last executing test programs:

16.558298029s ago: executing program 0 (id=1563):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014d08a901c8cbb2cca0010000000000000ca4d4a631167ba0421c4f9a367c1bbaa7db9e2111fdbabe5beeed7a7096cbf594c03d3a262a5988399f4257702e64e8573145b510730249f9a114276ceba51884bcd14c647ff7a7dcf868e2f9cae62ab32cd20e892770ac1e1", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r4)
socket(0x23, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x254}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000180)="b4da6bc68844")

16.478880703s ago: executing program 0 (id=1566):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5d, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7aebd"}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
unshare(0x20000400)
r2 = epoll_create1(0x0)
epoll_pwait(r2, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000c80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
syz_emit_ethernet(0x93, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5d, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7aebd"}}}}}}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
unshare(0x20000400) (async)
epoll_create1(0x0) (async)
epoll_pwait(r2, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async)
write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000c80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) (async)

16.470646483s ago: executing program 0 (id=1569):
socket$kcm(0x29, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$isdn_base(0x22, 0x3, 0x0) (async)
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)=ANY=[@ANYBLOB="14000000010205"], 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'dummy0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)

16.387365821s ago: executing program 0 (id=1570):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000e6ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21, @ANYRES8=<r2=>0xffffffffffffffff, @ANYRES16, @ANYRESOCT], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f00000003c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x0)
r11 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r12, {0xffe0, 0x9}, {0x2}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) (async, rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r1, @ANYBLOB="6b5669dc140757cb4069fa1c34b24bddf55201a8339d3c2c12b5e6c27e3e238842c7084475df9818c3fcb94c23cefc4307e57b2d623e401d0bed59617ad9db2a5d81dc091f399345a14569623c717477245c75205705cf97d32c72c155b5c60e7ab9d599cc1cdc5d2a732a099e1b9a1e2f60637d0a017e9c7f352c4f4f52f6b5479671ab1ca2856fb120f6a4083bf2c94e6aa6089d4ca697328ee5951de88d819c08aa5bd5e3b5baa72b52992fadf99405ba294efa2366c198364c4038d569fc7601171f104223c59ed8f4d2937a5f4afec6bc89d1461355ac3c4381dbe204826e4ae89389b827db05db377b84b19c620f5532e0", @ANYBLOB="08000100e000000208000200e000000208000400ac1414aa08000400ac1414aa08000a000100000008000200ffffffff"], 0x48}}, 0x20000040) (async, rerun: 32)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES8=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

16.385642521s ago: executing program 2 (id=1571):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x3, 0x0, 0x0, {0xd, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'l2tp\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c004}, 0x20040000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0)
r8 = getpid()
write$cgroup_pid(r7, &(0x7f00000005c0)=r8, 0x12)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x148, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xbf6f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xc7}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_REPLY={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_PROTOINFO={0x54, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x50, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x62}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x14000}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x100000000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2d6e}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x81}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}]}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24004040}, 0x882)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000880)={<r11=>0x0, 0x7, 0x10, 0x4, 0xffffffffffff666c}, &(0x7f00000008c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000980)={r11, 0x48, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x0, @remote}, @in6={0xa, 0x4e22, 0x7, @private2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f00000009c0)=0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r12, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r13, 0x1)
sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x114, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFCTH_TUPLE={0xb8, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044440}, 0xc801)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r3)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x20008041)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ec0), r3)
sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r16, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

16.306169225s ago: executing program 0 (id=1572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000011000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a3100000000ff0f9e9374f40809048024000180090001006d6574610000000014000280080003400000000008000240000000020900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8011)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006c00190cfcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9e840500000000f317003480140035006e696336663005000000000000000000140003007665746831"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40040)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d40000000a0a0104000000000000006d0000000006c0000d402315396ea93a301d3569cde49843eabcfb17e2d4af53f6b58c74170e992624949b663ae17d17f9777c2589cc92a58b44fd90922e5af3dc91d052b2d88b9f9bc5a7fbfc2776e96d380900000000000000d3042f415235de9958d5045b10af9d8cbde12724075f47d03ec5df0e19db74c657692ebfe6dbafb29df785cda6083f891f34c044e008750c790758ab09ebca1aa4d8f679570c0d7f026991eddd7bbde88e1914944e286ecb729a2ecc4eb5441658e309cd545fa7100203eb9f"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x8840)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000011000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a3100000000ff0f9e9374f40809048024000180090001006d6574610000000014000280080003400000000008000240000000020900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8011) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006c00190cfcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9e840500000000f317003480140035006e696336663005000000000000000000140003007665746831"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40040) (async)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d40000000a0a0104000000000000006d0000000006c0000d402315396ea93a301d3569cde49843eabcfb17e2d4af53f6b58c74170e992624949b663ae17d17f9777c2589cc92a58b44fd90922e5af3dc91d052b2d88b9f9bc5a7fbfc2776e96d380900000000000000d3042f415235de9958d5045b10af9d8cbde12724075f47d03ec5df0e19db74c657692ebfe6dbafb29df785cda6083f891f34c044e008750c790758ab09ebca1aa4d8f679570c0d7f026991eddd7bbde88e1914944e286ecb729a2ecc4eb5441658e309cd545fa7100203eb9f"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) (async)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) (async)

16.300213484s ago: executing program 2 (id=1573):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, 0x0, 0x2, 0x102, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2) (async)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000003b00)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x250, 0x340, 0xffffffff, 0x250, 0x160, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000a80), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"8350"}}, @common=@dst={{0x48}, {0x2, 0x1, 0x0, [0x4, 0x4, 0x8, 0xd, 0x8, 0xfff8, 0x0, 0x6, 0xfff, 0x1, 0x1000, 0x7, 0x7, 0xd2, 0xbe2b, 0x401], 0xd}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@empty, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @gre_key, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@mcast2, @ipv6=@local, @gre_key=0x7, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x65, @port=0x4e21}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x4, 0x4, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@remote, @ipv4=@rand_addr=0x64010102, @port=0x4e22, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB='}M\x00'/18], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000c810001fff0000056800080080faff0000", @ANYRESDEC=r5, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x2404c811) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e20, 0x9, 0xa, 0x0, 0x0, 0x2b}, {0x1, 0x1, 0x3, 0x2, 0x100000000, 0x7, 0xfff, 0x2}, {0x8, 0xffffffffffffffff, 0x6, 0x631}, 0x2, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x6, 0x3, 0x2, 0xffffeff8, 0x0, 0x2}}, 0xe8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
sendmmsg$alg(r2, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="95f6b1c9452c462fdc5dee514a2180ba6efea1424c99e8689f75b8536715c40417efa98d247cc0803dada30e8251bae05332a8e33a0f11d0cc588d83a230fe25a3cf74cba29b7401483e24c87780775400869203dcb29333cf08ced072517cb5", 0x60}, {&(0x7f0000000240)="deb93ebad7317c9eefc03d6ade82d91aaa60b576bb5d058b86cccb5ef8cd06a3dc8a3ac1b7fb6aaf19a5b58bceef08093b5246b9f547a6b03b1c07ea618e4c2d2cf5ff22acd29d33db0c676ec3ae8487e8f90594001a1049851b7c09d50317aaf13d1a6da5b4e1cbb648af6b31ace26f1e2f14468a34c6bc9a1249d07f54c63dc08f4eec310add0d6b4c0ecc159c34ffa527e042dd54ba09712db9602a443575869ddb6aef07", 0xa6}, {&(0x7f0000000340)="b5de8d91be8b7a99cb74eecf4aa78c858ecc9189f0e267d2c311c6c4cfb52a2f92e87995d3638233f7f66c90ad6839d4029d7ff386e9f43eeb03900602f634a0b855f49e307a3fe923bc4d408f636d3c51a57f9d60595756c154de7ad01001353a4f7da964c5bcbb78210afee2ae5a5758d38e42ed8631ba0d15e21c227b608a5aef5476e4c0a315ada36ecaebf7150f6127fa908da12f3c0ceac747a930104951499640a0e11b87c008f206567da31c695d7226", 0xb4}, {&(0x7f0000000400)="c135ab4a1a30d54a47da4911356635d944ef4b7e74de79365ca9bdea7b1aa89f8f5138a01bd4a212a4cd7d00a98c7a98598613c6e0d555e7611e3be56ee8fc35c70380354d299aa6fc9a6eb1ee2705695fe529189e41b53d475a94f1f6bf52d1017ee3d05d25a8f3b64c1582233640d687a13ae771019ddae6c11fad", 0x7c}, {&(0x7f0000000540)="18fd770492343de20d956dfa9c919f7b2329c4fc782b00f39926fd29b58994e24384166aec299e7eb5b85ed25fee9b029ca3efa9bd7df08864684bff5395990d52e13738a148ab86bddca913b4e175956a6bc91ee5ae74affe02bb5815f846598c46b121a5b7080fbf8d8fd87bfb1720a40cee9f1d974f7800829acdfeea7547c0d4c67be02382f46c6359d33bf400a44add76ab67a820bc5c16123942de3b0a11647fb00279df8d92", 0xa9}], 0x5, &(0x7f00000000c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x4810}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="0930f4c98dff94f370e42ecd97814f5e7220c178a443b506d1f7a67953cfcd7f0d6c86f6c5c59dd92f710116c56e0523e14306ff1c94d6ea730166d58e6bf24f0f0926f58e3549a1a24f3fdebae1e6ef47543b4fce25e0c71501c1042eec80ae42a84e048bba74140f7b0ff9043936d02a034384ef5b50d103d45fb4b66e", 0x7e}, {&(0x7f0000000140)="b8f651c59527f81b414ad8a3c94eb1e55abf7928063acb69d456", 0x1a}, {&(0x7f0000000680)="e8a5a850b657aff745738542b003fe62341b754c11320f76dc546e766561cd1aeda750ad3a", 0x25}, {&(0x7f00000006c0)="62af320239f6d179c2d2dd4cc537e816297b325f57f259c889238047b70667b0269edf1fbf07ee7bed70f49df3020cc51a7bb360f0dc9d52d718d2cd2e7842f87f70104167964baf161622259a513bb4893470311ada17b2b224a8b9fb0a89d9aaeadf16e6f1f8c7ad46b6691643e041e04579bfc23ab7", 0x77}, {&(0x7f00000036c0)="3686118300c6215082cc87799c6e404736702762dbfd1d45d66a52bf13080b0300000000001dcc2d36ec8902e3f5827ac7e611faf3ca625edfc4e0505906139190a88a76999c27702a0e007a15fe3138d01019b94e6ad80731bf7bc8ba16baa6b5ee939853e78625dc3ece4ee00d388c28b60a581aef2800b2d02eabe392fe12def011650f1e4b0a760cb9f93a26ad107002143a71971a25488fbaf5d9ebca8bbe26c02c0eb1ed98da47e37b68c6bd0fa37b753701d292e440e6a17358170400f1d6c2cc59fab1a56cd43ae282850d3973fdc89fe2f9e8ba88603fa100000000000000", 0xe3}], 0x5, &(0x7f0000000880)=[@assoc={0x18, 0x117, 0x4, 0xf}, @op={0x18}, @iv={0x40, 0x117, 0x2, 0x25, "d1e1aca583fd30812dcc7e07dd3a20bf4f8ffa35a14f185568fc762d6dc631e508e2776e32"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}], 0xa0, 0x81}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="b4fc439507000000000000004cd0bac404296b95", 0x14}, {&(0x7f0000000980)="a2c7856532c9628fbcdbf61025303934ed4a782b39b4626ff08e2a0537e94162667ea256bc93ecb5c21eddd6ee3abaea4c3aa37280c8a8935baa38e727bf61d0864023cbe06ceeddfd04910e6004048e767f3334f5084a48d3da1f50f7733051c74f85faca96dff781bbb7af97c63f683468848dd3d99a824c9ba3c6045d5326f92ab614b39a3fe2cf15b24fc51c7eaa7e252e020abed04da52cb24cecdd3b", 0x9f}], 0x2, &(0x7f00000037c0)=[@assoc={0x18, 0x117, 0x4, 0x800075}, @iv={0x50, 0x117, 0x2, 0x3c, "0d849bc0ade489d9dbb20661d37cc1da28d043e1c0f94a42b43c425a5b4bb086201caae8ddf2fd53288173d8dda0c96adcd95b39410f5748bd6784b6"}, @iv={0x110, 0x117, 0x2, 0xf7, "95718fdab2456c48e2ba4dfebe1a6f912a3cf1baa0518ae66de4b7c5c6061ee4f2f5306c67f571fcbdc57d95ed8d6680f939fea617816e021cbe2dc1b7344e7bc0e87b4556b53ecaa979eb0b64400bc7bd784b44e185305a6fe13cf5d4a33624e7924275508833b28ef949cc24acb52ec771d9b10d5841f6b5a44eee118df3e676bebd6f309076f1415dc0f2c290e666541862ae246be2dc9fbfd19f574dbb2001b4609bcfc0bb1e8d630c26472c28af1757c111ca2b0962291bffab7d6e227ebf98c70b38b46a08bf5ec8b75d48767e9547fe12a5f1a19fdf35ead87bf7f7ced921c44fbb9b4ff2ff2676928b751f70434d0847091f13"}, @iv={0xd0, 0x117, 0x2, 0xb7, "38c634e67307f3d4bb4b8412e1e29bd8cc958712ea3677651a4733203fb87595b4dd74c1e100cd1c5da770e04f4b0f6f127d7568eba461bf44df4f9cf3870f379d61466c979fa234c4c8e601673103a4b9b6600988d9d469fb22de9fa478bcc7344ee0330f2d80d11988fc7345d5adef5a97d105688ea94572100a7b3bd25c9374a3ca522bddb1309d9ab5936d9e21f28770c95b154932ad9db9cfbfb206be0a066dbaaed07377a029e96244eed58c25a81809f0081eb6"}, @iv={0xb0, 0x117, 0x2, 0x9b, "57b542188a856b0a4ad786db84882a8ff50ac19debb3d7b9e8ea928a8a871af517f843939127f525473b54394c5c16963e67b45ee9abf68e4e2e8449dfb403dc74f48182d1c94c21a9310f759185b74c1909ca0505d5b948e294dcf33219a59cf72995df121d0599138eef245637b4a94168c28fd0cafdb154a12fa831b324401edf125acd95ef800ba51d1a23af670b210f6e6308cf04d3afae81"}, @op={0x18, 0x117, 0x3, 0x1}], 0x310, 0x4000}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="f9feb170efea2491f64ac231618f4ed9290ff940f6f6b8ae7c5c516ce2b974b34f07", 0x22}], 0x1, &(0x7f0000001580)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @iv={0x60, 0x117, 0x2, 0x49, "4e2f7d7ed816c1ab5f5ef03744a9948b101a9eb0125fa1001b37477a4ba91b9f6bd942c3ce7822f7a28c98e03d2faab67287fd88c00af1d57fefba1592cd2f2e981cfa80329fb979c1"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd9a4}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1138}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d40)="d4c72208e319752c19deb4a7a44517a2b2f7c490bf4208d393fdc785382d1930c18ff1127cfc675dfe1a70661f525b99591a02fab292ebb3548dca48d31ba62450f0685fbcccbfd82714c2c1679d67d8518c624a32254e512ea9e126167b4d55a2c10b4e6404c7ff0ea052809131281c693da0661ac980e164e5d0a94d9959894fc540d8048e585fc7a234303b88c4ebcb763b42ca61ebeb6083bf5bc7d6846f86c3095186e50b7624811e44843b613b965309cafd3d5080a117afef0fa249131ae8cb39b19832b7ad05eb6c9beed4", 0xcf}, {&(0x7f00000026c0)="8fb5ee788d29a8e355e8b149d7db3f3b4835a5ef1435e4b9d4a7dbebc94e1e64b4a4b7163204f46afd475a515157976edd098ac96a7fa39dc9b9700ecaad580b9f1fc8568087291fd044a3fd50f5e788981f8239515d3010b6c8617042cbfcad74a49a9aef8ea75394badb7e867a19b89901e6ab4d9f8d7822e22623a9c2e3015d6c0cca8248e91eb521b536639c993f71b02ffebbabb1d33c9c62af9ce60ff5ea6ff61c51c6f3804e026cd024b8ed302abe5a60fb279f4099e72d091f071cdb11bf4e3b3a19e2f09c5bc96f3568631cc517168112ecb4ca9d19b6f870fdd5c3a2f061b7252c2759464efb192b3dd32aecb6334a310aedb88d6bd496183ac1ee20e4f6c03054c38f1e9e176c26b03d9eda3a5b2a06f0ee9cd00dc349ff89258e6bc5b37d06d5e14417c5df20945ed92e7e5355ca76d4040fa145c2a5fa6df7034820cd59418c7645296299ae3d7464ca939ca88961715ca90f8b5a36cb80247fa4929fb4d80bd6f22f290d3a918f52affa15b060135ba39b0aef17eb1154ef3c554017768b391139b7ce3488f27e890609408582f69b279dc65a67cdd915935dcf30f237d14ea8795974ca7ce05e750107666b5e7950e163e66d55c7697dd2ef2bdd50461450b469896c02d32e70f8853ace8c0e13612ea4b104f8304887f5c567f83d64d3409696f1b394044d12bee11206f529b733cc7ad9d77f2335947a7390077fb32c96f0bd62da052d2068ff02c625724f20f8f7f7c05a26dc57f12779e0a49b47156674adf897e448b8864d2fdff1abbff42a57ff889c00405c2bb1e3f87b90a64a17ebb4ffb0e70bb91556c23df9b8ff11ef9262b2c5506e6a89ccf47f821535b20a55b291c1d432120bbc6db54a82b4eabcc4ab9a0a14d689aff40754b22ce36408c5a1e365416842a8c3cc45e00982f52fd6dbf227ddff364b8a2926d297050920bbf7e26a58b8c3c09d2c7d526a4495015f5f41bbe50d47dc0beaa6a2015bed21a4751ec2ecdb4282366cf112889ee5a1c8d64caf8fac96117155f147980e56fc80e3c6673a5ccde1c6667597f6f9108514d232536331ea5c08a950082247f0aab41b7c46a7a4db22c5a531ea687bdaccd789a590e424353d4311c11460ad6802e9935289c95c45bb0eec91f726ad34ca3111c6af8f54458e49ef1f41a9d1eb1b849d4e83b62c7d2f559d992bc6c2b038d07820d447ff457a0376a633bae953d47eb100c932771fa828a72edbac1c26a0a625c0550bd4bc3899273369c78889cc00db70792ba93462de725aa97ca2b8691767e6a50b3bd63aac0bec123a4a0e6c75003d8cd51b739b151dc6ce5bf97766caca833ca02338e74042bf1c06434f6cf38e884ff5779d9a8c06ff570214b790bcae6535adfd2f31be8cac098814d7f7db80a58138822b1f187b9677c98eaa7d9a463e2d341471613f969768cfc847b8fe6e47fdcf438f5f5e100fbc669c98d10e9a88d10e1121ad12f08281307ccb8f3660f6a86412952dc27edf4e23730e96a79a984bba11e33a8176e4ce5cfaeecb6122c55bb3dc67046f5bf6156a6004b8955e75cea7ebc0f8a2e6a519dff259a0f6325325026768457dc99b1982dae24bcc3e0b27a68a684621084cca23c2839a4d9fbda49ec35a09677919df28bbb3e0cc897871ba88d4e646d7edeb50c7b9a31e1717cdb0c4502cfce904a5124b39a1ce27c68efb40a5408f95a0db030e03cd195c8b586fb22ef554f58c41d0f10014178d999d257f2791a1e0b82c3b671c7d32a013a69ef0a6f2fe046cb58b7e43add2cea783806ecdb5493e4e2d7dd3af65757cb096e5f7d40f8ebce801ad64c9a71740292d0a17209b4904b2101753bd3c472d5d75ad5093581a03020a1f161e946582108554fa240783b4c5775d79708f7a6d01d2a787f3aaa1f70ddbc76c80029d9376288c9e396faec064185c5a0bb9d312a41c72820e859dd3d00d94babe302a9cc3374a37a5ab563fdefbc6ebddcbde1fc8d583eb467733b2ff7277578cb5ac134f4df8e352a3f986bac2b013d7377e1a0c2e9d38b72984e002b4ae00ff891c3eec5ecdf63f54a2a31cbe8f661fb752cef1f8051ae8cde7bd714cf82aaeaaf3d9b1962d2beac81c885e54ca5abe01f08807c5465ae20503fc8a34cef3d034e418451ee2742a53fdeb17a6009aebb9ae105b7d9ff409e2d30f0ca927f539792ff8b951ba1edf14524dd9ef45fdd1bd369f8f1fa4a7b1ada1495bb525cee47aeaad620a73dc8252e4c60d8b1ff60df9140b0348077f1a3c82192b8f0607f60bd6b99a36e619e83240385fdca30f247e70e590456c1cfd977fbe7ccbb5f42c1a535ce3b22d943021761f5501895f49f49020442749e065672a358d016fd5828566776a82e76626c7ed18815c6d6522eed7716e032a60e8c2ffef9b2423b5cc6d95f3e8b41a5d305a0f29f9e2a707a1f6bc6f64eec6353bbc1d3dbc9f9971b1ecf65df697836e6109d63487940e7bc4fc49b07d4f5a873451413567870f7d3b8a8a68f9c14d1a4028dcf1e7dafc8896ee4cfbe6f5e333a0273c029129f1393bb9e1749f56bd4434987873ea10b72ac252d5bb512803e813340ade8faae14511e94bcf3cb59ecb38538d5a75971c424b171afe5401fa1acf8056507c980a63a4e0c8bb8e84b7d534637bd047a962b56d6b88864f802ebb2876ee293a0d416db63bbf99139b5c8db8479c32ce931e72307347b0d29002c1ec4a25792a7518a8f4af77a1a698216ee7e91cefadeb7ae064fcf268491209da10c7befbf348c8ed68c0814e9afba163cf97826308f87f2f6e9f7f39105a3728e3cd2ee0368e9c6537cc9280a7af266ce192fbfc39828a763c900bbe327983c9e694bcd6a7ffec9b30710f99fd7633ad2b2ed8fbf7179be7b4b9a5979696fa0543c508dfa596dbfc12b32d385ab3ec228742ca59c0208f11f18e88d26ca471a5121c56e9bfe23b66d4b52b87527e53eeb02fbc69335a049f4702715395820f80d13b50188f448aed76302f5f1d3775256dcd6c6df77c32f51c52f123382d78c1b80772887a6f9e9c2f9c6442d8099e0dd07ac4c7187f0a122beddb4eb8b7420e3a5a90f8e7f46203ed1b21aabb466d8513d01132054a6c26a208bb7ae9ae183cab6903477fb3f271ec3ab58d9e302bf10c51001ed79757ec6cd8a6129306189efb4f55ff2ebdedab49c2fb63eb3eee674a5aed83e2c0ede65ac8ecd6a7f18f8cd30bc789fda9570cfca30776401ae0a990d3ac3d3214650f8908e27e9c27d61c6f2a1e74201bcc675449ad8d4bb0f42a5f53ee02c14c9d7cf2cf23922721e927dea58086f8599240fde7eb7e6aef13d2aee850de7ece5e00621e66a9d7ad068840f26523f042d73f29d16a6b15e29d50a9ad2c38f28bcd21dcc32c1655006b164caacffd97e8b56eaffdc6907af572ad5a307b5d99329961ef0558b56bdbf2b141da595371f9c51cfc77bd180357837b62c7b4068f0436ae1a071a75abb6603d066a218dcb10ad10066ac449ffa0834d9f263a4af1e1695fdc74c1050dccec5468fa7a3a2c19040e282b72b9aef093d0e6978124924d301e1f9072cdf4eeffdbb270d318f8fa68e196d169936fc95f7675f0fb7474788abc08ee0b51884af4f0714fcfa085fa01cdcf0b567c7a3d8ba6b3f28e266c9f4a3a06d483bde882d9d8f88d3425905eb2d449854fca414d8dcbb9daa1ba0982d0cfd009a61ef8edb8f9676bbef7de6a6a8e7172b7641f0b5a31b618ed5d3b8b2a8cf9cf6901020fe7e015b28dd2cece87e0d409fb87c94122f2581603901e27faa7fc38d03335ec9b84c9b01a3a40d4986e171b8caa34bfc9a3e1fe438cad75990c1f6dca529b13d755b6b2e0434b19f2adde4a6737ad21dbce0a72d71809fd05ca63f88efc7777623b5412afb5ba8f7e98fc41b7990facdabcce2cc292b9372b30fc04792b71f0ffcd2a76906918f5511d39413a2e13617413acc3a3d86364200aea514c534187050ae078387b2867ea76f6be7ba982b43c0042716da637dde76ea6761eea8392dc86f509f1bde45a4b93fc02376ffbd7ea2432e61116e57e450d9d355cf7bcd0d961d781639f63618fcc72d87fe638d89649cd13a8f00c4379f49753f0538cf628ca5cd58d0d7807f27fd5a65cb5b1f73a473404b44f1e6b4b7aaff79b23a8b3690198d99dfceab068f88ee7b73a2248be496d1a8f98099ed4fb8c7dc464583a470995462133cf85b5c3de89d9e03538648003e3ead2cf183ace700a60bc3718372779da706f01be6bb5c8298808f2ea24bc6cd06f48e753f06d9e55f72275015e1b972880338c7f5428a7b91c7d82f46b6195df7c1f6e4fa36b2453b6e6e4749f7a7dcd506ee810752775ae9b4cf4c5d5a5311bc3295d91c7c7ebb8c389766e08a4fbbcab9abf3cec0f99182fccda1763c21e772d840b14786b246fd02c5efbb39d9405ff0a114e60dbde06c8ccc01b474e51d3f6d718ed1d98bb7d2908312dc907989cb42eea0e1048ffedd06b91179cdcbcebfbfaadc242f953596445388bcf32d5682945add14094ffffc2dd70367e23db3a94a77fba7f38013406af28db4126b52b126d02732d456d44e1e36fb26cfe2283a35dbffa11af92478bdbef1c197a3290b6b8a157f80fd86c912afe5a0b8f3d7c6b8e96fc6667ed985dbef58d6fee6d860bb01d80c207882a002be13fa53f1adab52ea9268b7396720bb7905a4a22147623c83960fc82b68c8a6307bf43aaed55e6596beedbd81f03ab13c356002ab7e0d07db8db2ac408a252d236502bd7d0bd4f65d1eb6ce8131343a0bddae48e39aee045795c32b1ac5f9ee48dd20f5f6037de626f32584a2d2b5a0a54c62627c6894e1e3f026414563726abbc6d2e0b780642eb0cd17cb7be1ed753fe6d9e92e5ada8e054f9563ffc8bc8601d23af0219e67f0fc4f3deddc95cf77ead4a9856a53fd9f8080e87f110811b3f87be250f395d1c1fb17b67c4995e986dd9977cc8d3af901c65b279e755effd3cd229644d7ee7dfd524ecd1a807748f3ade685ba369db79553efef4f44fa5d38007b3d7dc09fc1f144ef17b4f854c8e586628493a863b0e84b35fe969fd6f5240f0f4da4d06fe48f2e0732e6c8c1749c27c3ee6bc845dc4e818d7a4a302a80c9dfde8126dfa2729b8d1a948c819ffc4c7d4946cc2ff51f1dce4251313a13090c695283b7a6db6ce4e951dc85605634582582d4c8c2db1a5c772e459cef8c8774ecf296b58428ab3abb006c94fcc1ac09c19c51129c824a00227f8e115cfeeeab26a6130bd091232b3f4cc657bafccb7275cd0c0430718f0905d24cebde49228b79af499ea299b17f2e625a6426e3a894c6c51c6beabed8b072dc2c467b269c92985767338b3cfa93edfa8abcc40ba3535c8a25c39b6a82d8da66480d1a8c95100715c8b37ddfd82f810be37f6295654fb5c49da8c081c6a21887c37e9936730fe0ad2276bbe2a99ce7fc50e7cb1884b415d096f0dddbcb7e949d98307d81d41471c87ce2438f0eb5be57e3f923c5f67012b6cd67ff405d7463993b1d1f3192ba5067ad4869db47f9a036f98aa86ade72120df4b50f0907e07af919f7ee390c74d419cd739e2140b11b64ebd79d1a4dc3ba4d053223913076c86dbcad2f11eedf6ec449ce2e7178972ee93e1f429138ea78c4fef696ce958ac10267e11da4db045f96b30217be67a60c2b66ffce93e9d7c7dc11c607477ba56f54a3afd7a95e546b99a5c3fc5eed997d9a97983858abdc797240859e65caffd3835e8a758091a525977a4751f35b7f1", 0x1000}, {&(0x7f0000000e40)="4a2d9f48fe4b09b23076b7f68b0697af48774595dcba815813ea243b1b9df041d0472cd50a96879bfb1b4e47fe80f8ac646bafc51e6bc157edf5bd91dcd61b828a7b", 0x42}, {&(0x7f0000000ec0)="b0772a3800b2452a5ad9738f3710e06eb50348e07c13192638b5e2361d8271", 0x1f}], 0x4, &(0x7f0000000f40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x100, 0x117, 0x2, 0xec, "d99519d8eed816fb2c514f39835e7bddfe2b952c52438b28585c97a7fc24e95af1bf22de42d923b63d4d4a62ccd815cfa4e3d2b5e6c28b58079b33d9f46d9702a78325bad924d0c8ca5c1f3a38edc9d87d837520d0097246f75dd221aeed441c8468c5618d6ca5e9195fea27236b5dbe9907183b32fe0ccbc4246366f00090babf4871703d2828c7e1116b1910a4ca9db097740f31762319bbac8d10c614164f4227dc5557e2f3e4f4dccc8ea9dcb1adda1e820192022d81400301762b68dd6257f43a10555a810ac04ecac58d26a62bc4ed1ea0e48dc0c7fa0d96224b384056ec2b53cc68c97c3baf083683"}], 0x118, 0x800}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)="8f9051fce635a2a36f9e759e4e817c65f6bb73855b7ab8f808698b1d641a4be185080a0d0623cd38fee5d749d7736eca5a4c914c8202e1a328ec2e1f89df6e46fa36315221a9056bc7a098fdfe5bec3c5fdea450b373f7dd2fac2d300cdcfa031b18bbed9d42e77f695760143c6d11a54a80da71de33643b0195550ca19c313df80c5272f293a94627918a2505311f43a8adac3cecd8df9472afe85c0017c97818304dfbc4c520cb48af8be524542ae1543a3793087088", 0xb7}], 0x1, &(0x7f0000001180)}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="f1db0e0412", 0x5}], 0x1, &(0x7f0000001280)=[@op={0x18}], 0x18, 0x8000}], 0x7, 0x40)

