last executing test programs:

1.655538967s ago: executing program 2 (id=7350):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg1\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0x4, @mcast2, 0x4800}}, 0x0, 0x0, 0x18, 0x0, "9aaef75053418aa6708dea5ac14eaa1308832419b11c4a5a3f3c211692e44c8efe393055f63251bdd187ac581fb27965c9792e8e865dbac90e836c3cef80d48c0cb179f98c818e83019a26d78bafaad0"}, 0xd8)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
r4 = accept4$ax25(r3, &(0x7f0000000140)={{0x3, @null}, [@remote, @default, @bcast, @rose, @rose, @netrom, @rose, @rose]}, &(0x7f00000001c0)=0x48, 0x800)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000200)=0xfffffff7, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f0000000240)="67d6ffdbc6b49f4744883f08e9")
readv(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000005c0)=""/146, 0x92}], 0x7)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback=r4, 0xffffffffffffffff, 0x2a, 0x8}, 0x20)
r7 = socket$inet6(0xa, 0x2, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r8 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x800)
bind$llc(r8, &(0x7f0000000780)={0x1a, 0x309, 0x5, 0x8, 0x5, 0x4, @remote}, 0x10)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f0000000880)={'broute\x00', 0x0, 0x3, 0x58, [0x7, 0x3, 0x9, 0xfffffffffffffffc, 0x10001, 0x5], 0x3, &(0x7f00000007c0)=[{}, {}, {}], &(0x7f0000000800)=""/88}, &(0x7f0000000900)=0x78)
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000940)={'ip6erspan0\x00'})
readv(r7, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/247, 0xf7}, {&(0x7f0000000a80)=""/222, 0xde}, {&(0x7f0000000b80)=""/216, 0xd8}], 0x3)
socket$unix(0x1, 0x0, 0x0)
socketpair(0xf, 0x4, 0x7, &(0x7f0000000cc0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8b06e11ecd84754f}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0xc000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000e40)={'ipvlan0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x500400c}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@newneigh={0x60, 0x1c, 0x800, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x0, r1, 0x80, 0x4, 0xb}, [@NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_DST_MAC={0xa}, @NDA_IFINDEX={0x8, 0x8, r12}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000f80)={0x1, 0x0, 0x3, 0x80, @vifc_lcl_addr=@empty, @loopback}, 0x10)

1.416488164s ago: executing program 2 (id=7356):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={<r3=>0x0, 0x5, 0x1, 0x6}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r3}, &(0x7f00000003c0)=0x8)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x1000)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl(r4, 0x8b21, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r6 = accept4(r0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
recvmmsg$unix(r6, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r6)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00002dbd7000fcdbdf250000000008000700", @ANYRES32, @ANYBLOB="080008000400000014000c00fc00000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="0a000100524180c13bf5ff11aefa422cf0bdd365b8e63b0f526bf84662e7b6418c5a63a324e8041be33fad0573c2c87fb637895a31341d0a3add0dd367c21a1a1a4ef623b9450925c377577cfd59bc287d537040d846b3666e3a706c478ef7ffd0b838a6056f82a3dcf1e256effa1d5153f193f9996a947028f25716d22bdaf9ada74dec9a809e62b5377bffa4f3fc483900ffc463870d1376dea124cc0305f200ed803895ffb034f89e4b", @ANYRES32=0x0, @ANYBLOB="05000d00290000000600060002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4048080)

1.357504788s ago: executing program 1 (id=7359):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt(r1, 0x1, 0x2, &(0x7f0000001100)=""/4096, &(0x7f00000001c0)=0x1000)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x3}}, @qipcrtr={0x2a, 0x4, 0x8000}, @phonet={0x23, 0x1, 0x3, 0x15}, 0x3, 0x0, 0x0, 0x0, 0xfffe, &(0x7f00000001c0)='vcan0\x00', 0x0, 0x7, 0x6})
sendto$inet6(r0, &(0x7f0000000000)="3401d4d2120340b459eea39e77a2651ab2297ca2ac616f3eefbbe7af7a5f2dafbe966d5778fc11000a4f7785c2a89444de0af57da615b50f27adaf94034995e41f6c78a0a523e37c3e059fee3308b3172b0f3e586530b51230127580db13cac4fa0576108f79991e5dd89d6fde3b868760aaf2772d610dc809a4206ec73fb7bc7dbeccc8cf2e3fec86cdcdd3b169b87752d943147d31eb7f35c113f3e30a17775624ae7a670c4993333c03d9c9ed2eda39eca3c1c8fccb49d6810cdb22b14bcf62281542278c92b8d049201ca795510f0cfee96bdfabe9419a218e56193a22", 0xdf, 0x8000, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000300)=""/159, &(0x7f0000000200)=0x9f)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
socketpair(0x18, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000400))
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x1000005, 0x40, 0xcd, 0x7}, &(0x7f0000000580)=0x9c)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={<r8=>r2, 0xa96, 0xfffffffffffffffa, 0x2})
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000840)={0x5, 0x0, [{0xeeef0000, 0x54, &(0x7f00000004c0)=""/84}, {0x80a0000, 0x78, &(0x7f00000005c0)=""/120}, {0x0, 0xb6, &(0x7f0000000640)=""/182}, {0x3000, 0xb1, &(0x7f0000000700)=""/177}, {0x8080000, 0x72, &(0x7f00000007c0)=""/114}]})
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000140)={0x3})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x7, 'batadv0\x00', {0x4}, 0x1})

1.354353374s ago: executing program 2 (id=7360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae1e022000000000"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0xd}, 0x8040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000140)=0xfffffff7, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

986.406695ms ago: executing program 0 (id=7365):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r1=>0x0)
sendmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000040)=@ethernet={0x1, @random="9198b04fcfeb"}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="bfc2f255ee45dd6cc3aff5590eea6fff9e22a56a1d2e2a0273d93ac86c46b51ae67d39669fe309108b34290a9a8fb422b1f764147621be59ad2550d8f0", 0x3d}, {&(0x7f0000000140)="42e31dd861dc9bcecdd1ed81f3fae782349af4adea12bc47d2c9d47f0939f9116b3227fb0345a0be9ffeb5ddfc", 0x2d}], 0x2, &(0x7f0000000300)=[{0x78, 0x10a, 0x200, "44895a0a61ccb89260ce9840e7bf1960214dc4cbcbc03675580b469870922c60425dde377ccf93e7a8619cc7e591c0e15c898d09e61e91705f507cb808024a8faf19dc2514bff2a0668884687580f13e66514530a8edcdf84f92e03e3c7aa47d2b53a61417"}, {0x88, 0x111, 0x3, "caec1fd676bf583bb18482eae601897a7672d6ffe9d58a6910eef56d8f6e6e62ce7335c4eb7c226ab7c8e53a281b24e4698c598097695f3be56b14224ed0047c6979eab1e1d775e0e01c57596f2616b69834ab6ccd7d8df82ed356d1d660fd128967bd5402c1e2a91196291180ec85d971ea2d174dbc85"}, {0x68, 0x84, 0x4, "fa90d5b4b9e6decaf639991de74ed165751d257e9f02cf98e9c64050f8f65c4dc67ea7c1589bd5a05ba80b86a463a94d6b6ac32b0ca30085ae612e39e96343f8f441f3d5573ad415c5b663340e31eca56924"}, {0x100, 0x3a, 0xffffffff, "74f535a538bee58a9125a2a7aefa9a8ac4cc96474b9a3a44334c691c99813e0a8121dbffaa4046a9f54909855cc609fd9089f7c7a8793ff41bf652350ff8990d63f5499f78b12035417114583a7b9075eda75844745a663f0dc2700c6604e1400820eb42926be4710ebc301f7bd529192caa6766700375793849ee3c997e7c1e6d9ebddee08408948971bcbf6b0621a54c77171ccbfb14c4b43798567495d42fe2dee85c5a2cb57061f09379fbb75eda32378999afaabc32f34c7eadff49245111586cf52a40d676041645baa720ee7549cf4c43dfabe9a57673377cf777d85791e49d4852ecf8c60151eb97"}, {0x18, 0x107, 0x9, "7e35d75a66750233"}], 0x280}}, {{&(0x7f0000000200)=@nfc_llcp={0x27, r1, 0x1, 0x2, 0xf9, 0x5, "1666fa7aa8a5756232f1d037e16338dde1bd153dddf26a2223ab9bbd71e58054b1605e868c55a2b1c8019b58f3a4627b9dc6df27e2e19ddda3f010672c0eaa", 0x11}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="5ce5864c3fe8a682dd404bbf57af3e345d91f796863de7c2ceb4eacd7126807f0698e41093deca5992fe9a60b22dfb758f081aeb4de0b677362f6bff7e909cb1", 0x40}, {&(0x7f0000000580)="6a41dcf29515ac475ba89c4a8762579cb1744a91823112d468d5076f703b07aa8d1861f7bd646e32ea9c8c7d81eb88d2370a97e16dcc4f870a608e77645d3002cfca5fa0a87d3c4c22a082", 0x4b}, {&(0x7f0000000600)="2010dddd07a20c45e7482b11f4835c50052a8406b4e27ddf4bc3a1275ec5d95f323ba1b865c19cbb86e37f2f7cc5924503f19058a8372209fb005607a39b1b55132fd6a52bb339f7ea52a2a8ce5732dc8863db0ae0ed5c8d1a68e68a2c48b576918e98dd2160285705ca898597772eb5", 0x70}, {&(0x7f0000000680)="5945c3e835a17622ab832bafc27ec085f6802e50782749d01c1eb83bc4e788be3f007ddcdec4061fdd69bf8de3fce2838844feff9b0313f39b2dbd716237605e5fa747f585f9a078668272ddb91aff8efdadc063a4d2dc66d77dc663b40dbf022278c00bba7b01100254838dded9c4886d9c6a", 0x73}], 0x4}}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000003400)="a0ee0205aca62103e7dd7ef662a7463ca489fe185f29f714100a4dd0c61d57e147d4a8a9a98d87c4d5009265f62b5a19d46ea97137ae468b5881f5917d48474c3b222f7f7e80644f66122fbe6077a6541d242aa03ae344a0fd235be797c2b1a49ed9386061c452cd6914378050080cf33ccadc7a9615d9b49d4897e65c50f9a0b86b5b6a6170eada69b1127bbaa5876e6fa35730d2c8", 0x96}, {&(0x7f0000000840)="b72dc2ad081dd08af7eb71f23fe8bc6986457a865b6b951ea351cb4c982141126b7b8b3bc87379d2d2dacbe27f70abbe63de46ec84dd75fce7a3e2f862d83e448d5519b3f340c954f836cd0913f160db626a1aa9d0a56b5be6d6a144ff260add277ddbb1d03e1dced88f450be704aa9c018b0ba3650cc3cfc340663e76a4309ea3ef92341515b223f4aba44640093a8ebfa448723782d38a26c2e9576638f5fc8be136dd1f51183d2be74feecfb87de2d68d03656e1ba75cba92a7", 0xbb}, {&(0x7f0000000900)="8c2abc52c8786268de449f70591ef41e09f5e8d4fb3afd9bcb54db", 0x1b}, {&(0x7f0000000940)="81a603f0c7b4e02d09c6c838c4f5668a1662d11bb599391eeeee0ab24e27fa6b9983ed1d3a707d871a2e5214beea153d696605d0a20058d3a18c7a2190216f78a721659bb449e7a1e42145f551def284b259bdfd994ffabab78e06bfd6c46b248ab693b5ba63354e9020f9ca10177a87241512352ee0f8c2814a73a6dc5b12d7e9014deef5cb51a5d5", 0x89}, {&(0x7f0000005f40)="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", 0x1000}, {&(0x7f0000001a00)="ae2a0c0035366f928761bf6b65d3a131ab3cae9b6b8c80512f03bee439ce42076a2343070cd196c984e48b0dc97b77f8d6d05874216c824a46f533c5c3876e4a723969514253babb5b99fdd92a9770142e0d55059ed8b09abaa06aa38ff30bf5b42cd6ce89e8d53a1462c14829d768fe50b6064a55e35cc3053a64218206b98bec42dad74fe9e7d04d3d4c27ada1dd0094595d57", 0x94}], 0x6}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="2629439667e64852e2b75f95374c810b3934358318aec10ae5e55b96a2c9771a27652ccdd8ea9cb931585ed8b143fe4699b9836422ff3a267df23dafe8a28a839bc711e243b0e11317574a53e5a1546cd2902da04dd890e46a8a1efd382d11e35485bf074fbbbd36cd6a3d970ca3305553f046c59deef76b419b37c6635e8ee39f043810674a317ace0e9769f1ed9a2dcb41a0dbf0b139a6993b51e9e2c64b982e810830bd6ec2b3bfb54732efced40160b84fc3d077aa01c081390ab294966b52bb8a4ecf384bea7b0de313043401044ccdb426bedd7af8c8", 0xd9}, {&(0x7f0000001c80)="3f7464e41a4dda561cdab3332eba0b13756efb127e1ba6f7dbc607fa9e4eaf110d46b1981e94c6355e98342769cda4b35d1b55fa0ecd23d590b03a5939f922cb6e4c854c00cb4635e6e5d8b59d75a7991ada9ca3c65708b152e08abead47bac2d7aa222db8eb89535ca9d7", 0x6b}, {&(0x7f0000001d00)="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", 0x1000}], 0x4, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x5b0}}], 0x4, 0x8821) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\a\x00', 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "744d378d725a810e14acb4033a5190cda9a4c47fa0196b065d99ec9133d0911a", "fcf2c310568500888c8557889dc5b3bace772a8d7cc3e078bd0a22b5555b7c65271086025c07bb13ed01ea7c990df7fc", "36a79cc6cf41d5f0569e232edbe34fcb8003dc044fae9395d876e70b", {"13070f19a20ed8b1ff1fa5da6f853a53", "34fe4f763b750f4051e691d44b7b29c6"}}}}}}}}, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000080))
recvmsg(r0, &(0x7f0000005f00)={&(0x7f0000004a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004a80)=""/87, 0x57}, {&(0x7f0000004b00)=""/246, 0xf6}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/74, 0x4a}, {&(0x7f0000005c80)=""/45, 0x2d}, {&(0x7f0000005cc0)=""/221, 0xdd}], 0x6, &(0x7f0000005e40)=""/164, 0xa4}, 0x143)
getsockname$l2tp6(r2, &(0x7f0000004980)={0xa, 0x0, 0x0, @empty}, &(0x7f00000049c0)=0x20) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=<r5=>0x0)
sendmsg$sock(r0, &(0x7f0000004940)={&(0x7f00000034c0)=@nfc={0x27, r5, 0x0, 0x6}, 0x80, &(0x7f0000004840)=[{&(0x7f0000000800)="16ef5b6f3713c3e3ec5ef06df7f3", 0xe}, {&(0x7f0000001b40)="405aca914fcf1d70ffdea9065ec9bbde4a8936c541484cfccd23492a6373081a4c19553ed144733f84f166", 0x2b}, {&(0x7f0000003540)="e79c69067a529aecf3e37e46bab8d149117983324816947bb449386367f18a1e1e5ee026da2a1d15ab6799f644f2621582fcd783b5", 0x35}, {&(0x7f0000003580)="8b3eae5f64e8b42590958e943151", 0xe}, {&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="41fa81cd7797e39d47aed2b624d371f4932fa6cbf8558c0fb4f7ac967c46e8ade59201cb30975cf9d983571bf5d8a2934b7c87a47f5113428ae11e0a89498277e66d3fb76c16175efe050fc43b03a0b2e0b9b8af9daf8b295bf5af0d6ebf8137e2fc5e03dd7962d4c4f4da2552d480a766fcc4735944d55f6fafafef96be4e2952b83db4ded83bd29efc2dbee5f23437e550c3ef5df7f7d1eaf47bd3a73f19de3cd759d595fdeb8141", 0xa9}, {&(0x7f0000004680)="2b11572238b2d7394f98d18f975c1bcf783be57b93d9e307b6649dd881590df262df8c7791909a401c73d496c2b9fb1d9ee10eae602c3682d2f50b8162ce8e7336a63b3f1e069a", 0x47}, {&(0x7f0000004700)="6d74a1f3d01fac62b9762989881adadc2e7e83700420f85e9977a147245d152bcfd45db0c33ce2e3e47247f915fdd6395c92b42357b41e6da20a31bd6c49a4fbcb3465696a6217a482e79a412b528c1590880ec135a2a89c1f6ab4c2f8431ef240c563d596e54e3a6a649a435c43243c55912f6cb968de2e6724bdba2bd0418f1b0517ae6fc0ce257bb6e9415d39a37a80ca33150d91205827eb5c89af925043bf21cff88ac008adaacc4759ceef056176f17ead64b0ded424359aefb57328698a9b99563295e5ef23f57389296655acfa81f6", 0xd3}, {&(0x7f0000004800)="87d3723220c6d43e577b44e0b7d0a135d6247452c674", 0x16}], 0x9, &(0x7f0000004900)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x20000801)

935.446278ms ago: executing program 0 (id=7366):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

935.015808ms ago: executing program 0 (id=7367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x8c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x26, 0x0, 0x3000000, 0x15, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x80000001, 0x8}})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, 0x0}}], 0x1, 0x0)
shutdown(r4, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'veth1_vlan\x00'}, 0x18)
unshare(0x6a040000)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0xc999538fae47d0f7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x18040}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
socket$inet6(0xa, 0x3, 0x1)
sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801)

677.247691ms ago: executing program 0 (id=7368):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0xc5, @mcast1, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x101, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r3}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@allocspi={0x160, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2, [0x27f4, 0x7]}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x160}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11, <r13=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r13, &(0x7f00000001c0)="1713"}, 0x20)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0xfffffd2c, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r12, @ANYBLOB, @ANYRESDEC=r3], 0x20}], 0x1, 0x0, 0x0, 0x4000010}, 0x300)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x4, 0xf}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)

576.945737ms ago: executing program 0 (id=7369):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='pim6reg0\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r5 = socket(0x10, 0x80003, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r4, 0x7f, '\x00', r7, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

444.575993ms ago: executing program 1 (id=7370):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r0, 0xfffffffc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

