 has an invalid length.
[  357.670695][T20998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3261'.
[  357.931002][T21031] tipc: Resetting bearer <eth:gre0>
[  357.990696][T21031] veth27: left promiscuous mode
[  357.993740][T21031] mac80211_hwsim hwsim225 syzkaller0: left promiscuous mode
[  357.997526][T21031] mac80211_hwsim hwsim225 syzkaller0: left allmulticast mode
[  358.000545][T21031] veth29: left promiscuous mode
[  358.002972][T21031] veth0_to_batadv: left allmulticast mode
[  358.005641][T21031] veth0_to_batadv: left promiscuous mode
[  358.007863][T21031] macvtap1: left promiscuous mode
[  358.009791][T21031] macvtap1: left allmulticast mode
[  358.013335][T21031] veth31: left promiscuous mode
[  358.018599][T21031] veth33: left promiscuous mode
[  358.021829][T21031] veth35: left promiscuous mode
[  358.023812][T21031] veth37: left promiscuous mode
[  358.026435][T21031] veth41: left promiscuous mode
[  358.030811][T21031] veth43: left promiscuous mode
[  358.033201][T21031] veth45: left promiscuous mode
[  358.038928][T21031] veth47: left promiscuous mode
[  358.099057][T21033] syzkaller0: entered promiscuous mode
[  358.101101][T21033] syzkaller0: entered allmulticast mode
[  358.104690][T21043] smc: net device bond0 applied user defined pnetid SYZ2
[  358.111863][T21043] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3272'.
[  358.200830][T21050] mac80211_hwsim hwsim269 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  358.353787][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'.
[  358.419356][T21061] netlink: 'syz.0.3277': attribute type 10 has an invalid length.
[  358.472923][T21070] mac80211_hwsim hwsim269 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  358.580402][T21076] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  358.611073][T21079] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  358.615939][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.0.3282 Not tainted syzkaller #0 PREEMPT(full) 
[  358.615953][T21079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.615959][T21079] Call Trace:
[  358.615965][T21079]  <TASK>
[  358.615970][T21079]  dump_stack_lvl+0x189/0x250
[  358.615987][T21079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.615998][T21079]  ? __pfx__printk+0x10/0x10
[  358.616013][T21079]  ? kernfs_path_from_node+0x2f/0x290
[  358.616023][T21079]  ? kernfs_path_from_node+0x250/0x290
[  358.616031][T21079]  ? kernfs_path_from_node+0x2f/0x290
[  358.616042][T21079]  sysfs_warn_dup+0x8e/0xa0
[  358.616053][T21079]  sysfs_do_create_link_sd+0xc0/0x110
[  358.616063][T21079]  device_add_class_symlinks+0x1cf/0x240
[  358.616074][T21079]  device_add+0x475/0xb50
[  358.616085][T21079]  wiphy_register+0x1ba6/0x28d0
[  358.616106][T21079]  ? __pfx_wiphy_register+0x10/0x10
[  358.616117][T21079]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  358.616130][T21079]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  358.616141][T21079]  ieee80211_register_hw+0x3425/0x4080
[  358.616159][T21079]  ? ieee80211_register_hw+0x1471/0x4080
[  358.616171][T21079]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  358.616184][T21079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  358.616199][T21079]  ? __hrtimer_setup+0x187/0x210
[  358.616207][T21079]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  358.616222][T21079]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  358.616247][T21079]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  358.616257][T21079]  ? trace_kmalloc+0x1f/0xd0
[  358.616268][T21079]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  358.616279][T21079]  ? kstrndup+0xbf/0x160
[  358.616292][T21079]  hwsim_new_radio_nl+0xea4/0x1b10
[  358.616304][T21079]  ? __pfx___nla_validate_parse+0x10/0x10
[  358.616323][T21079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  358.616340][T21079]  ? __nla_parse+0x40/0x60
[  358.616353][T21079]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  358.616367][T21079]  genl_family_rcv_msg_doit+0x215/0x300
[  358.616380][T21079]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  358.616396][T21079]  ? bpf_lsm_capable+0x9/0x20
[  358.616407][T21079]  ? security_capable+0x7e/0x2e0
[  358.616452][T21079]  genl_rcv_msg+0x60e/0x790
[  358.616467][T21079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  358.616477][T21079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  358.616495][T21079]  netlink_rcv_skb+0x208/0x470
[  358.616507][T21079]  ? __lock_acquire+0xab9/0xd20
[  358.616519][T21079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  358.616529][T21079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  358.616550][T21079]  ? down_read+0x1ad/0x2e0