16.130960936s ago: executing program 2 (id=1575):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000101e010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000eb78822e0073797a300000000044000000080a030000"], 0x74}}, 0x0) (async)
r3 = socket(0x1e, 0x4, 0x0) (async)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0)
close(r5) (async)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="ebe3a0e9796c", 0x6}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x20044014) (async)
listen(0xffffffffffffffff, 0x0) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0)

16.121953875s ago: executing program 0 (id=1576):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x81, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0xa010100, @multicast1}}}})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xfce)

16.119592844s ago: executing program 2 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8d8}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0}) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0}) (async, rerun: 32)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r11}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, @vsock={0x28, 0x0, 0x2710, @hyper}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='pim6reg0\x00', 0xe, 0x5, 0x9})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="28180000", @ANYRES16=r13, @ANYBLOB="010025bd7000fedbdf250600000014000180080003000600000008000100", @ANYRES32=r14, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@local, @loopback, <r15=>0x0}, &(0x7f00000001c0)=0xc) (async)
getpeername$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="fc020000", @ANYRES16=r13, @ANYBLOB="100029bd7000fbdbdf2508000000440001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="140002007465616d300000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

16.047864172s ago: executing program 1 (id=1578):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004202003c0012800c0001006d6163766c616e002c0002801c00058018000400"], 0x5c}, 0x1, 0x4801000000000000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000002c0)=0x9, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x4, r6}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESOCT=r1], 0x34}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\a\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2d)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x20000000ec071, 0xffffffffffffffff, 0x0)

16.046888698s ago: executing program 2 (id=1579):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf2504000000080004000600000005000500fe0000002400018008000300ffffffff060001000a000005004e210000060005004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00"], 0xd0}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000440))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
close(r5)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000200)='sit0\x00'})
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000009100000000408000000000000000000000000000100000000000000000000001002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000003a1ba302d6577c76880000000000000000000000003496ea1c6d972161daceec86be68338c249fccc54937e92d93420000000000"], 0xfc}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000002c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x8}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r9, &(0x7f0000000240)="8a", 0x34000, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x564, 0x65, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xfff3}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x534, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x2}, {0x2, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x13, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_EMATCHES={0x88, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="608a76f2", @TCF_META_TYPE_VAR="9e789a49447f2f"]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c4ebb8944e5e"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="1f60", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8c001670", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="d870b41e0a1fc3", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3328c65019", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8501adde1c284d54", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5}, {0x5, 0xb, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x9}, {0xd, 0x7, 0x1}}}]}}]}]}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x440, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xc4, 0x1b, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xc50, 0x10000, 0x4, 0x0, 0x90000000}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x40, 0x3, 0x0, 0x0, {{0xf}, {0x4}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xf0, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xc5, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r10 = socket(0x10, 0x803, 0x0)
sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f0000000540)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000940)=""/187, 0xbb, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700))
r11 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0)
sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x700, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x2400c880)

15.888096907s ago: executing program 2 (id=1580):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000a910000000000000004000400"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000002010400000000000000000a00000004000380300002802c000180140003020000000000000000000000000000002014000400fc000000000400000000000000000000e3ddcd27650c6c235c61cd96fafec65c9a678596bc7e69ecc667e55a43ac"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket(0x1d, 0x2, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="307f00b69d5774ac14e16fdd", @ANYRES32=0x0, @ANYBLOB="810601000000020010001280080001006772650004000280"], 0x30}}, 0x20044002)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18006024f753446e8f5a06a7e4d23e00006a000105fefdff"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x3c, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaab7aaaabb00000000800088480000108100000100000000000000000000000000000e848fce7bfb92494699dad2488e240000000000e7ffffff00"], 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x4400046})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@private2, @local, @empty, 0x100, 0x2, 0xfffd, 0x300, 0x7fffffff, 0x800006, r7})
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r11=>0x0)
connect$nfc_raw(r10, &(0x7f0000000280)={0x27, r11, 0xffffffffffffffff, 0x1}, 0x10)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0))

15.72707134s ago: executing program 1 (id=1581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

15.726553934s ago: executing program 1 (id=1582):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)
shutdown(r0, 0x1)
r1 = socket(0x11, 0x80a, 0x0)
sendto$x25(r1, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x61, 0x61, 0x5f, 0x2e]}}, 0x0, 0x36}, 0x28)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x1}}, 0x6}, &(0x7f0000000200)=0x90)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x5, 0x12, 0x0, &(0x7f0000000280)="71000000224354191668a444702ba8d664da", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x94)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x47}]}}]}, 0x3c}}, 0x80)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x40)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="c242f0ff100000002504000001"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xa3, &(0x7f0000000540)=""/163, 0x0, 0x30, '\x00', r7, 0x0, r8, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x6, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r9, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73})
ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000100)=""/148, &(0x7f0000000040)=0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0)

15.667482207s ago: executing program 1 (id=1583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x1, 0x8000000000000001, 0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_TOS={0x5, 0x9, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

15.515848743s ago: executing program 1 (id=1584):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x14, 0x19, 0x1, 0x4000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000072239d2f7e557f3f43c4066a9639dd737b458c7268967c2882484b9a292511b59d218339f16e294eec20aec7854560ce1cdade8abba70222bae2db3a59bfd1b0dd217f5e4493da5cc8a16ebf520b594e341ae9ab3b1776f6c7ad8305ab3b92c1e026821cc0f80779eeee84ae5aad37642514c1eaccfe1a30ec893e198cf7e405cd3d0824d6d76b6cf68a686bf11d7f62ab252225f80e9138ea7c72ce6b7cd8d8bdb9c99d6e32a3cb37183c37bb0c5f6a53706e96c4"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048884)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a1b0000000000000000000a0000090c00024000000000000000010900010073797a31000000000900030073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x24040845}, 0x490)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="4b01000000000000240012800b00010067656e65766500001400028005000800fd0001000500090016"], 0x44}}, 0x0)

15.513502674s ago: executing program 1 (id=1585):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24)
listen(r0, 0x80000000)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200"], 0x54}}, 0x2004c804)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.026743108s ago: executing program 32 (id=1576):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x81, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0xa010100, @multicast1}}}})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xfce)

17.995024ms ago: executing program 33 (id=1585):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24)
listen(r0, 0x80000000)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200"], 0x54}}, 0x2004c804)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

0s ago: executing program 34 (id=1580):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000a910000000000000004000400"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000002010400000000000000000a00000004000380300002802c000180140003020000000000000000000000000000002014000400fc000000000400000000000000000000e3ddcd27650c6c235c61cd96fafec65c9a678596bc7e69ecc667e55a43ac"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket(0x1d, 0x2, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="307f00b69d5774ac14e16fdd", @ANYRES32=0x0, @ANYBLOB="810601000000020010001280080001006772650004000280"], 0x30}}, 0x20044002)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18006024f753446e8f5a06a7e4d23e00006a000105fefdff"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x3c, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaab7aaaabb00000000800088480000108100000100000000000000000000000000000e848fce7bfb92494699dad2488e240000000000e7ffffff00"], 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x4400046})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@private2, @local, @empty, 0x100, 0x2, 0xfffd, 0x300, 0x7fffffff, 0x800006, r7})
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r11=>0x0)
connect$nfc_raw(r10, &(0x7f0000000280)={0x27, r11, 0xffffffffffffffff, 0x1}, 0x10)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