444.264018ms ago: executing program 2 (id=7371):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2) (async)
splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) (async)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0xb91, 0x4) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) (async)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000140))
r3 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x5431000) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r8, 0x4}, 0x38) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r9) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYBLOB="000000000000000000000000000084a005670000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)

441.514694ms ago: executing program 1 (id=7372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)

386.364605ms ago: executing program 2 (id=7373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x3c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="84ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e070000000000000080fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57cc5e93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049500d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d99a6a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7700000658864b429e9472edfeffbf34d6e7c78f4aa73c0ec84761a91a016f3f0926e3280582a3230e8e195574a0fb540410f5a1df7bf03fea1d2274fdc2df27726342e1b3cdd8b5fafb96997bd811cc3a8824deb6eaad37857f1fb10fc0c7b24ce1c3a8c5d1138e69c25c2c92fb2cdca447428cd8822216d5022f4dc415ecbd89d7b9dd475e21ff236611962a405178fe4daa0138505208792c56bb5d3a707cd3f62187b97cca9f9d4688b2b7791710bcd8cbf48956aac7978c85a33bb95d7067aa4564f6fab84e1eeff9459a4268987e1448a1b9c4c6324b092870d513ad091d656660500000000000000722cebb0c422fe7e3030c949d5274b6d04960361e7fb69b1ab915ec5d4ab54a5809cf072aa94d0884be112b635b10bf8260c39cb9b47e3398756f4b571c015b5d46254bd4af31728bc67e6712c785d41b52792c75e373d2c9493fa8dd623d28ec7e1ac66491e8ddbc4efa4ed4939b531e5b2eb86281b736043fbde530a9b842f24f7b00e0be423e6315a1d19b43d265b7f95fbfb", 0x447}, {&(0x7f0000002180)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05edfffd9d00000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0)

317.109071ms ago: executing program 1 (id=7374):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
unshare(0x22020400)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@delqdisc={0xcc, 0x25, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0x3}, {0xffff, 0x2}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0xff, 0x6, 0x1, 0x2, 0x60, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0x101, 0x1, 0x5]}}]}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x6, 0x1, 0x2, 0x8, 0x1a986e3e, 0x3}}, {0xa, 0x2, [0x2, 0x1c, 0x6]}}, {{0x1c, 0x1, {0x7, 0x4, 0x4, 0x1, 0x2, 0x7, 0x10}}, {0x4}}, {{0x1c, 0x1, {0x10, 0xfc, 0x6, 0x3, 0x2, 0x800, 0xa, 0x3}}, {0xa, 0x2, [0x3, 0x4d5, 0x3]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xe8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0xfffffd3a, 0x10, 0x0, 0x0, 0x0}}, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xd, 0xc}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1d, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="8000000008001b000000000000000000"], 0x28}}, 0x0)

34.204042ms ago: executing program 2 (id=7375):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = getuid() (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) (async, rerun: 64)
r4 = gettid() (rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{}, [@null, @null, @netrom, @bcast, @rose, @bcast, @default]}, &(0x7f0000000080)=0x48)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x23c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}, @nested={0x220, 0x30, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @uid=r1}, @nested={0x212, 0x7c, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @u32=0x16}, @nested={0x4, 0x7e}, @nested={0xeb, 0x127, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@loopback}, @nested={0x10, 0x54, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x8, 0x67, 0x0, 0x0, @pid=r4}]}, @generic="64b6703f07fd51cd712fcc2cb1f812d620fa907393f613b4d41db0808cbfe9c8fe1380739b199a961b03b49d50a9b5ed49f79160f0ba024d420703577f7dc87e7c273f1918ba173cf18c8e98aa13c0e0d85d31e126f8ed6006b607f11269c72313fa8749d7c4e305f6d063a85f8f90f8e141f21a987f3b693b191cf1ea6994c055db828bd6c2be9d3c45d41869a2938a707edae7836328ebdbefa03e02cd1d0fd3296fc6cc7bb02c73a4a2e5e6f100ef9766e4", @typed={0x8, 0x150, 0x0, 0x0, @fd=r5}]}, @generic="0b2678bbbbb2c832d046a5bb99e9a5683b1fa4b25aced1f67051a80229f4cde7e4722f8f25ef665f69d6f5efb979674983d31ffa391f841c6d15f091f9db37f4825dbe2f6e027b196258d2c086fabd413d453b338901e3cc4ebd3794e78d43f028fac30c8e9c8ca6fbe88e090a40cd1e2aa5a834c5d6f00493211e3ca162c837bc738cc2ba8a2c2c51f90a3608430f758dbd659d209a6da10bce93590e7ec156e012e665839992c0a3bdd6e818a0b2f56d10e7e78c639895736b090190fd7fef24c3fe34c665f1b3dc4d89c7b3a0e1423cdf0cc32c923e3ae39dce6bfbb2be8f6ab18958a8bc061d71c8f75f90b57eb7931a", @nested={0x4, 0x8c}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x21}}, @nested={0x4, 0xbc}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x7}]}]}]}, 0x23c}], 0x1}, 0x0) (async)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)

32.383872ms ago: executing program 1 (id=7376):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010015000000000000000100f00014000180060001000a00000008000500030000001d7c4a22cd3b3bef48469a3d72f9c616ddef4dc0a2d1627eca3b96e31d31b266b456b7cf70c9bef8273f0c0610ab4c30b9e68506e5f40e21ff"], 0x28}}, 0x0)

24.992004ms ago: executing program 0 (id=7377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="50fd60ea04d572ec"], 0x20}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000c40), 0x1, 0x0, 0x48}, 0x4040010)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
recvfrom$ax25(r4, &(0x7f0000000140)=""/13, 0xd, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x401}, [@default, @null, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r9, @ANYBLOB="04f812000600120004000000060009bf229f32651000fa0000000a000600ffffffff4e4d59b20500"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000400)="6e2a4731ddbffd2ee0546353fd2549f6cd05f983cd985cdbce3d57461f1e4b2cee6c750e6da2e10001f6f36240e205c0cbc197e1141279bbdda282fb25d05710aaaf9c079c303d5ab497", 0x4a}, {&(0x7f0000000480)="a86cdd2511e17a9568693c2f1b72617f5d4e69c7498e6144fe4a1859dd262d37709d640d104c51d8dd42efc841aa0401be1b9d4d75f5f33e53181c9477eb566387c46b02ee5254167d346daf4b0c43eb28f6d899ca16f709f7bd3570e4a3d892117a3ac126b7c670728bd4446b3153fab9b9ebfa6c342b802d410d80b5f466a3444b07d4a0ab849296215e3a5f85c2e6cc89d1f6297b80a2370b5b4b9ef711", 0x9f}, {&(0x7f0000000540)="8d97a2345071a97978bd4e2e8f1b35db5eb0603532932f838974d26b3395ef7700c7738f544abdaf21d75bc8cb1c7bf1eefcd90c1a302101537a0058d126560a47d0654b5f1b58a1ba6296500a74c931edd97e27715f1a76ec6d1dbde3078927944420db01dd5f10162c911d73057489cb2dbdac8d401009c1bcb3f6b3b1acdc2b03ce9a1a29e674c56ebc3a42e1363607ab71ffca8ba8146ac7ea9b4ea1e4000540fd5cab20f42473d7920e", 0xac}, {&(0x7f0000000600)="3b4e79669612ef4e6e4583958962d3366b1b248dd9a3cc172765b5bc4ad9f87bca36d5247fd7e810449ba281bbb373f7429208ccc761169417234140d3e3613d94992114f720193076bd5daf98a01f255f669a62a7ca3ea1c251ccbc301dbd2f465cfbe145bd082dbd7f162701575e9f417b7b6332dcf1710cf9b31035ebf2a81dbcddb7e70a1e0106a41f027708a28fd81279c5ec6221d0d85dd36b9d306c70e133c316f2f4e01e8af8b2f75742252e304064e0b730250163d23527ccc89d42d395be8b51b9c1da8df06a8fe51a984f6b56d026417a259decd7fe13f916d1fc", 0xe0}], 0x5}, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, <r12=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r7], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94)

0s ago: executing program 1 (id=7378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000500)=""/167, 0xa7}], 0x6}, 0x0) (async)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000500)=""/167, 0xa7}], 0x6}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500300012800b00010065727370616e0000200002800400120006001800f7ff00000500160002"], 0x50}}, 0x8000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

kernel console output (not intermixed with test programs):