[  358.616559][T21079]  genl_rcv+0x28/0x40
[  358.616567][T21079]  netlink_unicast+0x82f/0x9e0
[  358.616582][T21079]  ? __pfx_netlink_unicast+0x10/0x10
[  358.616594][T21079]  ? netlink_sendmsg+0x642/0xb30
[  358.616605][T21079]  ? skb_put+0x11b/0x210
[  358.616614][T21079]  netlink_sendmsg+0x805/0xb30
[  358.616631][T21079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  358.616645][T21079]  ? aa_sock_msg_perm+0xf1/0x1d0
[  358.616654][T21079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  358.616662][T21079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  358.616675][T21079]  __sock_sendmsg+0x21c/0x270
[  358.616687][T21079]  ____sys_sendmsg+0x505/0x830
[  358.616699][T21079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  358.616712][T21079]  ? import_iovec+0x74/0xa0
[  358.616723][T21079]  ___sys_sendmsg+0x21f/0x2a0
[  358.616733][T21079]  ? __pfx____sys_sendmsg+0x10/0x10
[  358.616760][T21079]  ? __fget_files+0x2a/0x420
[  358.616771][T21079]  ? __fget_files+0x3a0/0x420
[  358.616789][T21079]  __x64_sys_sendmsg+0x19b/0x260
[  358.616799][T21079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  358.616813][T21079]  ? rcu_is_watching+0x15/0xb0
[  358.616824][T21079]  ? do_syscall_64+0xbe/0x3b0
[  358.616837][T21079]  do_syscall_64+0xfa/0x3b0
[  358.616848][T21079]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.616859][T21079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.616867][T21079]  ? exc_page_fault+0x9f/0xf0
[  358.616879][T21079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.616887][T21079] RIP: 0033:0x7f2a3298ebe9
[  358.616897][T21079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.616905][T21079] RSP: 002b:00007f2a337d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  358.616914][T21079] RAX: ffffffffffffffda RBX: 00007f2a32bb5fa0 RCX: 00007f2a3298ebe9
[  358.616921][T21079] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  358.616926][T21079] RBP: 00007f2a32a11e19 R08: 0000000000000000 R09: 0000000000000000
[  358.616932][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.616937][T21079] R13: 00007f2a32bb6038 R14: 00007f2a32bb5fa0 R15: 00007ffc57514e78
[  358.616953][T21079]  </TASK>
[  358.703720][T21076] syzkaller1: entered allmulticast mode
[  358.792009][T21079] netlink: 'syz.0.3282': attribute type 10 has an invalid length.
[  358.802649][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'.
[  358.808547][T21079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3282'.
[  358.812122][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'.
[  358.820923][T21079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3282'.
[  358.903717][T21087] netlink: 'syz.0.3283': attribute type 23 has an invalid length.
[  359.018380][T21099] mac80211_hwsim hwsim269 wlan1: entered allmulticast mode
[  359.109924][T21104] netlink: 'syz.0.3286': attribute type 10 has an invalid length.
[  359.323991][T21119] netlink: 'syz.2.3290': attribute type 10 has an invalid length.
[  359.435659][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'.
[  359.735425][T21154] erspan0: left allmulticast mode
[  359.762607][T21154] tipc: Resetting bearer <ib:ip6gre0>
[  359.786970][T21154] veth0_to_hsr: left promiscuous mode
[  359.789164][T21154] veth0_to_hsr: left allmulticast mode
[  359.792323][T21154] tipc: Resetting bearer <eth:syzkaller0>
[  359.803837][T21154] syzkaller0: left promiscuous mode
[  359.808632][T21154] syzkaller0: left allmulticast mode
[  359.826656][T21154] veth43: left promiscuous mode
[  359.835213][T21154] veth45: left promiscuous mode
[  359.869576][T21154] veth47: left promiscuous mode
[  359.875787][T21154] veth49: left promiscuous mode
[  359.878291][T21154] veth51: left promiscuous mode
[  359.885239][  T791] lo speed is unknown, defaulting to 1000
[  359.895170][  T791] syz2: Port: 1 Link DOWN
[  359.990936][T21173] netlink: 'syz.0.3303': attribute type 10 has an invalid length.
[  360.067807][T21180] lo speed is unknown, defaulting to 1000
[  360.130361][T21187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3307'.
[  360.256876][T21201] mac80211_hwsim hwsim297 wlan0: entered promiscuous mode
[  360.259580][T21201] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  360.353773][T21203] netlink: 'syz.1.3311': attribute type 1 has an invalid length.
[  360.455165][T21209] netlink: 'syz.0.3312': attribute type 10 has an invalid length.
[  360.523670][T21214] macvlan1: entered promiscuous mode
[  360.531801][T21214] macvlan1: left promiscuous mode
[  361.898438][T21290] netlink: 'syz.2.3330': attribute type 1 has an invalid length.