 8472 - 0
[   99.211944][ T9000] dvmrp0: entered allmulticast mode
[   99.282176][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[   99.524112][ T9019] netlink: 'syz.0.764': attribute type 9 has an invalid length.
[   99.572016][ T9021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.715804][ T9024] netlink: 'syz.0.766': attribute type 13 has an invalid length.
[   99.718605][ T9024] netlink: 'syz.0.766': attribute type 17 has an invalid length.
[   99.723142][ T9024] erspan0: entered promiscuous mode
[   99.731670][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.734946][ T9024] 8021q: adding VLAN 0 to HW filter on device team0
[   99.741561][ T9024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.762961][ T9024] lo speed is unknown, defaulting to 1000
[   99.809556][ T9024] lo speed is unknown, defaulting to 1000
[   99.866566][ T9027] lo speed is unknown, defaulting to 1000
[   99.922149][ T9027] lo speed is unknown, defaulting to 1000
[   99.964967][ T9032] netlink: 'syz.0.768': attribute type 12 has an invalid length.
[   99.969355][ T9032] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   99.972686][ T9033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'.
[   99.975641][ T9032] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'.
[   99.988793][ T9033] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   99.992907][ T9033] bond0 (unregistering): Released all slaves
[  100.272137][ T9038] lo speed is unknown, defaulting to 1000
[  100.352437][ T9038] lo speed is unknown, defaulting to 1000
[  100.356571][ T9041] netlink: 'syz.1.770': attribute type 8 has an invalid length.
[  100.416061][ T9043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.771'.
[  100.482666][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'.
[  100.502137][ T9052] netlink: 'syz.2.772': attribute type 10 has an invalid length.
[  100.510638][ T9052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.772'.
[  100.513635][ T9052] dummy0: entered promiscuous mode
[  100.517076][ T9052] dummy0: entered allmulticast mode
[  100.519788][ T9052] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  100.528069][   T28] tipc: Resetting bearer <eth:syzkaller0>
[  100.581110][ T9058] netlink: 'syz.2.776': attribute type 12 has an invalid length.
[  100.610508][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'.
[  100.634098][ T5738] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  100.638141][ T5738] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  100.641643][ T5738] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  100.644365][ T5738] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  100.647263][ T9054] tipc: MTU too low for tipc bearer
[  100.715768][ T9077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.779'.
[  100.732508][ T9077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.735729][ T9077] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  100.738109][ T9077] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  100.747077][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'.
[  100.755969][ T9083] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  100.821234][ T9088] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  100.996513][ T9108] syz_tun: left allmulticast mode
[  101.128072][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.353531][ T9129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  101.360189][ T8349] lo speed is unknown, defaulting to 1000
[  101.363807][ T8349] syz1: Port: 1 Link DOWN
[  101.365930][ T8349] lo speed is unknown, defaulting to 1000
[  101.385577][ T5896] lo speed is unknown, defaulting to 1000
[  101.387553][ T5896] syz1: Port: 1 Link ACTIVE
[  101.389645][ T5896] lo speed is unknown, defaulting to 1000
[  101.563343][ T9146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.570299][ T9146] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  101.573225][ T9146] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  101.577756][ T9146] tipc: Resetting bearer <eth:syzkaller0>
[  101.784492][ T9163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.788738][ T9163] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  101.791205][ T9163] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  101.833001][ T9177] IPv6: sit3: Disabled Multicast RS
[  101.836745][ T9177] sit3: entered allmulticast mode
[  101.841588][ T9170] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  101.844536][ T9170] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  101.904898][ T9190] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  101.952147][ T9196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.979746][ T9197] tipc: Resetting bearer <eth:syzkaller0>
[  102.099492][ T9207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.141384][ T9218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.203924][ T9225] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  102.206954][ T9225] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  102.691280][ T9240] veth5: entered allmulticast mode
[  102.697511][ T9240] tipc: Resetting bearer <eth:syzkaller0>
[  102.703243][ T9240] tipc: Resetting bearer <eth:syzkaller0>
[  102.706822][ T9240] tipc: Resetting bearer <eth:syzkaller0>
[  102.861290][ T9249] batman_adv: batadv0: Removing interface: ip6gretap1
[  102.865785][ T9249] bond3: (slave ip6gretap2): Removing an active aggregator
[  102.868532][ T9249] bond3: (slave ip6gretap2): Releasing backup interface
[  102.872246][ T9249] batman_adv: batadv0: Removing interface: gretap3
[  102.880906][ T9249] dummy0: left promiscuous mode
[  102.882814][ T9249] dummy0: left allmulticast mode
[  102.886194][ T9249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.978208][ T9252] validate_nla: 5 callbacks suppressed
[  102.978220][ T9252] netlink: 'syz.2.826': attribute type 10 has an invalid length.
[  103.015522][ T9254] gre0: entered promiscuous mode
[  103.017118][ T9254] gre0: entered allmulticast mode
[  103.178703][ T9267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.187342][ T9267] syzkaller0: mtu less than device minimum
[  103.242797][ T9269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.325932][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.329637][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.333249][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.337761][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.340578][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.343332][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.347693][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.350462][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.353236][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.357043][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.360521][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.363956][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.367423][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.370859][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.374309][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.378363][ T9288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.425507][ T9303] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[  103.429766][ T9303] netlink: 'syz.0.839': attribute type 23 has an invalid length.
[  103.512807][ T9312] netlink: 'syz.1.843': attribute type 13 has an invalid length.
[  103.516427][ T9312] netlink: 'syz.1.843': attribute type 17 has an invalid length.
[  103.520445][ T9312] gre0: left promiscuous mode
[  103.522236][ T9312] gre0: left allmulticast mode
[  103.532583][ T9312] 8021q: adding VLAN 0 to HW filter on device team0
[  103.536615][ T9312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.541516][   T24] lo speed is unknown, defaulting to 1000
[  103.545121][   T24] syz0: Port: 1 Link ACTIVE
[  103.549035][   T24] lo speed is unknown, defaulting to 1000
[  103.565691][ T9317] lo speed is unknown, defaulting to 1000
[  103.621731][ T9317] lo speed is unknown, defaulting to 1000
[  103.621976][ T9315] lo speed is unknown, defaulting to 1000
[  103.702912][ T9315] lo speed is unknown, defaulting to 1000
[  103.914351][ T9354] netlink: 'syz.1.852': attribute type 1 has an invalid length.
[  103.918120][ T9354] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  104.076902][ T9366] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.083057][ T9366] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  104.087392][ T9366] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  104.090380][ T9366] tipc: Resetting bearer <eth:syzkaller0>
[  104.386984][ T9371] netlink: 'syz.0.857': attribute type 4 has an invalid length.
[  104.392902][ T5911] lo speed is unknown, defaulting to 1000
[  104.394971][ T5911] syz1: Port: 1 Link DOWN
[  104.396921][ T5911] lo speed is unknown, defaulting to 1000
[  104.418682][ T9371] netlink: 'syz.0.857': attribute type 4 has an invalid length.
[  104.423084][ T5911] lo speed is unknown, defaulting to 1000
[  104.427119][ T5911] syz1: Port: 1 Link ACTIVE
[  104.429024][ T5911] lo speed is unknown, defaulting to 1000
[  104.522640][ T9385] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  104.586405][ T9386] batadv_slave_0: entered promiscuous mode
[  104.589620][ T9386] __nla_validate_parse: 30 callbacks suppressed
[  104.589633][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'.
[  104.600046][ T9386] netlink: 428 bytes leftover after parsing attributes in process `syz.0.861'.
[  104.602940][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'.
[  104.684738][ T9388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.862'.
[  104.691066][ T9388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.695296][ T9388] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  104.791311][ T9393] netlink: 'syz.0.864': attribute type 21 has an invalid length.
[  104.793907][ T9394] netlink: 'syz.0.864': attribute type 21 has an invalid length.
[  104.813084][ T9396] sctp: [Deprecated]: syz.1.865 (pid 9396) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.813084][ T9396] Use struct sctp_sack_info instead
[  104.839506][ T9400] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.852268][ T9400] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.855561][ T9400] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  104.860834][ T9400] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  104.893232][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[  104.903630][ T9408] vti0: entered promiscuous mode
[  104.923396][ T9408] vti0: entered allmulticast mode
[  104.924826][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'.
[  104.983312][ T5874] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  104.986544][ T5911] lo speed is unknown, defaulting to 1000
[  104.988372][ T5911] syz0: Port: 1 Link DOWN
[  104.989831][ T5874] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  104.999299][ T9417] vti0: left promiscuous mode
[  105.000819][ T9417] vti0: left allmulticast mode
[  105.013352][ T5911] lo speed is unknown, defaulting to 1000
[  105.013390][ T5874] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  105.022740][ T5874] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  105.116200][ T9441] netlink: 1608 bytes leftover after parsing attributes in process `syz.2.878'.
[  105.138180][ T9443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.153350][ T9444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.876'.
[  105.175599][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'.
[  105.191896][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.878'.
[  105.224114][ T9446] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  105.291618][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.301905][ T9458] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  105.311855][ T9451] lo speed is unknown, defaulting to 1000
[  105.346477][ T9461] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  105.351227][ T9463] gretap0: entered promiscuous mode
[  105.353236][ T9463] 0{X: renamed from gretap0
[  105.355956][ T9463] 0{X: left promiscuous mode
[  105.357641][ T9463] 0{X: entered allmulticast mode
[  105.360041][ T9463] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  105.389440][ T9461] bridge3: entered allmulticast mode
[  105.395894][ T9451] lo speed is unknown, defaulting to 1000
[  105.563230][ T9477] macsec2: entered promiscuous mode
[  105.566657][ T9477] team0: entered promiscuous mode
[  105.568618][ T9477] macsec2: entered allmulticast mode
[  105.571184][ T9477] team0: entered allmulticast mode
[  105.573385][ T9477] team0: Device macsec2 is already an upper device of the team interface
[  105.577589][ T9477] team0: left allmulticast mode
[  105.579422][ T9477] team0: left promiscuous mode
[  105.588630][ T9476] macsec2: entered promiscuous mode
[  105.591289][ T9476] team0: entered promiscuous mode
[  105.593651][ T9476] macsec2: entered allmulticast mode
[  105.596777][ T9476] team0: entered allmulticast mode
[  105.598977][ T9476] team0: Device macsec2 is already an upper device of the team interface
[  105.607848][ T9476] team0: left allmulticast mode
[  105.609681][ T9476] team0: left promiscuous mode
[  105.682841][ T9485] pim6reg1: entered promiscuous mode
[  105.688106][ T9485] pim6reg1: entered allmulticast mode
[  105.701582][ T9487] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  105.705527][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.1.892 Not tainted syzkaller #0 PREEMPT(full) 
[  105.705539][ T9487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.705545][ T9487] Call Trace:
[  105.705564][ T9487]  <TASK>
[  105.705570][ T9487]  dump_stack_lvl+0x189/0x250
[  105.705586][ T9487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.705595][ T9487]  ? __pfx__printk+0x10/0x10
[  105.705608][ T9487]  ? kernfs_root+0x1c/0x230
[  105.705618][ T9487]  ? kernfs_path_from_node+0x2f/0x290
[  105.705627][ T9487]  ? kernfs_path_from_node+0x250/0x290
[  105.705635][ T9487]  ? kernfs_path_from_node+0x2f/0x290
[  105.705644][ T9487]  sysfs_warn_dup+0x8e/0xa0
[  105.705651][ T9487]  sysfs_do_create_link_sd+0xc0/0x110
[  105.705660][ T9487]  device_add_class_symlinks+0x1cf/0x240
[  105.705669][ T9487]  device_add+0x475/0xb50
[  105.705677][ T9487]  wiphy_register+0x1ba6/0x28d0
[  105.705714][ T9487]  ? __pfx_wiphy_register+0x10/0x10
[  105.705726][ T9487]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  105.705737][ T9487]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  105.705752][ T9487]  ieee80211_register_hw+0x3425/0x4080
[  105.705766][ T9487]  ? ieee80211_register_hw+0x14a1/0x4080
[  105.705775][ T9487]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  105.705784][ T9487]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.705796][ T9487]  ? __hrtimer_setup+0x187/0x210
[  105.705803][ T9487]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  105.705815][ T9487]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  105.705832][ T9487]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  105.705843][ T9487]  ? trace_kmalloc+0x1f/0xd0
[  105.705853][ T9487]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  105.705864][ T9487]  ? kstrndup+0xbf/0x160
[  105.705873][ T9487]  hwsim_new_radio_nl+0xea4/0x1b10
[  105.705883][ T9487]  ? __pfx___nla_validate_parse+0x10/0x10
[  105.705898][ T9487]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.705910][ T9487]  ? __nla_parse+0x40/0x60
[  105.705921][ T9487]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  105.705932][ T9487]  genl_family_rcv_msg_doit+0x215/0x300
[  105.705943][ T9487]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  105.705954][ T9487]  ? bpf_lsm_capable+0x9/0x20
[  105.705964][ T9487]  ? security_capable+0x7e/0x2e0
[  105.705978][ T9487]  genl_rcv_msg+0x60e/0x790
[  105.705988][ T9487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.705996][ T9487]  ? __kasan_kmalloc+0x93/0xb0
[  105.706006][ T9487]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.706015][ T9487]  ? __netlink_lookup+0xbd/0x810
[  105.706021][ T9487]  ? rcu_is_watching+0x15/0xb0
[  105.706031][ T9487]  netlink_rcv_skb+0x208/0x470
[  105.706042][ T9487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.706050][ T9487]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.706062][ T9487]  ? lock_release+0x4b/0x3e0
[  105.706074][ T9487]  ? down_read+0x1ad/0x2e0
[  105.706081][ T9487]  genl_rcv+0x28/0x40
[  105.706088][ T9487]  netlink_unicast+0x82f/0x9e0
[  105.706099][ T9487]  ? __pfx_netlink_unicast+0x10/0x10
[  105.706109][ T9487]  ? netlink_sendmsg+0x642/0xb30
[  105.706119][ T9487]  ? skb_put+0x11b/0x210
[  105.706127][ T9487]  netlink_sendmsg+0x805/0xb30
[  105.706139][ T9487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.706151][ T9487]  ? futex_unqueue+0x22/0x240
[  105.706159][ T9487]  ? aa_sock_msg_perm+0xf1/0x1d0
[  105.706166][ T9487]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.706175][ T9487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.706185][ T9487]  __sock_sendmsg+0x21c/0x270
[  105.706196][ T9487]  ____sys_sendmsg+0x505/0x830
[  105.706205][ T9487]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.706214][ T9487]  ? import_iovec+0x74/0xa0
[  105.706223][ T9487]  ___sys_sendmsg+0x21f/0x2a0
[  105.706238][ T9487]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.706249][ T9487]  ? futex_wait+0x285/0x360
[  105.706267][ T9487]  ? __fget_files+0x2a/0x420
[  105.706280][ T9487]  ? __fget_files+0x3a0/0x420
[  105.706294][ T9487]  __x64_sys_sendmsg+0x19b/0x260
[  105.706302][ T9487]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.706312][ T9487]  ? rcu_is_watching+0x15/0xb0
[  105.706320][ T9487]  ? rcu_is_watching+0x15/0xb0
[  105.706327][ T9487]  do_syscall_64+0xfa/0x3b0
[  105.706339][ T9487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.706347][ T9487]  ? exc_page_fault+0x9f/0xf0
[  105.706357][ T9487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.706365][ T9487] RIP: 0033:0x7fc46358ebe9
[  105.706373][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.706380][ T9487] RSP: 002b:00007fc4644bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.706391][ T9487] RAX: ffffffffffffffda RBX: 00007fc4637b5fa0 RCX: 00007fc46358ebe9
[  105.706397][ T9487] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  105.706403][ T9487] RBP: 00007fc463611e19 R08: 0000000000000000 R09: 0000000000000000
[  105.706409][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.706414][ T9487] R13: 00007fc4637b6038 R14: 00007fc4637b5fa0 R15: 00007ffc8f29d2b8
[  105.706425][ T9487]  </TASK>
[  106.004589][ T9508] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  106.011393][ T9508] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  106.014552][ T9508] tipc: Resetting bearer <eth:syzkaller0>
[  106.068840][ T9521] macvlan2: entered allmulticast mode
[  106.071000][ T9521] veth1_vlan: entered allmulticast mode
[  106.073885][ T9521] veth1_vlan: left allmulticast mode
[  106.217952][ T9536] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  106.453854][ T9564] geneve0: entered promiscuous mode
[  106.457206][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.461238][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.482589][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.485384][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.997260][ T9603] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.266682][ T9610] tipc: Resetting bearer <eth:syzkaller0>
[  107.268977][ T9610] batman_adv: batadv0: Interface deactivated: gretap2
[  107.271253][ T9610] batman_adv: batadv0: Removing interface: gretap2
[  107.365305][ T9612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.368350][ T9612] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  107.370720][ T9612] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  107.405854][ T9615] bond0: (slave gretap0): making interface the new active one
[  107.409030][ T9615] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  107.905891][ T9635] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  108.013791][ T9637] tipc: Resetting bearer <eth:syzkaller0>
[  108.021036][ T9637] tipc: Resetting bearer <eth:syzkaller0>
[  108.023799][ T9637] tipc: Resetting bearer <eth:syzkaller0>
[  108.440184][ T9651] netlink: 'syz.2.937': attribute type 11 has an invalid length.
[  108.442987][ T9651] netlink: 'syz.2.937': attribute type 11 has an invalid length.
[  108.571834][ T9657] validate_nla: 14 callbacks suppressed
[  108.571850][ T9657] netlink: 'syz.2.939': attribute type 13 has an invalid length.
[  108.580299][ T9657] netlink: 'syz.2.939': attribute type 17 has an invalid length.
[  108.586698][ T9657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.604061][ T9657] lo speed is unknown, defaulting to 1000
[  108.647779][ T9657] lo speed is unknown, defaulting to 1000
[  109.122602][ T9670] syzkaller1: entered promiscuous mode
[  109.124945][ T9670] syzkaller1: entered allmulticast mode
[  109.317911][   T24] lo speed is unknown, defaulting to 1000
[  109.317960][ T5738] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.320402][   T24] syz1: Port: 1 Link DOWN
[  109.324108][ T5738] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.329014][ T5738] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.332335][ T5738] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.336846][   T24] lo speed is unknown, defaulting to 1000
[  109.338662][ T5738] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.341791][ T5738] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.345057][ T5738] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.347807][ T5738] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.498059][ T9695] netlink: 'syz.0.949': attribute type 10 has an invalid length.
[  109.514407][ T9700] bridge3: entered allmulticast mode
[  109.577131][ T9705] hsr_slave_1 (unregistering): left promiscuous mode
[  109.588792][ T9709] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  109.592840][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(full) 
[  109.592854][ T9709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.592860][ T9709] Call Trace:
[  109.592864][ T9709]  <TASK>
[  109.592868][ T9709]  dump_stack_lvl+0x189/0x250
[  109.592884][ T9709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.592894][ T9709]  ? __pfx__printk+0x10/0x10
[  109.592906][ T9709]  ? kernfs_root+0x1c/0x230
[  109.592917][ T9709]  ? kernfs_path_from_node+0x2f/0x290
[  109.592926][ T9709]  ? kernfs_path_from_node+0x250/0x290
[  109.592935][ T9709]  ? kernfs_path_from_node+0x2f/0x290
[  109.592945][ T9709]  sysfs_warn_dup+0x8e/0xa0
[  109.592955][ T9709]  sysfs_do_create_link_sd+0xc0/0x110
[  109.592963][ T9709]  device_add_class_symlinks+0x1cf/0x240
[  109.592972][ T9709]  device_add+0x475/0xb50
[  109.592980][ T9709]  wiphy_register+0x1ba6/0x28d0
[  109.592996][ T9709]  ? __pfx_wiphy_register+0x10/0x10
[  109.593007][ T9709]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  109.593018][ T9709]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  109.593032][ T9709]  ieee80211_register_hw+0x3425/0x4080
[  109.593043][ T9709]  ? ieee80211_register_hw+0x14a1/0x4080
[  109.593053][ T9709]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  109.593062][ T9709]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.593073][ T9709]  ? __hrtimer_setup+0x187/0x210
[  109.593081][ T9709]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  109.593095][ T9709]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  109.593112][ T9709]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  109.593122][ T9709]  ? trace_kmalloc+0x1f/0xd0
[  109.593133][ T9709]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  109.593145][ T9709]  ? kstrndup+0xbf/0x160
[  109.593154][ T9709]  hwsim_new_radio_nl+0xea4/0x1b10
[  109.593165][ T9709]  ? __pfx___nla_validate_parse+0x10/0x10
