last executing test programs:

1.986700879s ago: executing program 2 (id=24136):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0))
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x73, 0xb, 0xc, 0x8, 0x0, 0x102})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca}, 0x94)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r4, 0x331, 0x4, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) (async)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x73, 0xb, 0xc, 0x8, 0x0, 0x102}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca}, 0x94) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r4, 0x331, 0x4, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x40800) (async)

1.906881525s ago: executing program 2 (id=24138):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x2100, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388)

1.833440555s ago: executing program 2 (id=24140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/181, 0xb5}], 0x2)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x7ff}, {0x6d, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xfffffffffffffe40, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x803ff, 0x6}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0)

1.832224996s ago: executing program 2 (id=24142):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x40044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004091}, 0x4000080)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f000000a640)={0x0, 0x0, &(0x7f000000a600)={&(0x7f000000a580)=ANY=[@ANYBLOB="440000000406050000000000000000000000000a0900020073797a1700000000050001000700000005000100070000000900020073797a3000000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004855}, 0x24004020)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000080))
r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)

1.112518888s ago: executing program 1 (id=24157):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001940)=[{&(0x7f00000002c0)="6ff4cd99a1a6a39f37c5d989f0435763e21814a002a4456e9606cb4683b87f2a26bc192c9659b90303ec05f7ad51672e4b0ea08b964e10130234669724c7ff8ac33a741bed08fc65fba3466b5e69eadcf36b747c4e43146b2b71480b30f63b365cac3c804e55b71573111ba58b64742ba14f708a7d633dff0eda07f99f463b0712c014aeacd3f81080cf55cf1e088fe0f9478a1bf1655d3b1a0102a7422e0c28ebc79116237a9a688bbd26bdf946e23c100d98e6ef", 0xb5}, {&(0x7f0000000240)="3e57402a7923abf28579419b03ff206a2ea39f705976bf577bbf73759dc5a78995596de6a1ed8ed7c9f8ac5602202e794a787ba22766f35226de549bcedd3101", 0x40}, {&(0x7f0000001640)="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", 0xff}, {&(0x7f0000000500)="c9", 0x1}, {&(0x7f0000001740)="711640297c5e9fc6e2f378cf298f95c319b0ae523e7a8f8e280a7a4550c07e507bc098e404636f707ad4b30456d040f60aef32c43da927fec5c716468f741648a506e508aed29d18363f4d7109662cc056ed293adf3cae6382a8e1e929108233299b24037bf3eba837242f4d1bd2e9586873a5901ee402101e1fe290b895ec21c811fc7bac7a04e7f885606d5f16b0139178dedf1fe11c40006ef18d76427e05d7a55d72267ba820bd6292b0e88ba24c790591a58330ade326220df777a287f21d1951f25be539f2603ef35f53e59e3c5c27611b0f798b06d552", 0xda}, {&(0x7f0000001840)="2131c49c91c211808a1737aa80d45ee07571410166b94f3123f469f6a6dc113e99bd4d5acd53dd68222cca73317e7ae306873f7357067495bc9cf6070d6d9b7a1c150e05b4b3ad73a9a8332d9864f005a83b3dc3f05d5d8c8ef8c8de6076a1922d9a39a360f253f3b7f4a07a68ef7d3ae19bf49c40d5c23aaf871e177f4ac96b38f446c411db3e52a26c35424d4e076e93776e0a0aef61a3334778de781bf93969517700c90d862dc413e7f87f00a725eb237e6704cdcba42dbefcb75645224c30c17ab1aa", 0xc5}], 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="64000000000000000000000007000000830f90640101000a0101020a010101890f68ac1414bb0a0101026401010b0028d5e00000020a0101018bffffff440f71c97a5f5b66338e4b3055c3d9890be0ac1e0001ac1e0101440c7443ffffffff00007fff0000000000500000000000000000000000070000000717c3ac1e0101ac1e0001ac1414bbac1414aaffffffff440c63d1ac1e000100000f18000713bc7f00000164010102ac141421640101028907b5e00000010000140000000000000000000000020000000d00000000000000"], 0xd0}}], 0x1, 0x40000c0)

1.099131526s ago: executing program 1 (id=24159):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x8000)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400})
close(r8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, {0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x88, 0x41}], 0x2, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = accept4(r5, &(0x7f0000000440)=@caif, &(0x7f00000004c0)=0x80, 0x800)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x5, 0x1, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000040}, 0x44)
ioctl(r9, 0x8b2a, &(0x7f0000000040))
writev(r7, &(0x7f0000000100), 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2501000000050006000200000005008007217b10f2631d03000700000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="98a091a20e314cefb026a2c5dcca3e22900ee204ee9f0acb4ab7dd8090c47aa64361553c42bb3291ed7f8415a2d8cb7ac4e0020c534dd22c52a78168f52a7b7b0406454d138e00d99c11ed7d1d52b35b5bc8e825ab3f3b702c7d12d823122f0f60f3626d85b039358beaaa148b00eaf31f58bb119cb6263230a29643b89c95432cc01249e3c5f52bf3cb2fe0a4a8c990bc8eb86a2b8544a825f1c8d49d620f4573d53bc2495a61b0ffd37df894bfa5175812ee74140576f16ec374387ef406ef4b3b8562a08727573b217a9f1a648f52728c9aa2e947474dee26fe51a923e5090c", @ANYRES16=r6, @ANYBLOB="180229bd7000fcdbdf25030000000c0004000100000006000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
pipe(&(0x7f0000000200))
sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)

466.407935ms ago: executing program 2 (id=24162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$l2tp(0x2, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)

465.367548ms ago: executing program 2 (id=24164):
syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000b00)={0x28c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69de}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x288}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x526}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60329c80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x717d}]}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x820}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff494c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xebe}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x29b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4003ff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20008810}, 0x48040)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f00000000c0)=0xfffffffd, 0x4)
connect$l2tp(r5, &(0x7f0000000680)={0x2, 0x0, @remote, 0x2}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000), 0x4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0xb4, r4, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0a47969b9ab2a103828ac02a718feef6da9f22205ab3b290"}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

416.789954ms ago: executing program 0 (id=24165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

165.986616ms ago: executing program 0 (id=24166):
r0 = socket$netlink(0x10, 0x3, 0x12)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'nicvf0\x00', {0x44}, 0x85})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ip6gre0\x00', 0x800})
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x8becfcc58b14f4cc}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4004)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500)={0x6, 0x7, 0x8, 0x7d, 0x8, 0x5, 0x3, 0x5, 0xfe, 0x7, 0x3e, 0x0, 0x8, 0x5}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xb69, 0x7ff, 0x6, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4002090}, 0x31)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000006c0), 0x4)
getpeername$netlink(r3, &(0x7f0000000700), &(0x7f0000000740)=0xc)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000c5)
sendto(r0, &(0x7f0000000900)="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", 0xfc, 0x2044001, &(0x7f0000000a00)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_hsr\x00'}}, 0x80)
r6 = socket(0x9, 0x3, 0x1ff)
ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000a80)={'pim6reg\x00', 0x5, 0x9})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000e00)=0x4a, 0x4)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @usage, <r9=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001240)={<r10=>0x0, 0x5ea46fa2, 0x1, [0x7fffffff, 0x6, 0x3, 0x7fffffffffffffff, 0x5], [0x9, 0x5, 0x3df, 0x8000, 0x8, 0x1, 0x6, 0x7, 0x6, 0x1, 0x80, 0x10, 0x7, 0xe08, 0x101, 0x5, 0x2, 0x3, 0x2, 0xffff, 0x6ea6, 0x0, 0x9, 0x9c, 0x9c26, 0x9, 0x140000000000, 0x2, 0x6, 0x9dbc, 0x7ff, 0x523, 0x1, 0x6, 0x4, 0x401, 0x1, 0x8, 0x6, 0x6, 0x5, 0x8, 0x1, 0x0, 0xe, 0x6, 0x0, 0x1, 0x3ff, 0xffffffffffffffff, 0x0, 0xe4e, 0xe24, 0x200, 0x6, 0x3, 0x4, 0x6, 0xd9, 0xb3, 0x40, 0x1000, 0x5, 0xb, 0x4, 0x1, 0xe8f76e, 0x8, 0xcbce, 0x3, 0x5, 0x3, 0x59a, 0x8, 0x1, 0x101, 0x5, 0x26, 0x0, 0x8f54, 0x9, 0x4, 0xd4e5, 0x4, 0x20035e18, 0x7, 0x5, 0x2, 0x975, 0x2, 0xd, 0x8, 0x8, 0xfffffffffffeffff, 0x8, 0xd2c, 0x5, 0x1bf8, 0xe, 0x0, 0x3, 0x2, 0x800, 0x81, 0x2, 0x4, 0x1, 0x101, 0x63, 0x2, 0xfffffffffffffff9, 0x2f, 0x2, 0x41, 0x1, 0x8, 0x1, 0x6, 0x7ff, 0x8, 0x5]})
ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001680)={0x5, 0x2, {0xd5f, @usage=0xffffffffffffffe8, r9, 0x6, 0x3, 0x6, 0x0, 0xeece, 0x80, @usage=0x9, 0x49, 0x9827, [0xfffffffffffff801, 0x7fffffff, 0x3, 0x459, 0x6, 0x5]}, {0x5, @usage=0xffffffffffffffff, 0x0, 0x9, 0x101, 0x7, 0x800, 0x5, 0x50, @usage=0x2, 0x5, 0x7fff, [0x1, 0x9, 0x400, 0x5, 0x7fffffff, 0x911]}, {0x2, @struct={0x4, 0x9}, r10, 0x7, 0x0, 0x80000000, 0x5, 0x8, 0x4, @struct={0x0, 0x8}, 0x9, 0xfffffffc, [0x4, 0xceef, 0x80000000, 0x6, 0x200]}, {0x2, 0x9, 0x2}})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001a80)={{r6}, 0x0, 0x14, @unused=[0x5, 0x9, 0x9, 0x3], @subvolid=0x1})

165.618685ms ago: executing program 1 (id=24167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', <r5=>r2, 0x4, 0x3, 0xc, 0x7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x6, 0xb46}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="14000200626f6e64300000000000000000000000280001800800030001000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r5, @ANYBLOB], 0xa0}}, 0x48800)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000001e000000000063012000000000009500000000000000ad418cd9f68faaa819125f8402d064af6d0a650ebbd3010a84997248a2226a34baa14b62ffef40"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a05003c0012800e00010069703665727370616e000000280002800600030030000000140007002001000000000000000000000000000206000e0003020000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x9080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0xfffffffffffffe10, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
syz_emit_ethernet(0x4e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00090000000808004b0000400000000000069078ac1e0001ac141423890ba2e0000002ffffffff440405038606ffffffff0000004e22000074cdca13171048d26eec3c80bea9be4cab90f4671522ac6ba59194d973c07eddbd0034eed7661d335325e09463ba7ab06210be9fd1d451f88033ebab598280db211cd14d3f3ea90fcab4bc187ccf1e194447134c677f768de5f4450e3505d3266ac92f7ce4ca15ceb0ed6b9a9aac1d6363a6556a97aa0fb7bdfa81d3dff120a62a816426ab953c06d581183452a474502e010e535353669e3923329366a6c16ef81048b7bbd281b1aa180b491c78e9c6b966672750d20b9fa1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

165.432086ms ago: executing program 0 (id=24168):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001940)=[{&(0x7f00000002c0)="6ff4cd99a1a6a39f37c5d989f0435763e21814a002a4456e9606cb4683b87f2a26bc192c9659b90303ec05f7ad51672e4b0ea08b964e10130234669724c7ff8ac33a741bed08fc65fba3466b5e69eadcf36b747c4e43146b2b71480b30f63b365cac3c804e55b71573111ba58b64742ba14f708a7d633dff0eda07f99f463b0712c014aeacd3f81080cf55cf1e088fe0f9478a1bf1655d3b1a0102a7422e0c28ebc79116237a9a688bbd26bdf946e23c100d98e6ef", 0xb5}, {&(0x7f0000000240)="3e57402a7923abf28579419b03ff206a2ea39f705976bf577bbf73759dc5a78995596de6a1ed8ed7c9f8ac5602202e794a787ba22766f35226de549bcedd3101", 0x40}, {&(0x7f0000001640)="490b7bf92e8d1903bbee1417c22f87dfcba525856966ecd6e0533d9fb7548c3540f7c9ec4d7e8ea7619ae19ca62fe4e860e0c495338e92453bbbce298144f8d05ebfc2ded0aac99d18dbc790228dc5807d4a5b123e5b02835cd853b4e35e9a3e09c46f064053d3a2ebd8766c0952d95fd8396bc565afe56521f37600faf28eb31bf7e76504f1ed48900ece1a0c99d6ccc677b8bbcb638a70692a15ad7c77f73347feaeafe0048943626ec58272dd16dd013c6b2a46e099039ca3cfc6e1459868fadfbafcecec9de3b7d17a7c2cce59295689191e0488e3163e8779976754b0b555509578fa764ac8ead3e8da85f3fe99e33170d286c8b62f62ceb9a10c4d74", 0xff}, {&(0x7f0000000500)="c9", 0x1}, {&(0x7f0000001740)="711640297c5e9fc6e2f378cf298f95c319b0ae523e7a8f8e280a7a4550c07e507bc098e404636f707ad4b30456d040f60aef32c43da927fec5c716468f741648a506e508aed29d18363f4d7109662cc056ed293adf3cae6382a8e1e929108233299b24037bf3eba837242f4d1bd2e9586873a5901ee402101e1fe290b895ec21c811fc7bac7a04e7f885606d5f16b0139178dedf1fe11c40006ef18d76427e05d7a55d72267ba820bd6292b0e88ba24c790591a58330ade326220df777a287f21d1951f25be539f2603ef35f53e59e3c5c27611b0f798b06d552", 0xda}, {&(0x7f0000001840)="2131c49c91c211808a1737aa80d45ee07571410166b94f3123f469f6a6dc113e99bd4d5acd53dd68222cca73317e7ae306873f7357067495bc9cf6070d6d9b7a1c150e05b4b3ad73a9a8332d9864f005a83b3dc3f05d5d8c8ef8c8de6076a1922d9a39a360f253f3b7f4a07a68ef7d3ae19bf49c40d5c23aaf871e177f4ac96b38f446c411db3e52a26c35424d4e076e93776e0a0aef61a3334778de781bf93969517700c90d862dc413e7f87f00a725eb237e6704cdcba42dbefcb75645224c30c17ab1aa", 0xc5}], 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="64000000000000000000000007000000830f90640101000a0101020a010101890f68ac1414bb0a0101026401010b000fd5e06400020a0101018bffffff440f71c97a5f5b66338e4b3055c3d9890be0ac1e0001ac1e0101440c7443ffffffff00007fff0000000000500000000000000000000000070000000717c3ac1e0101ac1e0001ac1414bbac1414aaffffffff440c63d1ac1e000100000f18000713bc7f00000164010102ac141421640101028907b5e00000010000140000000000000000000000020000000d00000000000000"], 0xd0}}], 0x1, 0x40000c0)

111.67427ms ago: executing program 0 (id=24169):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6d13a20d015dc921e4"}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r6, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

66.205843ms ago: executing program 0 (id=24170):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="010000000d00040000003900000008000300", @ANYRES32=r2, @ANYBLOB="08005a800400038004005a8008015a803c000180140005000b0204"], 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)

