last executing test programs:

3m37.036613237s ago: executing program 1 (id=5033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFMTU(r4, 0x5411, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

3m36.929952676s ago: executing program 1 (id=5036):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d0a0200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000e10000009f040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f1bce4d15a3f8b2bb447249a6cc5d201a"], &(0x7f00000001c0)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f00000003c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000480)="26897d8c47a2b1e835", 0x9}, {&(0x7f00000004c0)="6adc59f0d066756e088878a8dca8596616f9363f1b3a70ab071e6b023f71530056c1eb1da4a1fd39a1fda5b82c9cfb4d47b5128ffd6eab7a491ad56abc5808437a7ad051da9f8536526a1988aea8", 0x4e}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f0000001300)=[{0xd0, 0x108, 0xf2, "46763c98da97b3a20def87b853f80e2395321082510fa64a60e043ae6378dd601089592b6f6fe4fd6994ae22bec55db08c041daf37738da0e1a93143f96c129d87824d72a9e48a895d9e917c4950c1bfd15cfc5e4e50dac5cd9f8e8b10e5d0cb2f2c43139d3063ad8888fc84dd42c63e2f2d7fbdb767e2a8404bddcfb92272000ff939e3196b3613266ffb7f51a7556aa585fac2d6bacc9e451dd02605c2f4391aaa156895b27d96eda3b4b78e1dfa31b4c7431c9e845da2c47df4dc86b962"}], 0xd0}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb54}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x3, 0x1, 0x2, 0x138, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4dc2}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES8=r4], 0x5c}, 0x1, 0xba01}, 0x0)
socket$kcm(0x10, 0x2, 0x0)

3m36.292309301s ago: executing program 1 (id=5042):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140200001000010000000000000000000100000a4c0000000000000f0000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c0002800800044000000000140000001100010000000000000000000000000a000000000000000000"], 0x74}}, 0x0)
write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2, @ANYRESOCT=0x0, @ANYRES32=r1], 0xa)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000000410a030000100000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a979698eac68522ce3d0000070900010073797a31000000000900030073797a3200", @ANYRES32=r0, @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001e0005070000000000000000ac1414aa0000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000240009000000000000000000000000000000000000000000000000000000000000000000c34e7c8e91031ce2f5b0093bf83f8e6c3178765e587cc97a1f42a0698a311d2417fdcd5689b61b9e2db14ebce0326ff23a94441508a834f7"], 0x64}}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@gettfilter={0x34, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x5, 0xa}, {0xf735c1cbd3ef9f3a, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x81}]}, 0x34}}, 0x41)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'batadv_slave_1\x00', @random="7cf1e97c9e4f"})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900000037000000ff0000000000000024000000000000002900000032000000fe80000000000000000000000000003b", @ANYRES32=0x0, @ANYBLOB="3c328e17"], 0x40}}], 0x1, 0x4008090)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4e22, 0x5, 0x4e23, 0x2, 0x2, 0x20, 0xc0, 0x3a, 0x0, r9}, {0x7, 0x18000, 0x8, 0x0, 0xaf92, 0x4, 0xfffffffffffffff8, 0x6}, {0x5, 0x7, 0x5, 0x6}, 0x7, 0x6e6bb1, 0x1, 0x1, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x85fb0b38acf95e37}, 0x2, @in=@loopback, 0x3502, 0x3, 0x0, 0x9, 0x0, 0x2}}, 0xe8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba000400080000000000020000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029000edd0000"], 0x38}}, 0x0)

3m35.444904337s ago: executing program 1 (id=5046):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
write$cgroup_int(r3, &(0x7f0000000080)=0x6, 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x1ff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x70bd24, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x26a7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x80)
r9 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0)
sendmsg$inet(r9, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x4, 0x5, 0x2, 0xfffa}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xfb, 0x1, 0x0, 0x1, 0x8, 0x10}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9}]]}, 0x7c}}, 0x0)

3m34.542299062s ago: executing program 1 (id=5055):
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYRESOCT], 0x2c}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7100ffdbdf251b000000070021"], 0x24}, 0x1, 0x1400000000000000, 0x0, 0x48800}, 0x48080)

3m34.39614389s ago: executing program 1 (id=5056):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) (async)
r5 = socket(0x2, 0x80805, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r7, 0x5}, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) (async, rerun: 32)
r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)

3m34.276315688s ago: executing program 32 (id=5056):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) (async)
r5 = socket(0x2, 0x80805, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r7, 0x5}, 0x8)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) (async, rerun: 32)
r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)

2.061412865s ago: executing program 3 (id=7768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x4800000000000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
close(r2)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.057171841s ago: executing program 3 (id=7769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00359069aef3e2d00000000020000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0)
pipe(&(0x7f0000002740))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4, <r9=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)='%pB    \x00'}, 0x20)
ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f00000003c0)={0xfda, 0x0, 0xffff, 0xffffabb1, 0x3})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8460081001b000800450000070000000000000078ac1e0001ac1414aa0b009078030000004000000000000000002f0000ac14140ae00000014424cef3e000000200000fff6401010100000002ac1414aa000007ffffffffff000000099404000007035d00040086dd0000ffff"], 0x0)

1.738656567s ago: executing program 3 (id=7772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae, 0x40000}}, 0x20}}, 0x8000)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40)
unshare(0x6a040000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r6, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
recvfrom$ax25(r4, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x58, r9, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x2, 0x1}, {0x3c}, {0x4, 0x1}, {0x16, 0x1}, {0x60}, {0x3}, {0x12, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x30}, {0x60, 0x1}, {0x1b}, {0x48, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x65, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0xc}, {0x16, 0x1}, {0x4}, {0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5b4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x101, 0x400}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2d9}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4c051)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)

840.554906ms ago: executing program 0 (id=7782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newlink={0x1, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff}) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0}) (async)
recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)

839.579373ms ago: executing program 3 (id=7783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000200000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000065004000000032ee0721c7420b2759ce44f705008353a1551f808ba843096ee97775a7d41774557fc68a4dc326b944362e8f4d3e8fb9c8487779ac196654cf1b8b9d9337d3a47fa910133f5bbb2b"], 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000200000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000065004000000032ee0721c7420b2759ce44f705008353a1551f808ba843096ee97775a7d41774557fc68a4dc326b944362e8f4d3e8fb9c8487779ac196654cf1b8b9d9337d3a47fa910133f5bbb2b"], 0x28}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

827.409292ms ago: executing program 3 (id=7784):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f00000001c0), &(0x7f00000003c0)='%pB    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000003c0)='%pB    \x00'}, 0x20)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x22, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3afd7991, 0x0, 0x0, 0x0, 0x81}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffce4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc88}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x4, 0x6, 0x8, 0x2c4c, 0xd85}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}]}, &(0x7f0000000580)='syzkaller\x00', 0x9, 0xb8, &(0x7f00000005c0)=""/184, 0x41000, 0x9, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000680)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xc, 0xaf2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r6, r7, 0x1], &(0x7f00000008c0)=[{0x2, 0x4, 0x0, 0xc}, {0x3, 0x3, 0x7, 0xa}, {0x0, 0x5, 0x0, 0x3}], 0x10, 0x2}, 0x94)
bind$802154_dgram(r1, &(0x7f00000002c0)={0x24, @none={0x0, 0x1}}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400e000", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="01002000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf252700000008000300", @ANYRES32=r10, @ANYBLOB="04002a0006003600060000000a00060076a3cdac698f000004005f0004005f00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x84)

745.098699ms ago: executing program 0 (id=7786):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) (async)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) (async, rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000340)=0x4) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}}, 0x48040)
nanosleep(&(0x7f0000000000), 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xffffffffffffffd8, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

743.749668ms ago: executing program 3 (id=7788):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x29, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0xfffd, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r8, 0x12, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280))
r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r9}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r9)
close(r10)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc84, 0x100, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e)

608.761849ms ago: executing program 0 (id=7789):
socket$kcm(0x10, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={<r9=>0x0, 0xf9, "8c8424e0926ac7ecfba644075be1fbd8c2ad0d8591abc06aeb643b6401480a103f31ff192de87d77ee118f08c0fb0ce595ae2db344a1588b6c6d9213e7ffce4465a18f1ac81d5f9e088fa8594e8a9c6fa3cf8e3a2bd87ad6467bd04b3ec5c09db6a32b6676856550196e44b2a9e5a5c9942bdb5416633417a71d606d5d736a9ef50a980215a335511c8ea8a23f4af10169d1ed1349477b0ddb25fa1778f2ffe26def5a02819f93a64993cc40b5073437c6ecc3a54c2f1e9d7e275850424693b324fa73e271267428ad11949727a139e20c636f1dba1f28cc89617645bf808b268d925512f42110d7e02167351383d8b9bf575164053d39eebe"}, &(0x7f00000000c0)=0x101)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x8}, 0x28)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r9, 0x7}, 0x8)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x40)

427.910764ms ago: executing program 2 (id=7791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x1)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='rpc_clnt_clone_err\x00', r2, 0x0, 0xfffffffffffff992}, 0x18)

424.665299ms ago: executing program 0 (id=7792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
recvfrom(r0, &(0x7f0000000100)=""/137, 0x89, 0x2001, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x5, @remote}}}, 0x80)

349.558639ms ago: executing program 0 (id=7793):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f00000002c0)=0x9, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448c9, 0x0)
sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000180)="5440caa287f3778894bb87ab40e30af2c3e6d4d14053d588f13464ba78f9136f50fc376cbaa57ca583288d768cee60fef7a96366e2e42fab59", 0x39}], 0x2}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

348.668874ms ago: executing program 2 (id=7794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400004000000000000", @ANYRES32=r2, @ANYBLOB="04002a0006003600060000000a00060076a3cdac698f000004005f0004005f00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x84)

281.377402ms ago: executing program 2 (id=7795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x3, 0x8, 0x4, 0x8}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ffa9fcd4b2f6"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000885) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

280.618698ms ago: executing program 2 (id=7796):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x52, &(0x7f0000000300)=""/82, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x5b}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x1, 0x3, 0x4}, {0x3, 0x1, 0xc, 0x8}, {0x5, 0x3, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2}], 0x10, 0x77e}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1, r2})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
poll(&(0x7f00000000c0)=[{r3, 0x2}, {r3, 0x15e}, {r4, 0x8}], 0x3, 0x2)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8)

199.647368ms ago: executing program 2 (id=7797):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x20004041)
write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES32=r1], 0xa)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r8 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000001e0005070000000000000000ac1414aa00000000000000000000000000000000e4000000ffffffff000000000000000000000000000000000000000024000900"/100], 0x64}}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r10)
socket$kcm(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x4008090)

193.9761ms ago: executing program 0 (id=7798):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0000c000"/20, @ANYRES32=0x0, @ANYRES32=r0], 0x50)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x8a, 0x0, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$rds(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004844)

0s ago: executing program 2 (id=7799):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x48, r7, 0x402, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2d}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
socket(0x8, 0x3, 0x0)

kernel console output (not intermixed with test programs):

