last executing test programs:

1.519150607s ago: executing program 0 (id=10862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x9080)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800019587a40500000000000a001400fe04ff06"], 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x800)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

1.251032858s ago: executing program 2 (id=10866):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0x10001, 0x5}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c120a00000000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r12, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r12, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
bind$unix(r12, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

1.18067491s ago: executing program 2 (id=10868):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000ac0)=0x2, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r8, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20040004)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r11, 0x1)
shutdown(r11, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r12 = accept4$unix(r6, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80800)
ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f0000000380))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x808, 0x44}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24004004)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5, <r14=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r14, &(0x7f0000000440)="b5cfa565162814d4a919cc35e7a5b6c5da1ccb876f52221ce30932fec1c15796741cf2358b7aec", &(0x7f0000000480)=""/251}, 0x20)

1.12778272s ago: executing program 2 (id=10871):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c00028005001600010000002404f8bcc2398dc833ae497cddcb7731408574177e4a2cb1bcbaad56ea31898b80dc4321d7b16c494004b8be710d3db004e0a64cf21e2911148295"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6bd5005e", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x68, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x0, 0x5, @broadcast}, @GTPA_PEER_ADDR6={0x0, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDR6={0x0, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_FLOW={0x6, 0x6, 0x5}, @GTPA_PEER_ADDR6={0x0, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x0, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_TID={0x0, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004091}, 0x24000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004855}, 0x24004020)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080))
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffe, @loopback, 0xff}}}, 0x108)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
r11 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r11, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c)

1.036577796s ago: executing program 2 (id=10874):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x4000)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = accept4$unix(r2, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4)
sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0xffe0}], 0x1}}], 0x1, 0x200400c0)
sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff1f, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000050248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/201, 0xc9}, 0x10020)
recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000)
bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000140)={<r11=>r10, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={r11, 0x858, 0x10}, 0xc)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)

649.477979ms ago: executing program 0 (id=10881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) (async)

590.043571ms ago: executing program 0 (id=10883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="a80000001900000829bd7000fedbdf251c808000fc00c80900250000840013000000000000000800000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000c0800000008000000000000000000000000000000090005001a000100000012d32150f589c35c39db7df477ba944cd5fc41ea2c3fe452cd15ffce39cc8ed4232435bace5af7ca903c6572a9e00326168becf446c492fd174115d39c6f465cc442c8a793b8ebfe481f2b204c40e7b0b9e9482989a3d5e771b54d3b527c30f9eeeac287f1db1799384a06455359f0cd841bbafa8b8023a6666c314962d09726b137ee232cda6c8f2c48461d89d43efea9972ff94c05ba85e26cebfcfcf4d9c8372f58f3a4ada4470c3dac21725dba3f790f14ba71"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4800) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400aa2d82090000", @ANYRES16=0x0, @ANYBLOB="0100ffffffff000000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000e493d2d1d53d899654bb1201000100000000007ec258265a05bbe2"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0x1, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
write(r10, &(0x7f0000000540)="f8a4946429fcd0ab01118d1699c804c94ba973ee36d212faaf20a86257a729e8cdca327ddb076587933028e4bdc4686cee3f90c4476ab301d3d4624c50ca69b585bd3e7c3e8fce85113f21a93ce0b336fbbf61466f8ba911b3b0648be5d4534a280f9caef67189e49197379913de8a26893e3c97b15ebf58dac068e7ecf0c59cf40fab0087ebb81626a8f7669aa47c03014d4a8e3c4cb56d96748335b72624055876ee73a45047e3bd6b3e686b9ece7087bbf42394de2fac38f690b52d81281b2e5872d509bdec8a261c4af9b2a7ba0b8a4a223086fc5d90f3646935c51a984d9e3c4feca5b0b46364f6980b70", 0xed) (async)
ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2e, 0xb, 0xb, {0x1, @sctp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e24, 0x4e24, 0x6}, {0x0, @multicast, 0xfff7, 0xe, [0x8, 0xe936]}, @sctp_ip4_spec={@private=0xa010102, @private=0xa010101, 0x4e24, 0x4e24, 0x12}, {0x0, @local, 0x0, 0x1, [0xffffffe8, 0x8]}, 0x6b, 0x2}}}) (async, rerun: 32)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0)
close(0x3)

589.195426ms ago: executing program 0 (id=10884):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000ac0)=0x2, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x36, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r10, 0x1)
shutdown(r10, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r11 = accept4$unix(r6, &(0x7f0000000200), &(0x7f0000000300)=0x6e, 0x80800)
ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f0000000380)={<r12=>0xffffffffffffffff})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="954d8d05000000000000000aaafa022c000000a356e0ed03c9cbf78998e04d1ea3d7f47e13228d63fe9d02afb4272cc7ddd1bee53f4f1e9e0cc5f7942f7096", @ANYBLOB="5ae45e596a7f457b6ddf512404aed690cf85b8f5aac93e60186fe7dcdd198b3d50b22a3747597359fb7ab2e697e23902bd1b33e74dbe9c7a8245b300af7ef0d92b18572126a40c9bcf13b0acee3c4e9d2c9a10df07b52e00b642e7d85361d3a6bd29e70db226d85f11a52f5387bb1f7aeec2469f5865b3a8d9c2fc234ab17da54127349073e0bd5c33b655e6401b22a217a70f11c470a0c334262f395be62658e59a4c5062606ad552f144ee10b486b1dc63e6", @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYRESOCT=r12], 0x2c}, 0x1, 0x0, 0x0, 0xe880}, 0x4000808)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000000300", @ANYRES32=r13, @ANYBLOB="0c0099000808000044000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24004004)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5, <r14=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r14, &(0x7f0000000440)="b5cfa565162814d4a919cc35e7a5b6c5da1ccb876f52221ce30932fec1c15796741cf2358b7aec", &(0x7f0000000480)=""/251}, 0x20)

485.961385ms ago: executing program 0 (id=10886):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
close(0x3) (async, rerun: 32)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async)
listen(r4, 0x80)
accept$netrom(r4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
read(r3, &(0x7f00000003c0)=""/123, 0x7b) (async)
getsockname$netrom(r3, 0x0, &(0x7f0000000480)) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async)
pread64(r0, 0x0, 0x0, 0xff) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00090027bd7000001000000400000004001d00070011"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (rerun: 32)

481.047912ms ago: executing program 0 (id=10887):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080002000000000800070000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="6800c98935512c16b5b3e987b37827f873f12782921a55160454940428ccb3e38e9a374fd0cbca9ed9cc8dd7de9ae460e5b276e3383c7b1d1bc7883e1f6a1d7ba615b7ebbe59b05b3b9ae5635ad9430000000000000000006603286f28679552d46f6258", @ANYRES16=r3, @ANYBLOB="000225d87000fcdbdf25020000000600060003000000080008000010000008000400ac14143f08000700", @ANYRES32=r6, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x2004091}, 0x4000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004855}, 0x24004020)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080))
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000040000040800000705000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$rfkill(r9, &(0x7f0000000080)={0x51, 0x0, 0x3, 0x3, 0xfd}, 0x8)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)

400.608718ms ago: executing program 1 (id=10888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xb460}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000240), &(0x7f0000000480)=0x4)
syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@random="5fe6f98b6b1a", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x7}}, {@llc={0x4, {@snap={0x1ab, 0xaa, 'd1', '\x00\x00@', 0x4151}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)

398.07001ms ago: executing program 1 (id=10889):
r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f0000000300)=0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r3, &(0x7f0000000380)=""/46, 0xfffffeb4)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, 0x0, 0x40004)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="010025bd700000000000070000000c00018005000200010000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x200003a, 0x10001, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x2c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061185a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000000)=0x8, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r8, 0x8b2a, &(0x7f0000000040))

210.805562ms ago: executing program 1 (id=10890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300b2b10cbedb453182436916755a8597ca70c31495925b033d2bc8f0373e6bd261f70928f1d3fddcef6961c67e2f0e61b9d3c8402f", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

205.475705ms ago: executing program 1 (id=10891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) (async)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022a017000fedbdf0400414b0d4c8ad7f9fcbbefc8b018aa5c5561dac4e430ac1c03785c138e09a9c5159eee0f6c64d23afdfe5e00c3094eb96d8ca8b13518a900000000000000000c000000b4eba04733f81da5ef2484bf024910378643c101001e7c04f81d67b85536434ada3507cd4ff1f0c1e80e30e9bf0bb082fdcf11c79ff83fabb00f8fd212f858563c48c64562296406ab2a1fd1775ebbdfc8e0a14e4c74668cf47a9806e4a1a5b97a"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 32)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000"/32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a05003c0012800e00010069703665727370616e000000280002800600030030000000140007002001000000000000000000000000000206000e0003020000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x9080) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r7, @ANYRES16=r6, @ANYBLOB="4012000000000000140012800b0001006970766c616e000004000280080005fb642b94c64a536c867f6997eed32a9bd73400638b3bfb46adf9ff7673971e325757a09e5b165c3ddf0de1c92658d54ad3c24e1e92b0f0eedf01a305d5a900ddf9c07f4d0b7f0c8364725335f1e051064f9eb8d3df7f9f9647d7924d16f5d759c857eb45801d99358280c71ff4abd26dca1051271ecc798f6a88fc59", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) (async, rerun: 64)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

140.720922ms ago: executing program 2 (id=10892):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, 0x4, 0x1}, 0x14)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, 0x0, 0xffffffffffffffff}, 0x20)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000340)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x20c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1fc, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="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"]}]}, 0x20c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

140.382524ms ago: executing program 1 (id=10893):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x9)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00e}, {0x6}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})

77.927588ms ago: executing program 2 (id=10894):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x400, 0x1, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x34, 0x49, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5d6}, {@private=0xa010100, 0x3}, {@multicast1, 0x8000}, {@broadcast, 0x2}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x401}]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=@RTM_DELMDB={0x0, 0x55, 0x800, 0x70bd2c, 0x25dfdbff, {0x7, r1}}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004091}, 0x4000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004855}, 0x24004020)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080))
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000040)=0x1c08, 0x4)

0s ago: executing program 1 (id=10895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r2 = socket$inet(0x2, 0x4000000000000001, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a05003c0012800e00010069703665727370616e000000280002800600030030000000140007002001000000000000000000000000000206000e0003020000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x9080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r6=>0x0})
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000280)={'lo\x00', 0x1800})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xfc, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @fd}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0x5, &(0x7f0000002b80)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', r6}, 0x94)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

kernel console output (not intermixed with test programs):