65.901239ms ago: executing program 1 (id=24171):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$kcm(0x2, 0x3, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x400000000000000)

6.15732ms ago: executing program 1 (id=24172):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800090300400000000000000a0000000000000004000400080001000100000047ae02746ef3d02ea4281cdb2d6c3562d11ac27af80b8830fc25a0af3e27be1dc315a392ad2537796c52b6961ac612dc70789d7cc8e7b8bfa3df87fcb3c96a8bbdbdc305ffd847c59405a74613e1e8f34a821dae1300"/135], 0x24}}, 0x0)

782.917µs ago: executing program 0 (id=24173):
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{}, 0x0, 0x5, @unused=[0x80000000, 0x9, 0x9, 0x1a], @name="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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0xa8)

0s ago: executing program 1 (id=24174):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000340)=ANY=[@ANYBLOB="babe"], 0x18)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

kernel console output (not intermixed with test programs):

import_iovec+0x73/0xa0
[  891.838974][T25465]  ___sys_sendmsg+0x2a5/0x360
[  891.838998][T25465]  ? __pfx____sys_sendmsg+0x10/0x10
[  891.839024][T25465]  ? futex_wait+0x29a/0x380
[  891.839066][T25465]  ? __fget_files+0x2a/0x420
[  891.839083][T25465]  ? __fget_files+0x3a0/0x420
[  891.839121][T25465]  __x64_sys_sendmsg+0x1bd/0x2a0
[  891.839147][T25465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  891.839175][T25465]  ? rcu_is_watching+0x15/0xb0
[  891.839205][T25465]  do_syscall_64+0x14d/0xf80
[  891.839220][T25465]  ? trace_irq_disable+0x3b/0x150
[  891.839239][T25465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.839259][T25465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.839273][T25465] RIP: 0033:0x7f97d5b9c799
[  891.839288][T25465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.839302][T25465] RSP: 002b:00007f97d6a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  891.839319][T25465] RAX: ffffffffffffffda RBX: 00007f97d5e15fa0 RCX: 00007f97d5b9c799
[  891.839331][T25465] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  891.839339][T25465] RBP: 00007f97d5c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  891.839348][T25465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  891.839356][T25465] R13: 00007f97d5e16038 R14: 00007f97d5e15fa0 R15: 00007ffe15f3adc8
[  891.839382][T25465]  </TASK>
[  892.119571][ T5828] net_ratelimit: 73 callbacks suppressed
[  892.119588][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  892.124633][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  892.228314][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  892.230819][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  892.351313][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  892.372853][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  892.458421][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  892.468349][    C1] ip6_tunnel: ip6gretap9 xmit: Local address not yet configured!
[  892.478921][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  892.578303][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  892.588504][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  892.693821][T25534] wg1 speed is unknown, defaulting to 1000
[  892.872828][T25534] lo speed is unknown, defaulting to 1000
[  892.877970][T25547] __nla_validate_parse: 5 callbacks suppressed
[  892.877985][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22515'.
[  893.090488][T25558] 8021q: adding VLAN 0 to HW filter on device bond30
[  893.172690][T25558] batadv_slave_0: entered promiscuous mode
[  893.201590][T25554] wg1 speed is unknown, defaulting to 1000
[  893.204300][T25557] batadv_slave_0: left promiscuous mode
[  893.327982][T25567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22523'.
[  893.333201][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22523'.
[  893.340386][T25554] lo speed is unknown, defaulting to 1000
[  893.344460][T25565] xt_nat: multiple ranges no longer supported
[  893.369591][T25568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22524'.
[  893.586733][T25579] netlink: 'syz.2.22529': attribute type 10 has an invalid length.
[  893.594283][T25586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22531'.
[  893.598593][T25589] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  893.611884][T25579] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  893.627518][T25579] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  893.733236][T25597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22534'.
[  893.736663][T25598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22534'.
[  893.745212][T25597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[  893.753648][T25598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[  893.761214][T25597] netlink: 'syz.2.22534': attribute type 10 has an invalid length.
[  893.871720][T25611] netlink: 'syz.0.22537': attribute type 11 has an invalid length.
[  893.998232][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22543'.
[  894.352546][T25645] bridge35: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  894.915920][T25665] wg1 speed is unknown, defaulting to 1000
[  895.179314][T25665] lo speed is unknown, defaulting to 1000
[  895.515205][T25679] netlink: 'syz.0.22555': attribute type 19 has an invalid length.
[  895.681249][T25684] sctp: [Deprecated]: syz.2.22556 (pid 25684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  895.681249][T25684] Use struct sctp_sack_info instead
[  895.764419][T25694] netlink: 'syz.0.22559': attribute type 11 has an invalid length.
[  895.834627][T25698] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  895.837758][T25698] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  896.104044][T25723] syzkaller1: left promiscuous mode
[  896.106153][T25723] syzkaller1: left allmulticast mode
[  896.109887][T25723] 8021q: VLANs not supported on syzkaller1
[  896.122198][T25725] netlink: 'syz.1.22571': attribute type 21 has an invalid length.
[  896.525646][T25750] sctp: [Deprecated]: syz.0.22580 (pid 25750) Use of struct sctp_assoc_value in delayed_ack socket option.
[  896.525646][T25750] Use struct sctp_sack_info instead
[  896.594259][T25754] bond30: entered allmulticast mode
[  896.604298][T25754] netlink: 'syz.0.22581': attribute type 4 has an invalid length.
[  896.607503][T25755] netlink: 'syz.0.22581': attribute type 4 has an invalid length.
[  896.619608][T25754] bridge33: entered promiscuous mode
[  896.621893][T25754] bridge33: entered allmulticast mode
[  896.627057][T25754] bond30: (slave bridge33): Enslaving as an active interface with an up link
[  897.090679][T25782] wg1 speed is unknown, defaulting to 1000
[  897.147514][T25791] ..0{X: refused to change device tx_queue_len
[  897.158699][T25791] net_ratelimit: 76 callbacks suppressed
[  897.158715][T25791] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check.
[  897.198424][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  897.202822][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  897.310672][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  897.313401][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  897.316158][T25782] lo speed is unknown, defaulting to 1000
[  897.478316][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  897.498221][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  897.544932][T25809] netlink: 'syz.0.22599': attribute type 3 has an invalid length.
[  897.630945][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  897.649327][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  897.666088][T25813] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  897.739819][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  897.787304][T25820] netlink: 'syz.0.22603': attribute type 10 has an invalid length.
[  897.844865][T25822] netlink: 'syz.2.22604': attribute type 10 has an invalid length.
[  897.941915][T25830] netlink: 'syz.2.22607': attribute type 2 has an invalid length.
[  897.944421][T25830] __nla_validate_parse: 22 callbacks suppressed
[  897.944434][T25830] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22607'.
[  898.241595][T25854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22613'.
[  898.480850][T25865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.22617'.
[  898.493175][T25865] .` (unregistering): Released all slaves
[  898.776787][T25879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22620'.
[  899.056761][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22629'.
[  899.061073][T25902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22629'.
[  899.135421][T25910] sctp: [Deprecated]: syz.2.22633 (pid 25910) Use of struct sctp_assoc_value in delayed_ack socket option.
[  899.135421][T25910] Use struct sctp_sack_info instead
[  899.170773][T25912] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  899.173705][T25912] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  899.281566][T25926] sctp: [Deprecated]: syz.0.22638 (pid 25926) Use of struct sctp_assoc_value in delayed_ack socket option.
[  899.281566][T25926] Use struct sctp_sack_info instead
[  899.291427][T25928] wg1 speed is unknown, defaulting to 1000
[  899.349059][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22640'.
[  899.384816][T25936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22643'.
[  899.405185][T25936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22643'.
[  899.529230][T25928] lo speed is unknown, defaulting to 1000
[  899.991507][T25970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22652'.
[  900.002985][T25970] xfrm1: entered allmulticast mode
[  900.177662][T25979] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  900.192355][T25978] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  900.302329][T25986] xt_l2tp: v2 sid > 0xffff: 4294967294
[  900.311462][T25988] validate_nla: 1 callbacks suppressed
[  900.311477][T25988] netlink: 'syz.0.22657': attribute type 6 has an invalid length.
[  900.320399][T25988] Bluetooth: MGMT ver 1.23
[  900.400235][T25991] wg1 speed is unknown, defaulting to 1000
[  900.433292][T25998] netlink: 'syz.2.22658': attribute type 3 has an invalid length.
[  900.599513][T25991] lo speed is unknown, defaulting to 1000
[  900.616824][T26007] netlink: 'syz.0.22663': attribute type 11 has an invalid length.
[  900.768002][T26014] wg1 speed is unknown, defaulting to 1000
[  901.033773][T26014] lo speed is unknown, defaulting to 1000
[  901.185812][T26035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  901.200780][T26035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  901.210840][T26033] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode
[  901.213157][T26033] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode
[  901.703123][T26042] wg1 speed is unknown, defaulting to 1000
[  901.823483][T26042] lo speed is unknown, defaulting to 1000
[  902.104405][T26047] wg1 speed is unknown, defaulting to 1000
[  902.145230][T26050] 8021q: VLANs not supported on syzkaller1
[  902.163713][T26051] 8021q: VLANs not supported on syzkaller1
[  902.199198][   T13] net_ratelimit: 73 callbacks suppressed
[  902.199216][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  902.204182][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  902.348513][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  902.368316][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  902.409344][T26047] lo speed is unknown, defaulting to 1000
[  902.479103][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  902.498325][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  902.588303][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  902.618280][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  902.698454][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  902.728310][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  903.116427][T26078] __nla_validate_parse: 8 callbacks suppressed
[  903.116444][T26078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22683'.
[  903.342034][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22685'.
[  903.345346][T26083] netlink: 'syz.0.22685': attribute type 21 has an invalid length.
[  903.658531][   T34] audit: type=1800 audit(1772584284.400:19): pid=26087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22686" name="memory.events" dev="tmpfs" ino=38391 res=0 errno=0
[  903.715448][T26093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22689'.
[  903.938312][T26110] netlink: 'syz.1.22693': attribute type 1 has an invalid length.
[  903.987271][T26119] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  904.001162][T26119] bond9: (slave lo): Enslaving as an active interface with an up link
[  904.004974][T21542] lo speed is unknown, defaulting to 1000
[  904.007299][   T32] lo speed is unknown, defaulting to 1000
[  904.010056][   T32] syz2: Port: 1 Link ACTIVE
[  904.014665][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.019241][T26115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22694'.
[  904.023017][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.025845][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.031257][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.047053][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.053295][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22695'.
[  904.096717][T26126] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  904.102865][T26126] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  904.311859][T26146] netlink: 'syz.1.22699': attribute type 1 has an invalid length.
[  904.501868][T26158] wg1 speed is unknown, defaulting to 1000
[  904.626864][T26158] lo speed is unknown, defaulting to 1000
[  905.009398][T26169] sctp: [Deprecated]: syz.2.22707 (pid 26169) Use of struct sctp_assoc_value in delayed_ack socket option.
[  905.009398][T26169] Use struct sctp_sack_info instead
[  905.103919][T26182] netlink: 'syz.2.22712': attribute type 1 has an invalid length.
[  905.140051][T26179] netlink: 'syz.0.22711': attribute type 11 has an invalid length.
[  905.373246][T26193] wg1 speed is unknown, defaulting to 1000
[  905.454839][T26198] netlink: 'syz.0.22717': attribute type 10 has an invalid length.
[  905.572545][T26193] lo speed is unknown, defaulting to 1000
[  905.655104][T26212] netlink: 'syz.0.22719': attribute type 1 has an invalid length.
[  906.317715][T26264] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  906.322233][T26264] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  906.920038][T26268] netlink: 'syz.0.22737': attribute type 11 has an invalid length.
[  906.963505][T26272] netlink: 'syz.0.22738': attribute type 1 has an invalid length.
[  907.175608][T26284] xt_l2tp: missing protocol rule (udp|l2tpip)
[  907.208438][   T13] net_ratelimit: 77 callbacks suppressed
[  907.209252][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  907.235841][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  907.272414][T26292] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  907.275349][T26292] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  907.282508][T26294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  907.318333][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  907.334775][T26296] netlink: 'syz.0.22747': attribute type 10 has an invalid length.
[  907.350617][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  907.428322][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  907.437241][T26302] wg1 speed is unknown, defaulting to 1000
[  907.468212][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  907.538260][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  907.578193][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  907.610310][T26302] lo speed is unknown, defaulting to 1000
[  907.617819][T26313] wg1 speed is unknown, defaulting to 1000
[  907.668225][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  907.688203][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  907.825302][T26313] lo speed is unknown, defaulting to 1000
[  908.004665][T26332] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode
[  908.008350][T26332] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode
[  908.194129][T26337] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  908.199809][T26337] CPU: 0 UID: 0 PID: 26337 Comm: syz.1.22760 Not tainted syzkaller #0 PREEMPT(full) 
[  908.199856][T26337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  908.199865][T26337] Call Trace:
[  908.199871][T26337]  <TASK>
[  908.199878][T26337]  dump_stack_lvl+0xe8/0x150
[  908.199903][T26337]  sysfs_warn_dup+0x8e/0xa0
[  908.199924][T26337]  sysfs_do_create_link_sd+0xc0/0x110
[  908.199944][T26337]  device_add_class_symlinks+0x1cf/0x240
[  908.199960][T26337]  device_add+0x475/0xb70
[  908.199981][T26337]  wiphy_register+0x1d73/0x2d50
[  908.200011][T26337]  ? __pfx_wiphy_register+0x10/0x10
[  908.200028][T26337]  ? __pfx_netdev_run_todo+0x10/0x10
[  908.200043][T26337]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  908.200065][T26337]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  908.200116][T26337]  ieee80211_register_hw+0x3562/0x4200
[  908.200143][T26337]  ? ieee80211_register_hw+0x1471/0x4200
[  908.200167][T26337]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  908.200200][T26337]  ? __hrtimer_setup+0x181/0x200
[  908.200218][T26337]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  908.200237][T26337]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  908.200274][T26337]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  908.200286][T26337]  ? kstrndup+0xbf/0x160
[  908.200311][T26337]  hwsim_new_radio_nl+0xf35/0x1bd0
[  908.200343][T26337]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  908.200364][T26337]  ? rcu_is_watching+0x15/0xb0
[  908.200383][T26337]  ? trace_kmalloc+0x2a/0x110
[  908.200402][T26337]  ? __nla_parse+0x40/0x60