T3760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6373'.
[  546.331967][ T3761] netlink: 'syz.0.6372': attribute type 10 has an invalid length.
[  546.335270][ T3761] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  546.338185][ T3761] bond0: (slave wlan1): refused to change device type
[  546.342916][ T3761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6372'.
[  546.356735][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6373'.
[  546.427214][ T3767] "syz.3.6374" (3767) uses obsolete ecb(arc4) skcipher
[  546.696181][ T3774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6376'.
[  546.946092][ T3782] wlan0: entered promiscuous mode
[  547.054004][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6380'.
[  547.060136][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6380'.
[  547.143712][ T3796] netlink: 'syz.0.6382': attribute type 10 has an invalid length.
[  547.147424][ T3796] bond0: (slave wlan1): Opening slave failed
[  547.609166][ T3829] netlink: 'syz.0.6388': attribute type 10 has an invalid length.
[  547.613092][ T3829] bond0: (slave wlan1): Opening slave failed
[  547.745483][ T3844] syzkaller0: entered promiscuous mode
[  547.747650][ T3844] syzkaller0: entered allmulticast mode
[  547.975793][ T3866] IPVS: Unknown mcast interface: bridge_slave_0
[  547.979535][ T3866] netlink: 'syz.0.6395': attribute type 4 has an invalid length.
[  548.131037][ T3874] netlink: 'syz.3.6398': attribute type 10 has an invalid length.
[  548.141064][ T3874] bond0: (slave wlan1): Opening slave failed
[  548.206647][ T3880] netlink: 'syz.0.6400': attribute type 13 has an invalid length.
[  548.210582][ T3880] netlink: 'syz.0.6400': attribute type 17 has an invalid length.
[  548.366590][ T3902] tap0: tun_chr_ioctl cmd 1074025677
[  548.369104][ T3902] tap0: linktype set to 257
[  548.372418][ T3902] netlink: 'syz.0.6405': attribute type 10 has an invalid length.
[  548.377597][ T3902] bond0: (slave wlan1): Opening slave failed
[  548.384450][ T3902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6405'.
[  548.413503][ T3904] netlink: 'syz.3.6406': attribute type 10 has an invalid length.
[  548.418410][ T3904] bond0: (slave wlan1): Opening slave failed
[  548.424877][ T3904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6406'.
[  548.424880][ T3905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6406'.
[  548.427291][ T3905] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  548.654977][ T3908] netlink: 'syz.2.6407': attribute type 12 has an invalid length.
[  548.701759][ T3910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6408'.
[  549.182683][ T3939] "syz.2.6414" (3939) uses obsolete ecb(arc4) skcipher
[  549.247303][ T3945] bond0: (slave wlan1): Opening slave failed
[  549.375554][ T3957] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  549.898131][ T3987] net_ratelimit: 7 callbacks suppressed
[  549.898150][ T3987] openvswitch: netlink: Message has 8 unknown bytes.
[  550.235195][ T4008] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  551.855649][ T4037] validate_nla: 6 callbacks suppressed
[  551.855663][ T4037] netlink: 'syz.2.6437': attribute type 13 has an invalid length.
[  551.925982][ T4042] netlink: 'syz.2.6438': attribute type 10 has an invalid length.
[  551.929596][ T4042] bond0: (slave wlan1): Opening slave failed
[  551.936827][ T4042] __nla_validate_parse: 7 callbacks suppressed
[  551.936841][ T4042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6438'.
[  552.261290][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6440'.
[  552.294904][ T4048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6440'.
[  552.501850][ T4053] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  552.556979][ T4055] netlink: 'syz.2.6442': attribute type 10 has an invalid length.
[  552.562196][ T4055] bond0: (slave wlan1): Opening slave failed
[  552.740875][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6444'.
[  552.745628][   T55] block nbd2: Receive control failed (result -107)
[  552.763449][ T4062] netlink: 'syz.2.6444': attribute type 10 has an invalid length.
[  552.766765][ T4063] netlink: 'syz.2.6444': attribute type 10 has an invalid length.
[  552.768178][ T4062] bond0: (slave wlan1): Opening slave failed
[  552.775950][ T4063] bond0: (slave wlan1): Opening slave failed
[  552.779816][ T4061] nbd2: detected capacity change from 0 to 32
[  552.791509][ T4064] block nbd2: Dead connection, failed to find a fallback
[  552.794457][ T4064] block nbd2: shutting down sockets
[  552.796567][ T4064] blk_print_req_error: 64 callbacks suppressed
[  552.796582][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.805736][ T4064] buffer_io_error: 64 callbacks suppressed
[  552.805753][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.813067][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.816841][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.822635][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.826283][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.830028][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.833763][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.837152][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.843329][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.846708][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.850440][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.853928][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.857765][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.863538][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.867263][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.871129][ T4064] ldm_validate_partition_table(): Disk read failed.
[  552.873730][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.877747][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.883676][ T4064] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.887242][ T4064] Buffer I/O error on dev nbd2, logical block 0, async page read
[  552.891139][ T4064] Dev nbd2: unable to read RDB block 0
[  552.893854][ T4064]  nbd2: unable to read partition table
[  552.903248][ T4064] ldm_validate_partition_table(): Disk read failed.
[  552.906368][ T4064] Dev nbd2: unable to read RDB block 0
[  552.909200][ T4064]  nbd2: unable to read partition table
[  552.936097][ T4072] netlink: 'syz.2.6447': attribute type 10 has an invalid length.
[  552.944723][ T4072] bond0: (slave wlan1): Opening slave failed
[  553.065221][ T4081] netlink: 'syz.2.6448': attribute type 10 has an invalid length.
[  553.069513][ T4081] bond0: (slave wlan1): Opening slave failed
[  553.079369][ T4078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6448'.
[  553.694902][ T4083] IPVS: Error connecting to the multicast addr
[  553.782887][ T4091] wg1 speed is unknown, defaulting to 1000
[  553.786761][ T4091] lo speed is unknown, defaulting to 1000
[  553.865557][ T4093] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  553.934201][ T4093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6452'.
[  554.086922][ T4096] netlink: 'syz.3.6451': attribute type 13 has an invalid length.
[  554.087628][ T4109] wk: renamed from gre0
[  554.097183][ T4109] wk: entered promiscuous mode
[  554.099472][ T4109] A link change request failed with some changes committed already. Interface wk may have been left with an inconsistent configuration, please check.
[  554.187385][ T4096] ip6gretap0: entered promiscuous mode
[  554.194729][ T4115] netlink: 'syz.3.6451': attribute type 10 has an invalid length.
[  554.207499][ T4096] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.212811][ T4096] 8021q: adding VLAN 0 to HW filter on device team0
[  554.222270][ T4096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  554.247895][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6451'.
[  554.257369][ T4115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6451'.
[  554.264059][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6451'.
[  554.268124][ T4115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6451'.
[  554.435599][ T4120] wk: left promiscuous mode
[  554.515118][ T4129] netlink: 'syz.3.6459': attribute type 29 has an invalid length.
[  554.858073][ T4147] bond0: (slave wlan1): Opening slave failed
[  554.964444][ T4149] IPVS: Error connecting to the multicast addr
[  555.667920][ T4187] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  555.672005][ T4187] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  555.761916][ T4198] "syz.2.6475" (4198) uses obsolete ecb(arc4) skcipher
[  555.800611][ T4205] bond0: (slave wlan1): Opening slave failed
[  556.228694][ T4242] bond0: (slave wlan1): refused to change device type
[  556.589018][ T4270] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  556.655867][ T4273] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  556.663189][ T4273] bond0: (slave wlan1): Opening slave failed
[  556.737944][ T4278] bond0: (slave wlan1): Opening slave failed
[  556.997321][ T4280] __nla_validate_parse: 13 callbacks suppressed
[  556.997344][ T4280] netlink: 652 bytes leftover after parsing attributes in process `syz.0.6495'.
[  557.114101][ T4284] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  557.225296][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6496'.
[  557.387870][ T4302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6500'.
[  557.613775][ T4321] validate_nla: 8 callbacks suppressed
[  557.613794][ T4321] netlink: 'syz.3.6504': attribute type 10 has an invalid length.
[  557.622801][ T4321] bond0: (slave wlan1): Opening slave failed
[  557.661426][ T4321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6504'.
[  557.737187][ T4332] "syz.2.6505" (4332) uses obsolete ecb(arc4) skcipher
[  558.074461][ T4359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6510'.
[  558.083289][ T4362] netlink: 'syz.2.6511': attribute type 10 has an invalid length.
[  558.087421][ T4362] bond0: (slave wlan1): Opening slave failed
[  558.226525][ T4373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6513'.
[  558.856691][ T4403] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  558.865037][ T4403] netlink: 'syz.0.6518': attribute type 4 has an invalid length.
[  559.138072][ T4418] netlink: 'syz.3.6521': attribute type 13 has an invalid length.
[  559.718958][ T4439] "syz.0.6524" (4439) uses obsolete ecb(arc4) skcipher
[  559.796769][ T4444] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  559.841289][ T4446] netlink: 'syz.0.6527': attribute type 13 has an invalid length.
[  559.985141][ T4454] "syz.3.6529" (4454) uses obsolete ecb(arc4) skcipher
[  559.988958][ T4454] wlan0: left promiscuous mode
[  559.991330][ T4456] netlink: 'syz.0.6530': attribute type 13 has an invalid length.
[  560.053288][ T4462] netlink: 'syz.0.6532': attribute type 10 has an invalid length.
[  560.056873][ T4462] bond0: (slave wlan1): refused to change device type
[  560.158830][ T4473] netlink: 'syz.2.6533': attribute type 10 has an invalid length.
[  560.165089][ T4473] bond0: (slave wlan1): Opening slave failed
[  560.176095][ T4466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6533'.
[  560.194103][ T4475] syzkaller0: entered promiscuous mode
[  560.197053][ T4475] syzkaller0: entered allmulticast mode
[  560.202383][ T4474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.218771][ T4474] tipc: Resetting bearer <eth:syzkaller0>
[  560.234954][ T4474] tipc: Disabling bearer <eth:syzkaller0>
[  560.374759][ T4488] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  560.424110][ T4498] wlan0: entered promiscuous mode
[  560.433378][ T4500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6541'.
[  560.797166][ T4530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6550'.
[  560.825854][ T4534] netlink: 'syz.2.6549': attribute type 10 has an invalid length.
[  560.831608][ T4534] bond0: (slave wlan1): Opening slave failed
[  560.838208][ T4528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6549'.
[  560.882112][ T4541] netlink: 'syz.3.6552': attribute type 13 has an invalid length.
[  562.352851][ T4594] IPv6: Can't replace route, no match found
[  562.362969][ T4594] __nla_validate_parse: 1 callbacks suppressed
[  562.362981][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6564'.
[  562.379387][ T4594] bond0: (slave wlan1): Opening slave failed
[  562.630755][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6571'.
[  562.639092][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6571'.
[  562.654487][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  562.753848][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6572'.
[  562.757552][ T4634] bond0: invalid ARP target 0.0.0.0 specified for addition
[  562.760969][ T4634] bond0: option arp_ip_target: invalid value (0)
[  562.765380][ T4634] validate_nla: 2 callbacks suppressed
[  562.765396][ T4634] netlink: 'syz.3.6572': attribute type 10 has an invalid length.
[  562.773575][ T4634] bond0: (slave wlan1): Opening slave failed
[  562.923533][ T4653] "syz.0.6575" (4653) uses obsolete ecb(arc4) skcipher
[  562.990388][ T4656] wg1 speed is unknown, defaulting to 1000
[  562.993175][ T4656] lo speed is unknown, defaulting to 1000
[  563.309188][ T4679] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  563.405198][ T4686] netlink: 'syz.3.6584': attribute type 3 has an invalid length.
[  563.407681][ T4686] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6584'.
[  563.466702][ T4686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  563.658032][ T4703] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  563.688412][ T4708] netlink: 'syz.0.6588': attribute type 13 has an invalid length.
[  563.795426][ T4721] "syz.0.6591" (4721) uses obsolete ecb(arc4) skcipher
[  563.924878][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'.
[  564.019243][ T4734] netlink: 'syz.0.6592': attribute type 10 has an invalid length.
[  564.023694][ T4734] bond0: (slave wlan1): Opening slave failed
[  564.027334][ T4734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6592'.
[  564.052473][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6594'.
[  564.064948][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'.
[  564.385427][ T4756] netlink: 'syz.3.6598': attribute type 83 has an invalid length.
[  564.401796][ T4756] wg1 speed is unknown, defaulting to 1000
[  564.405240][ T4756] lo speed is unknown, defaulting to 1000
[  564.701817][ T4770] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  565.471585][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6606'.
[  565.678343][ T4825] netlink: 'syz.0.6611': attribute type 1 has an invalid length.
[  565.685920][ T4825] netlink: 'syz.0.6611': attribute type 4 has an invalid length.
[  565.694703][ T4825] netlink: 'syz.0.6611': attribute type 13 has an invalid length.
[  565.781474][ T4826] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  566.077262][ T4839] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  566.201568][ T4845] netlink: 'syz.3.6614': attribute type 10 has an invalid length.
[  566.204715][ T4845] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  566.208322][ T4845] bond0: (slave wlan1): Opening slave failed
[  566.282257][ T4853] IPVS: Scheduler module ip_vs_sip not found
[  567.205170][ T4896] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  567.209133][ T4896] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  567.315183][ T4903] netlink: 'syz.0.6625': attribute type 10 has an invalid length.
[  567.319496][ T4903] bond0: (slave wlan1): Opening slave failed
[  567.643299][ T4922] __nla_validate_parse: 11 callbacks suppressed
[  567.643325][ T4922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6629'.
[  567.664787][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6629'.
[  567.858705][ T4934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6631'.
[  567.858737][ T4933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6631'.
[  568.086920][ T4936] validate_nla: 1 callbacks suppressed
[  568.086996][ T4936] netlink: 'syz.0.6632': attribute type 10 has an invalid length.
[  568.103479][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6632'.
[  568.106437][ T4936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6632'.
[  568.111170][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6632'.
[  568.114060][ T4936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6632'.
[  568.202256][ T4940] IPVS: Error connecting to the multicast addr
[  568.965807][ T5005] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6647'.
[  568.977285][ T5005] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6647'.
[  569.083223][ T5016] netlink: 'syz.3.6650': attribute type 1 has an invalid length.
[  569.122840][ T5017] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  569.127646][ T5008] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  569.203433][ T5025] netlink: 'syz.2.6652': attribute type 3 has an invalid length.
[  569.207036][ T5025] "syz.2.6652" (5025) uses obsolete ecb(arc4) skcipher
[  569.242484][ T5023] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  569.247724][ T5023] netlink: 'syz.3.6651': attribute type 4 has an invalid length.
[  569.318356][ T5028] netlink: 'syz.2.6653': attribute type 10 has an invalid length.
[  569.323177][ T5028] bond0: (slave wlan1): Opening slave failed
[  570.022754][ T5059] syzkaller1: entered promiscuous mode
[  570.024851][ T5059] syzkaller1: entered allmulticast mode
[  570.037337][ T5059] netlink: 'syz.0.6660': attribute type 1 has an invalid length.
[  570.067190][ T5059] bond8: entered promiscuous mode
[  570.069506][ T5059] 8021q: adding VLAN 0 to HW filter on device bond8
[  570.081304][ T5059] batadv1: entered promiscuous mode
[  570.083439][ T5059] batadv1: entered allmulticast mode
[  570.086950][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv1
[  570.091455][ T5059] bond8: (slave batadv1): making interface the new active one
[  570.095543][ T5059] bond8: (slave batadv1): Enslaving as an active interface with an up link
[  570.602000][ T5095] wlan0: left promiscuous mode
[  570.727265][ T5105] netlink: 'syz.0.6670': attribute type 13 has an invalid length.