[  109.593179][ T9709]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.593191][ T9709]  ? __nla_parse+0x40/0x60
[  109.593202][ T9709]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  109.593213][ T9709]  genl_family_rcv_msg_doit+0x215/0x300
[  109.593223][ T9709]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  109.593235][ T9709]  ? bpf_lsm_capable+0x9/0x20
[  109.593245][ T9709]  ? security_capable+0x7e/0x2e0
[  109.593258][ T9709]  genl_rcv_msg+0x60e/0x790
[  109.593267][ T9709]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.593274][ T9709]  ? __kasan_slab_alloc+0x6c/0x80
[  109.593284][ T9709]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.593322][ T9709]  ? __netlink_lookup+0xbd/0x810
[  109.593329][ T9709]  ? rcu_is_watching+0x15/0xb0
[  109.593340][ T9709]  netlink_rcv_skb+0x208/0x470
[  109.593353][ T9709]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.593364][ T9709]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.593378][ T9709]  ? lock_release+0x4b/0x3e0
[  109.593390][ T9709]  ? down_read+0x1ad/0x2e0
[  109.593397][ T9709]  genl_rcv+0x28/0x40
[  109.593405][ T9709]  netlink_unicast+0x82f/0x9e0
[  109.593416][ T9709]  ? __pfx_netlink_unicast+0x10/0x10
[  109.593426][ T9709]  ? netlink_sendmsg+0x642/0xb30
[  109.593436][ T9709]  ? skb_put+0x11b/0x210
[  109.593444][ T9709]  netlink_sendmsg+0x805/0xb30
[  109.593456][ T9709]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.593468][ T9709]  ? aa_sock_msg_perm+0xf1/0x1d0
[  109.593475][ T9709]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.593484][ T9709]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.593495][ T9709]  __sock_sendmsg+0x21c/0x270
[  109.593505][ T9709]  ____sys_sendmsg+0x505/0x830
[  109.593514][ T9709]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.593523][ T9709]  ? import_iovec+0x74/0xa0
[  109.593532][ T9709]  ___sys_sendmsg+0x21f/0x2a0
[  109.593540][ T9709]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.593549][ T9709]  ? futex_wake+0x4b2/0x560
[  109.593572][ T9709]  ? __fget_files+0x2a/0x420
[  109.593585][ T9709]  ? __fget_files+0x3a0/0x420
[  109.593601][ T9709]  __x64_sys_sendmsg+0x19b/0x260
[  109.593610][ T9709]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.593621][ T9709]  ? rcu_is_watching+0x15/0xb0
[  109.593630][ T9709]  ? rcu_is_watching+0x15/0xb0
[  109.593640][ T9709]  do_syscall_64+0xfa/0x3b0
[  109.593652][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.593660][ T9709]  ? exc_page_fault+0x9f/0xf0
[  109.593670][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.593678][ T9709] RIP: 0033:0x7f702d98ebe9
[  109.593686][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.593694][ T9709] RSP: 002b:00007f702e8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.593705][ T9709] RAX: ffffffffffffffda RBX: 00007f702dbb5fa0 RCX: 00007f702d98ebe9
[  109.593711][ T9709] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  109.593717][ T9709] RBP: 00007f702da11e19 R08: 0000000000000000 R09: 0000000000000000
[  109.593723][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.593728][ T9709] R13: 00007f702dbb6038 R14: 00007f702dbb5fa0 R15: 00007ffed037a898
[  109.593738][ T9709]  </TASK>
[  109.633216][ T9714] netlink: 'syz.2.954': attribute type 1 has an invalid length.
[  109.793131][ T9714] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.814992][ T9738] netlink: 'syz.0.957': attribute type 10 has an invalid length.
[  109.848148][ T9742] __nla_validate_parse: 30 callbacks suppressed
[  109.848160][ T9742] netlink: 124 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.853687][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.857339][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.860446][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[  109.886906][ T9742] veth7: entered promiscuous mode
[  109.929559][ T9742] erspan0: entered allmulticast mode
[  109.937359][ T9755] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode
[  109.948000][ T9755] netlink: 'syz.1.960': attribute type 10 has an invalid length.
[  109.962951][ T9759] netlink: 'syz.0.961': attribute type 9 has an invalid length.
[  109.966471][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.961'.
[  110.011052][ T9766] netlink: 256 bytes leftover after parsing attributes in process `syz.0.963'.
[  110.013921][ T9766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'.
[  110.020850][ T9766] dvmrp1: left allmulticast mode
[  110.038383][ T9769] pim6reg1: entered promiscuous mode
[  110.040086][ T9769] pim6reg1: entered allmulticast mode
[  110.073813][ T9766] syz1: rxe_newlink: already configured on lo
[  110.081098][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'.
[  110.099548][ T9769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.964'.
[  110.111192][ T9769] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  110.113681][ T9769] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  110.120967][ T9780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  110.123682][ T9780] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  110.135718][ T9780] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  110.143056][ T9783] bridge0: port 1(erspan0) entered blocking state
[  110.146023][ T9783] bridge0: port 1(erspan0) entered disabled state
[  110.148342][ T9783] erspan0: entered allmulticast mode
[  110.150467][ T9783] erspan0: entered promiscuous mode
[  110.198181][ T9798] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  110.200038][ T9798] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  110.231602][ T9794] sctp: [Deprecated]: syz.1.968 (pid 9794) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.231602][ T9794] Use struct sctp_sack_info instead
[  110.247905][ T9794] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  110.251583][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.1.968 Not tainted syzkaller #0 PREEMPT(full) 
[  110.251595][ T9794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.251600][ T9794] Call Trace:
[  110.251605][ T9794]  <TASK>
[  110.251609][ T9794]  dump_stack_lvl+0x189/0x250
[  110.251625][ T9794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.251635][ T9794]  ? __pfx__printk+0x10/0x10
[  110.251647][ T9794]  ? kernfs_root+0x1c/0x230
[  110.251658][ T9794]  ? kernfs_path_from_node+0x2f/0x290
[  110.251667][ T9794]  ? kernfs_path_from_node+0x250/0x290
[  110.251675][ T9794]  ? kernfs_path_from_node+0x2f/0x290
[  110.251684][ T9794]  sysfs_warn_dup+0x8e/0xa0
[  110.251692][ T9794]  sysfs_do_create_link_sd+0xc0/0x110
[  110.251701][ T9794]  device_add_class_symlinks+0x1cf/0x240
[  110.251710][ T9794]  device_add+0x475/0xb50
[  110.251717][ T9794]  wiphy_register+0x1ba6/0x28d0
[  110.251732][ T9794]  ? __pfx_wiphy_register+0x10/0x10
[  110.251744][ T9794]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  110.251754][ T9794]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  110.251767][ T9794]  ieee80211_register_hw+0x3425/0x4080
[  110.251778][ T9794]  ? ieee80211_register_hw+0x14a1/0x4080
[  110.251788][ T9794]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  110.251796][ T9794]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.251808][ T9794]  ? __hrtimer_setup+0x187/0x210
[  110.251815][ T9794]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  110.251827][ T9794]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  110.251843][ T9794]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  110.251854][ T9794]  ? trace_kmalloc+0x1f/0xd0
[  110.251864][ T9794]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  110.251877][ T9794]  ? kstrndup+0xbf/0x160
[  110.251889][ T9794]  hwsim_new_radio_nl+0xea4/0x1b10
[  110.251899][ T9794]  ? __pfx___nla_validate_parse+0x10/0x10
[  110.251914][ T9794]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.251925][ T9794]  ? __nla_parse+0x40/0x60
[  110.251937][ T9794]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  110.251948][ T9794]  genl_family_rcv_msg_doit+0x215/0x300
[  110.251958][ T9794]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  110.251970][ T9794]  ? bpf_lsm_capable+0x9/0x20
[  110.251981][ T9794]  ? security_capable+0x7e/0x2e0
[  110.251993][ T9794]  genl_rcv_msg+0x60e/0x790
[  110.252002][ T9794]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.252010][ T9794]  ? __kasan_slab_alloc+0x6c/0x80
[  110.252020][ T9794]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.252029][ T9794]  ? __netlink_lookup+0xbd/0x810
[  110.252035][ T9794]  ? rcu_is_watching+0x15/0xb0
[  110.252044][ T9794]  netlink_rcv_skb+0x208/0x470
[  110.252056][ T9794]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.252064][ T9794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.252076][ T9794]  ? lock_release+0x4b/0x3e0
[  110.252088][ T9794]  ? down_read+0x1ad/0x2e0
[  110.252095][ T9794]  genl_rcv+0x28/0x40
[  110.252103][ T9794]  netlink_unicast+0x82f/0x9e0
[  110.252113][ T9794]  ? __pfx_netlink_unicast+0x10/0x10
[  110.252124][ T9794]  ? netlink_sendmsg+0x642/0xb30
[  110.252134][ T9794]  ? skb_put+0x11b/0x210
[  110.252142][ T9794]  netlink_sendmsg+0x805/0xb30
[  110.252154][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.252165][ T9794]  ? futex_unqueue+0x22/0x240
[  110.252174][ T9794]  ? aa_sock_msg_perm+0xf1/0x1d0
[  110.252181][ T9794]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.252189][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.252200][ T9794]  __sock_sendmsg+0x21c/0x270
[  110.252210][ T9794]  ____sys_sendmsg+0x505/0x830
[  110.252245][ T9794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.252257][ T9794]  ? import_iovec+0x74/0xa0
[  110.252268][ T9794]  ___sys_sendmsg+0x21f/0x2a0
[  110.252277][ T9794]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.252287][ T9794]  ? futex_wait+0x285/0x360
[  110.252305][ T9794]  ? __fget_files+0x2a/0x420
[  110.252316][ T9794]  ? __fget_files+0x3a0/0x420
[  110.252329][ T9794]  __x64_sys_sendmsg+0x19b/0x260
[  110.252337][ T9794]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.252347][ T9794]  ? rcu_is_watching+0x15/0xb0
[  110.252355][ T9794]  ? rcu_is_watching+0x15/0xb0
[  110.252363][ T9794]  do_syscall_64+0xfa/0x3b0
[  110.252375][ T9794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.252383][ T9794]  ? exc_page_fault+0x9f/0xf0
[  110.252394][ T9794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.252402][ T9794] RIP: 0033:0x7fc46358ebe9
[  110.252410][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.252418][ T9794] RSP: 002b:00007fc4644bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.252429][ T9794] RAX: ffffffffffffffda RBX: 00007fc4637b5fa0 RCX: 00007fc46358ebe9
[  110.252436][ T9794] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  110.252442][ T9794] RBP: 00007fc463611e19 R08: 0000000000000000 R09: 0000000000000000
[  110.252447][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.252453][ T9794] R13: 00007fc4637b6038 R14: 00007fc4637b5fa0 R15: 00007ffc8f29d2b8
[  110.252464][ T9794]  </TASK>
[  110.487411][ T9820] netlink: 'syz.1.971': attribute type 13 has an invalid length.
[  110.489965][ T9820] netlink: 'syz.1.971': attribute type 17 has an invalid length.
[  110.506512][ T9820] 0{X: left allmulticast mode
[  110.514435][ T9820] 8021q: adding VLAN 0 to HW filter on device team0
[  110.522102][ T9820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.531734][ T1273] lo speed is unknown, defaulting to 1000
[  110.533833][ T1273] syz0: Port: 1 Link ACTIVE
[  110.535937][ T1273] lo speed is unknown, defaulting to 1000
[  110.583568][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'.
[  110.587954][ T9845] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  110.590471][ T9845] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  110.618940][ T9848] netlink: 'syz.1.977': attribute type 12 has an invalid length.
[  110.905736][ T9869] erspan0: left allmulticast mode
[  110.907343][ T9869] erspan0: left promiscuous mode
[  110.908935][ T9869] bridge0: port 1(erspan0) entered disabled state
[  111.118361][ T9884] erspan0: left allmulticast mode
[  111.123718][ T9884] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  111.128344][ T9884] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  111.132035][ T9884] mac80211_hwsim hwsim20 wlan0: left promiscuous mode
[  111.136183][ T9884] bond6: left promiscuous mode
[  111.138916][ T9884] veth5: left allmulticast mode
[  111.141612][ T9884] bridge3: left allmulticast mode
[  111.143742][ T9884] geneve0: left promiscuous mode
[  111.188204][ T9884] hsr_slave_0: left promiscuous mode
[  111.352213][ T9901] tipc: Can't bind to reserved service type 2
[  111.939605][ T9915] 8021q: adding VLAN 0 to HW filter on device bond5
[  111.950239][ T9915] vlan3: entered allmulticast mode
[  111.952395][ T9915] veth1: entered allmulticast mode
[  111.955263][ T9915] bond5: (slave vlan3): Opening slave failed
[  112.172357][ T9938] bond0: default FDB implementation only supports local addresses
[  112.176181][ T9938] bond0: default FDB implementation only supports local addresses
[  112.236875][ T9946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.352464][ T9962] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  112.475568][ T9977] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  112.484972][ T9977] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  112.639835][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.643092][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.659625][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.666821][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.682375][T10013] tipc: Resetting bearer <eth:syzkaller0>
[  112.726441][T10017] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  112.730329][T10017] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  112.784214][T10025] erspan0: left promiscuous mode
[  112.793345][T10025] 8021q: adding VLAN 0 to HW filter on device team0
[  112.798897][T10025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.805251][ T1273] lo speed is unknown, defaulting to 1000
[  112.807420][ T1273] syz1: Port: 1 Link ACTIVE
[  112.825950][ T1273] lo speed is unknown, defaulting to 1000
[  112.842119][T10025] lo speed is unknown, defaulting to 1000
[  112.918711][T10025] lo speed is unknown, defaulting to 1000
[  112.931630][T10041] tipc: Resetting bearer <eth:syzkaller0>
[  112.946384][T10045] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.950057][T10041] tipc: Resetting bearer <eth:syzkaller0>
[  112.954257][T10041] tipc: Resetting bearer <eth:syzkaller0>
[  112.959426][T10045] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  112.962198][T10045] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  113.005025][T10050] syzkaller1: entered promiscuous mode
[  113.006746][T10050] syzkaller1: entered allmulticast mode
[  113.022033][T10052] netlink: 'syz.2.1034': attribute type 11 has an invalid length.
[  113.079176][T10055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.082699][T10055] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  113.086114][T10055] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  113.164858][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  113.320692][T10074] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.332950][T10074] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.336990][T10074] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  113.342505][T10074] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  113.346290][T10072] infiniband syz2: set down
[  113.348772][T10072] infiniband syz2: added bond0
[  113.359662][T10076] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  113.362659][T10076] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  113.373057][T10072] RDS/IB: syz2: added
[  113.375003][T10072] smc: adding ib device syz2 with port count 1
[  113.377343][T10072] smc:    ib device syz2 port 1 has pnetid 
[  113.391803][T10078] veth5: entered promiscuous mode
[  113.397788][T10078] bond6: (slave veth5): Enslaving as an active interface with a down link
[  113.593233][T10089] dvmrp8: entered allmulticast mode
[  113.616912][T10089] lo speed is unknown, defaulting to 1000
[  113.765944][T10089] lo speed is unknown, defaulting to 1000
[  114.009159][T10113] validate_nla: 17 callbacks suppressed
[  114.009170][T10113] netlink: 'syz.2.1051': attribute type 30 has an invalid length.
[  114.027935][T10088] dvmrp8: left allmulticast mode
[  114.136815][T10117] tipc: Resetting bearer <eth:syzkaller0>
[  114.139569][T10117] tipc: Resetting bearer <eth:syzkaller0>
[  114.192081][T10120] dvmrp8: entered allmulticast mode
[  114.204203][T10120] lo speed is unknown, defaulting to 1000
[  114.220645][T10115] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  114.252601][T10120] lo speed is unknown, defaulting to 1000
[  114.255453][T10123] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.258976][T10123] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  114.261390][T10123] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  114.264250][T10123] tipc: Resetting bearer <eth:syzkaller0>
[  114.271309][T10123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.488050][T10127] netlink: 'syz.0.1056': attribute type 12 has an invalid length.
[  114.567713][T10130] netlink: 'syz.0.1057': attribute type 11 has an invalid length.
[  114.570920][T10130] netlink: 'syz.0.1057': attribute type 11 has an invalid length.
[  114.580639][T10119] dvmrp8: left allmulticast mode
[  114.802080][T10146] netlink: 'syz.1.1062': attribute type 5 has an invalid length.
[  114.886025][T10146] geneve4: entered promiscuous mode
[  114.887873][T10146] geneve4: entered allmulticast mode
[  114.891879][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  114.905545][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  114.914122][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  114.922355][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  115.025432][T10156] __nla_validate_parse: 67 callbacks suppressed
[  115.025443][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  115.111415][T10162] nftables ruleset with unbound chain
[  115.114509][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'.
[  115.117616][T10162] netlink: 'syz.1.1066': attribute type 18 has an invalid length.
[  115.120393][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'.
[  115.123536][T10162] netlink: 'syz.1.1066': attribute type 18 has an invalid length.
[  115.184575][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'.
[  115.217980][T10168] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.221091][T10168] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.256661][T10168] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.259602][T10168] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.319345][T10168] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.322735][T10168] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.368115][T10168] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.371342][T10168] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.431877][ T5874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.435723][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  115.441841][ T5874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.445054][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  115.454167][ T5874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.457826][ T5874] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  115.460732][ T5874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.463636][ T5874] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  115.491875][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[  115.527044][T10173] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  115.531563][T10173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1070'.
[  115.565644][T10183] netlink: 'syz.0.1071': attribute type 12 has an invalid length.
[  115.601875][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'.
[  115.836688][T10193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1075'.
[  115.862864][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'.
[  115.876115][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'.
[  116.269345][T10211] netlink: 'syz.2.1079': attribute type 16 has an invalid length.
[  116.273920][T10211] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.367899][T10213] tipc: Resetting bearer <eth:syzkaller0>
[  116.529633][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 30 seconds
[  116.678375][T10223] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.681599][T10223] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  116.691825][T10225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.709203][T10223] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.712897][T10223] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  116.757411][T10223] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.760568][T10223] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  116.808297][T10223] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.811723][T10223] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  116.903081][T10228] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  116.905799][T10228] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  117.329196][T10270] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  117.502163][ T5874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.504857][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  117.511887][ T5874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.515682][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  117.522832][ T5874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.525876][ T5874] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  117.532969][ T5874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.535854][ T5874] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  117.612359][T10285] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  117.926817][T10296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.133048][T10309] batadv_slave_1: entered promiscuous mode
[  118.161043][T10315] team0: Cannot enslave team device to itself
[  118.366160][T10331] lo speed is unknown, defaulting to 1000
[  118.418880][T10331] lo speed is unknown, defaulting to 1000
[  118.418920][T10333] lo speed is unknown, defaulting to 1000
[  118.483830][T10333] lo speed is unknown, defaulting to 1000
[  118.689207][T10339] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  118.693434][T10339] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  118.842472][T10339] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  118.847384][T10339] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  118.974264][T10352] dummy0: entered allmulticast mode
[  118.976948][T10352] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  119.019190][T10354] pim6reg: entered allmulticast mode
[  119.278326][ T5896] lo speed is unknown, defaulting to 1000
[  119.280414][ T5896] syz1: Port: 1 Link DOWN
[  119.285399][ T5911] lo speed is unknown, defaulting to 1000
[  119.474739][T10382] nbd1: detected capacity change from 0 to 549764202496
[  119.479000][   T56] block nbd1: Receive control failed (result -32)
[  120.393028][T10419] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.396668][T10419] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.403852][T10415] __nla_validate_parse: 47 callbacks suppressed
[  120.403861][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  120.409033][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'.
[  120.412048][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  120.415518][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'.
[  120.429444][T10419] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.433051][T10419] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.438752][T10422] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode
