last executing test programs:

3m0.60151788s ago: executing program 0 (id=920):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) (async, rerun: 64)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0) (rerun: 64)
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00')
syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
unshare(0x2060200) (rerun: 64)
getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249686a289cdcc06d3d3dc082d8db8c4621a113177518601e882f2c04", 0x54}], 0x3) (async)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async, rerun: 64)
unshare(0x22020600) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 64)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
close(r6) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r8, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) (async, rerun: 64)
ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) (async, rerun: 64)
setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)

3m0.358980931s ago: executing program 0 (id=923):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x0, &(0x7f0000000080)}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

3m0.280967859s ago: executing program 0 (id=925):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20000055}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000229bd7000fddbdf252e0000000c00990004000000400000000400af0008004200000000000400930007003400e19d1e9291c62e97abc394689f5586001e001f00800016020000000000000000000900140000000004090000000800001000b000170000006904ff00ff070180"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xf6359d47305fe6d8)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x25, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe0"]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x4000040}, 0x300)
sendmmsg$inet6(r1, &(0x7f0000002980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x7ff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="cd56a29e88ae991996c7820b022834a681dbabd667f730f5b9a88f0bf47645e343e59847432e05ef6809961e5cfe05c3682ea556eb95b06a40f640621a2d91dcc7e68374222c109411", 0x49}, {&(0x7f0000000200)="63ffcd86b3a7d7413b30ce26682c7853a118e7c8e89ee67802de6026c7485a83fa8319ae8daf9205b93eb53b1abfaf76f3acf78c69d7b4caede667f2a5810f9ad3638f62684fb8ba93686af56264e50bcd9260d7e744584dfe39dd3976204276a9ceced763cd5bb1b0a36cedaf642c995a50f04317fbd9459aa9285a753707317e64b186c8e716037eaeb2c03aa4c2ccbd81c0e16a28d6b34d69b5c66f16129917c064b601d40239dcf4f1bbbc7a605c596042997f59e13b7975b2d18ae1", 0xbe}, {&(0x7f00000002c0)="f57d043b14eb3d20b97744498eeb0c3c6c9617976631f514c0492e88c5eb5777d5e4b7097345f360077d8b5676d8db2e00dfdc4d49e425d6a86a988a1942", 0x3e}, {&(0x7f0000000300)="b056002d307cfbe3eeaaca77627f10431d29a9702df81cb9e1bda49ccf9d4eb7ecbd221731c1b27c43138fb9878204963ecf7b63402bdf99e7e2a2929de933c1269426e7c7f3b52ec9a2210c7bee98412942b59c570f60249800d9307d4a248209b914d85b9c943c0fc2bd42c5b35ee9ad8254c60601ff178c1a0f1344a80ac130442e4c1a2b66c4c39530176f78b98d0096a7dc092cf15076c3b638976963171248551b6bc06b5a1e7504418a473ec7a2b6a0f0ccd27d7870ef171b5dca22777fe20afc79f24e6412ede82a7f86e20aeb4c72cc3362589138cac16a0026ec6a5fb6", 0xe2}, {&(0x7f0000000400)="423ba58f2d6b461d2c98b612e40b3b6bd246498e0c633ba90e6efa31f22a3df5aaf62edd594fed81c85ac72b7daca3ccb82b94fd85724d8364a744e99e05554695f04cae9a6534a7c313939b2fa3bb5e74f0b76cab1c", 0x56}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000000de00002900000008000000800000000000000040000059f2904c0029000000360001003b04000000000200c910fc00000000000000001e000000000000c91000"/88], 0x58}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000780)="1cd6cb9ac71b9f1bab2658cc0f718d532a4cdb220b90714d1785fa4c20ecef9cfbeed2d64fca6d088abd04dbbe08f18f939bca567547139e7212ab592697f539", 0x40}, {&(0x7f00000007c0)="f97a967481e4d6cc36da70d876912f4a84048ba5063e6ef7c02d5c2008a6e768e7057e03d2e949fda6090b51d75cf9161dc38ff3cc89fda0940304743298ecbf794b57e9e4f80fa8d85f0cef9f9468158beb2a38903cb5c20288cf08ab06ed99d5baf4a1e5499296ffca657040cec61efd8fb30d0484e1f3bf37261c66e58eba7bee939eadc5fec7d33297e992bac99ecaa8243d33c5fa3a7daa6d9ab01483452a30f357f75b798500e567e77d7e7d24d4abdb57e00ebbf4080a7aa7", 0xbc}, {&(0x7f0000000880)="6f0015", 0x3}], 0x3}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001a40), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"], 0x118}}, {{&(0x7f0000001bc0)={0xa, 0x4e23, 0x6, @private0, 0xe0d}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="5fc935659040d11ece2070b33dae41a8271ae1b8b9207bc9d13ea80841a8f4e1ace56b8f4c1fb47e10c376f4ed8eead3bdc17c73964c6e65b9f8934e4b6b7cb6a2d8e3076c1cd9a6c7b4825dfa7b7c0d3135331b21b7b75d7a5988dae3d138fccdd85ca90d5ebdb0b8", 0x69}, {&(0x7f0000001c80)="2ae2cace52f1e8482e8f57569f02991dd6fcaf8c0f53219b72a58b8c7307c2e304dd5ca0d3b937", 0x27}], 0x2, &(0x7f0000001d00)}}, {{&(0x7f0000001ec0)={0xa, 0x4e23, 0xb, @private0, 0x9}, 0xffffffc8, &(0x7f0000002080)=[{&(0x7f0000001f00)="a42f93767b3b9970f25322dc94e54b4116de78f703f81717a1d0d93fb2cd9217bd43fe9af80e22e77d70885ff8f54c8c1d319030f6ead00aa58484c5ac59ee63df1baf07b3f4c68b8be734228c9d2de270fcd318eb3f0cee1e92c8caec0c26918b19f31dee79a588", 0x68}, {&(0x7f0000001f80)="9ac68b18e013daa65dae0de5dda36e0e7e3b1479c7e0f69dc3dc6b6ac449a4b375c46209782c81ce86b88040f36817fcf3bb7bde3ebc3ebb5f3617e3cbac19e439070832ebbd2bade28684ae3ab6dfacf8e1378f7ee58073c49633ee2cb15c53f2750947310d61b70b68ec69368eb217a24a6d811887921b1faaaf124b3b5a080cce31bae1e36e78b6a1f54647682ca2820a86b09fb06a64ccf590df6fea9a29f1c8663df609f3fd77e6b1c27d5a30ac086130fa4d1591faf2ddccfe49257dd064ff0c738ceceea601601224f4098d55036e2411edc5394aacd1229b4a4ca277615b305c481e4002458ee15d5d5f4386fcaffe95c6", 0xf5}], 0x2, &(0x7f0000000b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x0, 0x0, [@mcast2, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x68, 0x27, '\x00', [@pad1, @generic={0x3, 0xeb, "3c3a832455661b508e7b8f62c6d4f7cd79687fa61045da95e3b2ec78c57c8d2eb83cb649028d0ac3c27f109ed05b5bdb2744203808fe1c1872b480fec469573cae86184140ef4f35dd54b043f0a6286c218903404f8302a5ff575394f33fbeb15b8d0b5d626a9fa8fba632d51597e22608d7751c8a4a8598e5b15f93f3164cacc35884177fbf6ff9b57ec17b6f2146c1b6bb7711f09a0eee55b3c042166e22d776fb5a0497e550e015a8f3e31d186b7da79e303ebc9ac36190861d92e75488f50dd1f69f83726c78dcf5ac242660c17b3d6a6ec5a97ff1eaa4fb48df883aa4c3ea0043367c3d1e9e67b208"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x8, {0x0, 0x0, 0x80, 0xa1}}, @generic={0x20, 0x3b, "d62e7525a0b10b8fd477889a4d1b08743e73fc3b972403114656ea9cf7582845586f6223f2bdbc37fa4534c019384ddf79ae02da7d0bc83e3b56b2"}]}}}], 0x1c8}}, {{&(0x7f0000002180)={0xa, 0x4e21, 0x12e, @loopback, 0x10001}, 0x1c, &(0x7f0000002380)=[{&(0x7f00000021c0)="5b22f3358dc681d9fc6e91c9b4f747e1c0ed760f87b2b77c5249baeca7f373de9af3729857c760cdfb2e930cf0b2745137323e091682a67cdfde9b2787e66093a5969bd5c00cb629877762790ae20ddfc4f7ab6e66d6e77972ec4e34b0594d2a78e400a8dd55500e5abea31e619a6757f0a51365609dca914f57ac3209be184ab232acc897916f5ed9dde5090290ea825483bff2ccbf546e5f1603283fe5974cba2f", 0xa2}, {&(0x7f0000002280)="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", 0xfa}], 0x2, &(0x7f0000002500)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x21, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x75, "3e2ed3ebef52da2b55c2b7572f7ea255a2f475299d2f43a5ab805c8b814bdc49553c9f5b8fd5f26e44b525fd5093fba561ce875e49e95c32243c3b62b97edab565106617097b4722e661672ac4dfc1bee910630cd3ac81d473404cf0cffd67cdf1dcd9c4ff600a5b748309df733d6451b65bd118a7"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe7}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0xe0}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x5, @empty, 0x10}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002640)="2181ed494d3a418e25afa433f300c4dc916ebac9c35be6fc2c17489d800b439b50d3e660925e8c619b2127ab5cb5c7a551ef8a21b3235a3bbcb12b162eb36272fce5511f57013a50b01f47dc4576cc245b81214a0638d307054bcdf770f97cedf23b3268a4f7fe32791bb5abc56411d0a0aa52e181e1b1ae14924f12b61eb8a993c3f7d50b242462311413b9718e91ac19f25ff21aa72e2e81543b0eef148db0a777334f08e9dedb2cc97cda7b97546eec7d274b1caa665a54161ba47e9b25625f45f3a9394bbc7c1c2b3a3c4f142ac2b568341caf34fba6e464cb24c842bf19fbaefeda8b6140071ce000da2ff7893c079b400008", 0xf5}], 0x1, &(0x7f0000000940)}}], 0x7, 0x40020)

2m59.912693243s ago: executing program 0 (id=931):
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x20008004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001ef92cda8c4d2714fc236409f90dbb9570e2315a87fb1ce8e448ff2e125c550b3c99d63e7fb8c7cfb195dd4dafd808d6a454aa3566046afe5e1ffae0a423ce6a00", @ANYRES16=r1, @ANYBLOB="010028bd7000000000001400000008000d007b000000"], 0x1c}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x2e)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r5)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001200010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4)
syz_emit_ethernet(0x583, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r8, @ANYBLOB="7ebb0c278bb79af7dc8a51b751baacd5"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0100000000000000000006000009080004006401010008000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x20000090)
sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r2, 0x1)
r9 = socket(0x18, 0x2, 0x101)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)

2m59.759764417s ago: executing program 0 (id=932):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) (async)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500990009000000460000000a001800036a030303030000000000e400000000000000000000e0675aa2801d9a3e90"], 0x2c}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5b12f500c7a701d9d8f39ec2b5c897e329a7fabb3419acb051610000", @ANYRES16=r3, @ANYBLOB="050028bd700000000000060000000a0018000303030303030000080005000c000000"], 0x28}}, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) (async)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="90e8d915b8e86ef5badc230079d47df211030000000410000004fa4b899cbd797bb30000002bcf791afc787c8ede4b1180f07e69faabf7", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="040000000300"/28], 0x50)
close(r9) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000300)={0x6, &(0x7f0000000240)=[{0x7fff, 0x80, 0x9, 0x80}, {0x6, 0x7, 0xa, 0x1}, {0x9, 0x4, 0x0, 0x10}, {0x5, 0x10, 0x8, 0x9}, {0xb72, 0x3, 0x1, 0x10}, {0x79a, 0x5, 0xc6}]}) (async)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

2m58.882320523s ago: executing program 0 (id=934):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c6fcffff2d00090027bd700002008acd35c86ae480d91e00001900000004001800fe8800000000000000002e989e9238172e927d664302"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2m43.914830006s ago: executing program 32 (id=934):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='FROZEN\x00', 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c6fcffff2d00090027bd700002008acd35c86ae480d91e00001900000004001800fe8800000000000000002e989e9238172e927d664302"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.940695203s ago: executing program 2 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x0, 0x5}}]}, 0x2c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x0, 0x5}}]}, 0x2c}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)

1.710524463s ago: executing program 2 (id=3091):
r0 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) (async)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4000)
r3 = socket$igmp(0x2, 0x3, 0x2) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x34, 0x29, 0x0, 0xfffff00d}]}, 0x10) (async)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)

1.638793012s ago: executing program 2 (id=3093):
r0 = socket$netlink(0x10, 0x3, 0xa)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x168)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004043) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x10000001, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xfffffdec, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6000}}]}}]}, 0x3c}}, 0x4000010) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000a2e3255814574b24ea5a3b683237abf583d1f1136429d014e58319174d570f05bfd6b97150b1672aff0fc8b254953d3217e4a51b710e42767647f55c26cf90ad0324cb4b0da2f48f509458ba466553ac974079d3070c49a3761d88d3da276e4aa5fee625a5faab471e10ce30ee7cf1feafbd216d692b024689a4c65b"], 0x48) (async)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000002d00010026bd7000fcdbdf25040000000c000c00010023fe456aff29cb4d00000100000008005900", @ANYRES32, @ANYBLOB="0e00b8007b2a1a5b2d7d485b2f000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

1.529118834s ago: executing program 2 (id=3095):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0))
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24044811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtaction={0x148, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x134, 0x1, [@m_ct={0x130, 0xe, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK={0x8, 0x5, 0x4cc4}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x9, 0x3, 0x1, 0x7}}, @TCA_CT_MARK_MASK={0x8}]}, {0xd7, 0x6, "254b69646a0098ad31c86630c3250f3f555cca9bd7629377a12c6982f8bce9a64294a466c8750712648c45f3e92cd6099b5ddd898ed29c2b1f88f432ce57a516c37fdf8c195f81883828b11fce2948362efef8f044d19e9ff7858ba3c211f5d8bbad47de6e52fba801e71a8c3e8f2a81567cf54cdcc45b14d247c5420c622b1d560ae916147bc86a076bd174a74f5076e24d124d99f52da8e022da5d587f2fe2b0ee9d4cb8656a394dbe67fae6ee13bba270cd7a119a4f878b498b100f06f797e11d318e8ed5c9167ab3f2572ff1231cf3f75f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f0000000340), 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0xff80)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100000000020000000000000", @ANYRES32, @ANYBLOB="37a32616afaa08c882dfe645d1d1d5974cde7f1e4d441d73801994dc43e5b53222e79f92d7ca5134d998f27ba6495d01d0ea07645d9a0784d3014ce263edf81401c50e1797f9263e73e9ad", @ANYRES64=0x0], 0x20)
r7 = socket$netlink(0x10, 0x3, 0xf)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
sendfile(r7, r8, 0x0, 0xf03a0005)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

1.436286653s ago: executing program 2 (id=3097):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'hsr0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010003704002e2e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="2800090000000000000000000000000000000000e7cd240d0b7efe30977190e1b83eaf2b18cfdcb269d88f8b17a54efb57aab72205003f3645880532c2e175386b5b1c2f9320b16b7681d9a75b4564be148fc18d3dffbb3f95ef2bf78e123232a2916f32e1957278890d52b5efa1fd609032aac3f6c384e054769b99541ef6892ae00e6e3616e26b851797bc21d7f19ce2a8e54a3354807a86d9c3e7b72beb45e1daee95ab937d1a8e78c5e1bb6ffa269fb0fd68b7caf013681d1caf70f51d", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0)
recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

1.435693588s ago: executing program 3 (id=3098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r12, 0x8004f50c, &(0x7f0000000240))
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @mcast1, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1\x00', <r15=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.280059191s ago: executing program 1 (id=3100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x0, 0xe, 0xa, 0x905, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @fwd={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x0, 0x1, 0x1, 0x0, 0x14}]}}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @immediate={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @xfrm={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x0, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY]}}}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "ae76a634fad3b579377b0ecd6857ac80a274c007072d03d8f86995f08e3b97b48ee17eb91fdc9da709db29fec2d315747fd53c97feafd0624d4fef3efe493ebec704e527da65248ce14f5ecd937ce8f8f6b2d793cac72ce10a94bc16f7fbbe7304ba8d56915db5bb6024f2887b78af3958d59719c48a89a6d824338981b6a55f53996f5540bcdce14208923a746c63af5bb16b6ad079dd975353352e527f297065327e01a4a6414df0eabce73838ea94ebfd1ebaf195e402138131c368cad515313a4f976f2c994978146221131a76ea519faed77e5ae7465b8e7f29e618317463e73d574d28914dfb68cb2b8d2665"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup={{}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "db671fe7e76d431bb2a0172d76a09abb17f92d2166250a05d223620050d268d94112d29ef2f6dc801f3ecbccdabf9671309f45dead8bad0a8a4b325c1be324b585429d4342dffb9e2bf5785cbbcd57bb85df24ad25651834bb786ae0f2c8d5314a5cc27d6af5afa30d856a84fb14c9d58571d591fc645c3ae3074ce86591795a8c8034b24615d420db6525"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x0, 0x1, "2db6359e3f28c702713b8b008eda754217b0bf3c20c13d3a7b7eacb3a6320743884922231e599ea5fcf76d00d7baa6270a7ab3565be779ddffa1953e4812f8218091ba3e3e6526"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE]}, @NFTA_DATA_VALUE={0x0, 0x1, "00ec36fbbd42a5ee2d0eb26cf17b19010445cdb5f31916558eb9aef3199c01b5acf2da2b49ed2a4820d9a60c1e5a97a8d7639ae7dace29ddfef53f3a8250224079a79edc16c1edea7f8a9ff34ef346a4a4b6137139efbbaa106707708893102a0519f117f21020b9fc4f9894eea7a29f41f650d9f2343d29b5aa2b17aeb26795f9eaf37956609581e81b830358dbe8b5b0cd01d9fbbb69d4fa36d438d0b02c21922ef2f31e51fff2ca5a9ff8439ee9cb1541359fd89224e66ce8cd94a78eb7fed124486e66dd3734d6bedc2b406beff3915b6a05faf61a00d274e926f1739d468029b016dcee"}]}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x7}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "8ac24dc6a98d777a46c37bf2f4eb04022f8dd2176cbf32347c6e244bebcfe2ebcc2844f990012e15589cc959e53b2c832ae3165260226aa94649f83928a3242bab75d9c279ea43eae329dca59c632d963b5e306eb583df1f34c025df22c3ed99b02a94a7edafcf02105f17cacbc6e106ca4cea498f1c7d4197e6183a46354b363be656ec178e021199eb912caee4d145fa4ab0b3078a6701f3d61fba7b302d93400e61b45ab693803bebe164e9674d07fb1e0996e57650c3a64377cb14496723e1093713ced040115eca6f966f132274c75419f95e9e6990ee0787e8830c"}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "92527fca8f9d04c3552575e042f7329f9939e56e36fefe2ace5dc93db5c3"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @byteorder={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0xd1}, @NFTA_BYTEORDER_SREG, @NFTA_BYTEORDER_SREG={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0x39}]}}}, {0x0, 0x1, 0x0, 0x1, @nat={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x0, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x0, 0x7, 0x1, 0x0, 0x70}, @NFTA_NAT_FLAGS={0x0, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_TYPE={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x0, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @match={{}, @void}}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "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"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "80f0190fb770d9fd3ed56cf97e58415f096733adfc448c7a7e1f3d395dc7e55457c8e68a03ea860dc176908bc93edc502440e21cf08bc36ba07e4f17ce69b2331a57f37fc2eca598189d310c3e86005e437a710e9e19fbe835bcfacac8601546d91b283203d007516f9ebb813d2192860b1b7eeb5837169e2b918d2de6a10358381249819bd57e7c556a3e12ae7f1cf60339fc898f01d55b172ef62a8f6cfa805b054ba692bb4b090a886bffecbff83749d74fb05c"}, @NFTA_DATA_VALUE={0x0, 0x1, "228ab7e25a43495068c7cc8ed4ed6322fb19b7affaa6"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @immediate={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "241c444f"}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "7b85b19dd330000b309c1a54e956a9457af4ee2700e797890e697a0ea7ff9da5bf22b4729ccfccb0792316e89f47ffbddc369c964018e2277903ed6af2c4f8909da9d37ffacffb351eeb47af554924b661093c39974256a74467afa690026abc1be916a6775ecb7e7c4c836a3d434a9cdafc1877204eb223aba7f04335931484d0f0cf86da2be8486c02fb33ef527880ad"}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @payload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x13}]}}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @match={{}, @void}}]}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "6685188f06798b4ff24c065f611cd49d93d94c96f22bf8e6953487a161abcc3ad04433cb77252779a5fef43d7a487eecbd8d8c66a6b726bf303c0fbc80b8e531c91abd9cf483935435171ce8532780f25a650ae8c6d3ea246822bc4f01c5e7e0379f2acec0a25ed5929c9fc545bb93f7e9018b1affaf7115ff182102e793ad89af887c356d2387afac3aa8c59f4cc20bae605dca07353133eefebe473cfadae480998990f41c492778b15191248aeeb350d6bed6ca8488c3d161b85e443e24a00bc11ed6f0a50e81"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "736878dda2639f72afdc25edf018c12cc111c8e21508feba9db382fc770b02de19c6de1bc18276a5a5aa0b62d525c62ab5572c6d3e0dab46c5e261521a9e7428eacb5fea381600c04ae6508ac04b1fbc4d504b00b399a59a8997dd5fb482e05799026b4f1e36ae139060b03ceebcd320d24bc48d"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000021401002bbd7000ffdbdf25080021"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x400c040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100020000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xe8}, 0x8)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x8d, "12d3a0ff16d4b2908d4842ea38b0dad99803a31c4f522232ce8aa81c5f2d31b8a0d2a23b7e94de1005b3945761e8fea2ec385a466732131d14f47ff6af776cc55fdf4d9a98bc061a180ac53591590f99eedc64288e5d0e9b616b96a6cdbf44806ae5cd7f908e81c3e34be563fadbdd88a01c95258406f21ad28b9ddba7c62a0944f883b143ac56bd04345ff4b7"}, &(0x7f0000000040)=0xb1)