45069][ T6848] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  752.101971][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8887'.
[  752.166248][ T6852] netlink: 'syz.0.8888': attribute type 10 has an invalid length.
[  752.689670][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  752.867866][   T33] audit: type=1800 audit(1772586363.063:61): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8895" name="memory.events" dev="tmpfs" ino=14936 res=0 errno=0
[  752.924555][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.319651][ T6892] lo speed is unknown, defaulting to 1000
[  753.470663][ T6892] wg1 speed is unknown, defaulting to 1000
[  753.558091][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8900'.
[  753.561037][ T6899] netlink: 'syz.1.8900': attribute type 21 has an invalid length.
[  753.707330][ T6911] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  753.709682][ T6911] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  753.781917][ T6914] lo speed is unknown, defaulting to 1000
[  753.999370][ T6922] netlink: 'syz.2.8905': attribute type 10 has an invalid length.
[  754.061351][ T6914] wg1 speed is unknown, defaulting to 1000
[  754.180154][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8909'.
[  754.391158][ T6940] netlink: 'syz.0.8912': attribute type 10 has an invalid length.
[  754.490706][ T6942] netlink: 'syz.2.8913': attribute type 1 has an invalid length.
[  754.546517][ T6944] bond13: option updelay: invalid value (18446744072924056005)
[  754.550049][ T6944] bond13: option updelay: allowed values 0 - 2147483647
[  754.554428][ T6944] bond13 (unregistering): Released all slaves
[  754.801558][ T6954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  754.812305][ T6954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  755.526357][ T6977] netlink: 'syz.0.8923': attribute type 11 has an invalid length.
[  755.561320][ T6979] netlink: 'syz.2.8924': attribute type 61 has an invalid length.
[  755.718744][ T6994] netlink: 'syz.1.8928': attribute type 1 has an invalid length.
[  755.721359][ T6994] __nla_validate_parse: 5 callbacks suppressed
[  755.721369][ T6994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8928'.
[  755.868313][ T7007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  755.884821][ T7007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  755.925078][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8934'.
[  756.016819][ T7015] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  756.019685][ T7015] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  756.063986][ T7019] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  756.066338][ T7019] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  756.151272][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8937'.
[  756.632690][ T7045] lo speed is unknown, defaulting to 1000
[  756.686435][ T7046] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  756.688655][ T7046] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  756.706504][ T7043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8941'.
[  756.776692][ T7049] netlink: 'syz.1.8943': attribute type 10 has an invalid length.
[  756.781625][ T7049] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8943'.
[  756.801944][ T7045] wg1 speed is unknown, defaulting to 1000
[  756.829430][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8944'.
[  756.854498][ T7051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  756.856983][ T7051] IPv6: NLM_F_CREATE should be set when creating new route
[  757.039108][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8946'.
[  757.201836][ T7066] x_tables: duplicate underflow at hook 1
[  757.719403][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8950'.
[  757.801597][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8953'.
[  757.893095][ T7108] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  757.962757][ T7101] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8953'.
[  757.968352][ T7101] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  758.377448][ T7130] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  758.379927][ T7130] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  758.386746][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  758.419382][ T7132] netlink: 'syz.0.8958': attribute type 2 has an invalid length.
[  758.429424][ T7134] netlink: 'syz.1.8959': attribute type 1 has an invalid length.
[  758.630366][ T7156] lo speed is unknown, defaulting to 1000
[  758.936430][ T7156] wg1 speed is unknown, defaulting to 1000
[  759.014422][ T7181] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  759.017431][ T7181] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  759.348925][ T7197] netlink: 'syz.2.8973': attribute type 21 has an invalid length.
[  759.364674][ T7196] netlink: 'syz.0.8975': attribute type 1 has an invalid length.
[  759.552858][ T7209] netlink: 'syz.1.8978': attribute type 1 has an invalid length.
[  759.771058][ T7224] netlink: 'syz.2.8983': attribute type 11 has an invalid length.
[  759.884208][ T7228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  760.085485][ T7241] netlink: 'syz.2.8989': attribute type 1 has an invalid length.
[  760.487315][ T7256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  760.489851][ T7256] IPv6: NLM_F_CREATE should be set when creating new route
[  760.554205][ T7260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  760.557031][ T7260] IPv6: NLM_F_CREATE should be set when creating new route
[  760.717713][ T7277] netlink: 'syz.0.8999': attribute type 10 has an invalid length.
[  760.721925][ T7277] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  760.724157][ T7277] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  760.804824][ T7287] __nla_validate_parse: 14 callbacks suppressed
[  760.804842][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9000'.
[  760.841574][ T7287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  760.844041][ T7287] IPv6: NLM_F_CREATE should be set when creating new route
[  761.023735][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9005'.
[  761.063252][ T7310] netlink: 'syz.1.9007': attribute type 11 has an invalid length.
[  761.088453][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9009'.
[  761.091838][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9009'.
[  761.275673][ T7332] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  761.278413][ T7332] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  761.349822][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9017'.
[  761.354586][ T7343] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  761.357419][ T7343] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  761.364080][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9016'.
[  761.410444][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.427967][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.962194][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9020'.
[  761.964910][ T7354] netlink: 'syz.2.9020': attribute type 21 has an invalid length.
[  762.086855][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9021'.
[  762.296552][ T7369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  762.325631][ T7371] netlink: 'syz.2.9025': attribute type 1 has an invalid length.
[  762.328026][ T7371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9025'.
[  762.354364][ T7375] netlink: 'syz.1.9027': attribute type 10 has an invalid length.
[  762.445811][ T7385] netlink: 'syz.0.9029': attribute type 2 has an invalid length.
[  762.554230][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9034'.
[  762.561830][ T7402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  762.566759][ T7402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  762.809625][ T7416] netlink: 'syz.0.9040': attribute type 10 has an invalid length.
[  762.912311][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  763.208416][ T7424] lo speed is unknown, defaulting to 1000
[  763.492143][ T7424] wg1 speed is unknown, defaulting to 1000
[  763.626761][ T7436] netlink: 'syz.0.9046': attribute type 1 has an invalid length.
[  764.217774][ T7460] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  764.560064][ T7472] netlink: 'syz.0.9055': attribute type 11 has an invalid length.
[  764.893816][ T7483] netlink: 'syz.1.9057': attribute type 1 has an invalid length.
[  765.284478][ T7486] netlink: 'syz.2.9058': attribute type 10 has an invalid length.
[  765.565812][ T7509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.650182][ T7515] lo speed is unknown, defaulting to 1000
[  765.751924][ T7515] wg1 speed is unknown, defaulting to 1000
[  766.400369][ T7552] lo speed is unknown, defaulting to 1000
[  766.616760][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  766.649592][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  766.872444][ T7552] wg1 speed is unknown, defaulting to 1000
[  766.961408][ T7585] __nla_validate_parse: 14 callbacks suppressed
[  766.961419][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9083'.
[  767.170900][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9084'.
[  767.401185][ T7604] netlink: 'syz.1.9088': attribute type 45 has an invalid length.
[  767.448867][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9089'.
[  767.457818][ T7604] netlink: 'syz.1.9088': attribute type 10 has an invalid length.
[  767.848120][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9095'.
[  767.955516][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9097'.
[  767.960208][ T7644] netlink: 'syz.1.9097': attribute type 21 has an invalid length.
[  768.079651][ T7651] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  768.083997][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.2.9099 Not tainted syzkaller #0 PREEMPT(full) 
[  768.084042][ T7651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  768.084052][ T7651] Call Trace:
[  768.084059][ T7651]  <TASK>
[  768.084066][ T7651]  dump_stack_lvl+0xe8/0x150
[  768.084092][ T7651]  sysfs_warn_dup+0x8e/0xa0
[  768.084114][ T7651]  sysfs_do_create_link_sd+0xc0/0x110
[  768.084132][ T7651]  device_add_class_symlinks+0x1cf/0x240
[  768.084145][ T7651]  device_add+0x475/0xb70
[  768.084162][ T7651]  wiphy_register+0x1d73/0x2d50
[  768.084203][ T7651]  ? __pfx_wiphy_register+0x10/0x10
[  768.084222][ T7651]  ? __pfx_netdev_run_todo+0x10/0x10
[  768.084234][ T7651]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  768.084258][ T7651]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  768.084285][ T7651]  ieee80211_register_hw+0x3562/0x4200
[  768.084308][ T7651]  ? ieee80211_register_hw+0x1471/0x4200
[  768.084328][ T7651]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  768.084357][ T7651]  ? __hrtimer_setup+0x181/0x200
[  768.084376][ T7651]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  768.084396][ T7651]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  768.084426][ T7651]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  768.084441][ T7651]  ? kstrndup+0xbf/0x160
[  768.084469][ T7651]  hwsim_new_radio_nl+0xf35/0x1bd0
[  768.084493][ T7651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  768.084515][ T7651]  ? rcu_is_watching+0x15/0xb0
[  768.084536][ T7651]  ? trace_kmalloc+0x2a/0x110
[  768.084557][ T7651]  ? __nla_parse+0x40/0x60
[  768.084578][ T7651]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  768.084600][ T7651]  genl_family_rcv_msg_doit+0x22a/0x330
[  768.084626][ T7651]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  768.084659][ T7651]  ? bpf_lsm_capable+0x9/0x20
[  768.084678][ T7651]  ? security_capable+0x7e/0x2c0
[  768.084695][ T7651]  genl_rcv_msg+0x61c/0x7a0
[  768.084718][ T7651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  768.084739][ T7651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  768.084755][ T7651]  ? __lock_acquire+0x6b5/0x2cf0
[  768.084783][ T7651]  netlink_rcv_skb+0x232/0x4b0
[  768.084798][ T7651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  768.084816][ T7651]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  768.084848][ T7651]  ? down_read+0x272/0x2e0
[  768.084862][ T7651]  ? genl_rcv+0xd/0x40
[  768.084885][ T7651]  genl_rcv+0x28/0x40
[  768.084904][ T7651]  netlink_unicast+0x80f/0x9b0
[  768.084920][ T7651]  ? __pfx_netlink_unicast+0x10/0x10
[  768.084936][ T7651]  ? netlink_sendmsg+0x650/0xb40
[  768.084953][ T7651]  ? skb_put+0x11b/0x210
[  768.084977][ T7651]  netlink_sendmsg+0x813/0xb40
[  768.084999][ T7651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.085043][ T7651]  ? aa_sock_msg_perm+0xf1/0x1b0
[  768.085080][ T7651]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  768.085099][ T7651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.085110][ T7651]  ____sys_sendmsg+0xa68/0xad0
[  768.085129][ T7651]  ? futex_unqueue+0x211/0x240
[  768.085153][ T7651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  768.085182][ T7651]  ? import_iovec+0x73/0xa0
[  768.085205][ T7651]  ___sys_sendmsg+0x2a5/0x360
[  768.085232][ T7651]  ? __pfx____sys_sendmsg+0x10/0x10
[  768.085260][ T7651]  ? futex_wait+0x29a/0x380
[  768.085294][ T7651]  ? __fget_files+0x2a/0x420
[  768.085314][ T7651]  ? __fget_files+0x3a0/0x420
[  768.085343][ T7651]  __x64_sys_sendmsg+0x1bd/0x2a0
[  768.085365][ T7651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  768.085388][ T7651]  ? rcu_is_watching+0x15/0xb0
[  768.085419][ T7651]  do_syscall_64+0x14d/0xf80
[  768.085432][ T7651]  ? trace_irq_disable+0x3b/0x150
[  768.085449][ T7651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.085459][ T7651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.085467][ T7651] RIP: 0033:0x7f113899c799
[  768.085476][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.085483][ T7651] RSP: 002b:00007f113984c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  768.085493][ T7651] RAX: ffffffffffffffda RBX: 00007f1138c15fa0 RCX: 00007f113899c799
[  768.085498][ T7651] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  768.085504][ T7651] RBP: 00007f1138a32bd9 R08: 0000000000000000 R09: 0000000000000000
[  768.085509][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  768.085515][ T7651] R13: 00007f1138c16038 R14: 00007f1138c15fa0 R15: 00007fff7044a518
[  768.085529][ T7651]  </TASK>
[  768.318367][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9099'.
[  768.421400][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9102'.
[  768.436657][ T7661] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9102'.
[  768.439714][ T7661] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9102'.
[  768.466154][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9103'.
[  768.619040][ T7676] netlink: 'syz.1.9107': attribute type 10 has an invalid length.
[  768.666239][ T7678] netlink: 'syz.1.9108': attribute type 3 has an invalid length.
[  768.669175][ T7678] netlink: 'syz.1.9108': attribute type 1 has an invalid length.
[  768.709286][ T7678] lo speed is unknown, defaulting to 1000
[  768.845809][ T7678] wg1 speed is unknown, defaulting to 1000
[  768.959560][ T7682] netlink: 'syz.2.9109': attribute type 10 has an invalid length.
[  769.795524][ T7700] IPVS: fo: FWM 3 0x00000003 - no destination available
[  769.804155][ T7701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  769.807655][ T7701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  769.818779][ T7694] lo speed is unknown, defaulting to 1000
[  770.139332][ T7694] wg1 speed is unknown, defaulting to 1000
[  770.312463][ T7713] lo speed is unknown, defaulting to 1000
[  770.528555][ T7713] wg1 speed is unknown, defaulting to 1000
[  770.694031][ T7718] bond18: entered allmulticast mode
[  770.754403][ T7719] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  771.199288][ T7733] netlink: 'syz.1.9125': attribute type 29 has an invalid length.
[  771.406456][ T7744] netlink: 'syz.1.9128': attribute type 1 has an invalid length.
[  771.524895][ T7717] bond18: left allmulticast mode
[  772.278620][ T7762] __nla_validate_parse: 6 callbacks suppressed
[  772.278665][ T7762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9132'.
[  772.548893][ T7784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  772.551395][ T7784] IPv6: NLM_F_CREATE should be set when creating new route
[  772.574767][ T7784] netlink: 'syz.1.9138': attribute type 3 has an invalid length.
[  772.577592][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9138'.
[  772.584484][ T7785] netlink: 'syz.1.9138': attribute type 3 has an invalid length.
[  772.587771][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9138'.
[  772.634193][ T7791] netlink: 'syz.2.9139': attribute type 1 has an invalid length.
[  772.637209][ T7791] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9139'.
[  772.675533][ T7796] netlink: 'syz.0.9140': attribute type 1 has an invalid length.
[  772.677099][ T7795] pim6reg1: entered promiscuous mode
[  772.678371][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'.
[  772.680280][ T7795] pim6reg1: entered allmulticast mode
[  772.685423][ T7796] netlink: 'syz.0.9140': attribute type 11 has an invalid length.
[  772.730695][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'.
[  772.734086][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9142'.
[  772.854757][ T7803] dummy0: entered allmulticast mode
[  772.859524][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9145'.
[  772.863510][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9145'.
[  772.867482][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9145'.
[  772.965632][ T7806] batadv0: entered promiscuous mode
[  772.968454][ T7806] debugfs: 'hsr0' already exists in 'hsr'
[  772.970840][ T7806] Cannot create hsr debugfs directory
[  772.973851][ T7806] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  772.978277][ T7806] 8021q: adding VLAN 0 to HW filter on device hsr0
[  772.983478][ T7806] batadv0: left promiscuous mode
[  773.131069][ T7816] openvswitch: netlink: Flow key attribute not present in set flow.
[  773.228001][ T7818] netlink: 'syz.0.9149': attribute type 11 has an invalid length.
[  773.328746][ T7831] netlink: 'syz.0.9151': attribute type 10 has an invalid length.
[  773.680231][ T7802] dummy0: left allmulticast mode
[  773.881344][ T7857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  773.895527][ T7857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  774.248335][ T7860] netlink: 'syz.0.9161': attribute type 10 has an invalid length.
[  774.786502][ T7894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  774.789448][ T7894] IPv6: NLM_F_CREATE should be set when creating new route
[  774.823793][ T7898] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  774.827061][ T7898] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  775.008840][ T7916] lo speed is unknown, defaulting to 1000
[  775.223692][ T7916] wg1 speed is unknown, defaulting to 1000
[  775.374680][ T7936] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  775.377439][ T7936] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  775.725020][ T7956] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002
[  775.844026][ T7961] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  775.850641][ T7963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  775.853547][ T7963] IPv6: NLM_F_CREATE should be set when creating new route