[  120.443732][T10422] validate_nla: 10 callbacks suppressed
[  120.443741][T10422] netlink: 'syz.0.1133': attribute type 10 has an invalid length.
[  120.461566][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.464321][T10423] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  120.467381][T10423] team0: Failed to send options change via netlink (err -105)
[  120.468688][T10425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1134'.
[  120.469778][T10423] team0: Port device batadv0 added
[  120.477755][T10425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1134'.
[  120.482509][T10419] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.485791][T10419] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.537941][T10419] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.541225][T10419] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.595616][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.598866][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  120.604213][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.607491][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  120.614205][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.617633][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  120.623822][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.627289][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  121.189277][T10437] geneve3: entered promiscuous mode
[  121.191321][T10437] geneve3: entered allmulticast mode
[  121.193897][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 56145 - 0
[  121.197190][ T5874] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 40430 - 0
[  121.200321][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 56145 - 0
[  121.203437][ T5874] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 40430 - 0
[  121.207332][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 56145 - 0
[  121.210537][ T5874] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 40430 - 0
[  121.213455][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 56145 - 0
[  121.217062][ T5874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 40430 - 0
[  121.379751][T10458] sctp: [Deprecated]: syz.0.1143 (pid 10458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.379751][T10458] Use struct sctp_sack_info instead
[  121.391166][T10458] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  121.395048][T10458] CPU: 1 UID: 0 PID: 10458 Comm: syz.0.1143 Not tainted syzkaller #0 PREEMPT(full) 
[  121.395061][T10458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.395087][T10458] Call Trace:
[  121.395092][T10458]  <TASK>
[  121.395096][T10458]  dump_stack_lvl+0x189/0x250
[  121.395114][T10458]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.395124][T10458]  ? __pfx__printk+0x10/0x10
[  121.395136][T10458]  ? kernfs_root+0x1c/0x230
[  121.395148][T10458]  ? kernfs_path_from_node+0x2f/0x290
[  121.395158][T10458]  ? kernfs_path_from_node+0x250/0x290
[  121.395167][T10458]  ? kernfs_path_from_node+0x2f/0x290
[  121.395178][T10458]  sysfs_warn_dup+0x8e/0xa0
[  121.395187][T10458]  sysfs_do_create_link_sd+0xc0/0x110
[  121.395196][T10458]  device_add_class_symlinks+0x1cf/0x240
[  121.395206][T10458]  device_add+0x475/0xb50
[  121.395214][T10458]  wiphy_register+0x1ba6/0x28d0
[  121.395230][T10458]  ? __pfx_wiphy_register+0x10/0x10
[  121.395241][T10458]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  121.395251][T10458]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  121.395281][T10458]  ieee80211_register_hw+0x3425/0x4080
[  121.395293][T10458]  ? ieee80211_register_hw+0x14a1/0x4080
[  121.395303][T10458]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  121.395312][T10458]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.395331][T10458]  ? __hrtimer_setup+0x187/0x210
[  121.395339][T10458]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  121.395352][T10458]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  121.395369][T10458]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  121.395380][T10458]  ? trace_kmalloc+0x1f/0xd0
[  121.395391][T10458]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  121.395403][T10458]  ? kstrndup+0xbf/0x160
[  121.395414][T10458]  hwsim_new_radio_nl+0xea4/0x1b10
[  121.395425][T10458]  ? __pfx___nla_validate_parse+0x10/0x10
[  121.395440][T10458]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  121.395452][T10458]  ? __nla_parse+0x40/0x60
[  121.395463][T10458]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  121.395476][T10458]  genl_family_rcv_msg_doit+0x215/0x300
[  121.395488][T10458]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  121.395499][T10458]  ? bpf_lsm_capable+0x9/0x20
[  121.395509][T10458]  ? security_capable+0x7e/0x2e0
[  121.395523][T10458]  genl_rcv_msg+0x60e/0x790
[  121.395533][T10458]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.395542][T10458]  ? __kasan_slab_alloc+0x6c/0x80
[  121.395552][T10458]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  121.395562][T10458]  ? __netlink_lookup+0xbd/0x810
[  121.395568][T10458]  ? rcu_is_watching+0x15/0xb0
[  121.395578][T10458]  netlink_rcv_skb+0x208/0x470
[  121.395588][T10458]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.395597][T10458]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  121.395609][T10458]  ? lock_release+0x4b/0x3e0
[  121.395621][T10458]  ? down_read+0x1ad/0x2e0
[  121.395628][T10458]  genl_rcv+0x28/0x40
[  121.395635][T10458]  netlink_unicast+0x82f/0x9e0
[  121.395646][T10458]  ? __pfx_netlink_unicast+0x10/0x10
[  121.395656][T10458]  ? netlink_sendmsg+0x642/0xb30
[  121.395666][T10458]  ? skb_put+0x11b/0x210
[  121.395674][T10458]  netlink_sendmsg+0x805/0xb30
[  121.395687][T10458]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.395698][T10458]  ? aa_sock_msg_perm+0xf1/0x1d0
[  121.395706][T10458]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  121.395714][T10458]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.395725][T10458]  __sock_sendmsg+0x21c/0x270
[  121.395735][T10458]  ____sys_sendmsg+0x505/0x830
[  121.395743][T10458]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.395753][T10458]  ? import_iovec+0x74/0xa0
[  121.395762][T10458]  ___sys_sendmsg+0x21f/0x2a0
[  121.395770][T10458]  ? __pfx____sys_sendmsg+0x10/0x10
[  121.395779][T10458]  ? futex_wake+0x4b2/0x560
[  121.395795][T10458]  ? __fget_files+0x2a/0x420
[  121.395806][T10458]  ? __fget_files+0x3a0/0x420
[  121.395818][T10458]  __x64_sys_sendmsg+0x19b/0x260
[  121.395826][T10458]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  121.395836][T10458]  ? rcu_is_watching+0x15/0xb0
[  121.395844][T10458]  ? rcu_is_watching+0x15/0xb0
[  121.395852][T10458]  do_syscall_64+0xfa/0x3b0
[  121.395863][T10458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.395872][T10458]  ? exc_page_fault+0x9f/0xf0
[  121.395882][T10458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.395889][T10458] RIP: 0033:0x7f702d98ebe9
[  121.395897][T10458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.395905][T10458] RSP: 002b:00007f702e8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.395915][T10458] RAX: ffffffffffffffda RBX: 00007f702dbb5fa0 RCX: 00007f702d98ebe9
[  121.395921][T10458] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  121.395926][T10458] RBP: 00007f702da11e19 R08: 0000000000000000 R09: 0000000000000000
[  121.395932][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.395937][T10458] R13: 00007f702dbb6038 R14: 00007f702dbb5fa0 R15: 00007ffed037a898
[  121.395947][T10458]  </TASK>
[  121.569965][T10464] IPVS: length: 49 != 24
[  121.609887][T10467] netlink: 'syz.1.1145': attribute type 11 has an invalid length.
[  121.612335][T10470] dummy0: mtu less than device minimum
[  121.665319][T10473] pim6reg1: entered promiscuous mode
[  121.667595][T10473] pim6reg1: entered allmulticast mode
[  121.737905][T10473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1147'.
[  121.753700][T10473] bond5 (unregistering): Released all slaves
[  121.785643][T10483] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  121.908473][T10488] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1152'.
[  121.974550][T10490] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.982254][T10492] gretap4: entered promiscuous mode
[  121.984222][T10492] gretap4: entered allmulticast mode
[  121.988058][T10490] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  121.991198][T10490] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  122.004096][T10494] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  122.007106][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'.
[  122.049718][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'.
[  122.055989][T10498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.061416][T10499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.068383][T10498] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  122.083723][T10498] tipc: Resetting bearer <eth:syzkaller0>
[  122.102703][T10510] netlink: 'syz.1.1160': attribute type 4 has an invalid length.
[  122.121781][ T5876] lo speed is unknown, defaulting to 1000
[  122.123593][ T5876] syz0: Port: 1 Link DOWN
[  122.125748][ T5876] lo speed is unknown, defaulting to 1000
[  122.159699][T10520] netlink: 'syz.1.1163': attribute type 12 has an invalid length.
[  122.276390][T10533] netlink: 'syz.1.1167': attribute type 2 has an invalid length.
[  122.277265][T10535] tipc: Resetting bearer <eth:syzkaller0>
[  122.285626][T10535] tipc: Resetting bearer <eth:syzkaller0>
[  122.289530][T10535] tipc: Resetting bearer <eth:syzkaller0>
[  122.318495][T10539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.327893][   T33] audit: type=1107 audit(1755850755.344:4): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wz"rhLq6I^-x/vڴ$n3͘'
[  122.349485][T10541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.493707][T10559] netlink: 'syz.1.1175': attribute type 39 has an invalid length.
[  122.994075][T10563] netlink: zone id is out of range
[  122.995978][T10563] netlink: zone id is out of range
[  122.997784][T10563] netlink: zone id is out of range
[  122.999551][T10563] netlink: zone id is out of range
[  123.001387][T10563] netlink: zone id is out of range
[  123.003192][T10563] netlink: zone id is out of range
[  123.005177][T10563] netlink: zone id is out of range
[  123.007614][T10563] netlink: zone id is out of range
[  123.011277][T10563] netlink: zone id is out of range
[  123.013156][T10563] netlink: zone id is out of range
[  123.769656][T10561] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.771693][T10561] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  123.775373][T10561] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  123.777531][T10561] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  123.787893][T10569] netlink: 'syz.0.1180': attribute type 12 has an invalid length.
[  123.830447][T10573] lo speed is unknown, defaulting to 1000
[  123.884468][T10573] lo speed is unknown, defaulting to 1000
[  123.894456][T10578] netlink: 'syz.2.1183': attribute type 2 has an invalid length.
[  123.949468][T10583] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.952991][T10583] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  123.956035][T10583] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  124.077371][T10598] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  124.089814][T10598] 8021q: adding VLAN 0 to HW filter on device bond9
[  124.099399][T10598] 8021q: adding VLAN 0 to HW filter on device bond9
[  124.101711][T10598] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  124.105942][T10598] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  124.171456][T10605] veth7: entered promiscuous mode
[  124.179295][T10605] bond9: (slave veth7): Enslaving as an active interface with a down link
[  124.186448][T10608] netlink: 'syz.2.1191': attribute type 1 has an invalid length.
[  124.490363][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 56145 - 0
[  124.493833][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 40430 - 0
[  124.500300][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 56145 - 0
[  124.503784][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 40430 - 0
[  124.511287][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 56145 - 0
[  124.515848][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 40430 - 0
[  124.519381][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 56145 - 0
[  124.522906][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 40430 - 0
[  124.664121][T10645] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  124.682615][T10652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.772043][T10657] netlink: 'syz.2.1201': attribute type 16 has an invalid length.
[  124.776616][T10657] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.839031][T10659] syz1: rxe_newlink: already configured on lo
[  124.851671][T10659] 8021q: adding VLAN 0 to HW filter on device team0
[  124.856755][ T1273] lo speed is unknown, defaulting to 1000
[  124.859452][ T1273] syz1: Port: 1 Link ACTIVE
[  124.861206][ T1273] lo speed is unknown, defaulting to 1000
[  125.192252][ T1273] lo speed is unknown, defaulting to 1000
[  125.194510][ T1273] syz0: Port: 1 Link ACTIVE
[  125.200118][ T1273] lo speed is unknown, defaulting to 1000
[  125.202262][ T5876] lo speed is unknown, defaulting to 1000
[  125.204281][ T5876] syz0: Port: 1 Link DOWN
[  125.227523][T10679] IPVS: length: 209 != 24
[  125.510600][T10698] __nla_validate_parse: 19 callbacks suppressed
[  125.510611][T10698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1213'.
[  125.521256][T10698] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1
[  125.586190][T10704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.594499][T10702] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  125.598042][T10702] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  125.602084][T10702] geneve3: left promiscuous mode
[  125.603695][T10702] geneve3: left allmulticast mode
[  125.606133][T10702] gretap4: left promiscuous mode
[  125.607869][T10702] gretap4: left allmulticast mode
[  125.636840][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  125.642862][T10709] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1217'.
[  125.662258][T10713] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1219'.
[  125.668228][T10713] netlink: 70 bytes leftover after parsing attributes in process `syz.2.1219'.
[  125.706656][T10718] validate_nla: 3 callbacks suppressed
[  125.706672][T10718] netlink: 'syz.1.1221': attribute type 4 has an invalid length.
[  125.712227][T10720] netlink: 'syz.1.1221': attribute type 4 has an invalid length.
[  125.716690][ T5876] lo speed is unknown, defaulting to 1000
[  125.718515][ T5876] syz0: Port: 1 Link ACTIVE
[  125.720409][ T5876] lo speed is unknown, defaulting to 1000
[  125.762279][T10726] vti1: entered promiscuous mode
[  125.795649][T10731] IPVS: length: 49 != 24
[  125.798654][T10733] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  125.847058][T10736] batman_adv: batadv0: Adding interface: gretap0
[  125.849457][T10736] batman_adv: batadv0: Interface activated: gretap0
[  125.867427][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'.
[  125.898781][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'.
[  125.912843][T10743] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  125.913801][T10745] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  125.916975][T10743] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  125.932135][T10745] veth3: entered promiscuous mode
[  125.964553][T10746] macvlan2: entered promiscuous mode
[  125.968172][T10746] macvlan2: entered allmulticast mode
[  125.970559][T10746] bond8: (slave macvlan2): Error -98 calling set_mac_address
[  126.152183][T10766] netlink: 'syz.1.1233': attribute type 13 has an invalid length.
[  126.157491][T10766] netlink: 'syz.1.1233': attribute type 17 has an invalid length.
[  126.160108][T10768] netlink: 'syz.0.1234': attribute type 11 has an invalid length.
[  126.168154][T10766] 8021q: adding VLAN 0 to HW filter on device team0
[  126.171683][T10766] dummy0: left allmulticast mode
[  126.198863][T10766] lo speed is unknown, defaulting to 1000
[  126.327687][T10766] lo speed is unknown, defaulting to 1000
[  126.798730][T10778] veth3: left promiscuous mode
[  126.836362][T10778] Can't find ip_set type hash*net,port
[  126.903200][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1237'.
[  127.102017][T10789] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  127.129058][T10795] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  127.131975][T10795] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1240'.
[  127.157289][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'.
[  127.162423][T10797] netlink: 'syz.2.1241': attribute type 13 has an invalid length.
[  127.249062][T10799] netlink: 'syz.0.1242': attribute type 9 has an invalid length.
[  127.266301][T10802] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  127.318253][T10802] bond9: (slave gretap2): making interface the new active one
[  127.322097][T10802] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  127.338044][T10802] 8021q: adding VLAN 0 to HW filter on device bond9
[  127.456528][T10819] netlink: 'syz.1.1246': attribute type 10 has an invalid length.
[  127.467316][T10819] team0: Port device dummy0 added
[  127.537866][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.541543][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.546229][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.549721][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.788098][T10843] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  127.791034][T10843] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  127.863083][T10855] 8021q: adding VLAN 0 to HW filter on device bond10
[  127.871205][T10855] erspan0: entered allmulticast mode
[  127.879144][T10855] bond10: (slave erspan0): making interface the new active one
[  127.882202][T10855] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  127.926523][T10866] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.999073][T10880] bond0: (slave gretap0): Releasing backup interface
[  128.020589][T10880] net_ratelimit: 17 callbacks suppressed
[  128.020596][T10880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.210436][T10900] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  128.213036][T10900] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  128.313712][   T47] lo speed is unknown, defaulting to 1000
[  128.321919][   T47] syz1: Port: 1 Link DOWN
[  128.328743][   T47] lo speed is unknown, defaulting to 1000
[  128.408164][T10909] lo speed is unknown, defaulting to 1000
[  128.449202][T10909] lo speed is unknown, defaulting to 1000
[  129.102539][T10946] sctp: [Deprecated]: syz.1.1282 (pid 10946) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.102539][T10946] Use struct sctp_sack_info instead
[  129.111473][T10947] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  129.116259][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.1.1282 Not tainted syzkaller #0 PREEMPT(full) 
[  129.116301][T10947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.116309][T10947] Call Trace:
[  129.116315][T10947]  <TASK>
[  129.116320][T10947]  dump_stack_lvl+0x189/0x250
[  129.116360][T10947]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.116373][T10947]  ? __pfx__printk+0x10/0x10
[  129.116388][T10947]  ? kernfs_root+0x1c/0x230
[  129.116420][T10947]  ? kernfs_path_from_node+0x2f/0x290
[  129.116430][T10947]  ? kernfs_path_from_node+0x250/0x290
[  129.116441][T10947]  ? kernfs_path_from_node+0x2f/0x290
[  129.116452][T10947]  sysfs_warn_dup+0x8e/0xa0
[  129.116464][T10947]  sysfs_do_create_link_sd+0xc0/0x110
[  129.116475][T10947]  device_add_class_symlinks+0x1cf/0x240
[  129.116489][T10947]  device_add+0x475/0xb50
[  129.116500][T10947]  wiphy_register+0x1ba6/0x28d0
[  129.116522][T10947]  ? __pfx_wiphy_register+0x10/0x10
[  129.116537][T10947]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  129.116551][T10947]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  129.116570][T10947]  ieee80211_register_hw+0x3425/0x4080
[  129.116587][T10947]  ? ieee80211_register_hw+0x14a1/0x4080
[  129.116600][T10947]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.116613][T10947]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.116630][T10947]  ? __hrtimer_setup+0x187/0x210
[  129.116640][T10947]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  129.116657][T10947]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  129.116677][T10947]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.116689][T10947]  ? trace_kmalloc+0x1f/0xd0
[  129.116702][T10947]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  129.116717][T10947]  ? kstrndup+0xbf/0x160
[  129.116736][T10947]  hwsim_new_radio_nl+0xea4/0x1b10
[  129.116751][T10947]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.116772][T10947]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.116788][T10947]  ? __nla_parse+0x40/0x60
[  129.116802][T10947]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  129.116818][T10947]  genl_family_rcv_msg_doit+0x215/0x300
[  129.116831][T10947]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  129.116847][T10947]  ? bpf_lsm_capable+0x9/0x20
[  129.116863][T10947]  ? security_capable+0x7e/0x2e0
[  129.116880][T10947]  genl_rcv_msg+0x60e/0x790
[  129.116893][T10947]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.116903][T10947]  ? __kasan_slab_alloc+0x6c/0x80
[  129.116917][T10947]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.116930][T10947]  ? __netlink_lookup+0xbd/0x810
[  129.116938][T10947]  ? rcu_is_watching+0x15/0xb0
[  129.116952][T10947]  netlink_rcv_skb+0x208/0x470
[  129.116968][T10947]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.116979][T10947]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.116997][T10947]  ? lock_release+0x4b/0x3e0
[  129.117014][T10947]  ? down_read+0x1ad/0x2e0
[  129.117024][T10947]  genl_rcv+0x28/0x40
[  129.117034][T10947]  netlink_unicast+0x82f/0x9e0
[  129.117049][T10947]  ? __pfx_netlink_unicast+0x10/0x10
[  129.117063][T10947]  ? netlink_sendmsg+0x642/0xb30
[  129.117077][T10947]  ? skb_put+0x11b/0x210
[  129.117089][T10947]  netlink_sendmsg+0x805/0xb30
[  129.117105][T10947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.117120][T10947]  ? futex_unqueue+0x22/0x240
[  129.117132][T10947]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.117143][T10947]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.117154][T10947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.117169][T10947]  __sock_sendmsg+0x21c/0x270
[  129.117183][T10947]  ____sys_sendmsg+0x505/0x830
[  129.117197][T10947]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.117210][T10947]  ? import_iovec+0x74/0xa0
[  129.117223][T10947]  ___sys_sendmsg+0x21f/0x2a0
[  129.117234][T10947]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.117245][T10947]  ? futex_wait+0x285/0x360
[  129.117268][T10947]  ? __fget_files+0x2a/0x420
[  129.117316][T10947]  ? __fget_files+0x3a0/0x420
[  129.117334][T10947]  __x64_sys_sendmsg+0x19b/0x260
[  129.117345][T10947]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.117359][T10947]  ? rcu_is_watching+0x15/0xb0
[  129.117370][T10947]  ? rcu_is_watching+0x15/0xb0
[  129.117380][T10947]  do_syscall_64+0xfa/0x3b0
[  129.117397][T10947]  ? rcu_is_watching+0x15/0xb0
[  129.117406][T10947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.117418][T10947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.117429][T10947] RIP: 0033:0x7fc46358ebe9
[  129.117441][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.117451][T10947] RSP: 002b:00007fc46449e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.117465][T10947] RAX: ffffffffffffffda RBX: 00007fc4637b6090 RCX: 00007fc46358ebe9