1.180189701s ago: executing program 1 (id=3101):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r5 = socket(0x2b, 0x80801, 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r7, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448c9, 0x0)
sendmmsg$inet(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

1.069806111s ago: executing program 3 (id=3102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000020000000000000000f000000184b0000feffffff000000000000000095000000000000df"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000c80)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x640100fd, 0x1}, @phonet={0x23, 0x1, 0x8, 0x2}, @generic={0x2a, "85424c9251b9f4e60a7f4f9739ca"}, 0x800, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x80000000, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r8, &(0x7f00000002c0), 0x0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x3, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=@newtfilter={0x854, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x828, 0x2, [@TCA_FW_POLICE={0x824, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xea0, 0x9, 0x7, 0x80, 0x2, 0xc, 0x1, 0x8, 0x5, 0x7, 0xdfe5b600, 0x100, 0x7df, 0x8, 0x2, 0x4, 0xfff, 0xae7, 0xfffff00b, 0x4, 0xd4, 0x3f, 0xd9a, 0x0, 0xff, 0x3, 0x0, 0x101, 0x70, 0x3, 0x8, 0x6, 0x0, 0x7, 0x400, 0x4, 0x7, 0x9, 0xfffffeff, 0x5, 0x7, 0x5, 0xb, 0x8, 0x400, 0x52b875a0, 0xff, 0x3, 0x80000009, 0x6070f50d, 0x10001, 0xd, 0x6dfd, 0x9, 0x4, 0x9, 0xd8, 0x9, 0x8000, 0xd, 0x3, 0x2, 0x2, 0xf, 0x8, 0x10000, 0x1000, 0x7, 0x9, 0x4, 0x1, 0x80000001, 0x6, 0x5, 0x2, 0x89, 0x6, 0x9, 0x3, 0x6, 0x3, 0xffffffc0, 0x6, 0x47, 0xb, 0x9, 0x7fffffff, 0xfffffff9, 0x2, 0x199da062, 0x6, 0x8000, 0x0, 0x5, 0x4, 0x8, 0x8, 0x2, 0x7, 0x8, 0xd, 0x2, 0x9, 0x1, 0x5, 0x3, 0x56, 0xff, 0x964, 0x2b5e, 0x2, 0x2, 0x1000, 0x7, 0x85, 0x3, 0x5, 0xa, 0x80, 0x80, 0x7f, 0x3, 0x9, 0x5, 0x0, 0x6, 0xeb, 0x0, 0x10001, 0x6, 0x1, 0x4e, 0x5, 0x5, 0x3917cc9e, 0x5, 0x91d, 0x10000000, 0x4, 0x6, 0xd, 0x200, 0x2, 0x6, 0xa, 0x8, 0x8001, 0x126, 0x0, 0x1ff, 0x8, 0x0, 0x8, 0xc, 0x31f6, 0x3a9, 0x9, 0x4, 0x7, 0x2, 0x9, 0x6, 0x2874471, 0x1, 0x9, 0x8, 0x0, 0x5a, 0x80, 0x1000, 0x9, 0xc00, 0x3, 0x4, 0x1, 0x4, 0xfff, 0x7, 0x8, 0x680, 0x7, 0x2, 0x4, 0x6, 0x3, 0xfff, 0x0, 0xe, 0x8, 0x679, 0x9, 0x6, 0xb, 0x2, 0x6, 0x80000000, 0x401, 0x0, 0x993f, 0xffff, 0x7, 0xa6b, 0xda63e9d2, 0x101, 0x6, 0x5, 0x6, 0x4, 0x1, 0xf9, 0x401, 0x10, 0x2, 0x8000, 0x1, 0x2f, 0x9, 0x4, 0x6, 0x157, 0xe, 0x8, 0x3741, 0x3, 0x3f, 0xffffff6d, 0x4, 0xf, 0x5d, 0x0, 0x1, 0x9, 0x101, 0x7, 0x4, 0xfffffff7, 0x8, 0x4, 0x25dd, 0x2, 0x3, 0x81, 0xb5, 0xd1b, 0x0, 0x4, 0x9, 0x5f, 0x8741, 0x4, 0x8, 0x6, 0x4, 0xc, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x9, 0x27e, 0x2, 0x7, 0x7, 0xc, 0x8001, 0x3ff, 0x8, 0xc, 0x9, 0x3, 0xe, 0x3d, 0x7, 0xdb, 0x9, 0xfbb, 0x3, 0x8, 0x3, 0x80, 0xb, 0x1, 0x6, 0xd84, 0x4, 0x7fffffff, 0x3, 0xffffffff, 0xcbec, 0x0, 0x8, 0x357a605c, 0x401, 0xf33, 0x87e4, 0xd, 0x8, 0x8, 0x1ff, 0x3ff, 0x3, 0x100, 0x9, 0xcb9c, 0x2, 0x10001, 0x2fd, 0x0, 0x1d4d, 0x4, 0xb, 0x7, 0x6, 0x3, 0x8, 0x0, 0x1, 0x400, 0x2, 0x2, 0x7fffffff, 0x7, 0xff, 0x9, 0x2, 0xe7, 0x31ee, 0x2, 0x1, 0xff, 0x8, 0x80, 0x9, 0x3ff, 0x3, 0xced1, 0x6, 0x6, 0x5, 0x1, 0x81, 0x7f, 0x100, 0x1, 0x6, 0x10001, 0x0, 0x7, 0xdaae, 0x6, 0x9, 0x80000001, 0x4, 0x2, 0x7, 0x400, 0xffffffff, 0x1000, 0x7, 0x8a6, 0x10001, 0x800, 0x800, 0xea0, 0x1, 0x6865, 0x800, 0x6, 0x81, 0x100, 0xf, 0x1, 0x3, 0x5, 0x6, 0x0, 0x697, 0x7fff, 0x0, 0x82b, 0xc000, 0x10, 0x2, 0x0, 0x74, 0x0, 0x9be, 0x7fff, 0xffffffff, 0x81, 0xfffffff7, 0x8, 0x5a47, 0x7fff, 0x8, 0x40, 0x0, 0x2, 0x7fff, 0x1, 0x82000001, 0x0, 0x100, 0xf, 0x1, 0x4, 0x6283170c, 0x3, 0xfffffffc, 0xe, 0x81c, 0x2, 0x5, 0x6, 0xaa5b, 0x5, 0x6, 0x6, 0x1, 0x5, 0x800, 0x401, 0x7fff, 0x4, 0x1000, 0x5, 0x6, 0x10, 0x596, 0x552e, 0x1, 0x9, 0xfffff001, 0x1, 0xffffff56, 0x0, 0x101, 0x8, 0xf76, 0x9, 0xa, 0x6, 0x1000, 0xfffffffc, 0x4, 0xa10, 0x1, 0x4, 0x401, 0x1, 0x0, 0x0, 0x8, 0x6, 0x81, 0x1, 0x1, 0x5, 0x3932, 0x6, 0x6, 0xe72, 0x4, 0x81, 0x0, 0x9, 0xfffffff7, 0x2, 0x76, 0x565, 0x5, 0x88, 0x80000000, 0x10001, 0x1, 0x101, 0x8, 0xc5, 0x4, 0x5, 0x2, 0x9, 0xb, 0xe4b, 0x0, 0x8, 0x8, 0x8, 0xb30, 0x4, 0x3, 0x4, 0x799, 0xe2, 0x621, 0x1ffe00, 0xb1b93f5, 0x4, 0x5, 0xc5c, 0xcdf7, 0x4, 0x7, 0x0, 0x10000, 0x4, 0xcfa, 0xffff4155, 0x9, 0xa, 0x9, 0xf25d]}]}]}}]}, 0x854}}, 0x4000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001180)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'batadv_slave_1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x4, 0x2, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x66, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x6a, 0x1, 0x5, [{@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010101, 0x7}, {@multicast2, 0x1a}, {@multicast2, 0x3e}, {@empty, 0x6}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x0, 0xf, "8920fc8f3192f2d6cde341c538"}, {0x0, 0xa, "1b61a305c5edd802"}, {0x1, 0x7, "9db685d373"}, {0x6, 0x7, "275d41cd67"}, {0x2, 0x9, "b357e1f329db08"}, {0x7, 0xe, "e8a14ce1db01cd374ab8d01c"}]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000380)}, 0x10)

1.000647305s ago: executing program 1 (id=3103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null]}) (async)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0}) (async)
recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001461", @ANYRES16=r8, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r9, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r11 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)

998.816446ms ago: executing program 3 (id=3104):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'hsr0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r11 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)

840.644845ms ago: executing program 1 (id=3105):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000006feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000300)=r1) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket(0xa, 0x3, 0x3a)
recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/104, 0x198}], 0x1}, 0x8}], 0x62, 0x2, 0x0) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x57222}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
shutdown(r10, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x1}, 0x8) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00005300e9ff00000020000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)

832.675321ms ago: executing program 1 (id=3106):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, 0x0, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, 0x0, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', <r13=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x59, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

620.57563ms ago: executing program 1 (id=3107):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=r3], 0x80}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000))
socket$pppoe(0x18, 0x1, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
unshare(0x0)

498.710233ms ago: executing program 2 (id=3108):
unshare(0x6a040000)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r1=>0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x70)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x47)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00})
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f)
socket$nl_generic(0x10, 0x3, 0x10)

100.724055ms ago: executing program 3 (id=3109):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x3c}}, 0x40048a4) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async)
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x2b, 0x3, 0x103a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000000c000c000100000001000000ed5ea92872f4ab6daa27ea449d9485c71ffbe14d63705c9e6b0d864eaea48090f9707f91209f12580dcbfc775384e3c407bed393f6b58a99ffbb408b3728ce2e359a2aaf3465e65e3694e17bbe46f4840db00ac0d0c24e1063448d5905eb1c04dd0b66cd08576f2efaafb9ab9e227d734e8eab530dd6954b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

97.473675ms ago: executing program 3 (id=3110):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xbdf, 0x8}}]}]}]}, 0x54}}, 0x0)