[  361.930989][T21290] 8021q: adding VLAN 0 to HW filter on device bond25
[  361.957789][T21290] mac80211_hwsim hwsim297 wlan0: left promiscuous mode
[  362.273126][T21315] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  362.511820][T21339] netlink: 'syz.0.3337': attribute type 1 has an invalid length.
[  362.684073][T21354] __nla_validate_parse: 12 callbacks suppressed
[  362.684090][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'.
[  362.895753][T21366] lo speed is unknown, defaulting to 1000
[  363.352197][T21394] 8021q: adding VLAN 0 to HW filter on device bond36
[  363.376739][T21394] veth53: entered promiscuous mode
[  363.388357][T21394] bond36: (slave veth53): Enslaving as a backup interface with a down link
[  363.397110][T21394] bond36: (slave veth53): Releasing backup interface
[  363.758712][T21433] lo speed is unknown, defaulting to 1000
[  363.807807][T21437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3360'.
[  363.964001][T21444] syzkaller1: entered promiscuous mode
[  363.966456][T21444] syzkaller1: entered allmulticast mode
[  364.143722][T21459] lo speed is unknown, defaulting to 1000
[  364.437738][T21474] validate_nla: 1 callbacks suppressed
[  364.437754][T21474] netlink: 'syz.0.3371': attribute type 10 has an invalid length.
[  364.444782][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'.
[  364.653865][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3378'.
[  364.656980][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3378'.
[  364.706798][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'.
[  364.746767][T21504] mac80211_hwsim hwsim269 wlan1: left allmulticast mode
[  364.751114][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'.
[  364.809460][T21504] netlink: 'syz.0.3381': attribute type 10 has an invalid length.
[  364.838893][T21509] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3382'.
[  364.841838][T21510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3382'.
[  364.884293][T21517] netlink: 'syz.2.3384': attribute type 9 has an invalid length.
[  364.894937][T21517] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3384'.
[  364.962585][T21519] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  364.968837][T21519] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  364.991013][T21525] netlink: 'syz.2.3386': attribute type 23 has an invalid length.
[  365.478500][T21554] netlink: 'syz.1.3394': attribute type 4 has an invalid length.
[  366.781695][T21623] lo speed is unknown, defaulting to 1000
[  366.854481][T21624] lo speed is unknown, defaulting to 1000
[  367.170726][T21623] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  367.178653][T21623] CPU: 1 UID: 0 PID: 21623 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) 
[  367.178679][T21623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.178689][T21623] Call Trace:
[  367.178695][T21623]  <TASK>
[  367.178702][T21623]  dump_stack_lvl+0x189/0x250
[  367.178726][T21623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.178741][T21623]  ? __pfx__printk+0x10/0x10
[  367.178761][T21623]  ? kernfs_path_from_node+0x2f/0x290
[  367.178776][T21623]  ? kernfs_path_from_node+0x250/0x290
[  367.178789][T21623]  ? kernfs_path_from_node+0x2f/0x290
[  367.178839][T21623]  sysfs_warn_dup+0x8e/0xa0
[  367.178857][T21623]  sysfs_do_create_link_sd+0xc0/0x110
[  367.178876][T21623]  device_add_class_symlinks+0x1cf/0x240
[  367.178896][T21623]  device_add+0x475/0xb50
[  367.178914][T21623]  wiphy_register+0x1ba6/0x28d0
[  367.178954][T21623]  ? __pfx_wiphy_register+0x10/0x10
[  367.178975][T21623]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  367.179004][T21623]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  367.179025][T21623]  ieee80211_register_hw+0x3425/0x4080
[  367.179057][T21623]  ? ieee80211_register_hw+0x1471/0x4080
[  367.179080][T21623]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  367.179101][T21623]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.179127][T21623]  ? __hrtimer_setup+0x187/0x210
[  367.179141][T21623]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  367.179167][T21623]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  367.179212][T21623]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  367.179229][T21623]  ? trace_kmalloc+0x1f/0xd0
[  367.179245][T21623]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  367.179265][T21623]  ? kstrndup+0xbf/0x160
[  367.179287][T21623]  hwsim_new_radio_nl+0xea4/0x1b10
[  367.179310][T21623]  ? __pfx___nla_validate_parse+0x10/0x10
[  367.179346][T21623]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  367.179377][T21623]  ? __nla_parse+0x40/0x60
[  367.179404][T21623]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  367.179453][T21623]  genl_family_rcv_msg_doit+0x215/0x300
[  367.179481][T21623]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  367.179508][T21623]  ? bpf_lsm_capable+0x9/0x20
[  367.179525][T21623]  ? security_capable+0x7e/0x2e0
[  367.179547][T21623]  genl_rcv_msg+0x60e/0x790