[  129.117473][T10947] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e
[  129.117480][T10947] RBP: 00007fc463611e19 R08: 0000000000000000 R09: 0000000000000000
[  129.117487][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.117493][T10947] R13: 00007fc4637b6128 R14: 00007fc4637b6090 R15: 00007ffc8f29d2b8
[  129.117506][T10947]  </TASK>
[  129.288507][T10950] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  129.293280][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.1.1282 Not tainted syzkaller #0 PREEMPT(full) 
[  129.293303][T10950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.293312][T10950] Call Trace:
[  129.293319][T10950]  <TASK>
[  129.293325][T10950]  dump_stack_lvl+0x189/0x250
[  129.293348][T10950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.293364][T10950]  ? __pfx__printk+0x10/0x10
[  129.293382][T10950]  ? kernfs_root+0x1c/0x230
[  129.293399][T10950]  ? kernfs_path_from_node+0x2f/0x290
[  129.293412][T10950]  ? kernfs_path_from_node+0x250/0x290
[  129.293426][T10950]  ? kernfs_path_from_node+0x2f/0x290
[  129.293442][T10950]  sysfs_warn_dup+0x8e/0xa0
[  129.293456][T10950]  sysfs_do_create_link_sd+0xc0/0x110
[  129.293478][T10950]  device_add_class_symlinks+0x1cf/0x240
[  129.293495][T10950]  device_add+0x475/0xb50
[  129.293510][T10950]  wiphy_register+0x1ba6/0x28d0
[  129.293536][T10950]  ? __pfx_wiphy_register+0x10/0x10
[  129.293553][T10950]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  129.293571][T10950]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  129.293596][T10950]  ieee80211_register_hw+0x3425/0x4080
[  129.293618][T10950]  ? ieee80211_register_hw+0x14a1/0x4080
[  129.293635][T10950]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.293651][T10950]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.293673][T10950]  ? __hrtimer_setup+0x187/0x210
[  129.293686][T10950]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  129.293708][T10950]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  129.293734][T10950]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.293750][T10950]  ? trace_kmalloc+0x1f/0xd0
[  129.293767][T10950]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  129.293784][T10950]  ? kstrndup+0xbf/0x160
[  129.293801][T10950]  hwsim_new_radio_nl+0xea4/0x1b10
[  129.293818][T10950]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.293842][T10950]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.293861][T10950]  ? __nla_parse+0x40/0x60
[  129.293880][T10950]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  129.293899][T10950]  genl_family_rcv_msg_doit+0x215/0x300
[  129.293915][T10950]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  129.293933][T10950]  ? bpf_lsm_capable+0x9/0x20
[  129.293951][T10950]  ? security_capable+0x7e/0x2e0
[  129.293971][T10950]  genl_rcv_msg+0x60e/0x790
[  129.293986][T10950]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.293999][T10950]  ? __kasan_slab_alloc+0x6c/0x80
[  129.294015][T10950]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.294030][T10950]  ? __netlink_lookup+0xbd/0x810
[  129.294040][T10950]  ? rcu_is_watching+0x15/0xb0
[  129.294055][T10950]  netlink_rcv_skb+0x208/0x470
[  129.294074][T10950]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.294088][T10950]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.294108][T10950]  ? lock_release+0x4b/0x3e0
[  129.294127][T10950]  ? down_read+0x1ad/0x2e0
[  129.294139][T10950]  genl_rcv+0x28/0x40
[  129.294151][T10950]  netlink_unicast+0x82f/0x9e0
[  129.294169][T10950]  ? __pfx_netlink_unicast+0x10/0x10
[  129.294185][T10950]  ? netlink_sendmsg+0x642/0xb30
[  129.294202][T10950]  ? skb_put+0x11b/0x210
[  129.294214][T10950]  netlink_sendmsg+0x805/0xb30
[  129.294235][T10950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.294286][T10950]  ? futex_unqueue+0x22/0x240
[  129.294300][T10950]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.294313][T10950]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.294326][T10950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.294344][T10950]  __sock_sendmsg+0x21c/0x270
[  129.294362][T10950]  ____sys_sendmsg+0x505/0x830
[  129.294378][T10950]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.294393][T10950]  ? import_iovec+0x74/0xa0
[  129.294409][T10950]  ___sys_sendmsg+0x21f/0x2a0
[  129.294423][T10950]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.294437][T10950]  ? futex_wait+0x285/0x360
[  129.294471][T10950]  ? __fget_files+0x2a/0x420
[  129.294491][T10950]  ? __fget_files+0x3a0/0x420
[  129.294513][T10950]  __x64_sys_sendmsg+0x19b/0x260
[  129.294528][T10950]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.294545][T10950]  ? rcu_is_watching+0x15/0xb0
[  129.294560][T10950]  ? rcu_is_watching+0x15/0xb0
[  129.294573][T10950]  do_syscall_64+0xfa/0x3b0
[  129.294594][T10950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.294608][T10950]  ? exc_page_fault+0x9f/0xf0
[  129.294626][T10950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.294639][T10950] RIP: 0033:0x7fc46358ebe9
[  129.294653][T10950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.294666][T10950] RSP: 002b:00007fc46447d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.294682][T10950] RAX: ffffffffffffffda RBX: 00007fc4637b6180 RCX: 00007fc46358ebe9
[  129.294693][T10950] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e
[  129.294702][T10950] RBP: 00007fc463611e19 R08: 0000000000000000 R09: 0000000000000000
[  129.294711][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.294719][T10950] R13: 00007fc4637b6218 R14: 00007fc4637b6180 R15: 00007ffc8f29d2b8
[  129.294735][T10950]  </TASK>
[  129.639685][T10961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.652407][T10961] lo speed is unknown, defaulting to 1000
[  129.717127][T10960] xt_limit: Overflow, try lower: 271964/0
[  129.728473][T10963] xt_limit: Overflow, try lower: 271964/0
[  129.750876][T10961] lo speed is unknown, defaulting to 1000
[  129.948157][T10976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.951783][T10976] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  129.954431][T10976] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  130.019828][T10978] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  130.022529][T10978] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  130.503490][T11005] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.507722][T11005] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.547185][T11005] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.550806][T11005] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.580214][T11008] __nla_validate_parse: 32 callbacks suppressed
[  130.580229][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'.
[  130.609907][T11005] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.613425][T11005] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.648353][T11005] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.651832][T11005] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.699992][T10826] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.704250][T10826] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  130.711021][T10826] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.714283][T10826] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  130.719833][ T5874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.723091][ T5874] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  130.729907][ T5874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.733247][ T5874] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  130.765353][T11023] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.769319][T11023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.837637][T11023] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.841737][T11023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.897034][T11023] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.900198][T11023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.937289][T11023] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.940478][T11023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  131.090243][T11028] ip6gre1: entered allmulticast mode
[  131.508990][T11033] validate_nla: 8 callbacks suppressed
[  131.509007][T11033] netlink: 'syz.0.1302': attribute type 1 has an invalid length.
[  131.525013][T11033] 8021q: adding VLAN 0 to HW filter on device bond10
[  131.552150][T11039] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.636282][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1305'.
[  131.658754][T11047] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1306'.
[  131.683195][T11049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1307'.
[  131.711346][T11051] 8021q: adding VLAN 0 to HW filter on device bond11
[  131.736280][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1309'.
[  131.761024][T11056] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1310'.
[  131.764301][T11056] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1310'.
[  131.767963][T11056] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1310'.
[  132.020350][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  132.027572][T11065] IPv6: Can't replace route, no match found
[  132.050703][T11065] netlink: 'syz.2.1312': attribute type 29 has an invalid length.
[  132.097856][T11074] netlink: 'syz.2.1314': attribute type 4 has an invalid length.
[  132.104271][T11074] netlink: 'syz.2.1314': attribute type 4 has an invalid length.
[  132.226565][T11083] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.289767][T11083] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.305997][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  132.309883][T11089] netlink: 'syz.0.1317': attribute type 4 has an invalid length.
[  132.314389][T11089] netlink: 'syz.0.1317': attribute type 4 has an invalid length.
[  132.321792][    T9] lo speed is unknown, defaulting to 1000
[  132.323833][    T9] syz1: Port: 1 Link ACTIVE
[  132.325826][    T9] lo speed is unknown, defaulting to 1000
[  132.331458][T11083] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.382386][T11083] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.409071][T11099] lo speed is unknown, defaulting to 1000
[  132.446793][ T5738] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.456247][ T5738] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.465666][T10826] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.469072][T11099] lo speed is unknown, defaulting to 1000
[  132.475201][T10826] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.516211][T10826] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.519526][T10826] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  132.535017][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.539520][T10826] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.542795][T10826] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  132.554314][T10826] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.558198][T10826] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  132.571641][T10826] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.575444][T10826] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  132.601257][T11107] netlink: 'syz.1.1322': attribute type 1 has an invalid length.
[  132.694442][T11116] veth0_to_bond: entered allmulticast mode
[  132.726428][T11118] netlink: 'syz.2.1325': attribute type 13 has an invalid length.
[  132.837541][T10826] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.843106][T10826] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.847651][T10826] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.850153][T10826] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.149599][T11139] netlink: 'syz.2.1328': attribute type 16 has an invalid length.
[  133.152651][T11139] netlink: 'syz.2.1328': attribute type 17 has an invalid length.
[  133.192687][T11139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.208714][T11148] bond9: (slave veth7): Releasing active interface
[  134.721911][T11212] sctp: [Deprecated]: syz.1.1347 (pid 11212) Use of int in max_burst socket option deprecated.
[  134.721911][T11212] Use struct sctp_assoc_value instead
[  134.962993][T11244] v: renamed from ip6_vti0 (while UP)
[  135.191627][T11250] netlink: 'syz.0.1357': attribute type 11 has an invalid length.
[  135.350276][T11259] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  135.597069][T11264] gre0: entered allmulticast mode
[  135.605433][T11264] dvmrp1: entered allmulticast mode
[  135.609636][T11263] gre0: left allmulticast mode
[  135.658031][T11271] __nla_validate_parse: 16 callbacks suppressed
[  135.658045][T11271] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1362'.
[  135.667337][T11271] vlan0: entered allmulticast mode
[  135.669012][T11271] erspan0: entered allmulticast mode
[  135.701037][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'.
[  135.711009][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'.
[  135.784304][T11288] nbd: nbd0 already in use
[  135.811959][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'.
[  135.817048][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'.
[  135.893355][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1373'.
[  135.898635][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  135.901442][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  136.768052][T11392] lo speed is unknown, defaulting to 1000
[  136.911647][T11392] lo speed is unknown, defaulting to 1000
[  136.917879][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'.
[  136.921241][T11395] validate_nla: 2 callbacks suppressed
[  136.921250][T11395] netlink: 'syz.0.1377': attribute type 10 has an invalid length.
[  136.986629][T11409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1380'.
[  137.051408][T11411] netlink: 'syz.2.1380': attribute type 10 has an invalid length.
[  137.074514][T11411] netlink: 'syz.2.1380': attribute type 10 has an invalid length.
[  137.160763][T11414] netlink: 'syz.0.1381': attribute type 13 has an invalid length.
[  137.163394][T11414] netlink: 'syz.0.1381': attribute type 17 has an invalid length.
[  137.172371][T11414] 8021q: adding VLAN 0 to HW filter on device team0
[  137.176590][T11414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.196644][T11414] lo speed is unknown, defaulting to 1000
[  137.351457][T11414] lo speed is unknown, defaulting to 1000
[  137.837816][T11431] blkio.reset_stats is deprecated
[  137.846903][T11433] : entered promiscuous mode
[  137.891006][T11443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.908464][T11440] lo speed is unknown, defaulting to 1000
[  137.923822][T11445] tipc: Resetting bearer <eth:syzkaller0>
[  137.934983][T11445] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  137.970835][T11440] lo speed is unknown, defaulting to 1000
[  138.468231][T11479] tipc: Resetting bearer <eth:syzkaller0>
[  138.494849][ T5896] lo speed is unknown, defaulting to 1000
[  138.498299][ T5896] syz1: Port: 1 Link DOWN
[  138.502086][ T5896] lo speed is unknown, defaulting to 1000
[  138.537224][T11488] veth1: entered promiscuous mode
[  138.539040][T11488] netlink: 'syz.0.1400': attribute type 1 has an invalid length.
[  138.541589][T11488] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  138.671581][T11499] netlink: 'syz.1.1403': attribute type 21 has an invalid length.
[  138.674193][T11502] netlink: 'syz.1.1403': attribute type 21 has an invalid length.
[  138.680626][T11499] ipvlan0: entered promiscuous mode
[  138.690411][T11502] ipvlan0: entered promiscuous mode
[  138.803486][T11512] netlink: 'syz.0.1408': attribute type 5 has an invalid length.
[  138.810572][T11514] netlink: 'syz.1.1407': attribute type 13 has an invalid length.
[  138.966627][T11514] tipc: Resetting bearer <eth:syzkaller0>
[  138.985238][T11514] batman_adv: batadv0: Interface deactivated: gretap0
[  139.000011][ T5896] lo speed is unknown, defaulting to 1000
[  139.001973][ T5896] syz0: Port: 1 Link DOWN
[  139.010696][T10826] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.013782][T10826] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  139.020673][ T5896] lo speed is unknown, defaulting to 1000
[  139.023014][T10826] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.029083][T10826] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  139.032365][T10826] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.037482][T10826] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  139.040613][T10826] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.043392][T10826] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  139.067028][T10826] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.070228][T10826] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.073040][T10826] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.082564][T11530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.088285][T10826] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.094178][T11530] tipc: Resetting bearer <eth:syzkaller0>
[  139.152473][T11543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.191267][T11548] tipc: Resetting bearer <eth:syzkaller0>
[  139.195341][T11548] team0: Mode changed to "activebackup"
[  139.257059][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.259776][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.265479][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.268301][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.351303][T11559] tipc: Resetting bearer <eth:syzkaller0>
[  139.936989][T11568] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  139.973319][T11571] 8021q: adding VLAN 0 to HW filter on device bond12
[  139.996908][T11571] veth9: entered promiscuous mode
[  140.000785][T11571] bond12: (slave veth9): Enslaving as an active interface with a down link
[  140.135782][T11600] veth0_to_bond: entered allmulticast mode
[  140.361090][T11644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.394475][T11653] dvmrp0: left allmulticast mode
[  140.398712][T11653] dvmrp1: left allmulticast mode
[  140.680272][T11581] __nla_validate_parse: 127 callbacks suppressed
[  140.680286][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.698554][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.711854][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1447'.
[  140.713699][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.738032][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.743443][T11741] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1449'.
[  140.751693][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.785319][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.799417][T11748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.802876][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1426'.
[  140.808169][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'.
[  140.821035][ T5738] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.827002][ T5738] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.832112][ T5738] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.839723][ T5738] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.917596][T11756] bond0 (unregistering): Released all slaves
[  140.923740][  T738] smc: removing ib device syz2
[  141.089872][T11783] team0: entered promiscuous mode
[  141.175350][T11785] smc: net device bond0 applied user defined pnetid SYZ2
[  141.178264][T11785] smc: net device bond0 erased user defined pnetid SYZ2
[  141.278962][T11806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.286165][T11807] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.294569][ T8349] IPVS: starting estimator thread 0...
[  141.384958][T11812] IPVS: using max 78 ests per chain, 187200 per kthread
[  142.368686][T11853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.384022][T11854] erspan0: left allmulticast mode
[  142.391679][T11854] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  142.394545][T11854] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  142.405587][T11854] bridge3: left allmulticast mode
[  142.408410][T11854] veth5: left promiscuous mode
[  142.410554][T11854] geneve4: left promiscuous mode
[  142.412701][T11854] geneve4: left allmulticast mode
[  142.417622][T11854] vti1: left promiscuous mode
[  142.421455][T10826] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.423650][T11856] sctp: [Deprecated]: syz.2.1477 (pid 11856) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.423650][T11856] Use struct sctp_sack_info instead
[  142.438268][T10826] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.441683][T10826] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.452464][T11854] hsr_slave_0: left promiscuous mode
[  142.458461][T10826] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.528349][T11865] validate_nla: 10 callbacks suppressed
[  142.528371][T11865] netlink: 'syz.2.1479': attribute type 10 has an invalid length.
[  142.554371][T11873] netem: change failed
[  142.556850][T11873] netlink: 'syz.2.1481': attribute type 39 has an invalid length.
[  142.598494][T11875] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  142.634202][T11880] netlink: 'syz.1.1483': attribute type 12 has an invalid length.
[  142.865910][T11908] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  142.874153][T11910] netlink: 'syz.1.1487': attribute type 2 has an invalid length.
[  142.875736][T11908] bond13: entered promiscuous mode
[  142.878691][T11908] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.890055][T11908] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.893211][T11908] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address
[  142.897443][T11908] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  142.903666][T11908] bond13: (slave wireguard0): making interface the new active one
[  142.906967][T11908] wireguard0: entered promiscuous mode
[  142.910230][T11908] bond13: (slave wireguard0): Enslaving as an active interface with an up link
[  142.964263][T11914] team0: left promiscuous mode
[  142.968418][T11914] veth0_to_bond: left allmulticast mode
[  142.971045][T11914] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  142.973521][T11914] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  142.977430][T11914] mac80211_hwsim hwsim20 wlan0: left promiscuous mode
[  142.980212][T11914] veth1: left promiscuous mode
[  142.983238][T11914] veth7: left promiscuous mode
[  142.987077][T11914] vlan0: left allmulticast mode
[  142.989669][T11914] erspan0: left allmulticast mode
[  142.992924][T11914] veth9: left promiscuous mode
[  142.996252][T11914] bond13: left promiscuous mode
[  142.997956][T11914] wireguard0: left promiscuous mode
[  143.030541][T11916] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  143.033320][T11916] tipc: Resetting bearer <eth:syzkaller0>
[  143.353714][T11943] netlink: 'syz.2.1498': attribute type 11 has an invalid length.
[  143.457494][T11945] netlink: 'syz.2.1499': attribute type 1 has an invalid length.
[  143.532013][T11951] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.538760][T11951] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  143.541588][T11951] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  143.545997][T11951] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  143.549310][T11953] tipc: Resetting bearer <eth:syzkaller0>
[  143.556163][T11953] tipc: Resetting bearer <eth:syzkaller0>
[  143.588293][T11957] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  143.689833][T11973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.794288][T11989] netlink: 'syz.2.1511': attribute type 10 has an invalid length.
[  143.987933][T12013] mac80211_hwsim hwsim117 wlan0: entered promiscuous mode
[  143.990262][T12013] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  144.333860][T12023] netlink: 'syz.2.1519': attribute type 1 has an invalid length.