[  775.856495][ T7961] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  776.334585][ T7985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  776.338177][ T7985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  776.365655][ T7987] lo speed is unknown, defaulting to 1000
[  776.594537][ T7987] wg1 speed is unknown, defaulting to 1000
[  776.977046][ T7994] netlink: 'syz.2.9196': attribute type 1 has an invalid length.
[  776.993842][    C0] ip6_tunnel: ip6gretap8 xmit: Local address not yet configured!
[  777.876125][ T8010] syzkaller1: entered promiscuous mode
[  777.877983][ T8010] syzkaller1: entered allmulticast mode
[  777.935860][ T8010] netlink: 'syz.2.9201': attribute type 11 has an invalid length.
[  778.219151][ T8020] __nla_validate_parse: 17 callbacks suppressed
[  778.219168][ T8020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9204'.
[  778.295398][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9206'.
[  778.298183][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9206'.
[  778.347151][ T8039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9209'.
[  778.365877][ T8039] netlink: 'syz.2.9209': attribute type 11 has an invalid length.
[  778.415169][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9212'.
[  778.419533][ T8041] lo speed is unknown, defaulting to 1000
[  778.427821][ T8046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  778.429958][ T8046] IPv6: NLM_F_CREATE should be set when creating new route
[  778.465974][ T8042] lo speed is unknown, defaulting to 1000
[  778.483328][ T8050] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  778.485374][ T8050] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  778.551320][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9215'.
[  778.605577][ T8059] netlink: 'syz.0.9216': attribute type 2 has an invalid length.
[  778.637777][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.657113][ T8041] wg1 speed is unknown, defaulting to 1000
[  778.696887][ T8067] sctp: [Deprecated]: syz.2.9219 (pid 8067) Use of int in max_burst socket option.
[  778.696887][ T8067] Use struct sctp_assoc_value instead
[  778.736929][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9220'.
[  778.739633][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9220'.
[  778.930492][ T8074] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  778.934444][ T8074] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  778.937519][ T8042] wg1 speed is unknown, defaulting to 1000
[  779.779044][ T8083] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9224'.
[  779.783434][ T8083] netlink: 'syz.1.9224': attribute type 11 has an invalid length.
[  779.817454][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9225'.
[  779.820864][ T8085] netlink: 'syz.2.9225': attribute type 21 has an invalid length.
[  779.982826][ T8090] sctp: [Deprecated]: syz.1.9226 (pid 8090) Use of int in max_burst socket option.
[  779.982826][ T8090] Use struct sctp_assoc_value instead
[  780.019021][ T8092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  780.019987][ T8094] netlink: 'syz.0.9227': attribute type 10 has an invalid length.
[  780.021838][ T8092] IPv6: NLM_F_CREATE should be set when creating new route
[  780.451824][ T8117] netlink: 'syz.0.9234': attribute type 21 has an invalid length.
[  780.846278][ T8129] netlink: 'syz.1.9238': attribute type 21 has an invalid length.
[  780.914208][ T8130] netlink: 'syz.1.9238': attribute type 10 has an invalid length.
[  783.842284][ T8130] `: Port device dummy0 removed
[  783.944695][ T8137] lo speed is unknown, defaulting to 1000
[  784.119917][ T8137] wg1 speed is unknown, defaulting to 1000
[  784.600312][ T8161] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004
[  784.658271][ T8161] __nla_validate_parse: 6 callbacks suppressed
[  784.658286][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9246'.
[  784.667402][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9246'.
[  784.740214][ T8172] lo speed is unknown, defaulting to 1000
[  784.916780][ T8172] wg1 speed is unknown, defaulting to 1000
[  785.189384][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9252'.
[  785.367459][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9253'.
[  785.889557][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9257'.
[  786.429623][ T8234] lo speed is unknown, defaulting to 1000
[  786.760218][ T8234] wg1 speed is unknown, defaulting to 1000
[  786.814223][ T8241] netlink: 'syz.2.9262': attribute type 1 has an invalid length.
[  786.820713][ T8241] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9262'.
[  787.026782][ T8264] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  787.034035][ T8264] netlink: 'syz.1.9266': attribute type 7 has an invalid length.
[  787.082907][ T8265] netlink: 'syz.2.9267': attribute type 8 has an invalid length.
[  787.272551][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9268'.
[  787.339611][ T8272] xt_CT: You must specify a L4 protocol and not use inversions on it
[  787.554761][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9271'.
[  787.593194][ T8278] netlink: 'syz.0.9271': attribute type 10 has an invalid length.
[  787.598615][ T8278] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9271'.
[  787.761748][ T8292] lo speed is unknown, defaulting to 1000
[  787.895348][ T8292] wg1 speed is unknown, defaulting to 1000
[  788.598810][ T8329] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  788.600847][ T8329] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  788.663429][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9287'.
[  788.666650][ T8332] netlink: 'syz.1.9287': attribute type 21 has an invalid length.
[  788.700798][ T8335] IPVS: Error connecting to the multicast addr
[  788.750499][ T8335] netlink: 'syz.0.9286': attribute type 11 has an invalid length.
[  788.827652][ T8348] netlink: 'syz.0.9292': attribute type 1 has an invalid length.
[  788.838135][ T8353] IPVS: length: 140 != 8
[  788.879418][ T8352] IPVS: Scheduler module ip_vs_sip not found
[  788.959121][ T8367] netlink: 'syz.0.9294': attribute type 11 has an invalid length.
[  788.983978][ T8357] netlink: 'syz.0.9294': attribute type 1 has an invalid length.
[  789.097344][ T8377] netlink: 'syz.2.9299': attribute type 1 has an invalid length.
[  789.138280][ T8379] lo speed is unknown, defaulting to 1000
[  789.272379][ T8379] wg1 speed is unknown, defaulting to 1000
[  789.711202][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.748979][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.778015][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.799830][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.129314][ T8439] __nla_validate_parse: 8 callbacks suppressed
[  790.129327][ T8439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9317'.
[  790.138658][ T8439] netlink: 'syz.1.9317': attribute type 11 has an invalid length.
[  790.249532][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9319'.
[  790.256078][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9319'.
[  790.456826][ T8455] netlink: 'syz.2.9321': attribute type 83 has an invalid length.
[  790.948867][ T8467] lo speed is unknown, defaulting to 1000
[  791.085277][ T8467] wg1 speed is unknown, defaulting to 1000
[  791.220924][ T8468] netlink: 'syz.0.9325': attribute type 1 has an invalid length.
[  791.541062][ T8485] sctp: [Deprecated]: syz.0.9330 (pid 8485) Use of int in max_burst socket option.
[  791.541062][ T8485] Use struct sctp_assoc_value instead
[  791.816418][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9333'.
[  791.830208][ T8503] validate_nla: 1 callbacks suppressed
[  791.830223][ T8503] netlink: 'syz.2.9334': attribute type 3 has an invalid length.
[  791.850091][ T8502] netlink: 'syz.2.9334': attribute type 3 has an invalid length.
[  791.999212][ T8508] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9336'.
[  792.004454][ T8508] x_tables: duplicate underflow at hook 1
[  792.140612][ T8519] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  792.149118][ T8519] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  792.172951][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'.
[  792.208347][ T8523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  792.228490][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9341'.
[  792.257706][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[  792.260993][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9343'.
[  792.364510][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  792.409215][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9348'.
[  792.514750][ T8554] lo speed is unknown, defaulting to 1000
[  792.717519][ T8554] wg1 speed is unknown, defaulting to 1000
[  792.729776][ T8562] netlink: 'syz.0.9352': attribute type 11 has an invalid length.
[  793.051216][ T8586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  793.061458][ T8586] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  793.138514][ T8589] netlink: 'syz.0.9359': attribute type 150 has an invalid length.
[  793.717620][ T8600] netlink: 'syz.2.9361': attribute type 1 has an invalid length.
[  793.964783][ T8603] lo speed is unknown, defaulting to 1000
[  793.987387][ T8605] netlink: 'syz.0.9363': attribute type 11 has an invalid length.
[  794.001418][ T8609] netlink: 'syz.1.9362': attribute type 11 has an invalid length.
[  794.086343][ T8611] lo speed is unknown, defaulting to 1000
[  794.154162][ T8603] wg1 speed is unknown, defaulting to 1000
[  794.460045][ T8611] wg1 speed is unknown, defaulting to 1000
[  795.496879][ T8664] netlink: 'syz.2.9378': attribute type 10 has an invalid length.
[  795.520509][ T8666] __nla_validate_parse: 7 callbacks suppressed
[  795.520526][ T8666] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9376'.
[  795.528273][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9376'.
[  795.537487][ T8660] netlink: 'syz.0.9377': attribute type 11 has an invalid length.
[  795.617510][ T8672] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  796.181972][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9388'.
[  796.186315][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9387'.
[  796.196436][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9387'.
[  796.203245][ T8706] xt_hashlimit: size too large, truncated to 1048576
[  796.203247][ T8710] xt_hashlimit: size too large, truncated to 1048576
[  796.301711][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9390'.
[  796.338831][ T8717] 8021q: adding VLAN 0 to HW filter on device bond13
[  796.349116][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9390'.
[  796.349139][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9390'.
[  796.351876][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9390'.
[  796.354415][ T8718] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.356620][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9390'.
[  796.371196][ T8718] bond13: (slave bond0): making interface the new active one
[  796.375952][ T8718] bond13: (slave bond0): Enslaving as an active interface with an up link
[  796.378939][ T8718] netlink: 'syz.0.9390': attribute type 4 has an invalid length.
[  796.395762][ T8718] .`: renamed from bond0
[  796.443302][   T12] bond13: (slave .`): link status definitely down, disabling slave
[  796.446293][   T12] bond13: now running without any active interface!
[  796.578676][ T8734] netlink: 'syz.0.9394': attribute type 21 has an invalid length.
[  796.627956][ T8737] lo speed is unknown, defaulting to 1000
[  796.811409][ T8737] wg1 speed is unknown, defaulting to 1000
[  796.813634][ T8745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  796.815725][ T8745] IPv6: NLM_F_CREATE should be set when creating new route
[  797.217167][ T8766] netlink: 'syz.0.9400': attribute type 11 has an invalid length.
[  797.421887][ T8771] netlink: 'syz.0.9404': attribute type 10 has an invalid length.
[  797.751704][ T8792] netlink: 'syz.0.9408': attribute type 10 has an invalid length.
[  797.757052][ T8792] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  797.759403][ T8792] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  797.874339][ T8803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  797.877094][ T8803] IPv6: NLM_F_CREATE should be set when creating new route
[  797.945716][ T8809] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  797.948373][ T8809] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  797.953993][ T8807] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.957404][ T8807] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.996258][ T8807] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.001395][ T8807] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.014400][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.027170][ T8807] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.030255][ T8807] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.045036][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.069269][ T8807] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.073368][ T8807] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.252182][T28877] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  798.254922][T28877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  798.263106][T28877] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  798.265641][T28877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  798.275779][T28877] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  798.278240][T28877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  798.283959][   T33] audit: type=1800 audit(1772586408.483:62): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9416" name="memory.events" dev="tmpfs" ino=15663 res=0 errno=0
[  798.290512][T28877] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  798.293899][T28877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.366769][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.648590][ T8820] netlink: 'syz.0.9418': attribute type 11 has an invalid length.
[  798.795546][ T8835] netlink: 'syz.0.9421': attribute type 21 has an invalid length.
[  799.742393][ T8850] block nbd5: server does not support multiple connections per device.
[  799.748049][ T8850] block nbd5: shutting down sockets
[  799.759709][ T8850] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  799.763703][ T8850] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  800.387229][ T8863] netlink: 'syz.2.9430': attribute type 11 has an invalid length.
[  800.518434][ T8869] netlink: 'syz.2.9432': attribute type 29 has an invalid length.
[  800.524901][ T8869] netlink: 'syz.2.9432': attribute type 3 has an invalid length.
[  800.529295][ T8869] __nla_validate_parse: 13 callbacks suppressed
[  800.529306][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9432'.
[  800.551616][ T8871] lo speed is unknown, defaulting to 1000
[  800.674649][ T8871] wg1 speed is unknown, defaulting to 1000
[  800.839901][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9435'.
[  800.903659][ T8887] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9436'.
[  800.908741][ T8887] ieee802154 phy1 wpan1: encryption failed: -22
[  800.917397][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9436'.
[  800.997267][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9437'.
[  801.000535][ T8890] netlink: 'syz.1.9437': attribute type 21 has an invalid length.
[  801.435225][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9442'.
[  801.436586][ T8901] tipc: Resetting bearer <eth:xfrm0>
[  801.438256][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9442'.
[  801.442847][ T8905] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9443'.
[  801.463254][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9442'.
[  801.490744][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9444'.
[  801.833662][ T8939] netlink: 'syz.0.9452': attribute type 3 has an invalid length.
[  801.979867][ T8952] netlink: 'syz.2.9455': attribute type 11 has an invalid length.
[  802.346012][ T8980] netlink: 'syz.2.9464': attribute type 11 has an invalid length.
[  802.416383][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  802.427645][ T8983] netlink: 'syz.1.9465': attribute type 11 has an invalid length.
[  802.516387][ T8993] netlink: 'syz.1.9467': attribute type 21 has an invalid length.
[  802.889736][ T9002] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  802.969422][ T9004] lo speed is unknown, defaulting to 1000
[  803.127543][ T9004] wg1 speed is unknown, defaulting to 1000
[  803.398631][ T9009] netlink: 'syz.2.9473': attribute type 10 has an invalid length.
[  803.671207][ T9019] tipc: Enabling of bearer <eth:vlan0> rejected, max 3 bearers permitted
[  803.687219][ T9019] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  803.689941][ T9019] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  803.695533][ T9019] netlink: 'syz.2.9475': attribute type 61 has an invalid length.
[  803.804780][ T9023] netlink: 'syz.0.9477': attribute type 21 has an invalid length.
[  803.940019][ T9036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  803.949637][ T9036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  804.167392][ T9048] netlink: 'syz.0.9482': attribute type 11 has an invalid length.
[  804.298610][ T9067] netlink: 'syz.2.9486': attribute type 1 has an invalid length.
[  804.463095][ T9078] netlink: 'syz.2.9489': attribute type 6 has an invalid length.
[  804.465520][ T9078] netlink: 'syz.2.9489': attribute type 6 has an invalid length.
[  804.465827][ T9079] netlink: 'syz.0.9490': attribute type 21 has an invalid length.
[  804.469071][ T9080] netlink: 'syz.2.9489': attribute type 21 has an invalid length.
[  804.471275][ T9079] netlink: 'syz.0.9490': attribute type 21 has an invalid length.
[  804.706701][   T55] block nbd5: Receive control failed (result -32)
[  804.760336][ T9098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  804.762765][ T9098] IPv6: NLM_F_CREATE should be set when creating new route
[  804.797468][ T9100] netlink: 'syz.2.9495': attribute type 11 has an invalid length.
[  804.848296][ T9103] lo speed is unknown, defaulting to 1000
[  804.851456][ T9102] lo speed is unknown, defaulting to 1000
[  804.950576][ T9103] wg1 speed is unknown, defaulting to 1000
[  805.108682][ T9102] wg1 speed is unknown, defaulting to 1000
[  806.324780][ T9117] __nla_validate_parse: 23 callbacks suppressed
[  806.324797][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9499'.
[  806.370479][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9500'.
[  806.739323][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9507'.
[  806.766154][ T9146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  806.768927][ T9146] IPv6: NLM_F_CREATE should be set when creating new route
[  806.956002][ T9161] lo speed is unknown, defaulting to 1000
[  807.232873][ T9161] wg1 speed is unknown, defaulting to 1000
[  807.570919][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9519'.
[  807.584307][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9519'.
[  807.806036][ T9210] lo speed is unknown, defaulting to 1000
[  807.855356][ T9216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9521'.
[  807.950100][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9524'.
[  808.063116][ T9214] lo speed is unknown, defaulting to 1000
[  808.233355][ T9210] wg1 speed is unknown, defaulting to 1000
[  808.369836][ T9234] macsec3: entered allmulticast mode