[  367.179567][T21623]  ? __pfx_genl_rcv_msg+0x10/0x10
[  367.179583][T21623]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  367.179619][T21623]  netlink_rcv_skb+0x208/0x470
[  367.179637][T21623]  ? __lock_acquire+0xab9/0xd20
[  367.179658][T21623]  ? __pfx_genl_rcv_msg+0x10/0x10
[  367.179708][T21623]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  367.179745][T21623]  ? down_read+0x1ad/0x2e0
[  367.179763][T21623]  genl_rcv+0x28/0x40
[  367.179778][T21623]  netlink_unicast+0x82f/0x9e0
[  367.179833][T21623]  ? __pfx_netlink_unicast+0x10/0x10
[  367.179857][T21623]  ? netlink_sendmsg+0x642/0xb30
[  367.179877][T21623]  ? skb_put+0x11b/0x210
[  367.179895][T21623]  netlink_sendmsg+0x805/0xb30
[  367.179925][T21623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.179949][T21623]  ? aa_sock_msg_perm+0xf1/0x1d0
[  367.179964][T21623]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  367.179980][T21623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.180003][T21623]  __sock_sendmsg+0x21c/0x270
[  367.180028][T21623]  ____sys_sendmsg+0x505/0x830
[  367.180048][T21623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  367.180072][T21623]  ? import_iovec+0x74/0xa0
[  367.180093][T21623]  ___sys_sendmsg+0x21f/0x2a0
[  367.180110][T21623]  ? __pfx____sys_sendmsg+0x10/0x10
[  367.180159][T21623]  ? __fget_files+0x2a/0x420
[  367.180180][T21623]  ? __fget_files+0x3a0/0x420
[  367.180211][T21623]  __x64_sys_sendmsg+0x19b/0x260
[  367.180228][T21623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  367.180250][T21623]  ? rcu_is_watching+0x15/0xb0
[  367.180270][T21623]  ? do_syscall_64+0xbe/0x3b0
[  367.180296][T21623]  do_syscall_64+0xfa/0x3b0
[  367.180316][T21623]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.180337][T21623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.180352][T21623]  ? exc_page_fault+0x9f/0xf0
[  367.180374][T21623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.180389][T21623] RIP: 0033:0x7f409ab8ebe9
[  367.180406][T21623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.180420][T21623] RSP: 002b:00007f409ba68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.180439][T21623] RAX: ffffffffffffffda RBX: 00007f409adb5fa0 RCX: 00007f409ab8ebe9
[  367.180450][T21623] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  367.180461][T21623] RBP: 00007f409ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  367.180471][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.180480][T21623] R13: 00007f409adb6038 R14: 00007f409adb5fa0 R15: 00007fffd7a88a78
[  367.180508][T21623]  </TASK>
[  367.748696][T21679] lo speed is unknown, defaulting to 1000
[  367.776849][T21681] mac80211_hwsim hwsim225 syzkaller0: Caught tx_queue_len zero misconfig
[  367.795543][T21681] __nla_validate_parse: 8 callbacks suppressed
[  367.795561][T21681] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3422'.
[  368.058175][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  368.584185][T21733] lo speed is unknown, defaulting to 1000
[  368.649483][T21737] netlink: 'syz.1.3432': attribute type 10 has an invalid length.
[  369.291104][T21775] netlink: 'syz.0.3439': attribute type 9 has an invalid length.
[  369.294150][T21775] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3439'.
[  369.396403][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'.
[  369.520215][T21784] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3443'.
[  369.589526][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  369.592387][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  369.694344][T21786] netlink: 'syz.1.3444': attribute type 10 has an invalid length.
[  369.714249][T21800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3446'.
[  369.719171][T21800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3446'.
[  369.750588][T21796] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  369.754018][T21796] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  369.812836][T21809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3447'.
[  369.830935][T21816] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  370.616485][T21864] syzkaller1: entered promiscuous mode
[  370.618653][T21864] syzkaller1: entered allmulticast mode
[  370.624466][T21864] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  370.628737][T21864] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  371.132751][T21906] netlink: 'syz.2.3466': attribute type 10 has an invalid length.
[  371.193235][T21909] IPVS: length: 47 != 8
[  371.500472][T21928] netlink: 'syz.0.3471': attribute type 13 has an invalid length.
[  371.503115][T21928] netlink: 'syz.0.3471': attribute type 17 has an invalid length.
[  371.551945][T21928] 8021q: adding VLAN 0 to HW filter on device team0
[  371.558367][T21928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.583219][T21929] lo speed is unknown, defaulting to 1000
[  371.914144][T21940] mac80211_hwsim hwsim271 wlan1: entered allmulticast mode
[  371.974389][T21945] netlink: 'syz.2.3473': attribute type 10 has an invalid length.