0s ago: executing program 3 (id=3111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x6}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x12}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x4}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x4}, @IFLA_MACSEC_ES={0x5, 0xa, 0x8}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x7}]}}}]}, 0x98}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=@newtaction={0x1d40, 0x30, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x1d2c, 0x1, [@m_csum={0x21c, 0x1a, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x7, 0x5, 0xfff}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8000, 0xffffffffffffffff, 0x8, 0xbed0}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x2, 0xe5c6, 0xc0}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x80000001, 0x10000000, 0x40, 0xd5f6d5c}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe4b, 0xff7, 0x4, 0x6, 0x4}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xf78a, 0x4, 0x6, 0x1}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x2, 0x800, 0xffff}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x5, 0x2, 0x7}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3b18, 0x704, 0x0, 0x4c}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x1, 0x9, 0x80000000}, 0x4f}}]}, {0xd6, 0x6, "beacf99f11414cfac74c1f8c0e3662016b756324de4576dd8dcd87ecb333f7ccbeaea8c0c7c3b685dad96bceaafed123fba695453a6f780591a9e6de240866659785a299f92edf3caf6271d2e9b1d81517bc52ec7def005520e3980e8467e3169d707dadb65a48bff75b063f178eb1646220af3067208f1784af48de5ca5e8521a1a51e3859db50991043d911cefe1b9f26062af30a7f550396306f12d66825ad2fb9eb05d01238ffbfea42d63376a07043f0243c0083b2c8cfee7f27d82d62c3ac9c15a3d8c10017c838026759c7c40a2a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_skbedit={0x60, 0x13, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8dcf, 0xa, 0x3, 0x3, 0xaf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x11c, 0x16, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xe93, 0xffffffffffffffff, 0x1a00, 0x401}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x81, 0x6, "941825f400e2681d1e25bd1c8172e843dd5f721252ce2c5082e2eca4f3e3b169d5aac0175ab634897cdf8b4a8efae525a4030c8896a61ff813b2e0b04e4bd6f0fc84ff2ef3bb7591c04d15c5989b01fb1daad7317918b1a2a24daf5dbbc2aca2d28359f345543cc40777ffe4749cfd957c6892bc1fe0aa245699d0a0f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xc0, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8be3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x74, 0x6, "2980793f75d64e51b74dedaa45027907878519f7d33584cebf36a7becbbebf2b336cd2d29e3ff03bad921ba2d748176f0acbb9c1a424dcf25feaf34b5f86dddbb07453dfdcf6927943c8ccc3848de60b5c3cc6c2286bd7a14c89dd2b69edc7ad72f13a0f03d5ecde4af302dc3fd45ace"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x188, 0x0, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x100}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xda, 0x6, "984005fda7c6b082a04ce3c2325db6947c5b1120468fe5c50bf26b1e1d4c9952ab558c41cbefca7928dc875d1bee1ab1f8d0199721210f9b853f3878389b6bd809c51006c0ee748d7e722389a7266eea1d51b5797544e82182290fe56458f8fd4c0f56165d7893f695c2bf7c4f4a2f0d47cd0a52be96b809256e21943d8f34bdb1935cde95f07785dda34b5a2ecd8ff2b61822ed79619752d343ae2acbf9cd2ce2bbccd8efa7ce72a215ab336ea43d6a1a8723e8da6e55ab1af4359817e282d0536c0b3c1c30182dc252287383c7e20695e6f78a8aff"}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}, @m_mpls={0x144, 0xc, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x8, 0x4, 0xab, 0xa47e}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8fa99}]}, {0xd4, 0x6, "eed410c2dbde772f534dbaf4522a6bd8e173001fc1d743e3a01a6c654b2315de5811896e6ec2e90311136dd117264445ae8f3da3b3ab9827cc998363fa45d114d9fb539516fe96e46611eb8522fa513921e7dcc537ad2a0ed6047f8260860eeb3f08a2b534cc4302ef2822949964446c41fddec33c07ec25fafc4847a9c56763a64e7f9f3db2624d2633809c20e833d25c933c8124b5afbab41dc6f4fb5907c757a5516cd370cccc2f2f84f87284f3a2b8933c22a7ed8d4920ecf589ab42cedd8c41b860bd186c006b94c6d97b03f3e7"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x1590, 0x1a, 0x0, 0x0, {{0xb}, {0x1474, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfff, 0xb361, 0x6, 0x800, 0x10000, 0x3, 0x1, 0xfffffffb, 0xa, 0xffff, 0x3, 0x8, 0x8, 0x3, 0x8, 0xfffffffa, 0x8, 0x7, 0xa, 0xffff, 0x0, 0x5, 0x7, 0x7, 0x2, 0x7ff, 0x50, 0xfff, 0x115a76df, 0x80, 0x400, 0x5, 0xe4b, 0xfffffff7, 0x345e, 0xc2, 0xfffffffa, 0x0, 0x6, 0x1, 0xffff, 0xea5c, 0x80000001, 0x1, 0xbd8f, 0x6, 0x717, 0x8, 0x0, 0xa7, 0x4, 0xad73, 0x7, 0x6566, 0x8, 0x4, 0x4, 0x5, 0xbc5c, 0xb0c, 0x1, 0x40, 0x4, 0x3, 0x3, 0x400, 0x2, 0x0, 0x2, 0x1, 0xfffffffa, 0x9, 0x9, 0x793, 0x3, 0x100, 0x956, 0x6, 0x8, 0x9, 0x2, 0x5, 0x2, 0x9, 0x2, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x5, 0x43e6, 0x0, 0x8001, 0x1, 0x7, 0x921, 0x10, 0x0, 0x7c6a, 0x200, 0x3ff, 0x79cc, 0x3, 0x4, 0x7, 0x2, 0x6a, 0x6023, 0x966, 0x8001, 0x5, 0x29f, 0x7, 0x6cb, 0x1, 0x101, 0x3, 0xffffffff, 0x1ff, 0x1, 0x7fffffff, 0xfff, 0x10001, 0x3, 0x3, 0x80, 0x9, 0x3, 0x80000000, 0x1, 0x5, 0x2, 0xe09b, 0x3, 0x200, 0x4c93, 0x100, 0x80000000, 0x0, 0x9, 0x6, 0x0, 0x6, 0x8, 0x7ff, 0x705f, 0x101, 0x3062, 0x200, 0x2e, 0xf, 0x10001, 0x6, 0x3, 0x7f, 0x7, 0xb, 0x80000001, 0xfffffffd, 0x1, 0x9, 0x80000001, 0xca80, 0x80000001, 0x2020, 0x7, 0x0, 0xffff, 0x8, 0x0, 0x8, 0x8001, 0x4, 0x2, 0x1, 0x50, 0xfffffff7, 0x81, 0x2, 0x8, 0x5, 0x2, 0x3ff, 0x1, 0x10000, 0xc, 0x891, 0x1, 0x0, 0x4533, 0x3, 0x1, 0x4, 0xffffffff, 0x5, 0x1000, 0x7, 0x10000, 0xa, 0x3, 0x8, 0x700000, 0x88, 0xf81, 0x5, 0x0, 0xfe, 0x81, 0x0, 0x45, 0x10, 0xcc9, 0x9, 0x22, 0x5, 0x7, 0x0, 0x7, 0x1d7, 0x4, 0xf, 0x7fffffff, 0x0, 0x7, 0x2, 0x4, 0x3, 0x7fffffff, 0xe8, 0x4, 0xcc, 0x8, 0x7000, 0x1, 0xfffffff7, 0xd4b8, 0x0, 0x81, 0xfff, 0x5, 0x0, 0x1, 0x3, 0x7, 0xf, 0x100, 0x73f, 0x57eb183, 0x4, 0x2, 0x3, 0x6, 0x6, 0xf]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1c, 0x8001, 0x2, 0xffff, 0x1000, 0xffffffbb, 0x5, 0x5, 0xfffffff7, 0x5, 0x0, 0xfffffff9, 0x2, 0xe, 0x9, 0x2, 0x8, 0x4, 0x1, 0x2, 0xfffffffd, 0x7, 0x2, 0x2, 0x3ff, 0x1000, 0x1, 0x8, 0x10001, 0x80, 0x1, 0x8, 0x6, 0x7f, 0x0, 0x5, 0x400, 0x0, 0x8001, 0x2, 0x7, 0x7fff, 0x7f, 0x4, 0x4, 0xfffffffd, 0x24, 0x9, 0x40000, 0x400, 0x2, 0xfffffffc, 0x9, 0x1000, 0x8, 0x7fffffff, 0x8001, 0x6, 0x7, 0x8000, 0x5, 0x8, 0x8, 0x6, 0xcb53, 0x400, 0xa, 0x6, 0xc, 0x1, 0x2, 0x6, 0x3, 0x8000, 0x5, 0xa0be, 0x2, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4, 0xfffffc47, 0x4, 0x3, 0x6, 0x4c3, 0xb, 0x8, 0x2, 0xb, 0x4, 0x800, 0x8, 0x9a4, 0x34c70d33, 0x9, 0x6, 0x44cf, 0x7fff, 0x7, 0x2454489, 0xe1, 0x1, 0x316, 0x0, 0x3, 0x495f, 0x0, 0x7, 0x2, 0x1, 0x4, 0x7, 0xfffffffe, 0x1, 0x1, 0x2, 0x5f, 0xf482, 0x9, 0x57f0cd4e, 0x3, 0x800, 0xfffffff8, 0xde7, 0x5, 0x2, 0x1, 0xa, 0x0, 0x1, 0x0, 0x1, 0x3, 0xfffffff7, 0x7, 0x7, 0x6, 0x2, 0xff, 0xfffff800, 0xbfc9, 0x80, 0x9, 0x8000, 0xa, 0xffffffff, 0x1, 0x9, 0xfffff71e, 0x5, 0x8, 0x3, 0x7, 0x14e, 0x120, 0x3, 0x7, 0x7, 0x9, 0x7, 0x2, 0x10, 0xa, 0x5, 0x9, 0xd, 0x6, 0xfffffffb, 0x3, 0x7, 0x7, 0x2a790ca, 0x1, 0xa1, 0xfe8, 0x80000001, 0x3, 0x2, 0xe, 0x0, 0x7fffffff, 0x5, 0x7, 0x2, 0x5, 0x81, 0x5, 0x1, 0x3, 0x6, 0x2cb, 0x7, 0x2, 0xffff, 0x9, 0xb, 0x1, 0x6, 0xb, 0x8, 0xe, 0x1, 0x8, 0x5, 0x5, 0x1, 0x5e, 0x5, 0x5, 0x5, 0x9, 0x4, 0x0, 0x6, 0xf93, 0x7, 0x5, 0x3, 0x80000000, 0x5, 0x7fffffff, 0x0, 0x5, 0x4, 0xffffffff, 0xf, 0x1000, 0xffffff56, 0xffff, 0x6, 0xe, 0x101, 0x9, 0xff, 0x64, 0xfffffffb, 0xffffff45, 0x24, 0x2, 0x6, 0x8033, 0x7f, 0x5, 0xe4a, 0x2, 0x10000, 0x5, 0x3, 0x2d, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x9, 0x1, 0x5, 0x1, 0x7fff, 0x200, 0x4, 0x0, 0x2, 0x200, 0xd6, 0x1, 0xfa1, 0x7, 0x800, 0xffff, 0x10000, 0x2, 0x4, 0x0, 0x9, 0x18, 0x3, 0x3, 0x9, 0x5, 0x9, 0x10000, 0x20000000, 0xf, 0x4, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x5, 0x0, 0x2369, 0x5, 0x3, 0x2ae, 0x2d33, 0x7, 0x1, 0xc, 0xcd69, 0xf49a, 0x8000, 0x1, 0x5, 0x200, 0x4, 0x2, 0x10001, 0x7, 0x6, 0x8, 0x3, 0xf, 0x40, 0x1, 0x9, 0x401, 0x6, 0x3ff, 0x10001, 0x1f, 0x8, 0x9, 0x8000, 0x6, 0x1, 0x1, 0x10, 0x3, 0x4, 0xffffff99, 0xf8000000, 0xd, 0x9, 0x3, 0x3, 0x9e11, 0x0, 0x10, 0x72, 0x2, 0x4, 0x10000, 0x923, 0xc, 0x4, 0x386d56e6, 0xd75, 0x7, 0xb, 0xfffffff7, 0x0, 0xfff, 0x1000, 0xd, 0x8001, 0xfc73, 0x6, 0x4a, 0x9, 0x3, 0x3, 0x10, 0x5, 0x101, 0x9, 0xfffffffd, 0x7, 0x659, 0x0, 0x81, 0x3, 0xd, 0xe3, 0x0, 0x0, 0xffffff81, 0x496, 0x1, 0x9, 0x6, 0x400, 0x7ff, 0x9, 0x3, 0x6, 0x5, 0x18, 0x9, 0x4, 0x4000007f, 0x4, 0xde, 0x5, 0x9, 0x9, 0x3, 0x4, 0xfffffffa, 0x5, 0x10, 0x7, 0x9ee, 0xc, 0x4, 0x8, 0x40, 0x7, 0x8, 0x3, 0x4, 0x5, 0x2, 0x8, 0x3, 0x5, 0x4, 0x4, 0xff, 0x9, 0xa04b, 0x77d2, 0x2, 0x5c1d05a2, 0x1, 0xfff, 0x1000, 0x7, 0xb, 0x15ad9d30, 0x2, 0x400, 0x2, 0x5cfa, 0xc0, 0x401, 0x100, 0x8001, 0x3, 0x0, 0x43, 0x4, 0x5, 0x2, 0x8, 0x1, 0xfe1, 0x5, 0x84, 0x1, 0xc, 0x4, 0x2000, 0xfffffff0, 0x3, 0x0, 0xfffffff9, 0x4, 0x7fffffff, 0x0, 0xb, 0x81, 0x2, 0x10000, 0x9, 0x0, 0x351, 0x8001, 0x1, 0x0, 0x7, 0xfb06, 0x0, 0x0, 0x7, 0x3, 0xad90, 0x5, 0x5, 0x1, 0x6, 0x180000, 0x8, 0x3, 0x5, 0x10001, 0x1, 0x5, 0x5, 0x1fb5, 0x0, 0x4, 0x3ff, 0x0, 0x2, 0x8, 0x1, 0x6, 0x58, 0x2, 0xf6adea8, 0xc15, 0x101, 0x10000, 0x3, 0x14f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2c}], [@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x84a, 0x0, 0x4, 0x2, 0x8000, 0x4, 0x6, 0x2, 0x2, 0x9, 0x1, 0xfffffffb, 0x6, 0x0, 0xa, 0x9, 0x4, 0xff, 0x6, 0x6, 0x0, 0x3, 0xfffffffd, 0x6, 0xe, 0xa12e, 0x9, 0x9, 0x59df, 0x63, 0x5a4, 0x8, 0x5, 0x4, 0x8, 0x3, 0x3, 0xfffffffe, 0x3, 0x2, 0x7fff, 0x6, 0xffffffff, 0x8, 0x80000001, 0x8001, 0x5, 0x1, 0x81, 0x8, 0x4, 0xaaf, 0x101, 0x1, 0x3, 0x7fff, 0x9, 0x2, 0x7, 0x80000000, 0x4, 0x93d, 0x8, 0x1ff, 0xffff, 0x3f, 0x9, 0x8001, 0x65c6, 0x4, 0x1000, 0x9, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x8, 0x5, 0x8001, 0x3, 0x7d87fcaf, 0x5, 0x1000, 0xff, 0x0, 0xa714, 0xcd1, 0x5, 0x5, 0x3, 0xa, 0x4, 0x3cc0, 0x1, 0xff, 0x5, 0x1, 0x6, 0xdb, 0x3, 0x876, 0x0, 0x9, 0x2, 0x4, 0x5, 0x6, 0x9, 0x80, 0x10001, 0x9, 0x2, 0x9, 0x39, 0x5, 0x10001, 0x3, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1, 0xd, 0x4, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0xb, 0x7, 0x9, 0x2, 0x81, 0x49b, 0x8, 0x8, 0x4, 0xfe, 0x4, 0x7f, 0x1, 0x5, 0x8, 0xda, 0xa, 0x98, 0x3, 0xe19b, 0x440e, 0x9, 0x100, 0x3, 0x9, 0x0, 0x6d7, 0x4, 0x0, 0x5, 0xff, 0x10000, 0x7fffffff, 0xa31c, 0x0, 0x7, 0x9, 0x4c, 0x3, 0x8, 0xc, 0x2, 0xbff, 0x58c, 0x9, 0x7, 0xb, 0x1ff, 0x7ff, 0xe, 0x10001, 0x3, 0x7, 0x4000000, 0x5, 0x253a, 0x1, 0x5, 0x3, 0x1ff, 0x7, 0x4, 0x47, 0x200, 0x1, 0x3ff, 0x8, 0x3, 0x7ff, 0x5, 0x7ff, 0x37, 0x7f, 0x5, 0x4, 0xfffffffd, 0xc, 0x8, 0x480, 0x8, 0x9, 0x6, 0xd3, 0xffffffff, 0x3, 0x1, 0x100, 0x7, 0x3, 0x1, 0x1, 0x2, 0xd4f, 0x5, 0x9, 0x0, 0x12, 0x0, 0x7fff, 0x2, 0x1, 0x5, 0x9, 0xffffffff, 0xf, 0xffffff43, 0x10001, 0x75b, 0x4, 0x7f, 0x1ff, 0x4, 0x4, 0x701c, 0xb0, 0xfb, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x91}, @TCA_POLICE_RATE={0x404, 0x2, [0xf5fb, 0x4, 0x9, 0x80000000, 0x4, 0x6, 0x2, 0x3ff, 0x13, 0x4, 0x7, 0x9, 0x6, 0x600000, 0x1ff, 0x380, 0x8, 0x4, 0x8, 0x9b, 0x70, 0x401, 0x6, 0x37d7, 0x1000, 0x5, 0x5, 0x9, 0x9, 0x1000, 0x6, 0x8001, 0x1, 0xdf, 0xfffffffa, 0x1, 0x6, 0x0, 0x5, 0xfffffffa, 0xd, 0x81, 0x3, 0x6, 0x8, 0x0, 0x9, 0x5, 0xa, 0x0, 0xfffffffe, 0x8, 0x2, 0x2, 0x10001, 0x5561, 0x5, 0x4258, 0x4, 0x2, 0x5, 0x7, 0x1ff, 0x31e0c000, 0x4, 0x2, 0x2, 0x7, 0xe, 0x400, 0x2, 0x0, 0x9, 0x6, 0x2, 0x4, 0x5, 0xfffff801, 0x800, 0x0, 0xb, 0x7, 0x101, 0x80000001, 0x5, 0x80000001, 0xfff, 0x5, 0x7, 0x7, 0x3, 0x9, 0x10001, 0x8, 0x1, 0x4, 0x8, 0xfffffd1d, 0xffffff9f, 0x10001, 0x10001, 0x7, 0xf, 0x40, 0x2, 0x2, 0x2, 0x6, 0x9, 0x7, 0x4e, 0xee8c, 0x5, 0x1, 0xf30a, 0x400, 0x4, 0x2, 0xef, 0x3, 0x5000, 0x3, 0x10000, 0x87, 0xa2, 0x2, 0x6, 0x40, 0x1, 0x9, 0x3, 0xfffffff7, 0x8001, 0x5, 0x7, 0x2, 0x3, 0x0, 0x9, 0x3, 0x9, 0xe5a, 0x7, 0x6, 0x1, 0x816, 0x2, 0x3, 0x7, 0x7, 0xfff, 0x80000000, 0x8b, 0xffffffff, 0x0, 0x2, 0x8eb4, 0x9, 0x1ca, 0x9b, 0x5, 0x6, 0x8000, 0x3, 0xb, 0xa8a4, 0xd5f9, 0x5, 0x6, 0x4, 0x7, 0x4, 0x101, 0x2, 0x6, 0x4, 0x7fff, 0xa, 0x24a, 0x7, 0x5, 0x3, 0xfb2, 0xffff7fff, 0x3, 0xb19, 0xa, 0x310c, 0xffffee21, 0x5, 0x7, 0xe3, 0x3, 0x2, 0x6, 0x12, 0x9, 0xe541, 0x5, 0x101, 0x2, 0x0, 0x86, 0x7, 0x2, 0x3, 0xffff, 0x4, 0xfffffffe, 0x10001, 0xffffff9e, 0x1, 0x10, 0x933f, 0x6, 0x0, 0x374, 0x8, 0x80000001, 0x3, 0x60e, 0x2, 0x9, 0x7, 0x5ad7, 0x4, 0xa9a, 0x2, 0x3, 0x0, 0x8, 0x9, 0xfffffffc, 0x3, 0x7, 0x8000, 0x0, 0xffffffff, 0x0, 0x7, 0x10100000, 0x9, 0x2, 0x80000001, 0x4, 0x81, 0x8000, 0x4, 0x8, 0x1, 0x1, 0x8, 0x0, 0x1, 0x6]}]]}, {0xf2, 0x6, "989d7a06c19d9e0fda7b955649035c993f1b80506b9920791febf5c64e6cf9f5cfea212b2cd9b8c32efee26015d7163a7b08c087b8729148a8a35d62d192e10bedb595731dc42427f45c0bb6dc6fee1dfd46f22069f8c78016cf52ae447315026dee86d9d831df19554e7cedd703207a2a6ed0f6efcc8313b886f7475c25113cc88c27f94e936009bea14a66df4ec260d85728815e1b14469ee3a9306b4ec46314b955310cdcac85346e7a29049d57fd17ec7efd6c0e236b062df43c8add8295fb534e0e857ecda5f42509bef38d0e2821b99a3c742d12b0c2a3aecd5306ec7d9c968facb9448507ffaa93fc4149"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x74, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x3d, 0x6, "821fa0847f0e1476cc5bac0e88f0bf9a365d9b68f0c6dc69bc0ac791e523383f2bbef22a90dd95387f77e5ab5768f7c437ba8415c370401fb0"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x1d40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket(0xa, 0x5, 0x5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x6, 0xffe0}, {0x1, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2c}}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x3c, 0x3}}]}, 0x48}}, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'})
socket(0x2, 0xe, 0x2)
r12 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r12, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

kernel console output (not intermixed with test programs):