[  570.858100][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  570.877723][ T5107] netlink: 'syz.0.6671': attribute type 10 has an invalid length.
[  570.883253][ T5107] bond0: (slave wlan1): Opening slave failed
[  571.588081][ T5131] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  571.691835][ T5133] netlink: 'syz.3.6675': attribute type 10 has an invalid length.
[  571.694799][ T5133] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  571.698771][ T5133] bond0: (slave wlan1): Opening slave failed
[  571.723807][ T5133] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  571.727701][ T5133] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  571.898023][ T5149] wg1 speed is unknown, defaulting to 1000
[  571.901303][ T5149] lo speed is unknown, defaulting to 1000
[  572.261802][ T5176] netlink: 'syz.2.6684': attribute type 10 has an invalid length.
[  572.519563][ T5187] syzkaller1: entered promiscuous mode
[  572.522868][ T5187] syzkaller1: entered allmulticast mode
[  572.530932][ T5187] bond1: (slave ip6gretap1): Releasing backup interface
[  572.591202][ T5189] bond0: (slave wlan1): Opening slave failed
[  573.193454][ T5191] validate_nla: 1 callbacks suppressed
[  573.193465][ T5191] netlink: 'syz.2.6688': attribute type 10 has an invalid length.
[  573.201472][ T5191] bond0: (slave wlan1): Opening slave failed
[  573.206807][ T5191] __nla_validate_parse: 14 callbacks suppressed
[  573.206819][ T5191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6688'.
[  573.247515][ T5195] netlink: 'syz.0.6689': attribute type 10 has an invalid length.
[  573.253426][ T5195] bond0: (slave wlan1): Opening slave failed
[  573.257911][ T5195] netlink: 'syz.0.6689': attribute type 2 has an invalid length.
[  573.261432][ T5195] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6689'.
[  573.749101][ T5203] netlink: 'syz.2.6691': attribute type 10 has an invalid length.
[  573.752640][ T5203] bond0: (slave wlan1): Opening slave failed
[  573.757123][ T5203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6691'.
[  573.834735][ T5205] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  574.104178][ T5223] netlink: 'syz.0.6694': attribute type 1 has an invalid length.
[  574.107423][ T5223] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6694'.
[  574.112208][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6694'.
[  574.262373][ T5240] vlan2: entered promiscuous mode
[  574.264270][ T5240] vlan2: entered allmulticast mode
[  574.266180][ T5240] bond0: entered allmulticast mode
[  574.355491][ T5240] netlink: 'syz.0.6696': attribute type 13 has an invalid length.
[  575.308827][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6702'.
[  575.315103][ T5273] wlan0: entered promiscuous mode
[  575.364138][ T5271] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  575.379023][ T5271] netlink: 'syz.0.6703': attribute type 4 has an invalid length.
[  575.493554][ T5291] netlink: 'syz.3.6707': attribute type 13 has an invalid length.
[  575.543306][ T5297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6709'.
[  575.663422][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.668495][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.674522][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.677273][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.680512][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.683275][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.686052][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.700642][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.704005][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.707404][ T5307] openvswitch: netlink: IPv4 tun info is not correct
[  575.837721][ T5313] IPVS: Error connecting to the multicast addr
[  575.918175][ T5326] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  575.933704][ T5326] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6717'.
[  575.940844][ T5326] netlink: 'syz.3.6717': attribute type 10 has an invalid length.
[  575.943665][ T5326] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  575.948163][ T5326] bond0: (slave wlan1): Opening slave failed
[  576.955527][ T5374] netlink: 'syz.2.6728': attribute type 3 has an invalid length.
[  576.958245][ T5374] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6728'.
[  577.022360][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6729'.
[  577.259493][ T5396] bond0: (slave wlan1): Opening slave failed
[  577.392043][ T5408] wg1 speed is unknown, defaulting to 1000
[  577.394832][ T5408] lo speed is unknown, defaulting to 1000
[  577.751689][ T5432] IPVS: Error connecting to the multicast addr
[  577.987664][ T5448] 8021q: adding VLAN 0 to HW filter on device bond9
[  577.995613][ T5448] bridge0: port 1(bond9) entered blocking state
[  578.000634][ T5448] bridge0: port 1(bond9) entered disabled state
[  578.002886][ T5448] bond9: entered allmulticast mode
[  578.006862][ T5448] bond9: entered promiscuous mode
[  578.246206][ T5472] nbd: nbd0 already in use
[  578.762449][ T5500] IPVS: Unknown mcast interface: bridge_slave_0
[  578.883553][ T5517] __nla_validate_parse: 6 callbacks suppressed
[  578.883566][ T5517] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6763'.
[  579.419865][ T5536] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  579.442571][ T5536] bond8: (slave batadv1): Releasing active interface
[  579.447789][ T5536] bond9: left allmulticast mode
[  579.454365][ T5536] bond9: left promiscuous mode
[  579.456423][ T5536] bridge0: port 1(bond9) entered disabled state
[  579.566223][ T5536] validate_nla: 3 callbacks suppressed
[  579.566240][ T5536] netlink: 'syz.0.6767': attribute type 10 has an invalid length.
[  579.571613][ T5536] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  579.578050][ T5536] bond0: (slave wlan1): refused to change device type
[  579.636881][ T5536] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  579.640955][ T5536] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  579.690732][ T5547] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6769'.
[  579.694609][ T5547] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6769'.
[  579.758236][ T5550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6770'.
[  579.763060][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6770'.
[  580.494116][ T5567] netlink: 'syz.0.6774': attribute type 13 has an invalid length.
[  580.498347][ T5569] netlink: 'syz.0.6774': attribute type 13 has an invalid length.
[  580.546399][ T5578] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  580.633629][ T5598] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  580.734642][ T5612] netlink: 'syz.3.6780': attribute type 10 has an invalid length.
[  580.738706][ T5612] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  580.745540][ T5612] bond0: (slave wlan1): Opening slave failed
[  580.756924][ T5612] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  580.763743][ T5612] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  580.771292][ T5613] "syz.2.6783" (5613) uses obsolete ecb(arc4) skcipher
[  580.779141][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6783'.
[  581.197023][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6793'.
[  581.197641][ T5655] netlink: 'syz.0.6793': attribute type 10 has an invalid length.
[  581.204064][ T5655] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  581.208223][ T5655] bond0: (slave wlan1): refused to change device type
[  581.256764][ T5659] "syz.0.6794" (5659) uses obsolete ecb(arc4) skcipher
[  581.259600][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6795'.
[  581.298463][ T5659] bond8: left promiscuous mode
[  581.301034][ T5659] batadv1: left promiscuous mode
[  581.303115][ T5659] batadv1: left allmulticast mode
[  581.313026][ T5661] "syz.2.6795" (5661) uses obsolete ecb(arc4) skcipher
[  581.375501][ T5665] netlink: 'syz.2.6797': attribute type 13 has an invalid length.
[  581.419165][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6798'.
[  581.425243][ T5669] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  581.564725][ T5669] netlink: 'syz.2.6799': attribute type 10 has an invalid length.
[  581.569976][ T5669] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  581.573076][ T5669] bond0: (slave wlan1): refused to change device type
[  581.578067][ T5669] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  581.582123][ T5669] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  581.603932][ T5683] netlink: 'syz.3.6800': attribute type 10 has an invalid length.
[  581.614139][ T5683] bond0: (slave wlan1): Opening slave failed
[  581.782055][ T5691] netlink: 'syz.0.6802': attribute type 10 has an invalid length.
[  581.785646][ T5691] bond0: (slave wlan1): refused to change device type
[  581.937183][ T5702] "syz.0.6806" (5702) uses obsolete ecb(arc4) skcipher
[  582.082725][ T5713] netlink: 'syz.0.6807': attribute type 10 has an invalid length.
[  582.089447][ T5713] bond0: (slave wlan1): refused to change device type
[  582.134200][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6808'.
[  583.075196][ T5769] "syz.0.6818" (5769) uses obsolete ecb(arc4) skcipher
[  583.084957][ T5765] "syz.3.6817" (5765) uses obsolete ecb(arc4) skcipher
[  583.093035][ T5765] wlan0: left promiscuous mode
[  583.230871][ T5775] syzkaller1: entered promiscuous mode
[  583.233284][ T5775] syzkaller1: entered allmulticast mode
[  584.013525][ T5836] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  584.026240][ T5836] __nla_validate_parse: 14 callbacks suppressed
[  584.026256][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6832'.
[  584.061984][ T5831] bond0: (slave wlan1): refused to change device type
[  584.067802][ T5831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  584.073880][ T5831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  584.120985][ T5841] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  584.124101][ T5841] bond0: (slave wlan1): refused to change device type
[  584.436794][ T5845] wg1 speed is unknown, defaulting to 1000
[  584.440191][ T5845] lo speed is unknown, defaulting to 1000
[  585.077100][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6837'.
[  585.191778][ T5906] "syz.2.6839" (5906) uses obsolete ecb(arc4) skcipher
[  585.606151][ T5945] validate_nla: 14 callbacks suppressed
[  585.606164][ T5945] netlink: 'syz.2.6846': attribute type 13 has an invalid length.
[  585.815598][ T5954] netlink: 'syz.2.6848': attribute type 10 has an invalid length.
[  585.819225][ T5954] bond0: (slave wlan1): refused to change device type
[  586.028399][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6851'.
[  586.037597][ T5964] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  586.046176][ T5964] batman_adv: batadv0: Adding interface: gretap2
[  586.048845][ T5964] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  586.057556][ T5964] batman_adv: batadv0: Interface activated: gretap2
[  586.110704][ T5970] netlink: 'syz.3.6852': attribute type 3 has an invalid length.
[  586.161955][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6853'.
[  586.244496][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6854'.
[  586.445988][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6857'.
[  586.840853][ T6025] netlink: 'syz.0.6862': attribute type 10 has an invalid length.
[  586.843862][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6862'.
[  586.847383][ T6026] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6862'.
[  586.852479][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6862'.
[  586.855589][ T6026] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6862'.
[  586.923545][ T6036] netlink: 'syz.3.6865': attribute type 10 has an invalid length.
[  587.345922][ T6076] wlan0: entered promiscuous mode
[  587.348583][ T6076] net_ratelimit: 58 callbacks suppressed
[  587.348597][ T6076] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  587.504064][ T6094] netlink: 'syz.2.6878': attribute type 13 has an invalid length.
[  587.582058][ T6096] netlink: 'syz.0.6879': attribute type 10 has an invalid length.
[  587.622695][ T6103] netlink: 'syz.0.6882': attribute type 13 has an invalid length.
[  587.986102][ T6142] lo: entered promiscuous mode
[  587.987807][ T6142] tunl0: entered promiscuous mode
[  587.998682][ T6142] gre0: entered promiscuous mode
[  588.002390][ T6142] gretap0: entered promiscuous mode
[  588.004144][ T6142] erspan0: entered promiscuous mode
[  588.006352][ T6142] ip_vti0: entered promiscuous mode
[  588.013172][ T6142] ip6_vti0: entered promiscuous mode
[  588.015243][ T6142] sit0: entered promiscuous mode
[  588.016923][ T6142] ip6tnl0: entered promiscuous mode
[  588.028951][ T6142] ip6gre0: entered promiscuous mode
[  588.031986][ T6142] syz_tun: entered promiscuous mode
[  588.041233][ T6142] bridge0: entered promiscuous mode
[  588.044561][ T6142] vcan0: entered promiscuous mode
[  588.049297][ T6142] bond0: entered promiscuous mode
[  588.054649][ T6142] team0: entered promiscuous mode
[  588.059470][ T6142] dummy0: entered promiscuous mode
[  588.061626][ T6142] nlmon0: entered promiscuous mode
[  588.063552][ T6142] caif0: entered promiscuous mode
[  588.065422][ T6142] batadv0: entered promiscuous mode
[  588.067279][ T6142] vxcan0: entered promiscuous mode
[  588.070010][ T6148] netlink: 'syz.0.6890': attribute type 10 has an invalid length.
[  588.072666][ T6142] vxcan1: entered promiscuous mode
[  588.074358][ T6142] veth0: entered promiscuous mode
[  588.076689][ T6142] veth1: entered promiscuous mode
[  588.078392][ T6142] wg0: entered promiscuous mode
[  588.081801][ T6142] wg1: entered promiscuous mode
[  588.083527][ T6142] wg2: entered promiscuous mode
[  588.085126][ T6142] veth0_to_bridge: entered promiscuous mode
[  588.087131][ T6142] bridge_slave_0: entered promiscuous mode
[  588.089058][ T6142] veth1_to_bridge: entered promiscuous mode
[  588.091977][ T6142] bridge_slave_1: entered promiscuous mode
[  588.094004][ T6142] veth0_to_bond: entered promiscuous mode
[  588.096002][ T6142] bond_slave_0: entered promiscuous mode
[  588.097950][ T6142] veth1_to_bond: entered promiscuous mode
[  588.100151][ T6142] bond_slave_1: entered promiscuous mode
[  588.102494][ T6142] veth0_to_team: entered promiscuous mode
[  588.104446][ T6142] team_slave_0: entered promiscuous mode
[  588.106278][ T6142] veth1_to_team: entered promiscuous mode
[  588.108212][ T6142] team_slave_1: entered promiscuous mode
[  588.110680][ T6142] veth0_to_batadv: entered promiscuous mode
[  588.112763][ T6142] xfrm0: entered promiscuous mode
[  588.114523][ T6142] veth0_to_hsr: entered promiscuous mode
[  588.116421][ T6142] veth1_to_hsr: entered promiscuous mode
[  588.118420][ T6142] hsr0: entered promiscuous mode
[  588.120299][ T6142] vlan0: entered promiscuous mode
[  588.122045][ T6142] vlan1: entered promiscuous mode
[  588.123859][ T6142] macvlan0: entered promiscuous mode
[  588.125675][ T6142] macvlan1: entered promiscuous mode
[  588.127430][ T6142] ipvlan0: entered promiscuous mode
[  588.129269][ T6142] ipvlan1: entered promiscuous mode
[  588.131334][ T6142] macvtap0: entered promiscuous mode
[  588.133041][ T6142] macsec0: entered promiscuous mode
[  588.134832][ T6142] geneve0: entered promiscuous mode
[  588.136644][ T6142] geneve1: entered promiscuous mode
[  588.138389][ T6142] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode
[  588.141564][ T6142] gtp0: entered promiscuous mode
[  588.143216][ T6142] gretap1: entered promiscuous mode
[  588.145173][ T6142] vlan0004: entered promiscuous mode
[  588.147037][ T6142] gtp1: entered promiscuous mode
[  588.148691][ T6142] gtp2: entered promiscuous mode
[  588.150457][ T6142] ip6tnl1: entered promiscuous mode
[  588.152115][ T6142] gtp3: entered promiscuous mode
[  588.153757][ T6142] gtp4: entered promiscuous mode
[  588.155480][ T6142] gtp5: entered promiscuous mode
[  588.157190][ T6142] syztnl2: entered promiscuous mode
[  588.158886][ T6142] gtp6: entered promiscuous mode
[  588.160766][ T6142] gtp7: entered promiscuous mode
[  588.162420][ T6142] gtp8: entered promiscuous mode
[  588.164154][ T6142] gtp9: entered promiscuous mode
[  588.165963][ T6142] gtp10: entered promiscuous mode
[  588.167684][ T6142] gtp11: entered promiscuous mode
[  588.169372][ T6142] gtp12: entered promiscuous mode
[  588.171601][ T6142] gtp13: entered promiscuous mode
[  588.173590][ T6142] gtp14: entered promiscuous mode
[  588.175263][ T6142] gtp15: entered promiscuous mode
[  588.177027][ T6142] mac80211_hwsim hwsim20 wlan2: entered promiscuous mode
[  588.179375][ T6142] gtp16: entered promiscuous mode
[  588.181330][ T6142] macsec1: entered promiscuous mode
[  588.183045][ T6142] gtp17: entered promiscuous mode
[  588.184704][ T6142] gtp18: entered promiscuous mode
[  588.186375][ T6142] gre1: entered promiscuous mode
[  588.188111][ T6142] sit1: entered promiscuous mode
[  588.189881][ T6142] team_slave_0.00: entered promiscuous mode
[  588.191911][ T6142] bond1: entered promiscuous mode
[  588.193690][ T6142] ip6gretap1: entered promiscuous mode
[  588.195495][ T6142] netdevsim netdevsim3 eth0: entered promiscuous mode
[  588.197690][ T6142] netdevsim netdevsim3 eth1: entered promiscuous mode
[  588.200388][ T6142] netdevsim netdevsim3 eth2: entered promiscuous mode
[  588.202637][ T6142] netdevsim netdevsim3 eth3: entered promiscuous mode
[  588.204916][ T6142] batman_adv: batadv0: Interface deactivated: gretap2
[  588.207441][ T6142] gretap2: entered promiscuous mode
[  588.211382][ T6142] gtp19: entered promiscuous mode
[  588.213070][ T6142] syzkaller0: entered promiscuous mode
[  588.215099][ T6148] bond0: (slave wlan1): refused to change device type
[  588.302140][ T6166] IPVS: Unknown mcast interface: bridge_slave_0
[  588.328682][ T6168] ieee802154 phy0 wpan0: encryption failed: -22
[  588.966918][ T6213] netlink: 'syz.2.6902': attribute type 13 has an invalid length.
[  589.098199][ T6219] bond0: (slave wlan1): refused to change device type
[  589.198474][ T6222] __nla_validate_parse: 18 callbacks suppressed