6968][T19105]  ? ieee80211_register_hw+0x1461/0x4080
[  311.396987][T19105]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  311.397004][T19105]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.397026][T19105]  ? __hrtimer_setup+0x187/0x210
[  311.397037][T19105]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  311.397057][T19105]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  311.397095][T19105]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  311.397110][T19105]  ? trace_kmalloc+0x1f/0xd0
[  311.397123][T19105]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  311.397138][T19105]  ? kstrndup+0xbf/0x160
[  311.397157][T19105]  hwsim_new_radio_nl+0xea4/0x1b10
[  311.397173][T19105]  ? __pfx___nla_validate_parse+0x10/0x10
[  311.397201][T19105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.397250][T19105]  ? __nla_parse+0x40/0x60
[  311.397271][T19105]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  311.397294][T19105]  genl_family_rcv_msg_doit+0x215/0x300
[  311.397313][T19105]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  311.397337][T19105]  ? bpf_lsm_capable+0x9/0x20
[  311.397351][T19105]  ? security_capable+0x7e/0x2e0
[  311.397373][T19105]  genl_rcv_msg+0x60e/0x790
[  311.397390][T19105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.397402][T19105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.397426][T19105]  netlink_rcv_skb+0x208/0x470
[  311.397440][T19105]  ? __lock_acquire+0xab9/0xd20
[  311.397456][T19105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.397471][T19105]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  311.397501][T19105]  ? down_read+0x1ad/0x2e0
[  311.397516][T19105]  genl_rcv+0x28/0x40
[  311.397528][T19105]  netlink_unicast+0x82f/0x9e0
[  311.397550][T19105]  ? __pfx_netlink_unicast+0x10/0x10
[  311.397567][T19105]  ? netlink_sendmsg+0x642/0xb30
[  311.397576][T19105]  ? skb_put+0x11b/0x210
[  311.397590][T19105]  netlink_sendmsg+0x805/0xb30
[  311.397608][T19105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.397622][T19105]  ? aa_sock_msg_perm+0xf1/0x1d0
[  311.397636][T19105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  311.397648][T19105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.397659][T19105]  __sock_sendmsg+0x21c/0x270
[  311.397678][T19105]  ____sys_sendmsg+0x505/0x830
[  311.397696][T19105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  311.397717][T19105]  ? import_iovec+0x74/0xa0
[  311.397767][T19105]  ___sys_sendmsg+0x21f/0x2a0
[  311.397783][T19105]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.397833][T19105]  ? __fget_files+0x2a/0x420
[  311.397844][T19105]  ? __fget_files+0x3a0/0x420
[  311.397864][T19105]  __x64_sys_sendmsg+0x19b/0x260
[  311.397880][T19105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.397903][T19105]  ? rcu_is_watching+0x15/0xb0
[  311.397920][T19105]  ? do_syscall_64+0xbe/0x3b0
[  311.397935][T19105]  do_syscall_64+0xfa/0x3b0
[  311.397944][T19105]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.397960][T19105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.397972][T19105]  ? exc_page_fault+0x9f/0xf0
[  311.397990][T19105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.398000][T19105] RIP: 0033:0x7f55d2b8ebe9
[  311.398011][T19105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.398022][T19105] RSP: 002b:00007f55d3941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.398035][T19105] RAX: ffffffffffffffda RBX: 00007f55d2dc5fa0 RCX: 00007f55d2b8ebe9
[  311.398044][T19105] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  311.398051][T19105] RBP: 00007f55d2c11e19 R08: 0000000000000000 R09: 0000000000000000
[  311.398058][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.398066][T19105] R13: 00007f55d2dc6038 R14: 00007f55d2dc5fa0 R15: 00007ffe39f63228
[  311.398087][T19105]  </TASK>
[  311.704053][T19109] 8021q: adding VLAN 0 to HW filter on device bond12
[  311.707795][T19109] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  311.711578][T19109] bond12: (slave wlan0): Opening slave failed
[  311.720161][T19109] vlan2: entered allmulticast mode
[  311.722545][T19109] bond12: (slave vlan2): Opening slave failed
[  311.782249][T19118] mac80211_hwsim hwsim102 wlan1: left allmulticast mode
[  311.818157][T19118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  311.826088][T19118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  311.861484][T19123] wg1 speed is unknown, defaulting to 1000
[  312.201756][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5262'.
[  312.650876][T19173] wg1 speed is unknown, defaulting to 1000
[  313.216003][T19209] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  313.347096][T19213] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  313.350796][T19213] net_ratelimit: 15 callbacks suppressed
[  313.350810][T19213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  313.424557][T19220] wg1 speed is unknown, defaulting to 1000
[  313.642578][T19230] wg1 speed is unknown, defaulting to 1000
[  313.991403][T19246] wg1 speed is unknown, defaulting to 1000
[  314.061916][T19251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.070635][T19251] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  314.078674][T19251] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  314.138221][T19248] wg1 speed is unknown, defaulting to 1000
[  315.364378][T19306] validate_nla: 115 callbacks suppressed
[  315.364390][T19306] netlink: 'syz.1.5312': attribute type 8 has an invalid length.
[  315.667439][T19320] netlink: 'syz.1.5318': attribute type 6 has an invalid length.
[  315.678073][T19320] netlink: 'syz.1.5318': attribute type 12 has an invalid length.
[  315.682029][T19320] __nla_validate_parse: 5 callbacks suppressed
[  315.682040][T19320] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5318'.
[  315.701539][T19323] sctp: [Deprecated]: syz.2.5319 (pid 19323) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.701539][T19323] Use struct sctp_sack_info instead
[  315.759313][T19325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5320'.
[  315.763880][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5320'.
[  315.811429][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5321'.
[  315.815786][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5321'.
[  315.979730][T19341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5325'.
[  316.148855][T19353] netlink: 'syz.2.5329': attribute type 12 has an invalid length.
[  316.206627][T19359] netlink: 'syz.1.5332': attribute type 9 has an invalid length.
[  316.293039][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'.
[  316.328003][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'.
[  316.414763][T19370] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5337'.
[  316.419914][T19370] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5337'.
[  316.425085][T19370] ip6_vti0: entered allmulticast mode
[  316.465585][T19370] vlan0: left promiscuous mode
[  316.476758][T19370] veth1: left promiscuous mode
[  316.559723][T19381] wg1 speed is unknown, defaulting to 1000
[  316.704915][T19388] netlink: 'syz.1.5340': attribute type 2 has an invalid length.
[  316.869775][T19393] netlink: 'syz.1.5344': attribute type 1 has an invalid length.
[  317.072620][T19411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.075313][T19411] syzkaller0: entered promiscuous mode
[  317.077315][T19411] syzkaller0: entered allmulticast mode
[  317.086141][T19409] tipc: Resetting bearer <eth:syzkaller0>
[  317.099693][T19409] tipc: Disabling bearer <eth:syzkaller0>
[  317.776051][T19453] wg1 speed is unknown, defaulting to 1000
[  318.065381][T19468] netlink: 'syz.1.5367': attribute type 1 has an invalid length.
[  318.079340][T19468] netlink: 'syz.1.5367': attribute type 11 has an invalid length.
[  318.185992][T19468] wg1 speed is unknown, defaulting to 1000
[  318.869513][T19505] 8021q: adding VLAN 0 to HW filter on device bond11
[  318.894562][T19505] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  318.897992][T19505] bond8: (slave macvlan6): Enslaving as a backup interface with a down link
[  318.906667][T19506] bond8: (slave macvlan6): Releasing backup interface
[  319.024685][T19521] netlink: 'syz.1.5386': attribute type 1 has an invalid length.
[  319.660117][T19565] batadv_slave_1: entered promiscuous mode
[  319.665714][T19565] netlink: 'syz.2.5402': attribute type 11 has an invalid length.
[  319.699308][T19565] batadv_slave_1: left promiscuous mode
[  319.917611][T19582] 8021q: adding VLAN 0 to HW filter on device bond7
[  319.944925][T19582] veth5: entered promiscuous mode
[  319.949971][T19582] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  320.026147][T19596] wg1 speed is unknown, defaulting to 1000
[  320.232134][T19607] wg1 speed is unknown, defaulting to 1000
[  320.555264][T19612] validate_nla: 4 callbacks suppressed
[  320.555281][T19612] netlink: 'syz.2.5417': attribute type 2 has an invalid length.
[  320.747187][T19631] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.764832][T19631] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  320.768090][T19631] bond8: (slave macvlan7): Enslaving as a backup interface with a down link
[  321.184936][T19680] __nla_validate_parse: 24 callbacks suppressed
[  321.184947][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'.
[  321.232291][T19683] netlink: 'syz.0.5441': attribute type 8 has an invalid length.
[  321.284213][T19685] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5442'.
[  321.287481][T19685] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5442'.
[  321.295355][T19685] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  321.297826][T19685] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  321.303785][T19685] veth5: left promiscuous mode
[  321.615656][T19700] sctp: [Deprecated]: syz.0.5446 (pid 19700) Use of int in maxseg socket option.
[  321.615656][T19700] Use struct sctp_assoc_value instead
[  321.661181][T19702] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  321.765607][T19713] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5451'.
[  321.781750][T19717] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5452'.
[  321.921559][T19722] wg1 speed is unknown, defaulting to 1000
[  322.376353][T19762] syzkaller1: entered promiscuous mode
[  322.378339][T19762] syzkaller1: entered allmulticast mode
[  322.397319][T19762] wg1 speed is unknown, defaulting to 1000
[  322.785574][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5477'.
[  322.793872][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5477'.
[  322.951451][T19743] delete_channel: no stack
[  322.997153][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5481'.
[  323.210720][T19830] wg1 speed is unknown, defaulting to 1000
[  323.341201][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5491'.
[  323.389081][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5492'.
[  323.594162][T19871] netlink: 'syz.2.5497': attribute type 1 has an invalid length.
[  323.638759][T19871] bond13: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  323.653842][ T8815] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  323.660040][T19871] 8021q: adding VLAN 0 to HW filter on device bond13
[  323.667779][T19871] bond13: (slave ip6gretap2): Removing an active aggregator
[  323.670793][T19871] bond13: (slave ip6gretap2): Releasing backup interface
[  323.786865][T19882] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode
[  323.799545][T19882] netlink: 'syz.2.5500': attribute type 10 has an invalid length.
[  323.805438][T19883] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  323.809963][T19883] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.431231][T19898] netlink: 'syz.0.5505': attribute type 1 has an invalid length.
[  324.435219][T19898] pim6reg1: entered promiscuous mode
[  324.437744][T19898] pim6reg1: entered allmulticast mode
[  325.373350][T19957] wg1 speed is unknown, defaulting to 1000
[  325.507202][T19962] 8021q: adding VLAN 0 to HW filter on device bond13
[  325.511145][T19962] bond12: (slave bond13): Enslaving as an active interface with an up link
[  325.681770][T19975] netlink: 'syz.1.5527': attribute type 1 has an invalid length.
[  325.694303][T19975] netlink: 'syz.1.5527': attribute type 1 has an invalid length.
[  325.808774][T19975] netlink: 'syz.1.5527': attribute type 1 has an invalid length.
[  325.832955][T19975] 8021q: adding VLAN 0 to HW filter on device bond14
[  326.426543][T20010] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20003
[  326.513383][T20013] __nla_validate_parse: 8 callbacks suppressed
[  326.513398][T20013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5539'.
[  326.605784][T20019] xt_time: invalid argument - start or stop time greater than 23:59:59
[  327.174945][T20042] netlink: 'syz.0.5551': attribute type 1 has an invalid length.
[  327.214732][T20042] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.434756][T20065] netlink: 'syz.2.5560': attribute type 1 has an invalid length.
[  327.460741][T20065] bond10: (slave vcan0): The slave device specified does not support setting the MAC address
[  327.465677][T20065] bond10: (slave vcan0): Error -95 calling set_mac_address
[  327.473772][T20063] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  327.477055][T20063] CPU: 0 UID: 0 PID: 20063 Comm: syz.0.5558 Not tainted syzkaller #0 PREEMPT(full) 
[  327.477073][T20063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.477081][T20063] Call Trace:
[  327.477087][T20063]  <TASK>
[  327.477094][T20063]  dump_stack_lvl+0x189/0x250
[  327.477117][T20063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.477132][T20063]  ? __pfx__printk+0x10/0x10
[  327.477154][T20063]  ? kernfs_path_from_node+0x2f/0x290
[  327.477170][T20063]  ? kernfs_path_from_node+0x250/0x290
[  327.477182][T20063]  ? kernfs_path_from_node+0x2f/0x290
[  327.477199][T20063]  sysfs_warn_dup+0x8e/0xa0
[  327.477211][T20063]  sysfs_do_create_link_sd+0xc0/0x110
[  327.477225][T20063]  device_add_class_symlinks+0x1cf/0x240
[  327.477238][T20063]  device_add+0x475/0xb50
[  327.477254][T20063]  wiphy_register+0x1ba6/0x28d0
[  327.477285][T20063]  ? __pfx_wiphy_register+0x10/0x10
[  327.477299][T20063]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  327.477319][T20063]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  327.477336][T20063]  ieee80211_register_hw+0x3425/0x4080
[  327.477362][T20063]  ? ieee80211_register_hw+0x1461/0x4080
[  327.477381][T20063]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  327.477395][T20063]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  327.477427][T20063]  ? __hrtimer_setup+0x187/0x210
[  327.477439][T20063]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  327.477460][T20063]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  327.477501][T20063]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  327.477516][T20063]  ? trace_kmalloc+0x1f/0xd0
[  327.477530][T20063]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  327.477546][T20063]  ? kstrndup+0xbf/0x160
[  327.477596][T20063]  hwsim_new_radio_nl+0xea4/0x1b10
[  327.477616][T20063]  ? __pfx___nla_validate_parse+0x10/0x10
[  327.477644][T20063]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  327.477668][T20063]  ? __nla_parse+0x40/0x60
[  327.477690][T20063]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  327.477712][T20063]  genl_family_rcv_msg_doit+0x215/0x300
[  327.477732][T20063]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  327.477754][T20063]  ? bpf_lsm_capable+0x9/0x20
[  327.477767][T20063]  ? security_capable+0x7e/0x2e0
[  327.477785][T20063]  genl_rcv_msg+0x60e/0x790
[  327.477803][T20063]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.477816][T20063]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  327.477843][T20063]  netlink_rcv_skb+0x208/0x470
[  327.477859][T20063]  ? __lock_acquire+0xab9/0xd20
[  327.477877][T20063]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.477893][T20063]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  327.477926][T20063]  ? down_read+0x1ad/0x2e0
[  327.477940][T20063]  genl_rcv+0x28/0x40
[  327.477953][T20063]  netlink_unicast+0x82f/0x9e0
[  327.477976][T20063]  ? __pfx_netlink_unicast+0x10/0x10
[  327.477995][T20063]  ? netlink_sendmsg+0x642/0xb30
[  327.478004][T20063]  ? skb_put+0x11b/0x210
[  327.478019][T20063]  netlink_sendmsg+0x805/0xb30
[  327.478038][T20063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.478053][T20063]  ? aa_sock_msg_perm+0xf1/0x1d0
[  327.478066][T20063]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.478078][T20063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.478090][T20063]  __sock_sendmsg+0x21c/0x270
[  327.478109][T20063]  ____sys_sendmsg+0x505/0x830
[  327.478127][T20063]  ? __pfx_____sys_sendmsg+0x10/0x10
[  327.478147][T20063]  ? import_iovec+0x74/0xa0
[  327.478164][T20063]  ___sys_sendmsg+0x21f/0x2a0
[  327.478178][T20063]  ? __pfx____sys_sendmsg+0x10/0x10
[  327.478219][T20063]  ? __fget_files+0x2a/0x420
[  327.478229][T20063]  ? __fget_files+0x3a0/0x420
[  327.478247][T20063]  __x64_sys_sendmsg+0x19b/0x260
[  327.478262][T20063]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  327.478284][T20063]  ? rcu_is_watching+0x15/0xb0
[  327.478301][T20063]  ? do_syscall_64+0xbe/0x3b0
[  327.478315][T20063]  do_syscall_64+0xfa/0x3b0
[  327.478325][T20063]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.478341][T20063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.478352][T20063]  ? exc_page_fault+0x9f/0xf0
[  327.478370][T20063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.478381][T20063] RIP: 0033:0x7f1e26f8ebe9
[  327.478394][T20063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.478412][T20063] RSP: 002b:00007f1e27dfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.478449][T20063] RAX: ffffffffffffffda RBX: 00007f1e271c5fa0 RCX: 00007f1e26f8ebe9
[  327.478460][T20063] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  327.478467][T20063] RBP: 00007f1e27011e19 R08: 0000000000000000 R09: 0000000000000000
[  327.478475][T20063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.478482][T20063] R13: 00007f1e271c6038 R14: 00007f1e271c5fa0 R15: 00007ffc99b367b8
[  327.478524][T20063]  </TASK>
[  327.673517][T20066] bond10: (slave vcan0): The slave device specified does not support setting the MAC address
[  327.678839][T20066] bond10: (slave vcan0): Error -95 calling set_mac_address
[  327.701909][T20070] ksmbd: Unknown IPC event: 3, ignore.
[  327.721836][T20065] 8021q: adding VLAN 0 to HW filter on device bond10
[  327.724501][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5560'.
[  327.803874][T20082] bond8: (slave macvlan7): Releasing backup interface
[  327.807610][T20082] bond12: (slave bond13): Releasing backup interface
[  327.859066][T20082] netlink: 'syz.1.5566': attribute type 10 has an invalid length.
[  327.867982][T20082] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  327.872323][T20082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.927716][T20093] nbd: must specify a device to reconfigure
[  327.931748][T20093] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  327.986205][T20098] netlink: 724 bytes leftover after parsing attributes in process `syz.2.5570'.
[  327.990252][T20098] netlink: 83 bytes leftover after parsing attributes in process `syz.2.5570'.
[  328.017081][T20100] netlink: 'syz.0.5571': attribute type 4 has an invalid length.
[  328.024000][T20100] netlink: 'syz.0.5571': attribute type 4 has an invalid length.
[  328.073215][T20102] wg1 speed is unknown, defaulting to 1000
[  328.653582][T20115] netlink: 'syz.2.5575': attribute type 10 has an invalid length.
[  328.734502][T20132] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5579'.
[  328.833085][T20142] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5582'.
[  328.881494][T20150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5585'.
[  328.921913][T20150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5585'.
[  329.005021][T20165] netlink: 'syz.0.5589': attribute type 1 has an invalid length.
[  329.007551][T20165] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5589'.
[  329.245419][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'.
[  329.454393][T20211] openvswitch: netlink: Unknown key attributes 2
[  329.597480][T20220] wg1 speed is unknown, defaulting to 1000
[  330.121672][T20245] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  330.309544][T20254] 8021q: adding VLAN 0 to HW filter on device bond10
[  330.323710][T20254] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  330.331010][T20254] bond10: (slave macvlan3): Enslaving as a backup interface with a down link
[  330.744375][T20296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.798334][T20301] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  330.992477][T20326] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  330.997024][T20329] validate_nla: 5 callbacks suppressed
[  330.997036][T20329] netlink: 'syz.1.5637': attribute type 10 has an invalid length.
[  331.007968][T20329] mac80211_hwsim hwsim136 wlan1: entered allmulticast mode
[  331.319952][T20358] sctp: [Deprecated]: syz.0.5645 (pid 20358) Use of struct sctp_assoc_value in delayed_ack socket option.
[  331.319952][T20358] Use struct sctp_sack_info instead