[  808.371867][ T9234] veth1: entered allmulticast mode
[  808.381128][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9527'.
[  808.547343][ T9214] wg1 speed is unknown, defaulting to 1000
[  808.710100][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9530'.
[  809.008121][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9535'.
[  809.234478][ T9263] pim6reg1: entered promiscuous mode
[  809.236556][ T9263] pim6reg1: entered allmulticast mode
[  809.509748][ T9286] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  809.512513][ T9286] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  809.726315][ T9295] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  809.845044][ T9308] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  809.851988][ T9308] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  809.885631][ T9313] syzkaller1: entered promiscuous mode
[  809.887321][ T9313] syzkaller1: entered allmulticast mode
[  809.890319][ T9315] x_tables: ip6_tables: mh match: only valid for protocol 135
[  810.089912][ T9332] lo speed is unknown, defaulting to 1000
[  810.306218][ T9332] wg1 speed is unknown, defaulting to 1000
[  810.384167][ T9343] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  810.391834][ T9343] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  810.412956][ T9343] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  810.421620][ T9343] validate_nla: 2 callbacks suppressed
[  810.421634][ T9343] netlink: 'syz.2.9556': attribute type 29 has an invalid length.
[  810.818077][ T9355] netlink: 'syz.0.9559': attribute type 1 has an invalid length.
[  811.027078][ T9371] netlink: 'syz.1.9563': attribute type 1 has an invalid length.
[  811.504348][ T9381] __nla_validate_parse: 7 callbacks suppressed
[  811.504366][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9565'.
[  811.515010][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9565'.
[  811.903735][ T9383] lo speed is unknown, defaulting to 1000
[  811.930325][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9566'.
[  812.054320][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9568'.
[  812.057545][ T9397] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9568'.
[  812.120116][ T9383] wg1 speed is unknown, defaulting to 1000
[  812.316441][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9571'.
[  812.319355][ T9410] netlink: 'syz.2.9571': attribute type 21 has an invalid length.
[  812.609790][ T9434] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  812.611963][ T9434] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  812.687162][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'.
[  812.692754][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'.
[  812.696247][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'.
[  812.699479][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9578'.
[  812.721473][ T9440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  812.725114][ T9440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  812.996976][ T9447] netlink: 'syz.0.9583': attribute type 11 has an invalid length.
[  813.065185][ T9451] lo speed is unknown, defaulting to 1000
[  813.218424][ T9451] wg1 speed is unknown, defaulting to 1000
[  813.549493][ T9465] bond0: option all_slaves_active: invalid value (8)
[  814.080503][ T9493] netlink: 'syz.1.9596': attribute type 11 has an invalid length.
[  814.110512][ T9495] lo speed is unknown, defaulting to 1000
[  814.120243][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  814.265435][ T9495] wg1 speed is unknown, defaulting to 1000
[  815.267251][ T9548] lo speed is unknown, defaulting to 1000
[  815.285481][ T9558] netlink: 'syz.0.9611': attribute type 21 has an invalid length.
[  815.386892][ T9564] netlink: 'syz.1.9613': attribute type 11 has an invalid length.
[  815.473446][ T9548] wg1 speed is unknown, defaulting to 1000
[  815.561000][ T9568] netlink: 'syz.0.9615': attribute type 21 has an invalid length.
[  815.695660][ T9574] lo speed is unknown, defaulting to 1000
[  815.992989][ T9574] wg1 speed is unknown, defaulting to 1000
[  816.012806][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  817.205811][ T9621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  817.209675][ T9621] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  817.298861][ T9626] __nla_validate_parse: 48 callbacks suppressed
[  817.298879][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9627'.
[  817.304981][ T9626] netlink: 'syz.0.9627': attribute type 21 has an invalid length.
[  817.408186][ T9630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9628'.
[  817.545324][ T9632] xt_bpf: check failed: parse error
[  817.619749][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9631'.
[  817.622909][ T9639] netem: incorrect ge model size
[  817.624898][ T9639] netem: change failed
[  817.719137][ T9641] netlink: 'syz.1.9632': attribute type 11 has an invalid length.
[  818.227611][ T9671] netlink: 'syz.0.9638': attribute type 10 has an invalid length.
[  818.230749][ T9671] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9638'.
[  818.284447][ T9676] netlink: 'syz.0.9640': attribute type 238 has an invalid length.
[  818.371707][ T9685] netlink: 'syz.0.9642': attribute type 7 has an invalid length.
[  818.374373][ T9685] netlink: 'syz.0.9642': attribute type 8 has an invalid length.
[  818.376899][ T9685] netlink: 'syz.0.9642': attribute type 9 has an invalid length.
[  818.470585][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9643'.
[  818.474786][ T9687] netlink: 'syz.0.9643': attribute type 29 has an invalid length.
[  818.477763][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9643'.
[  819.076712][ T9698] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  819.080169][ T9698] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  819.411385][ T9702] netlink: 'syz.0.9647': attribute type 10 has an invalid length.
[  819.709388][ T9723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  819.715815][ T9722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.021291][ T9732] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  820.264385][ T9737] netlink: 'syz.0.9655': attribute type 11 has an invalid length.
[  820.898332][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9657'.
[  820.950844][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9658'.
[  820.955543][ T9750] netlink: 'syz.1.9658': attribute type 21 has an invalid length.
[  821.310694][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9662'.
[  821.330511][ T9760] bond0: left promiscuous mode
[  821.333169][ T9760] erspan1: left promiscuous mode
[  821.336872][ T9760] bond0: left allmulticast mode
[  821.357937][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9663'.
[  821.369137][ T9762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  821.371529][ T9762] IPv6: NLM_F_CREATE should be set when creating new route
[  821.496981][ T9783] netlink: 'syz.2.9669': attribute type 1 has an invalid length.
[  821.519281][ T9784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  821.753904][ T9796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  822.303638][ T9808] __nla_validate_parse: 1 callbacks suppressed
[  822.303655][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9676'.
[  822.316010][ T9808] netlink: 'syz.1.9676': attribute type 83 has an invalid length.
[  822.389013][ T9810] netlink: 'syz.2.9678': attribute type 5 has an invalid length.
[  822.442848][ T9820] netlink: 'syz.2.9679': attribute type 11 has an invalid length.
[  822.463094][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9677'.
[  822.511988][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.525765][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.531192][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.538226][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.543278][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.547206][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.551014][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.555977][ T9827] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9680'.
[  822.699192][ T9834] bond0: Error: Cannot enslave bond to itself.
[  822.751758][ T9834] IPVS: set_ctl: invalid protocol: 30446 10.1.1.0:20001
[  822.784808][ T9840] netlink: 'syz.1.9685': attribute type 21 has an invalid length.
[  822.823470][ T9842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  822.828008][ T9842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  822.891945][ T9848] netlink: 'syz.2.9688': attribute type 62 has an invalid length.
[  822.944421][ T9853] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  823.020153][ T9860] x_tables: unsorted underflow at hook 4
[  823.825734][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  824.052439][   T33] audit: type=1800 audit(1772586434.253:63): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9702" name="memory.events" dev="tmpfs" ino=16215 res=0 errno=0
[  824.115523][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  824.365058][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  824.782003][ T9927] lo speed is unknown, defaulting to 1000
[  824.832910][ T9931] lo speed is unknown, defaulting to 1000
[  824.950826][ T9927] wg1 speed is unknown, defaulting to 1000
[  825.008692][ T9945] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  825.141889][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  825.240643][ T9931] wg1 speed is unknown, defaulting to 1000
[  826.056738][ T9971] netlink: 'syz.1.9717': attribute type 11 has an invalid length.
[  826.279786][ T9994] lo speed is unknown, defaulting to 1000
[  826.296051][ T9995] lo speed is unknown, defaulting to 1000
[  826.438307][T10005] netlink: 'syz.0.9727': attribute type 1 has an invalid length.
[  826.524107][ T9994] wg1 speed is unknown, defaulting to 1000
[  826.531869][T10008] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  826.542295][T10008] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  826.552844][T10008] netlink: 'syz.0.9728': attribute type 4 has an invalid length.
[  826.555671][T10008] netlink: 'syz.0.9728': attribute type 4 has an invalid length.
[  826.616222][T10012] netlink: 'syz.2.9729': attribute type 10 has an invalid length.
[  826.835794][ T9995] wg1 speed is unknown, defaulting to 1000
[  826.950250][T10026] lo speed is unknown, defaulting to 1000
[  827.167350][T10026] wg1 speed is unknown, defaulting to 1000
[  827.787048][T10039] __nla_validate_parse: 42 callbacks suppressed
[  827.787063][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9736'.
[  828.151533][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9738'.
[  828.153789][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9739'.
[  828.159936][T10049] netlink: 'syz.1.9739': attribute type 21 has an invalid length.
[  828.170877][T10047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  828.173793][T10047] IPv6: NLM_F_CREATE should be set when creating new route
[  828.236707][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9740'.
[  828.264920][T10052] netlink: 'syz.0.9741': attribute type 11 has an invalid length.
[  828.332370][T10061] netlink: 'syz.0.9744': attribute type 10 has an invalid length.
[  828.335896][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9744'.
[  828.349303][T10058] rdma_op ffff88810944f1f0 conn xmit_rdma 0000000000000000
[  828.362661][T10058] rdma_op ffff88801d1b21f0 conn xmit_rdma 0000000000000000
[  828.365355][T10058] rdma_op ffff88801d1b51f0 conn xmit_rdma 0000000000000000
[  828.367963][T10058] rdma_op ffff8881110c81f0 conn xmit_rdma 0000000000000000
[  828.371738][T10058] rdma_op ffff88810de9d9f0 conn xmit_rdma 0000000000000000
[  828.394862][T10056] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  828.418432][T10066] netlink: 'syz.0.9745': attribute type 21 has an invalid length.
[  828.468420][T10070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  828.471418][T10070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  828.684908][T10078] netlink: 'syz.2.9748': attribute type 11 has an invalid length.
[  828.735741][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9749'.
[  828.758862][T10080] sit0: Caught tx_queue_len zero misconfig
[  829.307931][T10087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  829.311727][T10087] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  829.315650][T10087] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  829.437955][T10096] netlink: 300 bytes leftover after parsing attributes in process `syz.0.9754'.
[  829.441604][T10096] netlink: 6016 bytes leftover after parsing attributes in process `syz.0.9754'.
[  829.638861][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9755'.
[  829.642687][T10098] netlink: 'syz.0.9755': attribute type 21 has an invalid length.
[  829.743082][T10102] netlink: 'syz.2.9756': attribute type 27 has an invalid length.
[  829.967242][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9757'.
[  830.087993][T10111] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  830.090703][T10111] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  830.359297][T10113] netlink: 'syz.1.9759': attribute type 10 has an invalid length.
[  830.554831][T10133] netlink: 'syz.0.9763': attribute type 11 has an invalid length.
[  830.704287][T10139] netlink: 'syz.0.9766': attribute type 11 has an invalid length.
[  830.840086][T10148] netlink: 'syz.1.9769': attribute type 11 has an invalid length.
[  831.957438][T10233] netlink: 'syz.0.9792': attribute type 11 has an invalid length.
[  832.580018][T10263] validate_nla: 3 callbacks suppressed
[  832.580035][T10263] netlink: 'syz.2.9801': attribute type 10 has an invalid length.
[  832.814851][T10274] __nla_validate_parse: 13 callbacks suppressed
[  832.814870][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9805'.
[  832.820849][T10274] netlink: 'syz.1.9805': attribute type 21 has an invalid length.
[  833.156125][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9808'.
[  833.159645][T10285] netlink: 'syz.0.9808': attribute type 21 has an invalid length.
[  833.169631][T10285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9808'.
[  833.621639][T10288] lo speed is unknown, defaulting to 1000
[  833.694361][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9810'.
[  833.711982][T10294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  833.715420][T10294] IPv6: NLM_F_CREATE should be set when creating new route
[  833.763793][T10288] wg1 speed is unknown, defaulting to 1000
[  833.783705][T10296] lo speed is unknown, defaulting to 1000
[  833.945009][T10296] wg1 speed is unknown, defaulting to 1000
[  834.132585][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9812'.
[  834.135681][T10300] netlink: 'syz.0.9812': attribute type 21 has an invalid length.
[  834.377896][T10308] netlink: 'syz.1.9814': attribute type 10 has an invalid length.
[  834.398466][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9813'.
[  834.583254][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9815'.
[  834.972877][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9822'.
[  835.116000][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9828'.
[  835.120090][T10349] netlink: 'syz.1.9828': attribute type 21 has an invalid length.
[  835.123480][T10345] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  835.125673][T10345] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  835.152676][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9829'.
[  835.228063][T10358] netlink: 'syz.2.9832': attribute type 1 has an invalid length.
[  835.231047][T10358] netlink: 'syz.2.9832': attribute type 4 has an invalid length.
[  835.237360][T10361] netlink: 'syz.0.9833': attribute type 10 has an invalid length.
[  835.298989][T10363] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  835.303456][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.0.9834 Not tainted syzkaller #0 PREEMPT(full) 
[  835.303477][T10363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  835.303488][T10363] Call Trace:
[  835.303494][T10363]  <TASK>
[  835.303502][T10363]  dump_stack_lvl+0xe8/0x150
[  835.303530][T10363]  sysfs_warn_dup+0x8e/0xa0
[  835.303554][T10363]  sysfs_do_create_link_sd+0xc0/0x110
[  835.303576][T10363]  device_add_class_symlinks+0x1cf/0x240
[  835.303596][T10363]  device_add+0x475/0xb70
[  835.303614][T10363]  wiphy_register+0x1d73/0x2d50
[  835.303654][T10363]  ? __pfx_wiphy_register+0x10/0x10
[  835.303675][T10363]  ? __pfx_netdev_run_todo+0x10/0x10
[  835.303692][T10363]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  835.303715][T10363]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  835.303743][T10363]  ieee80211_register_hw+0x3562/0x4200
[  835.303770][T10363]  ? ieee80211_register_hw+0x1471/0x4200
[  835.303794][T10363]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  835.303822][T10363]  ? __hrtimer_setup+0x181/0x200
[  835.303840][T10363]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  835.303859][T10363]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  835.303896][T10363]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  835.303910][T10363]  ? kstrndup+0xbf/0x160
[  835.303936][T10363]  hwsim_new_radio_nl+0xf35/0x1bd0
[  835.303968][T10363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  835.303991][T10363]  ? rcu_is_watching+0x15/0xb0
[  835.304039][T10363]  ? trace_kmalloc+0x2a/0x110
[  835.304061][T10363]  ? __nla_parse+0x40/0x60
[  835.304089][T10363]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  835.304119][T10363]  genl_family_rcv_msg_doit+0x22a/0x330
[  835.304147][T10363]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  835.304178][T10363]  ? bpf_lsm_capable+0x9/0x20
[  835.304197][T10363]  ? security_capable+0x7e/0x2c0
[  835.304219][T10363]  genl_rcv_msg+0x61c/0x7a0
[  835.304246][T10363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  835.304265][T10363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  835.304279][T10363]  ? __lock_acquire+0x6b5/0x2cf0
[  835.304307][T10363]  netlink_rcv_skb+0x232/0x4b0
[  835.304326][T10363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  835.304348][T10363]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  835.304380][T10363]  ? down_read+0x272/0x2e0
[  835.304394][T10363]  ? genl_rcv+0xd/0x40
[  835.304415][T10363]  genl_rcv+0x28/0x40
[  835.304433][T10363]  netlink_unicast+0x80f/0x9b0
[  835.304456][T10363]  ? __pfx_netlink_unicast+0x10/0x10
[  835.304474][T10363]  ? netlink_sendmsg+0x650/0xb40
[  835.304490][T10363]  ? skb_put+0x11b/0x210
[  835.304513][T10363]  netlink_sendmsg+0x813/0xb40
[  835.304538][T10363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.304558][T10363]  ? aa_sock_msg_perm+0xf1/0x1b0
[  835.304577][T10363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  835.304594][T10363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.304611][T10363]  ____sys_sendmsg+0xa68/0xad0
[  835.304639][T10363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  835.304674][T10363]  ? import_iovec+0x73/0xa0
[  835.304699][T10363]  ___sys_sendmsg+0x2a5/0x360
[  835.304726][T10363]  ? __pfx____sys_sendmsg+0x10/0x10
[  835.304752][T10363]  ? futex_wake+0x4ac/0x580
[  835.304794][T10363]  ? __fget_files+0x2a/0x420
[  835.304814][T10363]  ? __fget_files+0x3a0/0x420
[  835.304841][T10363]  __x64_sys_sendmsg+0x1bd/0x2a0