[  589.198489][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6905'.
[  589.302795][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6906'.
[  589.306483][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6906'.
[  589.362391][ T6236] mac80211_hwsim hwsim16 wlan1: left promiscuous mode
[  589.372257][ T6236] bond0: (slave wlan1): Opening slave failed
[  589.523476][ T6252] "syz.3.6914" (6252) uses obsolete ecb(arc4) skcipher
[  589.530607][ T6252] lo: left promiscuous mode
[  589.535736][ T6252] tunl0: left promiscuous mode
[  589.537991][ T6252] gre0: left promiscuous mode
[  589.544137][ T6252] gretap0: left promiscuous mode
[  589.546490][ T6252] erspan0: left promiscuous mode
[  589.548698][ T6252] ip_vti0: left promiscuous mode
[  589.556726][ T6252] ip6_vti0: left promiscuous mode
[  589.559133][ T6252] sit0: left promiscuous mode
[  589.567391][ T6252] ip6tnl0: left promiscuous mode
[  589.569917][ T6252] ip6gre0: left promiscuous mode
[  589.572066][ T6252] syz_tun: left promiscuous mode
[  589.579554][ T6252] bridge0: left promiscuous mode
[  589.585677][ T6252] vcan0: left promiscuous mode
[  589.592779][ T6252] bond0: left promiscuous mode
[  589.598232][ T6252] team0: left promiscuous mode
[  589.601518][ T6252] dummy0: left promiscuous mode
[  589.603816][ T6252] nlmon0: left promiscuous mode
[  589.606106][ T6252] caif0: left promiscuous mode
[  589.608576][ T6252] vxcan0: left promiscuous mode
[  589.616296][ T6252] vxcan1: left promiscuous mode
[  589.618446][ T6252] veth0: left promiscuous mode
[  589.622438][ T6252] veth1: left promiscuous mode
[  589.624927][ T6252] wg0: left promiscuous mode
[  589.626985][ T6252] wg1: left promiscuous mode
[  589.628926][ T6252] wg2: left promiscuous mode
[  589.631451][ T6252] veth0_to_bridge: left promiscuous mode
[  589.633930][ T6252] bridge_slave_0: left promiscuous mode
[  589.636696][ T6252] veth1_to_bridge: left promiscuous mode
[  589.644685][ T6252] bridge_slave_1: left promiscuous mode
[  589.648258][ T6252] veth0_to_bond: left promiscuous mode
[  589.651051][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6913'.
[  589.654868][ T6252] bond_slave_0: left promiscuous mode
[  589.659806][ T6252] veth1_to_bond: left promiscuous mode
[  589.662392][ T6252] bond_slave_1: left promiscuous mode
[  589.664687][ T6252] veth0_to_team: left promiscuous mode
[  589.667165][ T6252] veth1_to_team: left promiscuous mode
[  589.672773][ T6252] team_slave_1: left promiscuous mode
[  589.675453][ T6252] veth0_to_batadv: left promiscuous mode
[  589.678040][ T6252] wlan0: left promiscuous mode
[  589.680930][ T6252] xfrm0: left promiscuous mode
[  589.683262][ T6252] veth0_to_hsr: left promiscuous mode
[  589.685895][ T6252] veth1_to_hsr: left promiscuous mode
[  589.688593][ T6252] hsr0: left promiscuous mode
[  589.694464][ T6252] vlan0: left promiscuous mode
[  589.696910][ T6252] vlan1: left promiscuous mode
[  589.699313][ T6252] macvlan0: left promiscuous mode
[  589.702141][ T6252] macvlan1: left promiscuous mode
[  589.704580][ T6252] ipvlan0: left promiscuous mode
[  589.706943][ T6252] ipvlan1: left promiscuous mode
[  589.710281][ T6252] macvtap0: left promiscuous mode
[  589.713336][ T6252] macsec0: left promiscuous mode
[  589.715603][ T6252] geneve0: left promiscuous mode
[  589.717841][ T6252] geneve1: left promiscuous mode
[  589.720164][ T6252] gtp0: left promiscuous mode
[  589.722226][ T6252] gretap1: left promiscuous mode
[  589.724354][ T6252] vlan0004: left promiscuous mode
[  589.726425][ T6252] batadv0: left promiscuous mode
[  589.728701][ T6252] gtp1: left promiscuous mode
[  589.730970][ T6252] gtp2: left promiscuous mode
[  589.733028][ T6252] ip6tnl1: left promiscuous mode
[  589.735156][ T6252] gtp3: left promiscuous mode
[  589.737269][ T6252] gtp4: left promiscuous mode
[  589.739309][ T6252] gtp5: left promiscuous mode
[  589.741489][ T6252] syztnl2: left promiscuous mode
[  589.743654][ T6252] gtp6: left promiscuous mode
[  589.745747][ T6252] gtp7: left promiscuous mode
[  589.747964][ T6252] gtp8: left promiscuous mode
[  589.750312][ T6252] gtp9: left promiscuous mode
[  589.752518][ T6252] gtp10: left promiscuous mode
[  589.754823][ T6252] gtp11: left promiscuous mode
[  589.757266][ T6252] gtp12: left promiscuous mode
[  589.759765][ T6252] gtp13: left promiscuous mode
[  589.762158][ T6252] gtp14: left promiscuous mode
[  589.764521][ T6252] gtp15: left promiscuous mode
[  589.767052][ T6252] mac80211_hwsim hwsim20 wlan2: left promiscuous mode
[  589.771595][ T6252] gtp16: left promiscuous mode
[  589.776090][ T6252] macsec1: left promiscuous mode
[  589.778746][ T6252] gtp17: left promiscuous mode
[  589.781070][ T6252] gtp18: left promiscuous mode
[  589.783320][ T6252] gre1: left promiscuous mode
[  589.785942][ T6252] sit1: left promiscuous mode
[  589.788226][ T6252] team_slave_0.00: left promiscuous mode
[  589.793511][ T6252] team_slave_0: left promiscuous mode
[  589.796239][ T6252] bond1: left promiscuous mode
[  589.798446][ T6252] ip6gretap1: left promiscuous mode
[  589.801608][ T6252] netdevsim netdevsim3 eth0: left promiscuous mode
[  589.804504][ T6252] netdevsim netdevsim3 eth1: left promiscuous mode
[  589.807318][ T6252] netdevsim netdevsim3 eth2: left promiscuous mode
[  589.812929][ T6252] netdevsim netdevsim3 eth3: left promiscuous mode
[  589.815794][ T6252] gretap2: left promiscuous mode
[  589.817975][ T6252] gtp19: left promiscuous mode
[  589.935008][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6916'.
[  589.938361][ T6266] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  589.958347][ T6269] bond0: (slave wlan1): Opening slave failed
[  589.965837][ T6269] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  589.970772][ T6269] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  590.177208][ T6275] IPVS: Scheduler module ip_vs_sip not found
[  590.197615][ T6279] IPVS: Scheduler module ip_vs_sip not found
[  590.543557][ T6299] bond0: (slave wlan1): refused to change device type
[  590.547678][ T6299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6924'.
[  590.741491][ T6303] wlan0: entered promiscuous mode
[  591.593581][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6932'.
[  591.597404][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6932'.
[  591.602320][ T6329] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6932'.
[  591.710777][ T6339] IPVS: Unknown mcast interface: bridge_slave_0
[  591.777017][ T6345] validate_nla: 6 callbacks suppressed
[  591.777031][ T6345] netlink: 'syz.0.6935': attribute type 13 has an invalid length.
[  591.931992][ T6355] netlink: 'syz.3.6939': attribute type 13 has an invalid length.
[  592.156245][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6942'.
[  592.166007][ T6356] delete_channel: no stack
[  592.213083][ T6377] nbd: must specify an index to disconnect
[  592.264651][ T6385] netlink: 'syz.2.6944': attribute type 10 has an invalid length.
[  592.267966][ T6385] bond0: (slave wlan1): refused to change device type
[  592.390798][ T6396] netlink: 'syz.3.6948': attribute type 10 has an invalid length.
[  592.394573][ T6396] bond0: (slave wlan1): Opening slave failed
[  592.538155][ T6408] netlink: 'syz.0.6950': attribute type 1 has an invalid length.
[  592.635532][ T6411] netlink: 'syz.0.6950': attribute type 10 has an invalid length.
[  592.638548][ T6411] bond0: (slave wlan1): refused to change device type
[  592.645698][ T6411] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  592.648768][ T6411] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  592.878274][ T6414] wg1 speed is unknown, defaulting to 1000
[  592.882906][ T6414] lo speed is unknown, defaulting to 1000
[  593.009395][ T6417] netlink: 'syz.3.6952': attribute type 10 has an invalid length.
[  593.022771][ T6417] bond0: (slave wlan1): Opening slave failed
[  593.414680][ T6426] netlink: 'syz.0.6954': attribute type 10 has an invalid length.
[  593.447119][ T6429] netlink: 'syz.0.6955': attribute type 10 has an invalid length.
[  593.450220][ T6429] bond0: (slave wlan1): refused to change device type
[  593.551443][ T6432] netlink: 'syz.0.6956': attribute type 4 has an invalid length.
[  593.741138][ T6442] syzkaller0: entered promiscuous mode
[  593.743635][ T6442] syzkaller0: entered allmulticast mode
[  593.799104][ T6443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  593.805118][ T6442] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  594.328005][ T6431] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  594.393796][ T6445] __nla_validate_parse: 9 callbacks suppressed
[  594.393811][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6961'.
[  594.454476][ T6446] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  595.543598][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6965'.
[  595.659151][ T6472] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  595.662846][ T6472] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  595.735800][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6967'.
[  595.893027][ T6478] IPVS: Scheduler module ip_vs_sip not found
[  595.895818][ T6478] IPVS: length: 126 != 8
[  596.133072][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6971'.
[  596.307662][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6974'.
[  596.364032][ T6512] syzkaller0: entered promiscuous mode
[  596.366433][ T6512] syzkaller0: entered allmulticast mode
[  596.370485][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6976'.
[  596.473745][ T6518] IPVS: Error connecting to the multicast addr
[  596.558976][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6978'.
[  596.727577][ T6541] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  596.744743][ T6545] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  596.748273][ T6545] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  596.827952][ T6551] "syz.2.6984" (6551) uses obsolete ecb(arc4) skcipher
[  596.837561][ T6553] validate_nla: 1 callbacks suppressed
[  596.837575][ T6553] netlink: 'syz.3.6985': attribute type 4 has an invalid length.
[  596.881896][ T6557] netlink: 'syz.3.6987': attribute type 10 has an invalid length.
[  596.886334][ T6557] veth0_vlan: left promiscuous mode
[  596.897093][ T6558] netlink: 'syz.2.6986': attribute type 32 has an invalid length.
[  596.900886][ T6557] veth0_vlan: entered promiscuous mode
[  596.903156][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6986'.
[  596.908560][ T6557] team0: Device veth0_vlan failed to register rx_handler
[  596.915409][ T6558] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  596.955482][ T6558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6986'.
[  596.976885][ T6557] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  597.231504][ T6583] batman_adv: batadv0: Removing interface: gretap2
[  597.289417][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6992'.
[  597.293722][ T6584] netlink: 'syz.3.6992': attribute type 10 has an invalid length.
[  597.297754][ T6584] bond0: (slave wlan1): Opening slave failed
[  597.304749][ T6584] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  597.307971][ T6584] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  598.158500][ T6618] "syz.2.7001" (6618) uses obsolete ecb(arc4) skcipher
[  598.165425][ T6618] openvswitch: netlink: IP tunnel dst address not specified
[  598.165604][ T6619] netlink: 'syz.3.7000': attribute type 2 has an invalid length.
[  598.220417][ T6622] team0: Mode changed to "broadcast"
[  598.287302][ T6627] "syz.2.7003" (6627) uses obsolete ecb(arc4) skcipher
[  598.409134][ T6640] openvswitch: netlink: Multiple metadata blocks provided
[  598.413517][ T6639] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  598.482895][ T6649] netlink: 'syz.3.7009': attribute type 15 has an invalid length.
[  598.487519][ T6649] netlink: 'syz.3.7009': attribute type 10 has an invalid length.
[  598.491522][ T6649] bond0: (slave wlan1): Opening slave failed
[  598.795731][ T6671] "syz.3.7014" (6671) uses obsolete ecb(arc4) skcipher
[  598.874600][ T6677] netlink: 'syz.3.7015': attribute type 10 has an invalid length.
[  599.051457][ T6689] netlink: 'syz.0.7020': attribute type 10 has an invalid length.
[  599.055534][ T6689] bond0: (slave wlan1): Opening slave failed
[  599.097635][ T6695] rdma_rxe: rxe_newlink: failed to add caif0
[  599.155171][ T6701] netlink: 'syz.2.7022': attribute type 10 has an invalid length.
[  599.158467][ T6701] bond0: (slave wlan1): refused to change device type
[  599.292302][ T6704] IPVS: Error connecting to the multicast addr
[  599.401050][ T6719] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  599.452137][ T6724] IPVS: Unknown mcast interface: bridge_slave_0
[  599.724001][ T6742] netlink: set zone limit has 8 unknown bytes
[  599.824365][ T6742] __nla_validate_parse: 6 callbacks suppressed
[  599.824380][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7031'.
[  599.868943][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7032'.
[  600.086046][ T6767] IPVS: Error connecting to the multicast addr
[  600.216313][ T6792] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  600.286896][ T6803] bond0: (slave wlan1): Opening slave failed
[  600.383050][ T6816] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  600.461717][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7047'.
[  600.527964][ T6828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.530515][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7048'.
[  600.588377][ T6835] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  600.721977][ T6835] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  600.726723][ T6835] bond0: (slave wlan1): refused to change device type
[  600.741042][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7050'.
[  600.822958][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7051'.
[  601.104928][ T6873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.112573][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7057'.
[  601.123131][ T6876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.139438][ T6870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7056'.
[  601.237199][ T6881] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  601.808904][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7063'.
[  601.862903][ T6910] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7065'.
[  602.024091][ T6914] sctp: [Deprecated]: syz.0.7067 (pid 6914) Use of struct sctp_assoc_value in delayed_ack socket option.
[  602.024091][ T6914] Use struct sctp_sack_info instead
[  602.070378][ T6931] validate_nla: 2 callbacks suppressed
[  602.070399][ T6931] netlink: 'syz.3.7070': attribute type 10 has an invalid length.
[  602.085369][ T6931] bond0: (slave wlan1): Opening slave failed
[  602.132861][ T6936] netlink: 'syz.0.7071': attribute type 13 has an invalid length.
[  602.141527][ T6936] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  602.325238][ T6960] netlink: 'syz.0.7076': attribute type 6 has an invalid length.
[  602.878917][ T6994] syzkaller1: entered promiscuous mode
[  602.881965][ T6994] syzkaller1: entered allmulticast mode
[  603.425803][ T7010] "syz.2.7088" (7010) uses obsolete ecb(arc4) skcipher
[  603.487137][ T7012] wg1 speed is unknown, defaulting to 1000
[  603.490685][ T7012] lo speed is unknown, defaulting to 1000
[  603.611023][ T7019] netlink: 'syz.0.7090': attribute type 10 has an invalid length.
[  603.614424][ T7019] bond0: (slave wlan1): refused to change device type
[  603.828004][ T7023] netlink: 'syz.3.7091': attribute type 10 has an invalid length.
[  603.832966][ T7023] bond0: (slave wlan1): Opening slave failed
[  604.286391][ T7030] "syz.0.7093" (7030) uses obsolete ecb(arc4) skcipher
[  604.375238][ T7032] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  604.506069][ T7038] netlink: 'syz.0.7094': attribute type 10 has an invalid length.
[  604.509047][ T7038] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  604.518404][ T7038] bond0: (slave wlan1): refused to change device type
[  604.678719][ T7048] netlink: 'syz.0.7098': attribute type 10 has an invalid length.
[  604.820227][ T7050] IPVS: Error connecting to the multicast addr
[  604.863969][ T7062] netlink: 'syz.0.7101': attribute type 13 has an invalid length.
[  604.867215][ T7062] netlink: 'syz.0.7101': attribute type 17 has an invalid length.
[  604.908695][ T7064] __nla_validate_parse: 17 callbacks suppressed
[  604.908711][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7102'.
[  604.936745][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.941198][ T7062] 8021q: adding VLAN 0 to HW filter on device team0
[  604.946727][ T7062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  604.972355][ T7065] wg1 speed is unknown, defaulting to 1000
[  604.976625][ T7065] lo speed is unknown, defaulting to 1000
[  605.415658][ T7092] netlink: 'syz.3.7109': attribute type 1 has an invalid length.
[  605.418421][ T7092] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7109'.
[  605.682580][ T7109] bond0: (slave wlan1): Opening slave failed
[  605.685429][ T7117] bond0: (slave wlan1): Opening slave failed
[  605.693897][ T7109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  605.697670][ T7109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  605.753271][ T7119] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  605.755594][ T7119] bond0: (slave wlan1): refused to change device type
[  605.792446][ T7124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7117'.
[  606.042093][ T7131] bond0: (slave wlan1): Opening slave failed
[  606.047608][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7119'.
[  606.315421][ T7135] IPVS: Unknown mcast interface: bridge_slave_0
[  606.391950][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7122'.
[  606.508701][ T7148] bond0: (slave wlan1): Opening slave failed
[  606.516511][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7123'.
[  606.669159][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7126'.
[  606.673317][ T7161] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7126'.