[  331.435441][T20363] wg1 speed is unknown, defaulting to 1000
[  331.962384][T20373] netlink: 'syz.2.5649': attribute type 6 has an invalid length.
[  332.217284][T20387] __nla_validate_parse: 11 callbacks suppressed
[  332.217294][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5654'.
[  332.224980][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5654'.
[  332.231378][T20389] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5655'.
[  332.560876][T20404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5659'.
[  332.666175][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'.
[  332.883661][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5662'.
[  333.166811][T20427] wg1 speed is unknown, defaulting to 1000
[  333.188674][T20428] wg1 speed is unknown, defaulting to 1000
[  333.315564][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5672'.
[  333.452897][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5674'.
[  333.471096][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5675'.
[  333.683733][T20462] wg1 speed is unknown, defaulting to 1000
[  333.772601][T20473] bridge0: port 1(syz_tun) entered blocking state
[  333.775060][T20473] bridge0: port 1(syz_tun) entered disabled state
[  333.777457][T20473] syz_tun: entered allmulticast mode
[  333.780163][T20473] syz_tun: entered promiscuous mode
[  334.003719][T20479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5683'.
[  334.365741][T20493] bond7: (slave veth5): Releasing backup interface
[  334.434992][T20497] netlink: 'syz.0.5686': attribute type 10 has an invalid length.
[  335.105586][T20514] netlink: 'syz.1.5692': attribute type 29 has an invalid length.
[  335.162580][T20514] netlink: 'syz.1.5692': attribute type 29 has an invalid length.
[  335.266003][T20530] netlink: 'syz.0.5697': attribute type 1 has an invalid length.
[  335.294286][T20530] 8021q: adding VLAN 0 to HW filter on device bond2
[  335.343201][T20535] netlink: 'syz.0.5699': attribute type 5 has an invalid length.
[  335.455737][T20543] netlink: 'syz.2.5701': attribute type 2 has an invalid length.
[  335.470844][T20543] k*: entered promiscuous mode
[  336.461655][T20579] bridge0: entered allmulticast mode
[  336.473635][T20579] netlink: 'syz.1.5711': attribute type 11 has an invalid length.
[  336.510072][T20587] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  336.516203][T20589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.627072][T20599] netlink: 'syz.0.5714': attribute type 8 has an invalid length.
[  336.642136][T20595] syzkaller0: entered promiscuous mode
[  336.644821][T20595] syzkaller0: entered allmulticast mode
[  336.721402][T20604] netlink: 'syz.2.5718': attribute type 9 has an invalid length.
[  336.955008][T20626] netlink: 'syz.1.5725': attribute type 1 has an invalid length.
[  336.979545][T20626] netlink: 'syz.1.5725': attribute type 1 has an invalid length.
[  336.994744][T20623] bond10: (slave macvlan3): Releasing backup interface
[  337.065235][T20640] wg1 speed is unknown, defaulting to 1000
[  337.083244][T20644] netlink: 'syz.2.5722': attribute type 10 has an invalid length.
[  337.132072][T20645] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.222574][T20649] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  337.227440][T20649] CPU: 0 UID: 0 PID: 20649 Comm: syz.1.5730 Not tainted syzkaller #0 PREEMPT(full) 
[  337.227486][T20649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.227494][T20649] Call Trace:
[  337.227500][T20649]  <TASK>
[  337.227505][T20649]  dump_stack_lvl+0x189/0x250
[  337.227528][T20649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.227542][T20649]  ? __pfx__printk+0x10/0x10
[  337.227562][T20649]  ? kernfs_path_from_node+0x2f/0x290
[  337.227575][T20649]  ? kernfs_path_from_node+0x250/0x290
[  337.227586][T20649]  ? kernfs_path_from_node+0x2f/0x290
[  337.227601][T20649]  sysfs_warn_dup+0x8e/0xa0
[  337.227614][T20649]  sysfs_do_create_link_sd+0xc0/0x110
[  337.227628][T20649]  device_add_class_symlinks+0x1cf/0x240
[  337.227644][T20649]  device_add+0x475/0xb50
[  337.227659][T20649]  wiphy_register+0x1ba6/0x28d0
[  337.227690][T20649]  ? __pfx_wiphy_register+0x10/0x10
[  337.227705][T20649]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  337.227725][T20649]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  337.227742][T20649]  ieee80211_register_hw+0x3425/0x4080
[  337.227768][T20649]  ? ieee80211_register_hw+0x1461/0x4080
[  337.227787][T20649]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  337.227804][T20649]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.227826][T20649]  ? __hrtimer_setup+0x187/0x210
[  337.227837][T20649]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  337.227856][T20649]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  337.227893][T20649]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  337.227907][T20649]  ? trace_kmalloc+0x1f/0xd0
[  337.227920][T20649]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  337.227935][T20649]  ? kstrndup+0xbf/0x160
[  337.227955][T20649]  hwsim_new_radio_nl+0xea4/0x1b10
[  337.227972][T20649]  ? __pfx___nla_validate_parse+0x10/0x10
[  337.228001][T20649]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.228025][T20649]  ? __nla_parse+0x40/0x60
[  337.228045][T20649]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  337.228067][T20649]  genl_family_rcv_msg_doit+0x215/0x300
[  337.228086][T20649]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  337.228110][T20649]  ? bpf_lsm_capable+0x9/0x20
[  337.228124][T20649]  ? security_capable+0x7e/0x2e0
[  337.228146][T20649]  genl_rcv_msg+0x60e/0x790
[  337.228164][T20649]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.228178][T20649]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.228203][T20649]  netlink_rcv_skb+0x208/0x470
[  337.228217][T20649]  ? __lock_acquire+0xab9/0xd20
[  337.228230][T20649]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.228242][T20649]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.228273][T20649]  ? down_read+0x1ad/0x2e0
[  337.228287][T20649]  genl_rcv+0x28/0x40
[  337.228299][T20649]  netlink_unicast+0x82f/0x9e0
[  337.228321][T20649]  ? __pfx_netlink_unicast+0x10/0x10
[  337.228338][T20649]  ? netlink_sendmsg+0x642/0xb30
[  337.228347][T20649]  ? skb_put+0x11b/0x210
[  337.228362][T20649]  netlink_sendmsg+0x805/0xb30
[  337.228380][T20649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.228394][T20649]  ? aa_sock_msg_perm+0xf1/0x1d0
[  337.228407][T20649]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.228419][T20649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.228477][T20649]  __sock_sendmsg+0x21c/0x270
[  337.228496][T20649]  ____sys_sendmsg+0x505/0x830
[  337.228515][T20649]  ? __pfx_____sys_sendmsg+0x10/0x10
[  337.228534][T20649]  ? import_iovec+0x74/0xa0
[  337.228551][T20649]  ___sys_sendmsg+0x21f/0x2a0
[  337.228565][T20649]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.228606][T20649]  ? __fget_files+0x2a/0x420
[  337.228616][T20649]  ? __fget_files+0x3a0/0x420
[  337.228635][T20649]  __x64_sys_sendmsg+0x19b/0x260
[  337.228650][T20649]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  337.228677][T20649]  ? do_syscall_64+0xbe/0x3b0
[  337.228691][T20649]  do_syscall_64+0xfa/0x3b0
[  337.228701][T20649]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.228716][T20649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.228727][T20649]  ? exc_page_fault+0x9f/0xf0
[  337.228744][T20649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.228755][T20649] RIP: 0033:0x7f55d2b8ebe9
[  337.228766][T20649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.228776][T20649] RSP: 002b:00007f55d3941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.228788][T20649] RAX: ffffffffffffffda RBX: 00007f55d2dc5fa0 RCX: 00007f55d2b8ebe9
[  337.228796][T20649] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  337.228803][T20649] RBP: 00007f55d2c11e19 R08: 0000000000000000 R09: 0000000000000000
[  337.228810][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.228816][T20649] R13: 00007f55d2dc6038 R14: 00007f55d2dc5fa0 R15: 00007ffe39f63228
[  337.228837][T20649]  </TASK>
[  337.468389][T20659] wg1 speed is unknown, defaulting to 1000
[  338.042433][T20681] __nla_validate_parse: 9 callbacks suppressed
[  338.042467][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5738'.
[  338.057972][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5738'.
[  338.062813][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5738'.
[  338.666026][T20724] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5752'.
[  338.758948][  T793] page_pool_release_retry() stalled pool shutdown: id 54, 3329 inflight 120 sec
[  338.823237][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5753'.
[  338.850917][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5753'.
[  338.971227][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5756'.
[  339.278706][T20762] team0: Mode changed to "broadcast"
[  339.284711][T20762] tipc: Enabled bearer <eth:team0>, priority 0
[  339.368156][T20773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5768'.
[  339.484311][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5769'.
[  339.492324][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5769'.
[  339.568271][T20781] vlan0: entered promiscuous mode
[  339.729926][T20792] netlink: 'syz.2.5773': attribute type 10 has an invalid length.
[  340.565013][T20822] wg1 speed is unknown, defaulting to 1000
[  340.765090][T20825] netlink: 'syz.2.5784': attribute type 2 has an invalid length.
[  340.932599][T20835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.947800][T20835] syzkaller0: entered promiscuous mode
[  340.955040][T20835] syzkaller0: entered allmulticast mode
[  340.962787][T20839] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  340.982238][T20838] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  340.993731][T20835] tipc: Resetting bearer <eth:syzkaller0>
[  341.048051][T20835] can: request_module (can-proto-0) failed.
[  341.052753][T20842] openvswitch: netlink: IP tunnel dst address not specified
[  341.093260][T20834] tipc: Resetting bearer <eth:syzkaller0>
[  341.111867][T20834] tipc: Disabling bearer <eth:syzkaller0>
[  341.268357][T20860] netlink: 'syz.0.5794': attribute type 10 has an invalid length.
[  341.346219][T20868] netlink: 'syz.2.5797': attribute type 10 has an invalid length.
[  341.451900][T20877] netem: change failed
[  341.566869][T20883] netlink: 'syz.2.5803': attribute type 10 has an invalid length.
[  342.164188][T20942] netlink: 'syz.2.5819': attribute type 10 has an invalid length.
[  342.168081][T20942] mac80211_hwsim hwsim159 wlan1: entered allmulticast mode
[  342.249230][T20951] netlink: 'syz.0.5823': attribute type 9 has an invalid length.
[  342.282648][T20951] macsec1: entered promiscuous mode
[  342.284500][T20951] bridge0: entered promiscuous mode
[  342.288284][T20951] bridge0: port 1(macsec1) entered blocking state
[  342.291757][T20951] bridge0: port 1(macsec1) entered disabled state
[  342.294283][T20951] macsec1: entered allmulticast mode
[  342.296246][T20951] bridge0: entered allmulticast mode
[  342.309340][T20951] macsec1: left allmulticast mode
[  342.311141][T20951] bridge0: left allmulticast mode
[  342.320280][T20951] bridge0: left promiscuous mode
[  342.423570][T20964] netlink: 'syz.0.5826': attribute type 8 has an invalid length.
[  342.638174][T20982] openvswitch: netlink: IP tunnel dst address not specified
[  342.732244][T20982] "syz.0.5832" (20982) uses obsolete ecb(arc4) skcipher
[  342.804062][T21000] wg1 speed is unknown, defaulting to 1000
[  343.187993][T21022] __nla_validate_parse: 17 callbacks suppressed
[  343.188004][T21022] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5840'.
[  343.233120][T21027] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5842'.
[  343.236233][T21027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.240321][T21027] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  343.242780][T21027] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  343.249210][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5842'.
[  343.256051][T21029] mac80211_hwsim hwsim159 wlan1: left allmulticast mode
[  343.280013][T21029] netlink: 'syz.2.5843': attribute type 10 has an invalid length.
[  343.285037][T21031] netlink: 'syz.0.5844': attribute type 9 has an invalid length.
[  343.294701][T21031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5844'.
[  343.315739][T21033] netlink: 'syz.2.5845': attribute type 30 has an invalid length.
[  343.395284][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5846'.
[  343.395477][T21039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5847'.
[  343.464537][T21041] pim6reg: left allmulticast mode
[  343.466971][T21041] bridge0: left allmulticast mode
[  343.597028][T21051] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5850'.
[  343.976566][T21061] wg1 speed is unknown, defaulting to 1000
[  344.029102][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5853'.
[  344.145880][T21061] netlink: 'syz.1.5855': attribute type 2 has an invalid length.
[  344.152946][T21061] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5855'.
[  344.283557][T21068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5856'.
[  344.612650][T21095] netlink: 'syz.0.5865': attribute type 6 has an invalid length.
[  344.838767][ T5900] page_pool_release_retry() stalled pool shutdown: id 26, 3329 inflight 241 sec
[  345.013981][T21131] netlink: 'syz.2.5874': attribute type 10 has an invalid length.
[  345.107426][T21129] bond0 (unregistering): Released all slaves
[  345.253331][T21148] netlink: 'syz.2.5879': attribute type 10 has an invalid length.
[  345.530689][T21174] wg1 speed is unknown, defaulting to 1000
[  346.317338][T21219] wg1 speed is unknown, defaulting to 1000
[  347.048941][T21259] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  347.071055][T21259] : entered promiscuous mode
[  347.215497][T21275] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  347.217922][T21275] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  347.244781][T21275] validate_nla: 10 callbacks suppressed
[  347.244795][T21275] netlink: 'syz.2.5918': attribute type 12 has an invalid length.
[  347.419430][T21285] netlink: 'syz.0.5923': attribute type 4 has an invalid length.
[  347.529377][T21287] block nbd4: server does not support multiple connections per device.
[  347.534093][T21287] block nbd4: shutting down sockets
[  347.649013][T21304] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  347.662157][T21304] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  347.812900][T21322] netlink: 'syz.2.5935': attribute type 6 has an invalid length.
[  347.822949][T21322] netlink: 'syz.2.5935': attribute type 12 has an invalid length.
[  347.916679][T21324] netlink: 'syz.0.5936': attribute type 27 has an invalid length.
[  347.936179][T21324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.077603][T21336] wg1 speed is unknown, defaulting to 1000
[  348.497391][T21348] __nla_validate_parse: 27 callbacks suppressed
[  348.497405][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'.
[  348.508131][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5942'.
[  348.867140][T21356] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  349.012763][T21358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5944'.
[  349.454170][T21366] pim6reg1: entered allmulticast mode
[  349.628218][T21373] netlink: 'syz.2.5947': attribute type 2 has an invalid length.
[  349.638854][T21373] ave_0: entered promiscuous mode
[  349.696268][T21376] wg1 speed is unknown, defaulting to 1000
[  349.791348][T21378] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5948'.
[  349.874830][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5949'.
[  350.031955][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5950'.
[  350.158750][T21397] netlink: 'syz.2.5953': attribute type 1 has an invalid length.
[  350.197884][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'.
[  350.297928][T21407] sctp: [Deprecated]: syz.2.5957 (pid 21407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.297928][T21407] Use struct sctp_sack_info instead
[  350.401197][T21416] 8021q: adding VLAN 0 to HW filter on device bond16
[  350.803068][T21433] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5964'.
[  350.840901][T21436] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  350.858964][T21436] netlink: 'syz.2.5965': attribute type 10 has an invalid length.
[  351.100641][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'.
[  351.131222][T21450] wg1 speed is unknown, defaulting to 1000
[  351.470799][T21464] wg1 speed is unknown, defaulting to 1000
[  351.502834][T21465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5974'.
[  351.946834][T21491] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  351.985981][T21494] netlink: 'syz.0.5984': attribute type 10 has an invalid length.
[  352.086552][T21502] wg1 speed is unknown, defaulting to 1000
[  352.223036][T21503] netlink: 'syz.2.5987': attribute type 2 has an invalid length.
[  352.540559][T21521] team0: Unable to change to the same mode the team is in
[  352.545999][T21521] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  352.585781][T21524] syzkaller1: entered promiscuous mode
[  352.588213][T21524] syzkaller1: entered allmulticast mode
[  352.717567][T21530] delete_channel: no stack
[  352.747158][T21533] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  353.331341][T21571] netlink: 'syz.2.6011': attribute type 1 has an invalid length.
[  353.380432][T21571] veth13: entered promiscuous mode
[  353.392549][T21571] bond17: (slave veth13): Enslaving as a backup interface with a down link
[  353.536212][T21581] __nla_validate_parse: 8 callbacks suppressed
[  353.536256][T21581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6013'.
[  353.850258][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6015'.
[  353.962952][T21606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.965660][T21606] syzkaller0: entered promiscuous mode
[  353.967716][T21606] syzkaller0: entered allmulticast mode
[  353.978152][T21606] tipc: Resetting bearer <eth:syzkaller0>
[  353.981708][T21605] tipc: Resetting bearer <eth:syzkaller0>
[  353.990833][T21605] tipc: Disabling bearer <eth:syzkaller0>
[  354.142009][T21617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6026'.
[  354.331659][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6031'.
[  354.352420][T21635] netlink: 'syz.1.6031': attribute type 10 has an invalid length.
[  354.435804][T21642] mac80211_hwsim hwsim195 wlan1: left allmulticast mode
[  354.455302][T21642] netlink: 'syz.2.6034': attribute type 10 has an invalid length.
[  354.537965][T21658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6040'.
[  354.757590][T21676] netlink: 'syz.1.6046': attribute type 11 has an invalid length.
[  355.010662][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'.
[  355.072917][T21687] syz_tun: left allmulticast mode
[  355.075276][T21687] syz_tun: left promiscuous mode
[  355.077638][T21687] bridge0: port 1(syz_tun) entered disabled state
[  355.199711][T21687] vlan0: entered promiscuous mode
[  355.203617][T21687] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  355.373770][T21698] netlink: 648 bytes leftover after parsing attributes in process `syz.1.6052'.
[  355.457202][T21701] wg1 speed is unknown, defaulting to 1000
[  355.477337][T21708] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6056'.
[  355.486579][T21708] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6056'.
[  355.578760][T21716] netlink: 'syz.1.6058': attribute type 1 has an invalid length.
[  355.845343][T21742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6066'.
[  355.859496][T21710] netlink: 'syz.2.6054': attribute type 2 has an invalid length.
[  355.944802][T21740] netlink: 'syz.0.6065': attribute type 12 has an invalid length.
[  356.071932][T21756] tipc: Trying to set illegal importance in message
[  356.083817][T21758] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  356.087310][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.0.6070 Not tainted syzkaller #0 PREEMPT(full) 
[  356.087328][T21758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.087337][T21758] Call Trace:
[  356.087343][T21758]  <TASK>
[  356.087348][T21758]  dump_stack_lvl+0x189/0x250
[  356.087371][T21758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.087386][T21758]  ? __pfx__printk+0x10/0x10
[  356.087407][T21758]  ? kernfs_path_from_node+0x2f/0x290
[  356.087419][T21758]  ? kernfs_path_from_node+0x250/0x290
[  356.087431][T21758]  ? kernfs_path_from_node+0x2f/0x290
[  356.087448][T21758]  sysfs_warn_dup+0x8e/0xa0
[  356.087461][T21758]  sysfs_do_create_link_sd+0xc0/0x110
[  356.087476][T21758]  device_add_class_symlinks+0x1cf/0x240
[  356.087491][T21758]  device_add+0x475/0xb50
[  356.087508][T21758]  wiphy_register+0x1ba6/0x28d0
[  356.087538][T21758]  ? __pfx_wiphy_register+0x10/0x10
[  356.087554][T21758]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  356.087574][T21758]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  356.087590][T21758]  ieee80211_register_hw+0x3425/0x4080
[  356.087617][T21758]  ? ieee80211_register_hw+0x1461/0x4080