[  144.394511][T12038] veth0_to_bond: left allmulticast mode
[  144.397726][T12038] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  144.399973][T12038] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  144.403954][T12038] ip6gre1: left allmulticast mode
[  144.408719][T12038] mac80211_hwsim hwsim117 wlan0: left promiscuous mode
[  145.075805][T12051] netlink: 'syz.0.1524': attribute type 16 has an invalid length.
[  145.078219][T12051] netlink: 'syz.0.1524': attribute type 17 has an invalid length.
[  145.093725][T12051] 8021q: adding VLAN 0 to HW filter on device team0
[  145.097866][T12051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.104507][ T6473] lo speed is unknown, defaulting to 1000
[  145.107084][ T6473] syz1: Port: 1 Link ACTIVE
[  145.108653][ T6473] lo speed is unknown, defaulting to 1000
[  145.401990][T12059] ieee802154 phy0 wpan0: encryption failed: -22
[  145.451456][T12067] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  145.454529][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.2.1527 Not tainted syzkaller #0 PREEMPT(full) 
[  145.454548][T12067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.454558][T12067] Call Trace:
[  145.454565][T12067]  <TASK>
[  145.454572][T12067]  dump_stack_lvl+0x189/0x250
[  145.454656][T12067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.454675][T12067]  ? __pfx__printk+0x10/0x10
[  145.454695][T12067]  ? kernfs_root+0x1c/0x230
[  145.454726][T12067]  ? kernfs_path_from_node+0x2f/0x290
[  145.454742][T12067]  ? kernfs_path_from_node+0x250/0x290
[  145.454757][T12067]  ? kernfs_path_from_node+0x2f/0x290
[  145.454773][T12067]  sysfs_warn_dup+0x8e/0xa0
[  145.454788][T12067]  sysfs_do_create_link_sd+0xc0/0x110
[  145.454802][T12067]  device_add_class_symlinks+0x1cf/0x240
[  145.454819][T12067]  device_add+0x475/0xb50
[  145.454833][T12067]  wiphy_register+0x1ba6/0x28d0
[  145.454860][T12067]  ? __pfx_wiphy_register+0x10/0x10
[  145.454878][T12067]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  145.454896][T12067]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  145.454921][T12067]  ieee80211_register_hw+0x3425/0x4080
[  145.454943][T12067]  ? ieee80211_register_hw+0x14a1/0x4080
[  145.454960][T12067]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  145.454983][T12067]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.455007][T12067]  ? __hrtimer_setup+0x187/0x210
[  145.455021][T12067]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  145.455042][T12067]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  145.455069][T12067]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  145.455086][T12067]  ? trace_kmalloc+0x1f/0xd0
[  145.455101][T12067]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  145.455117][T12067]  ? kstrndup+0xbf/0x160
[  145.455132][T12067]  hwsim_new_radio_nl+0xea4/0x1b10
[  145.455148][T12067]  ? __pfx___nla_validate_parse+0x10/0x10
[  145.455174][T12067]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.455195][T12067]  ? __nla_parse+0x40/0x60
[  145.455215][T12067]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.455235][T12067]  genl_family_rcv_msg_doit+0x215/0x300
[  145.455253][T12067]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.455273][T12067]  ? bpf_lsm_capable+0x9/0x20
[  145.455291][T12067]  ? security_capable+0x7e/0x2e0
[  145.455313][T12067]  genl_rcv_msg+0x60e/0x790
[  145.455330][T12067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.455344][T12067]  ? __kasan_slab_alloc+0x6c/0x80
[  145.455360][T12067]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.455376][T12067]  ? __netlink_lookup+0xbd/0x810
[  145.455385][T12067]  ? rcu_is_watching+0x15/0xb0
[  145.455402][T12067]  netlink_rcv_skb+0x208/0x470
[  145.455420][T12067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.455434][T12067]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.455456][T12067]  ? lock_release+0x4b/0x3e0
[  145.455472][T12067]  ? down_read+0x1ad/0x2e0
[  145.455484][T12067]  genl_rcv+0x28/0x40
[  145.455496][T12067]  netlink_unicast+0x82f/0x9e0
[  145.455512][T12067]  ? __pfx_netlink_unicast+0x10/0x10
[  145.455526][T12067]  ? netlink_sendmsg+0x642/0xb30
[  145.455540][T12067]  ? skb_put+0x11b/0x210
[  145.455553][T12067]  netlink_sendmsg+0x805/0xb30
[  145.455571][T12067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.455623][T12067]  ? futex_unqueue+0x22/0x240
[  145.455638][T12067]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.455652][T12067]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.455667][T12067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.455684][T12067]  __sock_sendmsg+0x21c/0x270
[  145.455702][T12067]  ____sys_sendmsg+0x505/0x830
[  145.455717][T12067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.455734][T12067]  ? import_iovec+0x74/0xa0
[  145.455750][T12067]  ___sys_sendmsg+0x21f/0x2a0
[  145.455761][T12067]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.455774][T12067]  ? futex_wait+0x285/0x360
[  145.455797][T12067]  ? __fget_files+0x2a/0x420
[  145.455813][T12067]  ? __fget_files+0x3a0/0x420
[  145.455831][T12067]  __x64_sys_sendmsg+0x19b/0x260
[  145.455843][T12067]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.455859][T12067]  ? rcu_is_watching+0x15/0xb0
[  145.455871][T12067]  do_syscall_64+0xfa/0x3b0
[  145.455889][T12067]  ? rcu_is_watching+0x15/0xb0
[  145.455900][T12067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.455913][T12067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.455925][T12067] RIP: 0033:0x7f95b3b8ebe9
[  145.455936][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.455948][T12067] RSP: 002b:00007f95b4a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.455971][T12067] RAX: ffffffffffffffda RBX: 00007f95b3db5fa0 RCX: 00007f95b3b8ebe9
[  145.455982][T12067] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  145.455991][T12067] RBP: 00007f95b3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  145.456001][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.456010][T12067] R13: 00007f95b3db6038 R14: 00007f95b3db5fa0 R15: 00007ffdd54a5938
[  145.456026][T12067]  </TASK>
[  145.743164][T12082] mac80211_hwsim hwsim117 wlan0: entered promiscuous mode
[  145.751335][T12082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  145.841022][T12087] delete_channel: no stack
[  145.858912][T12090] dummy0: entered promiscuous mode
[  145.860809][T12090] vlan1: entered promiscuous mode
[  145.887265][T12094] __nla_validate_parse: 25 callbacks suppressed
[  145.887278][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  145.893587][T12094] IPv6: NLM_F_REPLACE set, but no existing node found!
[  145.919968][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'.
[  145.970170][T12103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1539'.
[  145.979885][T12106] bond0 (unregistering): Released all slaves
[  145.996765][T12114] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  146.076666][T12128] IPv6: sit2: Disabled Multicast RS
[  146.078749][T12128] sit2: entered allmulticast mode
[  146.093440][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'.
[  146.104417][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1544'.
[  146.141466][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'.
[  146.217250][T12131] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  146.223939][ T5876] lo speed is unknown, defaulting to 1000
[  146.226485][ T5876] syz1: Port: 1 Link DOWN
[  146.233653][ T5876] lo speed is unknown, defaulting to 1000
[  146.255126][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'.
[  146.287397][T12147] trusted_key: syz.2.1550 sent an empty control message without MSG_MORE.
[  146.315203][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'.
[  146.320263][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[  146.400617][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'.
[  146.616002][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 60 seconds
[  146.911531][T12176] bond12: (slave veth9): Releasing active interface
[  146.914751][T12176] bond13: (slave wireguard0): Releasing backup interface
[  147.070343][T12185] xfrm2: entered promiscuous mode
[  147.072094][T12185] xfrm2: entered allmulticast mode
[  147.137352][T12189] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  147.139807][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.0.1562 Not tainted syzkaller #0 PREEMPT(full) 
[  147.139827][T12189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.139836][T12189] Call Trace:
[  147.139843][T12189]  <TASK>
[  147.139850][T12189]  dump_stack_lvl+0x189/0x250
[  147.139870][T12189]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.139881][T12189]  ? __pfx__printk+0x10/0x10
[  147.139892][T12189]  ? kernfs_root+0x1c/0x230
[  147.139903][T12189]  ? kernfs_path_from_node+0x2f/0x290
[  147.139912][T12189]  ? kernfs_path_from_node+0x250/0x290
[  147.139920][T12189]  ? kernfs_path_from_node+0x2f/0x290
[  147.139928][T12189]  sysfs_warn_dup+0x8e/0xa0
[  147.139936][T12189]  sysfs_do_create_link_sd+0xc0/0x110
[  147.139945][T12189]  device_add_class_symlinks+0x1cf/0x240
[  147.139955][T12189]  device_add+0x475/0xb50
[  147.139963][T12189]  wiphy_register+0x1ba6/0x28d0
[  147.139979][T12189]  ? __pfx_wiphy_register+0x10/0x10
[  147.139989][T12189]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  147.139999][T12189]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  147.140013][T12189]  ieee80211_register_hw+0x3425/0x4080
[  147.140025][T12189]  ? ieee80211_register_hw+0x14a1/0x4080
[  147.140034][T12189]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  147.140043][T12189]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.140055][T12189]  ? __hrtimer_setup+0x187/0x210
[  147.140063][T12189]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  147.140076][T12189]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  147.140091][T12189]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  147.140100][T12189]  ? trace_kmalloc+0x1f/0xd0
[  147.140111][T12189]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  147.140122][T12189]  ? kstrndup+0xbf/0x160
[  147.140132][T12189]  hwsim_new_radio_nl+0xea4/0x1b10
[  147.140142][T12189]  ? __pfx___nla_validate_parse+0x10/0x10
[  147.140157][T12189]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.140169][T12189]  ? __nla_parse+0x40/0x60
[  147.140180][T12189]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  147.140192][T12189]  genl_family_rcv_msg_doit+0x215/0x300
[  147.140201][T12189]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  147.140212][T12189]  ? bpf_lsm_capable+0x9/0x20
[  147.140223][T12189]  ? security_capable+0x7e/0x2e0
[  147.140235][T12189]  genl_rcv_msg+0x60e/0x790
[  147.140245][T12189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.140252][T12189]  ? __kasan_slab_alloc+0x6c/0x80
[  147.140262][T12189]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.140272][T12189]  ? __netlink_lookup+0xbd/0x810
[  147.140278][T12189]  ? rcu_is_watching+0x15/0xb0
[  147.140288][T12189]  netlink_rcv_skb+0x208/0x470
[  147.140299][T12189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.140307][T12189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.140319][T12189]  ? lock_release+0x4b/0x3e0
[  147.140332][T12189]  ? down_read+0x1ad/0x2e0
[  147.140339][T12189]  genl_rcv+0x28/0x40
[  147.140346][T12189]  netlink_unicast+0x82f/0x9e0
[  147.140361][T12189]  ? __pfx_netlink_unicast+0x10/0x10
[  147.140376][T12189]  ? netlink_sendmsg+0x642/0xb30
[  147.140393][T12189]  ? skb_put+0x11b/0x210
[  147.140401][T12189]  netlink_sendmsg+0x805/0xb30
[  147.140441][T12189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.140453][T12189]  ? futex_unqueue+0x22/0x240
[  147.140465][T12189]  ? aa_sock_msg_perm+0xf1/0x1d0
[  147.140479][T12189]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.140493][T12189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.140512][T12189]  __sock_sendmsg+0x21c/0x270
[  147.140525][T12189]  ____sys_sendmsg+0x505/0x830
[  147.140535][T12189]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.140544][T12189]  ? import_iovec+0x74/0xa0
[  147.140554][T12189]  ___sys_sendmsg+0x21f/0x2a0
[  147.140562][T12189]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.140570][T12189]  ? futex_wait+0x285/0x360
[  147.140586][T12189]  ? __fget_files+0x2a/0x420
[  147.140597][T12189]  ? __fget_files+0x3a0/0x420
[  147.140610][T12189]  __x64_sys_sendmsg+0x19b/0x260
[  147.140620][T12189]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.140629][T12189]  ? rcu_is_watching+0x15/0xb0
[  147.140638][T12189]  ? rcu_is_watching+0x15/0xb0
[  147.140646][T12189]  do_syscall_64+0xfa/0x3b0
[  147.140658][T12189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.140667][T12189]  ? exc_page_fault+0x9f/0xf0
[  147.140678][T12189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.140686][T12189] RIP: 0033:0x7f702d98ebe9
[  147.140694][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.140703][T12189] RSP: 002b:00007f702e8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.140713][T12189] RAX: ffffffffffffffda RBX: 00007f702dbb5fa0 RCX: 00007f702d98ebe9
[  147.140719][T12189] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  147.140724][T12189] RBP: 00007f702da11e19 R08: 0000000000000000 R09: 0000000000000000
[  147.140730][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.140735][T12189] R13: 00007f702dbb6038 R14: 00007f702dbb5fa0 R15: 00007ffed037a898
[  147.140744][T12189]  </TASK>
[  147.418150][T12207] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  147.420856][T12207] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  147.513219][T12209] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  147.521275][T12209] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2
[  147.613724][T12227] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  147.619552][T12227] CPU: 1 UID: 0 PID: 12227 Comm: syz.0.1572 Not tainted syzkaller #0 PREEMPT(full) 
[  147.619572][T12227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.619581][T12227] Call Trace:
[  147.619587][T12227]  <TASK>
[  147.619594][T12227]  dump_stack_lvl+0x189/0x250
[  147.619617][T12227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.619633][T12227]  ? __pfx__printk+0x10/0x10
[  147.619651][T12227]  ? kernfs_root+0x1c/0x230
[  147.619668][T12227]  ? kernfs_path_from_node+0x2f/0x290
[  147.619682][T12227]  ? kernfs_path_from_node+0x250/0x290
[  147.619695][T12227]  ? kernfs_path_from_node+0x2f/0x290
[  147.619710][T12227]  sysfs_warn_dup+0x8e/0xa0
[  147.619724][T12227]  sysfs_do_create_link_sd+0xc0/0x110
[  147.619739][T12227]  device_add_class_symlinks+0x1cf/0x240
[  147.619763][T12227]  device_add+0x475/0xb50
[  147.619776][T12227]  wiphy_register+0x1ba6/0x28d0
[  147.619800][T12227]  ? __pfx_wiphy_register+0x10/0x10
[  147.619816][T12227]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  147.619831][T12227]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  147.619854][T12227]  ieee80211_register_hw+0x3425/0x4080
[  147.619874][T12227]  ? ieee80211_register_hw+0x14a1/0x4080
[  147.619889][T12227]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  147.619903][T12227]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.619923][T12227]  ? __hrtimer_setup+0x187/0x210
[  147.619936][T12227]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  147.619957][T12227]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  147.619995][T12227]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  147.620011][T12227]  ? trace_kmalloc+0x1f/0xd0
[  147.620027][T12227]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  147.620046][T12227]  ? kstrndup+0xbf/0x160
[  147.620063][T12227]  hwsim_new_radio_nl+0xea4/0x1b10
[  147.620080][T12227]  ? __pfx___nla_validate_parse+0x10/0x10
[  147.620106][T12227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.620150][T12227]  ? __nla_parse+0x40/0x60
[  147.620171][T12227]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  147.620191][T12227]  genl_family_rcv_msg_doit+0x215/0x300
[  147.620209][T12227]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  147.620228][T12227]  ? bpf_lsm_capable+0x9/0x20
[  147.620248][T12227]  ? security_capable+0x7e/0x2e0
[  147.620269][T12227]  genl_rcv_msg+0x60e/0x790
[  147.620285][T12227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.620299][T12227]  ? __kasan_slab_alloc+0x6c/0x80
[  147.620317][T12227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.620334][T12227]  ? __netlink_lookup+0xbd/0x810
[  147.620346][T12227]  ? rcu_is_watching+0x15/0xb0
[  147.620391][T12227]  netlink_rcv_skb+0x208/0x470
[  147.620412][T12227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.620426][T12227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.620449][T12227]  ? lock_release+0x4b/0x3e0
[  147.620470][T12227]  ? down_read+0x1ad/0x2e0
[  147.620483][T12227]  genl_rcv+0x28/0x40
[  147.620495][T12227]  netlink_unicast+0x82f/0x9e0
[  147.620513][T12227]  ? __pfx_netlink_unicast+0x10/0x10
[  147.620530][T12227]  ? netlink_sendmsg+0x642/0xb30
[  147.620547][T12227]  ? skb_put+0x11b/0x210
[  147.620561][T12227]  netlink_sendmsg+0x805/0xb30
[  147.620582][T12227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.620603][T12227]  ? aa_sock_msg_perm+0xf1/0x1d0
[  147.620616][T12227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.620630][T12227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.620648][T12227]  __sock_sendmsg+0x21c/0x270
[  147.620665][T12227]  ____sys_sendmsg+0x505/0x830
[  147.620681][T12227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.620696][T12227]  ? import_iovec+0x74/0xa0
[  147.620713][T12227]  ___sys_sendmsg+0x21f/0x2a0
[  147.620728][T12227]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.620743][T12227]  ? futex_wake+0x4b2/0x560
[  147.620777][T12227]  ? __fget_files+0x2a/0x420
[  147.620797][T12227]  ? __fget_files+0x3a0/0x420
[  147.620819][T12227]  __x64_sys_sendmsg+0x19b/0x260
[  147.620834][T12227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.620850][T12227]  ? rcu_is_watching+0x15/0xb0
[  147.620865][T12227]  ? rcu_is_watching+0x15/0xb0
[  147.620879][T12227]  do_syscall_64+0xfa/0x3b0
[  147.620900][T12227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.620912][T12227]  ? exc_page_fault+0x9f/0xf0
[  147.620928][T12227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.620941][T12227] RIP: 0033:0x7f702d98ebe9
[  147.620955][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.620969][T12227] RSP: 002b:00007f702e8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.620985][T12227] RAX: ffffffffffffffda RBX: 00007f702dbb5fa0 RCX: 00007f702d98ebe9
[  147.620995][T12227] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  147.621004][T12227] RBP: 00007f702da11e19 R08: 0000000000000000 R09: 0000000000000000
[  147.621013][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.621021][T12227] R13: 00007f702dbb6038 R14: 00007f702dbb5fa0 R15: 00007ffed037a898
[  147.621038][T12227]  </TASK>
[  147.853562][T12262] validate_nla: 32 callbacks suppressed
[  147.853581][T12262] netlink: 'syz.2.1579': attribute type 5 has an invalid length.
[  148.018258][T10826] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.023136][T10826] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.027671][T10826] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.031199][T10826] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.182797][T12284] IPVS: length: 148 != 24
[  148.230595][T12286] netlink: 'syz.1.1583': attribute type 12 has an invalid length.
[  148.301178][T12286] batman_adv: batadv0: Adding interface: gretap3
[  148.303170][T12286] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.311471][T12286] batman_adv: batadv0: Interface activated: gretap3
[  148.394232][T12294] netlink: 'syz.1.1585': attribute type 12 has an invalid length.
[  176.685000][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 90 seconds
[  193.966878][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  206.765340][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 120 seconds
[  236.845055][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 150 seconds
[  255.406878][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  266.924982][   T61] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 180 seconds
[  297.007335][ T5315] block nbd0: Possible stuck request ffff888021a98000: control (read@0,4096B). Runtime 210 seconds
[  306.605076][   T34] INFO: task kworker/0:4:5876 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  306.608620][   T34]       Not tainted syzkaller #0
[  306.610807][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  306.615248][   T34] task:kworker/0:4     state:D stack:25152 pid:5876  tgid:5876  ppid:2      task_flags:0x4208060 flags:0x00004000
[  306.619731][   T34] Workqueue: events rfkill_sync_work
[  306.621539][   T34] Call Trace:
[  306.622692][   T34]  <TASK>
[  306.623707][   T34]  __schedule+0x1798/0x4cc0
[  306.626715][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  306.628658][   T34]  ? __pfx___schedule+0x10/0x10
[  306.630374][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  306.632163][   T34]  ? lock_release+0x4b/0x3e0
[  306.633809][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.642522][   T34]  schedule+0x165/0x360
[  306.644112][   T34]  schedule_preempt_disabled+0x13/0x30
[  306.647749][   T34]  __mutex_lock+0x7e6/0x1350
[  306.649388][   T34]  ? __mutex_lock+0x5bb/0x1350
[  306.651589][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  306.653481][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  306.655402][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.657259][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.659690][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  306.661728][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  306.663332][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  306.665912][   T34]  rfkill_set_block+0x1d2/0x440
[  306.667750][   T34]  rfkill_sync_work+0x114/0x200
[  306.669359][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  306.671262][   T34]  process_scheduled_works+0xae1/0x17b0
[  306.672990][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  306.674887][   T34]  worker_thread+0x8a0/0xda0
[  306.676402][   T34]  kthread+0x711/0x8a0
[  306.677789][   T34]  ? __pfx_worker_thread+0x10/0x10
[  306.679516][   T34]  ? __pfx_kthread+0x10/0x10
[  306.681001][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.682519][   T34]  ? __pfx_kthread+0x10/0x10
[  306.684056][   T34]  ret_from_fork+0x3fc/0x770
[  306.686444][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  306.688415][   T34]  ? __switch_to_asm+0x39/0x70
[  306.690089][   T34]  ? __switch_to_asm+0x33/0x70
[  306.691656][   T34]  ? __pfx_kthread+0x10/0x10
[  306.693257][   T34]  ret_from_fork_asm+0x1a/0x30
[  306.694841][   T34]  </TASK>
[  306.695993][   T34] INFO: task kworker/0:5:5896 blocked for more than 143 seconds.
[  306.698969][   T34]       Not tainted syzkaller #0
[  306.700926][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  306.704258][   T34] task:kworker/0:5     state:D stack:22064 pid:5896  tgid:5896  ppid:2      task_flags:0x4208060 flags:0x00004000
[  306.709804][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  306.712405][   T34] Call Trace:
[  306.713655][   T34]  <TASK>
[  306.714950][   T34]  __schedule+0x1798/0x4cc0
[  306.716745][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  306.718624][   T34]  ? __pfx___schedule+0x10/0x10
[  306.720247][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  306.722170][   T34]  ? lock_release+0x4b/0x3e0
[  306.723855][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.726956][   T34]  schedule+0x165/0x360
[  306.728549][   T34]  schedule_preempt_disabled+0x13/0x30
[  306.730591][   T34]  __mutex_lock+0x7e6/0x1350
[  306.732344][   T34]  ? __mutex_lock+0x5bb/0x1350