[  371.988315][T21940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  371.992658][T21940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  372.623088][T21981] netlink: 'syz.0.3481': attribute type 10 has an invalid length.
[  372.810929][T21998] lo speed is unknown, defaulting to 1000
[  372.843231][T22003] __nla_validate_parse: 8 callbacks suppressed
[  372.843246][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'.
[  372.867541][T22006] netlink: 'syz.1.3484': attribute type 23 has an invalid length.
[  373.437293][T22042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3491'.
[  373.608588][T22061] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3495'.
[  373.627200][T22065] netlink: 'syz.0.3493': attribute type 13 has an invalid length.
[  373.630254][T22065] netlink: 'syz.0.3493': attribute type 17 has an invalid length.
[  373.656819][T22065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.739070][T22065] lo speed is unknown, defaulting to 1000
[  373.750537][T22067] netlink: 'syz.1.3496': attribute type 10 has an invalid length.
[  373.787469][T22074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3493'.
[  373.791389][T22075] team0: left allmulticast mode
[  373.951466][T22082] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3500'.
[  374.231027][T22088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.238945][T21158] lo speed is unknown, defaulting to 1000
[  374.242715][T21158] syz2: Port: 1 Link ACTIVE
[  374.391103][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3506'.
[  374.631400][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'.
[  374.633375][T22122] lo speed is unknown, defaulting to 1000
[  374.807381][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'.
[  374.810211][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'.
[  374.920897][T22147] lo speed is unknown, defaulting to 1000
[  374.974451][T22157] validate_nla: 4 callbacks suppressed
[  374.974464][T22157] netlink: 'syz.0.3516': attribute type 74 has an invalid length.
[  375.062099][T22162] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  375.086389][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  375.289688][T22182] IPv6: NLM_F_CREATE should be specified when creating new route
[  375.303436][T22182] netlink: 'syz.0.3522': attribute type 11 has an invalid length.
[  375.550003][T22197] lo speed is unknown, defaulting to 1000
[  375.861943][T22206] netlink: 'syz.0.3527': attribute type 10 has an invalid length.
[  375.998047][T22214] netlink: 'syz.1.3530': attribute type 10 has an invalid length.
[  376.066622][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3532'.
[  376.138040][T22241] mac80211_hwsim hwsim271 wlan1: left allmulticast mode
[  377.188581][T22337] batman_adv: batadv0: Adding interface: ipvlan2
[  377.190680][T22337] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.199048][T22337] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  377.258289][T22341] netlink: 'syz.1.3551': attribute type 10 has an invalid length.
[  377.928255][T22369] __nla_validate_parse: 2 callbacks suppressed
[  377.928269][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'.
[  378.169931][T22390] tipc: Resetting bearer <ib:ip6gre0>
[  378.207188][T22390] veth53: left promiscuous mode
[  378.209672][T21158] lo speed is unknown, defaulting to 1000
[  378.212062][T21158] syz2: Port: 1 Link DOWN
[  378.274229][T22400] netlink: 'syz.0.3560': attribute type 9 has an invalid length.
[  378.283452][T22400] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3560'.
[  378.348571][T22403] lo speed is unknown, defaulting to 1000
[  378.452859][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.708895][T22417] netlink: 'syz.1.3564': attribute type 10 has an invalid length.
[  378.801154][T22430] lo speed is unknown, defaulting to 1000
[  378.949265][T22436] mac80211_hwsim hwsim271 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  379.070075][T22441] netlink: 'syz.2.3571': attribute type 10 has an invalid length.
[  379.498201][T22464] lo speed is unknown, defaulting to 1000
[  379.543368][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3576'.
[  379.652626][T22470] team0: Device gtp1 is up. Set it down before adding it as a team port
[  379.713414][T22470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.717878][T22470] syzkaller0: entered promiscuous mode
[  379.720346][T22470] syzkaller0: entered allmulticast mode
[  379.739774][T22470] tipc: Resetting bearer <eth:syzkaller0>
[  379.745296][T22469] tipc: Resetting bearer <eth:syzkaller0>
[  379.759601][T22469] tipc: Disabling bearer <eth:syzkaller0>
[  379.849822][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3578'.
[  380.007099][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'.
[  380.015557][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'.
[  380.102569][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'.
[  380.352283][T22508] batman_adv: batadv0: Removing interface: ipvlan2
[  380.392410][T22512] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  380.398480][T22512] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  380.473921][T22512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3585'.
[  380.480504][T22508] netlink: 'syz.0.3583': attribute type 10 has an invalid length.