[  356.087637][T21758]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  356.087655][T21758]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  356.087677][T21758]  ? __hrtimer_setup+0x187/0x210
[  356.087688][T21758]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  356.087709][T21758]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  356.087747][T21758]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  356.087762][T21758]  ? trace_kmalloc+0x1f/0xd0
[  356.087777][T21758]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  356.087793][T21758]  ? kstrndup+0xbf/0x160
[  356.087813][T21758]  hwsim_new_radio_nl+0xea4/0x1b10
[  356.087831][T21758]  ? __pfx___nla_validate_parse+0x10/0x10
[  356.087860][T21758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  356.087886][T21758]  ? __nla_parse+0x40/0x60
[  356.087905][T21758]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  356.087927][T21758]  genl_family_rcv_msg_doit+0x215/0x300
[  356.087947][T21758]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  356.087969][T21758]  ? bpf_lsm_capable+0x9/0x20
[  356.087983][T21758]  ? security_capable+0x7e/0x2e0
[  356.088005][T21758]  genl_rcv_msg+0x60e/0x790
[  356.088023][T21758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  356.088035][T21758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  356.088087][T21758]  netlink_rcv_skb+0x208/0x470
[  356.088104][T21758]  ? __lock_acquire+0xab9/0xd20
[  356.088122][T21758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  356.088138][T21758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  356.088170][T21758]  ? down_read+0x1ad/0x2e0
[  356.088184][T21758]  genl_rcv+0x28/0x40
[  356.088197][T21758]  netlink_unicast+0x82f/0x9e0
[  356.088220][T21758]  ? __pfx_netlink_unicast+0x10/0x10
[  356.088237][T21758]  ? netlink_sendmsg+0x642/0xb30
[  356.088275][T21758]  ? skb_put+0x11b/0x210
[  356.088292][T21758]  netlink_sendmsg+0x805/0xb30
[  356.088310][T21758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.088326][T21758]  ? aa_sock_msg_perm+0xf1/0x1d0
[  356.088340][T21758]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  356.088354][T21758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.088367][T21758]  __sock_sendmsg+0x21c/0x270
[  356.088386][T21758]  ____sys_sendmsg+0x505/0x830
[  356.088405][T21758]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.088427][T21758]  ? import_iovec+0x74/0xa0
[  356.088443][T21758]  ___sys_sendmsg+0x21f/0x2a0
[  356.088460][T21758]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.088502][T21758]  ? __fget_files+0x2a/0x420
[  356.088512][T21758]  ? __fget_files+0x3a0/0x420
[  356.088531][T21758]  __x64_sys_sendmsg+0x19b/0x260
[  356.088546][T21758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  356.088567][T21758]  ? rcu_is_watching+0x15/0xb0
[  356.088582][T21758]  ? do_syscall_64+0xbe/0x3b0
[  356.088596][T21758]  do_syscall_64+0xfa/0x3b0
[  356.088607][T21758]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.088624][T21758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.088635][T21758]  ? exc_page_fault+0x9f/0xf0
[  356.088653][T21758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.088666][T21758] RIP: 0033:0x7f1e26f8ebe9
[  356.088678][T21758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.088687][T21758] RSP: 002b:00007f1e27dfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.088702][T21758] RAX: ffffffffffffffda RBX: 00007f1e271c5fa0 RCX: 00007f1e26f8ebe9
[  356.088711][T21758] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  356.088719][T21758] RBP: 00007f1e27011e19 R08: 0000000000000000 R09: 0000000000000000
[  356.088726][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.088733][T21758] R13: 00007f1e271c6038 R14: 00007f1e271c5fa0 R15: 00007ffc99b367b8
[  356.088755][T21758]  </TASK>
[  356.391124][T21762] wg1 speed is unknown, defaulting to 1000
[  356.903511][T21791] dvmrp0: entered allmulticast mode
[  357.107848][T21801] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  357.151033][T21803] netlink: 'syz.2.6085': attribute type 10 has an invalid length.
[  357.224956][T21805] netlink: 'syz.0.6086': attribute type 10 has an invalid length.
[  357.441110][T21822] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  358.228726][T21825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.270386][T21827] mac80211_hwsim hwsim195 wlan1: entered promiscuous mode
[  358.273879][T21827] unsupported nlmsg_type 40
[  358.983747][T21837] netlink: 'syz.1.6097': attribute type 10 has an invalid length.
[  358.992024][T21837] mac80211_hwsim hwsim181 wlan1: entered allmulticast mode
[  359.114016][T21844] mac80211_hwsim hwsim181 wlan1: left allmulticast mode
[  359.124191][T21844] netlink: 'syz.1.6100': attribute type 10 has an invalid length.
[  359.274492][T21864] __nla_validate_parse: 8 callbacks suppressed
[  359.274506][T21864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6105'.
[  359.281020][T21863] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6105'.
[  359.323269][T21866] delete_channel: no stack
[  359.538409][T21882] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6109'.
[  359.549004][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6108'.
[  359.553525][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6108'.
[  359.604916][T21887] netlink: 'syz.1.6110': attribute type 12 has an invalid length.
[  359.688607][T21893] netlink: 'syz.1.6113': attribute type 1 has an invalid length.
[  359.692233][T21893] netlink: 'syz.1.6113': attribute type 1 has an invalid length.
[  359.758962][T21895] wg1 speed is unknown, defaulting to 1000
[  359.800671][T21893] netlink: 'syz.1.6113': attribute type 1 has an invalid length.
[  359.832267][T21893] 8021q: adding VLAN 0 to HW filter on device bond16
[  359.845479][T21893] vlan1: entered allmulticast mode
[  359.849766][T21893] bond16: (slave vlan1): Opening slave failed
[  359.917112][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6114'.
[  360.036761][T21904] netlink: 'syz.1.6115': attribute type 4 has an invalid length.
[  360.277334][T21925] netlink: 'syz.0.6117': attribute type 10 has an invalid length.
[  360.307946][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'.
[  360.391631][T21935] netlink: 'syz.2.6124': attribute type 6 has an invalid length.
[  360.398067][T21935] netlink: 'syz.2.6124': attribute type 12 has an invalid length.
[  360.401978][T21935] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6124'.
[  360.967117][T21951] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6130'.
[  361.052556][T21955] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6132'.
[  361.385756][T21958] wg1 speed is unknown, defaulting to 1000
[  361.599517][T21969] 8021q: adding VLAN 0 to HW filter on device bond18
[  361.622981][T21969] veth17: entered promiscuous mode
[  361.628263][T21969] bond18: (slave veth17): Enslaving as a backup interface with a down link
[  362.077959][T21999] wg1 speed is unknown, defaulting to 1000
[  362.132298][T21996] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  362.135272][T21996] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  362.144755][T21996] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  362.196424][T22003] mac80211_hwsim hwsim195 wlan1: left promiscuous mode
[  362.204584][T22003] veth13: left promiscuous mode
[  362.229025][T22003] veth17: left promiscuous mode
[  362.300541][T22005] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  362.814344][T22048] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  362.823689][T22048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.517942][T22099] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  363.523222][T22099] CPU: 0 UID: 0 PID: 22099 Comm: syz.0.6178 Not tainted syzkaller #0 PREEMPT(full) 
[  363.523235][T22099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.523240][T22099] Call Trace:
[  363.523243][T22099]  <TASK>
[  363.523247][T22099]  dump_stack_lvl+0x189/0x250
[  363.523261][T22099]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.523269][T22099]  ? __pfx__printk+0x10/0x10
[  363.523281][T22099]  ? kernfs_path_from_node+0x2f/0x290
[  363.523289][T22099]  ? kernfs_path_from_node+0x250/0x290
[  363.523296][T22099]  ? kernfs_path_from_node+0x2f/0x290
[  363.523304][T22099]  sysfs_warn_dup+0x8e/0xa0
[  363.523312][T22099]  sysfs_do_create_link_sd+0xc0/0x110
[  363.523321][T22099]  device_add_class_symlinks+0x1cf/0x240
[  363.523331][T22099]  device_add+0x475/0xb50
[  363.523339][T22099]  wiphy_register+0x1ba6/0x28d0
[  363.523358][T22099]  ? __pfx_wiphy_register+0x10/0x10
[  363.523368][T22099]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  363.523380][T22099]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  363.523389][T22099]  ieee80211_register_hw+0x3425/0x4080
[  363.523404][T22099]  ? ieee80211_register_hw+0x1461/0x4080
[  363.523415][T22099]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  363.523424][T22099]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  363.523437][T22099]  ? __hrtimer_setup+0x187/0x210
[  363.523444][T22099]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  363.523455][T22099]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  363.523475][T22099]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  363.523483][T22099]  ? trace_kmalloc+0x1f/0xd0
[  363.523492][T22099]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  363.523501][T22099]  ? kstrndup+0xbf/0x160
[  363.523512][T22099]  hwsim_new_radio_nl+0xea4/0x1b10
[  363.523522][T22099]  ? __pfx___nla_validate_parse+0x10/0x10
[  363.523539][T22099]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  363.523553][T22099]  ? __nla_parse+0x40/0x60
[  363.523564][T22099]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  363.523584][T22099]  genl_family_rcv_msg_doit+0x215/0x300
[  363.523596][T22099]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  363.523610][T22099]  ? bpf_lsm_capable+0x9/0x20
[  363.523620][T22099]  ? security_capable+0x7e/0x2e0
[  363.523634][T22099]  genl_rcv_msg+0x60e/0x790
[  363.523645][T22099]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.523657][T22099]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  363.523671][T22099]  netlink_rcv_skb+0x208/0x470
[  363.523680][T22099]  ? __lock_acquire+0xab9/0xd20
[  363.523689][T22099]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.523698][T22099]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  363.523715][T22099]  ? down_read+0x1ad/0x2e0
[  363.523723][T22099]  genl_rcv+0x28/0x40
[  363.523731][T22099]  netlink_unicast+0x82f/0x9e0
[  363.523745][T22099]  ? __pfx_netlink_unicast+0x10/0x10
[  363.523755][T22099]  ? netlink_sendmsg+0x642/0xb30
[  363.523761][T22099]  ? skb_put+0x11b/0x210
[  363.523770][T22099]  netlink_sendmsg+0x805/0xb30
[  363.523780][T22099]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.523787][T22099]  ? aa_sock_msg_perm+0xf1/0x1d0
[  363.523795][T22099]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  363.523803][T22099]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.523810][T22099]  __sock_sendmsg+0x21c/0x270
[  363.523821][T22099]  ____sys_sendmsg+0x505/0x830
[  363.523831][T22099]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.523842][T22099]  ? import_iovec+0x74/0xa0
[  363.523851][T22099]  ___sys_sendmsg+0x21f/0x2a0
[  363.523860][T22099]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.523881][T22099]  ? __fget_files+0x2a/0x420
[  363.523887][T22099]  ? __fget_files+0x3a0/0x420
[  363.523897][T22099]  __x64_sys_sendmsg+0x19b/0x260
[  363.523905][T22099]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.523920][T22099]  ? do_syscall_64+0xbe/0x3b0
[  363.523928][T22099]  do_syscall_64+0xfa/0x3b0
[  363.523939][T22099]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.523953][T22099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.523960][T22099]  ? exc_page_fault+0x9f/0xf0
[  363.523971][T22099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.523978][T22099] RIP: 0033:0x7f1e26f8ebe9
[  363.523987][T22099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.523993][T22099] RSP: 002b:00007f1e27dfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.524002][T22099] RAX: ffffffffffffffda RBX: 00007f1e271c5fa0 RCX: 00007f1e26f8ebe9
[  363.524008][T22099] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  363.524012][T22099] RBP: 00007f1e27011e19 R08: 0000000000000000 R09: 0000000000000000
[  363.524017][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.524021][T22099] R13: 00007f1e271c6038 R14: 00007f1e271c5fa0 R15: 00007ffc99b367b8
[  363.524032][T22099]  </TASK>
[  364.625066][T22107] tipc: Failed to remove unknown binding: 66,1,1/3611432601:3639532247/3639532249
[  364.628942][T22107] tipc: Failed to remove unknown binding: 66,1,1/3611432601:3639532247/3639532249
[  364.860285][T22135] __nla_validate_parse: 13 callbacks suppressed
[  364.860298][T22135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6192'.
[  364.864725][T22133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6191'.
[  365.015678][T22145] vlan1: entered promiscuous mode
[  365.017950][T22145] !: entered promiscuous mode
[  365.106668][T22154] validate_nla: 4 callbacks suppressed
[  365.106682][T22154] netlink: 'syz.1.6200': attribute type 1 has an invalid length.
[  365.115129][T22154] netlink: 'syz.1.6200': attribute type 1 has an invalid length.
[  365.262946][T22163] netlink: 'syz.0.6202': attribute type 9 has an invalid length.
[  365.266212][T22163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6202'.
[  365.407249][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6208'.
[  365.438282][T22175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6207'.
[  365.454258][T22177] netlink: 'syz.2.6209': attribute type 10 has an invalid length.
[  365.474300][T22177] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  365.546016][T22182] netlink: 'syz.2.6212': attribute type 1 has an invalid length.
[  365.559054][T22183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6211'.
[  365.560731][T22186] netlink: 'syz.1.6213': attribute type 9 has an invalid length.
[  365.644016][T22196] 8021q: adding VLAN 0 to HW filter on device bond19
[  365.670135][T22182] veth19: entered promiscuous mode
[  365.674654][T22182] bond19: (slave veth19): Enslaving as a backup interface with a down link
[  365.685858][T22182] bond17: (slave veth13): Releasing backup interface
[  365.689455][T22182] bond18: (slave veth17): Releasing backup interface
[  365.693850][T22182] bond19: (slave veth19): Releasing backup interface
[  365.727898][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.733946][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.737440][T22199] netlink: 'syz.0.6216': attribute type 1 has an invalid length.
[  365.742228][T22199] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6216'.
[  365.758870][T22203] netlink: 'syz.2.6218': attribute type 10 has an invalid length.
[  365.761975][T22204] netlink: 'syz.2.6218': attribute type 10 has an invalid length.
[  365.766858][T22203] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.770715][T22203] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.788284][T22206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6219'.
[  365.790818][T22208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6220'.
[  365.846566][T22211] netlink: 'syz.0.6222': attribute type 10 has an invalid length.
[  365.851908][T22211] mac80211_hwsim hwsim121 wlan1: entered allmulticast mode
[  365.972638][T22221] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6225'.
[  366.606566][T22251] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  366.731022][T22262] mac80211_hwsim hwsim195 wlan1: left allmulticast mode
[  367.268143][T22306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.677756][T22330] wg1 speed is unknown, defaulting to 1000
[  368.152527][T22355] can: request_module (can-proto-0) failed.
[  368.155171][T22355] openvswitch: netlink: Flow actions attr not present in new flow.
[  368.302651][T22370] batadv3: entered promiscuous mode
[  368.304845][T22370] batadv3: entered allmulticast mode
[  368.409410][T22377] 8021q: adding VLAN 0 to HW filter on device bond20
[  368.475277][T22382] 8021q: adding VLAN 0 to HW filter on device bond2
[  368.550133][T22391] wg1 speed is unknown, defaulting to 1000
[  368.667369][T22399] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  369.223163][T22437] wg1 speed is unknown, defaulting to 1000
[  369.424525][T22443] wg1 speed is unknown, defaulting to 1000
[  369.944205][T22476] vlan0: left promiscuous mode
[  369.971924][T22463] __nla_validate_parse: 21 callbacks suppressed
[  369.971934][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6298'.
[  370.003826][T22479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6301'.
[  370.011900][T22479] openvswitch: netlink: EtherType 0 is less than min 600
[  370.164000][T22487] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  370.257126][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6308'.
[  370.261039][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6308'.
[  370.284602][T22503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6310'.
[  370.558257][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'.
[  370.562227][T22517] netlink: 620 bytes leftover after parsing attributes in process `syz.0.6316'.
[  370.565323][T22517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6316'.
[  370.605360][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6318'.
[  370.613641][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6318'.
[  370.624648][T22532] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  370.628360][T22532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  370.779982][T22545] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  370.935880][T22558] validate_nla: 12 callbacks suppressed
[  370.935893][T22558] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  370.951663][T22558] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  370.955043][T22559] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  370.960804][T22559] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  371.028324][T22553] netlink: 'syz.0.6326': attribute type 1 has an invalid length.
[  371.051685][T22553] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.057564][T22553] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  371.064030][T22553] bond0: (slave wlan0): Opening slave failed
[  371.321698][T22582] 8021q: adding VLAN 0 to HW filter on device bond8
[  371.345046][T22582] bond8: (slave macvlan8): Enslaving as a backup interface with a down link
[  371.361267][T22582] bond8: (slave macvlan8): Releasing backup interface
[  371.388987][T22586] netlink: 'syz.2.6339': attribute type 4 has an invalid length.
[  371.405281][T22588] netlink: 'syz.0.6340': attribute type 10 has an invalid length.
[  371.407703][T22586] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  371.412026][T22586] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  371.475778][T22591] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  371.549922][T22601] erspan0: entered allmulticast mode
[  371.553841][T22601] netlink: 'syz.2.6344': attribute type 10 has an invalid length.
[  371.843008][T22632] netlink: 'syz.0.6355': attribute type 9 has an invalid length.
[  371.956604][T22635] wg1 speed is unknown, defaulting to 1000
[  372.266643][T22663] netlink: 'syz.2.6368': attribute type 1 has an invalid length.
[  372.337991][T22663] 8021q: adding VLAN 0 to HW filter on device bond21
[  372.343807][T22667] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  372.373818][T22663] vlan2: entered allmulticast mode
[  372.381553][T22663] bond21: (slave vlan2): Opening slave failed
[  372.666917][T22695] wg1 speed is unknown, defaulting to 1000
[  372.671560][T22699] wg1 speed is unknown, defaulting to 1000
[  373.229557][T22730] wg1 speed is unknown, defaulting to 1000
[  373.686369][T22747] 8021q: adding VLAN 0 to HW filter on device bond9
[  373.705397][T22747] veth19: entered promiscuous mode
[  373.711504][T22747] bond9: (slave veth19): Enslaving as a backup interface with a down link
[  373.738686][T22747] bond9: (slave veth19): Releasing backup interface
[  374.242203][T22773] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  374.339613][T22782] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  374.342333][T22782] CPU: 1 UID: 0 PID: 22782 Comm: syz.1.6409 Not tainted syzkaller #0 PREEMPT(full) 
[  374.342345][T22782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.342350][T22782] Call Trace:
[  374.342354][T22782]  <TASK>
[  374.342358][T22782]  dump_stack_lvl+0x189/0x250
[  374.342372][T22782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.342381][T22782]  ? __pfx__printk+0x10/0x10
[  374.342393][T22782]  ? kernfs_path_from_node+0x2f/0x290
[  374.342402][T22782]  ? kernfs_path_from_node+0x250/0x290
[  374.342409][T22782]  ? kernfs_path_from_node+0x2f/0x290
[  374.342419][T22782]  sysfs_warn_dup+0x8e/0xa0
[  374.342428][T22782]  sysfs_do_create_link_sd+0xc0/0x110
[  374.342436][T22782]  device_add_class_symlinks+0x1cf/0x240
[  374.342446][T22782]  device_add+0x475/0xb50
[  374.342455][T22782]  wiphy_register+0x1ba6/0x28d0
[  374.342473][T22782]  ? __pfx_wiphy_register+0x10/0x10