 `syz.2.2245'.
[  236.290878][T14989] lo speed is unknown, defaulting to 1000
[  236.327116][T14989] geneve0 speed is unknown, defaulting to 1000
[  236.336312][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'.
[  236.423253][T15003] netlink: 'syz.3.2246': attribute type 21 has an invalid length.
[  236.439082][T15003] ipvlan2: entered promiscuous mode
[  236.443043][T15003] bridge0: port 1(ipvlan2) entered blocking state
[  236.446489][T15003] bridge0: port 1(ipvlan2) entered disabled state
[  236.450335][T15003] ipvlan2: entered allmulticast mode
[  236.452571][T15003] erspan0: entered allmulticast mode
[  236.457312][T15003] ipvlan2: left allmulticast mode
[  236.459595][T15003] erspan0: left allmulticast mode
[  236.562068][T15013] sctp: [Deprecated]: syz.3.2251 (pid 15013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.562068][T15013] Use struct sctp_sack_info instead
[  236.588310][T15011] netlink: 'syz.1.2249': attribute type 4 has an invalid length.
[  236.669132][T15021] 8021q: adding VLAN 0 to HW filter on device bond18
[  236.760109][T15031] 8021q: adding VLAN 0 to HW filter on device bond8
[  236.781497][T15032] mac80211_hwsim hwsim393 wlan1: entered allmulticast mode
[  236.811279][T15039] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2257'.
[  237.016055][T15047] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2259'.
[  237.284548][T15058] @0: renamed from bond_slave_1
[  237.473326][T15058] gretap0: entered allmulticast mode
[  237.604824][T15063] validate_nla: 7 callbacks suppressed
[  237.604833][T15063] netlink: 'syz.3.2264': attribute type 12 has an invalid length.
[  237.720313][T15068] lo speed is unknown, defaulting to 1000
[  237.726588][T15068] geneve0 speed is unknown, defaulting to 1000
[  237.783922][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'.
[  237.945143][T15091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2267'.
[  237.949710][T15091] netlink: 'syz.1.2267': attribute type 10 has an invalid length.
[  238.071847][T15101] 8021q: adding VLAN 0 to HW filter on device team0
[  238.077498][T15101] tipc: Resetting bearer <eth:team0>
[  238.080832][T15101] tipc: Resetting bearer <eth:team0>
[  238.086858][T15101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.113407][T15101] ieee802154 phy0 wpan0: encryption failed: -22
[  238.402253][T15127] netlink: 'syz.3.2279': attribute type 9 has an invalid length.
[  238.749571][T15133] netlink: 'syz.3.2281': attribute type 8 has an invalid length.
[  238.796374][T15146] netlink: 'syz.2.2284': attribute type 8 has an invalid length.
[  239.069086][T15170] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.078212][T15171] bond2: (slave macvlan7): Enslaving as a backup interface with a down link
[  239.085945][T15162] netlink: 'syz.1.2289': attribute type 12 has an invalid length.
[  239.088058][T15172] bond2: (slave macvlan8): Error -98 calling set_mac_address
[  239.167983][T15170] tipc: Resetting bearer <eth:team0>
[  239.172205][T15170] bond2: (slave macvlan7): Releasing backup interface
[  239.275361][T15176] IPVS: persistence engine module ip_vs_pe_ not found
[  239.411072][T15190] lo speed is unknown, defaulting to 1000
[  239.415756][T15190] geneve0 speed is unknown, defaulting to 1000
[  239.484664][T15189] netlink: 'syz.1.2295': attribute type 2 has an invalid length.
[  239.498986][T15193] syzkaller1: entered promiscuous mode
[  239.501078][T15193] syzkaller1: entered allmulticast mode
[  239.756749][T15200] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  240.137352][T15220] netlink: 'syz.1.2303': attribute type 1 has an invalid length.
[  240.160936][T15220] 8021q: adding VLAN 0 to HW filter on device bond15
[  240.173182][T15220] vlan3: entered promiscuous mode
[  240.175369][T15220] bond15: entered promiscuous mode
[  240.177546][T15220] vlan3: entered allmulticast mode
[  240.181127][T15220] bond15: entered allmulticast mode
[  240.216420][T15229] netlink: 'syz.3.2306': attribute type 1 has an invalid length.
[  240.294104][T15238] tipc: Resetting bearer <eth:team0>
[  240.308603][T15238] team0: Unable to change to the same mode the team is in
[  240.312948][T15238] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  240.427191][T15245] tipc: Resetting bearer <eth:team0>
[  240.806700][T15250] mac80211_hwsim hwsim393 wlan1: left allmulticast mode
[  240.941844][T15262] __nla_validate_parse: 7 callbacks suppressed
[  240.941859][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2315'.
[  240.951056][T15262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2315'.
[  241.056972][T15264] openvswitch: netlink: Flow key attribute not present in set flow.
[  241.173458][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'.
[  241.287604][T15274] tipc: Resetting bearer <eth:team0>
[  241.295350][T15274] team_slave_1: left allmulticast mode
[  241.298777][T15274] mac80211_hwsim hwsim259 wlan0: left promiscuous mode
[  241.306909][T15274] veth11: left promiscuous mode
[  241.320858][T15276] lo speed is unknown, defaulting to 1000
[  241.329968][T15276] geneve0 speed is unknown, defaulting to 1000
[  241.510822][T15276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2319'.
[  241.673962][T15294] ieee802154 phy0 wpan0: encryption failed: -22
[  241.803491][T15303] IPVS: Scheduler module ip_vs_sip not found
[  241.862936][T15308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.868448][T15308] syzkaller0: entered promiscuous mode
[  241.870706][T15308] syzkaller0: entered allmulticast mode
[  241.880366][T15306] tipc: Resetting bearer <eth:syzkaller0>
[  241.891826][T15306] tipc: Disabling bearer <eth:syzkaller0>
[  242.169960][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2329'.
[  242.181588][T15315] bond0: entered promiscuous mode
[  242.188197][T15315] bond0: left promiscuous mode
[  242.306247][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'.
[  242.455691][T15320] bpq0: entered promiscuous mode
[  242.458258][T15320] bpq0: left promiscuous mode
[  242.513577][T15328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2333'.
[  242.526812][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'.
[  242.530444][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2334'.
[  242.552887][T15330] 8021q: adding VLAN 0 to HW filter on device bond9
[  242.567586][T15330] veth13: entered promiscuous mode
[  242.572319][T15330] bond9: (slave veth13): Enslaving as a backup interface with a down link
[  242.581451][T15330] bond9: (slave veth13): Releasing backup interface
[  242.597307][T15333] vxcan1: entered allmulticast mode
[  242.618375][T15333] vxcan1: left allmulticast mode
[  242.684251][T15339] validate_nla: 5 callbacks suppressed
[  242.684260][T15339] netlink: 'syz.3.2337': attribute type 10 has an invalid length.
[  242.688854][T15337] netlink: 'syz.3.2337': attribute type 10 has an invalid length.
[  242.691934][T15337] mac80211_hwsim hwsim508 wlan1: entered allmulticast mode
[  242.800637][T15349] netlink: 'syz.2.2341': attribute type 9 has an invalid length.
[  242.876251][T15358] lo speed is unknown, defaulting to 1000
[  242.879986][T15358] geneve0 speed is unknown, defaulting to 1000
[  242.924751][T15360] netlink: 'syz.3.2343': attribute type 11 has an invalid length.
[  242.937040][T15360] sctp: [Deprecated]: syz.3.2343 (pid 15360) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.937040][T15360] Use struct sctp_sack_info instead
[  243.189494][T15373] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  243.190994][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'.
[  243.209375][T15373] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  243.322463][T15373] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  243.326691][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.329873][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.357817][T15373] 8021q: adding VLAN 0 to HW filter on device bond19
[  243.382952][T15373] bond19: (slave wlan0): Enslaving as an active interface with a down link
[  243.417928][T15378] netlink: 'syz.1.2348': attribute type 12 has an invalid length.
[  243.531883][T15388] lo speed is unknown, defaulting to 1000
[  243.535672][T15388] geneve0 speed is unknown, defaulting to 1000
[  243.637305][T15400] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  243.640272][T15400] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  244.028328][T15415] lo speed is unknown, defaulting to 1000
[  244.031042][T15415] geneve0 speed is unknown, defaulting to 1000
[  244.112569][T15421] netlink: 'syz.3.2360': attribute type 6 has an invalid length.
[  244.138116][T15421] netlink: 'syz.3.2360': attribute type 12 has an invalid length.
[  244.308322][T15430] mac80211_hwsim hwsim508 wlan1: left allmulticast mode
[  244.311788][T15430] unsupported nlmsg_type 40
[  244.451963][T15447] netlink: 'syz.2.2367': attribute type 1 has an invalid length.
[  244.512274][T15451] lo speed is unknown, defaulting to 1000
[  244.518321][T15451] geneve0 speed is unknown, defaulting to 1000
[  244.591000][T15447] 8021q: adding VLAN 0 to HW filter on device bond20
[  244.639337][T15447] bond19: (slave wlan0): Releasing active interface
[  244.646614][T15447] bond20: (slave wlan0): Enslaving as an active interface with a down link
[  244.775005][T15469] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.490126][T15530] lo speed is unknown, defaulting to 1000
[  245.493856][T15530] geneve0 speed is unknown, defaulting to 1000
[  245.548979][T15537] veth13: left promiscuous mode
[  245.685354][T15540] syzkaller1: entered promiscuous mode
[  245.687252][T15540] syzkaller1: entered allmulticast mode
[  245.702496][T15540] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002
[  245.879773][T15551] sctp: [Deprecated]: syz.1.2391 (pid 15551) Use of int in maxseg socket option.
[  245.879773][T15551] Use struct sctp_assoc_value instead
[  246.613859][T15557] bond20: (slave wlan0): Releasing active interface
[  246.776070][T15564] __nla_validate_parse: 14 callbacks suppressed
[  246.776084][T15564] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2396'.
[  246.835476][T15568] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  247.006505][T15585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2401'.
[  247.149124][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  247.190287][T15604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  247.193189][T15604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  247.202164][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2406'.
[  247.249874][T15606] team0: Unable to change to the same mode the team is in
[  247.253770][T15606] vlan0: entered promiscuous mode
[  247.348249][T15609] ieee802154 phy0 wpan0: encryption failed: -22
[  247.358112][T15609] team0: Mode changed to "loadbalance"
[  247.443723][T15612] ieee802154 phy0 wpan0: encryption failed: -22
[  247.448805][T15611] team0: Unable to change to the same mode the team is in
[  247.541128][T15618] vlan0: left promiscuous mode
[  247.667134][T15628] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  247.672104][T15628] mac80211_hwsim hwsim393 wlan1: entered allmulticast mode
[  247.736874][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'.
[  247.823220][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2418'.
[  247.827233][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2418'.
[  247.868192][T15642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.871285][T15642] syzkaller0: entered promiscuous mode
[  247.873498][T15642] syzkaller0: entered allmulticast mode
[  248.074984][T15657] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2423'.
[  248.139795][T15662] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2425'.
[  248.240978][T15672] validate_nla: 11 callbacks suppressed
[  248.240987][T15672] netlink: 'syz.3.2426': attribute type 8 has an invalid length.
[  248.348003][T15676] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2428'.
[  248.471877][T15685] netlink: 'syz.2.2431': attribute type 1 has an invalid length.
[  248.486994][T15685] veth27: entered promiscuous mode
[  248.551850][T15690] netlink: 'syz.3.2433': attribute type 21 has an invalid length.
[  248.558588][T15690] netlink: 'syz.3.2433': attribute type 6 has an invalid length.
[  248.567627][T15690] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  248.573406][T15690] CPU: 0 UID: 0 PID: 15690 Comm: syz.3.2433 Not tainted syzkaller #0 PREEMPT(full) 
[  248.573418][T15690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.573422][T15690] Call Trace:
[  248.573426][T15690]  <TASK>
[  248.573429][T15690]  dump_stack_lvl+0x189/0x250
[  248.573443][T15690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.573452][T15690]  ? __pfx__printk+0x10/0x10
[  248.573464][T15690]  ? kernfs_path_from_node+0x2f/0x290
[  248.573472][T15690]  ? kernfs_path_from_node+0x250/0x290
[  248.573479][T15690]  ? kernfs_path_from_node+0x2f/0x290
[  248.573488][T15690]  sysfs_warn_dup+0x8e/0xa0
[  248.573496][T15690]  sysfs_do_create_link_sd+0xc0/0x110
[  248.573505][T15690]  device_add_class_symlinks+0x1cf/0x240
[  248.573515][T15690]  device_add+0x475/0xb50
[  248.573524][T15690]  wiphy_register+0x1ba6/0x28d0
[  248.573542][T15690]  ? __pfx_wiphy_register+0x10/0x10
[  248.573551][T15690]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  248.573563][T15690]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  248.573573][T15690]  ieee80211_register_hw+0x3425/0x4080
[  248.573588][T15690]  ? ieee80211_register_hw+0x1461/0x4080
[  248.573601][T15690]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  248.573610][T15690]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.573623][T15690]  ? __hrtimer_setup+0x187/0x210
[  248.573630][T15690]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  248.573642][T15690]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  248.573664][T15690]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  248.573672][T15690]  ? trace_kmalloc+0x1f/0xd0
[  248.573681][T15690]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  248.573690][T15690]  ? kstrndup+0xbf/0x160
[  248.573702][T15690]  hwsim_new_radio_nl+0xea4/0x1b10
[  248.573712][T15690]  ? __pfx___nla_validate_parse+0x10/0x10
[  248.573730][T15690]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  248.573743][T15690]  ? __nla_parse+0x40/0x60
[  248.573754][T15690]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  248.573766][T15690]  genl_family_rcv_msg_doit+0x215/0x300
[  248.573777][T15690]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  248.573790][T15690]  ? bpf_lsm_capable+0x9/0x20
[  248.573798][T15690]  ? security_capable+0x7e/0x2e0
[  248.573810][T15690]  genl_rcv_msg+0x60e/0x790
[  248.573837][T15690]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.573846][T15690]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  248.573861][T15690]  netlink_rcv_skb+0x208/0x470
[  248.573870][T15690]  ? __lock_acquire+0xab9/0xd20
[  248.573881][T15690]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.573889][T15690]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  248.573908][T15690]  ? down_read+0x1ad/0x2e0
[  248.573916][T15690]  genl_rcv+0x28/0x40
[  248.573925][T15690]  netlink_unicast+0x82f/0x9e0
[  248.573938][T15690]  ? __pfx_netlink_unicast+0x10/0x10
[  248.573948][T15690]  ? netlink_sendmsg+0x642/0xb30
[  248.573954][T15690]  ? skb_put+0x11b/0x210
[  248.573964][T15690]  netlink_sendmsg+0x805/0xb30
[  248.573974][T15690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.573981][T15690]  ? aa_sock_msg_perm+0xf1/0x1d0
[  248.573989][T15690]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  248.573996][T15690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.574002][T15690]  __sock_sendmsg+0x21c/0x270
[  248.574014][T15690]  ____sys_sendmsg+0x505/0x830
[  248.574024][T15690]  ? __pfx_____sys_sendmsg+0x10/0x10
[  248.574036][T15690]  ? import_iovec+0x74/0xa0
[  248.574046][T15690]  ___sys_sendmsg+0x21f/0x2a0
[  248.574054][T15690]  ? __pfx____sys_sendmsg+0x10/0x10
[  248.574084][T15690]  ? __fget_files+0x2a/0x420
[  248.574091][T15690]  ? __fget_files+0x3a0/0x420
[  248.574103][T15690]  __x64_sys_sendmsg+0x19b/0x260
[  248.574112][T15690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  248.574126][T15690]  ? rcu_is_watching+0x15/0xb0
[  248.574136][T15690]  ? do_syscall_64+0xbe/0x3b0
[  248.574145][T15690]  do_syscall_64+0xfa/0x3b0
[  248.574150][T15690]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.574160][T15690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.574167][T15690]  ? exc_page_fault+0x9f/0xf0
[  248.574178][T15690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.574201][T15690] RIP: 0033:0x7ffaa098ebe9
[  248.574209][T15690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.574215][T15690] RSP: 002b:00007ffaa17fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.574223][T15690] RAX: ffffffffffffffda RBX: 00007ffaa0bc5fa0 RCX: 00007ffaa098ebe9
[  248.574228][T15690] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  248.574232][T15690] RBP: 00007ffaa0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  248.574236][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.574240][T15690] R13: 00007ffaa0bc6038 R14: 00007ffaa0bc5fa0 R15: 00007ffcae1ac168
[  248.574252][T15690]  </TASK>
[  248.759433][T15641] tipc: Resetting bearer <eth:syzkaller0>
[  248.771922][T15641] tipc: Disabling bearer <eth:syzkaller0>
[  249.012182][T15697] lo speed is unknown, defaulting to 1000
[  249.015841][T15697] geneve0 speed is unknown, defaulting to 1000
[  249.171157][T15716] netlink: 'syz.1.2439': attribute type 1 has an invalid length.
[  249.192078][T15716] 8021q: adding VLAN 0 to HW filter on device bond16
[  249.206791][T15716] veth25: entered promiscuous mode
[  249.212867][T15716] bond16: (slave veth25): Enslaving as a backup interface with a down link
[  249.220722][T15716] bond16: (slave veth25): Releasing backup interface
[  249.316457][T15727] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  249.321420][T15727] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  249.483587][T15734] netlink: 'syz.3.2443': attribute type 10 has an invalid length.
[  249.522236][T15734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.526680][T15734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.685863][T15751] netlink: 'syz.1.2446': attribute type 10 has an invalid length.
[  250.343765][T15755] batadv_slave_0: entered promiscuous mode
[  250.346935][T15755] netlink: 'syz.3.2449': attribute type 3 has an invalid length.
[  250.416967][T15756] IPv6: sit1: Disabled Multicast RS
[  250.419542][T15756] sit1: entered allmulticast mode
[  250.507659][T15760] lo speed is unknown, defaulting to 1000
[  250.511142][T15760] geneve0 speed is unknown, defaulting to 1000
[  250.548438][T15765] netlink: 'syz.2.2453': attribute type 4 has an invalid length.
[  250.900712][T15797] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  250.942201][T15797] veth27: entered promiscuous mode
[  251.091490][T15809] lo speed is unknown, defaulting to 1000
[  251.094024][T15809] geneve0 speed is unknown, defaulting to 1000
[  251.211518][T15817] mac80211_hwsim hwsim259 wlan0: entered promiscuous mode
[  251.218882][T15817] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  251.358812][T15821] 8021q: adding VLAN 0 to HW filter on device bond21
[  251.366871][T15821] bond21: (slave wlan0): Opening slave failed
[  251.434452][T15836] mac80211_hwsim hwsim393 wlan1: left allmulticast mode
[  251.442364][T15836] mac80211_hwsim hwsim393 wlan1: entered allmulticast mode
[  251.626888][T15845] infiniband syz0: set down
[  251.629664][T15845] infiniband syz0: added veth1_to_hsr
[  251.632659][T15845] syz0: rxe_create_cq: returned err = -12
[  251.635362][T15845] infiniband syz0: Couldn't create ib_mad CQ
[  251.637376][T15845] infiniband syz0: Couldn't open port 1
[  251.649402][T15845] RDS/IB: syz0: added
[  251.650955][T15845] smc: adding ib device syz0 with port count 1
[  251.653135][T15845] smc:    ib device syz0 port 1 has pnetid 
[  252.157508][T15866] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  252.160671][T15866] CPU: 1 UID: 0 PID: 15866 Comm: syz.1.2480 Not tainted syzkaller #0 PREEMPT(full) 
[  252.160683][T15866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.160690][T15866] Call Trace:
[  252.160696][T15866]  <TASK>
[  252.160702][T15866]  dump_stack_lvl+0x189/0x250
[  252.160724][T15866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.160739][T15866]  ? __pfx__printk+0x10/0x10
[  252.160759][T15866]  ? kernfs_path_from_node+0x2f/0x290
[  252.160767][T15866]  ? kernfs_path_from_node+0x250/0x290
[  252.160774][T15866]  ? kernfs_path_from_node+0x2f/0x290
[  252.160782][T15866]  sysfs_warn_dup+0x8e/0xa0
[  252.160791][T15866]  sysfs_do_create_link_sd+0xc0/0x110
[  252.160800][T15866]  device_add_class_symlinks+0x1cf/0x240
[  252.160809][T15866]  device_add+0x475/0xb50
[  252.160818][T15866]  wiphy_register+0x1ba6/0x28d0
[  252.160837][T15866]  ? __pfx_wiphy_register+0x10/0x10
[  252.160846][T15866]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  252.160859][T15866]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  252.160870][T15866]  ieee80211_register_hw+0x3425/0x4080
[  252.160885][T15866]  ? ieee80211_register_hw+0x1461/0x4080
[  252.160896][T15866]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  252.160906][T15866]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.160919][T15866]  ? __hrtimer_setup+0x187/0x210
[  252.160926][T15866]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  252.160938][T15866]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  252.160959][T15866]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  252.160967][T15866]  ? trace_kmalloc+0x1f/0xd0
[  252.160975][T15866]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  252.160983][T15866]  ? kstrndup+0xbf/0x160
[  252.160995][T15866]  hwsim_new_radio_nl+0xea4/0x1b10
[  252.161005][T15866]  ? __pfx___nla_validate_parse+0x10/0x10
[  252.161024][T15866]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  252.161038][T15866]  ? __nla_parse+0x40/0x60
[  252.161048][T15866]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  252.161060][T15866]  genl_family_rcv_msg_doit+0x215/0x300
[  252.161071][T15866]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  252.161085][T15866]  ? bpf_lsm_capable+0x9/0x20
[  252.161094][T15866]  ? security_capable+0x7e/0x2e0
[  252.161106][T15866]  genl_rcv_msg+0x60e/0x790
[  252.161117][T15866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.161124][T15866]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  252.161138][T15866]  netlink_rcv_skb+0x208/0x470
[  252.161147][T15866]  ? __lock_acquire+0xab9/0xd20
[  252.161158][T15866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.161167][T15866]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.161184][T15866]  ? down_read+0x1ad/0x2e0
[  252.161192][T15866]  genl_rcv+0x28/0x40
[  252.161199][T15866]  netlink_unicast+0x82f/0x9e0
[  252.161211][T15866]  ? __pfx_netlink_unicast+0x10/0x10
[  252.161221][T15866]  ? netlink_sendmsg+0x642/0xb30
[  252.161226][T15866]  ? skb_put+0x11b/0x210
[  252.161235][T15866]  netlink_sendmsg+0x805/0xb30
[  252.161245][T15866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.161253][T15866]  ? aa_sock_msg_perm+0xf1/0x1d0
[  252.161261][T15866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.161274][T15866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.161281][T15866]  __sock_sendmsg+0x21c/0x270
[  252.161291][T15866]  ____sys_sendmsg+0x505/0x830
[  252.161327][T15866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.161339][T15866]  ? import_iovec+0x74/0xa0
[  252.161349][T15866]  ___sys_sendmsg+0x21f/0x2a0
[  252.161358][T15866]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.161381][T15866]  ? __fget_files+0x2a/0x420
[  252.161387][T15866]  ? __fget_files+0x3a0/0x420
[  252.161399][T15866]  __x64_sys_sendmsg+0x19b/0x260
[  252.161408][T15866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.161421][T15866]  ? rcu_is_watching+0x15/0xb0
[  252.161431][T15866]  ? do_syscall_64+0xbe/0x3b0
[  252.161439][T15866]  do_syscall_64+0xfa/0x3b0
[  252.161444][T15866]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.161453][T15866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.161459][T15866]  ? exc_page_fault+0x9f/0xf0
[  252.161469][T15866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.161476][T15866] RIP: 0033:0x7f6e3c38ebe9
[  252.161483][T15866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.161489][T15866] RSP: 002b:00007f6e3d246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.161498][T15866] RAX: ffffffffffffffda RBX: 00007f6e3c5c5fa0 RCX: 00007f6e3c38ebe9
[  252.161503][T15866] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  252.161507][T15866] RBP: 00007f6e3c411e19 R08: 0000000000000000 R09: 0000000000000000
[  252.161511][T15866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.161515][T15866] R13: 00007f6e3c5c6038 R14: 00007f6e3c5c5fa0 R15: 00007ffe9fddf498
[  252.161526][T15866]  </TASK>
[  252.202519][T15868] __nla_validate_parse: 10 callbacks suppressed
[  252.202530][T15868] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.2481'.
[  252.339504][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'.
[  252.389368][T15876] team0: Unable to change to the same mode the team is in
[  252.443944][T15878] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2484'.