[  606.676305][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7126'.
[  606.680278][ T7161] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7126'.
[  606.717709][ T7163] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  606.724128][ T7164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  606.794032][ T7168] : renamed from bond_slave_0
[  606.951483][ T7174] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  607.075687][ T7182] bond0: (slave wlan1): Opening slave failed
[  607.343786][ T7197] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  607.505726][ T7220] validate_nla: 10 callbacks suppressed
[  607.505748][ T7220] netlink: 'syz.2.7141': attribute type 10 has an invalid length.
[  607.517058][ T7220] bond0: (slave wlan1): refused to change device type
[  607.521124][ T7214] netlink: 'syz.2.7141': attribute type 1 has an invalid length.
[  607.726814][ T7240] netlink: 'syz.0.7144': attribute type 13 has an invalid length.
[  607.800659][ T7241] netlink: 'syz.0.7144': attribute type 29 has an invalid length.
[  607.807393][ T7240] netlink: 'syz.0.7144': attribute type 29 has an invalid length.
[  607.810778][ T7240] unsupported nla_type 58
[  608.218814][ T7266] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  608.526566][ T7300] netlink: 'syz.0.7155': attribute type 10 has an invalid length.
[  608.533008][ T7300] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  608.536268][ T7300] bond0: (slave wlan1): refused to change device type
[  608.542881][ T7300] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  608.546638][ T7300] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  608.726108][ T7310] "syz.2.7159" (7310) uses obsolete ecb(arc4) skcipher
[  608.803651][ T7312] syzkaller1: entered promiscuous mode
[  608.809236][ T7312] syzkaller1: entered allmulticast mode
[  608.929493][ T7321] netlink: 'syz.3.7162': attribute type 1 has an invalid length.
[  608.935452][ T7321] netlink: 'syz.3.7162': attribute type 1 has an invalid length.
[  608.948650][ T7321] netlink: 'syz.3.7162': attribute type 10 has an invalid length.
[  609.205299][ T7335] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  609.228058][ T7337] netlink: 'syz.3.7165': attribute type 10 has an invalid length.
[  609.233434][ T7337] bond0: (slave wlan1): Opening slave failed
[  609.308860][ T7342] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  609.313055][ T7342] bond0: (slave wlan1): refused to change device type
[  609.319280][ T7342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  609.324497][ T7342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  609.422103][ T7352] sock: sock_set_timeout: `syz.0.7169' (pid 7352) tries to set negative timeout
[  609.465193][ T7360] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  609.503472][ T7366] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  609.506140][ T7366] bond0: (slave wlan1): refused to change device type
[  610.362605][ T7419] "syz.3.7183" (7419) uses obsolete ecb(arc4) skcipher
[  610.366281][ T7419] wlan0: left promiscuous mode
[  610.476481][ T7421] __nla_validate_parse: 18 callbacks suppressed
[  610.476497][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7184'.
[  610.485610][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7184'.
[  610.739229][ T7440] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  610.764880][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7191'.
[  610.880486][ T7462] bond0: (slave wlan1): refused to change device type
[  610.899497][ T7465] sctp: [Deprecated]: syz.0.7194 (pid 7465) Use of int in max_burst socket option.
[  610.899497][ T7465] Use struct sctp_assoc_value instead
[  610.942546][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7193'.
[  610.968466][ T7471] wlan0: entered promiscuous mode
[  611.023104][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7197'.
[  611.025972][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7197'.
[  611.036624][ T7477] batadv0: entered promiscuous mode
[  611.040122][ T7477] batadv0: left promiscuous mode
[  611.227061][ T7485] IPVS: Unknown mcast interface: bridge_slave_0
[  611.420853][ T7511] geneve2: entered promiscuous mode
[  611.422871][T30152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.425899][T30152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.428776][T30152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.431716][T30152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.526865][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'.
[  611.865403][   T33] audit: type=1800 audit(1755205512.965:4): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7211" name="blkio.bfq.time_recursive" dev="tmpfs" ino=12236 res=0 errno=0
[  612.025906][ T7552] "syz.2.7214" (7552) uses obsolete ecb(arc4) skcipher
[  612.193480][ T7561] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  612.270570][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7219'.
[  612.377494][ T7577] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  612.382293][ T7577] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  612.385698][ T7577] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  612.390125][ T7577] bond0: (slave wlan1): refused to change device type
[  612.488977][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7222'.
[  612.511722][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7222'.
[  612.676408][ T7610] veth1_to_bond: renamed from vcan0
[  612.684498][ T7610] veth1_to_bond: entered promiscuous mode
[  613.067271][ T7647] validate_nla: 10 callbacks suppressed
[  613.067288][ T7647] netlink: 'syz.2.7235': attribute type 10 has an invalid length.
[  613.075078][ T7647] bond0: (slave wlan1): Opening slave failed
[  613.115918][ T7652] IPVS: Unknown mcast interface: bridge_slave_0
[  613.165652][ T7656] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  613.312940][ T7664] ieee802154 phy0 wpan0: encryption failed: -22
[  613.316639][ T7664] ieee802154 phy0 wpan0: encryption failed: -22
[  613.324836][ T7664] wlan0: left promiscuous mode
[  613.329123][ T7664] geneve2: left promiscuous mode
[  613.332314][T30152] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.335583][T30152] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.338927][T30152] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.347336][T30152] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.465827][ T7667] IPVS: Error connecting to the multicast addr
[  613.716815][ T7690] netlink: 'syz.0.7243': attribute type 10 has an invalid length.
[  613.740788][ T7688] syzkaller1: entered promiscuous mode
[  613.745363][ T7688] syzkaller1: entered allmulticast mode
[  613.747965][ T7690] bond0: (slave wlan1): refused to change device type
[  614.025552][ T7712] netlink: 'syz.2.7248': attribute type 4 has an invalid length.
[  614.043133][ T7714] netlink: 'syz.3.7250': attribute type 13 has an invalid length.
[  614.241586][ T7725] netlink: 'syz.2.7252': attribute type 10 has an invalid length.
[  614.244986][ T7725] bond0: (slave wlan1): Opening slave failed
[  614.268496][ T7725] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  614.275286][ T7725] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  614.486984][ T7735] netlink: 'syz.0.7253': attribute type 13 has an invalid length.
[  615.648217][ T7766] netlink: 'syz.2.7259': attribute type 2 has an invalid length.
[  615.653484][ T7766] netlink: 'syz.2.7259': attribute type 1 has an invalid length.
[  615.658539][ T7766] __nla_validate_parse: 18 callbacks suppressed
[  615.658554][ T7766] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7259'.
[  615.664853][ T7766] nbd: couldn't find device at index 16
[  615.775073][ T7766] netlink: 'syz.2.7259': attribute type 10 has an invalid length.
[  615.782377][ T7766] bond0: (slave wlan1): Opening slave failed
[  615.787524][ T7765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7259'.
[  615.813480][ T7772] netlink: 'syz.3.7260': attribute type 10 has an invalid length.
[  615.817055][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7260'.
[  615.820990][ T7772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7260'.
[  615.825786][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7260'.
[  615.829339][ T7772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7260'.
[  615.904587][ T7776] "syz.3.7261" (7776) uses obsolete ecb(arc4) skcipher
[  615.907449][ T7776] "syz.3.7261" (7776) uses obsolete ecb(arc4) skcipher
[  615.965868][ T7780] bond0: (slave wlan1): Opening slave failed
[  615.970945][ T7782] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7263'.
[  616.128896][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7266'.
[  616.155224][ T7794] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  616.157961][ T7794] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  616.601007][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7274'.
[  616.646498][ T7824] wg1 speed is unknown, defaulting to 1000
[  616.649361][ T7824] lo speed is unknown, defaulting to 1000
[  616.976227][ T7857] bond0: (slave wlan1): Opening slave failed
[  616.985966][ T7857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7279'.
[  617.328011][ T7863] wg1 speed is unknown, defaulting to 1000
[  617.335019][ T7863] lo speed is unknown, defaulting to 1000
[  617.654297][ T7868] "syz.3.7282" (7868) uses obsolete ecb(arc4) skcipher
[  617.864523][ T7877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.881453][ T7878] syzkaller0: entered promiscuous mode
[  617.883889][ T7878] syzkaller0: entered allmulticast mode
[  617.906264][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  617.924631][ T7878] tipc: Disabling bearer <eth:syzkaller0>
[  618.138635][ T7896] IPVS: Error connecting to the multicast addr
[  618.185519][ T7904] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  618.321843][ T7916] validate_nla: 2 callbacks suppressed
[  618.321857][ T7916] netlink: 'syz.0.7295': attribute type 10 has an invalid length.
[  618.326605][ T7916] bond0: (slave wlan1): Opening slave failed
[  618.711999][ T7952] "syz.0.7302" (7952) uses obsolete ecb(arc4) skcipher
[  618.988476][ T7972] netlink: 'syz.0.7304': attribute type 13 has an invalid length.
[  619.093727][ T7977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.098587][ T7977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.165269][ T7983] tipc: Resetting bearer <eth:syzkaller0>
[  619.188897][ T7976] tipc: Disabling bearer <eth:syzkaller0>
[  619.399824][ T8004] wlan0: entered promiscuous mode
[  619.402085][ T8004] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  619.515344][ T8015] netlink: 'syz.0.7313': attribute type 10 has an invalid length.
[  619.518560][ T8015] bond0: (slave wlan1): Opening slave failed
[  619.699501][ T8034] netlink: 'syz.0.7320': attribute type 1 has an invalid length.
[  619.734470][ T8034] 8021q: adding VLAN 0 to HW filter on device bond10
[  619.958068][ T8068] wlan0: left promiscuous mode
[  620.008443][ T8065] netlink: 'syz.0.7325': attribute type 4 has an invalid length.
[  620.051858][ T8078] Unsupported ieee802154 address type: 0
[  620.062211][ T8077] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  620.291450][ T8092] wg1 speed is unknown, defaulting to 1000
[  620.295663][ T8092] lo speed is unknown, defaulting to 1000
[  620.624511][ T8101] IPVS: Error connecting to the multicast addr
[  620.773172][ T8067] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  620.943880][ T8117] __nla_validate_parse: 14 callbacks suppressed
[  620.943901][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7338'.
[  620.953811][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'.
[  620.957559][ T8117] netlink: 'syz.3.7338': attribute type 10 has an invalid length.
[  620.962548][ T8117] bond0: (slave wlan1): Opening slave failed
[  620.968047][ T8117] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  620.972491][ T8117] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  621.135923][ T8125] netlink: 'syz.0.7340': attribute type 10 has an invalid length.
[  621.139890][ T8125] bond0: (slave wlan1): Opening slave failed
[  621.144600][ T8125] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  621.906709][ T8147] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7344'.
[  621.913808][ T8147] netlink: 'syz.2.7344': attribute type 1 has an invalid length.
[  621.926341][ T8147] netlink: 'syz.2.7344': attribute type 10 has an invalid length.
[  621.942288][ T8147] bond0: (slave wlan1): Opening slave failed
[  621.986289][ T8151] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  622.042750][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7346'.
[  622.103544][ T8155] netlink: 'syz.3.7345': attribute type 10 has an invalid length.
[  622.106759][ T8155] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  622.112097][ T8155] bond0: (slave wlan1): Opening slave failed
[  622.581118][ T8159] gretap0: refused to change device tx_queue_len
[  622.583723][ T8159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  622.941728][ T8166] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  623.118825][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'.
[  623.124355][ T8181] bond0: (slave wlan1): Opening slave failed
[  623.220389][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7354'.
[  623.223403][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7354'.
[  623.388474][ T8206] "syz.0.7358" (8206) uses obsolete ecb(arc4) skcipher
[  623.464876][ T8215] validate_nla: 4 callbacks suppressed
[  623.464891][ T8215] netlink: 'syz.0.7360': attribute type 13 has an invalid length.
[  623.521281][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7359'.
[  623.575793][ T8227] veth1_to_bond: left promiscuous mode
[  623.716067][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7363'.
[  623.724424][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7363'.
[  623.763673][ T8241] bond0: Error: Cannot enslave bond to itself.
[  623.784677][ T8243] netlink: 'syz.2.7364': attribute type 10 has an invalid length.
[  623.794221][ T8243] bond0: (slave wlan1): Opening slave failed
[  623.819049][ T8241] netlink: 'syz.0.7366': attribute type 10 has an invalid length.
[  623.823917][ T8241] bond0: (slave wlan1): Opening slave failed
[  624.093320][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  624.344951][ T8249] netlink: 'syz.2.7367': attribute type 13 has an invalid length.
[  624.603975][ T8267] "syz.2.7371" (8267) uses obsolete ecb(arc4) skcipher
[  624.667520][ T8275] netlink: 'syz.2.7373': attribute type 13 has an invalid length.
[  624.816034][ T8284] wg1 speed is unknown, defaulting to 1000
[  624.819056][ T8284] lo speed is unknown, defaulting to 1000
[  625.046646][ T8304] netlink: 'syz.2.7378': attribute type 13 has an invalid length.
[  625.057329][ T8304] 1{X: refused to change device tx_queue_len
[  625.061575][ T8304] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  625.107803][ T8309] "syz.2.7379" (8309) uses obsolete ecb(arc4) skcipher
[  625.147733][ T8311] netlink: 'syz.2.7380': attribute type 21 has an invalid length.
[  625.216857][ T8313] netlink: 'syz.2.7381': attribute type 10 has an invalid length.
[  625.220352][ T8313] bond0: (slave wlan1): Opening slave failed
[  625.646270][ T8337] wlan0: entered promiscuous mode
[  625.757769][ T8345] netlink: 'syz.0.7388': attribute type 29 has an invalid length.
[  625.973661][ T8357] netlink: 'syz.2.7390': attribute type 10 has an invalid length.
[  625.982839][ T8357] bond0: (slave wlan1): Opening slave failed
[  625.989216][ T8349] __nla_validate_parse: 7 callbacks suppressed
[  625.989228][ T8349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7390'.
[  626.007458][ T8362] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  626.439150][ T8386] "syz.3.7399" (8386) uses obsolete ecb(arc4) skcipher
[  626.445790][ T8386] wlan0: left promiscuous mode
[  626.679041][ T8402] syzkaller1: entered promiscuous mode
[  626.682073][ T8402] syzkaller1: entered allmulticast mode
[  626.696805][ T8402] bond0: (slave wlan1): Opening slave failed
[  627.276516][ T8444] "syz.0.7410" (8444) uses obsolete ecb(arc4) skcipher
[  627.423575][ T8447] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7411'.
[  627.510643][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7413'.
[  627.945117][ T8470] delete_channel: no stack
[  628.260536][ T8508] blkio.reset_stats is deprecated
[  628.284286][ T8511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  628.332252][ T8511] syzkaller0: entered promiscuous mode
[  628.334502][ T8511] syzkaller0: entered allmulticast mode
[  628.344680][ T8511] tipc: Resetting bearer <eth:syzkaller0>
[  628.352170][ T8510] tipc: Resetting bearer <eth:syzkaller0>
[  629.718972][ T8510] tipc: Disabling bearer <eth:syzkaller0>
[  629.755855][ T8535] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.7429'.
[  629.853937][ T8551] validate_nla: 1 callbacks suppressed
[  629.853951][ T8551] netlink: 'syz.3.7431': attribute type 13 has an invalid length.
[  630.065009][ T8568] macsec3: entered promiscuous mode
[  630.067948][ T8568] wlan0: entered promiscuous mode
[  630.071426][ T8568] macsec3: entered allmulticast mode
[  630.073550][ T8568] wlan0: entered allmulticast mode
[  630.076893][ T8570] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  630.092340][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7435'.
[  630.128989][ T8573] netlink: 'syz.0.7437': attribute type 13 has an invalid length.
[  630.144640][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7437'.
[  630.212090][ T8570] netlink: 'syz.2.7436': attribute type 10 has an invalid length.
[  630.215642][ T8570] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  630.218218][ T8570] bond0: (slave wlan1): refused to change device type
[  630.222876][ T8570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  630.226062][ T8570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  630.394336][ T8593] batadv1: entered promiscuous mode
[  630.443102][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7442'.
[  631.015311][ T8621] netlink: 'syz.3.7448': attribute type 12 has an invalid length.