[  374.342483][T22782]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  374.342494][T22782]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  374.342504][T22782]  ieee80211_register_hw+0x3425/0x4080
[  374.342519][T22782]  ? ieee80211_register_hw+0x1461/0x4080
[  374.342530][T22782]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  374.342540][T22782]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  374.342552][T22782]  ? __hrtimer_setup+0x187/0x210
[  374.342559][T22782]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  374.342570][T22782]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  374.342591][T22782]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  374.342599][T22782]  ? trace_kmalloc+0x1f/0xd0
[  374.342607][T22782]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  374.342615][T22782]  ? kstrndup+0xbf/0x160
[  374.342626][T22782]  hwsim_new_radio_nl+0xea4/0x1b10
[  374.342636][T22782]  ? __pfx___nla_validate_parse+0x10/0x10
[  374.342653][T22782]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  374.342667][T22782]  ? __nla_parse+0x40/0x60
[  374.342678][T22782]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  374.342690][T22782]  genl_family_rcv_msg_doit+0x215/0x300
[  374.342701][T22782]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  374.342714][T22782]  ? bpf_lsm_capable+0x9/0x20
[  374.342723][T22782]  ? security_capable+0x7e/0x2e0
[  374.342735][T22782]  genl_rcv_msg+0x60e/0x790
[  374.342745][T22782]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.342752][T22782]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  374.342767][T22782]  netlink_rcv_skb+0x208/0x470
[  374.342775][T22782]  ? __lock_acquire+0xab9/0xd20
[  374.342785][T22782]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.342793][T22782]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.342811][T22782]  ? down_read+0x1ad/0x2e0
[  374.342826][T22782]  genl_rcv+0x28/0x40
[  374.342834][T22782]  netlink_unicast+0x82f/0x9e0
[  374.342847][T22782]  ? __pfx_netlink_unicast+0x10/0x10
[  374.342858][T22782]  ? netlink_sendmsg+0x642/0xb30
[  374.342864][T22782]  ? skb_put+0x11b/0x210
[  374.342873][T22782]  netlink_sendmsg+0x805/0xb30
[  374.342884][T22782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.342892][T22782]  ? aa_sock_msg_perm+0xf1/0x1d0
[  374.342901][T22782]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  374.342909][T22782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.342915][T22782]  __sock_sendmsg+0x21c/0x270
[  374.342927][T22782]  ____sys_sendmsg+0x505/0x830
[  374.342939][T22782]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.342951][T22782]  ? import_iovec+0x74/0xa0
[  374.342960][T22782]  ___sys_sendmsg+0x21f/0x2a0
[  374.342969][T22782]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.342991][T22782]  ? __fget_files+0x2a/0x420
[  374.342997][T22782]  ? __fget_files+0x3a0/0x420
[  374.343007][T22782]  __x64_sys_sendmsg+0x19b/0x260
[  374.343016][T22782]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.343027][T22782]  ? rcu_is_watching+0x15/0xb0
[  374.343036][T22782]  ? do_syscall_64+0xbe/0x3b0
[  374.343072][T22782]  do_syscall_64+0xfa/0x3b0
[  374.343083][T22782]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.343097][T22782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.343106][T22782]  ? exc_page_fault+0x9f/0xf0
[  374.343116][T22782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.343123][T22782] RIP: 0033:0x7f55d2b8ebe9
[  374.343131][T22782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.343136][T22782] RSP: 002b:00007f55d3941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.343145][T22782] RAX: ffffffffffffffda RBX: 00007f55d2dc5fa0 RCX: 00007f55d2b8ebe9
[  374.343149][T22782] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  374.343153][T22782] RBP: 00007f55d2c11e19 R08: 0000000000000000 R09: 0000000000000000
[  374.343157][T22782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.343161][T22782] R13: 00007f55d2dc6038 R14: 00007f55d2dc5fa0 R15: 00007ffe39f63228
[  374.343173][T22782]  </TASK>
[  375.029005][T22809] wg1 speed is unknown, defaulting to 1000
[  375.123230][T22806] __nla_validate_parse: 22 callbacks suppressed
[  375.123241][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6418'.
[  375.196613][T22815] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6419'.
[  375.252936][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6419'.
[  375.833495][T22834] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6424'.
[  375.846475][T22837] veth19: left promiscuous mode
[  375.957595][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6427'.
[  375.974762][T22842] validate_nla: 10 callbacks suppressed
[  375.974775][T22842] netlink: 'syz.2.6427': attribute type 10 has an invalid length.
[  376.102699][T22852] wg1 speed is unknown, defaulting to 1000
[  376.336138][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6434'.
[  376.357923][T22852] netlink: 'syz.0.6431': attribute type 2 has an invalid length.
[  376.475635][T22872] netlink: 'syz.0.6436': attribute type 11 has an invalid length.
[  376.623316][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'.
[  376.630462][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6439'.
[  376.640225][T22881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6439'.
[  376.709840][T22881] netlink: 'syz.2.6439': attribute type 10 has an invalid length.
[  376.777766][T22891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6443'.
[  377.887325][T22964] netlink: 'syz.2.6466': attribute type 12 has an invalid length.
[  378.157033][T22976] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  378.226633][T22978] bond8: (slave macvlan9): Enslaving as a backup interface with a down link
[  378.268106][T22978] bond8: (slave macvlan9): Releasing backup interface
[  378.295204][T22987] sctp: [Deprecated]: syz.0.6475 (pid 22987) Use of int in maxseg socket option.
[  378.295204][T22987] Use struct sctp_assoc_value instead
[  378.310211][T22990] bond8: option mode: unable to set because the bond device is up
[  378.971532][T23048] netlink: 'syz.0.6493': attribute type 1 has an invalid length.
[  378.974881][T23048] netlink: 'syz.0.6493': attribute type 1 has an invalid length.
[  379.028612][T23038] netlink: 'syz.1.6491': attribute type 10 has an invalid length.
[  379.383607][T23077] netlink: 'syz.1.6504': attribute type 6 has an invalid length.
[  379.405404][T23077] netlink: 'syz.1.6504': attribute type 12 has an invalid length.
[  379.871899][T23122] netlink: 'syz.0.6516': attribute type 1 has an invalid length.
[  380.140393][T23145] wg1 speed is unknown, defaulting to 1000
[  380.857659][T23177] __nla_validate_parse: 13 callbacks suppressed
[  380.857673][T23177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6534'.
[  380.979546][T23177] validate_nla: 4 callbacks suppressed
[  380.979561][T23177] netlink: 'syz.0.6534': attribute type 10 has an invalid length.
[  381.033694][T23185] netlink: 'syz.1.6536': attribute type 1 has an invalid length.
[  381.056273][T23185] 8021q: adding VLAN 0 to HW filter on device bond17
[  381.064323][T23184] vlan1: entered allmulticast mode
[  381.201234][T23207] sctp: [Deprecated]: syz.1.6543 (pid 23207) Use of struct sctp_assoc_value in delayed_ack socket option.
[  381.201234][T23207] Use struct sctp_sack_info instead
[  381.225134][T23203] 8021q: adding VLAN 0 to HW filter on device bond10
[  381.268897][T23203] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  381.273514][T23203] bond10: (slave macvlan5): Enslaving as a backup interface with a down link
[  381.282876][T23203] bond10: (slave macvlan5): Releasing backup interface
[  381.291231][T23209] 8021q: VLANs not supported on ip6tnl0
[  381.373410][T23215] wg1 speed is unknown, defaulting to 1000
[  381.421790][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6548'.
[  381.452638][T23219] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6548'.
[  381.667342][T23221] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6547'.
[  381.676028][T23221] netlink: 'syz.2.6547': attribute type 2 has an invalid length.
[  382.155677][T23238] netlink: 'syz.2.6555': attribute type 12 has an invalid length.
[  382.158652][T23238] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6555'.
[  382.288306][T23253] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6559'.
[  382.293362][T23253] nbd: illegal input index 65508
[  382.295816][T23253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6559'.
[  382.511891][T23274] 8021q: adding VLAN 0 to HW filter on device bond2
[  382.530315][T23274] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  382.535156][T23274] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[  382.541323][T23274] bond2: (slave macvlan2): Releasing backup interface
[  382.547328][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6568'.
[  382.609595][T23282] bond10: option mode: unable to set because the bond device is up
[  382.654932][T23285] wg1 speed is unknown, defaulting to 1000
[  382.691611][T23289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  382.709786][T23289] netlink: 'syz.2.6572': attribute type 8 has an invalid length.
[  383.246084][T23306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.252116][T23306] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  383.254800][T23306] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  383.309333][T23310] netlink: 'syz.0.6577': attribute type 1 has an invalid length.
[  383.312845][T23310] netlink: 'syz.0.6577': attribute type 1 has an invalid length.
[  383.407740][T23310] vlan0: entered allmulticast mode
[  383.410443][T23310] veth1: entered allmulticast mode
[  383.468997][T23313] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.6578'.
[  383.509681][T23313] wg1 speed is unknown, defaulting to 1000
[  383.789913][T23313] netlink: 'syz.1.6578': attribute type 2 has an invalid length.
[  383.795029][T23333] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  383.877563][T23334] smc: net device bond0 applied user defined pnetid SYZ2
[  383.961819][T23340] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6586'.
[  384.115471][T23343] wg1 speed is unknown, defaulting to 1000
[  384.607919][T23368] team0: Unable to change to the same mode the team is in
[  384.611495][T23368] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  384.676650][T23370] erspan0: left allmulticast mode
[  384.717134][T23370] veth19: left promiscuous mode
[  384.794021][T23376] netlink: 'syz.2.6597': attribute type 4 has an invalid length.
[  384.830626][T23380] netlink: 'syz.1.6599': attribute type 10 has an invalid length.
[  384.883976][T23383] veth23: entered promiscuous mode
[  384.897201][T23385] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  385.520745][T23417] wg1 speed is unknown, defaulting to 1000
[  385.990984][T23438] __nla_validate_parse: 8 callbacks suppressed
[  385.990994][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6616'.
[  385.998420][T23436] wg1 speed is unknown, defaulting to 1000
[  386.154057][T23445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6619'.
[  386.443881][T23455] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  386.449224][T23455] CPU: 0 UID: 0 PID: 23455 Comm: syz.1.6623 Not tainted syzkaller #0 PREEMPT(full) 
[  386.449240][T23455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.449248][T23455] Call Trace:
[  386.449254][T23455]  <TASK>
[  386.449259][T23455]  dump_stack_lvl+0x189/0x250
[  386.449282][T23455]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.449298][T23455]  ? __pfx__printk+0x10/0x10
[  386.449319][T23455]  ? kernfs_path_from_node+0x2f/0x290
[  386.449334][T23455]  ? kernfs_path_from_node+0x250/0x290
[  386.449345][T23455]  ? kernfs_path_from_node+0x2f/0x290
[  386.449362][T23455]  sysfs_warn_dup+0x8e/0xa0
[  386.449375][T23455]  sysfs_do_create_link_sd+0xc0/0x110
[  386.449390][T23455]  device_add_class_symlinks+0x1cf/0x240
[  386.449406][T23455]  device_add+0x475/0xb50
[  386.449422][T23455]  wiphy_register+0x1ba6/0x28d0
[  386.449454][T23455]  ? __pfx_wiphy_register+0x10/0x10
[  386.449470][T23455]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  386.449490][T23455]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  386.449508][T23455]  ieee80211_register_hw+0x3425/0x4080
[  386.449536][T23455]  ? ieee80211_register_hw+0x1461/0x4080
[  386.449559][T23455]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  386.449577][T23455]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  386.449600][T23455]  ? __hrtimer_setup+0x187/0x210
[  386.449612][T23455]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  386.449632][T23455]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  386.449672][T23455]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  386.449686][T23455]  ? trace_kmalloc+0x1f/0xd0
[  386.449700][T23455]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  386.449717][T23455]  ? kstrndup+0xbf/0x160
[  386.449738][T23455]  hwsim_new_radio_nl+0xea4/0x1b10
[  386.449756][T23455]  ? __pfx___nla_validate_parse+0x10/0x10
[  386.449794][T23455]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  386.449821][T23455]  ? __nla_parse+0x40/0x60
[  386.449843][T23455]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  386.449867][T23455]  genl_family_rcv_msg_doit+0x215/0x300
[  386.449889][T23455]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  386.449941][T23455]  ? bpf_lsm_capable+0x9/0x20
[  386.449959][T23455]  ? security_capable+0x7e/0x2e0
[  386.449984][T23455]  genl_rcv_msg+0x60e/0x790
[  386.450006][T23455]  ? __pfx_genl_rcv_msg+0x10/0x10
[  386.450020][T23455]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  386.450047][T23455]  netlink_rcv_skb+0x208/0x470
[  386.450065][T23455]  ? __lock_acquire+0xab9/0xd20
[  386.450083][T23455]  ? __pfx_genl_rcv_msg+0x10/0x10
[  386.450098][T23455]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  386.450131][T23455]  ? down_read+0x1ad/0x2e0
[  386.450145][T23455]  genl_rcv+0x28/0x40
[  386.450156][T23455]  netlink_unicast+0x82f/0x9e0
[  386.450179][T23455]  ? __pfx_netlink_unicast+0x10/0x10
[  386.450197][T23455]  ? netlink_sendmsg+0x642/0xb30
[  386.450206][T23455]  ? skb_put+0x11b/0x210
[  386.450221][T23455]  netlink_sendmsg+0x805/0xb30
[  386.450241][T23455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.450274][T23455]  ? aa_sock_msg_perm+0xf1/0x1d0
[  386.450290][T23455]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.450302][T23455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.450314][T23455]  __sock_sendmsg+0x21c/0x270
[  386.450334][T23455]  ____sys_sendmsg+0x505/0x830
[  386.450353][T23455]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.450374][T23455]  ? import_iovec+0x74/0xa0
[  386.450392][T23455]  ___sys_sendmsg+0x21f/0x2a0
[  386.450408][T23455]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.450450][T23455]  ? __fget_files+0x2a/0x420
[  386.450461][T23455]  ? __fget_files+0x3a0/0x420
[  386.450480][T23455]  __x64_sys_sendmsg+0x19b/0x260
[  386.450496][T23455]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  386.450516][T23455]  ? rcu_is_watching+0x15/0xb0
[  386.450532][T23455]  ? do_syscall_64+0xbe/0x3b0
[  386.450547][T23455]  do_syscall_64+0xfa/0x3b0
[  386.450557][T23455]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.450573][T23455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.450586][T23455]  ? exc_page_fault+0x9f/0xf0
[  386.450602][T23455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.450614][T23455] RIP: 0033:0x7f55d2b8ebe9
[  386.450626][T23455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.450635][T23455] RSP: 002b:00007f55d3941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.450649][T23455] RAX: ffffffffffffffda RBX: 00007f55d2dc5fa0 RCX: 00007f55d2b8ebe9
[  386.450657][T23455] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  386.450665][T23455] RBP: 00007f55d2c11e19 R08: 0000000000000000 R09: 0000000000000000
[  386.450673][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.450680][T23455] R13: 00007f55d2dc6038 R14: 00007f55d2dc5fa0 R15: 00007ffe39f63228
[  386.450705][T23455]  </TASK>
[  386.694285][T23459] validate_nla: 3 callbacks suppressed
[  386.694295][T23459] netlink: 'syz.2.6624': attribute type 21 has an invalid length.
[  386.699054][T23459] IPv6: NLM_F_CREATE should be specified when creating new route
[  386.701813][T23459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  386.704498][T23459] IPv6: NLM_F_CREATE should be set when creating new route
[  386.707432][T23459] IPv6: NLM_F_CREATE should be set when creating new route
[  386.710269][T23459] IPv6: NLM_F_CREATE should be set when creating new route
[  386.775845][T23462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6625'.
[  386.820706][T23476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6629'.
[  386.842650][T23476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6629'.
[  386.856233][T23476] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6629'.
[  386.970975][T23488] netlink: 'syz.0.6633': attribute type 19 has an invalid length.
[  387.227693][T23510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6636'.
[  387.302813][T23517] wg1 speed is unknown, defaulting to 1000
[  387.373896][T23522] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6641'.
[  387.378391][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6641'.
[  387.511371][T23526] 8021q: adding VLAN 0 to HW filter on device bond2
[  387.519434][T23526] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  387.522878][T23526] bond2: (slave macvlan3): Enslaving as a backup interface with a down link
[  387.534056][T23526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6643'.
[  387.548100][T23517] netlink: 'syz.2.6640': attribute type 2 has an invalid length.
[  387.793675][T23532] wg1 speed is unknown, defaulting to 1000
[  388.034859][T23550] team0: Mode changed to "loadbalance"
[  388.959704][T23623] bond2: option mode: unable to set because the bond device has slaves
[  388.975064][T23623] bond2: (slave macvlan4): Error -98 calling set_mac_address
[  389.026363][T23627] bond2: (slave macvlan3): Releasing backup interface
[  389.256106][T23642] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  389.261398][T23642] CPU: 1 UID: 0 PID: 23642 Comm: syz.2.6678 Not tainted syzkaller #0 PREEMPT(full) 
[  389.261415][T23642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  389.261422][T23642] Call Trace:
[  389.261427][T23642]  <TASK>
[  389.261432][T23642]  dump_stack_lvl+0x189/0x250
[  389.261455][T23642]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.261470][T23642]  ? __pfx__printk+0x10/0x10
[  389.261491][T23642]  ? kernfs_path_from_node+0x2f/0x290
[  389.261505][T23642]  ? kernfs_path_from_node+0x250/0x290
[  389.261516][T23642]  ? kernfs_path_from_node+0x2f/0x290
[  389.261528][T23642]  sysfs_warn_dup+0x8e/0xa0
[  389.261542][T23642]  sysfs_do_create_link_sd+0xc0/0x110
[  389.261555][T23642]  device_add_class_symlinks+0x1cf/0x240
[  389.261571][T23642]  device_add+0x475/0xb50
[  389.261607][T23642]  wiphy_register+0x1ba6/0x28d0
[  389.261637][T23642]  ? __pfx_wiphy_register+0x10/0x10
[  389.261653][T23642]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  389.261672][T23642]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  389.261689][T23642]  ieee80211_register_hw+0x3425/0x4080
[  389.261713][T23642]  ? ieee80211_register_hw+0x1461/0x4080
[  389.261731][T23642]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  389.261748][T23642]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  389.261768][T23642]  ? __hrtimer_setup+0x187/0x210
[  389.261779][T23642]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  389.261798][T23642]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  389.261834][T23642]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  389.261849][T23642]  ? trace_kmalloc+0x1f/0xd0
[  389.261863][T23642]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  389.261879][T23642]  ? kstrndup+0xbf/0x160
[  389.261925][T23642]  hwsim_new_radio_nl+0xea4/0x1b10
[  389.261941][T23642]  ? __pfx___nla_validate_parse+0x10/0x10
[  389.261970][T23642]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  389.261995][T23642]  ? __nla_parse+0x40/0x60
[  389.262015][T23642]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  389.262042][T23642]  genl_family_rcv_msg_doit+0x215/0x300
[  389.262061][T23642]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  389.262083][T23642]  ? bpf_lsm_capable+0x9/0x20
[  389.262100][T23642]  ? security_capable+0x7e/0x2e0
[  389.262122][T23642]  genl_rcv_msg+0x60e/0x790
[  389.262140][T23642]  ? __pfx_genl_rcv_msg+0x10/0x10
[  389.262154][T23642]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  389.262170][T23642]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  389.262192][T23642]  netlink_rcv_skb+0x208/0x470
[  389.262206][T23642]  ? __lock_acquire+0xab9/0xd20
[  389.262223][T23642]  ? __pfx_genl_rcv_msg+0x10/0x10
[  389.262237][T23642]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  389.262265][T23642]  ? down_read+0x1ad/0x2e0
[  389.262278][T23642]  genl_rcv+0x28/0x40
[  389.262291][T23642]  netlink_unicast+0x82f/0x9e0
[  389.262311][T23642]  ? __pfx_netlink_unicast+0x10/0x10
[  389.262327][T23642]  ? netlink_sendmsg+0x642/0xb30
[  389.262336][T23642]  ? skb_put+0x11b/0x210
[  389.262350][T23642]  netlink_sendmsg+0x805/0xb30