[  306.734173][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  306.736699][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  306.738696][   T34]  ? lock_acquire+0x5f/0x360
[  306.740369][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  306.742537][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  306.745820][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  306.747647][   T34]  process_scheduled_works+0xae1/0x17b0
[  306.749578][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  306.751905][   T34]  worker_thread+0x8a0/0xda0
[  306.753690][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.756646][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.758985][   T34]  ? __kthread_parkme+0x7b/0x200
[  306.760896][   T34]  kthread+0x711/0x8a0
[  306.762485][   T34]  ? __pfx_worker_thread+0x10/0x10
[  306.764455][   T34]  ? __pfx_kthread+0x10/0x10
[  306.767962][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.769802][   T34]  ? __pfx_kthread+0x10/0x10
[  306.771609][   T34]  ret_from_fork+0x3fc/0x770
[  306.773371][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  306.775448][   T34]  ? __switch_to_asm+0x39/0x70
[  306.777317][   T34]  ? __switch_to_asm+0x33/0x70
[  306.779114][   T34]  ? __pfx_kthread+0x10/0x10
[  306.780705][   T34]  ret_from_fork_asm+0x1a/0x30
[  306.782385][   T34]  </TASK>
[  306.783545][   T34] INFO: task syz.0.1576:12243 blocked for more than 143 seconds.
[  306.787336][   T34]       Not tainted syzkaller #0
[  306.788822][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  306.791488][   T34] task:syz.0.1576      state:D stack:25224 pid:12243 tgid:12243 ppid:5847   task_flags:0x400040 flags:0x00004004
[  306.795339][   T34] Call Trace:
[  306.796467][   T34]  <TASK>
[  306.797445][   T34]  __schedule+0x1798/0x4cc0
[  306.799006][   T34]  ? kernel_text_address+0xa5/0xe0
[  306.800622][   T34]  ? __kernel_text_address+0xd/0x40
[  306.802320][   T34]  ? unwind_get_return_address+0x4d/0x90
[  306.804355][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  306.808470][   T34]  ? __pfx___schedule+0x10/0x10
[  306.810330][   T34]  ? schedule+0x91/0x360
[  306.811815][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.813467][   T34]  ? lock_release+0x4b/0x3e0
[  306.815048][   T34]  schedule+0x165/0x360
[  306.816681][   T34]  schedule_timeout+0x9a/0x270
[  306.818450][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  306.820323][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.822141][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.823560][   T34]  ? wait_for_completion+0x267/0x5d0
[  306.826426][   T34]  wait_for_completion+0x2bf/0x5d0
[  306.828385][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  306.830107][   T34]  ? lock_release+0x4b/0x3e0
[  306.831703][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.833503][   T34]  ? __flush_work+0xd2/0xbc0
[  306.835365][   T34]  __flush_work+0x9b9/0xbc0
[  306.837071][   T34]  ? __flush_work+0xd2/0xbc0
[  306.838740][   T34]  ? __pfx___flush_work+0x10/0x10
[  306.840672][   T34]  ? __mutex_lock+0x335/0x1350
[  306.842409][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  306.844309][   T34]  ? __pfx___cancel_work+0x10/0x10
[  306.847240][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  306.849356][   T34]  __cancel_work_sync+0xbe/0x110
[  306.851250][   T34]  rfkill_unregister+0x92/0x220
[  306.853136][   T34]  nfc_unregister_device+0x96/0x2a0
[  306.855067][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  306.856946][   T34]  virtual_ncidev_close+0x56/0x90
[  306.858735][   T34]  __fput+0x44c/0xa70
[  306.860286][   T34]  task_work_run+0x1d4/0x260
[  306.862043][   T34]  ? __pfx_task_work_run+0x10/0x10
[  306.863893][   T34]  ? __pfx___se_sys_close_range+0x10/0x10
[  306.866763][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.868560][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.870288][   T34]  exit_to_user_mode_loop+0xec/0x110
[  306.872141][   T34]  do_syscall_64+0x2bd/0x3b0
[  306.873801][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.876421][   T34]  ? exc_page_fault+0x9f/0xf0
[  306.878306][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.880549][   T34] RIP: 0033:0x7f702d98ebe9
[  306.882319][   T34] RSP: 002b:00007ffed037a9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  306.885728][   T34] RAX: 0000000000000000 RBX: 00000000000240e6 RCX: 00007f702d98ebe9
[  306.888835][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  306.891991][   T34] RBP: 00007f702dbb7da0 R08: 0000000000000001 R09: 0000001ed037acef
[  306.895104][   T34] R10: 0000001b31020000 R11: 0000000000000246 R12: 00007f702dbb5fac
[  306.898128][   T34] R13: 00007f702dbb5fa0 R14: ffffffffffffffff R15: 00007ffed037ab10
[  306.901317][   T34]  </TASK>
[  306.902574][   T34] INFO: task syz.2.1580:12274 blocked for more than 143 seconds.
[  306.905648][   T34]       Not tainted syzkaller #0
[  306.907960][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  306.911393][   T34] task:syz.2.1580      state:D stack:21896 pid:12274 tgid:12273 ppid:5854   task_flags:0x400140 flags:0x00004004
[  306.916076][   T34] Call Trace:
[  306.917393][   T34]  <TASK>
[  306.918571][   T34]  __schedule+0x1798/0x4cc0
[  306.920370][   T34]  ? __pfx___schedule+0x10/0x10
[  306.922351][   T34]  ? schedule+0x91/0x360
[  306.924083][   T34]  ? rcu_is_watching+0x15/0xb0
[  306.926148][   T34]  ? lock_release+0x4b/0x3e0
[  306.927969][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.930293][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.932810][   T34]  schedule+0x165/0x360
[  306.934523][   T34]  schedule_preempt_disabled+0x13/0x30
[  306.936826][   T34]  __mutex_lock+0x7e6/0x1350
[  306.938656][   T34]  ? __mutex_lock+0x5bb/0x1350
[  306.940604][   T34]  ? rfkill_register+0x37/0x8e0
[  306.942478][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  306.944457][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  306.946651][   T34]  ? device_initialize+0x24b/0x440
[  306.948677][   T34]  rfkill_register+0x37/0x8e0
[  306.950534][   T34]  nfc_register_device+0x14a/0x320
[  306.952560][   T34]  nci_register_device+0x87f/0x9d0
[  306.954547][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  306.957029][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  306.959182][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  306.961333][   T34]  virtual_ncidev_open+0x129/0x1a0
[  306.963346][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  306.965729][   T34]  misc_open+0x2bc/0x330
[  306.967477][   T34]  chrdev_open+0x4cc/0x5e0
[  306.969302][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  306.971212][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  306.973674][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  306.975836][   T34]  do_dentry_open+0x953/0x13f0
[  306.977772][   T34]  vfs_open+0x3b/0x340
[  306.979394][   T34]  ? path_openat+0x2ecd/0x3830
[  306.981309][   T34]  path_openat+0x2ee5/0x3830
[  306.983130][   T34]  ? arch_stack_walk+0xfc/0x150
[  306.985240][   T34]  ? stack_depot_save_flags+0x40/0x860
[  306.987354][   T34]  ? __pfx_path_openat+0x10/0x10
[  306.989423][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.992013][   T34]  do_filp_open+0x1fa/0x410
[  306.993863][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  306.996062][   T34]  ? _raw_spin_unlock+0x28/0x50
[  306.997937][   T34]  ? alloc_fd+0x64c/0x6c0
[  306.999644][   T34]  do_sys_openat2+0x121/0x1c0
[  307.001515][   T34]  ? __se_sys_futex+0x36f/0x400
[  307.003411][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  307.005521][   T34]  ? __pfx___se_sys_futex+0x10/0x10
[  307.007571][   T34]  __x64_sys_openat+0x138/0x170
[  307.009357][   T34]  do_syscall_64+0xfa/0x3b0
[  307.010733][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.012953][   T34]  ? exc_page_fault+0x9f/0xf0
[  307.015160][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.017471][   T34] RIP: 0033:0x7f95b3b8ebe9
[  307.019203][   T34] RSP: 002b:00007f95b4a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  307.022377][   T34] RAX: ffffffffffffffda RBX: 00007f95b3db5fa0 RCX: 00007f95b3b8ebe9
[  307.025206][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  307.027637][   T34] RBP: 00007f95b3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  307.030383][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.033358][   T34] R13: 00007f95b3db6038 R14: 00007f95b3db5fa0 R15: 00007ffdd54a5938
[  307.036687][   T34]  </TASK>
[  307.038006][   T34] INFO: task syz.1.1585:12294 blocked for more than 143 seconds.
[  307.040946][   T34]       Not tainted syzkaller #0
[  307.042808][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.046267][   T34] task:syz.1.1585      state:D stack:24792 pid:12294 tgid:12293 ppid:5843   task_flags:0x400140 flags:0x00004004
[  307.050764][   T34] Call Trace:
[  307.052146][   T34]  <TASK>
[  307.053300][   T34]  __schedule+0x1798/0x4cc0
[  307.055192][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.057062][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.059497][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.061325][   T34]  ? __pfx___schedule+0x10/0x10
[  307.063191][   T34]  ? schedule+0x91/0x360
[  307.065042][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.066874][   T34]  ? lock_release+0x4b/0x3e0
[  307.068655][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  307.070961][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.073370][   T34]  schedule+0x165/0x360
[  307.075076][   T34]  schedule_preempt_disabled+0x13/0x30
[  307.077160][   T34]  __mutex_lock+0x7e6/0x1350
[  307.078968][   T34]  ? __mutex_lock+0x5bb/0x1350
[  307.080787][   T34]  ? rfkill_register+0x37/0x8e0
[  307.082808][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  307.084986][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  307.086676][   T34]  ? nl80211_common_reg_change_event+0x55d/0x6b0
[  307.088947][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  307.090704][   T34]  ? __queue_delayed_work+0x242/0x2d0
[  307.092622][   T34]  rfkill_register+0x37/0x8e0
[  307.094313][   T34]  wiphy_register+0x214c/0x28d0
[  307.096249][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  307.097925][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  307.099750][   T34]  ieee80211_register_hw+0x3425/0x4080
[  307.101599][   T34]  ? ieee80211_register_hw+0x14a1/0x4080
[  307.103404][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  307.105537][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.107770][   T34]  ? __hrtimer_setup+0x187/0x210
[  307.109560][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  307.111561][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  307.113699][   T34]  ? __pfx__printk+0x10/0x10
[  307.115419][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  307.117245][   T34]  ? __nla_validate_parse+0x251c/0x2d40
[  307.119112][   T34]  ? __sock_sendmsg+0x21c/0x270
[  307.120854][   T34]  ? ____sys_sendmsg+0x505/0x830
[  307.122709][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  307.124578][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  307.126613][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  307.128263][   T34]  ? __nla_parse+0x40/0x60
[  307.129623][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  307.131703][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  307.133500][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  307.135391][   T34]  ? bpf_lsm_capable+0x9/0x20
[  307.136815][   T34]  ? security_capable+0x7e/0x2e0
[  307.138305][   T34]  genl_rcv_msg+0x60e/0x790
[  307.139660][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.141153][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  307.142820][   T34]  ? __netlink_lookup+0xbd/0x810
[  307.144322][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.145840][   T34]  netlink_rcv_skb+0x208/0x470
[  307.147283][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.148858][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.150608][   T34]  ? lock_release+0x4b/0x3e0
[  307.152274][   T34]  ? down_read+0x1ad/0x2e0
[  307.153770][   T34]  genl_rcv+0x28/0x40
[  307.155117][   T34]  netlink_unicast+0x82f/0x9e0
[  307.156603][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  307.158445][   T34]  ? netlink_sendmsg+0x642/0xb30
[  307.160237][   T34]  ? skb_put+0x11b/0x210
[  307.161709][   T34]  netlink_sendmsg+0x805/0xb30
[  307.163340][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.166314][   T34]  ? futex_unqueue+0x22/0x240
[  307.167948][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  307.169463][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.171245][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.173094][   T34]  __sock_sendmsg+0x21c/0x270
[  307.174808][   T34]  ____sys_sendmsg+0x505/0x830
[  307.176286][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.178190][   T34]  ? import_iovec+0x74/0xa0
[  307.179795][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  307.181600][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.183510][   T34]  ? futex_wait+0x285/0x360
[  307.185435][   T34]  ? __fget_files+0x2a/0x420
[  307.187026][   T34]  ? __fget_files+0x3a0/0x420
[  307.188554][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  307.190316][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.192195][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.193775][   T34]  do_syscall_64+0xfa/0x3b0
[  307.195544][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.197669][   T34]  ? exc_page_fault+0x9f/0xf0
[  307.199347][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.201523][   T34] RIP: 0033:0x7fc46358ebe9
[  307.203166][   T34] RSP: 002b:00007fc4644bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.206019][   T34] RAX: ffffffffffffffda RBX: 00007fc4637b5fa0 RCX: 00007fc46358ebe9
[  307.208415][   T34] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005
[  307.210790][   T34] RBP: 00007fc463611e19 R08: 0000000000000000 R09: 0000000000000000
[  307.213505][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.216044][   T34] R13: 00007fc4637b6038 R14: 00007fc4637b5fa0 R15: 00007ffc8f29d2b8
[  307.218511][   T34]  </TASK>
[  307.219506][   T34] INFO: task syz-executor:12297 blocked for more than 143 seconds.
[  307.222139][   T34]       Not tainted syzkaller #0
[  307.223835][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.227062][   T34] task:syz-executor    state:D stack:28168 pid:12297 tgid:12297 ppid:1      task_flags:0x400040 flags:0x00004000
[  307.230739][   T34] Call Trace:
[  307.231720][   T34]  <TASK>
[  307.232731][   T34]  __schedule+0x1798/0x4cc0
[  307.234282][   T34]  ? kasan_save_free_info+0x46/0x50
[  307.236161][   T34]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  307.238079][   T34]  ? vfs_open+0x3b/0x340
[  307.239449][   T34]  ? path_openat+0x2ee5/0x3830
[  307.241097][   T34]  ? do_sys_openat2+0x121/0x1c0
[  307.242637][   T34]  ? __x64_sys_openat+0x138/0x170
[  307.244233][   T34]  ? do_syscall_64+0xfa/0x3b0
[  307.245768][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.247637][   T34]  ? __pfx___schedule+0x10/0x10
[  307.249312][   T34]  ? schedule+0x91/0x360
[  307.250835][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.252308][   T34]  ? lock_release+0x4b/0x3e0
[  307.253775][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  307.255665][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.257562][   T34]  schedule+0x165/0x360
[  307.258947][   T34]  schedule_preempt_disabled+0x13/0x30
[  307.260606][   T34]  __mutex_lock+0x7e6/0x1350
[  307.262279][   T34]  ? __mutex_lock+0x5bb/0x1350
[  307.263967][   T34]  ? misc_open+0x51/0x330
[  307.265617][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  307.267371][   T34]  misc_open+0x51/0x330
[  307.268676][   T34]  chrdev_open+0x4cc/0x5e0
[  307.270169][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  307.271764][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  307.273692][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  307.275434][   T34]  do_dentry_open+0x953/0x13f0
[  307.276934][   T34]  vfs_open+0x3b/0x340
[  307.278249][   T34]  ? path_openat+0x2ecd/0x3830
[  307.279771][   T34]  path_openat+0x2ee5/0x3830
[  307.281574][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  307.283682][   T34]  ? rcu_is_watching+0x15/0xb0
[  307.285731][   T34]  ? count_memcg_event_mm+0x21/0x260
[  307.287770][   T34]  ? count_memcg_event_mm+0x21/0x260
[  307.289769][   T34]  ? lock_release+0x4b/0x3e0
[  307.291550][   T34]  ? __pfx_path_openat+0x10/0x10
[  307.293451][   T34]  ? __pfx___up_read+0x10/0x10
[  307.295599][   T34]  ? lock_release+0x4b/0x3e0
[  307.297411][   T34]  do_filp_open+0x1fa/0x410
[  307.299133][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  307.301036][   T34]  ? _raw_spin_unlock+0x28/0x50
[  307.302933][   T34]  ? alloc_fd+0x64c/0x6c0
[  307.304892][   T34]  do_sys_openat2+0x121/0x1c0
[  307.306699][   T34]  ? lock_release+0x4b/0x3e0
[  307.308497][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  307.310482][   T34]  ? fd_install+0x97/0x540
[  307.312176][   T34]  ? fd_install+0x30d/0x540
[  307.313934][   T34]  __x64_sys_openat+0x138/0x170
[  307.315569][   T34]  do_syscall_64+0xfa/0x3b0
[  307.316992][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.319167][   T34]  ? exc_page_fault+0x9f/0xf0
[  307.321006][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.323327][   T34] RIP: 0033:0x7f285838d4d1
[  307.325090][   T34] RSP: 002b:00007ffc11658b80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  307.328190][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f285838d4d1
[  307.331123][   T34] RDX: 0000000000000002 RSI: 00007f2858412822 RDI: 00000000ffffff9c
[  307.334054][   T34] RBP: 00007f2858412822 R08: 0000000000000000 R09: 00007f28590ed6c0
[  307.337104][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  307.340058][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  307.343035][   T34]  </TASK>
[  307.344256][   T34] INFO: lockdep is turned off.
[  307.346154][   T34] NMI backtrace for cpu 0
[  307.346166][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  307.346188][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.346197][   T34] Call Trace:
[  307.346203][   T34]  <TASK>
[  307.346209][   T34]  dump_stack_lvl+0x189/0x250
[  307.346229][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.346244][   T34]  ? __pfx__printk+0x10/0x10
[  307.346264][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  307.346281][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  307.346297][   T34]  ? __pfx__printk+0x10/0x10
[  307.346315][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  307.346337][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  307.346353][   T34]  watchdog+0xf93/0xfe0
[  307.346374][   T34]  ? watchdog+0x1de/0xfe0
[  307.346394][   T34]  kthread+0x711/0x8a0
[  307.346411][   T34]  ? __pfx_watchdog+0x10/0x10
[  307.346428][   T34]  ? __pfx_kthread+0x10/0x10
[  307.346442][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.346458][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.346474][   T34]  ? __pfx_kthread+0x10/0x10
[  307.346490][   T34]  ret_from_fork+0x3fc/0x770
[  307.346503][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  307.346516][   T34]  ? __switch_to_asm+0x39/0x70
[  307.346530][   T34]  ? __switch_to_asm+0x33/0x70
[  307.346543][   T34]  ? __pfx_kthread+0x10/0x10
[  307.346557][   T34]  ret_from_fork_asm+0x1a/0x30
[  307.346578][   T34]  </TASK>
[  307.346583][   T34] Sending NMI from CPU 0 to CPUs 1:
[  307.401684][    C1] NMI backtrace for cpu 1
[  307.401709][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  307.401723][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.401732][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  307.401759][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  307.401771][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  307.401786][    C1] RAX: 60d25ca21b193600 RBX: ffffffff819683b8 RCX: 60d25ca21b193600
[  307.401796][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  307.401804][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  307.401813][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38330
[  307.401822][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  307.401831][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  307.401840][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  307.401848][    C1] CR2: 0000560dd3030e68 CR3: 000000000df36000 CR4: 00000000000006f0
[  307.401912][    C1] Call Trace:
[  307.401924][    C1]  <TASK>
[  307.401932][    C1]  default_idle+0x13/0x20
[  307.401948][    C1]  default_idle_call+0x74/0xb0
[  307.401965][    C1]  do_idle+0x1e8/0x510
[  307.401982][    C1]  ? __pfx_do_idle+0x10/0x10
[  307.402003][    C1]  cpu_startup_entry+0x44/0x60
[  307.402016][    C1]  start_secondary+0x101/0x110
[  307.402045][    C1]  common_startup_64+0x13e/0x147
[  307.402070][    C1]  </TASK>
[  307.402600][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  307.462876][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  307.465915][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.469551][   T34] Call Trace:
[  307.470759][   T34]  <TASK>
[  307.471745][   T34]  dump_stack_lvl+0x99/0x250
[  307.473196][   T34]  ? __asan_memcpy+0x40/0x70
[  307.474618][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.476251][   T34]  ? __pfx__printk+0x10/0x10
[  307.477834][   T34]  vpanic+0x281/0x750
[  307.479109][   T34]  ? __pfx_vpanic+0x10/0x10
[  307.480652][   T34]  ? preempt_schedule+0xae/0xc0
[  307.482481][   T34]  ? preempt_schedule_common+0x83/0xd0
[  307.484262][   T34]  panic+0xb9/0xc0
[  307.485684][   T34]  ? __pfx_panic+0x10/0x10
[  307.487073][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  307.488876][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  307.490958][   T34]  watchdog+0xfd2/0xfe0
[  307.492203][   T34]  ? watchdog+0x1de/0xfe0
[  307.493607][   T34]  kthread+0x711/0x8a0
[  307.495188][   T34]  ? __pfx_watchdog+0x10/0x10
[  307.496979][   T34]  ? __pfx_kthread+0x10/0x10
[  307.498805][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.500932][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.502976][   T34]  ? __pfx_kthread+0x10/0x10
[  307.504777][   T34]  ret_from_fork+0x3fc/0x770
[  307.506372][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  307.508266][   T34]  ? __switch_to_asm+0x39/0x70
[  307.510031][   T34]  ? __switch_to_asm+0x33/0x70
[  307.511806][   T34]  ? __pfx_kthread+0x10/0x10
[  307.513616][   T34]  ret_from_fork_asm+0x1a/0x30
[  307.515474][   T34]  </TASK>
[  307.517469][   T34] Kernel Offset: disabled
[  307.519229][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:22:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8880200d0237 R9 =1ffff1100401a046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8dd R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe3624a708 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fb3e7387d20
XMM02=0000000500000007 b603001000000001 XMM03=034601e080808400 4cbc030804004cb8
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=06060168d6000800 01e0030000000007 XMM07=030fffff00000000 0401c00302100001
XMM08=b003401000100302 10b8808400000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44ceb RBX=1ffff11009608341 RCX=ffff8880238c1cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000307f700 RSP=ffffc9000307f578
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfab67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb3e7ee7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fb3e73876c3 00007fb3e73876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=06060168d6000800 01e0030000000007 XMM07=030fffff00000000 0401c00302100001
XMM08=b003401000100302 10b8808400000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