[  908.200423][T26337]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  908.200450][T26337]  genl_family_rcv_msg_doit+0x22a/0x330
[  908.200474][T26337]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  908.200503][T26337]  ? bpf_lsm_capable+0x9/0x20
[  908.200520][T26337]  ? security_capable+0x7e/0x2c0
[  908.200542][T26337]  genl_rcv_msg+0x61c/0x7a0
[  908.200565][T26337]  ? __pfx_genl_rcv_msg+0x10/0x10
[  908.200584][T26337]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  908.200598][T26337]  ? __lock_acquire+0x6b5/0x2cf0
[  908.200624][T26337]  netlink_rcv_skb+0x232/0x4b0
[  908.200642][T26337]  ? __pfx_genl_rcv_msg+0x10/0x10
[  908.200662][T26337]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  908.200693][T26337]  ? down_read+0x272/0x2e0
[  908.200706][T26337]  ? genl_rcv+0xd/0x40
[  908.200726][T26337]  genl_rcv+0x28/0x40
[  908.200744][T26337]  netlink_unicast+0x80f/0x9b0
[  908.200766][T26337]  ? __pfx_netlink_unicast+0x10/0x10
[  908.200785][T26337]  ? netlink_sendmsg+0x650/0xb40
[  908.200799][T26337]  ? skb_put+0x11b/0x210
[  908.200822][T26337]  netlink_sendmsg+0x813/0xb40
[  908.200844][T26337]  ? __pfx_netlink_sendmsg+0x10/0x10
[  908.200864][T26337]  ? aa_sock_msg_perm+0xf1/0x1b0
[  908.200883][T26337]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  908.200899][T26337]  ? __pfx_netlink_sendmsg+0x10/0x10
[  908.200914][T26337]  ____sys_sendmsg+0xa68/0xad0
[  908.200932][T26337]  ? futex_unqueue+0x211/0x240
[  908.200955][T26337]  ? __pfx_____sys_sendmsg+0x10/0x10
[  908.200981][T26337]  ? import_iovec+0x73/0xa0
[  908.201003][T26337]  ___sys_sendmsg+0x2a5/0x360
[  908.201027][T26337]  ? __pfx____sys_sendmsg+0x10/0x10
[  908.201051][T26337]  ? futex_wait+0x29a/0x380
[  908.201116][T26337]  ? __fget_files+0x2a/0x420
[  908.201136][T26337]  ? __fget_files+0x3a0/0x420
[  908.201161][T26337]  __x64_sys_sendmsg+0x1bd/0x2a0
[  908.201189][T26337]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  908.201217][T26337]  ? rcu_is_watching+0x15/0xb0
[  908.201245][T26337]  do_syscall_64+0x14d/0xf80
[  908.201258][T26337]  ? trace_irq_disable+0x3b/0x150
[  908.201275][T26337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  908.201294][T26337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  908.201307][T26337] RIP: 0033:0x7fb51bf9c799
[  908.201321][T26337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  908.201332][T26337] RSP: 002b:00007fb51ce86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  908.201346][T26337] RAX: ffffffffffffffda RBX: 00007fb51c215fa0 RCX: 00007fb51bf9c799
[  908.201356][T26337] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  908.201365][T26337] RBP: 00007fb51c032bd9 R08: 0000000000000000 R09: 0000000000000000
[  908.201373][T26337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  908.201381][T26337] R13: 00007fb51c216038 R14: 00007fb51c215fa0 R15: 00007ffca152b3d8
[  908.201406][T26337]  </TASK>
[  908.269939][T26342] __nla_validate_parse: 22 callbacks suppressed
[  908.269954][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22760'.
[  908.454779][T26350] wg1 speed is unknown, defaulting to 1000
[  908.727282][T26350] lo speed is unknown, defaulting to 1000
[  908.756614][T26373] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  908.774916][T26373] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  909.171677][T26392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22774'.
[  909.403586][T26410] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:5
[  909.406700][T26410] netlink: 'syz.2.22779': attribute type 11 has an invalid length.
[  909.432579][T26410] bond31: entered allmulticast mode
[  909.481844][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22782'.
[  909.486824][T26415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22782'.
[  909.532689][T26419] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  909.536764][T26419] CPU: 1 UID: 0 PID: 26419 Comm: syz.1.22783 Not tainted syzkaller #0 PREEMPT(full) 
[  909.536784][T26419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  909.536793][T26419] Call Trace:
[  909.536800][T26419]  <TASK>
[  909.536807][T26419]  dump_stack_lvl+0xe8/0x150
[  909.536832][T26419]  sysfs_warn_dup+0x8e/0xa0
[  909.536851][T26419]  sysfs_do_create_link_sd+0xc0/0x110
[  909.536871][T26419]  device_add_class_symlinks+0x1cf/0x240
[  909.536888][T26419]  device_add+0x475/0xb70
[  909.536905][T26419]  wiphy_register+0x1d73/0x2d50
[  909.536937][T26419]  ? __pfx_wiphy_register+0x10/0x10
[  909.536954][T26419]  ? __pfx_netdev_run_todo+0x10/0x10
[  909.536996][T26419]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  909.537018][T26419]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  909.537043][T26419]  ieee80211_register_hw+0x3562/0x4200
[  909.537075][T26419]  ? ieee80211_register_hw+0x1471/0x4200
[  909.537099][T26419]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  909.537127][T26419]  ? __hrtimer_setup+0x181/0x200
[  909.537145][T26419]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  909.537164][T26419]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  909.537202][T26419]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  909.537215][T26419]  ? kstrndup+0xbf/0x160
[  909.537238][T26419]  hwsim_new_radio_nl+0xf35/0x1bd0
[  909.537269][T26419]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  909.537291][T26419]  ? rcu_is_watching+0x15/0xb0
[  909.537310][T26419]  ? trace_kmalloc+0x2a/0x110
[  909.537330][T26419]  ? __nla_parse+0x40/0x60
[  909.537352][T26419]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  909.537379][T26419]  genl_family_rcv_msg_doit+0x22a/0x330
[  909.537404][T26419]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  909.537435][T26419]  ? bpf_lsm_capable+0x9/0x20
[  909.537452][T26419]  ? security_capable+0x7e/0x2c0
[  909.537474][T26419]  genl_rcv_msg+0x61c/0x7a0
[  909.537499][T26419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  909.537517][T26419]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  909.537531][T26419]  ? __lock_acquire+0x6b5/0x2cf0
[  909.537558][T26419]  netlink_rcv_skb+0x232/0x4b0
[  909.537575][T26419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  909.537596][T26419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  909.537627][T26419]  ? down_read+0x272/0x2e0
[  909.537641][T26419]  ? genl_rcv+0xd/0x40
[  909.537661][T26419]  genl_rcv+0x28/0x40
[  909.537679][T26419]  netlink_unicast+0x80f/0x9b0
[  909.537701][T26419]  ? __pfx_netlink_unicast+0x10/0x10
[  909.537718][T26419]  ? netlink_sendmsg+0x650/0xb40
[  909.537732][T26419]  ? skb_put+0x11b/0x210
[  909.537755][T26419]  netlink_sendmsg+0x813/0xb40
[  909.537780][T26419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.537799][T26419]  ? aa_sock_msg_perm+0xf1/0x1b0
[  909.537818][T26419]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  909.537834][T26419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.537850][T26419]  ____sys_sendmsg+0xa68/0xad0
[  909.537878][T26419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  909.537904][T26419]  ? import_iovec+0x73/0xa0
[  909.537924][T26419]  ___sys_sendmsg+0x2a5/0x360
[  909.537947][T26419]  ? __pfx____sys_sendmsg+0x10/0x10
[  909.537997][T26419]  ? futex_wake+0x4ac/0x580
[  909.538058][T26419]  ? __fget_files+0x2a/0x420
[  909.538082][T26419]  ? __fget_files+0x3a0/0x420
[  909.538109][T26419]  __x64_sys_sendmsg+0x1bd/0x2a0
[  909.538131][T26419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  909.538159][T26419]  ? rcu_is_watching+0x15/0xb0
[  909.538188][T26419]  do_syscall_64+0x14d/0xf80
[  909.538200][T26419]  ? trace_irq_disable+0x3b/0x150
[  909.538219][T26419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.538237][T26419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.538251][T26419] RIP: 0033:0x7fb51bf9c799
[  909.538264][T26419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.538276][T26419] RSP: 002b:00007fb51ce86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.538292][T26419] RAX: ffffffffffffffda RBX: 00007fb51c215fa0 RCX: 00007fb51bf9c799
[  909.538302][T26419] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  909.538311][T26419] RBP: 00007fb51c032bd9 R08: 0000000000000000 R09: 0000000000000000
[  909.538319][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.538327][T26419] R13: 00007fb51c216038 R14: 00007fb51c215fa0 R15: 00007ffca152b3d8
[  909.538352][T26419]  </TASK>
[  909.814075][T26426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22783'.
[  909.910260][T26451] netlink: 'syz.1.22794': attribute type 11 has an invalid length.
[  909.973381][T26459] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  909.976397][T26459] CPU: 0 UID: 0 PID: 26459 Comm: syz.0.22797 Not tainted syzkaller #0 PREEMPT(full) 
[  909.976410][T26459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  909.976415][T26459] Call Trace:
[  909.976420][T26459]  <TASK>
[  909.976425][T26459]  dump_stack_lvl+0xe8/0x150
[  909.976442][T26459]  sysfs_warn_dup+0x8e/0xa0
[  909.976456][T26459]  sysfs_do_create_link_sd+0xc0/0x110
[  909.976469][T26459]  device_add_class_symlinks+0x1cf/0x240
[  909.976479][T26459]  device_add+0x475/0xb70
[  909.976489][T26459]  wiphy_register+0x1d73/0x2d50
[  909.976508][T26459]  ? __pfx_wiphy_register+0x10/0x10
[  909.976519][T26459]  ? __pfx_netdev_run_todo+0x10/0x10
[  909.976528][T26459]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  909.976542][T26459]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  909.976556][T26459]  ieee80211_register_hw+0x3562/0x4200
[  909.976572][T26459]  ? ieee80211_register_hw+0x1471/0x4200
[  909.976585][T26459]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  909.976603][T26459]  ? __hrtimer_setup+0x181/0x200
[  909.976613][T26459]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  909.976624][T26459]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  909.976646][T26459]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  909.976653][T26459]  ? kstrndup+0xbf/0x160
[  909.976667][T26459]  hwsim_new_radio_nl+0xf35/0x1bd0
[  909.976686][T26459]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  909.976698][T26459]  ? rcu_is_watching+0x15/0xb0
[  909.976709][T26459]  ? trace_kmalloc+0x2a/0x110
[  909.976722][T26459]  ? __nla_parse+0x40/0x60
[  909.976737][T26459]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  909.976754][T26459]  genl_family_rcv_msg_doit+0x22a/0x330
[  909.976769][T26459]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  909.976786][T26459]  ? bpf_lsm_capable+0x9/0x20
[  909.976798][T26459]  ? security_capable+0x7e/0x2c0
[  909.976811][T26459]  genl_rcv_msg+0x61c/0x7a0
[  909.976825][T26459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  909.976836][T26459]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  909.976845][T26459]  ? __lock_acquire+0x6b5/0x2cf0
[  909.976860][T26459]  netlink_rcv_skb+0x232/0x4b0
[  909.976870][T26459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  909.976882][T26459]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  909.976900][T26459]  ? down_read+0x272/0x2e0
[  909.976908][T26459]  ? genl_rcv+0xd/0x40
[  909.976949][T26459]  genl_rcv+0x28/0x40
[  909.976969][T26459]  netlink_unicast+0x80f/0x9b0
[  909.976986][T26459]  ? __pfx_netlink_unicast+0x10/0x10
[  909.976996][T26459]  ? netlink_sendmsg+0x650/0xb40
[  909.977005][T26459]  ? skb_put+0x11b/0x210
[  909.977020][T26459]  netlink_sendmsg+0x813/0xb40
[  909.977035][T26459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.977046][T26459]  ? aa_sock_msg_perm+0xf1/0x1b0
[  909.977057][T26459]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  909.977066][T26459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  909.977075][T26459]  ____sys_sendmsg+0xa68/0xad0
[  909.977086][T26459]  ? futex_unqueue+0x211/0x240
[  909.977100][T26459]  ? __pfx_____sys_sendmsg+0x10/0x10
[  909.977116][T26459]  ? import_iovec+0x73/0xa0
[  909.977129][T26459]  ___sys_sendmsg+0x2a5/0x360
[  909.977143][T26459]  ? __pfx____sys_sendmsg+0x10/0x10
[  909.977158][T26459]  ? futex_wait+0x29a/0x380
[  909.977182][T26459]  ? __fget_files+0x2a/0x420
[  909.977193][T26459]  ? __fget_files+0x3a0/0x420
[  909.977208][T26459]  __x64_sys_sendmsg+0x1bd/0x2a0
[  909.977221][T26459]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  909.977243][T26459]  ? rcu_is_watching+0x15/0xb0
[  909.977260][T26459]  do_syscall_64+0x14d/0xf80
[  909.977268][T26459]  ? trace_irq_disable+0x3b/0x150
[  909.977281][T26459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.977292][T26459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.977300][T26459] RIP: 0033:0x7f97d5b9c799
[  909.977310][T26459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.977317][T26459] RSP: 002b:00007f97d6a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.977328][T26459] RAX: ffffffffffffffda RBX: 00007f97d5e15fa0 RCX: 00007f97d5b9c799
[  909.977334][T26459] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  909.977340][T26459] RBP: 00007f97d5c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  909.977346][T26459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.977351][T26459] R13: 00007f97d5e16038 R14: 00007f97d5e15fa0 R15: 00007ffe15f3adc8
[  909.977366][T26459]  </TASK>
[  910.217862][T26475] netlink: 'syz.0.22800': attribute type 11 has an invalid length.
[  910.231704][T26482] netlink: 76 bytes leftover after parsing attributes in process `syz.2.22802'.
[  910.240141][T26481] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000
[  910.277159][T26486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22804'.
[  910.481690][T26505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22808'.
[  911.322103][T26526] wg1 speed is unknown, defaulting to 1000
[  911.343748][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22815'.
[  911.347116][T26528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22815'.
[  911.501982][T26536] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  911.504639][T26536] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  911.522616][T26526] lo speed is unknown, defaulting to 1000
[  911.898559][T15236] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  911.968317][T15236] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  912.046212][T26563] netlink: 'syz.0.22826': attribute type 11 has an invalid length.
[  912.049657][T26563] netlink: 'syz.0.22826': attribute type 11 has an invalid length.
[  912.238624][T23091] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  912.269302][   T13] net_ratelimit: 74 callbacks suppressed
[  912.269316][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  912.288318][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  912.388298][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  912.398223][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  912.510947][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  912.513853][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  912.536369][T26598] batman_adv: batadv0: Removing interface: vlan1
[  912.631255][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  912.634320][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  912.729088][T26617] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  912.732606][T26617] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  912.748432][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  912.768909][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  913.177319][T26642] wg1 speed is unknown, defaulting to 1000
[  913.205959][T26645] netlink: 'syz.0.22850': attribute type 1 has an invalid length.
[  913.268469][   T13] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  913.274404][   T13] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  913.298938][T26642] lo speed is unknown, defaulting to 1000
[  913.365357][T26650] netlink: 'syz.0.22852': attribute type 11 has an invalid length.
[  913.627069][T26674] __nla_validate_parse: 8 callbacks suppressed
[  913.627081][T26674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22858'.
[  913.647099][T26674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22858'.
[  913.718316][   T32] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  913.733915][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22860'.
[  913.872839][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22865'.
[  913.875806][T26692] netlink: 'syz.1.22865': attribute type 21 has an invalid length.
[  913.896486][T26692] netlink: 27 bytes leftover after parsing attributes in process `syz.1.22865'.
[  913.973190][   T34] audit: type=1800 audit(1772584294.720:20): pid=26694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.22863" name="memory.events" dev="tmpfs" ino=38619 res=0 errno=0
[  914.027708][T26688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.042721][T26703] netlink: 'syz.0.22867': attribute type 11 has an invalid length.
[  914.132000][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22870'.
[  914.134743][T26709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22870'.
[  914.292574][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22872'.
[  914.464392][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22874'.
[  914.613612][T26735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22876'.
[  914.722246][T26735] bond32: (slave vcan0): refused to change device type
[  914.726073][T26743] netlink: 'syz.0.22877': attribute type 11 has an invalid length.
[  914.984959][T26761] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  914.994419][T26761] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  915.055566][T26767] netlink: 'syz.1.22885': attribute type 1 has an invalid length.
[  915.061455][T26768] netlink: 'syz.1.22885': attribute type 1 has an invalid length.
[  915.364709][T26801] netlink: 'syz.1.22896': attribute type 1 has an invalid length.
[  915.640599][T26821] wg1 speed is unknown, defaulting to 1000
[  915.826793][T26841] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  915.830281][T26821] lo speed is unknown, defaulting to 1000