[  389.262369][T23642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.262380][T23642]  ? aa_sock_msg_perm+0xf1/0x1d0
[  389.262394][T23642]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  389.262405][T23642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.262416][T23642]  __sock_sendmsg+0x21c/0x270
[  389.262433][T23642]  ____sys_sendmsg+0x505/0x830
[  389.262451][T23642]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.262467][T23642]  ? import_iovec+0x74/0xa0
[  389.262484][T23642]  ___sys_sendmsg+0x21f/0x2a0
[  389.262499][T23642]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.262538][T23642]  ? __fget_files+0x2a/0x420
[  389.262549][T23642]  ? __fget_files+0x3a0/0x420
[  389.262566][T23642]  __x64_sys_sendmsg+0x19b/0x260
[  389.262581][T23642]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  389.262601][T23642]  ? rcu_is_watching+0x15/0xb0
[  389.262615][T23642]  ? do_syscall_64+0xbe/0x3b0
[  389.262629][T23642]  do_syscall_64+0xfa/0x3b0
[  389.262639][T23642]  ? lockdep_hardirqs_on+0x9c/0x150
[  389.262655][T23642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.262666][T23642]  ? exc_page_fault+0x9f/0xf0
[  389.262683][T23642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.262694][T23642] RIP: 0033:0x7f9acd78ebe9
[  389.262706][T23642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.262715][T23642] RSP: 002b:00007f9ace5dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.262728][T23642] RAX: ffffffffffffffda RBX: 00007f9acd9c5fa0 RCX: 00007f9acd78ebe9
[  389.262737][T23642] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  389.262743][T23642] RBP: 00007f9acd811e19 R08: 0000000000000000 R09: 0000000000000000
[  389.262751][T23642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.262758][T23642] R13: 00007f9acd9c6038 R14: 00007f9acd9c5fa0 R15: 00007ffff0c3b098
[  389.262778][T23642]  </TASK>
[  389.548126][T23646] netlink: 'syz.2.6680': attribute type 10 has an invalid length.
[  389.774767][T23665] wg1 speed is unknown, defaulting to 1000
[  389.776934][T23667] netlink: 'syz.1.6687': attribute type 6 has an invalid length.
[  389.790972][T23664] wg1 speed is unknown, defaulting to 1000
[  389.792205][T23667] netlink: 'syz.1.6687': attribute type 12 has an invalid length.
[  389.913134][T23671] wg1 speed is unknown, defaulting to 1000
[  390.980281][T23706] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  390.995945][T23714] bridge: RTM_NEWNEIGH with invalid ether address
[  391.034902][T23706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.142965][T23722] __nla_validate_parse: 16 callbacks suppressed
[  391.142975][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6703'.
[  391.177663][T23727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6704'.
[  391.185235][T23727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6704'.
[  391.494810][T23746] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  391.572851][T23750] netlink: 'syz.0.6711': attribute type 9 has an invalid length.
[  391.576493][T23750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6711'.
[  391.644529][T23752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6712'.
[  391.792395][T23760] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6714'.
[  391.829522][T23766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6718'.
[  391.855717][T23771] netlink: 'syz.2.6719': attribute type 8 has an invalid length.
[  391.971501][T23790] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6722'.
[  392.020670][T23781] openvswitch: netlink: Flow actions attr not present in new flow.
[  392.115752][T23801] netlink: 'syz.1.6726': attribute type 10 has an invalid length.
[  392.115766][T23804] netlink: 'syz.1.6726': attribute type 10 has an invalid length.
[  392.122051][T23803] wg1 speed is unknown, defaulting to 1000
[  392.132548][T23801] mac80211_hwsim hwsim246 wlan1: entered allmulticast mode
[  392.257965][T23816] netlink: 'syz.1.6731': attribute type 1 has an invalid length.
[  392.261684][T23816] netlink: 'syz.1.6731': attribute type 1 has an invalid length.
[  392.387256][T23824] netlink: 'syz.1.6731': attribute type 1 has an invalid length.
[  392.432414][T23824] 8021q: adding VLAN 0 to HW filter on device bond18
[  392.452584][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6731'.
[  392.541050][T23838] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.576544][T23840] netlink: 'syz.0.6738': attribute type 10 has an invalid length.
[  392.776612][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6743'.
[  392.834575][T23866] netlink: 'syz.1.6740': attribute type 10 has an invalid length.
[  392.941648][T23872] syzkaller1: entered promiscuous mode
[  392.944155][T23872] syzkaller1: entered allmulticast mode
[  393.527489][T23894] tipc: Resetting bearer <eth:team0>
[  393.530381][T23894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  393.682180][T23901] netlink: 'syz.1.6756': attribute type 4 has an invalid length.
[  393.735312][T23904] netlink: 'syz.2.6757': attribute type 10 has an invalid length.
[  393.742058][T23905] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  393.745437][T23910] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  394.760108][T23938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.903556][T23949] 8021q: adding VLAN 0 to HW filter on device bond19
[  395.346695][T24003] wg1 speed is unknown, defaulting to 1000
[  395.793196][T24033] wg1 speed is unknown, defaulting to 1000
[  396.043687][T24048] batadv2: entered promiscuous mode
[  396.046096][T24048] batadv2: entered allmulticast mode
[  396.237393][T24048] __nla_validate_parse: 17 callbacks suppressed
[  396.237411][T24048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6803'.
[  396.297356][T24063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6809'.
[  396.318700][T24061] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6807'.
[  396.495716][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6814'.
[  396.662195][T24089] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6817'.
[  396.686618][T24089] mac80211_hwsim hwsim195 wlan1: left allmulticast mode
[  396.714731][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6817'.
[  396.765830][T24101] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6823'.
[  396.977677][T24115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6827'.
[  397.016346][T24121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6830'.
[  397.094468][T24134] validate_nla: 7 callbacks suppressed
[  397.094478][T24134] netlink: 'syz.2.6834': attribute type 10 has an invalid length.
[  397.154552][T24137] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  397.267884][T24141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6835'.
[  397.570861][T24146] netlink: 'syz.1.6837': attribute type 10 has an invalid length.
[  398.022928][T24157] netlink: 'syz.2.6841': attribute type 1 has an invalid length.
[  398.064592][T24157] 8021q: adding VLAN 0 to HW filter on device bond22
[  398.084994][T24157] veth23: entered promiscuous mode
[  398.090625][T24157] bond22: (slave veth23): Enslaving as a backup interface with a down link
[  398.325084][T24181] netlink: 'syz.2.6849': attribute type 1 has an invalid length.
[  398.337482][T24181] netlink: 'syz.2.6849': attribute type 1 has an invalid length.
[  398.395102][T24183] syzkaller0: entered promiscuous mode
[  398.397675][T24183] syzkaller0: entered allmulticast mode
[  398.400393][T24186] netlink: 'syz.2.6849': attribute type 1 has an invalid length.
[  398.419875][T24186] 8021q: adding VLAN 0 to HW filter on device bond23
[  399.161580][T16341] page_pool_release_retry() stalled pool shutdown: id 54, 3329 inflight 181 sec
[  399.533597][T24197] tap0: tun_chr_ioctl cmd 1074025677
[  399.536069][T24197] tap0: linktype set to 0
[  399.756857][T24210] netlink: 'syz.2.6858': attribute type 12 has an invalid length.
[  399.892728][T24219] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  399.895222][T24219] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  399.912875][T24221] 8021q: adding VLAN 0 to HW filter on device bond8
[  399.952707][T24225] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  399.963201][T24225] block nbd1: NBD_DISCONNECT
[  399.964942][T24225] block nbd1: Send disconnect failed -107
[  399.967027][T24225] block nbd1: shutting down sockets
[  400.539197][T24276] netlink: 'syz.1.6881': attribute type 10 has an invalid length.
[  401.054661][T24283] netlink: 'syz.2.6883': attribute type 12 has an invalid length.
[  401.313748][T24302] netlink: 'syz.2.6888': attribute type 6 has an invalid length.
[  401.321348][T24302] __nla_validate_parse: 12 callbacks suppressed
[  401.321356][T24302] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6888'.
[  401.366818][T24304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6889'.
[  401.434174][T24306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6890'.
[  401.474984][T24306] vlan0: entered promiscuous mode
[  401.477588][T24306] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  401.514132][T24316] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6892'.
[  401.522884][T24316] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6892'.
[  401.623031][T24321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6893'.
[  401.632624][T24321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6893'.
[  401.781213][T24327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6896'.
[  401.813726][T24329] rdma_op ffff8881128529f0 conn xmit_rdma 0000000000000000
[  401.832722][T24329] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  401.837519][T24329] bond10: (slave macvlan6): Enslaving as a backup interface with a down link
[  401.869634][T24331] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  402.253659][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6903'.
[  402.280483][  T793] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec
[  402.343438][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6906'.
[  402.728304][T24377] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  402.728331][T24378] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  403.377994][T24382] wg1 speed is unknown, defaulting to 1000
[  403.652405][T24392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.800246][T24407] validate_nla: 2 callbacks suppressed
[  403.800257][T24407] netlink: 'syz.1.6921': attribute type 6 has an invalid length.
[  403.809882][T24407] netlink: 'syz.1.6921': attribute type 12 has an invalid length.
[  403.914216][T24410] bond8: option mode: unable to set because the bond device is up
[  403.923547][T24410] bond8: (slave macvlan10): Enslaving as a backup interface with a down link
[  403.932500][T24410] bond8: (slave macvlan10): Releasing backup interface
[  404.536607][T24435] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  404.542696][T24435] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  404.549672][T24435] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  404.552128][T24435] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  404.604096][T24440] netlink: 'syz.0.6930': attribute type 10 has an invalid length.
[  404.977919][T24478] netlink: 'syz.0.6941': attribute type 6 has an invalid length.
[  405.041022][T24486] tc_dump_action: action bad kind
[  405.045239][T24486] netlink: 'syz.0.6943': attribute type 9 has an invalid length.
[  405.132077][T24495] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  405.136688][T24497] netlink: 'syz.1.6947': attribute type 10 has an invalid length.
[  405.312958][T24517] wg1 speed is unknown, defaulting to 1000
[  405.340930][T24526] netlink: 'syz.0.6956': attribute type 5 has an invalid length.
[  405.360669][T24528] bond22: (slave veth23): Releasing backup interface
[  405.379330][T24528] bond10: (slave macvlan6): Releasing backup interface
[  405.448588][T24529] netlink: 'syz.0.6956': attribute type 12 has an invalid length.
[  405.642897][ T5900] page_pool_release_retry() stalled pool shutdown: id 26, 3329 inflight 302 sec
[  405.867132][T24547] team0: Mode changed to "broadcast"
[  405.927377][T24547] tipc: Enabled bearer <eth:team0>, priority 0
[  405.952950][T24554] wg1 speed is unknown, defaulting to 1000
[  405.970246][T24553] wg1 speed is unknown, defaulting to 1000
[  406.015381][T24559] mac80211_hwsim hwsim195 wlan1: left allmulticast mode
[  406.034957][T24559] netlink: 'syz.2.6967': attribute type 10 has an invalid length.
[  406.407472][T24574] __nla_validate_parse: 8 callbacks suppressed
[  406.407481][T24574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6972'.
[  406.502237][T24582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6975'.
[  406.734849][T24604] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  406.814841][T24605] netlink: 'syz.0.6979': attribute type 12 has an invalid length.
[  406.817662][T24605] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6979'.
[  406.966873][T24619] wg1 speed is unknown, defaulting to 1000
[  407.086362][T24626] vlan2: entered allmulticast mode
[  407.088130][T24626] bridge_slave_0: entered allmulticast mode
[  407.136262][T24627] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6987'.
[  407.231770][T24631] wg1 speed is unknown, defaulting to 1000
[  407.518140][T24631] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6988'.
[  407.584657][T24642] wg1 speed is unknown, defaulting to 1000
[  407.724412][T24652] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6996'.
[  407.998302][T24661] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  408.286589][T24680] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7004'.
[  408.423057][T24692] vlan0: left promiscuous mode
[  408.455560][T24692] mac80211_hwsim hwsim246 wlan1: left allmulticast mode
[  408.464096][T24692] vlan1: left allmulticast mode
[  408.525594][T24697] wg1 speed is unknown, defaulting to 1000
[  408.707575][T24701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7008'.
[  408.731292][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7010'.
[  408.808249][T24709] 8021q: adding VLAN 0 to HW filter on device bond24
[  408.816106][T24709] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  409.055170][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7012'.
[  409.338230][T24727] wg1 speed is unknown, defaulting to 1000
[  409.456790][T24743] validate_nla: 5 callbacks suppressed
[  409.456804][T24743] netlink: 'syz.0.7015': attribute type 2 has an invalid length.
[  409.516023][T24745] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002
[  409.622784][T24751] netlink: 'syz.2.7021': attribute type 1 has an invalid length.
[  409.625819][T24751] netlink: 'syz.2.7021': attribute type 1 has an invalid length.
[  409.663453][T24748] netlink: 'syz.1.7020': attribute type 10 has an invalid length.
[  409.690972][T24756] netlink: 'syz.2.7022': attribute type 10 has an invalid length.
[  409.736176][T24758] netlink: 'syz.1.7023': attribute type 1 has an invalid length.
[  409.787197][T24760] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  409.820347][T24760] syzkaller0: entered promiscuous mode
[  409.826423][T24760] syzkaller0: entered allmulticast mode
[  409.830071][T24764] netlink: 'syz.1.7026': attribute type 12 has an invalid length.
[  410.184524][T24789] veth23: left promiscuous mode
[  410.290223][T24795] team0: Unable to change to the same mode the team is in
[  410.294325][T24795] vlan0: entered promiscuous mode
[  410.297969][T24795] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  410.407269][T24802] netlink: 'syz.0.7036': attribute type 9 has an invalid length.
[  410.885249][T24823] wg1 speed is unknown, defaulting to 1000
[  410.890202][T24826] netlink: 'syz.0.7043': attribute type 10 has an invalid length.
[  411.116048][T24843] netlink: 'syz.0.7048': attribute type 11 has an invalid length.
[  411.275437][T24856] netlink: 'syz.1.7053': attribute type 9 has an invalid length.
[  411.320848][   T33] audit: type=1800 audit(1757238571.752:14): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7053" name="blkio.bfq.time_recursive" dev="tmpfs" ino=11860 res=0 errno=0
[  411.328174][   T33] audit: type=1800 audit(1757238571.752:15): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7053" name="blkio.bfq.time_recursive" dev="tmpfs" ino=11860 res=0 errno=0
[  411.422252][T24857] __nla_validate_parse: 11 callbacks suppressed
[  411.422262][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'.
[  411.558121][T24885] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002
[  411.581669][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7062'.
[  411.607518][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7064'.
[  411.637486][T24889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7063'.
[  411.744216][T24908] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7069'.
[  411.773123][T24910] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7070'.
[  411.865114][T24911] geneve3: entered promiscuous mode
[  411.936938][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7071'.
[  412.245248][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7077'.
[  412.252785][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7077'.
[  412.638372][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7083'.
[  412.779055][T24957] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  412.784367][T24957] bond2: (slave macvlan4): Enslaving as a backup interface with a down link
[  412.789152][T24957] bond2: (slave macvlan4): Releasing backup interface
[  413.167437][T24981] wg1 speed is unknown, defaulting to 1000
[  413.171746][T24979] wg1 speed is unknown, defaulting to 1000
[  413.964387][T24998] mac80211_hwsim hwsim249 wlan1: entered allmulticast mode
[  414.113303][T25007] wg1 speed is unknown, defaulting to 1000
[  414.739143][T25033] validate_nla: 10 callbacks suppressed
[  414.739155][T25033] netlink: 'syz.2.7108': attribute type 10 has an invalid length.
[  414.744864][T25033] netlink: 'syz.2.7108': attribute type 10 has an invalid length.
[  414.776430][T25034] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  414.949973][T25053] netlink: 'syz.2.7114': attribute type 1 has an invalid length.
[  414.956317][T25053] netlink: 'syz.2.7114': attribute type 1 has an invalid length.
[  414.965301][T25054] netlink: 'syz.2.7114': attribute type 1 has an invalid length.
[  414.969059][T25054] netlink: 'syz.2.7114': attribute type 1 has an invalid length.
[  414.976570][T25045] netlink: 'syz.0.7109': attribute type 10 has an invalid length.
[  415.061541][T25054] netlink: 'syz.2.7114': attribute type 1 has an invalid length.
[  415.086721][T25054] 8021q: adding VLAN 0 to HW filter on device bond25
[  415.349055][T25075] bridge: RTM_NEWNEIGH with invalid ether address
[  415.602280][T25089] netlink: 'syz.2.7124': attribute type 8 has an invalid length.
[  415.794582][T25105] wg1 speed is unknown, defaulting to 1000
[  415.975777][T25111] vlan0: left promiscuous mode
[  415.986930][T25111] mac80211_hwsim hwsim195 wlan1: left allmulticast mode
[  416.052479][T25118] wg1 speed is unknown, defaulting to 1000
[  416.373530][T25122] netlink: 'syz.1.7133': attribute type 2 has an invalid length.
[  416.610684][T25149] mac80211_hwsim hwsim249 wlan1: left allmulticast mode
[  416.976738][T25159] 8021q: adding VLAN 0 to HW filter on device bond26
[  416.992088][T25159] vlan2: entered allmulticast mode
[  416.995350][T25159] bond26: (slave vlan2): Opening slave failed
[  417.315176][T25181] __nla_validate_parse: 22 callbacks suppressed
[  417.315187][T25181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7146'.
[  417.611308][T25188] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.7150'.
[  417.936944][T25194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7151'.
[  417.962535][T25215] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (24)
[  418.052396][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7161'.
[  418.119282][T25233] netlink: del zone limit has 8 unknown bytes
[  418.150226][T25230] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7164'.
[  418.157084][T25233] veth11: entered promiscuous mode
[  418.221535][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'.
[  418.224832][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'.
[  418.236079][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'.
[  418.240607][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'.
[  418.251368][T25235] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7166'.
[  418.695507][T25282] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  418.698089][T25282] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  418.783945][T25288] wg1 speed is unknown, defaulting to 1000
[  418.916853][T25296] wg1 speed is unknown, defaulting to 1000
[  419.797087][T25323] validate_nla: 13 callbacks suppressed
[  419.797097][T25323] netlink: 'syz.1.7194': attribute type 1 has an invalid length.
[  419.862466][T25323] 8021q: adding VLAN 0 to HW filter on device bond20
[  420.056388][T25348] wg1 speed is unknown, defaulting to 1000
[  420.097363][T25356] veth1_vlan: left promiscuous mode
[  420.256701][T25358] 8021q: adding VLAN 0 to HW filter on device bond8
[  420.302677][T25358] bond8: (slave macvlan11): Enslaving as a backup interface with a down link
[  420.405852][T25365] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  420.487192][T25368] netlink: 'syz.1.7209': attribute type 11 has an invalid length.