[  835.304865][T10363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  835.304893][T10363]  ? rcu_is_watching+0x15/0xb0
[  835.304923][T10363]  do_syscall_64+0x14d/0xf80
[  835.304935][T10363]  ? trace_irq_disable+0x3b/0x150
[  835.304956][T10363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.304974][T10363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.304989][T10363] RIP: 0033:0x7f036239c799
[  835.305033][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.305047][T10363] RSP: 002b:00007f03605f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.305065][T10363] RAX: ffffffffffffffda RBX: 00007f0362615fa0 RCX: 00007f036239c799
[  835.305077][T10363] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  835.305087][T10363] RBP: 00007f0362432bd9 R08: 0000000000000000 R09: 0000000000000000
[  835.305097][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.305105][T10363] R13: 00007f0362616038 R14: 00007f0362615fa0 R15: 00007ffd1ed44a18
[  835.305131][T10363]  </TASK>
[  835.636902][T10376] syzkaller1: entered promiscuous mode
[  835.638966][T10376] syzkaller1: entered allmulticast mode
[  835.833286][T10384] lo speed is unknown, defaulting to 1000
[  836.010797][T10384] wg1 speed is unknown, defaulting to 1000
[  836.566284][T10389] lo speed is unknown, defaulting to 1000
[  836.761940][T10404] netlink: 'syz.1.9844': attribute type 11 has an invalid length.
[  836.825403][T10389] wg1 speed is unknown, defaulting to 1000
[  837.743906][T10432] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  837.747197][T10432] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  837.804340][T10438] netlink: 'syz.0.9853': attribute type 10 has an invalid length.
[  837.907833][T10445] __nla_validate_parse: 7 callbacks suppressed
[  837.907848][T10445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9855'.
[  838.676344][T10453] netlink: 'syz.1.9857': attribute type 11 has an invalid length.
[  838.768037][T10460] openvswitch: netlink: Missing key (keys=40, expected=80)
[  838.780457][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  838.800419][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  838.903460][T10472] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  838.907739][T10472] bond0 (unregistering): Released all slaves
[  839.032571][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9862'.
[  839.041115][T10482] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  839.044704][T10482] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  839.200264][T10486] netlink: 'syz.0.9863': attribute type 10 has an invalid length.
[  839.247429][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9864'.
[  839.250570][T10488] netlink: 'syz.0.9864': attribute type 21 has an invalid length.
[  839.722464][    C0] ip6_tunnel: ip6gretap8 xmit: Local address not yet configured!
[  839.895818][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9867'.
[  839.899271][T10500] netlink: 'syz.2.9867': attribute type 21 has an invalid length.
[  839.911788][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9867'.
[  839.918442][T10500] netlink: 'syz.2.9867': attribute type 21 has an invalid length.
[  839.923006][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9867'.
[  839.926847][T10500] netlink: 'syz.2.9867': attribute type 21 has an invalid length.
[  839.969338][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9868'.
[  839.975513][T10505] netlink: 'syz.2.9868': attribute type 1 has an invalid length.
[  839.978628][T10505] netlink: 'syz.2.9868': attribute type 1 has an invalid length.
[  839.981667][T10505] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9868'.
[  839.998998][T10505] netlink: 530 bytes leftover after parsing attributes in process `syz.2.9868'.
[  840.191148][T10518] tls_set_device_offload: netdev not found
[  840.296554][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9872'.
[  840.300472][T10528] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  840.305137][T10528] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  840.448198][T10545] netlink: 'syz.2.9876': attribute type 21 has an invalid length.
[  840.451671][T10546] netlink: 'syz.2.9876': attribute type 21 has an invalid length.
[  841.178154][T10584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.180438][T10584] IPv6: NLM_F_CREATE should be set when creating new route
[  841.354233][T10599] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  841.356581][T10599] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  841.741640][T10619] openvswitch: netlink: Missing key (keys=40, expected=80)
[  841.891929][T10616] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  841.895353][T10616] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  842.174349][  T870] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  842.320162][T10648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  842.322858][T10648] IPv6: NLM_F_CREATE should be set when creating new route
[  842.328079][T10652] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  842.331969][T10652] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  842.912944][  T870] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  842.980403][T10693] validate_nla: 7 callbacks suppressed
[  842.980426][T10693] netlink: 'syz.0.9916': attribute type 10 has an invalid length.
[  843.108279][T10697] can: request_module (can-proto-4) failed.
[  843.130537][T10697] __nla_validate_parse: 21 callbacks suppressed
[  843.130555][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9917'.
[  843.154721][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9919'.
[  843.177393][T10701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  843.180050][T10701] IPv6: NLM_F_CREATE should be set when creating new route
[  843.215347][T10703] lo speed is unknown, defaulting to 1000
[  843.398361][T10703] wg1 speed is unknown, defaulting to 1000
[  844.058757][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9930'.
[  844.061968][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9930'.
[  844.583133][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9934'.
[  844.743674][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9937'.
[  844.758409][T10772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.761208][T10772] IPv6: NLM_F_CREATE should be set when creating new route
[  844.802135][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9939'.
[  844.806103][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9939'.
[  844.809618][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9939'.
[  844.814357][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9939'.
[  844.959077][T10791] netlink: 'syz.1.9943': attribute type 1 has an invalid length.
[  844.961559][T10790] netlink: 'syz.1.9943': attribute type 1 has an invalid length.
[  845.656612][T10819] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  845.660344][T10819] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  845.885200][T10829] netlink: 'syz.0.9954': attribute type 11 has an invalid length.
[  845.891373][T10831] syzkaller1: entered promiscuous mode
[  845.895369][T10831] syzkaller1: entered allmulticast mode
[  846.075398][T10844] syz_tun: entered allmulticast mode
[  846.134283][T10847] tipc: Enabled bearer <udp:s>, priority 6
[  846.467707][   T33] audit: type=1800 audit(1772586456.663:64): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9960" name="memory.events" dev="tmpfs" ino=16698 res=0 errno=0
[  846.599925][T10863] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  846.754674][T10874] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  846.843457][T10881] rdma_rxe: rxe_newlink: failed to add lo
[  846.907943][T10843] syz_tun: left allmulticast mode
[  847.325913][T10920] netlink: 'syz.1.9981': attribute type 21 has an invalid length.
[  847.453629][T10925] openvswitch: netlink: IP tunnel TTL not specified.
[  847.505072][T10929] netlink: 'syz.1.9985': attribute type 1 has an invalid length.
[  847.844184][T10951] netlink: 'syz.2.9991': attribute type 10 has an invalid length.
[  847.908705][T10958] netlink: 'syz.1.9993': attribute type 61 has an invalid length.
[  847.911768][T10958] netlink: 'syz.1.9993': attribute type 63 has an invalid length.
[  847.914717][T10960] netlink: 'syz.0.9994': attribute type 21 has an invalid length.
[  847.998288][T10967] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  848.008199][T10967] netlink: 'syz.2.9997': attribute type 10 has an invalid length.
[  848.781123][T10989] lo speed is unknown, defaulting to 1000
[  848.842233][T10994] __nla_validate_parse: 100 callbacks suppressed
[  848.842246][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10003'.
[  848.846590][T10995] Unsupported ieee802154 address type: 0
[  848.850320][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10003'.
[  848.904900][T10999] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  848.908016][T10999] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  848.954527][T10989] wg1 speed is unknown, defaulting to 1000
[  849.286808][T11012] netlink: 'syz.2.10006': attribute type 11 has an invalid length.
[  849.981994][T11034] netlink: 'syz.0.10012': attribute type 11 has an invalid length.
[  850.037917][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10014'.
[  850.303942][T11053] netlink: 'syz.0.10018': attribute type 11 has an invalid length.
[  850.315075][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10019'.
[  850.319173][T11055] netlink: 'syz.2.10019': attribute type 21 has an invalid length.
[  850.330001][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10019'.
[  850.421093][T11060] netlink: 'syz.0.10021': attribute type 10 has an invalid length.
[  850.520021][T11065] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  850.959009][T11081] netlink: 'syz.1.10029': attribute type 1 has an invalid length.
[  850.961788][T11081] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10029'.
[  850.966145][T11081] netlink: 658 bytes leftover after parsing attributes in process `syz.1.10029'.
[  850.969449][T11081] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10029'.
[  851.056534][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10030'.
[  851.059942][T11085] netlink: 'syz.1.10030': attribute type 21 has an invalid length.
[  851.160442][T11087] netlink: 'syz.1.10031': attribute type 10 has an invalid length.
[  851.320050][T11098] lo speed is unknown, defaulting to 1000
[  851.417252][T11098] wg1 speed is unknown, defaulting to 1000
[  851.436307][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10036'.
[  851.448421][T11107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  851.450825][T11107] IPv6: NLM_F_CREATE should be set when creating new route
[  851.488898][T11109] netlink: 'syz.0.10037': attribute type 1 has an invalid length.
[  851.718631][T11124] netlink: 'syz.2.10040': attribute type 11 has an invalid length.
[  852.179974][T11155] netlink: 'syz.1.10048': attribute type 21 has an invalid length.
[  852.459583][T11167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  852.461975][T11167] IPv6: NLM_F_CREATE should be set when creating new route
[  852.566941][T11183] netlink: 'syz.1.10055': attribute type 5 has an invalid length.
[  852.606358][T11185] netlink: 'syz.0.10056': attribute type 11 has an invalid length.
[  852.657522][T11187] netlink: 'syz.0.10057': attribute type 10 has an invalid length.
[  852.757295][T11192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  853.115565][T11215] netlink: 'syz.2.10064': attribute type 11 has an invalid length.
[  853.309318][T11225] validate_nla: 1 callbacks suppressed
[  853.309334][T11225] netlink: 'syz.2.10067': attribute type 21 has an invalid length.
[  853.516968][T11236] netlink: 'syz.1.10071': attribute type 21 has an invalid length.
[  853.518272][T11235] netlink: 'syz.2.10070': attribute type 11 has an invalid length.
[  853.770685][T11247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  853.782207][T11247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  853.829003][T11252] netlink: 'syz.0.10076': attribute type 21 has an invalid length.
[  854.026004][T11264] __nla_validate_parse: 18 callbacks suppressed
[  854.026016][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10079'.
[  854.034642][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10079'.
[  854.041400][T11264] netlink: 'syz.0.10079': attribute type 21 has an invalid length.
[  854.163050][T11276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10081'.
[  854.657987][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10083'.
[  854.661533][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10083'.
[  854.718213][T11287] netlink: 'syz.1.10084': attribute type 1 has an invalid length.
[  854.722090][T11287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10084'.
[  854.774409][T11291] netlink: 'syz.1.10086': attribute type 11 has an invalid length.
[  854.785689][T11289] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  854.975649][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10090'.
[  854.979118][T11303] openvswitch: netlink: Missing key (keys=40, expected=80)
[  855.049565][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10090'.
[  855.123792][   T33] audit: type=1800 audit(1772586465.323:65): pid=11310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10089" name="memory.events" dev="tmpfs" ino=17917 res=0 errno=0
[  855.185704][T11307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  855.221819][T11318] can: request_module (can-proto-4) failed.
[  855.264814][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10096'.
[  855.272951][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10096'.
[  855.317333][T11328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  855.320074][T11328] IPv6: NLM_F_CREATE should be set when creating new route
[  855.766525][T11342] openvswitch: netlink: Missing key (keys=40, expected=80)
[  855.981235][T11347] lo speed is unknown, defaulting to 1000
[  856.107623][T11347] wg1 speed is unknown, defaulting to 1000
[  856.130859][T11355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  856.281183][T11345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  856.297317][T11360] netlink: 'syz.1.10103': attribute type 10 has an invalid length.
[  856.906268][T11372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  856.908982][T11372] IPv6: NLM_F_CREATE should be set when creating new route
[  857.106508][T11377] openvswitch: netlink: Flow actions attr not present in new flow.
[  857.619282][T11400] syzkaller1: entered promiscuous mode
[  857.621430][T11400] syzkaller1: entered allmulticast mode
[  857.629423][T11400] netlink: 'syz.0.10115': attribute type 11 has an invalid length.
[  857.809545][   T33] audit: type=1800 audit(1772586468.003:66): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10117" name="memory.events" dev="tmpfs" ino=17964 res=0 errno=0
[  857.870083][T11405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  857.928228][T11416] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  857.930976][T11416] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  858.016911][T11419] netlink: 'syz.0.10119': attribute type 10 has an invalid length.
[  858.333261][T11435] netlink: 'syz.0.10125': attribute type 21 has an invalid length.
[  858.635366][T11456] x_tables: duplicate underflow at hook 1
[  859.302847][T11476] __nla_validate_parse: 16 callbacks suppressed
[  859.302895][T11476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10136'.
[  859.311021][T11476] bond13: (slave .`): Releasing active interface
[  859.327390][T11476] .` (unregistering): (slave c5): Releasing backup interface
[  859.333077][T11476] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  859.337961][T11476] .` (unregistering): (slave team0): Releasing backup interface
[  859.341996][T11476] .` (unregistering): Released all slaves
[  859.354854][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10136'.
[  859.457542][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10138'.
[  859.480992][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10139'.
[  859.488240][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10139'.
[  859.598437][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10140'.
[  859.604407][T11496] netlink: 'syz.1.10141': attribute type 11 has an invalid length.
[  859.609267][T11494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  859.611526][T11494] IPv6: NLM_F_CREATE should be set when creating new route
[  859.890003][T11522] syzkaller1: entered promiscuous mode
[  859.891851][T11522] syzkaller1: entered allmulticast mode
[  859.971063][T11526] lo speed is unknown, defaulting to 1000
[  859.989494][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10152'.
[  860.008112][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10152'.
[  860.113029][T11539] netlink: 'syz.2.10154': attribute type 10 has an invalid length.
[  860.122435][T11541] netlink: 'syz.2.10154': attribute type 10 has an invalid length.
[  860.139116][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10153'.
[  860.244912][T11526] wg1 speed is unknown, defaulting to 1000
[  860.306211][T11550] bond19 (unregistering): Released all slaves
[  860.656476][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10159'.
[  862.003464][T11620] Timeout policy `syz0' can only be used by L3 protocol number 25
[  862.263424][T11631] netlink: 'syz.0.10176': attribute type 21 has an invalid length.
[  862.319393][T11633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  862.322356][T11633] IPv6: NLM_F_CREATE should be set when creating new route
[  862.489419][T11635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  862.499162][T11645] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check.
[  862.504042][T11635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  862.659486][T11650] lo speed is unknown, defaulting to 1000
[  862.773085][T11650] wg1 speed is unknown, defaulting to 1000
[  863.090069][T11676] lo speed is unknown, defaulting to 1000
[  863.304097][T11676] wg1 speed is unknown, defaulting to 1000
[  863.431125][T11686] netlink: 'syz.1.10188': attribute type 5 has an invalid length.
[  863.435403][T11686] syzkaller1: entered promiscuous mode
[  863.437708][T11686] syzkaller1: entered allmulticast mode
[  863.751966][T11697] netlink: 'syz.0.10190': attribute type 15 has an invalid length.
[  863.760037][T11697] tipc: Resetting bearer <eth:gre0>
[  863.764443][T11697] erspan0: left allmulticast mode
[  864.109139][T11709] netlink: 'syz.2.10192': attribute type 1 has an invalid length.
[  864.122903][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  864.669192][T11717] __nla_validate_parse: 9 callbacks suppressed
[  864.669211][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10195'.
[  864.678482][T11717] dummy0: Caught tx_queue_len zero misconfig
[  864.710178][T11719] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  864.723884][T11720] lo speed is unknown, defaulting to 1000
[  864.839254][T11720] wg1 speed is unknown, defaulting to 1000
[  865.192527][T11747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  865.299702][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10204'.
[  865.310933][T11757] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10203'.
[  865.316857][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10203'.
[  865.322209][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10204'.
[  865.577072][T11766] lo speed is unknown, defaulting to 1000