[  252.528460][T15885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2487'.
[  252.601228][T15882] 8021q: adding VLAN 0 to HW filter on device bond18
[  252.647251][T15882] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  252.651806][T15882] bond18: (slave wlan0): Opening slave failed
[  252.727487][T15898] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2490'.
[  252.827707][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'.
[  252.827869][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2491'.
[  252.833523][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'.
[  252.853349][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2491'.
[  252.922210][T15903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2491'.
[  253.002853][T15903] mac80211_hwsim hwsim252 wlan0: entered promiscuous mode
[  253.008215][T15903] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  253.085797][T15933] mac80211_hwsim hwsim393 wlan1: left allmulticast mode
[  253.099590][T15934] erspan1: entered promiscuous mode
[  253.102736][T15933] mac80211_hwsim hwsim393 wlan1: entered allmulticast mode
[  253.136776][T15938] mac80211_hwsim hwsim393 wlan1: left allmulticast mode
[  253.140058][T15939] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  253.142668][T15939] CPU: 0 UID: 0 PID: 15939 Comm: syz.3.2500 Not tainted syzkaller #0 PREEMPT(full) 
[  253.142679][T15939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.142684][T15939] Call Trace:
[  253.142687][T15939]  <TASK>
[  253.142691][T15939]  dump_stack_lvl+0x189/0x250
[  253.142706][T15939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.142715][T15939]  ? __pfx__printk+0x10/0x10
[  253.142728][T15939]  ? kernfs_path_from_node+0x2f/0x290
[  253.142737][T15939]  ? kernfs_path_from_node+0x250/0x290
[  253.142744][T15939]  ? kernfs_path_from_node+0x2f/0x290
[  253.142753][T15939]  sysfs_warn_dup+0x8e/0xa0
[  253.142761][T15939]  sysfs_do_create_link_sd+0xc0/0x110
[  253.142770][T15939]  device_add_class_symlinks+0x1cf/0x240
[  253.142779][T15939]  device_add+0x475/0xb50
[  253.142788][T15939]  wiphy_register+0x1ba6/0x28d0
[  253.142806][T15939]  ? __pfx_wiphy_register+0x10/0x10
[  253.142817][T15939]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  253.142828][T15939]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  253.142838][T15939]  ieee80211_register_hw+0x3425/0x4080
[  253.142853][T15939]  ? ieee80211_register_hw+0x1461/0x4080
[  253.142863][T15939]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  253.142873][T15939]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  253.142887][T15939]  ? __hrtimer_setup+0x187/0x210
[  253.142894][T15939]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  253.142905][T15939]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  253.142926][T15939]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  253.142935][T15939]  ? trace_kmalloc+0x1f/0xd0
[  253.142942][T15939]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  253.142951][T15939]  ? kstrndup+0xbf/0x160
[  253.142963][T15939]  hwsim_new_radio_nl+0xea4/0x1b10
[  253.142974][T15939]  ? __pfx___nla_validate_parse+0x10/0x10
[  253.142998][T15939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  253.143020][T15939]  ? __nla_parse+0x40/0x60
[  253.143039][T15939]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  253.143059][T15939]  genl_family_rcv_msg_doit+0x215/0x300
[  253.143078][T15939]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  253.143101][T15939]  ? bpf_lsm_capable+0x9/0x20
[  253.143116][T15939]  ? security_capable+0x7e/0x2e0
[  253.143138][T15939]  genl_rcv_msg+0x60e/0x790
[  253.143157][T15939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  253.143167][T15939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  253.143181][T15939]  netlink_rcv_skb+0x208/0x470
[  253.143190][T15939]  ? __lock_acquire+0xab9/0xd20
[  253.143200][T15939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  253.143209][T15939]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  253.143226][T15939]  ? down_read+0x1ad/0x2e0
[  253.143234][T15939]  genl_rcv+0x28/0x40
[  253.143241][T15939]  netlink_unicast+0x82f/0x9e0
[  253.143254][T15939]  ? __pfx_netlink_unicast+0x10/0x10
[  253.143264][T15939]  ? netlink_sendmsg+0x642/0xb30
[  253.143269][T15939]  ? skb_put+0x11b/0x210
[  253.143305][T15939]  netlink_sendmsg+0x805/0xb30
[  253.143318][T15939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.143326][T15939]  ? aa_sock_msg_perm+0xf1/0x1d0
[  253.143335][T15939]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  253.143343][T15939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.143350][T15939]  __sock_sendmsg+0x21c/0x270
[  253.143362][T15939]  ____sys_sendmsg+0x505/0x830
[  253.143373][T15939]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.143385][T15939]  ? import_iovec+0x74/0xa0
[  253.143395][T15939]  ___sys_sendmsg+0x21f/0x2a0
[  253.143404][T15939]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.143426][T15939]  ? __fget_files+0x2a/0x420
[  253.143433][T15939]  ? __fget_files+0x3a0/0x420
[  253.143443][T15939]  __x64_sys_sendmsg+0x19b/0x260
[  253.143453][T15939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  253.143465][T15939]  ? rcu_is_watching+0x15/0xb0
[  253.143474][T15939]  ? do_syscall_64+0xbe/0x3b0
[  253.143482][T15939]  do_syscall_64+0xfa/0x3b0
[  253.143488][T15939]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.143497][T15939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.143503][T15939]  ? exc_page_fault+0x9f/0xf0
[  253.143513][T15939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.143519][T15939] RIP: 0033:0x7ffaa098ebe9
[  253.143527][T15939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.143533][T15939] RSP: 002b:00007ffaa17fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.143541][T15939] RAX: ffffffffffffffda RBX: 00007ffaa0bc5fa0 RCX: 00007ffaa098ebe9
[  253.143546][T15939] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  253.143550][T15939] RBP: 00007ffaa0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  253.143554][T15939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.143558][T15939] R13: 00007ffaa0bc6038 R14: 00007ffaa0bc5fa0 R15: 00007ffcae1ac168
[  253.143570][T15939]  </TASK>
[  253.343194][T15938] validate_nla: 19 callbacks suppressed
[  253.343210][T15938] netlink: 'syz.2.2499': attribute type 10 has an invalid length.
[  253.366063][T15938] mac80211_hwsim hwsim393 wlan1: entered allmulticast mode
[  253.392259][T15950] mac80211_hwsim hwsim393 wlan1: left allmulticast mode
[  253.399910][T15950] netlink: 'syz.2.2503': attribute type 10 has an invalid length.
[  253.541801][T15963] macvtap0: mtu less than device minimum
[  253.702931][T15982] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  253.955435][T16000] lo speed is unknown, defaulting to 1000
[  253.959425][T16000] geneve0 speed is unknown, defaulting to 1000
[  253.990163][T16006] batadv_slave_0: left promiscuous mode
[  253.997119][T16006] mac80211_hwsim hwsim259 wlan0: left promiscuous mode
[  254.005215][T16006] sit1: left allmulticast mode
[  254.046890][T16011] netlink: 'syz.3.2519': attribute type 12 has an invalid length.
[  254.202843][T16013] mac80211_hwsim hwsim259 wlan0: entered promiscuous mode
[  254.208623][T16013] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  254.495116][T16025] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  254.505199][T16025] CPU: 0 UID: 0 PID: 16025 Comm: syz.3.2524 Not tainted syzkaller #0 PREEMPT(full) 
[  254.505212][T16025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.505217][T16025] Call Trace:
[  254.505220][T16025]  <TASK>
[  254.505224][T16025]  dump_stack_lvl+0x189/0x250
[  254.505239][T16025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.505248][T16025]  ? __pfx__printk+0x10/0x10
[  254.505260][T16025]  ? kernfs_path_from_node+0x2f/0x290
[  254.505291][T16025]  ? kernfs_path_from_node+0x250/0x290
[  254.505301][T16025]  ? kernfs_path_from_node+0x2f/0x290
[  254.505311][T16025]  sysfs_warn_dup+0x8e/0xa0
[  254.505320][T16025]  sysfs_do_create_link_sd+0xc0/0x110
[  254.505329][T16025]  device_add_class_symlinks+0x1cf/0x240
[  254.505340][T16025]  device_add+0x475/0xb50
[  254.505349][T16025]  wiphy_register+0x1ba6/0x28d0
[  254.505368][T16025]  ? __pfx_wiphy_register+0x10/0x10
[  254.505378][T16025]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  254.505391][T16025]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  254.505402][T16025]  ieee80211_register_hw+0x3425/0x4080
[  254.505418][T16025]  ? ieee80211_register_hw+0x1461/0x4080
[  254.505430][T16025]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  254.505441][T16025]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.505455][T16025]  ? __hrtimer_setup+0x187/0x210
[  254.505462][T16025]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  254.505473][T16025]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  254.505494][T16025]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  254.505502][T16025]  ? trace_kmalloc+0x1f/0xd0
[  254.505509][T16025]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  254.505518][T16025]  ? kstrndup+0xbf/0x160
[  254.505530][T16025]  hwsim_new_radio_nl+0xea4/0x1b10
[  254.505540][T16025]  ? __pfx___nla_validate_parse+0x10/0x10
[  254.505557][T16025]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.505572][T16025]  ? __nla_parse+0x40/0x60
[  254.505584][T16025]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  254.505596][T16025]  genl_family_rcv_msg_doit+0x215/0x300
[  254.505607][T16025]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  254.505621][T16025]  ? bpf_lsm_capable+0x9/0x20
[  254.505629][T16025]  ? security_capable+0x7e/0x2e0
[  254.505643][T16025]  genl_rcv_msg+0x60e/0x790
[  254.505653][T16025]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.505661][T16025]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.505676][T16025]  netlink_rcv_skb+0x208/0x470
[  254.505685][T16025]  ? __lock_acquire+0xab9/0xd20
[  254.505695][T16025]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.505704][T16025]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  254.505721][T16025]  ? down_read+0x1ad/0x2e0
[  254.505729][T16025]  genl_rcv+0x28/0x40
[  254.505736][T16025]  netlink_unicast+0x82f/0x9e0
[  254.505750][T16025]  ? __pfx_netlink_unicast+0x10/0x10
[  254.505759][T16025]  ? netlink_sendmsg+0x642/0xb30
[  254.505765][T16025]  ? skb_put+0x11b/0x210
[  254.505774][T16025]  netlink_sendmsg+0x805/0xb30
[  254.505785][T16025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.505793][T16025]  ? aa_sock_msg_perm+0xf1/0x1d0
[  254.505800][T16025]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.505808][T16025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.505815][T16025]  __sock_sendmsg+0x21c/0x270
[  254.505826][T16025]  ____sys_sendmsg+0x505/0x830
[  254.505836][T16025]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.505848][T16025]  ? import_iovec+0x74/0xa0
[  254.505858][T16025]  ___sys_sendmsg+0x21f/0x2a0
[  254.505867][T16025]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.505889][T16025]  ? __fget_files+0x2a/0x420
[  254.505895][T16025]  ? __fget_files+0x3a0/0x420
[  254.505906][T16025]  __x64_sys_sendmsg+0x19b/0x260
[  254.505915][T16025]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.505927][T16025]  ? rcu_is_watching+0x15/0xb0
[  254.505936][T16025]  ? do_syscall_64+0xbe/0x3b0
[  254.505944][T16025]  do_syscall_64+0xfa/0x3b0
[  254.505950][T16025]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.505959][T16025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.505966][T16025]  ? exc_page_fault+0x9f/0xf0
[  254.505976][T16025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.505983][T16025] RIP: 0033:0x7ffaa098ebe9
[  254.505991][T16025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.505997][T16025] RSP: 002b:00007ffaa17fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.506007][T16025] RAX: ffffffffffffffda RBX: 00007ffaa0bc5fa0 RCX: 00007ffaa098ebe9
[  254.506012][T16025] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  254.506024][T16025] RBP: 00007ffaa0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  254.506028][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.506032][T16025] R13: 00007ffaa0bc6038 R14: 00007ffaa0bc5fa0 R15: 00007ffcae1ac168
[  254.506046][T16025]  </TASK>
[  254.517557][T16028] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  254.526064][T16028] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  254.707121][T16028] bridge3: left allmulticast mode
[  254.709739][T16028] ip6gre1: left allmulticast mode
[  254.711985][T16028] vlan3: left promiscuous mode
[  254.713824][T16028] bond15: left promiscuous mode
[  254.715962][T16028] vlan3: left allmulticast mode
[  254.717694][T16028] bond15: left allmulticast mode
[  254.731596][T16028] veth25: left promiscuous mode
[  254.801589][T16036] netlink: 'syz.2.2527': attribute type 10 has an invalid length.
[  254.862063][T16042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.865744][T16042] syzkaller0: entered promiscuous mode
[  254.870056][T16042] syzkaller0: entered allmulticast mode
[  254.900385][T16050] mac80211_hwsim hwsim259 wlan0: entered allmulticast mode
[  254.903316][T16050] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  254.911670][T16051] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  254.927953][T16055] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001
[  254.935401][T16055] tipc: Resetting bearer <eth:syzkaller0>
[  255.046245][T16067] lo speed is unknown, defaulting to 1000
[  255.048888][T16067] geneve0 speed is unknown, defaulting to 1000
[  255.334791][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.686377][T16041] tipc: Resetting bearer <eth:syzkaller0>
[  255.699890][T16041] tipc: Disabling bearer <eth:syzkaller0>
[  256.377223][T16116] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  256.425544][T16118] netlink: 'syz.3.2548': attribute type 10 has an invalid length.
[  256.430337][T16118] mac80211_hwsim hwsim543 wlan1: entered allmulticast mode
[  256.479915][T16120] lo speed is unknown, defaulting to 1000
[  256.483393][T16120] geneve0 speed is unknown, defaulting to 1000
[  256.528667][   T33] audit: type=1800 audit(1757246426.444:4): pid=16123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2549" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=4305 res=0 errno=0
[  256.546429][   T33] audit: type=1804 audit(1757246426.464:5): pid=16123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2549" name="/newroot/840/x000000000000000700000000000000000000007" dev="tmpfs" ino=4305 res=1 errno=0
[  256.671496][T16128] netlink: 'syz.3.2552': attribute type 1 has an invalid length.
[  256.675135][T16128] netlink: 'syz.3.2552': attribute type 1 has an invalid length.
[  256.748833][T16129] netlink: 'syz.3.2552': attribute type 1 has an invalid length.
[  256.777486][T16129] 8021q: adding VLAN 0 to HW filter on device bond10
[  256.795712][T16128] mac80211_hwsim hwsim259 wlan0: left promiscuous mode
[  256.798585][T16128] mac80211_hwsim hwsim259 wlan0: left allmulticast mode
[  256.803764][T16128] bond10: (slave wlan0): Opening slave failed
[  256.820337][T16128] vlan0: entered allmulticast mode
[  256.823598][T16128] bond10: (slave vlan0): Opening slave failed
[  256.926365][T16143] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  256.935705][T16137] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  256.941412][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.1.2553 Not tainted syzkaller #0 PREEMPT(full) 
[  256.941428][T16137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.941435][T16137] Call Trace:
[  256.941441][T16137]  <TASK>
[  256.941446][T16137]  dump_stack_lvl+0x189/0x250
[  256.941467][T16137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.941481][T16137]  ? __pfx__printk+0x10/0x10
[  256.941499][T16137]  ? kernfs_path_from_node+0x2f/0x290
[  256.941513][T16137]  ? kernfs_path_from_node+0x250/0x290
[  256.941523][T16137]  ? kernfs_path_from_node+0x2f/0x290
[  256.941539][T16137]  sysfs_warn_dup+0x8e/0xa0
[  256.941550][T16137]  sysfs_do_create_link_sd+0xc0/0x110
[  256.941565][T16137]  device_add_class_symlinks+0x1cf/0x240
[  256.941580][T16137]  device_add+0x475/0xb50
[  256.941596][T16137]  wiphy_register+0x1ba6/0x28d0
[  256.941625][T16137]  ? __pfx_wiphy_register+0x10/0x10
[  256.941641][T16137]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  256.941658][T16137]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  256.941676][T16137]  ieee80211_register_hw+0x3425/0x4080
[  256.941701][T16137]  ? ieee80211_register_hw+0x1461/0x4080
[  256.941720][T16137]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  256.941736][T16137]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.941758][T16137]  ? __hrtimer_setup+0x187/0x210
[  256.941770][T16137]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  256.941788][T16137]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  256.941825][T16137]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  256.941838][T16137]  ? trace_kmalloc+0x1f/0xd0
[  256.941852][T16137]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  256.941865][T16137]  ? kstrndup+0xbf/0x160
[  256.941886][T16137]  hwsim_new_radio_nl+0xea4/0x1b10
[  256.941903][T16137]  ? __pfx___nla_validate_parse+0x10/0x10
[  256.941930][T16137]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.941960][T16137]  ? __nla_parse+0x40/0x60
[  256.941978][T16137]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  256.941999][T16137]  genl_family_rcv_msg_doit+0x215/0x300
[  256.942018][T16137]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  256.942041][T16137]  ? bpf_lsm_capable+0x9/0x20
[  256.942055][T16137]  ? security_capable+0x7e/0x2e0
[  256.942077][T16137]  genl_rcv_msg+0x60e/0x790
[  256.942095][T16137]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.942107][T16137]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.942132][T16137]  netlink_rcv_skb+0x208/0x470
[  256.942147][T16137]  ? __lock_acquire+0xab9/0xd20
[  256.942162][T16137]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.942178][T16137]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  256.942207][T16137]  ? down_read+0x1ad/0x2e0
[  256.942221][T16137]  genl_rcv+0x28/0x40
[  256.942232][T16137]  netlink_unicast+0x82f/0x9e0
[  256.942278][T16137]  ? __pfx_netlink_unicast+0x10/0x10
[  256.942296][T16137]  ? netlink_sendmsg+0x642/0xb30
[  256.942305][T16137]  ? skb_put+0x11b/0x210
[  256.942320][T16137]  netlink_sendmsg+0x805/0xb30
[  256.942337][T16137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.942352][T16137]  ? aa_sock_msg_perm+0xf1/0x1d0
[  256.942363][T16137]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.942376][T16137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.942387][T16137]  __sock_sendmsg+0x21c/0x270
[  256.942405][T16137]  ____sys_sendmsg+0x505/0x830
[  256.942422][T16137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.942441][T16137]  ? import_iovec+0x74/0xa0
[  256.942458][T16137]  ___sys_sendmsg+0x21f/0x2a0
[  256.942472][T16137]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.942512][T16137]  ? __fget_files+0x2a/0x420
[  256.942522][T16137]  ? __fget_files+0x3a0/0x420
[  256.942541][T16137]  __x64_sys_sendmsg+0x19b/0x260
[  256.942555][T16137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.942575][T16137]  ? rcu_is_watching+0x15/0xb0
[  256.942591][T16137]  ? do_syscall_64+0xbe/0x3b0
[  256.942605][T16137]  do_syscall_64+0xfa/0x3b0
[  256.942616][T16137]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.942629][T16137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.942642][T16137]  ? exc_page_fault+0x9f/0xf0
[  256.942657][T16137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.942669][T16137] RIP: 0033:0x7f6e3c38ebe9
[  256.942680][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.942690][T16137] RSP: 002b:00007f6e3d225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.942703][T16137] RAX: ffffffffffffffda RBX: 00007f6e3c5c6090 RCX: 00007f6e3c38ebe9
[  256.942712][T16137] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  256.942719][T16137] RBP: 00007f6e3c411e19 R08: 0000000000000000 R09: 0000000000000000
[  256.942725][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.942732][T16137] R13: 00007f6e3c5c6128 R14: 00007f6e3c5c6090 R15: 00007ffe9fddf498
[  256.942752][T16137]  </TASK>
[  256.949498][T16143] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  257.043565][T16149] netlink: 'syz.1.2557': attribute type 142 has an invalid length.
[  257.099214][T16152] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  257.207937][T16149] 8021q: adding VLAN 0 to HW filter on device bond19
[  257.281653][T16162] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  257.496859][T16179] __nla_validate_parse: 9 callbacks suppressed
[  257.496873][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'.
[  257.503608][T16179] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2566'.
[  257.630128][T16195] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2571'.
[  257.705094][T16197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2572'.
[  257.705312][T16193] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2570'.
[  257.708056][T16197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2572'.
[  257.728205][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'.
[  257.790214][T16200] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  257.906818][T16209] mac80211_hwsim hwsim543 wlan1: left allmulticast mode
[  257.946726][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2578'.
[  258.033037][T16223] 8021q: adding VLAN 0 to HW filter on device bond3
[  258.073510][T16223] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  258.077485][T16223] bond3: (slave macvlan7): Enslaving as a backup interface with a down link
[  258.102769][T16223] bond3: (slave macvlan7): Releasing backup interface
[  258.224849][T16235] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2585'.
[  258.367640][T16240] lo speed is unknown, defaulting to 1000
[  258.370291][T16240] geneve0 speed is unknown, defaulting to 1000
[  258.403179][T16247] validate_nla: 6 callbacks suppressed
[  258.403188][T16247] netlink: 'syz.1.2589': attribute type 6 has an invalid length.
[  258.428390][T16247] netlink: 'syz.1.2589': attribute type 12 has an invalid length.
[  258.431030][T16247] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2589'.
[  258.946709][T16287] syzkaller0: entered promiscuous mode
[  258.954064][T16287] syzkaller0: entered allmulticast mode
[  259.186359][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.189248][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.480651][T16319] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  259.973693][T16341] lo speed is unknown, defaulting to 1000
[  259.979184][T16341] geneve0 speed is unknown, defaulting to 1000
[  260.266494][T16351] cgroup: fork rejected by pids controller in /syz1
[  260.440803][ T5848] syz_tun (unregistering): left allmulticast mode
[  260.572312][T16458] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  260.590891][T16458] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  260.645978][T16460] macvlan8: entered promiscuous mode
[  260.648191][T16460] macvlan8: entered allmulticast mode
[  260.664866][T16460] bond11: (slave macvlan8): Error -98 calling set_mac_address
[  260.923446][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  260.927782][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  260.931295][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  260.942072][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  260.949530][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  261.011813][T16472] lo speed is unknown, defaulting to 1000
[  261.024932][T16472] geneve0 speed is unknown, defaulting to 1000
[  261.091743][T16481] mac80211_hwsim hwsim252 wlan0: left promiscuous mode
[  261.099614][T16481] erspan1: left promiscuous mode
[  261.336818][T16472] chnl_net:caif_netlink_parms(): no params data found
[  261.461905][T16472] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.469455][T16472] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.472277][T16472] bridge_slave_0: entered allmulticast mode
[  261.477061][T16472] bridge_slave_0: entered promiscuous mode
[  261.482688][T16472] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.486432][T16472] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.489134][T16472] bridge_slave_1: entered allmulticast mode
[  261.492056][T16472] bridge_slave_1: entered promiscuous mode
[  261.511229][T16472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.516303][T16472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.546036][T16472] team0: Port device team_slave_0 added
[  261.556169][T16472] team0: Port device team_slave_1 added
[  261.588941][T16472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.591499][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.602313][T16472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.608811][T16472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.611402][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.620019][T16472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.634037][T16511] netlink: 'syz.3.2631': attribute type 1 has an invalid length.
[  261.676646][T16519] netlink: 'syz.3.2634': attribute type 1 has an invalid length.