[  631.026266][ T8622] netlink: 'syz.3.7448': attribute type 13 has an invalid length.
[  631.034213][ T8622] wlan0: left allmulticast mode
[  631.036224][ T8622] wlan0: left promiscuous mode
[  631.087586][ T8629] "syz.2.7449" (8629) uses obsolete ecb(arc4) skcipher
[  631.092071][ T8631] "syz.2.7449" (8631) uses obsolete ecb(arc4) skcipher
[  631.210357][ T8634] "syz.2.7450" (8634) uses obsolete ecb(arc4) skcipher
[  631.294902][ T8638] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  631.304676][ T8638] netlink: 'syz.3.7452': attribute type 4 has an invalid length.
[  631.332802][ T8640] wg1 speed is unknown, defaulting to 1000
[  631.337806][ T8640] lo speed is unknown, defaulting to 1000
[  631.364229][ T8643] wlan0: entered promiscuous mode
[  631.366490][ T8643] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  631.576311][ T8652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.789247][ T8654] openvswitch: netlink: Multiple metadata blocks provided
[  631.956434][ T8666] netlink: 'syz.0.7459': attribute type 10 has an invalid length.
[  631.962049][ T8666] bond0: (slave wlan1): Opening slave failed
[  631.970249][ T8666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7459'.
[  632.137208][ T8648] tipc: Resetting bearer <eth:syzkaller0>
[  632.154422][ T8648] tipc: Disabling bearer <eth:syzkaller0>
[  632.529599][ T8695] "syz.2.7465" (8695) uses obsolete ecb(arc4) skcipher
[  632.535163][ T8696] IPVS: Error connecting to the multicast addr
[  632.574112][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7466'.
[  632.594241][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7464'.
[  632.639969][ T8708] netlink: 'syz.0.7467': attribute type 10 has an invalid length.
[  632.652936][ T8708] bond0: (slave wlan1): Opening slave failed
[  632.745336][ T8714] netlink: 'syz.2.7468': attribute type 153 has an invalid length.
[  633.226374][ T8760] netlink: 'syz.0.7473': attribute type 13 has an invalid length.
[  633.266197][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.270947][ T8760] 8021q: adding VLAN 0 to HW filter on device team0
[  633.278983][ T8760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  633.333120][ T8756] wg1 speed is unknown, defaulting to 1000
[  633.336738][ T8756] lo speed is unknown, defaulting to 1000
[  633.745478][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7477'.
[  633.786222][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7477'.
[  633.794258][ T8786] wlan0: left promiscuous mode
[  633.801396][ T8786] macsec3: left promiscuous mode
[  633.803509][ T8786] macsec3: left allmulticast mode
[  633.918351][ T8797] IPVS: Error connecting to the multicast addr
[  633.922956][ T8797] @: renamed from bond_slave_0
[  633.926781][ T8797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7479'.
[  634.000619][ T8803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7480'.
[  634.505355][ T8836] bond0: (slave wlan1): Opening slave failed
[  634.516879][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7486'.
[  634.566402][ T8846] "syz.0.7488" (8846) uses obsolete ecb(arc4) skcipher
[  634.607030][ T8849] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  634.711443][ T8854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7489'.
[  634.717021][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7489'.
[  634.721596][ T8854] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  634.725363][ T8854] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  634.792164][ T8859] wlan0: entered promiscuous mode
[  634.845524][ T8863] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  635.044443][ T8875] validate_nla: 3 callbacks suppressed
[  635.044454][ T8875] netlink: 'syz.3.7495': attribute type 1 has an invalid length.
[  635.065337][ T8878] netlink: 'syz.2.7496': attribute type 13 has an invalid length.
[  635.075864][ T8875] 8021q: adding VLAN 0 to HW filter on device bond3
[  635.169605][ T8875] 8021q: adding VLAN 0 to HW filter on device bond3
[  635.173001][ T8875] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  635.178292][ T8875] bond3: (slave vcan1): Error -95 calling set_mac_address
[  635.196490][ T8882] macvlan2: entered promiscuous mode
[  635.198718][ T8882] macvlan2: entered allmulticast mode
[  635.202500][ T8882] bond3: entered promiscuous mode
[  635.205140][ T8882] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  635.224137][ T8882] bond3: left promiscuous mode
[  635.595198][ T8905] IPVS: Unknown mcast interface: bridge_slave_0
[  635.713215][ T8911] netlink: 'syz.0.7502': attribute type 10 has an invalid length.
[  635.873171][ T8920] "syz.0.7505" (8920) uses obsolete ecb(arc4) skcipher
[  635.914281][ T8920] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  636.532135][ T8936] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  636.634333][ T8937] netlink: 'syz.3.7508': attribute type 10 has an invalid length.
[  636.638940][ T8937] bond0: (slave wlan1): Opening slave failed
[  636.993407][ T8952] __nla_validate_parse: 5 callbacks suppressed
[  636.993418][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7512'.
[  637.001663][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7512'.
[  637.005685][ T8952] "syz.2.7512" (8952) uses obsolete ecb(arc4) skcipher
[  637.008184][ T8952] lo: entered promiscuous mode
[  637.011986][ T8952] tunl0: entered promiscuous mode
[  637.013872][ T8952] wk: entered promiscuous mode
[  637.015702][ T8952] 1{X: entered promiscuous mode
[  637.017595][ T8952] erspan0: entered promiscuous mode
[  637.019435][ T8952] ip_vti0: entered promiscuous mode
[  637.023123][ T8952] ip6_vti0: entered promiscuous mode
[  637.025203][ T8952] sit0: entered promiscuous mode
[  637.027302][ T8952] ip6tnl0: entered promiscuous mode
[  637.029724][ T8952] ip6gre0: entered promiscuous mode
[  637.032059][ T8952] syz_tun: entered promiscuous mode
[  637.034383][ T8952] ip6gretap0: entered promiscuous mode
[  637.036956][ T8952] bridge0: entered promiscuous mode
[  637.039456][ T8952] veth1_to_bond: entered promiscuous mode
[  637.044006][ T8952] !: entered promiscuous mode
[  637.047929][ T8952] nlmon0: entered promiscuous mode
[  637.050626][ T8952] 0X: entered promiscuous mode
[  637.052643][ T8952] batadv0: entered promiscuous mode
[  637.054887][ T8952] veth0: entered promiscuous mode
[  637.057061][ T8952] veth1: entered promiscuous mode
[  637.059932][ T8952] wg0: entered promiscuous mode
[  637.061899][ T8952] wg1: entered promiscuous mode
[  637.063908][ T8952] veth0_to_bridge: entered promiscuous mode
[  637.066028][ T8952] bridge_slave_0: entered promiscuous mode
[  637.068701][ T8952] veth1_to_bridge: entered promiscuous mode
[  637.072861][ T8952] bridge_slave_1: entered promiscuous mode
[  637.074910][ T8952] veth0_to_bond: entered promiscuous mode
[  637.076880][ T8952] @: entered promiscuous mode
[  637.078704][ T8952] veth1_to_team: entered promiscuous mode
[  637.081365][ T8952] team_slave_1: entered promiscuous mode
[  637.083420][ T8952] veth0_to_batadv: entered promiscuous mode
[  637.085439][ T8952] batadv_slave_0: entered promiscuous mode
[  637.087513][ T8952] xfrm0: entered promiscuous mode
[  637.089301][ T8952] veth0_to_hsr: entered promiscuous mode
[  637.093572][ T8952] veth1_to_hsr: entered promiscuous mode
[  637.095706][ T8952] hsr0: entered promiscuous mode
[  637.097757][ T8952] veth1_virt_wifi: entered promiscuous mode
[  637.100545][ T8952] veth0_virt_wifi: entered promiscuous mode
[  637.102968][ T8952] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  637.105979][ T8952] macvtap0: entered promiscuous mode
[  637.108000][ T8952] geneve0: entered promiscuous mode
[  637.112324][ T8952] geneve1: entered promiscuous mode
[  637.114669][ T8952] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  637.117772][ T8952] gtp0: entered promiscuous mode
[  637.119975][ T8952] gretap1: entered promiscuous mode
[  637.121680][ T8952] ip6gretap1: entered promiscuous mode
[  637.123459][ T8952] gtp1: entered promiscuous mode
[  637.125229][ T8952] veth2: entered promiscuous mode
[  637.126976][ T8952] veth3: entered promiscuous mode
[  637.128747][ T8952] gtp2: entered promiscuous mode
[  637.132346][ T8952] gtp3: entered promiscuous mode
[  637.134008][ T8952] vxlan0: entered promiscuous mode
[  637.135661][ T8952] gtp4: entered promiscuous mode
[  637.137311][ T8952] gtp5: entered promiscuous mode
[  637.139068][ T8952] gtp6: entered promiscuous mode
[  637.141037][ T8952] gtp7: entered promiscuous mode
[  637.142955][ T8952] gtp8: entered promiscuous mode
[  637.144924][ T8952] gtp9: entered promiscuous mode
[  637.146636][ T8952] gtp10: entered promiscuous mode
[  637.148399][ T8952] gtp11: entered promiscuous mode
[  637.150781][ T8952] gtp12: entered promiscuous mode
[  637.152612][ T8952] veth4: entered promiscuous mode
[  637.154440][ T8952] veth5: entered promiscuous mode
[  637.156096][ T8952] gtp13: entered promiscuous mode
[  637.158000][ T8952] gtp14: entered promiscuous mode
[  637.160110][ T8952] gtp15: entered promiscuous mode
[  637.161889][ T8952] bridge1: entered promiscuous mode
[  637.163602][ T8952] macvlan0: entered promiscuous mode
[  637.165407][ T8952] gtp16: entered promiscuous mode
[  637.167202][ T8952] gtp17: entered promiscuous mode
[  637.169251][ T8952] gtp18: entered promiscuous mode
[  637.171700][ T8955] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  637.174119][ T8952] gtp19: entered promiscuous mode
[  637.176592][ T8952] sit1: entered promiscuous mode
[  637.179173][ T8952] gre1: entered promiscuous mode
[  637.182171][ T8952] gtp20: entered promiscuous mode
[  637.183986][ T8952] bridge2: entered promiscuous mode
[  637.185772][ T8952] gtp21: entered promiscuous mode
[  637.187549][ T8952] : entered promiscuous mode
[  637.189238][ T8952] bridge3: entered promiscuous mode
[  637.191476][ T8952] gtp22: entered promiscuous mode
[  637.193275][ T8952] gtp23: entered promiscuous mode
[  637.194991][ T8952] gtp24: entered promiscuous mode
[  637.196716][ T8952] gtp25: entered promiscuous mode
[  637.198396][ T8952] bond1: entered promiscuous mode
[  637.200484][ T8952] gtp26: entered promiscuous mode
[  637.202676][ T8952] gtp27: entered promiscuous mode
[  637.204719][ T8952] bond2: entered promiscuous mode
[  637.206560][ T8952] bridge4: entered promiscuous mode
[  637.208341][ T8952] gtp28: entered promiscuous mode
[  637.211065][ T8952] ip6tnl1: entered promiscuous mode
[  637.212856][ T8952] gtp29: entered promiscuous mode
[  637.214760][ T8952] ipip0: entered promiscuous mode
[  637.216512][ T8952] gtp30: entered promiscuous mode
[  637.218269][ T8952] gtp31: entered promiscuous mode
[  637.220336][ T8952] bond3: entered promiscuous mode
[  637.222303][ T8952] gretap0: entered promiscuous mode
[  637.224109][ T8952] gtp32: entered promiscuous mode
[  637.225853][ T8952] gtp33: entered promiscuous mode
[  637.227955][ T8952] wireguard0: entered promiscuous mode
[  637.230484][ T8952] gtp34: entered promiscuous mode
[  637.232522][ T8952] gtp35: entered promiscuous mode
[  637.233395][ T8956] netlink: 'syz.0.7511': attribute type 4 has an invalid length.
[  637.234319][ T8952] gretap2: entered promiscuous mode
[  637.238808][ T8952] gtp36: entered promiscuous mode
[  637.240742][ T8952] gtp37: entered promiscuous mode
[  637.242406][ T8952] bridge5: entered promiscuous mode
[  637.244106][ T8952] gtp38: entered promiscuous mode
[  637.245766][ T8952] mac80211_hwsim hwsim3 pimreg: entered promiscuous mode
[  637.248047][ T8952] gtp39: entered promiscuous mode
[  637.250704][ T8952] gtp40: entered promiscuous mode
[  637.252581][ T8952] gtp41: entered promiscuous mode
[  637.254389][ T8952] bridge6: entered promiscuous mode
[  637.256209][ T8952] veth6: entered promiscuous mode
[  637.257974][ T8952] veth7: entered promiscuous mode
[  637.259752][ T8952] bridge7: entered promiscuous mode
[  637.261385][ T8952] gtp42: entered promiscuous mode
[  637.263013][ T8952] gtp43: entered promiscuous mode
[  637.264649][ T8952] gtp44: entered promiscuous mode
[  637.266324][ T8952] gtp45: entered promiscuous mode
[  637.268169][ T8952] gtp46: entered promiscuous mode
[  637.270437][ T8952] gtp47: entered promiscuous mode
[  637.272157][ T8952] bridge8: entered promiscuous mode
[  637.273809][ T8952] gtp48: entered promiscuous mode
[  637.275424][ T8952] gtp49: entered promiscuous mode
[  637.277104][ T8952] bridge9: entered promiscuous mode
[  637.278761][ T8952] bond4: entered promiscuous mode
[  637.280839][ T8952] gtp50: entered promiscuous mode
[  637.282556][ T8952] gtp51: entered promiscuous mode
[  637.284148][ T8952] gtp52: entered promiscuous mode
[  637.285803][ T8952] ;: entered promiscuous mode
[  637.287345][ T8952] gtp53: entered promiscuous mode
[  637.288982][ T8952] gretap3: entered promiscuous mode
[  637.291288][ T8952] gtp54: entered promiscuous mode
[  637.293182][ T8952] gtp55: entered promiscuous mode
[  637.294836][ T8952] gre2: entered promiscuous mode
[  637.296389][ T8952] gtp56: entered promiscuous mode
[  637.297998][ T8952] gtp57: entered promiscuous mode
[  637.299998][ T8952] gtp58: entered promiscuous mode
[  637.301983][ T8952] gtp59: entered promiscuous mode
[  637.303833][ T8952] gtp60: entered promiscuous mode
[  637.305632][ T8952] gtp61: entered promiscuous mode
[  637.307463][ T8952] gtp62: entered promiscuous mode
[  637.309327][ T8952] gtp63: entered promiscuous mode
[  637.311589][ T8952] veth8: entered promiscuous mode
[  637.313501][ T8952] veth9: entered promiscuous mode
[  637.315547][ T8952] gtp64: entered promiscuous mode
[  637.317646][ T8952] gtp65: entered promiscuous mode
[  637.319763][ T8952] ipip1: entered promiscuous mode
[  637.321702][ T8952] gtp66: entered promiscuous mode
[  637.323518][ T8952] gtp67: entered promiscuous mode
[  637.325311][ T8952] gtp68: entered promiscuous mode
[  637.326951][ T8952] bridge10: entered promiscuous mode
[  637.328647][ T8952] gtp69: entered promiscuous mode
[  637.331021][ T8952] bridge11: entered promiscuous mode
[  637.333284][ T8952] gtp70: entered promiscuous mode
[  637.335181][ T8952] bond5: entered promiscuous mode
[  637.336964][ T8952] veth10: entered promiscuous mode
[  637.338934][ T8952] veth11: entered promiscuous mode
[  637.341028][ T8952] gtp71: entered promiscuous mode
[  637.342680][ T8952] ip6gretap2: entered promiscuous mode
[  637.344684][ T8952] gtp72: entered promiscuous mode
[  637.346515][ T8952] bridge12: entered promiscuous mode
[  637.348610][ T8952] gtp73: entered promiscuous mode
[  637.350660][ T8952] gtp74: entered promiscuous mode
[  637.352449][ T8952] gtp75: entered promiscuous mode
[  637.354107][ T8952] gtp76: entered promiscuous mode
[  637.356156][ T8952] gtp77: entered promiscuous mode
[  637.358220][ T8952] gtp78: entered promiscuous mode
[  637.360100][ T8952] gtp79: entered promiscuous mode
[  637.361831][ T8952] bond6: entered promiscuous mode
[  637.363781][ T8952] gtp80: entered promiscuous mode
[  637.365626][ T8952] ip6tnl2: entered promiscuous mode
[  637.367457][ T8952] gtp81: entered promiscuous mode
[  637.369490][ T8952] netdevsim netdevsim2 eth0: entered promiscuous mode
[  637.372358][ T8952] netdevsim netdevsim2 eth1: entered promiscuous mode
[  637.374521][ T8952] netdevsim netdevsim2 eth2: entered promiscuous mode
[  637.377665][ T8952] netdevsim netdevsim2 eth3: entered promiscuous mode
[  637.380665][ T8952] gtp82: entered promiscuous mode
[  637.382877][ T8952] gtp83: entered promiscuous mode
[  637.385067][ T8952] gtp84: entered promiscuous mode
[  637.387254][ T8952] gtp85: entered promiscuous mode
[  637.389433][ T8952] gtp86: entered promiscuous mode
[  637.392308][ T8952] gtp87: entered promiscuous mode
[  637.394664][ T8952] gtp88: entered promiscuous mode
[  637.397409][ T8952] xfrm1: entered promiscuous mode
[  637.400422][ T8952] gtp89: entered promiscuous mode
[  637.510520][ T8962] IPVS: Unknown mcast interface: bridge_slave_0
[  637.513897][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7515'.
[  637.566027][ T8970] netlink: 'syz.0.7516': attribute type 1 has an invalid length.
[  637.568640][ T8970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7516'.
[  637.711932][ T8986] netlink: 'syz.0.7519': attribute type 10 has an invalid length.
[  637.715213][ T8986] bond0: (slave wlan1): refused to change device type
[  637.721710][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7519'.
[  638.330373][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7523'.
[  638.346259][ T8994] "syz.3.7523" (8994) uses obsolete ecb(arc4) skcipher
[  638.353630][ T8994] wlan0: left promiscuous mode
[  638.408008][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7527'.
[  638.415164][ T9006] netlink: 'syz.3.7527': attribute type 10 has an invalid length.
[  638.420487][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.424190][ T9006] team0: Port device bond0 added
[  638.570810][ T9021] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  638.574929][ T9026] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  638.590559][ T9026] team0: Port device bond0 removed
[  638.648211][ T9031] netlink: 'syz.3.7531': attribute type 10 has an invalid length.
[  638.651669][ T9031] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  638.655323][ T9031] bond0: (slave wlan1): Opening slave failed
[  638.660886][ T9031] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  638.665054][ T9031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  638.993238][ T9045] netlink: 'syz.2.7535': attribute type 1 has an invalid length.
[  639.366519][ T9052] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  639.420888][ T9055] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  639.425002][ T9055] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  639.459370][ T9055] macvtap0: entered promiscuous mode
[  639.516739][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7540'.
[  639.551483][ T9067] bond0: (slave wlan1): refused to change device type
[  639.624185][ T9073] IPVS: Unknown mcast interface: bridge_slave_0
[  639.697269][ T9078] delete_channel: no stack
[  639.725630][ T9087] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7547'.