[  916.012870][T26859] netlink: 'syz.1.22907': attribute type 12 has an invalid length.
[  916.059864][T26861] netlink: 'syz.0.22912': attribute type 10 has an invalid length.
[  916.583382][T26875] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  916.601506][T26878] wg1 speed is unknown, defaulting to 1000
[  916.637497][T26883] netlink: 'syz.0.22919': attribute type 10 has an invalid length.
[  916.766971][T26878] lo speed is unknown, defaulting to 1000
[  917.588221][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  917.717222][   T13] net_ratelimit: 72 callbacks suppressed
[  917.717267][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  917.741063][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  917.828600][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  917.858143][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  917.871307][T26953] netlink: 'syz.1.22936': attribute type 11 has an invalid length.
[  917.938716][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  917.944392][T26955] netlink: 'syz.2.22937': attribute type 11 has an invalid length.
[  917.957956][T26962] bpq0: left promiscuous mode
[  917.978349][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  918.068831][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  918.089996][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  918.127748][T26983] sctp: [Deprecated]: syz.0.22948 (pid 26983) Use of int in maxseg socket option.
[  918.127748][T26983] Use struct sctp_assoc_value instead
[  918.198341][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  918.208563][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  918.215653][T26994] netlink: 'syz.1.22950': attribute type 21 has an invalid length.
[  918.408834][T27008] netlink: 'syz.2.22951': attribute type 11 has an invalid length.
[  918.868813][T27030] netlink: 'syz.0.22960': attribute type 1 has an invalid length.
[  918.871869][T27030] __nla_validate_parse: 24 callbacks suppressed
[  918.871884][T27030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22960'.
[  918.982631][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22965'.
[  918.988200][T27044] nbd: must specify a size in bytes for the device
[  918.993772][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22965'.
[  919.221344][T27053] netlink: 'syz.2.22968': attribute type 10 has an invalid length.
[  919.226134][T27062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22971'.
[  919.234992][T27062] netlink: 'syz.0.22971': attribute type 1 has an invalid length.
[  919.238405][T27062] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22971'.
[  919.280501][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22974'.
[  919.284692][T27069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22974'.
[  919.399563][T27086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22979'.
[  919.402687][T27086] netlink: 'syz.1.22979': attribute type 21 has an invalid length.
[  919.432729][T27079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22976'.
[  920.281163][T27098] netlink: 'syz.0.22983': attribute type 11 has an invalid length.
[  920.343485][T27101] netlink: 'syz.0.22984': attribute type 12 has an invalid length.
[  920.519832][T27115] x_tables: ip_tables: osf match: only valid for protocol 6
[  920.563205][   T34] audit: type=1804 audit(1772584301.300:21): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.22989" name="/newroot/7747/memory.events" dev="tmpfs" ino=39026 res=1 errno=0
[  920.582128][   T34] audit: type=1800 audit(1772584301.310:22): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22989" name="memory.events" dev="tmpfs" ino=39026 res=0 errno=0
[  920.606309][   T34] audit: type=1804 audit(1772584301.310:23): pid=27116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.22989" name="/newroot/7747/memory.events" dev="tmpfs" ino=39026 res=1 errno=0
[  920.648988][T27128] x_tables: duplicate underflow at hook 2
[  920.727351][T27134] wg1 speed is unknown, defaulting to 1000
[  920.782118][T27140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22997'.
[  920.856653][T27134] lo speed is unknown, defaulting to 1000
[  921.078578][T27165] netlink: 'syz.2.23004': attribute type 11 has an invalid length.
[  921.531318][T27204] netlink: 'syz.1.23015': attribute type 21 has an invalid length.
[  922.211881][T27236] netlink: 'syz.2.23023': attribute type 10 has an invalid length.
[  922.211881][T27235] netlink: 'syz.2.23023': attribute type 10 has an invalid length.
[  922.624035][T27261] wg1 speed is unknown, defaulting to 1000
[  922.768341][ T5828] net_ratelimit: 78 callbacks suppressed
[  922.768359][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  922.788233][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  922.859616][T27261] lo speed is unknown, defaulting to 1000
[  922.908214][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  922.968237][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  923.011201][   T34] audit: type=1800 audit(1772584303.760:24): pid=27271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.23034" name="memory.events" dev="tmpfs" ino=38038 res=0 errno=0
[  923.018203][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  923.079168][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  923.129403][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  923.189186][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  923.250133][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  923.298164][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  923.602274][T27313] wg1 speed is unknown, defaulting to 1000
[  923.746337][T27313] lo speed is unknown, defaulting to 1000
[  923.901210][T27329] netlink: 'syz.1.23050': attribute type 1 has an invalid length.
[  923.903596][T27329] __nla_validate_parse: 9 callbacks suppressed
[  923.903605][T27329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23050'.
[  924.186883][T27341] netlink: 'syz.2.23054': attribute type 1 has an invalid length.
[  924.192884][T27341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23054'.
[  924.538587][T27355] netlink: 'syz.2.23057': attribute type 15 has an invalid length.
[  924.542208][T27354] 8021q: adding VLAN 0 to HW filter on device team0
[  924.558885][T27355] netlink: 'syz.2.23057': attribute type 61 has an invalid length.
[  924.573754][T27355] netlink: 'syz.2.23057': attribute type 62 has an invalid length.
[  925.108157][    C1] ip6_tunnel: ip6gretap9 xmit: Local address not yet configured!
[  925.161235][T27357] x_tables: duplicate underflow at hook 1
[  925.399221][T27369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23062'.
[  925.562320][T27381] wg1 speed is unknown, defaulting to 1000
[  925.806424][T27381] lo speed is unknown, defaulting to 1000
[  925.921125][T27395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23071'.
[  926.043349][T27401] netlink: 'syz.2.23074': attribute type 61 has an invalid length.
[  926.212495][T27412] netlink: 'syz.1.23078': attribute type 11 has an invalid length.
[  926.388287][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  926.394436][T27424] netlink: 'syz.1.23082': attribute type 47 has an invalid length.
[  926.459905][T27435] netlink: 'syz.1.23082': attribute type 10 has an invalid length.
[  926.566851][T27444] netlink: 'syz.2.23087': attribute type 7 has an invalid length.
[  926.571985][T27444] netlink: 'syz.2.23087': attribute type 8 has an invalid length.
[  926.580777][T27430] netlink: 'syz.0.23081': attribute type 11 has an invalid length.
[  926.843515][T27468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23093'.
[  926.946880][T27477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  926.950762][T27477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  927.733170][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23099'.
[  927.808458][ T9766] net_ratelimit: 78 callbacks suppressed
[  927.817052][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  927.848821][T27498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23101'.
[  927.852689][T27498] workqueue: Failed to create a rescuer kthread for wq "bond32": -EINTR
[  927.868232][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  927.902757][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23102'.
[  927.905735][T27506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23102'.
[  927.928543][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  927.952188][T27512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23103'.
[  927.979684][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  928.048380][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  928.087261][T27521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  928.098460][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  928.156613][T27532] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode
[  928.160712][T27532] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode
[  928.178281][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  928.208242][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  928.237347][T27543] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  928.298194][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  928.312950][T27549] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  928.315395][T27549] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  928.833036][T27581] : entered promiscuous mode
[  928.848511][T27578] netlink: 'syz.0.23124': attribute type 11 has an invalid length.
[  928.903398][T27583] wg1 speed is unknown, defaulting to 1000
[  929.136682][T27593] __nla_validate_parse: 2 callbacks suppressed
[  929.136694][T27593] netlink: 228 bytes leftover after parsing attributes in process `syz.0.23128'.
[  929.158160][T27593] netlink: 228 bytes leftover after parsing attributes in process `syz.0.23128'.
[  929.169477][T27583] lo speed is unknown, defaulting to 1000
[  929.318804][T27599] netlink: 'syz.0.23130': attribute type 11 has an invalid length.
[  929.515431][T27609] wg1 speed is unknown, defaulting to 1000
[  929.523288][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23132'.
[  929.531401][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23133'.
[  929.726219][T27627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23137'.
[  929.752405][T27609] lo speed is unknown, defaulting to 1000
[  929.760942][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23138'.
[  929.763894][T27629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23138'.
[  929.871740][T27632] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode
[  929.874516][T27632] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode
[  929.880104][T27632] netlink: 'syz.1.23139': attribute type 11 has an invalid length.
[  929.900957][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23140'.
[  929.907502][T27634] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode
[  929.917377][T27634] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode
[  930.028477][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23142'.
[  930.339311][T27663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  930.342991][T27663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  930.413648][T27666] netem: unknown loss type 0
[  930.415589][T27666] netem: change failed
[  930.432018][T27666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  930.463271][T27669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23150'.
[  930.647065][T27680] netlink: 'syz.2.23154': attribute type 11 has an invalid length.
[  931.433760][T27723] 8021q: VLANs not supported on syzkaller1
[  931.437731][T27723] xt_ipcomp: unknown flags 1D
[  931.448580][T27714] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode
[  931.450834][T27714] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode
[  931.622398][T27742] netlink: 'syz.2.23172': attribute type 11 has an invalid length.
[  931.749806][T27761] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  931.893526][T27771] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  931.900624][T27771] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  931.990545][T27784] netlink: 'syz.0.23181': attribute type 11 has an invalid length.
[  932.460551][T27790] wg1 speed is unknown, defaulting to 1000
[  932.570793][T27790] lo speed is unknown, defaulting to 1000
[  932.919209][   T13] net_ratelimit: 78 callbacks suppressed
[  932.919229][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  932.939106][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  933.029925][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  933.050294][T27808] wg1 speed is unknown, defaulting to 1000
[  933.068198][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  933.178823][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  933.238460][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  933.263411][T27817] netlink: 'syz.1.23190': attribute type 11 has an invalid length.
[  933.288950][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  933.340005][T27808] lo speed is unknown, defaulting to 1000
[  933.408384][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  933.418225][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  933.503962][T27829] validate_nla: 2 callbacks suppressed
[  933.503971][T27829] netlink: 'syz.2.23194': attribute type 3 has an invalid length.
[  933.518205][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  933.673039][T27834] wg1 speed is unknown, defaulting to 1000
[  933.892487][T27834] lo speed is unknown, defaulting to 1000
[  934.211432][T27887] netlink: 'syz.0.23209': attribute type 10 has an invalid length.
[  934.261070][T27893] __nla_validate_parse: 25 callbacks suppressed
[  934.261080][T27893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23211'.
[  934.297177][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23210'.
[  934.325380][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23212'.
[  934.338696][T27900] netlink: 'syz.1.23212': attribute type 21 has an invalid length.
[  934.546180][T27927] netlink: 'syz.1.23216': attribute type 11 has an invalid length.
[  934.622387][T27934] netlink: 'syz.0.23222': attribute type 62 has an invalid length.
[  934.972084][T27960] netlink: 'syz.2.23229': attribute type 11 has an invalid length.
[  935.006866][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23230'.
[  935.008201][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23230'.
[  935.010250][T27963] netlink: 'syz.2.23230': attribute type 21 has an invalid length.
[  935.013103][T27962] netlink: 'syz.2.23230': attribute type 21 has an invalid length.
[  935.741189][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23233'.
[  935.837350][T27980] wg1 speed is unknown, defaulting to 1000
[  935.935708][T27983] netlink: 100 bytes leftover after parsing attributes in process `syz.2.23236'.
[  935.968379][T27980] lo speed is unknown, defaulting to 1000
[  936.014324][T27981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23235'.
[  936.017975][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23235'.
[  936.030779][T27981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23235'.
[  936.062772][T27987] netlink: 'syz.2.23237': attribute type 11 has an invalid length.
[  936.304903][T27996] bond33: entered promiscuous mode
[  936.320176][T28005] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  936.338355][T27997] macvlan0: entered promiscuous mode
[  936.339983][T27997] macvlan0: entered allmulticast mode
[  936.348748][T27997] bond33: (slave macvlan0): Opening slave failed
[  936.519825][T28011] netlink: 'syz.2.23244': attribute type 11 has an invalid length.
[  936.801804][T28043] netlink: 'syz.2.23251': attribute type 11 has an invalid length.
[  936.968324][T28058] netlink: 'syz.1.23257': attribute type 21 has an invalid length.
[  937.051079][T28069] netlink: 'syz.0.23261': attribute type 12 has an invalid length.
[  937.112759][T28073] netlink: 'syz.1.23263': attribute type 1 has an invalid length.
[  937.196987][T28084] netlink: 'syz.2.23266': attribute type 11 has an invalid length.
[  937.348834][T28097] netlink: 'syz.1.23271': attribute type 10 has an invalid length.
[  938.028399][ T5828] net_ratelimit: 75 callbacks suppressed
[  938.028413][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  938.032592][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  938.138389][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  938.158541][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  938.248252][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  938.268610][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  938.358501][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  938.379247][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  938.468686][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  938.488505][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  938.596218][T28162] validate_nla: 2 callbacks suppressed
[  938.596235][T28162] netlink: 'syz.0.23292': attribute type 8 has an invalid length.
[  938.605032][T28162] netlink: 'syz.0.23292': attribute type 11 has an invalid length.
[  938.674036][T28164] netlink: 'syz.1.23293': attribute type 1 has an invalid length.
[  938.696172][T28166] wg1 speed is unknown, defaulting to 1000
[  938.867001][T28166] lo speed is unknown, defaulting to 1000
[  939.268892][T28179] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  939.272481][T28179] CPU: 0 UID: 0 PID: 28179 Comm: syz.2.23296 Not tainted syzkaller #0 PREEMPT(full) 
[  939.272495][T28179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  939.272501][T28179] Call Trace:
[  939.272505][T28179]  <TASK>
[  939.272510][T28179]  dump_stack_lvl+0xe8/0x150
[  939.272528][T28179]  sysfs_warn_dup+0x8e/0xa0
[  939.272541][T28179]  sysfs_do_create_link_sd+0xc0/0x110
[  939.272553][T28179]  device_add_class_symlinks+0x1cf/0x240
[  939.272564][T28179]  device_add+0x475/0xb70
[  939.272579][T28179]  wiphy_register+0x1d73/0x2d50
[  939.272599][T28179]  ? __pfx_wiphy_register+0x10/0x10