[  261.678030][T16472] hsr_slave_0: entered promiscuous mode
[  261.679638][T16519] netlink: 'syz.3.2634': attribute type 1 has an invalid length.
[  261.681941][T16472] hsr_slave_1: entered promiscuous mode
[  261.810499][T16519] netlink: 'syz.3.2634': attribute type 1 has an invalid length.
[  261.840614][T16519] 8021q: adding VLAN 0 to HW filter on device bond12
[  261.859742][T16519] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  261.867279][T16519] vlan0: entered allmulticast mode
[  261.870159][T16519] bond12: (slave vlan0): Opening slave failed
[  261.911288][T16522] netlink: 'syz.2.2635': attribute type 10 has an invalid length.
[  262.200533][T16472] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  262.212429][T16472] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  262.228175][T16472] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  262.233807][T16472] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  262.264708][T16472] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.267130][T16472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.270077][T16472] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.272664][T16472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.352685][T16472] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.359024][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.369385][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.423075][T16472] 8021q: adding VLAN 0 to HW filter on device team0
[  262.444132][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.446729][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.471422][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.473965][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.550280][T16472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.746327][T16561] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  262.749480][T16561] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  262.782386][T16561] ip6_vti0: entered promiscuous mode
[  262.784797][T16561] ip6_vti0: entered allmulticast mode
[  262.829580][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.924392][T16472] veth0_vlan: entered promiscuous mode
[  262.939403][T16561] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  262.966209][T16561] 8021q: adding VLAN 0 to HW filter on device bond22
[  262.972620][T16566] __nla_validate_parse: 10 callbacks suppressed
[  262.972629][T16566] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2641'.
[  262.973130][T16472] veth1_vlan: entered promiscuous mode
[  262.988930][T16561] bond22: (slave wlan0): Opening slave failed
[  262.997006][ T5847] Bluetooth: hci1: command tx timeout
[  263.047699][T16472] veth0_macvtap: entered promiscuous mode
[  263.053973][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'.
[  263.060087][T16472] veth1_macvtap: entered promiscuous mode
[  263.100280][T16472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.125116][T16472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.158735][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.163473][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.171459][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.177130][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.378150][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'.
[  263.597761][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.600821][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.743546][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.745549][   T52] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  263.747417][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.850112][T16599] ieee802154 phy0 wpan0: encryption failed: -22
[  263.862533][T16599] team0: Unable to change to the same mode the team is in
[  263.868655][T16601] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  263.872690][T16601] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  263.876995][T16601] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  263.919631][T16606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2619'.
[  263.974729][T16606] tipc: Started in network mode
[  263.976422][T16606] tipc: Node identity 9e104258aeb5, cluster identity 4711
[  263.988301][T16606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.059537][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2650'.
[  264.070247][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'.
[  264.073925][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2651'.
[  264.079553][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'.
[  264.150213][T16622] lo speed is unknown, defaulting to 1000
[  264.153795][T16622] geneve0 speed is unknown, defaulting to 1000
[  264.330022][T16624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2652'.
[  264.611636][ T3619] tipc: Resetting bearer <eth:syzkaller0>
[  264.632983][T16600] tipc: Resetting bearer <eth:syzkaller0>
[  264.749841][T16634] netlink: 'syz.3.2653': attribute type 10 has an invalid length.
[  265.057070][ T5850] tipc: Node number set to 816136792
[  265.077480][ T5847] Bluetooth: hci1: command tx timeout
[  265.621800][T16600] tipc: Disabling bearer <eth:syzkaller0>
[  265.629264][T16631] bond12: (slave wlan0): Releasing active interface
[  265.652352][T16635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  265.656045][T16635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  265.756428][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2655'.
[  265.762337][T16642] netlink: 'syz.1.2655': attribute type 1 has an invalid length.
[  265.811969][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.815327][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.033801][T16671] syzkaller1: entered promiscuous mode
[  266.035960][T16671] syzkaller1: entered allmulticast mode
[  266.059175][T16673] lo speed is unknown, defaulting to 1000
[  266.063427][T16673] geneve0 speed is unknown, defaulting to 1000
[  266.103339][ T5908] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.106249][ T5908] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.144313][ T5908] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.146964][ T5908] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.226781][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.229347][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.270789][T16682] lo speed is unknown, defaulting to 1000
[  266.282808][T16682] geneve0 speed is unknown, defaulting to 1000
[  266.298568][T16673] netlink: 'syz.1.2662': attribute type 2 has an invalid length.
[  266.421589][T16690] netlink: 'syz.2.2665': attribute type 2 has an invalid length.
[  266.617177][T16705] hsr_slave_0: left promiscuous mode
[  266.620526][T16705] hsr_slave_1: left promiscuous mode
[  266.862409][ T5858] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.874628][ T5858] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.877771][ T5858] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.880958][ T5858] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.922913][T16729] netlink: 'syz.2.2673': attribute type 3 has an invalid length.
[  267.100934][T16735] batadv1: entered promiscuous mode
[  267.102997][T16735] batadv1: entered allmulticast mode
[  267.154408][ T5847] Bluetooth: hci1: command tx timeout
[  267.233669][T16748] netlink: 'syz.2.2677': attribute type 10 has an invalid length.
[  267.240484][T16748] mac80211_hwsim hwsim583 wlan1: entered allmulticast mode
[  267.298215][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  267.310671][T16752] netlink: 'syz.3.2679': attribute type 9 has an invalid length.
[  267.389094][T16756] netlink: 'syz.1.2680': attribute type 8 has an invalid length.
[  267.607956][T16771] geneve2: entered promiscuous mode
[  267.687682][T16776] can: request_module (can-proto-3) failed.
[  267.698383][T16776] netlink: 'syz.3.2685': attribute type 8 has an invalid length.
[  267.919274][T16782] netlink: 'syz.1.2687': attribute type 6 has an invalid length.
[  268.316208][T16793] __nla_validate_parse: 16 callbacks suppressed
[  268.316222][T16793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2690'.
[  268.511046][T16795] ip6_vti0: left promiscuous mode
[  268.513208][T16795] ip6_vti0: left allmulticast mode
[  268.537686][T16795] mac80211_hwsim hwsim583 wlan1: left allmulticast mode
[  268.608452][T16805] lo speed is unknown, defaulting to 1000
[  268.611004][T16805] geneve0 speed is unknown, defaulting to 1000
[  268.941485][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'.
[  268.954014][T16829] veth3: entered promiscuous mode
[  268.990373][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2697'.
[  269.052200][T16835] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  269.222057][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'.
[  269.235650][ T5847] Bluetooth: hci1: command tx timeout
[  269.289618][   T33] audit: type=1800 audit(1757246439.194:6): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2700" name="blkio.bfq.time_recursive" dev="tmpfs" ino=89 res=0 errno=0
[  269.291094][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2700'.
[  269.300148][   T33] audit: type=1800 audit(1757246439.194:7): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2700" name="blkio.bfq.time_recursive" dev="tmpfs" ino=89 res=0 errno=0
[  269.419703][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.422782][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.528887][T16856] 8021q: adding VLAN 0 to HW filter on device bond2
[  269.839278][T16866] netlink: 11382 bytes leftover after parsing attributes in process `syz.3.2707'.
[  269.892870][T16871] validate_nla: 7 callbacks suppressed
[  269.892885][T16871] netlink: 'syz.3.2708': attribute type 9 has an invalid length.
[  269.900322][T16871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2708'.
[  269.986970][T16873] netlink: 'syz.1.2709': attribute type 8 has an invalid length.
[  270.099633][T16886] netlink: 'syz.3.2713': attribute type 6 has an invalid length.
[  270.102422][T16886] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2713'.
[  270.210537][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'.
[  270.407745][T16905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2718'.
[  270.505207][T16920] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  270.510803][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.1.2721 Not tainted syzkaller #0 PREEMPT(full) 
[  270.510814][T16920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.510819][T16920] Call Trace:
[  270.510823][T16920]  <TASK>
[  270.510827][T16920]  dump_stack_lvl+0x189/0x250
[  270.510841][T16920]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.510850][T16920]  ? __pfx__printk+0x10/0x10
[  270.510862][T16920]  ? kernfs_path_from_node+0x2f/0x290
[  270.510870][T16920]  ? kernfs_path_from_node+0x250/0x290
[  270.510877][T16920]  ? kernfs_path_from_node+0x2f/0x290
[  270.510886][T16920]  sysfs_warn_dup+0x8e/0xa0
[  270.510894][T16920]  sysfs_do_create_link_sd+0xc0/0x110
[  270.510903][T16920]  device_add_class_symlinks+0x1cf/0x240
[  270.510913][T16920]  device_add+0x475/0xb50
[  270.510922][T16920]  wiphy_register+0x1ba6/0x28d0
[  270.510941][T16920]  ? __pfx_wiphy_register+0x10/0x10
[  270.510950][T16920]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  270.510961][T16920]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  270.510972][T16920]  ieee80211_register_hw+0x3425/0x4080
[  270.510987][T16920]  ? ieee80211_register_hw+0x1461/0x4080
[  270.510998][T16920]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  270.511008][T16920]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.511021][T16920]  ? __hrtimer_setup+0x187/0x210
[  270.511028][T16920]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  270.511040][T16920]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  270.511061][T16920]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  270.511069][T16920]  ? trace_kmalloc+0x1f/0xd0
[  270.511078][T16920]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  270.511087][T16920]  ? kstrndup+0xbf/0x160
[  270.511123][T16920]  hwsim_new_radio_nl+0xea4/0x1b10
[  270.511135][T16920]  ? __pfx___nla_validate_parse+0x10/0x10
[  270.511152][T16920]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.511166][T16920]  ? __nla_parse+0x40/0x60
[  270.511178][T16920]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  270.511190][T16920]  genl_family_rcv_msg_doit+0x215/0x300
[  270.511202][T16920]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  270.511215][T16920]  ? bpf_lsm_capable+0x9/0x20
[  270.511224][T16920]  ? security_capable+0x7e/0x2e0
[  270.511237][T16920]  genl_rcv_msg+0x60e/0x790
[  270.511249][T16920]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.511256][T16920]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.511271][T16920]  netlink_rcv_skb+0x208/0x470
[  270.511280][T16920]  ? __lock_acquire+0xab9/0xd20
[  270.511291][T16920]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.511300][T16920]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.511317][T16920]  ? down_read+0x1ad/0x2e0
[  270.511325][T16920]  genl_rcv+0x28/0x40
[  270.511333][T16920]  netlink_unicast+0x82f/0x9e0
[  270.511346][T16920]  ? __pfx_netlink_unicast+0x10/0x10
[  270.511356][T16920]  ? netlink_sendmsg+0x642/0xb30
[  270.511362][T16920]  ? skb_put+0x11b/0x210
[  270.511371][T16920]  netlink_sendmsg+0x805/0xb30
[  270.511381][T16920]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.511389][T16920]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.511397][T16920]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.511404][T16920]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.511411][T16920]  __sock_sendmsg+0x21c/0x270
[  270.511422][T16920]  ____sys_sendmsg+0x505/0x830
[  270.511432][T16920]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.511444][T16920]  ? import_iovec+0x74/0xa0
[  270.511454][T16920]  ___sys_sendmsg+0x21f/0x2a0
[  270.511462][T16920]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.511485][T16920]  ? __fget_files+0x2a/0x420
[  270.511491][T16920]  ? __fget_files+0x3a0/0x420
[  270.511501][T16920]  __x64_sys_sendmsg+0x19b/0x260
[  270.511510][T16920]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.511525][T16920]  ? do_syscall_64+0xbe/0x3b0
[  270.511534][T16920]  do_syscall_64+0xfa/0x3b0
[  270.511539][T16920]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.511549][T16920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.511556][T16920]  ? exc_page_fault+0x9f/0xf0
[  270.511566][T16920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.511572][T16920] RIP: 0033:0x7fd53078ebe9
[  270.511580][T16920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.511586][T16920] RSP: 002b:00007fd531617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.511595][T16920] RAX: ffffffffffffffda RBX: 00007fd5309c5fa0 RCX: 00007fd53078ebe9
[  270.511600][T16920] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  270.511604][T16920] RBP: 00007fd530811e19 R08: 0000000000000000 R09: 0000000000000000
[  270.511609][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.511613][T16920] R13: 00007fd5309c6038 R14: 00007fd5309c5fa0 R15: 00007ffd00d6abb8
[  270.511625][T16920]  </TASK>
[  270.698196][T16922] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  270.702960][T16922] CPU: 1 UID: 0 PID: 16922 Comm: syz.1.2721 Not tainted syzkaller #0 PREEMPT(full) 
[  270.702977][T16922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.702984][T16922] Call Trace:
[  270.702991][T16922]  <TASK>
[  270.702997][T16922]  dump_stack_lvl+0x189/0x250
[  270.703017][T16922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.703031][T16922]  ? __pfx__printk+0x10/0x10
[  270.703053][T16922]  ? kernfs_path_from_node+0x2f/0x290
[  270.703071][T16922]  ? kernfs_path_from_node+0x250/0x290
[  270.703083][T16922]  ? kernfs_path_from_node+0x2f/0x290
[  270.703124][T16922]  sysfs_warn_dup+0x8e/0xa0
[  270.703139][T16922]  sysfs_do_create_link_sd+0xc0/0x110
[  270.703154][T16922]  device_add_class_symlinks+0x1cf/0x240
[  270.703170][T16922]  device_add+0x475/0xb50
[  270.703187][T16922]  wiphy_register+0x1ba6/0x28d0
[  270.703218][T16922]  ? __pfx_wiphy_register+0x10/0x10
[  270.703234][T16922]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  270.703254][T16922]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  270.703271][T16922]  ieee80211_register_hw+0x3425/0x4080
[  270.703298][T16922]  ? ieee80211_register_hw+0x1461/0x4080
[  270.703317][T16922]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  270.703334][T16922]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.703357][T16922]  ? __hrtimer_setup+0x187/0x210
[  270.703368][T16922]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  270.703388][T16922]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  270.703427][T16922]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  270.703441][T16922]  ? trace_kmalloc+0x1f/0xd0
[  270.703455][T16922]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  270.703470][T16922]  ? kstrndup+0xbf/0x160
[  270.703491][T16922]  hwsim_new_radio_nl+0xea4/0x1b10
[  270.703508][T16922]  ? __pfx___nla_validate_parse+0x10/0x10
[  270.703538][T16922]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.703564][T16922]  ? __nla_parse+0x40/0x60
[  270.703584][T16922]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  270.703606][T16922]  genl_family_rcv_msg_doit+0x215/0x300
[  270.703626][T16922]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  270.703650][T16922]  ? bpf_lsm_capable+0x9/0x20
[  270.703665][T16922]  ? security_capable+0x7e/0x2e0
[  270.703687][T16922]  genl_rcv_msg+0x60e/0x790
[  270.703707][T16922]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.703720][T16922]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.703747][T16922]  netlink_rcv_skb+0x208/0x470
[  270.703762][T16922]  ? __lock_acquire+0xab9/0xd20
[  270.703779][T16922]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.703794][T16922]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.703825][T16922]  ? down_read+0x1ad/0x2e0
[  270.703839][T16922]  genl_rcv+0x28/0x40
[  270.703852][T16922]  netlink_unicast+0x82f/0x9e0
[  270.703896][T16922]  ? __pfx_netlink_unicast+0x10/0x10
[  270.703913][T16922]  ? netlink_sendmsg+0x642/0xb30
[  270.703922][T16922]  ? skb_put+0x11b/0x210
[  270.703937][T16922]  netlink_sendmsg+0x805/0xb30
[  270.703957][T16922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.703971][T16922]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.703984][T16922]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.703996][T16922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.704008][T16922]  __sock_sendmsg+0x21c/0x270
[  270.704027][T16922]  ____sys_sendmsg+0x505/0x830
[  270.704046][T16922]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.704073][T16922]  ? import_iovec+0x74/0xa0
[  270.704090][T16922]  ___sys_sendmsg+0x21f/0x2a0
[  270.704130][T16922]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.704173][T16922]  ? __fget_files+0x2a/0x420
[  270.704183][T16922]  ? __fget_files+0x3a0/0x420
[  270.704202][T16922]  __x64_sys_sendmsg+0x19b/0x260
[  270.704218][T16922]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.704240][T16922]  ? do_user_addr_fault+0xc8a/0x1390
[  270.704280][T16922]  ? do_syscall_64+0xbe/0x3b0
[  270.704297][T16922]  do_syscall_64+0xfa/0x3b0
[  270.704307][T16922]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.704323][T16922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.704335][T16922]  ? exc_page_fault+0x9f/0xf0
[  270.704353][T16922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.704365][T16922] RIP: 0033:0x7fd53078ebe9
[  270.704376][T16922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.704386][T16922] RSP: 002b:00007fd5315d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.704400][T16922] RAX: ffffffffffffffda RBX: 00007fd5309c6180 RCX: 00007fd53078ebe9
[  270.704409][T16922] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  270.704417][T16922] RBP: 00007fd530811e19 R08: 0000000000000000 R09: 0000000000000000
[  270.704424][T16922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.704431][T16922] R13: 00007fd5309c6218 R14: 00007fd5309c6180 R15: 00007ffd00d6abb8
[  270.704453][T16922]  </TASK>
[  271.127464][T16945] veth1_to_bond: entered allmulticast mode
[  271.193698][T16945] veth1_to_bond: left allmulticast mode
[  271.216292][T16950] netlink: 'syz.2.2728': attribute type 9 has an invalid length.
[  271.388848][T16959] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  271.396443][    C0] vcan0: j1939_tp_txtimer: 0xffff888069e8e800: tx aborted with unknown reason: -2
[  271.401319][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812a045000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  271.410243][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888069e8e800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  271.683760][T16982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.687452][T16982] syzkaller0: entered promiscuous mode
[  271.689907][T16982] syzkaller0: entered allmulticast mode
[  271.711172][T16982] tipc: Resetting bearer <eth:syzkaller0>
[  271.717742][T16981] tipc: Resetting bearer <eth:syzkaller0>
[  271.728229][T16981] tipc: Disabling bearer <eth:syzkaller0>
[  271.877961][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.881415][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.014062][T16987] mac80211_hwsim hwsim252 wlan0: entered promiscuous mode
[  272.019348][T16987] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  272.064671][T16989] netlink: 'syz.2.2737': attribute type 83 has an invalid length.
[  272.093401][T16989] lo speed is unknown, defaulting to 1000
[  272.097718][T16989] geneve0 speed is unknown, defaulting to 1000
[  272.197278][T16993] mac80211_hwsim hwsim577 wlan0: entered promiscuous mode
[  272.199710][T16993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  272.212267][T16993] netlink: 'syz.1.2738': attribute type 3 has an invalid length.
[  272.592510][T17007] macsec0: entered allmulticast mode
[  272.696574][T17007] netlink: 'syz.2.2742': attribute type 12 has an invalid length.
[  272.888698][T17011] netlink: 'syz.2.2744': attribute type 2 has an invalid length.
[  272.892223][T17011] netlink: 'syz.2.2744': attribute type 2 has an invalid length.
[  273.395727][T17031] syzkaller1: entered promiscuous mode
[  273.398228][T17031] syzkaller1: entered allmulticast mode
[  273.539454][T17039] __nla_validate_parse: 6 callbacks suppressed
[  273.539468][T17039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2753'.
[  273.546360][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2753'.
[  273.633308][T17047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2756'.
[  273.658276][T17051] lo speed is unknown, defaulting to 1000
[  273.662851][T17051] geneve0 speed is unknown, defaulting to 1000
[  273.750770][T17056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.753948][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'.
[  273.758925][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2757'.
[  273.762859][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'.
[  273.768225][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2757'.
[  273.774935][T17056] syzkaller0: entered promiscuous mode
[  273.776785][T17056] syzkaller0: entered allmulticast mode
[  273.791486][T17056] tipc: Resetting bearer <eth:syzkaller0>
[  273.799732][T17055] tipc: Resetting bearer <eth:syzkaller0>
[  273.809626][T17055] tipc: Disabling bearer <eth:syzkaller0>
[  273.916251][T17060] netlink: 'syz.2.2760': attribute type 10 has an invalid length.
[  273.923975][T17060] mac80211_hwsim hwsim583 wlan1: entered allmulticast mode
[  273.942829][T17063] lo speed is unknown, defaulting to 1000
[  273.951460][T17063] geneve0 speed is unknown, defaulting to 1000
[  274.151160][T17075] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2765'.
[  274.648566][T17095] 8021q: adding VLAN 0 to HW filter on device bond23
[  274.674129][T17095] mac80211_hwsim hwsim252 wlan0: left promiscuous mode
[  274.690355][T17095] bond23: (slave wlan0): Enslaving as an active interface with a down link
[  274.732394][T17105] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20001
[  274.919883][T17123] veth0: entered promiscuous mode
[  274.929013][T17120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2775'.
[  274.935736][T17119] veth0: left promiscuous mode
[  274.945771][T17125] lo speed is unknown, defaulting to 1000
[  274.951469][T17125] geneve0 speed is unknown, defaulting to 1000
[  274.989255][T17126] lo speed is unknown, defaulting to 1000
[  274.993127][T17126] geneve0 speed is unknown, defaulting to 1000
[  275.106134][T17134] "syz.2.2778" (17134) uses obsolete ecb(arc4) skcipher
[  275.118986][T17138] mac80211_hwsim hwsim252 wlan0: entered promiscuous mode
[  275.132642][T17138] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  275.449908][T17146] lo speed is unknown, defaulting to 1000
[  275.470826][T17146] geneve0 speed is unknown, defaulting to 1000
[  276.056872][T17157] syzkaller0: entered promiscuous mode
[  276.058654][T17157] syzkaller0: entered allmulticast mode
[  276.220630][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'.
[  277.197248][T17164] lo speed is unknown, defaulting to 1000
[  277.199974][T17164] geneve0 speed is unknown, defaulting to 1000
[  277.383285][T17170] lo speed is unknown, defaulting to 1000