[  639.747076][ T9087] bond0: (slave wlan1): Opening slave failed
[  639.758388][ T9087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7547'.
[  639.955996][ T9106] wg1 speed is unknown, defaulting to 1000
[  639.958949][ T9106] lo speed is unknown, defaulting to 1000
[  640.198668][ T9116] macvtap0: left promiscuous mode
[  640.324350][ T9125] validate_nla: 7 callbacks suppressed
[  640.324361][ T9125] netlink: 'syz.3.7554': attribute type 10 has an invalid length.
[  640.331313][ T9125] bond0: (slave wlan1): Opening slave failed
[  640.572991][ T9152] netlink: 'syz.0.7561': attribute type 13 has an invalid length.
[  640.661997][ T9159] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  640.714036][ T9164] netlink: 'syz.3.7563': attribute type 13 has an invalid length.
[  640.751106][ T9166] ieee802154 phy0 wpan0: encryption failed: -22
[  640.753542][ T9166] ieee802154 phy0 wpan0: encryption failed: -22
[  640.815153][ T9172] netlink: 'syz.3.7565': attribute type 10 has an invalid length.
[  640.825322][ T9172] bond0: (slave wlan1): Opening slave failed
[  640.898486][ T9180] wlan0: entered promiscuous mode
[  641.019270][ T9192] netlink: 'syz.3.7569': attribute type 10 has an invalid length.
[  641.033059][ T9192] bond0: (slave wlan1): Opening slave failed
[  641.128520][ T9202] netlink: 'syz.3.7572': attribute type 10 has an invalid length.
[  641.969508][ T9242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.085213][ T9254] __nla_validate_parse: 75 callbacks suppressed
[  642.085228][ T9254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7581'.
[  642.102917][ T9254] netlink: 'syz.2.7581': attribute type 10 has an invalid length.
[  642.109536][ T9254] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  642.115920][ T9254] bond0: (slave wlan1): refused to change device type
[  642.155294][ T9258] netlink: 'syz.2.7583': attribute type 10 has an invalid length.
[  642.158752][ T9258] bond0: (slave wlan1): refused to change device type
[  642.266202][ T9268] wg1 speed is unknown, defaulting to 1000
[  642.268960][ T9268] lo speed is unknown, defaulting to 1000
[  642.302627][ T9266] netlink: 'syz.0.7585': attribute type 10 has an invalid length.
[  642.306394][ T9266] bond0: (slave wlan1): Opening slave failed
[  642.309304][ T9266] netlink: 'syz.0.7585': attribute type 10 has an invalid length.
[  642.326063][ T9266] bond0: (slave wlan1): Opening slave failed
[  642.564228][ T9282] IPVS: length: 136 != 8
[  642.603036][ T9289] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  642.697849][ T9290] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  642.703051][ T9290] bond0: (slave wlan1): Opening slave failed
[  642.707910][ T9290] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  642.711462][ T9290] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.026845][ T9297] "syz.2.7590" (9297) uses obsolete ecb(arc4) skcipher
[  643.032853][ T9297] lo: left promiscuous mode
[  643.034991][ T9297] tunl0: left promiscuous mode
[  643.037174][ T9297] wk: left promiscuous mode
[  643.039251][ T9297] 1{X: left promiscuous mode
[  643.041898][ T9297] erspan0: left promiscuous mode
[  643.044044][ T9297] ip_vti0: left promiscuous mode
[  643.046195][ T9297] ip6_vti0: left promiscuous mode
[  643.048467][ T9297] sit0: left promiscuous mode
[  643.053914][ T9297] ip6tnl0: left promiscuous mode
[  643.056072][ T9297] ip6gre0: left promiscuous mode
[  643.058509][ T9297] syz_tun: left promiscuous mode
[  643.062219][ T9297] ip6gretap0: left promiscuous mode
[  643.064562][ T9297] bridge0: left promiscuous mode
[  643.066786][ T9297] veth1_to_bond: left promiscuous mode
[  643.069315][ T9297] !: left promiscuous mode
[  643.071964][ T9297] nlmon0: left promiscuous mode
[  643.074816][ T9297] 0X: left promiscuous mode
[  643.077061][ T9297] batadv0: left promiscuous mode
[  643.079097][ T9297] veth0: left promiscuous mode
[  643.083127][ T9297] veth1: left promiscuous mode
[  643.085283][ T9297] wg0: left promiscuous mode
[  643.087448][ T9297] wg1: left promiscuous mode
[  643.089565][ T9297] veth0_to_bridge: left promiscuous mode
[  643.092351][ T9297] bridge_slave_0: left promiscuous mode
[  643.094752][ T9297] veth1_to_bridge: left promiscuous mode
[  643.097187][ T9297] bridge_slave_1: left promiscuous mode
[  643.100604][ T9297] veth0_to_bond: left promiscuous mode
[  643.102887][ T9297] @: left promiscuous mode
[  643.104830][ T9297] veth1_to_team: left promiscuous mode
[  643.107113][ T9297] team_slave_1: left promiscuous mode
[  643.109361][ T9297] veth0_to_batadv: left promiscuous mode
[  643.112036][ T9297] batadv_slave_0: left promiscuous mode
[  643.114384][ T9297] xfrm0: left promiscuous mode
[  643.116404][ T9297] veth0_to_hsr: left promiscuous mode
[  643.118740][ T9297] veth1_to_hsr: left promiscuous mode
[  643.121568][ T9297] hsr0: left promiscuous mode
[  643.123567][ T9297] veth1_virt_wifi: left promiscuous mode
[  643.125831][ T9297] veth0_virt_wifi: left promiscuous mode
[  643.128124][ T9297] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  643.131925][ T9297] macvtap0: left promiscuous mode
[  643.134032][ T9297] geneve0: left promiscuous mode
[  643.136078][ T9297] geneve1: left promiscuous mode
[  643.138212][ T9297] gtp0: left promiscuous mode
[  643.140790][ T9297] gretap1: left promiscuous mode
[  643.142802][ T9297] ip6gretap1: left promiscuous mode
[  643.144864][ T9297] gtp1: left promiscuous mode
[  643.146830][ T9297] veth2: left promiscuous mode
[  643.148839][ T9297] veth3: left promiscuous mode
[  643.150951][ T9297] gtp2: left promiscuous mode
[  643.152949][ T9297] gtp3: left promiscuous mode
[  643.154891][ T9297] vxlan0: left promiscuous mode
[  643.156955][ T9297] gtp4: left promiscuous mode
[  643.159047][ T9297] gtp5: left promiscuous mode
[  643.161642][ T9297] gtp6: left promiscuous mode
[  643.163610][ T9297] gtp7: left promiscuous mode
[  643.165632][ T9297] gtp8: left promiscuous mode
[  643.167694][ T9297] gtp9: left promiscuous mode
[  643.169973][ T9297] gtp10: left promiscuous mode
[  643.172045][ T9297] gtp11: left promiscuous mode
[  643.174048][ T9297] gtp12: left promiscuous mode
[  643.176125][ T9297] veth4: left promiscuous mode
[  643.178316][ T9297] veth5: left promiscuous mode
[  643.180863][ T9297] gtp13: left promiscuous mode
[  643.182980][ T9297] gtp14: left promiscuous mode
[  643.185011][ T9297] gtp15: left promiscuous mode
[  643.187145][ T9297] bridge1: left promiscuous mode
[  643.189262][ T9297] macvlan0: left promiscuous mode
[  643.192204][ T9297] gtp16: left promiscuous mode
[  643.194333][ T9297] gtp17: left promiscuous mode
[  643.196426][ T9297] gtp18: left promiscuous mode
[  643.198520][ T9297] gtp19: left promiscuous mode
[  643.201192][ T9297] sit1: left promiscuous mode
[  643.203256][ T9297] gre1: left promiscuous mode
[  643.205342][ T9297] gtp20: left promiscuous mode
[  643.207468][ T9297] bridge2: left promiscuous mode
[  643.209519][ T9297] gtp21: left promiscuous mode
[  643.211795][ T9297] : left promiscuous mode
[  643.213961][ T9297] bridge3: left promiscuous mode
[  643.216026][ T9297] gtp22: left promiscuous mode
[  643.218093][ T9297] gtp23: left promiscuous mode
[  643.220471][ T9297] gtp24: left promiscuous mode
[  643.222598][ T9297] gtp25: left promiscuous mode
[  643.224613][ T9297] bond1: left promiscuous mode
[  643.226643][ T9297] gtp26: left promiscuous mode
[  643.228635][ T9297] gtp27: left promiscuous mode
[  643.231022][ T9297] bond2: left promiscuous mode
[  643.232990][ T9297] bridge4: left promiscuous mode
[  643.235025][ T9297] gtp28: left promiscuous mode
[  643.237129][ T9297] ip6tnl1: left promiscuous mode
[  643.239217][ T9297] gtp29: left promiscuous mode
[  643.241815][ T9297] ipip0: left promiscuous mode
[  643.243833][ T9297] gtp30: left promiscuous mode
[  643.245819][ T9297] gtp31: left promiscuous mode
[  643.247827][ T9297] bond3: left promiscuous mode
[  643.249977][ T9297] gretap0: left promiscuous mode
[  643.252050][ T9297] gtp32: left promiscuous mode
[  643.254063][ T9297] gtp33: left promiscuous mode
[  643.256069][ T9297] wireguard0: left promiscuous mode
[  643.258339][ T9297] gtp34: left promiscuous mode
[  643.260836][ T9297] gtp35: left promiscuous mode
[  643.262889][ T9297] gretap2: left promiscuous mode
[  643.264974][ T9297] gtp36: left promiscuous mode
[  643.266987][ T9297] gtp37: left promiscuous mode
[  643.268968][ T9297] bridge5: left promiscuous mode
[  643.271135][ T9297] gtp38: left promiscuous mode
[  643.273128][ T9297] mac80211_hwsim hwsim3 pimreg: left promiscuous mode
[  643.275894][ T9297] gtp39: left promiscuous mode
[  643.277903][ T9297] gtp40: left promiscuous mode
[  643.280508][ T9297] gtp41: left promiscuous mode
[  643.282604][ T9297] bridge6: left promiscuous mode
[  643.284779][ T9297] veth6: left promiscuous mode
[  643.287055][ T9297] veth7: left promiscuous mode
[  643.289157][ T9297] bridge7: left promiscuous mode
[  643.291744][ T9297] gtp42: left promiscuous mode
[  643.293834][ T9297] gtp43: left promiscuous mode
[  643.295923][ T9297] gtp44: left promiscuous mode
[  643.298030][ T9297] gtp45: left promiscuous mode
[  643.301005][ T9297] gtp46: left promiscuous mode
[  643.303059][ T9297] gtp47: left promiscuous mode
[  643.305081][ T9297] bridge8: left promiscuous mode
[  643.307190][ T9297] gtp48: left promiscuous mode
[  643.309206][ T9297] gtp49: left promiscuous mode
[  643.311471][ T9297] bridge9: left promiscuous mode
[  643.313579][ T9297] bond4: left promiscuous mode
[  643.315617][ T9297] gtp50: left promiscuous mode
[  643.317698][ T9297] gtp51: left promiscuous mode
[  643.320742][ T9297] gtp52: left promiscuous mode
[  643.322800][ T9297] ;: left promiscuous mode
[  643.324689][ T9297] gtp53: left promiscuous mode
[  643.326727][ T9297] gretap3: left promiscuous mode
[  643.328756][ T9297] gtp54: left promiscuous mode
[  643.330907][ T9297] gtp55: left promiscuous mode
[  643.332924][ T9297] gre2: left promiscuous mode
[  643.334931][ T9297] gtp56: left promiscuous mode
[  643.336934][ T9297] gtp57: left promiscuous mode
[  643.338926][ T9297] gtp58: left promiscuous mode
[  643.341378][ T9297] gtp59: left promiscuous mode
[  643.343431][ T9297] gtp60: left promiscuous mode
[  643.345484][ T9297] gtp61: left promiscuous mode
[  643.347485][ T9297] gtp62: left promiscuous mode
[  643.350192][ T9297] gtp63: left promiscuous mode
[  643.352322][ T9297] veth8: left promiscuous mode
[  643.354317][ T9297] veth9: left promiscuous mode
[  643.356359][ T9297] gtp64: left promiscuous mode
[  643.358448][ T9297] gtp65: left promiscuous mode
[  643.361027][ T9297] ipip1: left promiscuous mode
[  643.363077][ T9297] gtp66: left promiscuous mode
[  643.365115][ T9297] gtp67: left promiscuous mode
[  643.367174][ T9297] gtp68: left promiscuous mode
[  643.368938][ T9297] bridge10: left promiscuous mode
[  643.370763][ T9297] gtp69: left promiscuous mode
[  643.372411][ T9297] bridge11: left promiscuous mode
[  643.374239][ T9297] gtp70: left promiscuous mode
[  643.376196][ T9297] bond5: left promiscuous mode
[  643.377823][ T9297] veth10: left promiscuous mode
[  643.379435][ T9297] veth11: left promiscuous mode
[  643.381427][ T9297] gtp71: left promiscuous mode
[  643.383017][ T9297] ip6gretap2: left promiscuous mode
[  643.384716][ T9297] gtp72: left promiscuous mode
[  643.386335][ T9297] bridge12: left promiscuous mode
[  643.387967][ T9297] gtp73: left promiscuous mode
[  643.389604][ T9297] gtp74: left promiscuous mode
[  643.392620][ T9297] gtp75: left promiscuous mode
[  643.394242][ T9297] gtp76: left promiscuous mode
[  643.396095][ T9297] gtp77: left promiscuous mode
[  643.398252][ T9297] gtp78: left promiscuous mode
[  643.400829][ T9297] gtp79: left promiscuous mode
[  643.402670][ T9297] bond6: left promiscuous mode
[  643.404374][ T9297] gtp80: left promiscuous mode
[  643.406157][ T9297] ip6tnl2: left promiscuous mode
[  643.408026][ T9297] gtp81: left promiscuous mode
[  643.411104][ T9297] gtp82: left promiscuous mode
[  643.413251][ T9297] gtp83: left promiscuous mode
[  643.415415][ T9297] gtp84: left promiscuous mode
[  643.417464][ T9297] gtp85: left promiscuous mode
[  643.419496][ T9297] gtp86: left promiscuous mode
[  643.421760][ T9297] gtp87: left promiscuous mode
[  643.423796][ T9297] gtp88: left promiscuous mode
[  643.425399][ T9297] xfrm1: left promiscuous mode
[  643.427008][ T9297] gtp89: left promiscuous mode
[  643.688961][ T9329] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  643.838558][ T9333] wg1 speed is unknown, defaulting to 1000
[  643.842099][ T9333] lo speed is unknown, defaulting to 1000
[  643.887938][ T9334] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  643.896180][ T9334] bond0: (slave wlan1): Opening slave failed
[  643.913493][ T9334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  643.916822][ T9334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.956736][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7600'.
[  644.068860][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7600'.
[  644.159148][ T9346] GUP no longer grows the stack in syz.2.7601 (9346): 200000002000-20000000a000 (200000001000)
[  644.164524][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.2.7601 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  644.164550][ T9346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  644.164558][ T9346] Call Trace:
[  644.164563][ T9346]  <TASK>
[  644.164569][ T9346]  dump_stack_lvl+0x189/0x250
[  644.164589][ T9346]  ? __pfx_dump_stack_lvl+0x10/0x10
[  644.164600][ T9346]  ? __pfx__printk+0x10/0x10
[  644.164614][ T9346]  ? find_vma+0xe7/0x160
[  644.164629][ T9346]  ? vma_is_secretmem+0xd/0x50
[  644.164643][ T9346]  ? check_vma_flags+0x50d/0x580
[  644.164658][ T9346]  __get_user_pages+0x24d0/0x2ce0
[  644.164668][ T9346]  ? kasan_save_track+0x4f/0x80
[  644.164696][ T9346]  __gup_longterm_locked+0x3dc/0x1660
[  644.164715][ T9346]  ? rcu_is_watching+0x15/0xb0
[  644.164723][ T9346]  ? xdp_umem_pin_pages+0x52/0x340
[  644.164748][ T9346]  pin_user_pages+0x9e/0xd0
[  644.164772][ T9346]  xdp_umem_pin_pages+0x117/0x340
[  644.164790][ T9346]  xdp_umem_create+0x677/0x8e0
[  644.164808][ T9346]  xsk_setsockopt+0x7b0/0x8d0
[  644.164819][ T9346]  ? __pfx_xsk_setsockopt+0x10/0x10
[  644.164832][ T9346]  ? __fget_files+0x2a/0x420
[  644.164840][ T9346]  ? aa_sock_opt_perm+0xff/0x1b0
[  644.164850][ T9346]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  644.164860][ T9346]  ? __pfx_xsk_setsockopt+0x10/0x10
[  644.164870][ T9346]  do_sock_setsockopt+0x17c/0x1b0
[  644.164909][ T9346]  __x64_sys_setsockopt+0x13f/0x1b0
[  644.164920][ T9346]  do_syscall_64+0xfa/0x3b0
[  644.164934][ T9346]  ? lockdep_hardirqs_on+0x9c/0x150
[  644.164946][ T9346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.164955][ T9346]  ? exc_page_fault+0x9f/0xf0
[  644.164967][ T9346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.164975][ T9346] RIP: 0033:0x7f2c57b8ebe9
[  644.164986][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  644.164994][ T9346] RSP: 002b:00007f2c5894a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  644.165004][ T9346] RAX: ffffffffffffffda RBX: 00007f2c57db5fa0 RCX: 00007f2c57b8ebe9
[  644.165010][ T9346] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000e
[  644.165015][ T9346] RBP: 00007f2c57c11e19 R08: 0000000000000020 R09: 0000000000000000
[  644.165020][ T9346] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  644.165025][ T9346] R13: 00007f2c57db6038 R14: 00007f2c57db5fa0 R15: 00007fff8ef3b9e8
[  644.165041][ T9346]  </TASK>
[  644.832463][ T9379] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  644.954645][ T9379] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  644.957737][ T9379] bond0: (slave wlan1): refused to change device type
[  645.025020][ T9379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  645.028963][ T9379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  645.055323][ T9394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  645.092101][ T9394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  645.138439][ T9402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7608'.
[  645.158837][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7608'.
[  645.165737][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7608'.
[  645.179568][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7608'.
[  645.293041][ T9415] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  645.334995][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7609'.
[  645.415498][ T9424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.419173][ T9424] syzkaller0: entered promiscuous mode
[  645.422167][ T9424] syzkaller0: entered allmulticast mode
[  645.473161][ T9424] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  645.477960][ T9424] tipc: Resetting bearer <eth:syzkaller0>
[  645.483646][ T9422] tipc: Resetting bearer <eth:syzkaller0>
[  645.496308][ T9422] tipc: Disabling bearer <eth:syzkaller0>
[  645.641571][ T9437] validate_nla: 8 callbacks suppressed
[  645.641585][ T9437] netlink: 'syz.3.7615': attribute type 10 has an invalid length.
[  645.649094][ T9437] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  645.654500][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7615'.
[  645.756004][ T9439] IPVS: Scheduler module ip_vs_sip not found
[  645.848012][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7617'.
[  645.928677][ T9454] geneve1: entered allmulticast mode
[  645.947198][ T9454] wg1 speed is unknown, defaulting to 1000
[  645.950878][ T9454] lo speed is unknown, defaulting to 1000
[  646.554083][ T9483] "syz.3.7624" (9483) uses obsolete ecb(arc4) skcipher
[  646.557960][ T9483] wlan0: left promiscuous mode
[  646.845672][ T9499] netlink: 'syz.0.7629': attribute type 10 has an invalid length.
[  646.849740][ T9499] bond0: (slave wlan1): Opening slave failed
[  646.856995][ T9504] wlan0: entered promiscuous mode
[  647.080396][ T9520] nft_compat: unsupported protocol 8
[  647.082698][ T9520] nft_compat: unsupported protocol 8
[  647.090593][ T9520] nft_compat: unsupported protocol 8