[  939.272609][T28179]  ? __pfx_netdev_run_todo+0x10/0x10
[  939.272618][T28179]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  939.272631][T28179]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  939.272646][T28179]  ieee80211_register_hw+0x3562/0x4200
[  939.272661][T28179]  ? ieee80211_register_hw+0x1471/0x4200
[  939.272675][T28179]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  939.272692][T28179]  ? __hrtimer_setup+0x181/0x200
[  939.272702][T28179]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  939.272713][T28179]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  939.272736][T28179]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  939.272743][T28179]  ? kstrndup+0xbf/0x160
[  939.272759][T28179]  hwsim_new_radio_nl+0xf35/0x1bd0
[  939.272778][T28179]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  939.272791][T28179]  ? rcu_is_watching+0x15/0xb0
[  939.272802][T28179]  ? trace_kmalloc+0x2a/0x110
[  939.272814][T28179]  ? __nla_parse+0x40/0x60
[  939.272827][T28179]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  939.272843][T28179]  genl_family_rcv_msg_doit+0x22a/0x330
[  939.272877][T28179]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  939.272897][T28179]  ? bpf_lsm_capable+0x9/0x20
[  939.272908][T28179]  ? security_capable+0x7e/0x2c0
[  939.272922][T28179]  genl_rcv_msg+0x61c/0x7a0
[  939.272936][T28179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  939.272947][T28179]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  939.272955][T28179]  ? __lock_acquire+0x6b5/0x2cf0
[  939.272971][T28179]  netlink_rcv_skb+0x232/0x4b0
[  939.272981][T28179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  939.272993][T28179]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  939.273011][T28179]  ? down_read+0x272/0x2e0
[  939.273019][T28179]  ? genl_rcv+0xd/0x40
[  939.273031][T28179]  genl_rcv+0x28/0x40
[  939.273041][T28179]  netlink_unicast+0x80f/0x9b0
[  939.273054][T28179]  ? __pfx_netlink_unicast+0x10/0x10
[  939.273063][T28179]  ? netlink_sendmsg+0x650/0xb40
[  939.273072][T28179]  ? skb_put+0x11b/0x210
[  939.273085][T28179]  netlink_sendmsg+0x813/0xb40
[  939.273099][T28179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  939.273110][T28179]  ? aa_sock_msg_perm+0xf1/0x1b0
[  939.273121][T28179]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  939.273131][T28179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  939.273140][T28179]  ____sys_sendmsg+0xa68/0xad0
[  939.273151][T28179]  ? futex_unqueue+0x211/0x240
[  939.273165][T28179]  ? __pfx_____sys_sendmsg+0x10/0x10
[  939.273181][T28179]  ? import_iovec+0x73/0xa0
[  939.273193][T28179]  ___sys_sendmsg+0x2a5/0x360
[  939.273204][T28179]  ? try_to_wake_up+0x7fc/0x1390
[  939.273215][T28179]  ? __pfx____sys_sendmsg+0x10/0x10
[  939.273229][T28179]  ? futex_wait+0x29a/0x380
[  939.273260][T28179]  __x64_sys_sendmsg+0x1bd/0x2a0
[  939.273273][T28179]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  939.273288][T28179]  ? rcu_is_watching+0x15/0xb0
[  939.273327][T28179]  do_syscall_64+0x14d/0xf80
[  939.273337][T28179]  ? trace_irq_disable+0x3b/0x150
[  939.273348][T28179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.273361][T28179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.273370][T28179] RIP: 0033:0x7f872239c799
[  939.273378][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.273386][T28179] RSP: 002b:00007f8723189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  939.273398][T28179] RAX: ffffffffffffffda RBX: 00007f8722615fa0 RCX: 00007f872239c799
[  939.273404][T28179] RDX: 0000000000000300 RSI: 0000200000000100 RDI: 0000000000000007
[  939.273409][T28179] RBP: 00007f8722432bd9 R08: 0000000000000000 R09: 0000000000000000
[  939.273415][T28179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.273420][T28179] R13: 00007f8722616038 R14: 00007f8722615fa0 R15: 00007ffdafe7b3e8
[  939.273435][T28179]  </TASK>
[  939.339083][T28179] __nla_validate_parse: 22 callbacks suppressed
[  939.339099][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23296'.
[  939.471230][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23297'.
[  939.474373][T28183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23297'.
[  939.553864][T28187] netlink: 'syz.0.23299': attribute type 89 has an invalid length.
[  939.686208][T28192] netlink: 'syz.0.23301': attribute type 11 has an invalid length.
[  939.833853][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23304'.
[  939.837486][T28205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23304'.
[  939.889449][T28215] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  940.005908][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23308'.
[  940.092047][T28233] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  940.095963][T28233] CPU: 0 UID: 0 PID: 28233 Comm: syz.0.23310 Not tainted syzkaller #0 PREEMPT(full) 
[  940.095976][T28233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  940.095982][T28233] Call Trace:
[  940.095987][T28233]  <TASK>
[  940.095991][T28233]  dump_stack_lvl+0xe8/0x150
[  940.096009][T28233]  sysfs_warn_dup+0x8e/0xa0
[  940.096022][T28233]  sysfs_do_create_link_sd+0xc0/0x110
[  940.096035][T28233]  device_add_class_symlinks+0x1cf/0x240
[  940.096046][T28233]  device_add+0x475/0xb70
[  940.096056][T28233]  wiphy_register+0x1d73/0x2d50
[  940.096074][T28233]  ? __pfx_wiphy_register+0x10/0x10
[  940.096085][T28233]  ? __pfx_netdev_run_todo+0x10/0x10
[  940.096094][T28233]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  940.096106][T28233]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  940.096122][T28233]  ieee80211_register_hw+0x3562/0x4200
[  940.096138][T28233]  ? ieee80211_register_hw+0x1471/0x4200
[  940.096151][T28233]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  940.096168][T28233]  ? __hrtimer_setup+0x181/0x200
[  940.096179][T28233]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  940.096190][T28233]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  940.096211][T28233]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  940.096218][T28233]  ? kstrndup+0xbf/0x160
[  940.096259][T28233]  hwsim_new_radio_nl+0xf35/0x1bd0
[  940.096287][T28233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  940.096300][T28233]  ? rcu_is_watching+0x15/0xb0
[  940.096313][T28233]  ? trace_kmalloc+0x2a/0x110
[  940.096325][T28233]  ? __nla_parse+0x40/0x60
[  940.096338][T28233]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  940.096354][T28233]  genl_family_rcv_msg_doit+0x22a/0x330
[  940.096369][T28233]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  940.096387][T28233]  ? bpf_lsm_capable+0x9/0x20
[  940.096399][T28233]  ? security_capable+0x7e/0x2c0
[  940.096412][T28233]  genl_rcv_msg+0x61c/0x7a0
[  940.096427][T28233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  940.096438][T28233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  940.096446][T28233]  ? __lock_acquire+0x6b5/0x2cf0
[  940.096461][T28233]  netlink_rcv_skb+0x232/0x4b0
[  940.096472][T28233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  940.096484][T28233]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  940.096501][T28233]  ? down_read+0x272/0x2e0
[  940.096509][T28233]  ? genl_rcv+0xd/0x40
[  940.096521][T28233]  genl_rcv+0x28/0x40
[  940.096531][T28233]  netlink_unicast+0x80f/0x9b0
[  940.096544][T28233]  ? __pfx_netlink_unicast+0x10/0x10
[  940.096553][T28233]  ? netlink_sendmsg+0x650/0xb40
[  940.096562][T28233]  ? skb_put+0x11b/0x210
[  940.096575][T28233]  netlink_sendmsg+0x813/0xb40
[  940.096589][T28233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  940.096600][T28233]  ? aa_sock_msg_perm+0xf1/0x1b0
[  940.096611][T28233]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  940.096620][T28233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  940.096629][T28233]  ____sys_sendmsg+0xa68/0xad0
[  940.096641][T28233]  ? futex_unqueue+0x211/0x240
[  940.096654][T28233]  ? __pfx_____sys_sendmsg+0x10/0x10
[  940.096670][T28233]  ? import_iovec+0x73/0xa0
[  940.096683][T28233]  ___sys_sendmsg+0x2a5/0x360
[  940.096694][T28233]  ? try_to_wake_up+0x7fc/0x1390
[  940.096704][T28233]  ? __pfx____sys_sendmsg+0x10/0x10
[  940.096718][T28233]  ? futex_wait+0x29a/0x380
[  940.096741][T28233]  ? call_rcu+0x644/0x890
[  940.096758][T28233]  __x64_sys_sendmsg+0x1bd/0x2a0
[  940.096770][T28233]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  940.096794][T28233]  do_syscall_64+0x14d/0xf80
[  940.096801][T28233]  ? trace_irq_disable+0x3b/0x150
[  940.096812][T28233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.096822][T28233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.096830][T28233] RIP: 0033:0x7f97d5b9c799
[  940.096839][T28233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  940.096846][T28233] RSP: 002b:00007f97d69df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  940.096856][T28233] RAX: ffffffffffffffda RBX: 00007f97d5e16090 RCX: 00007f97d5b9c799
[  940.096862][T28233] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  940.096867][T28233] RBP: 00007f97d5c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  940.096872][T28233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  940.096877][T28233] R13: 00007f97d5e16128 R14: 00007f97d5e16090 R15: 00007ffe15f3adc8
[  940.096892][T28233]  </TASK>
[  940.623056][T28243] netlink: 256 bytes leftover after parsing attributes in process `syz.2.23315'.
[  940.753407][T28247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  940.763614][T28247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  941.050236][T28253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23319'.
[  941.086658][T28256] netlink: 'syz.0.23320': attribute type 11 has an invalid length.
[  941.153523][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23321'.
[  941.156947][T28258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23321'.
[  941.343434][T28272] netlink: 'syz.0.23326': attribute type 21 has an invalid length.
[  941.574856][T28280] netlink: 'syz.0.23329': attribute type 9 has an invalid length.
[  941.591938][T28280] netlink: 'syz.0.23329': attribute type 10 has an invalid length.
[  941.954033][T28299] netlink: 'syz.2.23337': attribute type 10 has an invalid length.
[  941.960487][T28299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  941.964367][T28299] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  941.966611][T28299] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  942.101397][T28318] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  942.104424][T28318] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  942.217906][   T34] audit: type=1800 audit(1772584322.960:25): pid=28324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.23343" name="memory.events" dev="tmpfs" ino=39383 res=0 errno=0
[  942.282882][T28329] tun0: tun_chr_ioctl cmd 1074025677
[  942.284609][T28329] tun0: linktype set to 804
[  942.291906][T28315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  942.526312][T28350] netlink: 'syz.0.23356': attribute type 10 has an invalid length.
[  942.697494][T28364] wg1 speed is unknown, defaulting to 1000
[  942.811466][T28364] lo speed is unknown, defaulting to 1000
[  942.867828][T28374] netlink: 'syz.2.23363': attribute type 21 has an invalid length.
[  943.119411][   T13] net_ratelimit: 81 callbacks suppressed
[  943.119428][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  943.128854][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  943.228474][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  943.239165][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  943.338842][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  943.348544][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  943.448521][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  943.458407][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  943.568384][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  943.588430][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  943.844963][T28397] netlink: 'syz.2.23370': attribute type 10 has an invalid length.
[  943.899306][T28401] netlink: 'syz.2.23371': attribute type 1 has an invalid length.
[  944.120389][T28423] netlink: 'syz.1.23375': attribute type 11 has an invalid length.
[  944.297517][T28438] netlink: 'syz.0.23381': attribute type 4 has an invalid length.
[  944.301313][T28446] xt_nfacct: accounting object `syz0' does not exist
[  944.301334][T28438] netlink: 'syz.0.23381': attribute type 4 has an invalid length.
[  944.373895][T28450] __nla_validate_parse: 12 callbacks suppressed
[  944.373911][T28450] netlink: 6 bytes leftover after parsing attributes in process `syz.0.23385'.
[  944.473775][T28454] netlink: 'syz.2.23386': attribute type 10 has an invalid length.
[  944.474218][T28463] netlink: 84 bytes leftover after parsing attributes in process `syz.1.23389'.
[  944.533950][T28464] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  944.736091][T28479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23393'.
[  944.977174][T28489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  944.981465][T28489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  945.615885][T28500] wg1 speed is unknown, defaulting to 1000
[  945.649904][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23398'.
[  945.824960][T28500] lo speed is unknown, defaulting to 1000
[  945.983687][T28531] netlink: 'syz.1.23407': attribute type 3 has an invalid length.
[  946.104147][T28537] macsec1: entered promiscuous mode
[  946.140669][T28545] xt_nfacct: accounting object `syz0' does not exist
[  946.212009][T28550] netlink: 'syz.0.23412': attribute type 2 has an invalid length.
[  946.215282][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23412'.
[  946.565784][T28579] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  946.569644][T28579] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  946.718860][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23424'.
[  946.981828][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23430'.
[  946.987585][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23430'.
[  946.992489][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23430'.
[  946.997521][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23430'.
[  947.015607][T28608] wg1 speed is unknown, defaulting to 1000
[  947.172475][T28608] lo speed is unknown, defaulting to 1000
[  947.564284][T28637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.806121][T28651] xt_ecn: cannot match TCP bits for non-tcp packets
[  947.812317][T28651] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  947.816057][T28651] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53389 - 0
[  947.820895][T28651] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  947.864044][T28651] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  947.867977][T28651] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53389 - 0
[  947.871888][T28651] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  947.932833][T28651] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  947.935849][T28651] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53389 - 0
[  947.940263][T28651] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  947.975081][T28651] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  947.978160][T28651] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53389 - 0
[  947.981526][T28651] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  948.023939][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  948.026627][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.029847][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53389 - 0
[  948.040745][T23091] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  948.043425][T23091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.045980][T23091] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53389 - 0
[  948.057240][T23091] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  948.060217][T23091] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.062993][T23091] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53389 - 0
[  948.074871][T23091] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  948.078265][T23091] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.080961][T23091] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53389 - 0
[  948.200987][T23091] net_ratelimit: 81 callbacks suppressed
[  948.201004][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  948.203267][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  948.213152][T28661] ksmbd: Unknown IPC event: 8, ignore.
[  948.242296][T28663] xt_nfacct: accounting object `syz0' does not exist
[  948.294615][T28671] netlink: 'syz.2.23450': attribute type 21 has an invalid length.
[  948.297934][T28672] netlink: 'syz.2.23450': attribute type 21 has an invalid length.
[  948.308294][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  948.328344][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  948.418336][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  948.438282][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  948.528227][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  948.548393][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  948.638200][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  948.658325][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  949.480573][T28707] netlink: 'syz.2.23459': attribute type 62 has an invalid length.
[  949.688260][T28719] syzkaller1: entered promiscuous mode
[  949.690127][T28719] syzkaller1: entered allmulticast mode
[  949.750602][T28725] __nla_validate_parse: 264 callbacks suppressed
[  949.750613][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23464'.
[  949.756155][T28725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23464'.
[  950.124203][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23467'.
[  950.127880][T28733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23467'.