[  277.402348][T17170] geneve0 speed is unknown, defaulting to 1000
[  277.757732][T17183] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  277.761635][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.3.2788 Not tainted syzkaller #0 PREEMPT(full) 
[  277.761647][T17183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.761652][T17183] Call Trace:
[  277.761657][T17183]  <TASK>
[  277.761660][T17183]  dump_stack_lvl+0x189/0x250
[  277.761675][T17183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.761684][T17183]  ? __pfx__printk+0x10/0x10
[  277.761697][T17183]  ? kernfs_path_from_node+0x2f/0x290
[  277.761706][T17183]  ? kernfs_path_from_node+0x250/0x290
[  277.761714][T17183]  ? kernfs_path_from_node+0x2f/0x290
[  277.761741][T17183]  sysfs_warn_dup+0x8e/0xa0
[  277.761750][T17183]  sysfs_do_create_link_sd+0xc0/0x110
[  277.761760][T17183]  device_add_class_symlinks+0x1cf/0x240
[  277.761776][T17183]  device_add+0x475/0xb50
[  277.761787][T17183]  wiphy_register+0x1ba6/0x28d0
[  277.761806][T17183]  ? __pfx_wiphy_register+0x10/0x10
[  277.761817][T17183]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  277.761829][T17183]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  277.761841][T17183]  ieee80211_register_hw+0x3425/0x4080
[  277.761857][T17183]  ? ieee80211_register_hw+0x1461/0x4080
[  277.761870][T17183]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  277.761880][T17183]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.761893][T17183]  ? __hrtimer_setup+0x187/0x210
[  277.761900][T17183]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  277.761912][T17183]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  277.761933][T17183]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  277.761941][T17183]  ? trace_kmalloc+0x1f/0xd0
[  277.761950][T17183]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  277.761960][T17183]  ? kstrndup+0xbf/0x160
[  277.761971][T17183]  hwsim_new_radio_nl+0xea4/0x1b10
[  277.761981][T17183]  ? __pfx___nla_validate_parse+0x10/0x10
[  277.761998][T17183]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.762012][T17183]  ? __nla_parse+0x40/0x60
[  277.762053][T17183]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  277.762073][T17183]  genl_family_rcv_msg_doit+0x215/0x300
[  277.762085][T17183]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  277.762100][T17183]  ? bpf_lsm_capable+0x9/0x20
[  277.762109][T17183]  ? security_capable+0x7e/0x2e0
[  277.762124][T17183]  genl_rcv_msg+0x60e/0x790
[  277.762135][T17183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.762144][T17183]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.762160][T17183]  netlink_rcv_skb+0x208/0x470
[  277.762170][T17183]  ? __lock_acquire+0xab9/0xd20
[  277.762185][T17183]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.762197][T17183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.762223][T17183]  ? down_read+0x1ad/0x2e0
[  277.762232][T17183]  genl_rcv+0x28/0x40
[  277.762240][T17183]  netlink_unicast+0x82f/0x9e0
[  277.762253][T17183]  ? __pfx_netlink_unicast+0x10/0x10
[  277.762263][T17183]  ? netlink_sendmsg+0x642/0xb30
[  277.762269][T17183]  ? skb_put+0x11b/0x210
[  277.762277][T17183]  netlink_sendmsg+0x805/0xb30
[  277.762288][T17183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.762296][T17183]  ? aa_sock_msg_perm+0xf1/0x1d0
[  277.762304][T17183]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.762311][T17183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.762318][T17183]  __sock_sendmsg+0x21c/0x270
[  277.762329][T17183]  ____sys_sendmsg+0x505/0x830
[  277.762340][T17183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.762355][T17183]  ? import_iovec+0x74/0xa0
[  277.762370][T17183]  ___sys_sendmsg+0x21f/0x2a0
[  277.762384][T17183]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.762414][T17183]  ? __fget_files+0x2a/0x420
[  277.762421][T17183]  ? __fget_files+0x3a0/0x420
[  277.762431][T17183]  __x64_sys_sendmsg+0x19b/0x260
[  277.762440][T17183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.762452][T17183]  ? rcu_is_watching+0x15/0xb0
[  277.762462][T17183]  ? do_syscall_64+0xbe/0x3b0
[  277.762471][T17183]  do_syscall_64+0xfa/0x3b0
[  277.762480][T17183]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.762494][T17183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.762505][T17183]  ? exc_page_fault+0x9f/0xf0
[  277.762522][T17183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.762531][T17183] RIP: 0033:0x7ffaa098ebe9
[  277.762543][T17183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.762552][T17183] RSP: 002b:00007ffaa17fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.762565][T17183] RAX: ffffffffffffffda RBX: 00007ffaa0bc5fa0 RCX: 00007ffaa098ebe9
[  277.762573][T17183] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  277.762580][T17183] RBP: 00007ffaa0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  277.762587][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.762594][T17183] R13: 00007ffaa0bc6038 R14: 00007ffaa0bc5fa0 R15: 00007ffcae1ac168
[  277.762615][T17183]  </TASK>
[  278.055248][T17185] validate_nla: 4 callbacks suppressed
[  278.055259][T17185] netlink: 'syz.3.2789': attribute type 1 has an invalid length.
[  278.059673][T17185] netlink: 'syz.3.2789': attribute type 1 has an invalid length.
[  278.072800][T17185] block nbd0: shutting down sockets
[  278.110840][T17196] lo speed is unknown, defaulting to 1000
[  278.322198][T17196] geneve0 speed is unknown, defaulting to 1000
[  278.772407][T17210] mac80211_hwsim hwsim589 wlan1: entered allmulticast mode
[  278.783476][T17217] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  279.483473][T17241] __nla_validate_parse: 5 callbacks suppressed
[  279.483487][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  279.667634][T17253] netlink: 'syz.1.2805': attribute type 4 has an invalid length.
[  279.672144][T17253] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  279.797955][T17256] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.801508][T17256] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.886146][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.897072][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.964874][ T5858] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.970516][ T5858] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.974058][ T5858] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.978269][ T5858] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  280.237243][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'.
[  280.371977][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'.
[  280.379557][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2810'.
[  280.673413][T17295] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  280.693138][T17299] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2819'.
[  280.747283][T17307] netlink: 'syz.1.2820': attribute type 58 has an invalid length.
[  280.751011][T17307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2820'.
[  280.795095][T17315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2822'.
[  280.923892][T17319] syzkaller0: entered promiscuous mode
[  280.926852][T17319] syzkaller0: entered allmulticast mode
[  280.983354][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  280.989030][T17324] netlink: 'syz.2.2823': attribute type 9 has an invalid length.
[  280.992464][T17324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2823'.
[  281.272380][T17329] netlink: 'syz.2.2824': attribute type 12 has an invalid length.
[  281.276181][T17329] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2824'.
[  281.443275][T17331] lo speed is unknown, defaulting to 1000
[  281.448073][T17331] geneve0 speed is unknown, defaulting to 1000
[  281.550862][T17334] netlink: 'syz.3.2826': attribute type 10 has an invalid length.
[  281.753079][T17332] netlink: 'syz.2.2825': attribute type 2 has an invalid length.
[  281.756477][T17341] netlink: 'syz.2.2825': attribute type 2 has an invalid length.
[  283.181051][T17363] mac80211_hwsim hwsim589 wlan1: left allmulticast mode
[  283.217537][T17355] netlink: 'syz.3.2831': attribute type 10 has an invalid length.
[  283.329806][T17374] lo speed is unknown, defaulting to 1000
[  283.333492][T17374] geneve0 speed is unknown, defaulting to 1000
[  283.378569][T17378] geneve3: entered promiscuous mode
[  283.387874][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.391544][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.414908][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.418947][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.442109][T17379] lo speed is unknown, defaulting to 1000
[  283.446269][T17379] geneve0 speed is unknown, defaulting to 1000
[  283.570762][T17383] bond23: (slave wlan0): Releasing active interface
[  283.658228][T17386] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  283.696339][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.699427][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.712439][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.729862][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.810721][T17393] lo speed is unknown, defaulting to 1000
[  283.848495][T17393] geneve0 speed is unknown, defaulting to 1000
[  284.015105][T17402] netlink: 'syz.2.2843': attribute type 8 has an invalid length.
[  284.031428][T17399] netlink: 'syz.1.2841': attribute type 2 has an invalid length.
[  284.419737][T17418] bridge_slave_0: left allmulticast mode
[  284.421652][T17418] bridge_slave_0: left promiscuous mode
[  284.423651][T17418] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.452131][T17418] bridge_slave_1: left allmulticast mode
[  284.459514][T17418] bridge_slave_1: left promiscuous mode
[  284.461851][T17418] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.502554][T17418] bond0: (slave bond_slave_0): Releasing backup interface
[  284.520485][T17418] bond0: (slave bond_slave_1): Releasing backup interface
[  284.527044][T17418] team0: Port device team_slave_0 removed
[  284.531381][T17418] team0: Port device team_slave_1 removed
[  284.533440][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.545152][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.597863][T17437] __nla_validate_parse: 3 callbacks suppressed
[  284.597872][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'.
[  284.605564][T17439] lo speed is unknown, defaulting to 1000
[  284.646566][T17439] geneve0 speed is unknown, defaulting to 1000
[  284.671566][T17442] 8021q: adding VLAN 0 to HW filter on device team0
[  284.673895][T17442] tipc: Resetting bearer <eth:team0>
[  284.684535][T17442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.692418][T17447] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2854'.
[  284.892521][T17457] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  284.928483][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'.
[  285.038877][T17462] netlink: 1868 bytes leftover after parsing attributes in process `syz.2.2858'.
[  285.068372][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'.
[  285.539625][T17470] mac80211_hwsim hwsim577 wlan0: left promiscuous mode
[  285.542197][T17470] geneve2: left promiscuous mode
[  285.545136][T17470] geneve3: left promiscuous mode
[  286.015996][T17483] tipc: Resetting bearer <eth:team0>
[  286.049782][T17488] netlink: 'syz.2.2865': attribute type 4 has an invalid length.
[  286.052287][T17487] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  286.229788][T17505] netlink: 'syz.2.2867': attribute type 10 has an invalid length.
[  286.301042][T17506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2871'.
[  286.304400][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'.
[  286.342426][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2872'.
[  286.346288][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2872'.
[  286.350115][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2872'.
[  286.405221][T17509] lo speed is unknown, defaulting to 1000
[  286.407770][T17509] geneve0 speed is unknown, defaulting to 1000
[  286.643146][T17525] netlink: 'syz.1.2877': attribute type 12 has an invalid length.
[  287.111354][T17561] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  287.125694][T17561] CPU: 0 UID: 0 PID: 17561 Comm: syz.3.2886 Not tainted syzkaller #0 PREEMPT(full) 
[  287.125707][T17561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.125711][T17561] Call Trace:
[  287.125715][T17561]  <TASK>
[  287.125720][T17561]  dump_stack_lvl+0x189/0x250
[  287.125734][T17561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.125743][T17561]  ? __pfx__printk+0x10/0x10
[  287.125756][T17561]  ? kernfs_path_from_node+0x2f/0x290
[  287.125765][T17561]  ? kernfs_path_from_node+0x250/0x290
[  287.125772][T17561]  ? kernfs_path_from_node+0x2f/0x290
[  287.125782][T17561]  sysfs_warn_dup+0x8e/0xa0
[  287.125790][T17561]  sysfs_do_create_link_sd+0xc0/0x110
[  287.125799][T17561]  device_add_class_symlinks+0x1cf/0x240
[  287.125809][T17561]  device_add+0x475/0xb50
[  287.125819][T17561]  wiphy_register+0x1ba6/0x28d0
[  287.125836][T17561]  ? __pfx_wiphy_register+0x10/0x10
[  287.125846][T17561]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  287.125858][T17561]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  287.125874][T17561]  ieee80211_register_hw+0x3425/0x4080
[  287.125889][T17561]  ? ieee80211_register_hw+0x1461/0x4080
[  287.125901][T17561]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  287.125912][T17561]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.125948][T17561]  ? __hrtimer_setup+0x187/0x210
[  287.125955][T17561]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  287.125967][T17561]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  287.125990][T17561]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  287.125998][T17561]  ? trace_kmalloc+0x1f/0xd0
[  287.126007][T17561]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  287.126017][T17561]  ? kstrndup+0xbf/0x160
[  287.126029][T17561]  hwsim_new_radio_nl+0xea4/0x1b10
[  287.126039][T17561]  ? __pfx___nla_validate_parse+0x10/0x10
[  287.126055][T17561]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.126069][T17561]  ? __nla_parse+0x40/0x60
[  287.126081][T17561]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  287.126093][T17561]  genl_family_rcv_msg_doit+0x215/0x300
[  287.126105][T17561]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  287.126118][T17561]  ? bpf_lsm_capable+0x9/0x20
[  287.126127][T17561]  ? security_capable+0x7e/0x2e0
[  287.126140][T17561]  genl_rcv_msg+0x60e/0x790
[  287.126150][T17561]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.126158][T17561]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  287.126172][T17561]  netlink_rcv_skb+0x208/0x470
[  287.126181][T17561]  ? __lock_acquire+0xab9/0xd20
[  287.126191][T17561]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.126200][T17561]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.126217][T17561]  ? down_read+0x1ad/0x2e0
[  287.126225][T17561]  genl_rcv+0x28/0x40
[  287.126232][T17561]  netlink_unicast+0x82f/0x9e0
[  287.126246][T17561]  ? __pfx_netlink_unicast+0x10/0x10
[  287.126255][T17561]  ? netlink_sendmsg+0x642/0xb30
[  287.126261][T17561]  ? skb_put+0x11b/0x210
[  287.126269][T17561]  netlink_sendmsg+0x805/0xb30
[  287.126279][T17561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.126287][T17561]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.126295][T17561]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.126302][T17561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.126309][T17561]  __sock_sendmsg+0x21c/0x270
[  287.126319][T17561]  ____sys_sendmsg+0x505/0x830
[  287.126330][T17561]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.126341][T17561]  ? import_iovec+0x74/0xa0
[  287.126351][T17561]  ___sys_sendmsg+0x21f/0x2a0
[  287.126359][T17561]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.126381][T17561]  ? __fget_files+0x2a/0x420
[  287.126387][T17561]  ? __fget_files+0x3a0/0x420
[  287.126398][T17561]  __x64_sys_sendmsg+0x19b/0x260
[  287.126406][T17561]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.126419][T17561]  ? rcu_is_watching+0x15/0xb0
[  287.126428][T17561]  ? do_syscall_64+0xbe/0x3b0
[  287.126437][T17561]  do_syscall_64+0xfa/0x3b0
[  287.126442][T17561]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.126451][T17561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.126458][T17561]  ? exc_page_fault+0x9f/0xf0
[  287.126468][T17561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.126475][T17561] RIP: 0033:0x7ffaa098ebe9
[  287.126483][T17561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.126489][T17561] RSP: 002b:00007ffaa17fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.126497][T17561] RAX: ffffffffffffffda RBX: 00007ffaa0bc5fa0 RCX: 00007ffaa098ebe9
[  287.126502][T17561] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  287.126507][T17561] RBP: 00007ffaa0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.126511][T17561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.126515][T17561] R13: 00007ffaa0bc6038 R14: 00007ffaa0bc5fa0 R15: 00007ffcae1ac168
[  287.126527][T17561]  </TASK>
[  287.567722][T17583] netlink: 'syz.2.2891': attribute type 8 has an invalid length.
[  287.747178][T17587] ieee802154 phy0 wpan0: encryption failed: -22
[  287.820751][T17587] team0: Mode changed to "loadbalance"
[  288.325243][T17655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.340277][T17655] netlink: 'syz.1.2908': attribute type 10 has an invalid length.
[  288.347362][T17655] bond0: (slave wlan1): Opening slave failed
[  288.351537][T17655] mac80211_hwsim hwsim578 wlan1: entered allmulticast mode
[  288.400807][T17658] netlink: 'syz.1.2909': attribute type 2 has an invalid length.
[  288.609149][T17668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  288.858228][T17680] netlink: 'syz.1.2914': attribute type 11 has an invalid length.
[  289.015560][T17682] bond0 (unregistering): Released all slaves
[  289.035382][T17647] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  289.102493][T17685] lo speed is unknown, defaulting to 1000
[  289.109048][T17685] geneve0 speed is unknown, defaulting to 1000
[  289.247885][T17699] netlink: 'syz.1.2919': attribute type 1 has an invalid length.
[  289.339809][T17699] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.343962][T17702] bond0: (slave wlan0): Opening slave failed
[  289.357650][T17699] vlan2: entered allmulticast mode
[  289.359622][T17699] veth1: entered allmulticast mode
[  289.362346][T17699] bond0: (slave vlan2): Opening slave failed
[  289.428359][T17706] netlink: 'syz.2.2920': attribute type 1 has an invalid length.
[  289.438439][T17706] netlink: 'syz.2.2920': attribute type 1 has an invalid length.
[  289.558153][T17711] lo speed is unknown, defaulting to 1000
[  289.605669][T17711] geneve0 speed is unknown, defaulting to 1000
[  289.656714][T17727] netlink: 'syz.2.2925': attribute type 10 has an invalid length.
[  289.662190][T17727] mac80211_hwsim hwsim636 wlan1: entered allmulticast mode
[  289.716787][T17729] lo speed is unknown, defaulting to 1000
[  289.723958][T17729] geneve0 speed is unknown, defaulting to 1000
[  290.029265][T17741] __nla_validate_parse: 15 callbacks suppressed
[  290.029275][T17741] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2929'.
[  290.036969][T17746] netlink: 'syz.2.2931': attribute type 21 has an invalid length.
[  290.041107][T17746] IPv6: NLM_F_CREATE should be specified when creating new route
[  290.045002][T17746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.047417][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  290.047706][T17742] ieee802154 phy0 wpan0: encryption failed: -22
[  290.049722][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  290.055138][T17746] IPv6: NLM_F_CREATE should be set when creating new route
[  290.059802][T17746] netlink: 'syz.2.2931': attribute type 23 has an invalid length.
[  290.124826][T17744] lo speed is unknown, defaulting to 1000
[  290.127451][T17744] geneve0 speed is unknown, defaulting to 1000
[  290.227718][T17753] mac80211_hwsim hwsim636 wlan1: left allmulticast mode
[  290.319121][T17748] netlink: 'syz.1.2930': attribute type 2 has an invalid length.
[  290.410607][T17762] lo speed is unknown, defaulting to 1000
[  290.427849][T17762] geneve0 speed is unknown, defaulting to 1000
[  290.604547][T17766] netlink: 'syz.2.2934': attribute type 2 has an invalid length.
[  290.608104][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'.
[  292.017763][T17797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2942'.
[  292.024828][T17798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2942'.
[  292.053495][T17794] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.062843][T17794] bond2: (slave wlan0): Opening slave failed
[  292.079658][T17794] vlan2: entered allmulticast mode
[  292.083331][T17794] bond2: (slave vlan2): Opening slave failed
[  292.264491][T17813] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2947'.
[  292.369731][T17821] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2949'.
[  292.543215][T17829] lo speed is unknown, defaulting to 1000
[  292.547420][T17829] geneve0 speed is unknown, defaulting to 1000
[  292.683498][T17829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2952'.
[  293.140206][T17845] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2957'.
[  293.268947][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2958'.
[  293.284747][T17852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2958'.
[  293.401466][T17867] lo speed is unknown, defaulting to 1000
[  293.404123][T17867] geneve0 speed is unknown, defaulting to 1000
[  293.543614][T17874] validate_nla: 9 callbacks suppressed
[  293.543625][T17874] netlink: 'syz.1.2965': attribute type 21 has an invalid length.
[  293.631067][T17878] xt_limit: Overflow, try lower: 271964/0
[  293.685727][T17878] 8021q: adding VLAN 0 to HW filter on device bond2
[  293.705197][T17883] bond2: (slave macvlan8): Enslaving as a backup interface with a down link
[  293.777282][T17886] netlink: 'syz.3.2969': attribute type 10 has an invalid length.
[  293.873746][T17895] syzkaller1: entered promiscuous mode
[  293.878265][T17895] syzkaller1: entered allmulticast mode
[  293.881023][T17895] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  294.113427][T17903] mac80211_hwsim hwsim578 wlan1: left allmulticast mode
[  294.139239][T17903] netlink: 'syz.1.2974': attribute type 10 has an invalid length.
[  294.143510][T17903] mac80211_hwsim hwsim578 wlan1: entered allmulticast mode
[  294.197453][T17914] netlink: 'syz.3.2977': attribute type 1 has an invalid length.
[  294.200374][T17914] netlink: 'syz.3.2977': attribute type 2 has an invalid length.
[  294.211001][T17914] netlink: 'syz.3.2977': attribute type 1 has an invalid length.
[  294.213988][T17914] netlink: 'syz.3.2977': attribute type 2 has an invalid length.
[  294.601587][T17939] mac80211_hwsim hwsim578 wlan1: left allmulticast mode
[  294.609478][T17939] netlink: 'syz.1.2987': attribute type 10 has an invalid length.
[  294.619721][T17939] mac80211_hwsim hwsim578 wlan1: entered allmulticast mode
[  294.693316][T17947] netlink: 'syz.1.2989': attribute type 10 has an invalid length.
[  294.698540][T17947] mac80211_hwsim hwsim578 wlan1: left allmulticast mode
[  294.712782][T17938] netlink: 'syz.2.2986': attribute type 10 has an invalid length.
[  294.738934][T17951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.744722][T17950] tipc: Disabling bearer <eth:syzkaller0>
[  295.485938][T17969] __nla_validate_parse: 10 callbacks suppressed
[  295.485948][T17969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2995'.
[  295.706088][T17977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'.
[  295.811374][T17977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'.
[  295.850944][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'.
[  295.991420][ T5843] cgroup: fork rejected by pids controller in /syz2
[  296.036629][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'.
[  296.072938][ T5843] syz_tun (unregistering): left allmulticast mode
[  296.248633][T18024] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3009'.
[  296.390290][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'.
[  296.429712][T18045] lo speed is unknown, defaulting to 1000
[  296.433057][T18045] geneve0 speed is unknown, defaulting to 1000
[  296.455425][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  296.459456][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  296.466566][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  296.486251][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  296.489159][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  296.520245][T18046] lo speed is unknown, defaulting to 1000
[  296.522765][T18046] geneve0 speed is unknown, defaulting to 1000
[  296.565965][T18051] lo speed is unknown, defaulting to 1000
[  296.574984][T18051] geneve0 speed is unknown, defaulting to 1000
[  296.583447][T18050] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3015'.
[  296.587971][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3015'.
[  297.116987][T18046] chnl_net:caif_netlink_parms(): no params data found
[  297.126417][T18062] lo speed is unknown, defaulting to 1000
[  297.133673][T18062] geneve0 speed is unknown, defaulting to 1000