[  380.492963][T22512] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  380.500510][T22512] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  380.505428][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[  380.514655][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[  380.536653][T22513] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.545045][T22513] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  381.290941][T22579] lo speed is unknown, defaulting to 1000
[  381.409137][T22594] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  381.412856][T22594] CPU: 0 UID: 0 PID: 22594 Comm: syz.0.3599 Not tainted syzkaller #0 PREEMPT(full) 
[  381.412870][T22594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  381.412876][T22594] Call Trace:
[  381.412882][T22594]  <TASK>
[  381.412886][T22594]  dump_stack_lvl+0x189/0x250
[  381.412903][T22594]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.412914][T22594]  ? __pfx__printk+0x10/0x10
[  381.412929][T22594]  ? kernfs_path_from_node+0x2f/0x290
[  381.412939][T22594]  ? kernfs_path_from_node+0x250/0x290
[  381.412947][T22594]  ? kernfs_path_from_node+0x2f/0x290
[  381.412958][T22594]  sysfs_warn_dup+0x8e/0xa0
[  381.412966][T22594]  sysfs_do_create_link_sd+0xc0/0x110
[  381.412976][T22594]  device_add_class_symlinks+0x1cf/0x240
[  381.412988][T22594]  device_add+0x475/0xb50
[  381.413013][T22594]  wiphy_register+0x1ba6/0x28d0
[  381.413036][T22594]  ? __pfx_wiphy_register+0x10/0x10
[  381.413048][T22594]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  381.413062][T22594]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  381.413073][T22594]  ieee80211_register_hw+0x3425/0x4080
[  381.413091][T22594]  ? ieee80211_register_hw+0x1471/0x4080
[  381.413103][T22594]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  381.413114][T22594]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  381.413129][T22594]  ? __hrtimer_setup+0x187/0x210
[  381.413136][T22594]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  381.413150][T22594]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  381.413175][T22594]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  381.413185][T22594]  ? trace_kmalloc+0x1f/0xd0
[  381.413196][T22594]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  381.413207][T22594]  ? kstrndup+0xbf/0x160
[  381.413222][T22594]  hwsim_new_radio_nl+0xea4/0x1b10
[  381.413234][T22594]  ? __pfx___nla_validate_parse+0x10/0x10
[  381.413253][T22594]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  381.413279][T22594]  ? __nla_parse+0x40/0x60
[  381.413294][T22594]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  381.413309][T22594]  genl_family_rcv_msg_doit+0x215/0x300
[  381.413323][T22594]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  381.413340][T22594]  ? bpf_lsm_capable+0x9/0x20
[  381.413350][T22594]  ? security_capable+0x7e/0x2e0
[  381.413366][T22594]  genl_rcv_msg+0x60e/0x790
[  381.413378][T22594]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.413387][T22594]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  381.413404][T22594]  netlink_rcv_skb+0x208/0x470
[  381.413418][T22594]  ? __lock_acquire+0xab9/0xd20
[  381.413430][T22594]  ? __pfx_genl_rcv_msg+0x10/0x10
[  381.413440][T22594]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  381.413461][T22594]  ? down_read+0x1ad/0x2e0
[  381.413470][T22594]  genl_rcv+0x28/0x40
[  381.413478][T22594]  netlink_unicast+0x82f/0x9e0
[  381.413494][T22594]  ? __pfx_netlink_unicast+0x10/0x10
[  381.413506][T22594]  ? netlink_sendmsg+0x642/0xb30
[  381.413517][T22594]  ? skb_put+0x11b/0x210
[  381.413527][T22594]  netlink_sendmsg+0x805/0xb30
[  381.413544][T22594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.413557][T22594]  ? aa_sock_msg_perm+0xf1/0x1d0
[  381.413566][T22594]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  381.413584][T22594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.413597][T22594]  __sock_sendmsg+0x21c/0x270
[  381.413611][T22594]  ____sys_sendmsg+0x505/0x830
[  381.413623][T22594]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.413638][T22594]  ? import_iovec+0x74/0xa0
[  381.413651][T22594]  ___sys_sendmsg+0x21f/0x2a0
[  381.413661][T22594]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.413688][T22594]  ? __fget_files+0x2a/0x420
[  381.413700][T22594]  ? __fget_files+0x3a0/0x420
[  381.413717][T22594]  __x64_sys_sendmsg+0x19b/0x260
[  381.413727][T22594]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.413741][T22594]  ? rcu_is_watching+0x15/0xb0
[  381.413752][T22594]  ? do_syscall_64+0xbe/0x3b0
[  381.413765][T22594]  do_syscall_64+0xfa/0x3b0
[  381.413776][T22594]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.413814][T22594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.413825][T22594]  ? exc_page_fault+0x9f/0xf0
[  381.413838][T22594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.413846][T22594] RIP: 0033:0x7f2a3298ebe9
[  381.413857][T22594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.413865][T22594] RSP: 002b:00007f2a337d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.413874][T22594] RAX: ffffffffffffffda RBX: 00007f2a32bb5fa0 RCX: 00007f2a3298ebe9
[  381.413881][T22594] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  381.413887][T22594] RBP: 00007f2a32a11e19 R08: 0000000000000000 R09: 0000000000000000
[  381.413893][T22594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  381.413898][T22594] R13: 00007f2a32bb6038 R14: 00007f2a32bb5fa0 R15: 00007ffc57514e78
[  381.413913][T22594]  </TASK>
[  381.913398][T22629] netlink: 'syz.2.3604': attribute type 10 has an invalid length.