[  420.896161][T25384] openvswitch: netlink: Multiple metadata blocks provided
[  420.902760][T25383] openvswitch: netlink: Multiple metadata blocks provided
[  421.045320][T25390] 8021q: VLANs not supported on ip_vti0
[  421.945623][T25404] netlink: 'syz.2.7221': attribute type 12 has an invalid length.
[  422.174365][T25421] netlink: 'syz.1.7225': attribute type 10 has an invalid length.
[  422.177153][T25422] netlink: 'syz.1.7225': attribute type 10 has an invalid length.
[  422.206026][T25428] netlink: 'syz.2.7226': attribute type 10 has an invalid length.
[  422.267634][T25432] wg1 speed is unknown, defaulting to 1000
[  422.368927][T25435] netlink: 'syz.2.7227': attribute type 10 has an invalid length.
[  422.475782][T25432] netlink: 'syz.1.7228': attribute type 2 has an invalid length.
[  422.482136][T25432] __nla_validate_parse: 13 callbacks suppressed
[  422.482144][T25432] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7228'.
[  422.876495][T25443] netlink: 'syz.0.7230': attribute type 12 has an invalid length.
[  422.879984][T25443] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.7230'.
[  422.984914][T25448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7232'.
[  422.993454][T25449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7232'.
[  423.086974][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'.
[  423.165739][T25463] netlink: 'syz.0.7235': attribute type 6 has an invalid length.
[  423.175238][T25461] wg1 speed is unknown, defaulting to 1000
[  423.370447][T25473] wg1 speed is unknown, defaulting to 1000
[  423.377927][T25469] netlink: 'syz.2.7234': attribute type 2 has an invalid length.
[  423.416488][T25469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7234'.
[  423.736887][T25494] bond8: option mode: unable to set because the bond device has slaves
[  423.757763][T25494] bond8: (slave macvlan12): Error -98 calling set_mac_address
[  423.801578][T25495] bond8: (slave macvlan11): Releasing backup interface
[  424.043284][T25503] mac80211_hwsim hwsim336 wlan1: entered allmulticast mode
[  424.081716][T25507] mac80211_hwsim hwsim346 wlan1: entered allmulticast mode
[  424.110384][T25514] mac80211_hwsim hwsim346 wlan1: left allmulticast mode
[  424.270496][T25532] mac80211_hwsim hwsim271 wlan0: entered promiscuous mode
[  424.273302][T25532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  424.337380][T25536] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  424.614051][T25559] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7262'.
[  424.842122][T25569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7267'.
[  424.882652][T25571] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  425.120111][T25578] 8021q: adding VLAN 0 to HW filter on device bond10
[  425.390183][T25580] wg1 speed is unknown, defaulting to 1000
[  425.446472][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7273'.
[  425.487886][T25582] validate_nla: 4 callbacks suppressed
[  425.487902][T25582] netlink: 'syz.1.7272': attribute type 2 has an invalid length.
[  425.717896][T25591] IPVS: Unknown mcast interface: veth1_virt_wifi
[  425.857955][T25601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7278'.
[  425.987460][T25605] bond10: option mode: unable to set because the bond device is up
[  425.994515][T25604] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  425.997679][T25604] bond10: (slave macvlan7): Enslaving as a backup interface with a down link
[  426.128123][T25617] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  426.137831][T25617] bond10: (slave macvlan7): Releasing backup interface
[  426.153132][T25619] mac80211_hwsim hwsim271 wlan0: left promiscuous mode
[  427.361635][T25655] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  427.366395][T25655] bond2: (slave macvlan5): Enslaving as a backup interface with a down link
[  427.373348][T25656] bond2: (slave macvlan5): Releasing backup interface
[  427.597286][T25670] mac80211_hwsim hwsim336 wlan1: left allmulticast mode
[  427.967765][T25680] netlink: 'syz.2.7304': attribute type 10 has an invalid length.
[  428.039731][T25682] __nla_validate_parse: 4 callbacks suppressed
[  428.039747][T25682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7305'.
[  428.330831][T25686] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  428.387069][T25693] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.7308'.
[  428.460512][T25699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7310'.
[  428.491358][T25701] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  428.493699][T25701] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  428.676310][T25711] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  428.769975][T25723] wg1 speed is unknown, defaulting to 1000
[  428.777123][T25722] wg1 speed is unknown, defaulting to 1000
[  429.362075][T25732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7319'.
[  429.531721][T25738] netlink: 'syz.1.7322': attribute type 1 has an invalid length.
[  429.545403][T25738] netlink: 'syz.1.7322': attribute type 1 has an invalid length.
[  429.591623][T25736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7321'.
[  429.653486][T25747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7321'.
[  429.826540][T25773] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7330'.
[  429.884667][T25768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7326'.
[  429.974133][T25785] netlink: 'syz.2.7334': attribute type 1 has an invalid length.
[  430.020331][T25788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7336'.
[  430.025218][T25785] 8021q: adding VLAN 0 to HW filter on device bond27
[  430.054046][T25785] veth25: entered promiscuous mode
[  430.060032][T25785] bond27: (slave veth25): Enslaving as a backup interface with a down link
[  430.071300][T25785] bond27: (slave veth25): Releasing backup interface
[  430.080197][T25792] wg1 speed is unknown, defaulting to 1000
[  430.238388][T25805] netlink: 'syz.2.7341': attribute type 4 has an invalid length.
[  430.254048][T25805] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7341'.
[  430.280168][T25797] netlink: 'syz.0.7337': attribute type 2 has an invalid length.
[  430.365796][T25812] netlink: 'syz.1.7343': attribute type 1 has an invalid length.
[  430.418376][T25816] netlink: 'syz.2.7344': attribute type 12 has an invalid length.
[  430.839113][T25857] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  430.901504][T25865] wg1 speed is unknown, defaulting to 1000
[  430.961744][T25871] mac80211_hwsim hwsim195 wlan1: entered allmulticast mode
[  430.982298][T25871] netlink: 'syz.2.7360': attribute type 10 has an invalid length.
[  430.990812][T25871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.994023][T25871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  431.035216][T25869] netlink: 'syz.0.7357': attribute type 2 has an invalid length.
[  431.227886][T25880] netlink: 'syz.0.7363': attribute type 6 has an invalid length.
[  431.375388][T25893] nftables ruleset with unbound set
[  431.437803][T25893] wg1 speed is unknown, defaulting to 1000
[  431.929302][T25902] netlink: 'syz.0.7369': attribute type 12 has an invalid length.
[  432.065615][T25925] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  432.071842][T25925] CPU: 1 UID: 0 PID: 25925 Comm: syz.2.7375 Not tainted syzkaller #0 PREEMPT(full) 
[  432.071858][T25925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.071865][T25925] Call Trace:
[  432.071870][T25925]  <TASK>
[  432.071875][T25925]  dump_stack_lvl+0x189/0x250
[  432.071897][T25925]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.071911][T25925]  ? __pfx__printk+0x10/0x10
[  432.071932][T25925]  ? kernfs_path_from_node+0x2f/0x290
[  432.071945][T25925]  ? kernfs_path_from_node+0x250/0x290
[  432.071956][T25925]  ? kernfs_path_from_node+0x2f/0x290
[  432.071971][T25925]  sysfs_warn_dup+0x8e/0xa0
[  432.071984][T25925]  sysfs_do_create_link_sd+0xc0/0x110
[  432.071998][T25925]  device_add_class_symlinks+0x1cf/0x240
[  432.072014][T25925]  device_add+0x475/0xb50
[  432.072030][T25925]  wiphy_register+0x1ba6/0x28d0
[  432.072060][T25925]  ? __pfx_wiphy_register+0x10/0x10
[  432.072076][T25925]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  432.072096][T25925]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  432.072114][T25925]  ieee80211_register_hw+0x3425/0x4080
[  432.072141][T25925]  ? ieee80211_register_hw+0x1461/0x4080
[  432.072161][T25925]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  432.072177][T25925]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  432.072199][T25925]  ? __hrtimer_setup+0x187/0x210
[  432.072210][T25925]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  432.072228][T25925]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  432.072266][T25925]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  432.072280][T25925]  ? trace_kmalloc+0x1f/0xd0
[  432.072293][T25925]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  432.072308][T25925]  ? kstrndup+0xbf/0x160
[  432.072328][T25925]  hwsim_new_radio_nl+0xea4/0x1b10
[  432.072345][T25925]  ? __pfx___nla_validate_parse+0x10/0x10
[  432.072374][T25925]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  432.072399][T25925]  ? __nla_parse+0x40/0x60
[  432.072419][T25925]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  432.072473][T25925]  genl_family_rcv_msg_doit+0x215/0x300
[  432.072493][T25925]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  432.072517][T25925]  ? bpf_lsm_capable+0x9/0x20
[  432.072532][T25925]  ? security_capable+0x7e/0x2e0
[  432.072554][T25925]  genl_rcv_msg+0x60e/0x790
[  432.072574][T25925]  ? __pfx_genl_rcv_msg+0x10/0x10
[  432.072586][T25925]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  432.072611][T25925]  netlink_rcv_skb+0x208/0x470
[  432.072627][T25925]  ? __lock_acquire+0xab9/0xd20
[  432.072643][T25925]  ? __pfx_genl_rcv_msg+0x10/0x10
[  432.072656][T25925]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  432.072688][T25925]  ? down_read+0x1ad/0x2e0
[  432.072702][T25925]  genl_rcv+0x28/0x40
[  432.072714][T25925]  netlink_unicast+0x82f/0x9e0
[  432.072737][T25925]  ? __pfx_netlink_unicast+0x10/0x10
[  432.072755][T25925]  ? netlink_sendmsg+0x642/0xb30
[  432.072784][T25925]  ? skb_put+0x11b/0x210
[  432.072800][T25925]  netlink_sendmsg+0x805/0xb30
[  432.072819][T25925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.072833][T25925]  ? aa_sock_msg_perm+0xf1/0x1d0
[  432.072847][T25925]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  432.072859][T25925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.072871][T25925]  __sock_sendmsg+0x21c/0x270
[  432.072889][T25925]  ____sys_sendmsg+0x505/0x830
[  432.072908][T25925]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.072928][T25925]  ? import_iovec+0x74/0xa0
[  432.072946][T25925]  ___sys_sendmsg+0x21f/0x2a0
[  432.072960][T25925]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.073002][T25925]  ? __fget_files+0x2a/0x420
[  432.073013][T25925]  ? __fget_files+0x3a0/0x420
[  432.073032][T25925]  __x64_sys_sendmsg+0x19b/0x260
[  432.073047][T25925]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.073069][T25925]  ? rcu_is_watching+0x15/0xb0
[  432.073085][T25925]  ? do_syscall_64+0xbe/0x3b0
[  432.073100][T25925]  do_syscall_64+0xfa/0x3b0
[  432.073109][T25925]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.073125][T25925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.073136][T25925]  ? exc_page_fault+0x9f/0xf0
[  432.073154][T25925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.073164][T25925] RIP: 0033:0x7f9acd78ebe9
[  432.073176][T25925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.073185][T25925] RSP: 002b:00007f9ace5bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.073198][T25925] RAX: ffffffffffffffda RBX: 00007f9acd9c6090 RCX: 00007f9acd78ebe9
[  432.073207][T25925] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  432.073214][T25925] RBP: 00007f9acd811e19 R08: 0000000000000000 R09: 0000000000000000
[  432.073220][T25925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.073227][T25925] R13: 00007f9acd9c6128 R14: 00007f9acd9c6090 R15: 00007ffff0c3b098
[  432.073249][T25925]  </TASK>
Connection to localhost closed by remote host.
[  432.432461][T25936] gre0: entered promiscuous mode
[  432.833847][ T5851] syz_tun (unregistering): left allmulticast mode
[  433.263097][ T5861] ip6_vti0 (unregistering): left allmulticast mode
[  433.516535][ T5861] bond1 (unregistering): Released all slaves
[  433.607522][ T5861] bond0 (unregistering): Released all slaves
[  433.614736][ T5861] bond2 (unregistering): Released all slaves
[  433.626551][ T5861] bond3 (unregistering): Released all slaves
[  433.697641][ T5861] bond4 (unregistering): Released all slaves
[  433.767334][ T5861] bond5 (unregistering): Released all slaves
[  433.839270][ T5861] bond6 (unregistering): Released all slaves
[  433.911710][ T5861] bond7 (unregistering): Released all slaves
[  433.987611][ T5861] bond8 (unregistering): Released all slaves
[  434.059468][ T5861] bond9 (unregistering): Released all slaves
[  434.132341][ T5861] bond10 (unregistering): Released all slaves
[  434.206040][ T5861] bond11 (unregistering): Released all slaves
[  434.212811][ T5861] bond12 (unregistering): Released all slaves
[  434.281009][ T5861] bond13 (unregistering): Released all slaves
[  434.345728][ T5861] bond14 (unregistering): Released all slaves
[  434.352590][ T5861] bond15 (unregistering): Released all slaves
[  434.422505][ T5861] bond16 (unregistering): Released all slaves
[  434.489805][ T5861] bond17 (unregistering): Released all slaves
[  434.558360][ T5861] bond18 (unregistering): Released all slaves
[  434.632231][ T5861] bond19 (unregistering): Released all slaves
[  434.697812][ T5861] bond20 (unregistering): Released all slaves
[  434.824355][ T5861] : left promiscuous mode
[  434.910728][ T5861] : left promiscuous mode
[  434.969385][ T5861] tipc: Left network mode
[  434.989259][ T5861] IPVS: stopping backup sync thread 10139 ...
[  438.135451][ T5861] batadv_slave_0: left promiscuous mode
[  438.141302][ T5861] hsr_slave_0: left promiscuous mode
[  438.144098][ T5861] hsr_slave_1: left promiscuous mode
[  438.262968][ T1092] smc: removing ib device syz2
[  438.987063][ T5861] IPVS: stop unused estimator thread 0...
[  439.044933][ T5861] ------------[ cut here ]------------
[  439.046936][ T5861] WARNING: CPU: 1 PID: 5861 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  439.050419][ T5861] Modules linked in:
[  439.052199][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  439.056090][ T5861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.059681][ T5861] Workqueue: netns cleanup_net
[  439.061314][ T5861] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  439.063158][ T5861] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  439.070047][ T5861] RSP: 0018:ffffc900034ef898 EFLAGS: 00010293
[  439.072645][ T5861] RAX: ffffffff8a22456c RBX: ffff88810a6a8000 RCX: ffff888022435640
[  439.075931][ T5861] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888022435640
[  439.078907][ T5861] RBP: ffffc900034ef9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  439.081828][ T5861] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  439.084541][ T5861] R13: 1ffff9200069df40 R14: ffff88810a6a9480 R15: dffffc0000000000
[  439.087250][ T5861] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  439.090515][ T5861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.092766][ T5861] CR2: 00007f9ace4f7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  439.095513][ T5861] Call Trace:
[  439.096651][ T5861]  <TASK>
[  439.097640][ T5861]  xfrm_net_exit+0x2d/0x70
[  439.099671][ T5861]  ops_undo_list+0x49a/0x990
[  439.101698][ T5861]  ? __pfx_ops_undo_list+0x10/0x10
[  439.103795][ T5861]  ? do_raw_spin_unlock+0x4d/0x240
[  439.105974][ T5861]  cleanup_net+0x4c5/0x800
[  439.107852][ T5861]  ? __pfx_cleanup_net+0x10/0x10
[  439.109963][ T5861]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.112180][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  439.114626][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  439.117106][ T5861]  process_scheduled_works+0xae1/0x17b0
[  439.119559][ T5861]  ? __pfx_process_scheduled_works+0x10/0x10
[  439.122110][ T5861]  worker_thread+0x8a0/0xda0
[  439.124189][ T5861]  kthread+0x711/0x8a0
[  439.126009][ T5861]  ? __pfx_worker_thread+0x10/0x10
[  439.128272][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.130437][ T5861]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.132698][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.134884][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.136860][ T5861]  ret_from_fork+0x3fc/0x770
[  439.139011][ T5861]  ? __pfx_ret_from_fork+0x10/0x10
[  439.141273][ T5861]  ? __switch_to_asm+0x39/0x70
[  439.143379][ T5861]  ? __switch_to_asm+0x33/0x70
[  439.145451][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.147426][ T5861]  ret_from_fork_asm+0x1a/0x30
[  439.149514][ T5861]  </TASK>
[  439.150835][ T5861] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  439.153936][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  439.158008][ T5861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.162107][ T5861] Workqueue: netns cleanup_net
[  439.163985][ T5861] Call Trace:
[  439.165427][ T5861]  <TASK>
[  439.166681][ T5861]  dump_stack_lvl+0x99/0x250
[  439.168647][ T5861]  ? __asan_memcpy+0x40/0x70
[  439.170581][ T5861]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.172813][ T5861]  ? __pfx__printk+0x10/0x10
[  439.174687][ T5861]  vpanic+0x281/0x750
[  439.176303][ T5861]  ? __pfx__printk+0x10/0x10
[  439.178224][ T5861]  ? __pfx_vpanic+0x10/0x10
[  439.180121][ T5861]  ? is_bpf_text_address+0x292/0x2b0
[  439.182379][ T5861]  panic+0xb9/0xc0
[  439.183760][ T5861]  ? __pfx_panic+0x10/0x10
[  439.185293][ T5861]  __warn+0x31b/0x4b0
[  439.186670][ T5861]  ? xfrm_state_fini+0x26d/0x2f0
[  439.188366][ T5861]  ? xfrm_state_fini+0x26d/0x2f0
[  439.190086][ T5861]  report_bug+0x2be/0x4f0
[  439.191576][ T5861]  ? xfrm_state_fini+0x26d/0x2f0
[  439.193241][ T5861]  ? xfrm_state_fini+0x26d/0x2f0
[  439.194922][ T5861]  ? xfrm_state_fini+0x26f/0x2f0
[  439.196586][ T5861]  handle_bug+0x84/0x160
[  439.198009][ T5861]  exc_invalid_op+0x1a/0x50
[  439.199557][ T5861]  asm_exc_invalid_op+0x1a/0x20
[  439.201202][ T5861] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  439.203012][ T5861] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  439.209901][ T5861] RSP: 0018:ffffc900034ef898 EFLAGS: 00010293
[  439.212093][ T5861] RAX: ffffffff8a22456c RBX: ffff88810a6a8000 RCX: ffff888022435640
[  439.214748][ T5861] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888022435640
[  439.217649][ T5861] RBP: ffffc900034ef9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  439.220314][ T5861] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  439.223231][ T5861] R13: 1ffff9200069df40 R14: ffff88810a6a9480 R15: dffffc0000000000
[  439.225856][ T5861]  ? xfrm_state_fini+0x26c/0x2f0
[  439.227740][ T5861]  ? xfrm_state_fini+0x26c/0x2f0
[  439.229677][ T5861]  xfrm_net_exit+0x2d/0x70
[  439.231493][ T5861]  ops_undo_list+0x49a/0x990
[  439.233095][ T5861]  ? __pfx_ops_undo_list+0x10/0x10
[  439.234828][ T5861]  ? do_raw_spin_unlock+0x4d/0x240
[  439.236685][ T5861]  cleanup_net+0x4c5/0x800
[  439.238244][ T5861]  ? __pfx_cleanup_net+0x10/0x10
[  439.239914][ T5861]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.241672][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  439.243567][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  439.245463][ T5861]  process_scheduled_works+0xae1/0x17b0
[  439.247323][ T5861]  ? __pfx_process_scheduled_works+0x10/0x10
[  439.249408][ T5861]  worker_thread+0x8a0/0xda0
[  439.251009][ T5861]  kthread+0x711/0x8a0
[  439.252583][ T5861]  ? __pfx_worker_thread+0x10/0x10
[  439.254704][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.256521][ T5861]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.258316][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.260400][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.262179][ T5861]  ret_from_fork+0x3fc/0x770
[  439.264041][ T5861]  ? __pfx_ret_from_fork+0x10/0x10
[  439.266187][ T5861]  ? __switch_to_asm+0x39/0x70
[  439.268186][ T5861]  ? __switch_to_asm+0x33/0x70
[  439.270200][ T5861]  ? __pfx_kthread+0x10/0x10
[  439.272135][ T5861]  ret_from_fork_asm+0x1a/0x30
[  439.274149][ T5861]  </TASK>
[  439.275936][ T5861] Kernel Offset: disabled
[  439.277422][ T5861] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:49:59  Registers:
info registers vcpu 0

CPU#0
RAX=d81d88f0d872e300 RBX=ffffffff819683c8 RCX=d81d88f0d872e300 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007380 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000002857bffa 000000000000002c XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034ef030
R8 =ffff888021010237 R9 =1ffff11004202046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8f6 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ace4f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000029cfe586 0000000000000027 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