[  865.749763][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  865.767347][T11776] netlink: 666 bytes leftover after parsing attributes in process `syz.2.10207'.
[  865.837476][   T33] audit: type=1800 audit(1772586475.993:67): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10205" name="memory.events" dev="tmpfs" ino=17069 res=0 errno=0
[  865.869573][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10208'.
[  865.873178][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10208'.
[  865.876758][T11778] netlink: 'syz.2.10208': attribute type 10 has an invalid length.
[  865.909909][T11766] wg1 speed is unknown, defaulting to 1000
[  865.916541][T11780] nbd: must specify an index to disconnect
[  866.022882][T11784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10211'.
[  866.301269][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10212'.
[  866.394549][T11791] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  866.396760][T11791] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  866.427405][T11793] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  866.431293][T11793] CPU: 0 UID: 0 PID: 11793 Comm: syz.0.10214 Not tainted syzkaller #0 PREEMPT(full) 
[  866.431309][T11793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  866.431318][T11793] Call Trace:
[  866.431324][T11793]  <TASK>
[  866.431330][T11793]  dump_stack_lvl+0xe8/0x150
[  866.431354][T11793]  sysfs_warn_dup+0x8e/0xa0
[  866.431372][T11793]  sysfs_do_create_link_sd+0xc0/0x110
[  866.431391][T11793]  device_add_class_symlinks+0x1cf/0x240
[  866.431409][T11793]  device_add+0x475/0xb70
[  866.431426][T11793]  wiphy_register+0x1d73/0x2d50
[  866.431463][T11793]  ? __pfx_wiphy_register+0x10/0x10
[  866.431480][T11793]  ? __pfx_netdev_run_todo+0x10/0x10
[  866.431494][T11793]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  866.431515][T11793]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  866.431539][T11793]  ieee80211_register_hw+0x3562/0x4200
[  866.431563][T11793]  ? ieee80211_register_hw+0x1471/0x4200
[  866.431585][T11793]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  866.431611][T11793]  ? __hrtimer_setup+0x181/0x200
[  866.431628][T11793]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  866.431646][T11793]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  866.431683][T11793]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  866.431695][T11793]  ? kstrndup+0xbf/0x160
[  866.431720][T11793]  hwsim_new_radio_nl+0xf35/0x1bd0
[  866.431751][T11793]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  866.431773][T11793]  ? rcu_is_watching+0x15/0xb0
[  866.431792][T11793]  ? trace_kmalloc+0x2a/0x110
[  866.431810][T11793]  ? __nla_parse+0x40/0x60
[  866.431833][T11793]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  866.431859][T11793]  genl_family_rcv_msg_doit+0x22a/0x330
[  866.431884][T11793]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  866.431913][T11793]  ? bpf_lsm_capable+0x9/0x20
[  866.431930][T11793]  ? security_capable+0x7e/0x2c0
[  866.431950][T11793]  genl_rcv_msg+0x61c/0x7a0
[  866.431973][T11793]  ? __pfx_genl_rcv_msg+0x10/0x10
[  866.431991][T11793]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  866.432024][T11793]  ? __lock_acquire+0x6b5/0x2cf0
[  866.432050][T11793]  netlink_rcv_skb+0x232/0x4b0
[  866.432067][T11793]  ? __pfx_genl_rcv_msg+0x10/0x10
[  866.432086][T11793]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  866.432112][T11793]  ? down_read+0x272/0x2e0
[  866.432125][T11793]  ? genl_rcv+0xd/0x40
[  866.432142][T11793]  genl_rcv+0x28/0x40
[  866.432157][T11793]  netlink_unicast+0x80f/0x9b0
[  866.432177][T11793]  ? __pfx_netlink_unicast+0x10/0x10
[  866.432191][T11793]  ? netlink_sendmsg+0x650/0xb40
[  866.432205][T11793]  ? skb_put+0x11b/0x210
[  866.432250][T11793]  netlink_sendmsg+0x813/0xb40
[  866.432276][T11793]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.432293][T11793]  ? aa_sock_msg_perm+0xf1/0x1b0
[  866.432310][T11793]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  866.432325][T11793]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.432341][T11793]  ____sys_sendmsg+0xa68/0xad0
[  866.432358][T11793]  ? futex_unqueue+0x211/0x240
[  866.432376][T11793]  ? __pfx_____sys_sendmsg+0x10/0x10
[  866.432401][T11793]  ? import_iovec+0x73/0xa0
[  866.432423][T11793]  ___sys_sendmsg+0x2a5/0x360
[  866.432444][T11793]  ? __pfx____sys_sendmsg+0x10/0x10
[  866.432475][T11793]  ? futex_wait+0x29a/0x380
[  866.432514][T11793]  ? __fget_files+0x2a/0x420
[  866.432532][T11793]  ? __fget_files+0x3a0/0x420
[  866.432557][T11793]  __x64_sys_sendmsg+0x1bd/0x2a0
[  866.432578][T11793]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  866.432604][T11793]  ? rcu_is_watching+0x15/0xb0
[  866.432632][T11793]  do_syscall_64+0x14d/0xf80
[  866.432645][T11793]  ? trace_irq_disable+0x3b/0x150
[  866.432661][T11793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.432679][T11793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.432691][T11793] RIP: 0033:0x7f036239c799
[  866.432704][T11793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  866.432716][T11793] RSP: 002b:00007f03605f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  866.432730][T11793] RAX: ffffffffffffffda RBX: 00007f0362615fa0 RCX: 00007f036239c799
[  866.432740][T11793] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  866.432749][T11793] RBP: 00007f0362432bd9 R08: 0000000000000000 R09: 0000000000000000
[  866.432757][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  866.432765][T11793] R13: 00007f0362616038 R14: 00007f0362615fa0 R15: 00007ffd1ed44a18
[  866.432786][T11793]  </TASK>
[  866.798787][T11814] netlink: 'syz.2.10217': attribute type 1 has an invalid length.
[  866.810511][T11814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  866.879055][T11820] netlink: 'syz.2.10220': attribute type 19 has an invalid length.
[  866.987503][T11817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  866.998645][T11817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  867.020770][T11837] netlink: 'syz.2.10224': attribute type 21 has an invalid length.
[  867.079343][T11839] lo speed is unknown, defaulting to 1000
[  867.240431][T11839] wg1 speed is unknown, defaulting to 1000
[  867.388503][T11852] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  867.398927][T11852] CPU: 0 UID: 0 PID: 11852 Comm: syz.2.10228 Not tainted syzkaller #0 PREEMPT(full) 
[  867.398948][T11852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  867.398957][T11852] Call Trace:
[  867.398964][T11852]  <TASK>
[  867.398969][T11852]  dump_stack_lvl+0xe8/0x150
[  867.398994][T11852]  sysfs_warn_dup+0x8e/0xa0
[  867.399012][T11852]  sysfs_do_create_link_sd+0xc0/0x110
[  867.399031][T11852]  device_add_class_symlinks+0x1cf/0x240
[  867.399049][T11852]  device_add+0x475/0xb70
[  867.399065][T11852]  wiphy_register+0x1d73/0x2d50
[  867.399096][T11852]  ? __pfx_wiphy_register+0x10/0x10
[  867.399113][T11852]  ? __pfx_netdev_run_todo+0x10/0x10
[  867.399127][T11852]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  867.399185][T11852]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  867.399211][T11852]  ieee80211_register_hw+0x3562/0x4200
[  867.399237][T11852]  ? ieee80211_register_hw+0x1471/0x4200
[  867.399260][T11852]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  867.399285][T11852]  ? __hrtimer_setup+0x181/0x200
[  867.399303][T11852]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  867.399321][T11852]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  867.399355][T11852]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  867.399367][T11852]  ? kstrndup+0xbf/0x160
[  867.399389][T11852]  hwsim_new_radio_nl+0xf35/0x1bd0
[  867.399421][T11852]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  867.399443][T11852]  ? rcu_is_watching+0x15/0xb0
[  867.399462][T11852]  ? trace_kmalloc+0x2a/0x110
[  867.399481][T11852]  ? __nla_parse+0x40/0x60
[  867.399503][T11852]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  867.399530][T11852]  genl_family_rcv_msg_doit+0x22a/0x330
[  867.399556][T11852]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  867.399586][T11852]  ? bpf_lsm_capable+0x9/0x20
[  867.399601][T11852]  ? security_capable+0x7e/0x2c0
[  867.399622][T11852]  genl_rcv_msg+0x61c/0x7a0
[  867.399647][T11852]  ? __pfx_genl_rcv_msg+0x10/0x10
[  867.399666][T11852]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  867.399680][T11852]  ? __lock_acquire+0x6b5/0x2cf0
[  867.399714][T11852]  netlink_rcv_skb+0x232/0x4b0
[  867.399731][T11852]  ? __pfx_genl_rcv_msg+0x10/0x10
[  867.399752][T11852]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  867.399784][T11852]  ? down_read+0x272/0x2e0
[  867.399797][T11852]  ? genl_rcv+0xd/0x40
[  867.399818][T11852]  genl_rcv+0x28/0x40
[  867.399836][T11852]  netlink_unicast+0x80f/0x9b0
[  867.399858][T11852]  ? __pfx_netlink_unicast+0x10/0x10
[  867.399875][T11852]  ? netlink_sendmsg+0x650/0xb40
[  867.399890][T11852]  ? skb_put+0x11b/0x210
[  867.399912][T11852]  netlink_sendmsg+0x813/0xb40
[  867.399937][T11852]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.399957][T11852]  ? aa_sock_msg_perm+0xf1/0x1b0
[  867.399976][T11852]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  867.399992][T11852]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.400008][T11852]  ____sys_sendmsg+0xa68/0xad0
[  867.400036][T11852]  ? __pfx_____sys_sendmsg+0x10/0x10
[  867.400063][T11852]  ? import_iovec+0x73/0xa0
[  867.400086][T11852]  ___sys_sendmsg+0x2a5/0x360
[  867.400111][T11852]  ? __pfx____sys_sendmsg+0x10/0x10
[  867.400137][T11852]  ? futex_wake+0x4ac/0x580
[  867.400205][T11852]  ? __fget_files+0x2a/0x420
[  867.400223][T11852]  ? __fget_files+0x3a0/0x420
[  867.400250][T11852]  __x64_sys_sendmsg+0x1bd/0x2a0
[  867.400271][T11852]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  867.400297][T11852]  ? rcu_is_watching+0x15/0xb0
[  867.400325][T11852]  do_syscall_64+0x14d/0xf80
[  867.400339][T11852]  ? trace_irq_disable+0x3b/0x150
[  867.400357][T11852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.400375][T11852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.400389][T11852] RIP: 0033:0x7f113899c799
[  867.400404][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.400418][T11852] RSP: 002b:00007f113982b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  867.400432][T11852] RAX: ffffffffffffffda RBX: 00007f1138c16090 RCX: 00007f113899c799
[  867.400441][T11852] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000048
[  867.400452][T11852] RBP: 00007f1138a32bd9 R08: 0000000000000000 R09: 0000000000000000
[  867.400460][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.400467][T11852] R13: 00007f1138c16128 R14: 00007f1138c16090 R15: 00007fff7044a518
[  867.400491][T11852]  </TASK>
[  867.776347][T11869] ieee802154 phy1 wpan1: encryption failed: -22
[  868.061588][T11877] netlink: 'syz.0.10234': attribute type 10 has an invalid length.
[  868.180912][T11884] lo speed is unknown, defaulting to 1000
[  868.284379][T11879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  868.322473][T11884] wg1 speed is unknown, defaulting to 1000
[  868.711851][T11899] bond0: option ad_actor_sys_prio: invalid value (0)
[  868.715215][T11899] bond0: option ad_actor_sys_prio: allowed values 1 - 65535
[  868.719753][T11899] bond0 (unregistering): Released all slaves
[  868.888139][T11907] lo speed is unknown, defaulting to 1000
[  869.079336][T11907] wg1 speed is unknown, defaulting to 1000
[  869.829912][T11937] lo speed is unknown, defaulting to 1000
[  869.938259][T11944] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  869.962738][T11937] wg1 speed is unknown, defaulting to 1000
[  870.056457][T11947] __nla_validate_parse: 20 callbacks suppressed
[  870.056470][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10253'.
[  870.061084][T11947] netlink: 'syz.0.10253': attribute type 21 has an invalid length.
[  870.376222][T11953] netlink: 'syz.2.10255': attribute type 1 has an invalid length.
[  870.379135][T11953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10255'.
[  870.391400][T11955] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  870.395506][T11955] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  870.874322][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  870.982995][T11965] lo speed is unknown, defaulting to 1000
[  871.144363][T11965] wg1 speed is unknown, defaulting to 1000
[  872.114265][T12004] netlink: 'syz.2.10270': attribute type 11 has an invalid length.
[  872.184803][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10272'.
[  872.187561][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10272'.
[  872.190577][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10272'.
[  872.194017][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10272'.
[  872.196763][T12007] netlink: 'syz.2.10272': attribute type 6 has an invalid length.
[  872.209914][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10272'.
[  872.271094][T12012] netlink: 'syz.2.10274': attribute type 1 has an invalid length.
[  872.285914][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10275'.
[  872.296243][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10274'.
[  872.417926][T12022] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  872.420754][T12022] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  872.528581][T12023] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  872.538501][T12023] netlink: 'syz.1.10278': attribute type 4 has an invalid length.
[  872.552307][T12027] netlink: 504 bytes leftover after parsing attributes in process `syz.0.10277'.
[  872.579217][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  873.357433][T12040] netlink: 'syz.2.10281': attribute type 10 has an invalid length.
[  873.469043][T12066] netlink: 'syz.0.10287': attribute type 11 has an invalid length.
[  873.549521][T12074] openvswitch: netlink: IP tunnel dst address not specified
[  873.615928][T12076] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  873.618516][T12076] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  873.803916][T12093] netlink: 'syz.2.10296': attribute type 1 has an invalid length.
[  873.814718][T12093] netlink: 'syz.2.10296': attribute type 11 has an invalid length.
[  874.022927][T12114] lo speed is unknown, defaulting to 1000
[  874.259322][T12114] wg1 speed is unknown, defaulting to 1000
[  874.436282][T12133] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  874.439963][T12133] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  874.560814][T12139] netlink: 'syz.0.10305': attribute type 3 has an invalid length.
[  874.565872][T12139] syz_tun: left allmulticast mode
[  875.015558][T12143] netlink: 'syz.1.10307': attribute type 21 has an invalid length.
[  875.118954][T12147] __nla_validate_parse: 77 callbacks suppressed
[  875.118965][T12147] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10308'.
[  875.124610][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10308'.
[  875.326184][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  875.365630][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10310'.
[  875.429465][T12153] lo speed is unknown, defaulting to 1000
[  875.558632][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  875.652618][T12153] wg1 speed is unknown, defaulting to 1000
[  875.912335][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10312'.
[  875.917247][T12160] xt_hashlimit: size too large, truncated to 1048576
[  875.972623][T12164] x9: renamed from bridge_slave_0
[  876.347164][T12183] tun0: tun_chr_ioctl cmd 1074025681
[  876.404394][T12185] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10317'.
[  876.413382][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10317'.
[  876.502995][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10320'.
[  876.995377][T12209] lo speed is unknown, defaulting to 1000
[  877.121994][T12217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10326'.
[  877.164096][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10327'.
[  877.183037][T12220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  877.185813][T12220] IPv6: NLM_F_CREATE should be set when creating new route
[  877.225175][T12209] wg1 speed is unknown, defaulting to 1000
[  877.234495][T12225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10329'.
[  877.390696][T12236] netlink: 'syz.1.10330': attribute type 1 has an invalid length.
[  877.890971][T12267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  877.893775][T12267] IPv6: NLM_F_CREATE should be set when creating new route
[  877.948757][T12269] netlink: 'syz.2.10337': attribute type 5 has an invalid length.
[  878.056622][T12272] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  878.060543][T12272] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  878.470702][T12284] netlink: 'syz.1.10341': attribute type 10 has an invalid length.
[  878.563821][T12289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  878.566701][T12289] IPv6: NLM_F_CREATE should be set when creating new route
[  878.709425][T12296] netlink: 'syz.1.10346': attribute type 1 has an invalid length.
[  878.851154][T12305] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check.
[  878.981536][T12321] netlink: 'syz.0.10352': attribute type 21 has an invalid length.
[  878.995327][T12321] vlan3: entered promiscuous mode
[  878.997226][T12321] bridge0: entered promiscuous mode
[  879.595719][T12339] netlink: 'syz.2.10356': attribute type 21 has an invalid length.
[  879.786018][T12345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  879.789746][T12345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  879.843927][T12343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  879.856974][T12343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  880.254252][T12370] netlink: 'syz.0.10363': attribute type 11 has an invalid length.
[  880.350388][T12375] __nla_validate_parse: 17 callbacks suppressed
[  880.350406][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10364'.
[  880.368082][T12375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  880.370911][T12375] IPv6: NLM_F_CREATE should be set when creating new route
[  880.596162][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10367'.
[  880.624223][T12393] macvtap1: entered promiscuous mode
[  880.634538][T12393] veth1_to_hsr: entered promiscuous mode
[  880.636850][T12393] macvtap1: entered allmulticast mode
[  880.638770][T12393] veth1_to_hsr: entered allmulticast mode
[  880.668162][T12396] netlink: 'syz.1.10368': attribute type 10 has an invalid length.
[  880.688055][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10369'.
[  880.692246][T12399] openvswitch: netlink: Message has -2 unknown bytes.
[  880.694436][T12399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  880.703167][T12399] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  880.706122][T12399] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  880.839796][T12407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10370'.
[  880.910596][T12409] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10371'.
[  880.914294][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10371'.
[  881.144150][T12420] netlink: 'syz.0.10374': attribute type 10 has an invalid length.
[  881.503435][T12438] netlink: 'syz.0.10379': attribute type 10 has an invalid length.