[  381.978836][T22632] netlink: 'syz.0.3606': attribute type 10 has an invalid length.
[  382.013099][T22636] macsec0: entered promiscuous mode
[  382.336697][T22674] mac80211_hwsim hwsim309 wlan0: entered promiscuous mode
[  382.339866][T22674] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  382.401494][T22681] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  382.954920][T22701] __nla_validate_parse: 6 callbacks suppressed
[  382.954930][T22701] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3620'.
[  382.965387][T22703] lo speed is unknown, defaulting to 1000
[  382.972182][T22701] netlink: 'syz.1.3620': attribute type 9 has an invalid length.
[  382.982215][T22701] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3620'.
[  383.166272][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'.
[  383.526969][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'.
[  383.766543][T22765] netlink: 'syz.2.3634': attribute type 26 has an invalid length.
[  383.772293][T22763] lo speed is unknown, defaulting to 1000
[  383.922963][T22774] netlink: 'syz.0.3639': attribute type 2 has an invalid length.
[  384.133522][T22793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3644'.
[  384.266911][T22797] lo speed is unknown, defaulting to 1000
[  385.990295][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'.
[  385.999346][T22832] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3654'.
[  386.109722][T22842] netlink: 'syz.1.3656': attribute type 1 has an invalid length.
[  386.271430][T22861] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3660'.
[  386.279271][T22859] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  386.283711][T22859] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  386.287242][T22859] CPU: 1 UID: 0 PID: 22859 Comm: syz.2.3659 Not tainted syzkaller #0 PREEMPT(full) 
[  386.291769][T22859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.295659][T22859] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  386.298077][T22859] Code: 18 00 74 08 4c 89 ef e8 5d f7 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 5a f6 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 31 f7 01 f8 4d 89 2e 41 80 3c 1f 00
[  386.305612][T22859] RSP: 0018:ffffc9000ff3f0f8 EFLAGS: 00010246
[  386.307974][T22859] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888109563980
[  386.311009][T22859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  386.314000][T22859] RBP: ffff88810df64930 R08: dffffc0000000000 R09: 0000000000000002
[  386.317060][T22859] R10: 000000000000000a R11: 0000000000000000 R12: ffff88810df668a8
[  386.320172][T22859] R13: ffff88810df64928 R14: 0000000000000000 R15: 1ffff11021becd16
[  386.323274][T22859] FS:  00007f90133196c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  386.326799][T22859] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  386.329378][T22859] CR2: 00007f90107d5d58 CR3: 000000002b1bc000 CR4: 00000000000006f0
[  386.332534][T22859] Call Trace:
[  386.333878][T22859]  <TASK>
[  386.335056][T22859]  ? xfrm_state_insert+0x44/0x60
[  386.337013][T22859]  xfrm_state_insert+0x54/0x60
[  386.338920][T22859]  ipcomp6_init_state+0x655/0x900
[  386.340930][T22859]  __xfrm_init_state+0xa76/0x13f0
[  386.342919][T22859]  ? __xfrm_init_state+0x7ef/0x13f0
[  386.345001][T22859]  xfrm_add_sa+0x2f5b/0x4070
[  386.346827][T22859]  ? __pfx_xfrm_add_sa+0x10/0x10
[  386.348804][T22859]  ? apparmor_capable+0x137/0x1b0
[  386.350801][T22859]  ? __nla_parse+0x40/0x60
[  386.352605][T22859]  xfrm_user_rcv_msg+0x7a3/0xab0
[  386.354545][T22859]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  386.356689][T22859]  ? __pfx___mutex_trylock_common+0x10/0x10
[  386.359039][T22859]  ? rcu_is_watching+0x15/0xb0
[  386.360984][T22859]  ? trace_contention_end+0x39/0x120
[  386.363166][T22859]  ? __mutex_lock+0x335/0x1350
[  386.365128][T22859]  netlink_rcv_skb+0x208/0x470
[  386.367047][T22859]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  386.369209][T22859]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  386.371344][T22859]  ? netlink_deliver_tap+0x2e/0x1b0
[  386.373381][T22859]  ? netlink_deliver_tap+0x2e/0x1b0
[  386.375493][T22859]  xfrm_netlink_rcv+0x79/0x90
[  386.377352][T22859]  netlink_unicast+0x82f/0x9e0
[  386.379255][T22859]  ? __pfx_netlink_unicast+0x10/0x10