[  950.190790][T28737] xt_ecn: cannot match TCP bits for non-tcp packets
[  950.297679][T28743] netlink: 'syz.1.23470': attribute type 10 has an invalid length.
[  950.377266][T28749] netlink: 'syz.1.23472': attribute type 7 has an invalid length.
[  950.380995][T28749] netlink: 148 bytes leftover after parsing attributes in process `syz.1.23472'.
[  950.397594][T28749] wg1 speed is unknown, defaulting to 1000
[  950.530102][T28749] lo speed is unknown, defaulting to 1000
[  950.790330][    T9] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  950.816938][T28762] x_tables: ip6_tables: mh match: only valid for protocol 135
[  950.824126][T28761] x_tables: ip6_tables: mh match: only valid for protocol 135
[  950.832751][T28761] netlink: 'syz.2.23475': attribute type 1 has an invalid length.
[  950.846100][T28761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23475'.
[  950.999642][T28774] xt_nfacct: accounting object `syz0' does not exist
[  951.158475][    T9] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  951.442127][   T34] audit: type=1800 audit(1772584332.190:26): pid=28796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.23481" name="memory.events" dev="tmpfs" ino=39671 res=0 errno=0
[  951.452034][T28798] netlink: 7920 bytes leftover after parsing attributes in process `syz.0.23486'.
[  951.650437][T28816] wg1 speed is unknown, defaulting to 1000
[  951.666597][T28821] netlink: 'syz.0.23492': attribute type 1 has an invalid length.
[  951.763819][T28816] lo speed is unknown, defaulting to 1000
[  952.247151][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23496'.
[  952.253979][T28838] wg1 speed is unknown, defaulting to 1000
[  952.312425][T28841] sctp: [Deprecated]: syz.2.23497 (pid 28841) Use of struct sctp_assoc_value in delayed_ack socket option.
[  952.312425][T28841] Use struct sctp_sack_info instead
[  952.361218][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23499'.
[  952.443968][T28838] lo speed is unknown, defaulting to 1000
[  952.467483][T28851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23501'.
[  952.600707][T28861] wg1 speed is unknown, defaulting to 1000
[  952.801063][T28868] netlink: 'syz.0.23503': attribute type 11 has an invalid length.
[  952.804038][T28861] lo speed is unknown, defaulting to 1000
[  953.083791][T28884] netlink: 'syz.0.23507': attribute type 11 has an invalid length.
[  953.102523][T28888] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  953.106944][T28888] CPU: 0 UID: 0 PID: 28888 Comm: syz.1.23508 Not tainted syzkaller #0 PREEMPT(full) 
[  953.106965][T28888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  953.106976][T28888] Call Trace:
[  953.106982][T28888]  <TASK>
[  953.106989][T28888]  dump_stack_lvl+0xe8/0x150
[  953.107012][T28888]  sysfs_warn_dup+0x8e/0xa0
[  953.107031][T28888]  sysfs_do_create_link_sd+0xc0/0x110
[  953.107054][T28888]  device_add_class_symlinks+0x1cf/0x240
[  953.107073][T28888]  device_add+0x475/0xb70
[  953.107122][T28888]  wiphy_register+0x1d73/0x2d50
[  953.107157][T28888]  ? __pfx_wiphy_register+0x10/0x10
[  953.107183][T28888]  ? __pfx_netdev_run_todo+0x10/0x10
[  953.107208][T28888]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  953.107250][T28888]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  953.107279][T28888]  ieee80211_register_hw+0x3562/0x4200
[  953.107305][T28888]  ? ieee80211_register_hw+0x1471/0x4200
[  953.107330][T28888]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  953.107359][T28888]  ? __hrtimer_setup+0x181/0x200
[  953.107379][T28888]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  953.107398][T28888]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  953.107437][T28888]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  953.107451][T28888]  ? kstrndup+0xbf/0x160
[  953.107477][T28888]  hwsim_new_radio_nl+0xf35/0x1bd0
[  953.107508][T28888]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  953.107526][T28888]  ? rcu_is_watching+0x15/0xb0
[  953.107541][T28888]  ? trace_kmalloc+0x2a/0x110
[  953.107556][T28888]  ? __nla_parse+0x40/0x60
[  953.107578][T28888]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  953.107607][T28888]  genl_family_rcv_msg_doit+0x22a/0x330
[  953.107629][T28888]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  953.107654][T28888]  ? bpf_lsm_capable+0x9/0x20
[  953.107668][T28888]  ? security_capable+0x7e/0x2c0
[  953.107687][T28888]  genl_rcv_msg+0x61c/0x7a0
[  953.107711][T28888]  ? __pfx_genl_rcv_msg+0x10/0x10
[  953.107727][T28888]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  953.107742][T28888]  ? __lock_acquire+0x6b5/0x2cf0
[  953.107766][T28888]  netlink_rcv_skb+0x232/0x4b0
[  953.107783][T28888]  ? __pfx_genl_rcv_msg+0x10/0x10
[  953.107805][T28888]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  953.107835][T28888]  ? down_read+0x272/0x2e0
[  953.107850][T28888]  ? genl_rcv+0xd/0x40
[  953.107869][T28888]  genl_rcv+0x28/0x40
[  953.107888][T28888]  netlink_unicast+0x80f/0x9b0
[  953.107912][T28888]  ? __pfx_netlink_unicast+0x10/0x10
[  953.107929][T28888]  ? netlink_sendmsg+0x650/0xb40
[  953.107945][T28888]  ? skb_put+0x11b/0x210
[  953.107967][T28888]  netlink_sendmsg+0x813/0xb40
[  953.107993][T28888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  953.108013][T28888]  ? aa_sock_msg_perm+0xf1/0x1b0
[  953.108032][T28888]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  953.108049][T28888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  953.108066][T28888]  ____sys_sendmsg+0xa68/0xad0
[  953.108120][T28888]  ? futex_unqueue+0x211/0x240
[  953.108145][T28888]  ? __pfx_____sys_sendmsg+0x10/0x10
[  953.108191][T28888]  ? import_iovec+0x73/0xa0
[  953.108214][T28888]  ___sys_sendmsg+0x2a5/0x360
[  953.108240][T28888]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.108265][T28888]  ? futex_wait+0x29a/0x380
[  953.108305][T28888]  ? __fget_files+0x2a/0x420
[  953.108324][T28888]  ? __fget_files+0x3a0/0x420
[  953.108351][T28888]  __x64_sys_sendmsg+0x1bd/0x2a0
[  953.108396][T28888]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  953.108426][T28888]  ? rcu_is_watching+0x15/0xb0
[  953.108457][T28888]  do_syscall_64+0x14d/0xf80
[  953.108471][T28888]  ? trace_irq_disable+0x3b/0x150
[  953.108491][T28888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.108510][T28888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.108524][T28888] RIP: 0033:0x7fb51bf9c799
[  953.108539][T28888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.108552][T28888] RSP: 002b:00007fb51ce86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  953.108569][T28888] RAX: ffffffffffffffda RBX: 00007fb51c215fa0 RCX: 00007fb51bf9c799
[  953.108581][T28888] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  953.108591][T28888] RBP: 00007fb51c032bd9 R08: 0000000000000000 R09: 0000000000000000
[  953.108601][T28888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  953.108609][T28888] R13: 00007fb51c216038 R14: 00007fb51c215fa0 R15: 00007ffca152b3d8
[  953.108635][T28888]  </TASK>
[  953.408713][ T9766] net_ratelimit: 76 callbacks suppressed
[  953.408732][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  953.448225][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  953.467986][T28899] netlink: 'syz.1.23511': attribute type 11 has an invalid length.
[  953.490131][T28895] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  953.523738][T28895] netlink: 'syz.2.23510': attribute type 1 has an invalid length.
[  953.538375][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  953.588219][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  953.650182][T28910] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  953.658222][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  953.669500][T28910] netlink: 'syz.0.23513': attribute type 1 has an invalid length.
[  953.698210][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  953.764254][T28920] netlink: 'syz.1.23516': attribute type 2 has an invalid length.
[  953.769066][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  953.809912][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  953.888224][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  953.916607][T28935] syzkaller1: entered promiscuous mode
[  953.924527][T28935] syzkaller1: entered allmulticast mode
[  953.980657][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  954.040782][T23091] tipc: Subscription rejected, illegal request
[  954.239255][T28954] netlink: 'syz.0.23529': attribute type 11 has an invalid length.
[  954.277630][T28956] bond32: entered promiscuous mode
[  954.290531][T28956] macvlan2: entered promiscuous mode
[  954.292569][T28956] macvlan2: entered allmulticast mode
[  954.295557][T28956] bond32: (slave macvlan2): Opening slave failed
[  954.486636][T28965] netlink: 'syz.0.23532': attribute type 11 has an invalid length.
[  954.866512][T28995] __nla_validate_parse: 18 callbacks suppressed
[  954.866525][T28995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23541'.
[  955.000155][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23544'.
[  955.006151][T29004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23544'.
[  955.383212][T29021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23549'.
[  955.517221][T29029] netlink: 'syz.1.23553': attribute type 1 has an invalid length.
[  955.520600][T29029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23553'.
[  955.573238][T29031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23554'.
[  955.576687][T29031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23554'.
[  955.654290][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23555'.
[  955.660068][T29033] netlink: 'syz.1.23555': attribute type 21 has an invalid length.
[  955.673264][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23556'.
[  955.676620][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23556'.
[  955.685130][T29036] netlink: 'syz.2.23556': attribute type 11 has an invalid length.
[  955.688320][T29036] netlink: 'syz.2.23556': attribute type 11 has an invalid length.
[  955.791327][T29041] netlink: 'syz.2.23557': attribute type 2 has an invalid length.
[  955.817647][T29041] netlink: 'syz.2.23557': attribute type 12 has an invalid length.
[  955.944016][T29049] "syz.2.23560" (29049) uses obsolete ecb(arc4) skcipher
[  956.053165][T29052] netlink: 'syz.2.23561': attribute type 21 has an invalid length.
[  956.442578][T29055] wg1 speed is unknown, defaulting to 1000
[  956.583104][T29055] lo speed is unknown, defaulting to 1000
[  956.912816][T29074] netlink: 'syz.0.23566': attribute type 3 has an invalid length.
[  957.188332][T29092] netlink: 'syz.1.23572': attribute type 1 has an invalid length.
[  957.248793][T29098] netlink: 'syz.1.23575': attribute type 6 has an invalid length.
[  958.085745][T29168] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  958.330305][T29183] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  958.458273][   T13] net_ratelimit: 79 callbacks suppressed
[  958.458291][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  958.478181][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  958.588216][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  958.609770][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  958.698528][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  958.720384][T29207] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  958.720843][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  958.723891][T29207] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  958.808353][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  958.848634][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  958.873546][T29216] netlink: 'syz.1.23610': attribute type 11 has an invalid length.
[  958.918425][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  958.958398][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  958.976977][T29230] netlink: 'syz.1.23611': attribute type 11 has an invalid length.
[  959.086613][T29242] netlink: 'syz.0.23615': attribute type 11 has an invalid length.
[  959.558839][T29281] wg1 speed is unknown, defaulting to 1000
[  959.670276][   T34] audit: type=1800 audit(1772584340.420:27): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23629" name="memory.events" dev="tmpfs" ino=39895 res=0 errno=0
[  959.705869][T29281] lo speed is unknown, defaulting to 1000
[  959.881667][T29315] __nla_validate_parse: 38 callbacks suppressed
[  959.881678][T29315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23636'.
[  959.936082][T29317] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  959.940317][T29317] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  960.024828][T29326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23640'.
[  960.167091][T29335] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23643'.
[  960.215746][T29344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  960.219068][T29344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  961.093094][T29363] wg1 speed is unknown, defaulting to 1000
[  961.247251][T29363] lo speed is unknown, defaulting to 1000
[  961.311539][T29368] validate_nla: 71 callbacks suppressed
[  961.311551][T29368] netlink: 'syz.1.23651': attribute type 4 has an invalid length.
[  961.328704][T29368] netlink: 'syz.1.23651': attribute type 4 has an invalid length.
[  961.333779][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23651'.
[  961.436601][T29375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.23654'.
[  961.622402][T29387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23656'.
[  961.625212][T29387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23656'.
[  961.723743][T29391] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  961.790521][T29405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23662'.
[  961.793864][T29405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23662'.
[  961.815633][T29402] netlink: 'syz.1.23661': attribute type 10 has an invalid length.
[  961.830429][T29402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23661'.
[  961.903210][T29415] netem: change failed
[  961.955993][T29415] netlink: 'syz.2.23666': attribute type 11 has an invalid length.
[  961.994173][T29424] netlink: 'syz.1.23670': attribute type 21 has an invalid length.
[  962.082898][T29433] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  962.086607][T29433] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  962.270345][T29455] wg1 speed is unknown, defaulting to 1000
[  962.366749][T29455] lo speed is unknown, defaulting to 1000
[  962.698761][T29472] netlink: 'syz.2.23682': attribute type 11 has an invalid length.
[  962.743010][T29476] sctp: [Deprecated]: syz.2.23683 (pid 29476) Use of int in maxseg socket option.
[  962.743010][T29476] Use struct sctp_assoc_value instead
[  963.152887][T29500] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  963.156238][T29500] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  963.213850][T29501] gtp7: entered promiscuous mode
[  963.215753][T29501] gtp7: entered allmulticast mode
[  963.468730][T23091] net_ratelimit: 74 callbacks suppressed
[  963.468743][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  963.488313][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  963.578471][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  963.598303][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  963.688533][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  963.708401][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  963.808537][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  963.818769][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  963.886456][T29522] netlink: 'syz.2.23694': attribute type 1 has an invalid length.
[  963.918407][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  963.928369][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  964.198211][   T34] audit: type=1800 audit(1772584344.950:28): pid=29530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.23698" name="memory.events" dev="tmpfs" ino=39105 res=0 errno=0
[  964.242810][T29530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.479657][T29570] syzkaller1: left promiscuous mode
[  964.481263][T29570] syzkaller1: left allmulticast mode
[  964.637354][T29584] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0
[  964.830690][T29604] netlink: 'syz.1.23720': attribute type 21 has an invalid length.
[  965.044702][T29618] __nla_validate_parse: 13 callbacks suppressed
[  965.044717][T29618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.23725'.
[  965.349202][T29633] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23732'.
[  965.437226][T29635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23733'.
[  965.499094][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23735'.
[  965.586722][T29648] netlink: 156 bytes leftover after parsing attributes in process `syz.0.23737'.
[  965.593179][T29648] netlink: 'syz.0.23737': attribute type 3 has an invalid length.
[  965.990428][T29664] x_tables: ip6_tables: mh match: only valid for protocol 135
[  966.025824][T29667] netlink: 'syz.1.23744': attribute type 10 has an invalid length.
[  966.087060][T29671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23746'.
[  966.144780][T29673] netlink: 'syz.1.23747': attribute type 1 has an invalid length.
[  966.147996][T29673] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23747'.
[  966.371660][T29678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23749'.
[  966.374284][T29678] netlink: 'syz.2.23749': attribute type 21 has an invalid length.
[  966.408324][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23750'.
[  966.447756][T29682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23749'.
[  966.510119][T29689] netlink: 'syz.0.23753': attribute type 11 has an invalid length.
[  966.595783][T29693] netlink: 'syz.0.23755': attribute type 10 has an invalid length.
[  967.051467][T29703] netlink: 'syz.1.23759': attribute type 10 has an invalid length.