[  881.508341][T12438] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  881.511109][T12438] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  881.587347][T12445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  881.910931][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10391'.
[  881.920047][T12479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  881.922318][T12479] IPv6: NLM_F_CREATE should be set when creating new route
[  881.981117][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10392'.
[  882.038365][T12493] tunl0: Caught tx_queue_len zero misconfig
[  882.129333][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10395'.
[  882.139759][T12501] xt_l2tp: v2 sid > 0xffff: 4294967294
[  882.190206][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10397'.
[  882.207425][T12506] netlink: 'syz.0.10396': attribute type 1 has an invalid length.
[  882.309560][T12512] "syz.2.10400" (12512) uses obsolete ecb(arc4) skcipher
[  882.470066][T12529] netlink: 'syz.1.10405': attribute type 21 has an invalid length.
[  882.631366][T12535] openvswitch: netlink: Key type 262 is out of range max 32
[  883.192859][T12571] netlink: 'syz.0.10415': attribute type 1 has an invalid length.
[  883.268986][T12579] netlink: 'syz.0.10417': attribute type 1 has an invalid length.
[  883.397798][T12588] netlink: 'syz.1.10421': attribute type 21 has an invalid length.
[  883.925348][T12615] netlink: 'syz.2.10429': attribute type 11 has an invalid length.
[  884.118405][T12628] netlink: 'syz.2.10431': attribute type 21 has an invalid length.
[  884.440673][T12647] lo speed is unknown, defaulting to 1000
[  884.575914][T12656] netlink: 'syz.1.10438': attribute type 21 has an invalid length.
[  884.597203][T12647] wg1 speed is unknown, defaulting to 1000
[  884.951525][T12675] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  885.098331][T12683] netlink: 'syz.1.10446': attribute type 1 has an invalid length.
[  885.279572][T12691] netlink: 'syz.0.10448': attribute type 10 has an invalid length.
[  885.359336][T12703] __nla_validate_parse: 41 callbacks suppressed
[  885.359352][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10451'.
[  885.472842][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10454'.
[  885.591470][T12718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10455'.
[  885.715428][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10459'.
[  885.729137][T12731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  885.740243][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10460'.
[  885.743839][T12739] netlink: 'syz.1.10460': attribute type 21 has an invalid length.
[  885.750678][T12739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10460'.
[  885.853663][T12731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  885.997459][   T33] audit: type=1800 audit(1772586496.193:68): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10462" name="memory.events" dev="tmpfs" ino=17322 res=0 errno=0
[  886.297555][T12756] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  886.304768][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.1.10466 Not tainted syzkaller #0 PREEMPT(full) 
[  886.304782][T12756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  886.304788][T12756] Call Trace:
[  886.304793][T12756]  <TASK>
[  886.304797][T12756]  dump_stack_lvl+0xe8/0x150
[  886.304814][T12756]  sysfs_warn_dup+0x8e/0xa0
[  886.304828][T12756]  sysfs_do_create_link_sd+0xc0/0x110
[  886.304840][T12756]  device_add_class_symlinks+0x1cf/0x240
[  886.304851][T12756]  device_add+0x475/0xb70
[  886.304861][T12756]  wiphy_register+0x1d73/0x2d50
[  886.304880][T12756]  ? __pfx_wiphy_register+0x10/0x10
[  886.304890][T12756]  ? __pfx_netdev_run_todo+0x10/0x10
[  886.304899][T12756]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  886.304912][T12756]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  886.304927][T12756]  ieee80211_register_hw+0x3562/0x4200
[  886.304942][T12756]  ? ieee80211_register_hw+0x1471/0x4200
[  886.304955][T12756]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  886.304972][T12756]  ? __hrtimer_setup+0x181/0x200
[  886.304982][T12756]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  886.304993][T12756]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  886.305015][T12756]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  886.305022][T12756]  ? kstrndup+0xbf/0x160
[  886.305037][T12756]  hwsim_new_radio_nl+0xf35/0x1bd0
[  886.305055][T12756]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  886.305068][T12756]  ? rcu_is_watching+0x15/0xb0
[  886.305079][T12756]  ? trace_kmalloc+0x2a/0x110
[  886.305090][T12756]  ? __nla_parse+0x40/0x60
[  886.305103][T12756]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  886.305119][T12756]  genl_family_rcv_msg_doit+0x22a/0x330
[  886.305134][T12756]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  886.305152][T12756]  ? bpf_lsm_capable+0x9/0x20
[  886.305162][T12756]  ? security_capable+0x7e/0x2c0
[  886.305175][T12756]  genl_rcv_msg+0x61c/0x7a0
[  886.305189][T12756]  ? __pfx_genl_rcv_msg+0x10/0x10
[  886.305208][T12756]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  886.305217][T12756]  ? __lock_acquire+0x6b5/0x2cf0
[  886.305233][T12756]  netlink_rcv_skb+0x232/0x4b0
[  886.305245][T12756]  ? __pfx_genl_rcv_msg+0x10/0x10
[  886.305258][T12756]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  886.305276][T12756]  ? down_read+0x272/0x2e0
[  886.305284][T12756]  ? genl_rcv+0xd/0x40
[  886.305296][T12756]  genl_rcv+0x28/0x40
[  886.305307][T12756]  netlink_unicast+0x80f/0x9b0
[  886.305319][T12756]  ? __pfx_netlink_unicast+0x10/0x10
[  886.305329][T12756]  ? netlink_sendmsg+0x650/0xb40
[  886.305338][T12756]  ? skb_put+0x11b/0x210
[  886.305350][T12756]  netlink_sendmsg+0x813/0xb40
[  886.305365][T12756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  886.305376][T12756]  ? aa_sock_msg_perm+0xf1/0x1b0
[  886.305386][T12756]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  886.305396][T12756]  ? __pfx_netlink_sendmsg+0x10/0x10
[  886.305405][T12756]  ____sys_sendmsg+0xa68/0xad0
[  886.305417][T12756]  ? futex_unqueue+0x211/0x240
[  886.305430][T12756]  ? __pfx_____sys_sendmsg+0x10/0x10
[  886.305446][T12756]  ? import_iovec+0x73/0xa0
[  886.305488][T12756]  ___sys_sendmsg+0x2a5/0x360
[  886.305504][T12756]  ? __pfx____sys_sendmsg+0x10/0x10
[  886.305519][T12756]  ? futex_wait+0x29a/0x380
[  886.305544][T12756]  ? __fget_files+0x2a/0x420
[  886.305556][T12756]  ? __fget_files+0x3a0/0x420
[  886.305572][T12756]  __x64_sys_sendmsg+0x1bd/0x2a0
[  886.305585][T12756]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  886.305600][T12756]  ? rcu_is_watching+0x15/0xb0
[  886.305617][T12756]  do_syscall_64+0x14d/0xf80
[  886.305625][T12756]  ? trace_irq_disable+0x3b/0x150
[  886.305636][T12756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.305647][T12756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.305655][T12756] RIP: 0033:0x7f05ecd9c799
[  886.305665][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  886.305673][T12756] RSP: 002b:00007f05edd0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  886.305684][T12756] RAX: ffffffffffffffda RBX: 00007f05ed015fa0 RCX: 00007f05ecd9c799
[  886.305690][T12756] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  886.305698][T12756] RBP: 00007f05ece32bd9 R08: 0000000000000000 R09: 0000000000000000
[  886.305703][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  886.305708][T12756] R13: 00007f05ed016038 R14: 00007f05ed015fa0 R15: 00007ffd1cb19a18
[  886.305738][T12756]  </TASK>
[  886.586698][T12763] netlink: 'syz.1.10468': attribute type 1 has an invalid length.
[  886.649953][T12763] 8021q: adding VLAN 0 to HW filter on device bond12
[  886.656407][T12763] bond11: (slave bond12): making interface the new active one
[  886.659811][T12763] bond11: (slave bond12): Enslaving as an active interface with an up link
[  886.674916][T12763] bond11: (slave gretap2): Enslaving as a backup interface with an up link
[  886.680389][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10468'.
[  886.686097][T12763] 8021q: adding VLAN 0 to HW filter on device bond11
[  886.693535][T12769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10470'.
[  886.828378][T12781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  886.837554][T12780] IPVS: length: 172 != 24
[  886.843043][T12781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  886.854307][T12780] sctp: [Deprecated]: syz.2.10474 (pid 12780) Use of int in max_burst socket option deprecated.
[  886.854307][T12780] Use struct sctp_assoc_value instead
[  887.092657][T12801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  887.096417][T12801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  887.223175][T12805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10480'.
[  887.961640][T12831] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10485'.
[  888.376232][T12861] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  888.399792][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz.0.10491 Not tainted syzkaller #0 PREEMPT(full) 
[  888.399809][T12861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  888.399815][T12861] Call Trace:
[  888.399819][T12861]  <TASK>
[  888.399823][T12861]  dump_stack_lvl+0xe8/0x150
[  888.399841][T12861]  sysfs_warn_dup+0x8e/0xa0
[  888.399855][T12861]  sysfs_do_create_link_sd+0xc0/0x110
[  888.399868][T12861]  device_add_class_symlinks+0x1cf/0x240
[  888.399879][T12861]  device_add+0x475/0xb70
[  888.399889][T12861]  wiphy_register+0x1d73/0x2d50
[  888.399908][T12861]  ? __pfx_wiphy_register+0x10/0x10
[  888.399918][T12861]  ? __pfx_netdev_run_todo+0x10/0x10
[  888.399927][T12861]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  888.399940][T12861]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  888.399955][T12861]  ieee80211_register_hw+0x3562/0x4200
[  888.399970][T12861]  ? ieee80211_register_hw+0x1471/0x4200
[  888.399983][T12861]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  888.400007][T12861]  ? __hrtimer_setup+0x181/0x200
[  888.400019][T12861]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  888.400030][T12861]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  888.400053][T12861]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  888.400061][T12861]  ? kstrndup+0xbf/0x160
[  888.400076][T12861]  hwsim_new_radio_nl+0xf35/0x1bd0
[  888.400094][T12861]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  888.400106][T12861]  ? rcu_is_watching+0x15/0xb0
[  888.400117][T12861]  ? trace_kmalloc+0x2a/0x110
[  888.400129][T12861]  ? __nla_parse+0x40/0x60
[  888.400141][T12861]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  888.400157][T12861]  genl_family_rcv_msg_doit+0x22a/0x330
[  888.400172][T12861]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  888.400190][T12861]  ? bpf_lsm_capable+0x9/0x20
[  888.400200][T12861]  ? security_capable+0x7e/0x2c0
[  888.400212][T12861]  genl_rcv_msg+0x61c/0x7a0
[  888.400226][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  888.400237][T12861]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  888.400245][T12861]  ? __lock_acquire+0x6b5/0x2cf0
[  888.400260][T12861]  netlink_rcv_skb+0x232/0x4b0
[  888.400306][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  888.400325][T12861]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  888.400343][T12861]  ? down_read+0x272/0x2e0
[  888.400352][T12861]  ? genl_rcv+0xd/0x40
[  888.400365][T12861]  genl_rcv+0x28/0x40
[  888.400376][T12861]  netlink_unicast+0x80f/0x9b0
[  888.400389][T12861]  ? __pfx_netlink_unicast+0x10/0x10
[  888.400398][T12861]  ? netlink_sendmsg+0x650/0xb40
[  888.400408][T12861]  ? skb_put+0x11b/0x210
[  888.400420][T12861]  netlink_sendmsg+0x813/0xb40
[  888.400434][T12861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  888.400445][T12861]  ? aa_sock_msg_perm+0xf1/0x1b0
[  888.400457][T12861]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  888.400466][T12861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  888.400476][T12861]  ____sys_sendmsg+0xa68/0xad0
[  888.400487][T12861]  ? futex_unqueue+0x211/0x240
[  888.400502][T12861]  ? __pfx_____sys_sendmsg+0x10/0x10
[  888.400518][T12861]  ? import_iovec+0x73/0xa0
[  888.400532][T12861]  ___sys_sendmsg+0x2a5/0x360
[  888.400548][T12861]  ? __pfx____sys_sendmsg+0x10/0x10
[  888.400562][T12861]  ? futex_wait+0x29a/0x380
[  888.400586][T12861]  ? __fget_files+0x2a/0x420
[  888.400597][T12861]  ? __fget_files+0x3a0/0x420
[  888.400613][T12861]  __x64_sys_sendmsg+0x1bd/0x2a0
[  888.400625][T12861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  888.400641][T12861]  ? rcu_is_watching+0x15/0xb0
[  888.400657][T12861]  do_syscall_64+0x14d/0xf80
[  888.400665][T12861]  ? trace_irq_disable+0x3b/0x150
[  888.400676][T12861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.400686][T12861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  888.400694][T12861] RIP: 0033:0x7f036239c799
[  888.400703][T12861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.400711][T12861] RSP: 002b:00007f03605f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  888.400721][T12861] RAX: ffffffffffffffda RBX: 00007f0362615fa0 RCX: 00007f036239c799
[  888.400727][T12861] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  888.400732][T12861] RBP: 00007f0362432bd9 R08: 0000000000000000 R09: 0000000000000000
[  888.400737][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  888.400742][T12861] R13: 00007f0362616038 R14: 00007f0362615fa0 R15: 00007ffd1ed44a18
[  888.400757][T12861]  </TASK>
[  888.581448][T12869] validate_nla: 2 callbacks suppressed
[  888.581464][T12869] netlink: 'syz.2.10493': attribute type 21 has an invalid length.
[  888.961851][T12894] netlink: 'syz.1.10499': attribute type 10 has an invalid length.
[  889.365774][T12909] netlink: 'syz.1.10502': attribute type 10 has an invalid length.
[  889.618931][T12942] netlink: 'syz.1.10512': attribute type 1 has an invalid length.
[  890.391194][T12994] netlink: 'syz.1.10522': attribute type 10 has an invalid length.
[  890.445367][T12996] __nla_validate_parse: 23 callbacks suppressed
[  890.445384][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10523'.
[  890.464300][T12996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  890.466627][T12996] IPv6: NLM_F_CREATE should be set when creating new route
[  890.493878][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10524'.
[  890.496874][T12998] netlink: 'syz.1.10524': attribute type 2 has an invalid length.
[  890.517818][T13003] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  890.521325][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.2.10525 Not tainted syzkaller #0 PREEMPT(full) 
[  890.521343][T13003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  890.521352][T13003] Call Trace:
[  890.521358][T13003]  <TASK>
[  890.521364][T13003]  dump_stack_lvl+0xe8/0x150
[  890.521387][T13003]  sysfs_warn_dup+0x8e/0xa0
[  890.521407][T13003]  sysfs_do_create_link_sd+0xc0/0x110
[  890.521427][T13003]  device_add_class_symlinks+0x1cf/0x240
[  890.521444][T13003]  device_add+0x475/0xb70
[  890.521460][T13003]  wiphy_register+0x1d73/0x2d50
[  890.521488][T13003]  ? __pfx_wiphy_register+0x10/0x10
[  890.521505][T13003]  ? __pfx_netdev_run_todo+0x10/0x10
[  890.521520][T13003]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  890.521540][T13003]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  890.521562][T13003]  ieee80211_register_hw+0x3562/0x4200
[  890.521584][T13003]  ? ieee80211_register_hw+0x1471/0x4200
[  890.521604][T13003]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  890.521628][T13003]  ? __hrtimer_setup+0x181/0x200
[  890.521644][T13003]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  890.521662][T13003]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  890.521705][T13003]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  890.521717][T13003]  ? kstrndup+0xbf/0x160
[  890.521740][T13003]  hwsim_new_radio_nl+0xf35/0x1bd0
[  890.521767][T13003]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  890.521786][T13003]  ? rcu_is_watching+0x15/0xb0
[  890.521803][T13003]  ? trace_kmalloc+0x2a/0x110
[  890.521820][T13003]  ? __nla_parse+0x40/0x60
[  890.521840][T13003]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  890.521865][T13003]  genl_family_rcv_msg_doit+0x22a/0x330
[  890.521888][T13003]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  890.521914][T13003]  ? bpf_lsm_capable+0x9/0x20
[  890.521930][T13003]  ? security_capable+0x7e/0x2c0
[  890.521948][T13003]  genl_rcv_msg+0x61c/0x7a0
[  890.521970][T13003]  ? __pfx_genl_rcv_msg+0x10/0x10
[  890.521987][T13003]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  890.522000][T13003]  ? __lock_acquire+0x6b5/0x2cf0
[  890.522048][T13003]  netlink_rcv_skb+0x232/0x4b0
[  890.522067][T13003]  ? __pfx_genl_rcv_msg+0x10/0x10
[  890.522116][T13003]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  890.522143][T13003]  ? down_read+0x272/0x2e0
[  890.522156][T13003]  ? genl_rcv+0xd/0x40
[  890.522174][T13003]  genl_rcv+0x28/0x40
[  890.522191][T13003]  netlink_unicast+0x80f/0x9b0
[  890.522211][T13003]  ? __pfx_netlink_unicast+0x10/0x10
[  890.522226][T13003]  ? netlink_sendmsg+0x650/0xb40
[  890.522241][T13003]  ? skb_put+0x11b/0x210
[  890.522261][T13003]  netlink_sendmsg+0x813/0xb40
[  890.522282][T13003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.522299][T13003]  ? aa_sock_msg_perm+0xf1/0x1b0
[  890.522316][T13003]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  890.522330][T13003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.522344][T13003]  ____sys_sendmsg+0xa68/0xad0
[  890.522361][T13003]  ? futex_unqueue+0x211/0x240
[  890.522383][T13003]  ? __pfx_____sys_sendmsg+0x10/0x10
[  890.522410][T13003]  ? import_iovec+0x73/0xa0
[  890.522433][T13003]  ___sys_sendmsg+0x2a5/0x360
[  890.522458][T13003]  ? __pfx____sys_sendmsg+0x10/0x10
[  890.522481][T13003]  ? futex_wait+0x29a/0x380
[  890.522516][T13003]  ? __fget_files+0x2a/0x420
[  890.522532][T13003]  ? __fget_files+0x3a0/0x420
[  890.522557][T13003]  __x64_sys_sendmsg+0x1bd/0x2a0
[  890.522578][T13003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  890.522603][T13003]  ? rcu_is_watching+0x15/0xb0
[  890.522626][T13003]  do_syscall_64+0x14d/0xf80
[  890.522642][T13003]  ? trace_irq_disable+0x3b/0x150
[  890.522660][T13003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.522689][T13003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.522702][T13003] RIP: 0033:0x7f113899c799
[  890.522717][T13003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  890.522730][T13003] RSP: 002b:00007f113984c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  890.522747][T13003] RAX: ffffffffffffffda RBX: 00007f1138c15fa0 RCX: 00007f113899c799
[  890.522758][T13003] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  890.522767][T13003] RBP: 00007f1138a32bd9 R08: 0000000000000000 R09: 0000000000000000
[  890.522776][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  890.522785][T13003] R13: 00007f1138c16038 R14: 00007f1138c15fa0 R15: 00007fff7044a518
[  890.522809][T13003]  </TASK>
[  890.721171][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10528'.
[  890.743759][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10525'.
[  890.820526][T13019] lo speed is unknown, defaulting to 1000
[  890.826891][T13022] netlink: 'syz.2.10530': attribute type 10 has an invalid length.