[  386.381366][T22859]  ? netlink_sendmsg+0x642/0xb30
[  386.383315][T22859]  ? skb_put+0x11b/0x210
[  386.385019][T22859]  netlink_sendmsg+0x805/0xb30
[  386.386870][T22859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.388955][T22859]  ? aa_sock_msg_perm+0xf1/0x1d0
[  386.390915][T22859]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.392968][T22859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.394972][T22859]  __sock_sendmsg+0x21c/0x270
[  386.396722][T22859]  ____sys_sendmsg+0x505/0x830
[  386.398640][T22859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.400732][T22859]  ? import_iovec+0x74/0xa0
[  386.402541][T22859]  ___sys_sendmsg+0x21f/0x2a0
[  386.404381][T22859]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.406501][T22859]  ? __fget_files+0x2a/0x420
[  386.408354][T22859]  ? __fget_files+0x3a0/0x420
[  386.410254][T22859]  __x64_sys_sendmsg+0x19b/0x260
[  386.412203][T22859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  386.414353][T22859]  ? rcu_is_watching+0x15/0xb0
[  386.416285][T22859]  ? do_syscall_64+0xbe/0x3b0
[  386.418167][T22859]  do_syscall_64+0xfa/0x3b0
[  386.419948][T22859]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.422012][T22859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.424352][T22859]  ? exc_page_fault+0x9f/0xf0
[  386.426185][T22859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.428512][T22859] RIP: 0033:0x7f901258ebe9
[  386.430316][T22859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.437804][T22859] RSP: 002b:00007f9013319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.441029][T22859] RAX: ffffffffffffffda RBX: 00007f90127b5fa0 RCX: 00007f901258ebe9
[  386.444144][T22859] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000006
[  386.447255][T22859] RBP: 00007f9012611e19 R08: 0000000000000000 R09: 0000000000000000
[  386.450321][T22859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.453364][T22859] R13: 00007f90127b6038 R14: 00007f90127b5fa0 R15: 00007ffd2bd2ee18
[  386.456346][T22859]  </TASK>
[  386.457545][T22859] Modules linked in:
[  386.459480][T22859] ---[ end trace 0000000000000000 ]---
[  386.461612][T22859] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  386.464032][T22859] Code: 18 00 74 08 4c 89 ef e8 5d f7 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 5a f6 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 31 f7 01 f8 4d 89 2e 41 80 3c 1f 00
[  386.471754][T22859] RSP: 0018:ffffc9000ff3f0f8 EFLAGS: 00010246
[  386.474206][T22859] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888109563980
[  386.477543][T22859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  386.480656][T22859] RBP: ffff88810df64930 R08: dffffc0000000000 R09: 0000000000000002
[  386.483804][T22859] R10: 000000000000000a R11: 0000000000000000 R12: ffff88810df668a8
[  386.487033][T22859] R13: ffff88810df64928 R14: 0000000000000000 R15: 1ffff11021becd16
[  386.490221][T22859] FS:  00007f90133196c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  386.493779][T22859] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  386.496417][T22859] CR2: 00007f90107d5d58 CR3: 000000002b1bc000 CR4: 00000000000006f0
[  386.499621][T22859] Kernel panic - not syncing: Fatal exception in interrupt
[  386.503222][T22859] Kernel Offset: disabled
[  386.504975][T22859] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:36:45  Registers:
info registers vcpu 0

CPU#0
RAX=ce2cf48b9bcd5f00 RBX=ffffffff819683c8 RCX=ce2cf48b9bcd5f00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000001f76c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000044 RBX=0000000000000044 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000ff3e890
R8 =ffff88801fe48237 R9 =1ffff11003fc9046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8e1 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f90133196c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f90107d5d58 CR3=000000002b1bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9012787498 00007f9012787470 XMM03=00007f90127874a8 00007f90127874a0
XMM04=00007f90132ed100 00007f9012787460 XMM05=00007f9012787478 00007f90127874c0
XMM06=00007f90127874b8 00007f90127874b0 XMM07=00007f90127874a8 00007f90127874a0
XMM08=0000000000000000 00007f9012612ee7 XMM09=0000000000000000 00007f9012612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