[  967.151122][T29709] xt_nfacct: accounting object `syz0' does not exist
[  967.246639][T29715] netlink: 'syz.1.23765': attribute type 2 has an invalid length.
[  967.292069][T29717] netlink: 'syz.2.23766': attribute type 1 has an invalid length.
[  967.346099][T29723] xt_nfacct: accounting object `syz0' does not exist
[  967.910881][T29775] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  967.913856][T29775] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  967.946166][T29776] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  967.950095][T29776] CPU: 0 UID: 0 PID: 29776 Comm: syz.2.23785 Not tainted syzkaller #0 PREEMPT(full) 
[  967.950108][T29776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  967.950115][T29776] Call Trace:
[  967.950119][T29776]  <TASK>
[  967.950123][T29776]  dump_stack_lvl+0xe8/0x150
[  967.950140][T29776]  sysfs_warn_dup+0x8e/0xa0
[  967.950154][T29776]  sysfs_do_create_link_sd+0xc0/0x110
[  967.950166][T29776]  device_add_class_symlinks+0x1cf/0x240
[  967.950177][T29776]  device_add+0x475/0xb70
[  967.950187][T29776]  wiphy_register+0x1d73/0x2d50
[  967.950206][T29776]  ? __pfx_wiphy_register+0x10/0x10
[  967.950216][T29776]  ? __pfx_netdev_run_todo+0x10/0x10
[  967.950224][T29776]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  967.950237][T29776]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  967.950252][T29776]  ieee80211_register_hw+0x3562/0x4200
[  967.950268][T29776]  ? ieee80211_register_hw+0x1471/0x4200
[  967.950281][T29776]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  967.950298][T29776]  ? __hrtimer_setup+0x181/0x200
[  967.950309][T29776]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  967.950320][T29776]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  967.950342][T29776]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  967.950349][T29776]  ? kstrndup+0xbf/0x160
[  967.950364][T29776]  hwsim_new_radio_nl+0xf35/0x1bd0
[  967.950382][T29776]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  967.950395][T29776]  ? rcu_is_watching+0x15/0xb0
[  967.950406][T29776]  ? trace_kmalloc+0x2a/0x110
[  967.950419][T29776]  ? __nla_parse+0x40/0x60
[  967.950432][T29776]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  967.950448][T29776]  genl_family_rcv_msg_doit+0x22a/0x330
[  967.950463][T29776]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  967.950481][T29776]  ? bpf_lsm_capable+0x9/0x20
[  967.950491][T29776]  ? security_capable+0x7e/0x2c0
[  967.950504][T29776]  genl_rcv_msg+0x61c/0x7a0
[  967.950519][T29776]  ? __pfx_genl_rcv_msg+0x10/0x10
[  967.950530][T29776]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  967.950538][T29776]  ? __lock_acquire+0x6b5/0x2cf0
[  967.950554][T29776]  netlink_rcv_skb+0x232/0x4b0
[  967.950564][T29776]  ? __pfx_genl_rcv_msg+0x10/0x10
[  967.950576][T29776]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  967.950594][T29776]  ? down_read+0x272/0x2e0
[  967.950602][T29776]  ? genl_rcv+0xd/0x40
[  967.950615][T29776]  genl_rcv+0x28/0x40
[  967.950625][T29776]  netlink_unicast+0x80f/0x9b0
[  967.950638][T29776]  ? __pfx_netlink_unicast+0x10/0x10
[  967.950648][T29776]  ? netlink_sendmsg+0x650/0xb40
[  967.950656][T29776]  ? skb_put+0x11b/0x210
[  967.950670][T29776]  netlink_sendmsg+0x813/0xb40
[  967.950684][T29776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.950695][T29776]  ? aa_sock_msg_perm+0xf1/0x1b0
[  967.950706][T29776]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  967.950715][T29776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.950724][T29776]  ____sys_sendmsg+0xa68/0xad0
[  967.950735][T29776]  ? futex_unqueue+0x211/0x240
[  967.950749][T29776]  ? __pfx_____sys_sendmsg+0x10/0x10
[  967.950794][T29776]  ? import_iovec+0x73/0xa0
[  967.950810][T29776]  ___sys_sendmsg+0x2a5/0x360
[  967.950826][T29776]  ? __pfx____sys_sendmsg+0x10/0x10
[  967.950841][T29776]  ? futex_wait+0x29a/0x380
[  967.950865][T29776]  ? __fget_files+0x2a/0x420
[  967.950875][T29776]  ? __fget_files+0x3a0/0x420
[  967.950891][T29776]  __x64_sys_sendmsg+0x1bd/0x2a0
[  967.950904][T29776]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  967.950940][T29776]  ? rcu_is_watching+0x15/0xb0
[  967.950960][T29776]  do_syscall_64+0x14d/0xf80
[  967.950968][T29776]  ? trace_irq_disable+0x3b/0x150
[  967.950979][T29776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.950990][T29776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.950998][T29776] RIP: 0033:0x7f872239c799
[  967.951007][T29776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.951015][T29776] RSP: 002b:00007f87205f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.951025][T29776] RAX: ffffffffffffffda RBX: 00007f8722616090 RCX: 00007f872239c799
[  967.951031][T29776] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  967.951037][T29776] RBP: 00007f8722432bd9 R08: 0000000000000000 R09: 0000000000000000
[  967.951042][T29776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  967.951047][T29776] R13: 00007f8722616128 R14: 00007f8722616090 R15: 00007ffdafe7b3e8
[  967.951062][T29776]  </TASK>
[  968.538434][T23091] net_ratelimit: 78 callbacks suppressed
[  968.538451][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  968.558391][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  968.607328][T29791] netlink: 'syz.1.23791': attribute type 11 has an invalid length.
[  968.648971][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  968.669040][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  968.768580][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  968.778725][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  968.850469][T29802] netlink: 'syz.0.23795': attribute type 1 has an invalid length.
[  968.892798][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  968.895564][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  968.998247][   T13] bond24: (slave bridge25): failed to get link speed/duplex
[  969.038348][   T13] bond27: (slave bridge30): failed to get link speed/duplex
[  969.397849][T29842] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  969.400567][T29842] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  969.467770][T29846] netlink: 'syz.0.23810': attribute type 16 has an invalid length.
[  969.846735][T29858] wg1 speed is unknown, defaulting to 1000
[  970.097366][T29858] lo speed is unknown, defaulting to 1000
[  970.617116][T29890] __nla_validate_parse: 19 callbacks suppressed
[  970.617129][T29890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23819'.
[  971.183963][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23826'.
[  971.186755][T29917] netlink: 'syz.2.23826': attribute type 21 has an invalid length.
[  971.719033][T29922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23827'.
[  971.796117][T29926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23828'.
[  971.802507][T29926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23828'.
[  971.846858][T29931] wg1 speed is unknown, defaulting to 1000
[  972.006159][T29931] lo speed is unknown, defaulting to 1000
[  972.122907][T29942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23831'.
[  972.126420][T29942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23831'.
[  972.283530][T29945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.23832'.
[  972.286609][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23832'.
[  972.447686][T29951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23834'.
[  972.740691][T29985] xt_nfacct: accounting object `syz0' does not exist
[  973.244773][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.247383][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.254858][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.257476][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.260216][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.263037][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.265857][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.270952][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.273558][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.276231][T30027] netlink: 'syz.1.23853': attribute type 89 has an invalid length.
[  973.648193][ T5828] net_ratelimit: 79 callbacks suppressed
[  973.648207][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  973.672651][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  973.769375][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  973.778543][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  973.898411][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  973.918292][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  974.008462][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  974.024010][T30061] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  974.027729][T30061] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  974.031029][T30061] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  974.052711][T30061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.058276][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  974.065130][T30061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.118197][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  974.168198][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  974.338576][T30072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  974.342443][T30072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  974.714832][T30085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.813770][T30092] netlink: 'syz.2.23870': attribute type 11 has an invalid length.
[  974.943211][T30107] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0
[  975.064658][T30112] netlink: 'syz.2.23878': attribute type 11 has an invalid length.
[  975.376756][T30139] xt_TCPMSS: Only works on TCP SYN packets
[  975.382706][T30139] netlink: 'syz.1.23885': attribute type 11 has an invalid length.
[  975.654113][T30164] __nla_validate_parse: 103 callbacks suppressed
[  975.654125][T30164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23894'.
[  975.663912][T30164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23894'.
[  975.955362][T30177] wg1 speed is unknown, defaulting to 1000
[  975.990034][T30178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23899'.
[  975.993541][T30178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23899'.
[  976.000273][T30178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.082389][T30177] lo speed is unknown, defaulting to 1000
[  976.467535][   T34] audit: type=1800 audit(1772584357.210:29): pid=30192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23902" name="memory.events" dev="tmpfs" ino=40647 res=0 errno=0
[  976.477299][T30198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23905'.
[  976.572097][T30188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.600606][T30208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23907'.
[  976.678295][T30212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23910'.
[  976.682519][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23910'.
[  976.705114][T30214] wg1 speed is unknown, defaulting to 1000
[  976.831629][T30214] lo speed is unknown, defaulting to 1000
[  977.085091][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23911'.
[  977.170045][T30225] netlink: 'syz.0.23912': attribute type 11 has an invalid length.
[  977.439152][T30245] netlink: 'syz.1.23918': attribute type 11 has an invalid length.
[  977.464270][T30252] xt_nfacct: accounting object `syz0' does not exist
[  977.629882][T30269] xt_nfacct: accounting object `syz0' does not exist
[  977.674310][T30274] wg1 speed is unknown, defaulting to 1000
[  977.681476][T30276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23929'.
[  977.887600][T30274] lo speed is unknown, defaulting to 1000
[  977.960581][T30292] wg1 speed is unknown, defaulting to 1000
[  978.225474][T30307] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  978.239784][T30307] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  978.279016][T30292] lo speed is unknown, defaulting to 1000
[  978.429029][T30314] can: request_module (can-proto-4) failed.
[  978.529605][T30325] 8021q: VLANs not supported on syzkaller1
[  978.651684][T30328] netlink: 'syz.1.23940': attribute type 11 has an invalid length.
[  978.747148][T30330] netlink: 'syz.0.23941': attribute type 11 has an invalid length.
[  978.828484][ T5869] net_ratelimit: 72 callbacks suppressed
[  978.828501][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  978.848431][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  978.880950][T30343] validate_nla: 62 callbacks suppressed
[  978.880962][T30343] netlink: 'syz.0.23945': attribute type 10 has an invalid length.
[  978.938191][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  978.956656][T30350] wg1 speed is unknown, defaulting to 1000
[  978.958691][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  979.048172][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  979.078200][T23091] bond24: (slave bridge25): failed to get link speed/duplex
[  979.092872][T30350] lo speed is unknown, defaulting to 1000
[  979.158165][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  979.188357][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  979.270304][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  979.302573][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  979.331832][T30358] netlink: 'syz.2.23949': attribute type 10 has an invalid length.
[  979.477211][T30363] wg1 speed is unknown, defaulting to 1000
[  979.544806][T30369] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0
[  979.597766][T30363] lo speed is unknown, defaulting to 1000
[  979.619788][T30371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  979.628167][T30371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  980.619038][T30394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.004330][T30425] netlink: 'syz.2.23962': attribute type 10 has an invalid length.
[  981.034547][T30425] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  981.037219][T30425] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  981.156245][T30449] __nla_validate_parse: 9 callbacks suppressed
[  981.156256][T30449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23968'.
[  981.194925][T30453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.217678][T30453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.256369][T30460] netlink: 'syz.2.23972': attribute type 1 has an invalid length.
[  981.261120][T30460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23972'.
[  981.279181][T30462] netlink: 'syz.0.23973': attribute type 11 has an invalid length.
[  981.295282][T30466] netlink: 211792 bytes leftover after parsing attributes in process `syz.2.23974'.
[  981.478459][T30483] xt_nfacct: accounting object `syz0' does not exist
[  981.630957][T30502] netlink: 'syz.2.23984': attribute type 3 has an invalid length.
[  981.633416][T30502] netlink: 'syz.2.23984': attribute type 3 has an invalid length.
[  981.703090][T30504] netlink: 'syz.2.23985': attribute type 1 has an invalid length.
[  981.705684][T30504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.23985'.
[  981.793241][T30512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23986'.
[  981.796916][T30512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23986'.
[  981.801478][T30512] tipc: Invalid UDP bearer configuration
[  981.801519][T30512] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  981.823926][T30514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  981.827789][T30514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  981.849445][T30516] xt_nfacct: accounting object `syz0' does not exist
[  981.980870][T30523] tap0: tun_chr_ioctl cmd 1074025676
[  981.983115][T30523] tap0: owner set to 0
[  982.289470][   T34] audit: type=1800 audit(1772584363.040:30): pid=30534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.23994" name="memory.events" dev="tmpfs" ino=40486 res=0 errno=0
[  982.334953][T30533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.431860][T30536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23995'.
[  982.662436][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23997'.
[  982.668143][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23997'.
[  982.867184][T30550] xt_nfacct: accounting object `syz0' does not exist
[  982.895210][T30552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24000'.
[  983.001641][T30561] syzkaller1: entered promiscuous mode
[  983.003474][T30561] syzkaller1: entered allmulticast mode
[  983.490081][T30574] netlink: 'syz.0.24005': attribute type 2 has an invalid length.
[  983.548305][T30574] dvmrp0: left allmulticast mode
[  983.550345][T30574] pimreg: left allmulticast mode
[  983.858219][ T5869] net_ratelimit: 78 callbacks suppressed
[  983.858238][ T5869] bond27: (slave bridge30): failed to get link speed/duplex
[  983.868382][ T5869] bond24: (slave bridge25): failed to get link speed/duplex
[  983.946208][T30601] xt_nfacct: accounting object `syz0' does not exist
[  983.982783][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  983.992326][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  984.088287][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  984.100319][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  984.120640][T30622] wg1 speed is unknown, defaulting to 1000
[  984.198988][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  984.209405][T23091] bond27: (slave bridge30): failed to get link speed/duplex
[  984.255632][T30622] lo speed is unknown, defaulting to 1000
[  984.318207][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  984.338258][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  984.484492][T30632] netlink: 'syz.2.24021': attribute type 11 has an invalid length.
[  984.943864][T30670] wg1 speed is unknown, defaulting to 1000
[  984.978607][T30671] net veth1_virt_wifi : renamed from virt_wifi0