[  890.900966][T13025] lo speed is unknown, defaulting to 1000
[  891.086591][T13019] wg1 speed is unknown, defaulting to 1000
[  891.381869][T13025] wg1 speed is unknown, defaulting to 1000
[  891.486427][T13039] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  891.564223][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10535'.
[  891.583522][T13041] netlink: 'syz.0.10535': attribute type 21 has an invalid length.
[  891.937455][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10538'.
[  892.576737][T13065] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10541'.
[  893.148384][T13081] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10545'.
[  893.199013][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10545'.
[  893.208723][T13081] "syz.2.10545" (13081) uses obsolete ecb(arc4) skcipher
[  893.524507][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10550'.
[  893.527693][T13104] netlink: 'syz.0.10550': attribute type 21 has an invalid length.
[  894.430558][T13143] netlink: 'syz.0.10553': attribute type 21 has an invalid length.
[  895.085916][T13151] lo speed is unknown, defaulting to 1000
[  895.229164][T13151] wg1 speed is unknown, defaulting to 1000
[  895.388024][T13155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  895.391676][T13155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  895.547118][T13161] __nla_validate_parse: 3 callbacks suppressed
[  895.547130][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10558'.
[  896.732609][T13185] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10562'.
[  896.851129][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10563'.
[  896.969391][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10565'.
[  896.972943][T13197] netlink: 'syz.2.10565': attribute type 21 has an invalid length.
[  896.981390][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10565'.
[  896.993826][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10565'.
[  897.208332][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10568'.
[  897.221533][T13203] syzkaller1: entered promiscuous mode
[  897.223581][T13208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  897.225942][T13208] IPv6: NLM_F_CREATE should be set when creating new route
[  897.228777][T13203] syzkaller1: entered allmulticast mode
[  897.357628][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10571'.
[  897.372213][T13216] netlink: 'syz.0.10571': attribute type 21 has an invalid length.
[  897.651994][T13237] netlink: 'syz.0.10575': attribute type 1 has an invalid length.
[  897.658698][T13237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10575'.
[  898.575068][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10576'.
[  898.987082][T13267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  898.989664][T13267] IPv6: NLM_F_CREATE should be set when creating new route
[  899.172766][T13273] nft_compat: unsupported protocol 1
[  899.341028][T13278] netlink: 'syz.2.10586': attribute type 11 has an invalid length.
[  899.438380][T13286] lo speed is unknown, defaulting to 1000
[  899.547800][T13286] wg1 speed is unknown, defaulting to 1000
[  900.095190][T13302] lo speed is unknown, defaulting to 1000
[  900.227363][T13302] wg1 speed is unknown, defaulting to 1000
[  900.929269][T13344] netlink: 'syz.1.10604': attribute type 1 has an invalid length.
[  900.940839][T13340] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  900.947048][   T33] audit: type=1107 audit(1772586511.143:69): pid=13343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  900.948281][T13344] xt_l2tp: v2 doesn't support IP mode
[  900.954996][T13340] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  901.034024][T13351] netlink: 'syz.1.10606': attribute type 83 has an invalid length.
[  901.040258][T13351] netlink: 'syz.1.10606': attribute type 10 has an invalid length.
[  901.257027][T13362] __nla_validate_parse: 11 callbacks suppressed
[  901.257039][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10609'.
[  901.308751][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10610'.
[  901.316415][T13369] dummy0: entered allmulticast mode
[  901.366233][T13368] dummy0: left allmulticast mode
[  901.826755][T13385] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10614'.
[  901.841338][T13389] netlink: 'syz.0.10611': attribute type 153 has an invalid length.
[  901.929816][T13393] bridge36: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  901.946635][T13393] netlink: 'syz.2.10616': attribute type 10 has an invalid length.
[  901.949012][T13393] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10616'.
[  901.962899][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10618'.
[  901.973652][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10618'.
[  902.032473][T13407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10617'.
[  902.151612][T13420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  902.160180][T13420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  902.352752][T13434] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  902.785874][T13462] netlink: 'syz.0.10632': attribute type 10 has an invalid length.
[  902.789161][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10633'.
[  902.887125][T13478] netlink: 'syz.2.10634': attribute type 1 has an invalid length.
[  902.890053][T13478] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10634'.
[  902.970466][T13485] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  902.980847][T13485] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  903.080349][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10636'.
[  903.105224][T13498] netlink: 'syz.0.10639': attribute type 10 has an invalid length.
[  903.285926][T13506] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  903.288539][T13506] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  903.292344][T13506] netlink: 'syz.0.10642': attribute type 10 has an invalid length.
[  903.659348][T13523] lo speed is unknown, defaulting to 1000
[  903.921470][T13523] wg1 speed is unknown, defaulting to 1000
[  904.092318][T13544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  904.094504][T13544] IPv6: NLM_F_CREATE should be set when creating new route
[  904.246639][T13548] netlink: 'syz.2.10654': attribute type 11 has an invalid length.
[  904.536884][T13558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.663910][T13569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  904.666632][T13569] IPv6: NLM_F_CREATE should be set when creating new route
[  905.909199][T13666] netlink: 'syz.1.10680': attribute type 21 has an invalid length.
[  906.235163][T13696] netlink: 'syz.1.10688': attribute type 21 has an invalid length.
[  906.297549][T13700] __nla_validate_parse: 18 callbacks suppressed
[  906.297567][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10690'.
[  906.317843][T13700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  906.320582][T13700] IPv6: NLM_F_CREATE should be set when creating new route
[  906.524977][T13704] netlink: 'syz.1.10692': attribute type 11 has an invalid length.
[  906.608195][T13720] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  906.615410][T13720] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  906.628451][T13722] netlink: 'syz.1.10696': attribute type 11 has an invalid length.
[  906.680928][T13732] netlink: 'syz.1.10698': attribute type 10 has an invalid length.
[  906.990396][T13753] netlink: 'syz.0.10704': attribute type 10 has an invalid length.
[  907.110478][T13760] lo speed is unknown, defaulting to 1000
[  907.307725][T13760] wg1 speed is unknown, defaulting to 1000
[  907.545005][T13776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  907.558588][T13776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  908.811749][T13811] netlink: 'syz.1.10716': attribute type 10 has an invalid length.
[  908.928268][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10717'.
[  908.942988][T13813] Set syz0 is full, maxelem 0 reached
[  908.945103][T13813] nbd: must specify a device to reconfigure
[  909.263091][T13831] lo speed is unknown, defaulting to 1000
[  909.357645][T13830] lo speed is unknown, defaulting to 1000
[  909.503067][T13831] wg1 speed is unknown, defaulting to 1000
[  909.772132][T13830] wg1 speed is unknown, defaulting to 1000
[  910.250219][T13859] lo speed is unknown, defaulting to 1000
[  910.342454][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10728'.
[  910.347367][T13864] netlink: 'syz.1.10728': attribute type 1 has an invalid length.
[  910.350415][T13864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10728'.
[  910.465516][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10729'.
[  910.482903][T13859] wg1 speed is unknown, defaulting to 1000
[  910.519919][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10730'.
[  910.527435][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10729'.
[  910.539701][T13873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  910.541892][T13873] IPv6: NLM_F_CREATE should be set when creating new route
[  910.628808][T13881] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10733'.
[  910.636889][T13881] netlink: 'syz.2.10733': attribute type 33 has an invalid length.
[  910.639745][T13881] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10733'.
[  910.659781][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10733'.
[  911.120286][T13898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  911.123083][T13898] IPv6: NLM_F_CREATE should be set when creating new route
[  911.252434][T13905] netlink: 'syz.0.10739': attribute type 21 has an invalid length.
[  911.674954][T13912] __nla_validate_parse: 4 callbacks suppressed
[  911.674972][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10742'.
[  911.681870][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10742'.
[  911.977399][T13938] netlink: 87 bytes leftover after parsing attributes in process `syz.1.10749'.
[  912.106334][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10750'.
[  912.133472][T13945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  912.136323][T13945] IPv6: NLM_F_CREATE should be set when creating new route
[  912.238059][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10751'.
[  912.457408][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10758'.
[  912.470919][T13965] xfrm1: entered allmulticast mode
[  912.507912][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10761'.
[  912.543223][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10763'.
[  912.546647][T13978] netlink: 'syz.2.10763': attribute type 21 has an invalid length.
[  912.642789][T13983] veth0: entered promiscuous mode
[  912.658871][T13981] lo speed is unknown, defaulting to 1000
[  912.724369][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10765'.
[  912.731138][T13986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10765'.
[  912.766825][T13981] wg1 speed is unknown, defaulting to 1000
[  912.805519][T13991] netlink: 'syz.2.10767': attribute type 21 has an invalid length.
[  913.328571][T13981] veth0: left promiscuous mode
[  914.068036][   T33] audit: type=1800 audit(1772586524.263:70): pid=14053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10783" name="memory.events" dev="tmpfs" ino=17991 res=0 errno=0
[  914.127957][T14051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.129274][T14055] netlink: 'syz.2.10784': attribute type 1 has an invalid length.
[  914.257496][T14060] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  914.320058][T14059] netlink: 'syz.2.10786': attribute type 11 has an invalid length.
[  914.387371][T14065] netlink: 'syz.2.10788': attribute type 11 has an invalid length.
[  914.392183][T14064] netlink: 'syz.2.10788': attribute type 11 has an invalid length.
[  914.401710][T14064] bond0: Caught tx_queue_len zero misconfig
[  914.495713][T14072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.704973][T14083] netlink: 'syz.1.10793': attribute type 21 has an invalid length.
[  914.806305][T14086] netlink: 'syz.0.10794': attribute type 11 has an invalid length.
[  915.069086][T14096] netlink: 'syz.1.10798': attribute type 101 has an invalid length.
[  915.084103][T14097] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  915.086541][T14097] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  915.089041][T14096] netlink: 'syz.1.10798': attribute type 7 has an invalid length.
[  915.194804][T14104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  915.197648][T14104] IPv6: NLM_F_CREATE should be set when creating new route
[  915.301409][T14113] netlink: 'syz.2.10803': attribute type 10 has an invalid length.
[  915.459679][T14131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  915.462210][T14131] IPv6: NLM_F_CREATE should be set when creating new route
[  915.502501][T14138] lo speed is unknown, defaulting to 1000
[  915.711161][T14138] wg1 speed is unknown, defaulting to 1000
[  916.199408][T14189] netlink: 'syz.1.10817': attribute type 21 has an invalid length.
[  916.331143][T14197] tipc: MTU too low for tipc bearer
[  916.649628][T14214] netlink: 'syz.2.10822': attribute type 10 has an invalid length.
[  916.705929][T14215] __nla_validate_parse: 22 callbacks suppressed
[  916.705944][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10821'.
[  916.855670][T14224] netlink: 'syz.2.10825': attribute type 1 has an invalid length.
[  916.858640][T14224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10825'.
[  916.868907][T14227] netlink: 'syz.0.10826': attribute type 21 has an invalid length.
[  916.871926][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10826'.
[  916.895574][T14229] netlink: 'syz.0.10826': attribute type 21 has an invalid length.
[  916.898780][T14229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10826'.
[  916.936282][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10827'.
[  916.939378][T14232] netlink: 'syz.2.10827': attribute type 21 has an invalid length.
[  916.951671][T14232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10827'.
[  916.971552][T14235] netlink: 'syz.0.10828': attribute type 83 has an invalid length.
[  917.035144][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10829'.
[  917.057678][T14239] lo speed is unknown, defaulting to 1000
[  917.059828][T14238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  917.062663][T14238] IPv6: NLM_F_CREATE should be set when creating new route
[  917.284114][T14239] wg1 speed is unknown, defaulting to 1000
[  917.477882][T14250] netlink: 'syz.0.10833': attribute type 11 has an invalid length.
[  917.629045][T14261] lo speed is unknown, defaulting to 1000
[  917.859971][T14261] wg1 speed is unknown, defaulting to 1000
[  918.175696][T14283] netlink: 'syz.2.10838': attribute type 13 has an invalid length.
[  918.987084][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10843'.
[  919.069731][T14303] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  919.083575][T14303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10845'.
[  919.091866][T14303] netlink: 'syz.2.10845': attribute type 11 has an invalid length.
[  919.158490][T14305] netlink: 'syz.2.10846': attribute type 1 has an invalid length.
[  919.161332][T14305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10846'.
[  919.407152][T14315] netlink: 'syz.1.10850': attribute type 1 has an invalid length.
[  919.565187][T14326] lo speed is unknown, defaulting to 1000
[  919.570418][T14330] netlink: 'syz.0.10853': attribute type 1 has an invalid length.
[  919.716060][T14326] wg1 speed is unknown, defaulting to 1000
[  920.305938][T14346] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  921.585775][T14384] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  921.589140][T14384] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  921.648010][T14392] netlink: 'syz.1.10869': attribute type 11 has an invalid length.
[  921.719239][T14402] validate_nla: 5 callbacks suppressed
[  921.719250][T14402] netlink: 'syz.1.10872': attribute type 1 has an invalid length.
[  921.725544][T14402] __nla_validate_parse: 8 callbacks suppressed
[  921.725554][T14402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10872'.
[  921.730264][T14401] netlink: 'syz.1.10872': attribute type 1 has an invalid length.
[  921.732979][T14401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10872'.
[  921.774656][T14404] netlink: 'syz.1.10873': attribute type 10 has an invalid length.
[  921.947775][T14414] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10874'.
[  921.954351][T14411] netlink: 'syz.1.10876': attribute type 10 has an invalid length.
[  921.962901][T14414] ksmbd: Unknown IPC event: 1, ignore.
[  922.121845][T14421] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10879'.
[  922.168792][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10880'.
[  922.181573][T14424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  922.183993][T14424] IPv6: NLM_F_CREATE should be set when creating new route
[  922.291186][T14439] netlink: 'syz.0.10884': attribute type 10 has an invalid length.
[  922.337768][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10886'.
[  922.340771][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10886'.
[  922.371959][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10887'.
[  922.374992][T14452] netlink: 'syz.0.10887': attribute type 21 has an invalid length.
[  922.381171][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10887'.
[  922.614899][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10890'.
[  936.998661][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  962.592278][    C0] ip6_tunnel: ip6gretap8 xmit: Local address not yet configured!
[  998.439532][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.752983][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[ 1059.876481][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.328736][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.759339][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[ 1203.232431][    C1] ip6_tunnel: ip6gretap8 xmit: Local address not yet configured!

VM DIAGNOSIS:
01:13:55  Registers:
info registers vcpu 0

CPU#0
RAX=000000000070ac89 RBX=ffffffff819a886d RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8def311b RDI=ffffffff8c27ae80 RBP=ffffffff8e407eb0 RSP=ffffffff8e407dc0
R8 =ffff88812103395b R9 =1ffff1102420672b R10=dffffc0000000000 R11=ffffed102420672c
R12=ffffffff90118cb0 R13=1ffffffff1c929d8 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8bad6e9f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de64000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005627f3b8f680 CR3=000000000e54c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000002fb31e73 0000000000000009 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=000000002b9f1c96 000000000000044c
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000074123d RBX=ffffffff819a886d RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8def311b RDI=ffffffff8c27ae80 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c63395b R9 =1ffff110478c672b R10=dffffc0000000000 R11=ffffed10478c672c
R12=ffffffff90118cb0 R13=1ffff1102c095000 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff8bad6e9f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9464000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560f31172000 CR3=000000016e532000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