[  297.223601][T18046] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.226868][T18046] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.230345][T18046] bridge_slave_0: entered allmulticast mode
[  297.240134][T18046] bridge_slave_0: entered promiscuous mode
[  297.247921][T18072] netlink: 'syz.1.3019': attribute type 11 has an invalid length.
[  297.299212][T18046] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.302271][T18046] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.316650][T18046] bridge_slave_1: entered allmulticast mode
[  297.322427][T18046] bridge_slave_1: entered promiscuous mode
[  297.440740][T18046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.473254][T18046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.560957][T18046] team0: Port device team_slave_0 added
[  297.571540][T18046] team0: Port device team_slave_1 added
[  297.638760][T18046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.641217][T18046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.652886][T18046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.669197][T18046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.671957][T18046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.683404][T18046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.786414][T18046] hsr_slave_0: entered promiscuous mode
[  297.790713][T18046] hsr_slave_1: entered promiscuous mode
[  297.949563][T18083] lo speed is unknown, defaulting to 1000
[  297.952734][T18083] geneve0 speed is unknown, defaulting to 1000
[  298.142563][T18083] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3023'.
[  298.249136][T18046] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  298.260278][T18046] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  298.268500][T18046] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  298.275735][T18046] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  298.338649][T18094] mac80211_hwsim hwsim589 wlan1: entered allmulticast mode
[  298.504283][T18097] lo speed is unknown, defaulting to 1000
[  298.512685][T18046] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.516135][ T5236] Bluetooth: hci0: command tx timeout
[  298.526131][T18096] lo speed is unknown, defaulting to 1000
[  298.529253][T18097] geneve0 speed is unknown, defaulting to 1000
[  298.564032][T18096] geneve0 speed is unknown, defaulting to 1000
[  298.567022][T18046] 8021q: adding VLAN 0 to HW filter on device team0
[  298.587122][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.590243][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.612065][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.614568][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.823287][T18046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.865027][T18112] validate_nla: 15 callbacks suppressed
[  298.865038][T18112] netlink: 'syz.1.3027': attribute type 10 has an invalid length.
[  298.912729][T18046] veth0_vlan: entered promiscuous mode
[  298.923076][T18046] veth1_vlan: entered promiscuous mode
[  298.950339][T18046] veth0_macvtap: entered promiscuous mode
[  298.955528][T18046] veth1_macvtap: entered promiscuous mode
[  299.062104][T18046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.071536][T18046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.132084][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.136463][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.140487][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.144434][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.271885][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.278198][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.381444][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.385077][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.532132][T18118] mac80211_hwsim hwsim589 wlan1: left allmulticast mode
[  299.608207][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.611414][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.704894][T18132] syzkaller0: entered promiscuous mode
[  299.707043][T18132] syzkaller0: entered allmulticast mode
[  299.716346][T18132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.734009][T18132] netlink: 'syz.1.3032': attribute type 12 has an invalid length.
[  299.838263][T18135] netlink: 'syz.3.3033': attribute type 1 has an invalid length.
[  299.840897][T18135] netlink: 'syz.3.3033': attribute type 1 has an invalid length.
[  299.959153][T18131] tipc: Resetting bearer <eth:syzkaller0>
[  300.594571][ T5236] Bluetooth: hci0: command tx timeout
[  301.046608][T18131] tipc: Disabling bearer <eth:syzkaller0>
[  301.173649][T18158] __nla_validate_parse: 2 callbacks suppressed
[  301.173663][T18158] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3039'.
[  301.270167][T18154] lo speed is unknown, defaulting to 1000
[  301.276577][T18154] geneve0 speed is unknown, defaulting to 1000
[  301.381312][T18168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3041'.
[  301.388981][T18168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3041'.
[  301.392902][T18168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3041'.
[  301.397224][T18168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3041'.
[  301.560910][T18178] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  301.586327][T18178] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  301.620810][T18178] veth3: entered promiscuous mode
[  301.626312][T18178] bond0: (slave veth3): Enslaving as an active interface with an up link
[  301.654375][T18178] bridge_slave_0: left allmulticast mode
[  301.657000][T18178] bridge_slave_0: left promiscuous mode
[  301.659476][T18178] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.688760][T18178] bridge_slave_1: left allmulticast mode
[  301.698454][T18178] bridge_slave_1: left promiscuous mode
[  301.702160][T18178] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.732866][T18182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3044'.
[  301.740608][T18178] bond0: (slave bond_slave_0): Releasing backup interface
[  301.758630][T18178] bond0: (slave bond_slave_1): Releasing backup interface
[  301.769841][T18178] team0: Port device team_slave_0 removed
[  301.790234][T18178] team0: Port device team_slave_1 removed
[  301.797646][T18178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.800806][T18178] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.807209][T18178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.810500][T18178] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.827072][T18178] bond0: (slave ip6gretap1): Releasing backup interface
[  301.835206][T18178] bond0: (slave veth3): Releasing backup interface
[  301.922508][T18187] syz_tun: entered allmulticast mode
[  302.075083][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'.
[  302.213579][T18197] netem: unknown loss type 0
[  302.216248][T18197] netem: change failed
[  302.250603][T18199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'.
[  302.674500][ T5236] Bluetooth: hci0: command tx timeout
[  303.178800][    C0] vcan0: j1939_tp_rxtimer: 0xffff888065ceb000: rx timeout, send abort
[  303.182568][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888065ceb000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  303.254397][T18221] netlink: 'syz.1.3053': attribute type 10 has an invalid length.
[  303.335802][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  303.432437][T18237] netlink: 'syz.2.3058': attribute type 9 has an invalid length.
[  303.471608][T18239] bond2: (slave macvlan8): Releasing backup interface
[  303.487318][T18230] lo speed is unknown, defaulting to 1000
[  303.566881][T18230] geneve0 speed is unknown, defaulting to 1000
[  303.632285][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'.
[  303.855191][T18251] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  303.941211][T18258] lo: entered allmulticast mode
[  303.952325][T18256] lo: left allmulticast mode
[  303.958415][T18251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.964844][T18262] netlink: 'syz.2.3064': attribute type 21 has an invalid length.
[  303.968769][T18251] syzkaller0: entered promiscuous mode
[  303.970563][T18251] syzkaller0: entered allmulticast mode
[  303.972535][T18262] IPv6: NLM_F_CREATE should be specified when creating new route
[  303.977976][T18262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.981044][T18262] IPv6: NLM_F_CREATE should be set when creating new route
[  303.984108][T18262] IPv6: NLM_F_CREATE should be set when creating new route
[  303.987218][T18262] IPv6: NLM_F_CREATE should be set when creating new route
[  304.021854][T18251] tipc: Resetting bearer <eth:syzkaller0>
[  304.045923][T18250] tipc: Resetting bearer <eth:syzkaller0>
[  304.108188][T18250] tipc: Disabling bearer <eth:syzkaller0>
[  304.349709][T18269] lo speed is unknown, defaulting to 1000
[  304.353233][T18269] geneve0 speed is unknown, defaulting to 1000
[  304.488367][T18286] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  304.495689][T18286] bond0: (slave wlan1): Opening slave failed
[  304.591955][T18291] lo speed is unknown, defaulting to 1000
[  304.595959][T18291] geneve0 speed is unknown, defaulting to 1000
[  304.737824][T18298] netlink: 'syz.1.3073': attribute type 10 has an invalid length.
[  304.757531][ T5236] Bluetooth: hci0: command tx timeout
[  304.809839][T18301] lo speed is unknown, defaulting to 1000
[  304.829933][T18301] geneve0 speed is unknown, defaulting to 1000
[  305.167214][T18275] syz.2.3069 (18275) used greatest stack depth: 19512 bytes left
[  305.187902][T18312] lo speed is unknown, defaulting to 1000
[  305.257894][T18315] netlink: 'syz.2.3077': attribute type 6 has an invalid length.
[  305.269479][T18312] geneve0 speed is unknown, defaulting to 1000
[  305.412924][T18313] netlink: 'syz.3.3076': attribute type 2 has an invalid length.
[  305.870255][T18332] mac80211_hwsim hwsim259 wlan0: entered promiscuous mode
[  305.873846][T18332] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  305.907591][T18334] bond2: option mode: unable to set because the bond device is up
[  305.925931][T18334] bond2: (slave macvlan9): Enslaving as a backup interface with a down link
[  305.942070][T18334] bond2: (slave macvlan9): Releasing backup interface
[  306.019546][T18336] lo speed is unknown, defaulting to 1000
[  306.022890][T18336] geneve0 speed is unknown, defaulting to 1000
[  306.075982][T18341] lo speed is unknown, defaulting to 1000
[  306.079308][T18341] geneve0 speed is unknown, defaulting to 1000
[  306.270440][T18347] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  306.274090][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.2.3085 Not tainted syzkaller #0 PREEMPT(full) 
[  306.274108][T18347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.274116][T18347] Call Trace:
[  306.274122][T18347]  <TASK>
[  306.274129][T18347]  dump_stack_lvl+0x189/0x250
[  306.274151][T18347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.274168][T18347]  ? __pfx__printk+0x10/0x10
[  306.274213][T18347]  ? kernfs_path_from_node+0x2f/0x290
[  306.274228][T18347]  ? kernfs_path_from_node+0x250/0x290
[  306.274240][T18347]  ? kernfs_path_from_node+0x2f/0x290
[  306.274256][T18347]  sysfs_warn_dup+0x8e/0xa0
[  306.274271][T18347]  sysfs_do_create_link_sd+0xc0/0x110
[  306.274287][T18347]  device_add_class_symlinks+0x1cf/0x240
[  306.274305][T18347]  device_add+0x475/0xb50
[  306.274321][T18347]  wiphy_register+0x1ba6/0x28d0
[  306.274355][T18347]  ? __pfx_wiphy_register+0x10/0x10
[  306.274373][T18347]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  306.274395][T18347]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  306.274414][T18347]  ieee80211_register_hw+0x3425/0x4080
[  306.274441][T18347]  ? ieee80211_register_hw+0x1461/0x4080
[  306.274462][T18347]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  306.274480][T18347]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.274503][T18347]  ? __hrtimer_setup+0x187/0x210
[  306.274515][T18347]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  306.274535][T18347]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  306.274575][T18347]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  306.274590][T18347]  ? trace_kmalloc+0x1f/0xd0
[  306.274604][T18347]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  306.274621][T18347]  ? kstrndup+0xbf/0x160
[  306.274642][T18347]  hwsim_new_radio_nl+0xea4/0x1b10
[  306.274662][T18347]  ? __pfx___nla_validate_parse+0x10/0x10
[  306.274700][T18347]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  306.274751][T18347]  ? __nla_parse+0x40/0x60
[  306.274772][T18347]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  306.274794][T18347]  genl_family_rcv_msg_doit+0x215/0x300
[  306.274813][T18347]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  306.274838][T18347]  ? bpf_lsm_capable+0x9/0x20
[  306.274855][T18347]  ? security_capable+0x7e/0x2e0
[  306.274878][T18347]  genl_rcv_msg+0x60e/0x790
[  306.274898][T18347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.274912][T18347]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  306.274939][T18347]  netlink_rcv_skb+0x208/0x470
[  306.274956][T18347]  ? __lock_acquire+0xab9/0xd20
[  306.274974][T18347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.274990][T18347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  306.275024][T18347]  ? down_read+0x1ad/0x2e0
[  306.275038][T18347]  genl_rcv+0x28/0x40
[  306.275051][T18347]  netlink_unicast+0x82f/0x9e0
[  306.275077][T18347]  ? __pfx_netlink_unicast+0x10/0x10
[  306.275095][T18347]  ? netlink_sendmsg+0x642/0xb30
[  306.275105][T18347]  ? skb_put+0x11b/0x210
[  306.275121][T18347]  netlink_sendmsg+0x805/0xb30
[  306.275140][T18347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.275155][T18347]  ? aa_sock_msg_perm+0xf1/0x1d0
[  306.275168][T18347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.275181][T18347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.275194][T18347]  __sock_sendmsg+0x21c/0x270
[  306.275214][T18347]  ____sys_sendmsg+0x505/0x830
[  306.275232][T18347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.275253][T18347]  ? import_iovec+0x74/0xa0
[  306.275271][T18347]  ___sys_sendmsg+0x21f/0x2a0
[  306.275287][T18347]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.275330][T18347]  ? __fget_files+0x2a/0x420
[  306.275341][T18347]  ? __fget_files+0x3a0/0x420
[  306.275361][T18347]  __x64_sys_sendmsg+0x19b/0x260
[  306.275377][T18347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.275406][T18347]  ? do_syscall_64+0xbe/0x3b0
[  306.275421][T18347]  do_syscall_64+0xfa/0x3b0
[  306.275431][T18347]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.275445][T18347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.275457][T18347]  ? exc_page_fault+0x9f/0xf0
[  306.275476][T18347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.275487][T18347] RIP: 0033:0x7f7af658ebe9
[  306.275499][T18347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.275510][T18347] RSP: 002b:00007f7af7427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.275524][T18347] RAX: ffffffffffffffda RBX: 00007f7af67c5fa0 RCX: 00007f7af658ebe9
[  306.275533][T18347] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  306.275541][T18347] RBP: 00007f7af6611e19 R08: 0000000000000000 R09: 0000000000000000
[  306.275548][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.275555][T18347] R13: 00007f7af67c6038 R14: 00007f7af67c5fa0 R15: 00007ffe02ec8dc8
[  306.275577][T18347]  </TASK>
[  306.557140][T18354] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  306.632276][T18360] __nla_validate_parse: 6 callbacks suppressed
[  306.632289][T18360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3088'.
[  306.747844][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'.
[  306.838909][T18373] netlink: 'syz.1.3092': attribute type 9 has an invalid length.
[  306.842092][T18373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3092'.
[  306.901964][T18380] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  306.987087][T18383] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.041029][T18386] netlink: 'syz.1.3096': attribute type 8 has an invalid length.
[  307.091355][T18390] netlink: 'syz.3.3098': attribute type 1 has an invalid length.
[  307.094777][T18390] netlink: 'syz.3.3098': attribute type 1 has an invalid length.
[  307.182153][T18399] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  307.205364][T18399] bond3: entered promiscuous mode
[  307.207484][T18399] bond3: entered allmulticast mode
[  307.209922][T18399] 8021q: adding VLAN 0 to HW filter on device bond3
[  307.218637][T18390] netlink: 'syz.3.3098': attribute type 1 has an invalid length.
[  307.230738][T18399] bond3: left promiscuous mode
[  307.245636][T18399] sctp: [Deprecated]: syz.1.3100 (pid 18399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.245636][T18399] Use struct sctp_sack_info instead
[  307.276417][T18390] 8021q: adding VLAN 0 to HW filter on device bond13
[  307.279747][T18397] mac80211_hwsim hwsim259 wlan0: left promiscuous mode
[  307.283290][T18397] bond13: (slave wlan0): Opening slave failed
[  307.298261][T18390] vlan0: entered allmulticast mode
[  307.301820][T18390] bond13: (slave vlan0): Opening slave failed
[  307.395865][T18403] block nbd0: server does not support multiple connections per device.
[  307.401073][T18403] block nbd0: shutting down sockets
[  307.629492][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3104'.
[  307.678837][T18423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'.
[  307.729668][T18423] bridge1: port 1(veth0_to_bond) entered blocking state
[  307.732479][T18423] bridge1: port 1(veth0_to_bond) entered disabled state
[  307.740787][T18423] veth0_to_bond: entered allmulticast mode
[  307.748962][T18423] veth0_to_bond: entered promiscuous mode
[  307.757150][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'.
[  307.766282][T18423] ipvlan2: entered allmulticast mode
[  307.768624][T18423] bridge1: port 2(ipvlan2) entered blocking state
[  307.771772][T18423] bridge1: port 2(ipvlan2) entered disabled state
[  307.977548][T18430] lo speed is unknown, defaulting to 1000
[  307.980305][T18430] geneve0 speed is unknown, defaulting to 1000
[  308.419336][T18445] mac80211_hwsim hwsim259 wlan0: entered promiscuous mode
[  308.422930][T18445] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  308.737575][T18433] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  308.740460][T18433] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  308.756432][T18433] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  308.761468][T18433] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  308.765587][T18433] CPU: 0 UID: 0 PID: 18433 Comm: syz.1.3107 Not tainted syzkaller #0 PREEMPT(full) 
[  308.769624][T18433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.773898][T18433] RIP: 0010:klist_remove+0x14a/0x340
[  308.776152][T18433] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 33 b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 33 b3 f6 49 8b 44 24 58 48 89 44 24 08
[  308.784102][T18433] RSP: 0018:ffffc90001bcf800 EFLAGS: 00010202
[  308.786683][T18433] RAX: 000000000000000b RBX: ffff88801dac9cc0 RCX: 0000000000000000
[  308.789959][T18433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  308.793338][T18433] RBP: ffffc90001bcf900 R08: ffffffff8f8a0943 R09: 1ffffffff1f14128
[  308.796575][T18433] R10: dffffc0000000000 R11: fffffbfff1f14129 R12: 0000000000000000
[  308.799856][T18433] R13: 1ffff1100cbf298c R14: ffff888065f94c60 R15: dffffc0000000000
[  308.803057][T18433] FS:  00007fd5315b46c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  308.806131][T18433] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.808372][T18433] CR2: 0000200000006040 CR3: 0000000067c2a000 CR4: 00000000000006f0
[  308.811072][T18433] Call Trace:
[  308.812247][T18433]  <TASK>
[  308.813199][T18433]  ? __pfx_klist_remove+0x10/0x10
[  308.814851][T18433]  ? __pfx_kobject_move+0x10/0x10
[  308.816599][T18433]  ? do_raw_spin_unlock+0x4d/0x240
[  308.818459][T18433]  ? get_device_parent+0x366/0x3a0
[  308.820293][T18433]  device_move+0x193/0x700
[  308.821840][T18433]  hci_conn_del_sysfs+0xb8/0x170
[  308.823557][T18433]  hci_conn_del+0xc33/0x11b0
[  308.825004][T18433]  hci_conn_hash_flush+0x191/0x230
[  308.826560][T18433]  hci_dev_close_sync+0xaef/0x1330
[  308.828258][T18433]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  308.830455][T18433]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.832892][T18433]  hci_dev_do_close+0x2f/0x90
[  308.834822][T18433]  hci_rfkill_set_block+0x21d/0x2e0
[  308.836797][T18433]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  308.838719][T18433]  rfkill_set_block+0x1d2/0x440
[  308.840649][T18433]  rfkill_fop_write+0x44b/0x570
[  308.842630][T18433]  ? __pfx_rfkill_fop_write+0x10/0x10
[  308.844877][T18433]  ? security_kernfs_init_security+0x270/0x290
[  308.847577][T18433]  ? rw_verify_area+0x255/0x4d0
[  308.849713][T18433]  ? __lock_acquire+0xab9/0xd20
[  308.851775][T18433]  ? __pfx_rfkill_fop_write+0x10/0x10
[  308.853959][T18433]  vfs_write+0x27e/0xb30
[  308.855762][T18433]  ? __pfx_vfs_write+0x10/0x10
[  308.857897][T18433]  ? __fget_files+0x2a/0x420
[  308.859929][T18433]  ? __fget_files+0x2a/0x420
[  308.861936][T18433]  ? __fget_files+0x3a0/0x420
[  308.863923][T18433]  ? __fget_files+0x2a/0x420
[  308.865870][T18433]  ksys_write+0x145/0x250
[  308.867720][T18433]  ? __pfx_ksys_write+0x10/0x10
[  308.869805][T18433]  ? do_syscall_64+0xbe/0x3b0
[  308.871776][T18433]  do_syscall_64+0xfa/0x3b0
[  308.873667][T18433]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.875864][T18433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.878387][T18433]  ? exc_page_fault+0x9f/0xf0
[  308.880339][T18433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.882831][T18433] RIP: 0033:0x7fd53078ebe9
[  308.884800][T18433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.892748][T18433] RSP: 002b:00007fd5315b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  308.896095][T18433] RAX: ffffffffffffffda RBX: 00007fd5309c6270 RCX: 00007fd53078ebe9
[  308.899298][T18433] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  308.902608][T18433] RBP: 00007fd530811e19 R08: 0000000000000000 R09: 0000000000000000
[  308.905864][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.909181][T18433] R13: 00007fd5309c6308 R14: 00007fd5309c6270 R15: 00007ffd00d6abb8
[  308.912575][T18433]  </TASK>
[  308.913917][T18433] Modules linked in:
[  308.916038][T18433] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  308.924491][T18433] RIP: 0010:klist_remove+0x14a/0x340
[  308.927089][T18433] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 33 b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 33 b3 f6 49 8b 44 24 58 48 89 44 24 08
[  308.944332][T18433] RSP: 0018:ffffc90001bcf800 EFLAGS: 00010202
[  308.947401][T18433] RAX: 000000000000000b RBX: ffff88801dac9cc0 RCX: 0000000000000000
[  308.950766][T18433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  308.965440][T18433] RBP: ffffc90001bcf900 R08: ffffffff8f8a0943 R09: 1ffffffff1f14128
[  308.969064][T18433] R10: dffffc0000000000 R11: fffffbfff1f14129 R12: 0000000000000000
[  308.972381][T18433] R13: 1ffff1100cbf298c R14: ffff888065f94c60 R15: dffffc0000000000
[  308.975321][T18433] FS:  00007fd5315b46c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  308.978613][T18433] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.981372][T18433] CR2: 00005566b2a667e8 CR3: 0000000067c2a000 CR4: 00000000000006f0
[  308.985077][T18433] Kernel panic - not syncing: Fatal exception
[  308.988266][T18433] Kernel Offset: disabled
[  308.989764][T18433] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:01:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000089e2 RDI=00000000000089e3 RBP=00000000000003f8 RSP=ffffc90001bcf030
R8 =ffff8880212d0237 R9 =1ffff1100425a046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd912 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd5315b46c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000006040 CR3=0000000067c2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0852d45d721923cc 2465dd8c801d546c
XMM02=a04b320c2456f0d0 e304b18ce28bcd08 XMM03=52d45d721923cc24 65dd8c801d546c16
XMM04=00007f7af72fd100 00007f7af6797460 XMM05=00007f7af6797478 00007f7af67974c0
XMM06=00007f7af67974b8 00007f7af67974b0 XMM07=00007f7af67974a8 00007f7af67974a0
XMM08=0000000000000000 00007f7af6612ee7 XMM09=0000000000000000 00007f7af6612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000ffea RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000ffea RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc90006ac7af8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81703490
R12=0000000010001e32 R13=dffffc0000000000 R14=000000000000ffea R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556125e500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9e5f21b440 CR3=000000003eb1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0852d45d721923cc 2465dd8c801d546c
XMM02=a04b320c2456f0d0 e304b18ce28bcd08 XMM03=52d45d721923cc24 65dd8c801d546c16
XMM04=00007f7af72fd100 00007f7af6797460 XMM05=00007f7af6797478 00007f7af67974c0
XMM06=00007f7af67974b8 00007f7af67974b0 XMM07=00007f7af67974a8 00007f7af67974a0
XMM08=0000000000000000 00007f7af6612ee7 XMM09=0000000000000000 00007f7af6612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