[  985.028582][T30677] netlink: 'syz.1.24030': attribute type 10 has an invalid length.
[  985.131225][T30670] lo speed is unknown, defaulting to 1000
[  985.277693][T30686] netlink: 'syz.1.24033': attribute type 4 has an invalid length.
[  985.531275][T30694] netlink: 'syz.1.24037': attribute type 1 has an invalid length.
[  985.611577][T30707] xt_nfacct: accounting object `syz0' does not exist
[  985.697991][T30715] can: request_module (can-proto-5) failed.
[  985.833276][T30731] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode
[  985.835657][T30731] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode
[  985.840664][T30726] wg1 speed is unknown, defaulting to 1000
[  986.101245][T30726] lo speed is unknown, defaulting to 1000
[  986.762165][T30784] wg1 speed is unknown, defaulting to 1000
[  986.865603][T30784] lo speed is unknown, defaulting to 1000
[  987.369129][T30815] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode
[  987.371451][T30815] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode
[  987.439823][T30824] __nla_validate_parse: 18 callbacks suppressed
[  987.439839][T30824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24071'.
[  987.447123][T30824] nbd: must specify at least one socket
[  987.495599][T30835] netlink: 'syz.0.24075': attribute type 11 has an invalid length.
[  987.565455][T30838] netlink: 'syz.2.24074': attribute type 11 has an invalid length.
[  987.704229][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24077'.
[  987.707602][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24077'.
[  987.793829][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24081'.
[  987.837043][T30860] xt_nfacct: accounting object `syz0' does not exist
[  987.956258][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24085'.
[  988.082371][T30879] tun0: tun_chr_ioctl cmd 1074025675
[  988.084466][T30879] tun0: persist enabled
[  988.089206][T30879] tun0: tun_chr_ioctl cmd 1074025675
[  988.091208][T30879] tun0: persist disabled
[  988.096579][T30879] netlink: 'syz.1.24086': attribute type 11 has an invalid length.
[  988.124869][T30882] wg1 speed is unknown, defaulting to 1000
[  988.173702][T30885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24087'.
[  988.214930][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24089'.
[  988.251748][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24087'.
[  988.372812][T30882] lo speed is unknown, defaulting to 1000
[  988.421920][T30900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24093'.
[  988.461403][T30904] syzkaller1: left promiscuous mode
[  988.462986][T30904] syzkaller1: left allmulticast mode
[  988.468236][    C1] ip6_tunnel: ip6gretap9 xmit: Local address not yet configured!
[  988.550841][T30910] netlink: 'syz.1.24095': attribute type 83 has an invalid length.
[  988.719675][T30928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24100'.
[  988.886206][T30942] sctp: [Deprecated]: syz.1.24106 (pid 30942) Use of int in maxseg socket option.
[  988.886206][T30942] Use struct sctp_assoc_value instead
[  988.908258][ T5828] net_ratelimit: 123 callbacks suppressed
[  988.908309][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  988.938449][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  989.030400][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  989.058438][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  989.148365][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  989.168185][ T5828] bond24: (slave bridge25): failed to get link speed/duplex
[  989.257005][T30947] netlink: 'syz.0.24108': attribute type 6 has an invalid length.
[  989.278360][ T9766] bond27: (slave bridge30): failed to get link speed/duplex
[  989.298212][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  989.388339][ T5828] bond27: (slave bridge30): failed to get link speed/duplex
[  989.408374][ T9766] bond24: (slave bridge25): failed to get link speed/duplex
[  989.459977][T30954] netlink: 'syz.0.24111': attribute type 6 has an invalid length.
[  989.569459][T30959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  989.572833][T30959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  989.679606][T30966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  989.683355][T30966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  989.741143][T30971] netlink: 'syz.2.24116': attribute type 2 has an invalid length.
[  989.789314][T30976] netlink: 'syz.1.24117': attribute type 11 has an invalid length.
[  989.956257][T30995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  990.037958][T30995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  990.807713][T31050] wg1 speed is unknown, defaulting to 1000
[  990.945816][T31050] lo speed is unknown, defaulting to 1000
[  991.146351][T31077] xt_nfacct: accounting object `syz0' does not exist
[  991.186076][T31079] netlink: 'syz.0.24139': attribute type 1 has an invalid length.
[  991.271478][T31087] netlink: 'syz.2.24142': attribute type 21 has an invalid length.
[  991.275983][T31086] netlink: 'syz.2.24142': attribute type 21 has an invalid length.
[  991.356326][T31092] netlink: 'syz.0.24144': attribute type 10 has an invalid length.
[  991.393203][T31096] mac80211_hwsim hwsim72 syzkaller0: left promiscuous mode
[  991.396630][T31096] mac80211_hwsim hwsim72 syzkaller0: left allmulticast mode
[  991.555773][T31112] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  991.564734][T31112] CPU: 1 UID: 0 PID: 31112 Comm: syz.0.24151 Not tainted syzkaller #0 PREEMPT(full) 
[  991.564754][T31112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  991.564764][T31112] Call Trace:
[  991.564770][T31112]  <TASK>
[  991.564777][T31112]  dump_stack_lvl+0xe8/0x150
[  991.564804][T31112]  sysfs_warn_dup+0x8e/0xa0
[  991.564825][T31112]  sysfs_do_create_link_sd+0xc0/0x110
[  991.564846][T31112]  device_add_class_symlinks+0x1cf/0x240
[  991.564864][T31112]  device_add+0x475/0xb70
[  991.564880][T31112]  wiphy_register+0x1d73/0x2d50
[  991.564911][T31112]  ? __pfx_wiphy_register+0x10/0x10
[  991.564929][T31112]  ? __pfx_netdev_run_todo+0x10/0x10
[  991.564944][T31112]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  991.564969][T31112]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  991.564997][T31112]  ieee80211_register_hw+0x3562/0x4200
[  991.565025][T31112]  ? ieee80211_register_hw+0x1471/0x4200
[  991.565048][T31112]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  991.565075][T31112]  ? __hrtimer_setup+0x181/0x200
[  991.565095][T31112]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  991.565115][T31112]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  991.565152][T31112]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  991.565165][T31112]  ? kstrndup+0xbf/0x160
[  991.565193][T31112]  hwsim_new_radio_nl+0xf35/0x1bd0
[  991.565228][T31112]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  991.565252][T31112]  ? rcu_is_watching+0x15/0xb0
[  991.565272][T31112]  ? trace_kmalloc+0x2a/0x110
[  991.565293][T31112]  ? __nla_parse+0x40/0x60
[  991.565325][T31112]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  991.565355][T31112]  genl_family_rcv_msg_doit+0x22a/0x330
[  991.565383][T31112]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  991.565417][T31112]  ? bpf_lsm_capable+0x9/0x20
[  991.565436][T31112]  ? security_capable+0x7e/0x2c0
[  991.565458][T31112]  genl_rcv_msg+0x61c/0x7a0
[  991.565483][T31112]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.565502][T31112]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  991.565517][T31112]  ? __lock_acquire+0x6b5/0x2cf0
[  991.565544][T31112]  netlink_rcv_skb+0x232/0x4b0
[  991.565561][T31112]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.565583][T31112]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  991.565613][T31112]  ? down_read+0x272/0x2e0
[  991.565628][T31112]  ? genl_rcv+0xd/0x40
[  991.565647][T31112]  genl_rcv+0x28/0x40
[  991.565708][T31112]  netlink_unicast+0x80f/0x9b0
[  991.565732][T31112]  ? __pfx_netlink_unicast+0x10/0x10
[  991.565750][T31112]  ? netlink_sendmsg+0x650/0xb40
[  991.565766][T31112]  ? skb_put+0x11b/0x210
[  991.565788][T31112]  netlink_sendmsg+0x813/0xb40
[  991.565812][T31112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  991.565833][T31112]  ? aa_sock_msg_perm+0xf1/0x1b0
[  991.565851][T31112]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  991.565867][T31112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  991.565885][T31112]  ____sys_sendmsg+0xa68/0xad0
[  991.565905][T31112]  ? futex_unqueue+0x211/0x240
[  991.565928][T31112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  991.565957][T31112]  ? import_iovec+0x73/0xa0
[  991.565977][T31112]  ___sys_sendmsg+0x2a5/0x360
[  991.566000][T31112]  ? __pfx____sys_sendmsg+0x10/0x10
[  991.566028][T31112]  ? futex_wait+0x29a/0x380
[  991.566069][T31112]  ? __fget_files+0x2a/0x420
[  991.566087][T31112]  ? __fget_files+0x3a0/0x420
[  991.566116][T31112]  __x64_sys_sendmsg+0x1bd/0x2a0
[  991.566140][T31112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  991.566169][T31112]  ? rcu_is_watching+0x15/0xb0
[  991.566197][T31112]  do_syscall_64+0x14d/0xf80
[  991.566210][T31112]  ? trace_irq_disable+0x3b/0x150
[  991.566229][T31112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.566248][T31112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.566262][T31112] RIP: 0033:0x7f97d5b9c799
[  991.566277][T31112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  991.566289][T31112] RSP: 002b:00007f97d6a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.566305][T31112] RAX: ffffffffffffffda RBX: 00007f97d5e15fa0 RCX: 00007f97d5b9c799
[  991.566324][T31112] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  991.566335][T31112] RBP: 00007f97d5c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  991.566344][T31112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.566352][T31112] R13: 00007f97d5e16038 R14: 00007f97d5e15fa0 R15: 00007ffe15f3adc8
[  991.566377][T31112]  </TASK>
[  991.712213][T31109] netlink: 'syz.1.24150': attribute type 11 has an invalid length.
[  991.784783][T31120] 8021q: VLANs not supported on syzkaller1
[  992.061083][T31139] tipc: Resetting bearer <eth:ip6gre0>
[  992.219072][T31139] erspan0: left allmulticast mode
[  992.479974][    T9] wg1 speed is unknown, defaulting to 1000
[  992.484269][T23091] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  992.486894][T23091] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.490398][T23091] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  992.493649][T23091] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.496522][T23091] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  992.498220][    T9] syz0: Port: 1 Link DOWN
[  992.499901][T23091] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.503831][T23091] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  992.506550][T23091] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.805712][T31167] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  992.809927][T31167] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  992.814445][ T5869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.819827][ T5869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.825372][ T5869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.831345][ T5869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.918295][T31180] __nla_validate_parse: 14 callbacks suppressed
[  992.918306][T31180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24169'.
[  992.990392][T31184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24170'.
[  992.993777][T31184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24170'.
[  993.108985][T31193] 
[  993.109805][T31193] ======================================================
[  993.111927][T31193] WARNING: possible circular locking dependency detected
[  993.114047][T31193] syzkaller #0 Not tainted
[  993.115625][T31193] ------------------------------------------------------
[  993.118142][T31193] syz.0.24175/31193 is trying to acquire lock:
[  993.120365][T31193] ffffffff8fd492d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  993.123734][T31193] 
[  993.123734][T31193] but task is already holding lock:
[  993.126290][T31193] ffff88816d5a7070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  993.129637][T31193] 
[  993.129637][T31193] which lock already depends on the new lock.
[  993.129637][T31193] 
[  993.133194][T31193] 
[  993.133194][T31193] the existing dependency chain (in reverse order) is:
[  993.136365][T31193] 
[  993.136365][T31193] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  993.139133][T31193]        _raw_spin_lock_bh+0x36/0x50
[  993.141068][T31193]        nr_rt_ioctl+0x215/0xf90
[  993.142814][T31193]        sock_do_ioctl+0x101/0x320
[  993.144617][T31193]        sock_ioctl+0x5c6/0x7f0
[  993.146378][T31193]        __se_sys_ioctl+0xfc/0x170
[  993.148246][T31193]        do_syscall_64+0x14d/0xf80
[  993.150082][T31193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.152704][T31193] 
[  993.152704][T31193] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  993.155572][T31193]        _raw_spin_lock_bh+0x36/0x50
[  993.157302][T31193]        nr_rt_device_down+0xbe/0x860
[  993.159233][T31193]        nr_device_event+0x137/0x150
[  993.161014][T31193]        notifier_call_chain+0x1be/0x400
[  993.162728][T31193]        __dev_notify_flags+0x16d/0x310
[  993.164558][T31193]        netif_change_flags+0xe8/0x1a0
[  993.166145][T31193]        dev_change_flags+0x130/0x260
[  993.167754][T31193]        dev_ioctl+0x7b4/0x1150
[  993.169151][T31193]        sock_do_ioctl+0x23e/0x320
[  993.170671][T31193]        sock_ioctl+0x5c6/0x7f0
[  993.172134][T31193]        __se_sys_ioctl+0xfc/0x170
[  993.173670][T31193]        do_syscall_64+0x14d/0xf80
[  993.175193][T31193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.177085][T31193] 
[  993.177085][T31193] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  993.179417][T31193]        __lock_acquire+0x15a5/0x2cf0
[  993.181047][T31193]        lock_acquire+0xf0/0x2e0
[  993.182552][T31193]        _raw_spin_lock_bh+0x36/0x50
[  993.184134][T31193]        nr_rt_ioctl+0x40c/0xf90
[  993.185620][T31193]        sock_do_ioctl+0x101/0x320
[  993.187148][T31193]        sock_ioctl+0x5c6/0x7f0
[  993.188649][T31193]        __se_sys_ioctl+0xfc/0x170
[  993.190183][T31193]        do_syscall_64+0x14d/0xf80
[  993.191743][T31193]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.193652][T31193] 
[  993.193652][T31193] other info that might help us debug this:
[  993.193652][T31193] 
[  993.196582][T31193] Chain exists of:
[  993.196582][T31193]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  993.196582][T31193] 
[  993.200784][T31193]  Possible unsafe locking scenario:
[  993.200784][T31193] 
[  993.203023][T31193]        CPU0                    CPU1
[  993.204833][T31193]        ----                    ----
[  993.206442][T31193]   lock(&nr_node->node_lock);
[  993.207906][T31193]                                lock(nr_node_list_lock);
[  993.210016][T31193]                                lock(&nr_node->node_lock);
[  993.212181][T31193]   lock(nr_neigh_list_lock);
[  993.213602][T31193] 
[  993.213602][T31193]  *** DEADLOCK ***
[  993.213602][T31193] 
[  993.216367][T31193] 2 locks held by syz.0.24175/31193:
[  993.218017][T31193]  #0: ffffffff8fd49338 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  993.220848][T31193]  #1: ffff88816d5a7070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  993.223735][T31193] 
[  993.223735][T31193] stack backtrace:
[  993.225511][T31193] CPU: 1 UID: 0 PID: 31193 Comm: syz.0.24175 Not tainted syzkaller #0 PREEMPT(full) 
[  993.225549][T31193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  993.225559][T31193] Call Trace:
[  993.225568][T31193]  <TASK>
[  993.225575][T31193]  dump_stack_lvl+0xe8/0x150
[  993.225590][T31193]  print_circular_bug+0x2e1/0x300
[  993.225605][T31193]  check_noncircular+0x12e/0x150
[  993.225620][T31193]  __lock_acquire+0x15a5/0x2cf0
[  993.225634][T31193]  lock_acquire+0xf0/0x2e0
[  993.225643][T31193]  ? nr_rt_ioctl+0x40c/0xf90
[  993.225652][T31193]  ? nr_rt_ioctl+0x40c/0xf90
[  993.225658][T31193]  _raw_spin_lock_bh+0x36/0x50
[  993.225669][T31193]  ? nr_rt_ioctl+0x40c/0xf90
[  993.225676][T31193]  nr_rt_ioctl+0x40c/0xf90
[  993.225685][T31193]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  993.225695][T31193]  ? apparmor_capable+0x126/0x170
[  993.225708][T31193]  ? capable+0x88/0xe0
[  993.225718][T31193]  ? nr_ioctl+0x1b1/0x3b0
[  993.225729][T31193]  sock_do_ioctl+0x101/0x320
[  993.225739][T31193]  ? __pfx_sock_do_ioctl+0x10/0x10
[  993.225746][T31193]  ? do_futex+0x333/0x420
[  993.225759][T31193]  sock_ioctl+0x5c6/0x7f0
[  993.225768][T31193]  ? __pfx_sock_ioctl+0x10/0x10
[  993.225776][T31193]  ? __fget_files+0x2a/0x420
[  993.225786][T31193]  ? __fget_files+0x3a0/0x420
[  993.225796][T31193]  ? __fget_files+0x2a/0x420
[  993.225806][T31193]  ? bpf_lsm_file_ioctl+0x9/0x20
[  993.225816][T31193]  ? __pfx_sock_ioctl+0x10/0x10
[  993.225823][T31193]  __se_sys_ioctl+0xfc/0x170
[  993.225832][T31193]  do_syscall_64+0x14d/0xf80
[  993.225839][T31193]  ? trace_irq_disable+0x3b/0x150
[  993.225850][T31193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.225859][T31193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.225866][T31193] RIP: 0033:0x7f97d5b9c799
[  993.225877][T31193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.225883][T31193] RSP: 002b:00007f97d6a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  993.225892][T31193] RAX: ffffffffffffffda RBX: 00007f97d5e15fa0 RCX: 00007f97d5b9c799
[  993.225900][T31193] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008
[  993.225905][T31193] RBP: 00007f97d5c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  993.225910][T31193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.225915][T31193] R13: 00007f97d5e16038 R14: 00007f97d5e15fa0 R15: 00007ffe15f3adc8
[  993.225926][T31193]  </TASK>