[  647.094942][ T9520] nft_compat: unsupported protocol 8
[  647.097678][ T9520] nft_compat: unsupported protocol 8
[  647.102791][ T9520] nft_compat: unsupported protocol 8
[  647.138456][ T9523] netlink: 'syz.2.7636': attribute type 10 has an invalid length.
[  647.145502][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7636'.
[  647.148486][ T9523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7636'.
[  647.151694][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7636'.
[  647.156592][ T9523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7636'.
[  647.308957][ T9541] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7641'.
[  647.315931][ T9541] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7641'.
[  647.319200][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7641'.
[  647.532516][ T9563] netlink: 'syz.2.7644': attribute type 2 has an invalid length.
[  647.537335][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7643'.
[  647.713020][ T9580] netlink: 'syz.2.7650': attribute type 27 has an invalid length.
[  647.875631][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7652'.
[  647.941238][ T9597] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7653'.
[  648.099594][ T9614] IPVS: set_ctl: invalid protocol: 163 255.255.255.255:20003
[  648.159277][ T9619] netlink: 'syz.0.7657': attribute type 13 has an invalid length.
[  648.414959][ T9632] netlink: 'syz.2.7658': attribute type 10 has an invalid length.
[  648.419108][ T9632] bond0: (slave wlan1): Opening slave failed
[  648.455265][ T9627] pimreg3: entered allmulticast mode
[  649.433504][ T9668] "syz.2.7667" (9668) uses obsolete ecb(arc4) skcipher
[  650.467659][ T9700] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  650.575351][ T9712] bond0: Master is either lo or non-ether device
[  650.577806][ T9693] netlink: 'syz.0.7671': attribute type 10 has an invalid length.
[  650.584910][ T9693] bond0: (slave wlan1): Opening slave failed
[  650.600722][ T9712] netlink: 'syz.3.7674': attribute type 10 has an invalid length.
[  650.603314][ T9712] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  650.615929][ T9714] wg1 speed is unknown, defaulting to 1000
[  650.618846][ T9714] lo speed is unknown, defaulting to 1000
[  651.015399][ T9734] netlink: 'syz.3.7679': attribute type 10 has an invalid length.
[  651.163268][ T9737] netlink: 'syz.2.7681': attribute type 13 has an invalid length.
[  651.353306][ T9749] "syz.2.7684" (9749) uses obsolete ecb(arc4) skcipher
[  651.385167][ T9749] IPVS: persistence engine module ip_vs_pe_ not found
[  651.553329][ T9767] netlink: 'syz.3.7689': attribute type 13 has an invalid length.
[  651.561493][ T9767] ieee802154 phy0 wpan0: encryption failed: -22
[  651.599825][ T9770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.602494][ T9770] syzkaller0: entered promiscuous mode
[  651.604374][ T9770] syzkaller0: entered allmulticast mode
[  651.623345][ T9770] tipc: Resetting bearer <eth:syzkaller0>
[  651.628300][ T9769] tipc: Resetting bearer <eth:syzkaller0>
[  651.644826][ T9769] tipc: Disabling bearer <eth:syzkaller0>
[  651.691235][ T9773] netlink: 'syz.0.7691': attribute type 10 has an invalid length.
[  651.696623][ T9773] bond0: (slave wlan1): Opening slave failed
[  652.142707][ T9797] IPVS: Error connecting to the multicast addr
[  652.447915][ T9813] __nla_validate_parse: 13 callbacks suppressed
[  652.447935][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7698'.
[  652.621743][ T9837] netlink: 'syz.2.7703': attribute type 4 has an invalid length.
[  652.724952][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7705'.
[  652.795905][ T9859] veth0: entered promiscuous mode
[  652.876245][ T9864] IPVS: Scheduler module ip_vs_sip not found
[  652.925188][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7713'.
[  652.946694][ T9878] "syz.3.7713" (9878) uses obsolete ecb(arc4) skcipher
[  652.951899][ T9878] wlan0: left promiscuous mode
[  653.004951][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7715'.
[  653.032863][ T9888] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  653.046413][ T9885] "syz.0.7714" (9885) uses obsolete ecb(arc4) skcipher
[  653.056632][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7716'.
[  653.063768][ T9885] geneve1: left allmulticast mode
[  653.193005][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7719'.
[  653.238218][ T9901] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  653.242690][ T9901] netlink: 'syz.3.7720': attribute type 4 has an invalid length.
[  653.245137][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7720'.
[  653.289110][ T9913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7722'.
[  653.294698][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7722'.
[  653.889193][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7724'.
[  653.894028][ T9925] openvswitch: netlink: Unknown nsh attribute 0
[  653.896949][ T9925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.075421][ T9934] netlink: 'syz.2.7726': attribute type 13 has an invalid length.
[  654.078591][ T9934] netlink: 'syz.2.7726': attribute type 17 has an invalid length.
[  654.144379][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0
[  654.148685][ T9934] 8021q: adding VLAN 0 to HW filter on device team0
[  654.155662][ T9934] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  654.164060][   T10] lo speed is unknown, defaulting to 1000
[  654.166441][   T10] syz2: Port: 1 Link ACTIVE
[  654.184015][   T10] lo speed is unknown, defaulting to 1000
[  654.942630][ T9992] netlink: 'syz.0.7737': attribute type 13 has an invalid length.
[  655.163723][T10014] netlink: 'syz.0.7741': attribute type 10 has an invalid length.
[  655.168348][T10014] bond0: (slave wlan1): Opening slave failed
[  655.251105][T26799] lo speed is unknown, defaulting to 1000
[  655.253432][T26799] syz2: Port: 1 Link DOWN
[  655.255227][T26799] lo speed is unknown, defaulting to 1000
[  655.367237][T10023] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.373263][T10023] 8021q: adding VLAN 0 to HW filter on device team0
[  655.381334][T10023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  655.390272][  T534] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  655.404129][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  655.408253][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  655.427347][T10024] wg1 speed is unknown, defaulting to 1000
[  655.431499][T10024] lo speed is unknown, defaulting to 1000
[  655.866905][T10060] "syz.2.7750" (10060) uses obsolete ecb(arc4) skcipher
[  655.936941][T10065] "syz.0.7751" (10065) uses obsolete ecb(arc4) skcipher
[  655.941723][T10066] "syz.0.7751" (10066) uses obsolete ecb(arc4) skcipher
[  656.028037][T10073] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.032974][T10073] 8021q: adding VLAN 0 to HW filter on device team0
[  656.039337][T10073] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  656.046163][   T24] lo speed is unknown, defaulting to 1000
[  656.048088][   T24] syz2: Port: 1 Link ACTIVE
[  656.051572][   T24] lo speed is unknown, defaulting to 1000
[  656.148585][T10073] wg1 speed is unknown, defaulting to 1000
[  656.170416][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  656.215189][T10073] lo speed is unknown, defaulting to 1000
[  656.410885][T26799] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  656.428988][T10095] validate_nla: 5 callbacks suppressed
[  656.429008][T10095] netlink: 'syz.3.7757': attribute type 10 has an invalid length.
[  656.614359][T10101] netlink: 'syz.3.7758': attribute type 10 has an invalid length.
[  656.792713][T10110] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  656.878785][T10121] wlan0: entered promiscuous mode
[  656.881763][T10121] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  656.928654][T10123] tc_dump_action: action bad kind
[  657.043453][T10134] netlink: 'syz.0.7765': attribute type 10 has an invalid length.
[  657.047496][T10134] bond0: (slave wlan1): Opening slave failed
[  657.553229][T10143] wg1 speed is unknown, defaulting to 1000
[  657.556034][T10143] lo speed is unknown, defaulting to 1000
[  657.612699][T10147] __nla_validate_parse: 10 callbacks suppressed
[  657.612713][T10147] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7768'.
[  657.830608][T10149] tipc: Resetting bearer <ib:ip6gre0>
[  657.855828][T10149] wlan0: left promiscuous mode
[  657.873133][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7770'.
[  657.978414][T10160] bond0: (slave wlan1): Releasing backup interface
[  658.033925][T10160] wg1 speed is unknown, defaulting to 1000
[  658.036999][T10160] lo speed is unknown, defaulting to 1000
[  658.125574][T10171] netlink: 'syz.3.7772': attribute type 10 has an invalid length.
[  658.128858][T10171] bond0: (slave wlan1): Opening slave failed
[  658.144889][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7773'.
[  658.247335][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7775'.
[  658.252462][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7775'.
[  658.256967][T10178] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7775'.
[  658.260360][T10178] netlink: 'syz.0.7775': attribute type 3 has an invalid length.
[  658.262953][T10178] netlink: 'syz.0.7775': attribute type 2 has an invalid length.
[  658.265453][T10178] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7775'.
[  658.271507][T10178] netlink: 'syz.0.7775': attribute type 2 has an invalid length.
[  658.276551][T10178] netlink: 'syz.0.7775': attribute type 10 has an invalid length.
[  658.280032][T10178] bond0: (slave wlan1): Opening slave failed
[  658.457113][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7778'.
[  658.464523][T10186] "syz.0.7778" (10186) uses obsolete ecb(arc4) skcipher
[  658.581355][T10188] netlink: 'syz.0.7779': attribute type 10 has an invalid length.
[  658.586067][T10188] bond0: (slave wlan1): Opening slave failed
[  658.835901][T10202] netlink: 'syz.3.7783': attribute type 10 has an invalid length.
[  658.839004][T10202] bond0: (slave wlan1): Opening slave failed
[  658.915765][T10211] Unsupported ieee802154 address type: 0
[  659.066094][T10221] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  659.146898][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7789'.
[  659.154510][T10230] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  659.160524][T10227] netlink: 35 bytes leftover after parsing attributes in process `syz.0.7789'.
[  659.267847][T10242] bond0: (slave wlan1): Opening slave failed
[  659.405067][T10245] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  659.769687][T10279] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  659.774339][T10279] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  659.777867][T10279] CPU: 0 UID: 0 PID: 10279 Comm: syz.2.7800 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  659.783412][T10279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  659.787354][T10279] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  659.789756][T10279] Code: 18 00 74 08 4c 89 ef e8 ad 42 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 aa 41 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 81 42 02 f8 4d 89 2e 41 80 3c 1f 00
[  659.796707][T10279] RSP: 0018:ffffc9000260f130 EFLAGS: 00010246
[  659.798841][T10279] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  659.801359][T10279] RDX: ffffc900092fe000 RSI: 0000000000001189 RDI: 000000000000118a
[  659.804582][T10279] RBP: ffff888032a7bab0 R08: ffff88801ba8d640 R09: 0000000000000002
[  659.807743][T10279] R10: 000000000000000a R11: 0000000000000002 R12: ffff888032a78028
[  659.810904][T10279] R13: ffff888032a7baa8 R14: 0000000000000000 R15: 1ffff1100654f006
[  659.814098][T10279] FS:  00007f2c5894a6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  659.817550][T10279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  659.819637][T10279] CR2: 000000110c2c6944 CR3: 0000000033108000 CR4: 00000000000006f0
[  659.822480][T10279] Call Trace:
[  659.823734][T10279]  <TASK>
[  659.824853][T10279]  xfrm_state_add+0x564/0xc40
[  659.826495][T10279]  xfrm_add_sa+0x35a1/0x4070
[  659.828379][T10279]  ? __pfx_xfrm_add_sa+0x10/0x10
[  659.830460][T10279]  ? apparmor_capable+0x137/0x1b0
[  659.832471][T10279]  ? __nla_parse+0x40/0x60
[  659.834324][T10279]  xfrm_user_rcv_msg+0x7a3/0xab0
[  659.836342][T10279]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  659.838551][T10279]  ? bpf_trace_run2+0x322/0x4b0
[  659.840528][T10279]  ? __pfx___mutex_trylock_common+0x10/0x10
[  659.842832][T10279]  ? rcu_is_watching+0x15/0xb0
[  659.844711][T10279]  ? trace_contention_end+0x39/0x120
[  659.846869][T10279]  ? __mutex_lock+0x335/0x1360
[  659.848779][T10279]  netlink_rcv_skb+0x208/0x470
[  659.850742][T10279]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  659.852946][T10279]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  659.855110][T10279]  ? netlink_deliver_tap+0x2e/0x1b0
[  659.857239][T10279]  ? netlink_deliver_tap+0x2e/0x1b0
[  659.859368][T10279]  xfrm_netlink_rcv+0x79/0x90
[  659.861263][T10279]  netlink_unicast+0x82f/0x9e0
[  659.863157][T10279]  ? __pfx_netlink_unicast+0x10/0x10
[  659.864920][T10279]  ? netlink_sendmsg+0x642/0xb30
[  659.866726][T10279]  ? skb_put+0x11b/0x210
[  659.868196][T10279]  netlink_sendmsg+0x805/0xb30
[  659.870152][T10279]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.872293][T10279]  ? aa_sock_msg_perm+0xf1/0x1d0
[  659.874268][T10279]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  659.875842][T10279]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.877888][T10279]  __sock_sendmsg+0x21c/0x270
[  659.879468][T10279]  ____sys_sendmsg+0x505/0x830
[  659.881060][T10279]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.882890][T10279]  ? import_iovec+0x74/0xa0
[  659.884497][T10279]  ___sys_sendmsg+0x21f/0x2a0
[  659.886263][T10279]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.888316][T10279]  ? __fget_files+0x2a/0x420
[  659.890057][T10279]  ? __fget_files+0x3a0/0x420
[  659.891641][T10279]  __x64_sys_sendmsg+0x19b/0x260
[  659.893329][T10279]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  659.895095][T10279]  ? rcu_is_watching+0x15/0xb0
[  659.896762][T10279]  ? do_syscall_64+0xbe/0x3b0
[  659.898637][T10279]  do_syscall_64+0xfa/0x3b0
[  659.900431][T10279]  ? lockdep_hardirqs_on+0x9c/0x150
[  659.902470][T10279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.904642][T10279]  ? exc_page_fault+0x9f/0xf0
[  659.906236][T10279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.908092][T10279] RIP: 0033:0x7f2c57b8ebe9
[  659.909491][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  659.915573][T10279] RSP: 002b:00007f2c5894a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.918752][T10279] RAX: ffffffffffffffda RBX: 00007f2c57db5fa0 RCX: 00007f2c57b8ebe9
[  659.921828][T10279] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004
[  659.924957][T10279] RBP: 00007f2c57c11e19 R08: 0000000000000000 R09: 0000000000000000
[  659.928102][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.931192][T10279] R13: 00007f2c57db6038 R14: 00007f2c57db5fa0 R15: 00007fff8ef3b9e8
[  659.934112][T10279]  </TASK>
[  659.935106][T10279] Modules linked in:
[  659.936633][T10279] ---[ end trace 0000000000000000 ]---
[  659.938757][T10279] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  659.941238][T10279] Code: 18 00 74 08 4c 89 ef e8 ad 42 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 aa 41 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 81 42 02 f8 4d 89 2e 41 80 3c 1f 00
[  659.948645][T10279] RSP: 0018:ffffc9000260f130 EFLAGS: 00010246
[  659.950815][T10279] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  659.953390][T10279] RDX: ffffc900092fe000 RSI: 0000000000001189 RDI: 000000000000118a
[  659.956126][T10279] RBP: ffff888032a7bab0 R08: ffff88801ba8d640 R09: 0000000000000002
[  659.959438][T10279] R10: 000000000000000a R11: 0000000000000002 R12: ffff888032a78028
[  659.962821][T10279] R13: ffff888032a7baa8 R14: 0000000000000000 R15: 1ffff1100654f006
[  659.966034][T10279] FS:  00007f2c5894a6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  659.969781][T10279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  659.972021][T10279] CR2: 000000110c2c6944 CR3: 0000000033108000 CR4: 00000000000006f0
[  659.975338][T10279] Kernel panic - not syncing: Fatal exception in interrupt
[  659.978911][T10279] Kernel Offset: disabled
[  659.980512][T10279] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:06:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000023e6 RDI=00000000000023e7 RBP=00000000000003f8 RSP=ffffc9000260e8d0
R8 =ffff888021208237 R9 =1ffff11004241046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98cd R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2c5894a6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c6944 CR3=0000000033108000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f2c588ed100 00007f2c57d87460 XMM05=00007f2c57d87478 00007f2c57d874c0
XMM06=00007f2c57d874b8 00007f2c57d874b0 XMM07=00007f2c57d874a8 00007f2c57d874a0
XMM08=0000000000000000 00007f2c57c12ee7 XMM09=0000000000000000 00007f2c57c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b710ccc RBX=0000000000000000 RCX=0000000000080000 RDX=ffffc90009919000
RSI=ffff888110ee2b00 RDI=ffff888107184400 RBP=dffffc0000000000 RSP=ffffc9000285f058
R8 =ffff8881305a5640 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000002
R12=0000000000000000 R13=00007f9c835f6fff R14=ffff888110ee2b00 R15=ffff888107184400
RIP=ffffffff81bfadf8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9c861f56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000b69000 CR3=000000012ffce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=c18f2615280ed5d3 d2541b9edbd8ea32 XMM03=4317e8403d3f58a4 a28cbc816956eca6
XMM04=669d6af2a59b4497 18cce6cf254f0f3d XMM05=0000006f62aaed13 a88a242c6424754b
XMM06=e3f3227d99ffb9e0 14a3236f3701c4f5 XMM07=e673ac669d6af2a5 9b449718cce6cf25
XMM08=4f0f3d4317e8403d 3f58a4a28cbc8169 XMM09=0000000000000000 00007f38c1812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
