last executing test programs:

3m56.883130093s ago: executing program 0 (id=874):
socket$inet6(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r5}, 0x18)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x4a3, @local, 0x4ef}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)

3m56.72412166s ago: executing program 0 (id=875):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0xc0}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2044001}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket(0x37, 0x2, 0x3)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x3ff, 0x8001, 0x6, 0x8, <r5=>0x0}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r5, 0x20, "3d3d1aaf9f59c7d753ae8575fef117a50eb3b1b3e1f88408214643c5873f01a2"}, &(0x7f0000000340)=0x28)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004980003c0000000000069078ac141400ac1e00018307d27f000001940400004404000000000000004f36059a52d1aad04cc97b44", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600000009078000022020000"], 0x0)

3m55.852984821s ago: executing program 0 (id=879):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4000) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) (async, rerun: 32)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32)
bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async)
listen(r6, 0x0)
listen(r5, 0x0) (async)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={<r7=>r2, 0x5, 0x5, 0x7d26faa2})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="000100000314000027bd7000fcdbdf250900020073797a320000000008004100727865001400330076657468305f746f5f7465616d0000000900020073797a30000000000800410072786500140033006d6163736563300000000000000000000900020073797a320000000008004100727865001400330070696d7265673100f3ffffff000000000900020073797a31000000000800410072786500140033007465616d300000000000000000000000096565d24e00020073797a3000000000080041007278650014003300776c616e30000000000000000800410072786500140033006d6163736563300000000000"], 0x100}, 0x1, 0x0, 0x0, 0x4010}, 0x4004)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {}, 0xfd}, 0x18) (async, rerun: 32)
connect$can_j1939(r8, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (rerun: 32)
sendmsg$can_j1939(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000852b1262fac55aa5e000000000000000f9ffffff00fe00000001000084080000000600000001000000030000000000feffffff2d000000"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) (rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB="463e9724d88fce633855e0970100cc3e14f65048d5163282ab1d9d701ee0b118ff8f2ad0ad4750eb8fddc60386defc68337805af2e59dd0090338d0fbda268f942fa6f091e86dafbb4600953bf7d40e8ec195bce6720422eba3f6a755fddabe6401513ce69b087958889ef3b0dd5ee7b0c8d98a34e2bb3b4938ca98ac53ed0"], 0x1c}}, 0x20000080)

3m55.716122936s ago: executing program 0 (id=880):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3m55.55409537s ago: executing program 0 (id=881):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200ff860000000000000000000001"], 0xfdef)

3m55.333884142s ago: executing program 0 (id=882):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa9ce246a80180c20000000800450000b00000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649e50f2dbc43efa8698dfa871c51852e4451b57d117ad3c045942824251d8ba0b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="3f000000010003", 0x7)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xc0000001, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05002bc87000fcdbdf2503000000060001004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

3m55.110471421s ago: executing program 32 (id=882):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa9ce246a80180c20000000800450000b00000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649e50f2dbc43efa8698dfa871c51852e4451b57d117ad3c045942824251d8ba0b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="3f000000010003", 0x7)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xc0000001, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05002bc87000fcdbdf2503000000060001004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

1.349249944s ago: executing program 1 (id=3810):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='net_cls.classid\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000040000900ffffffff45e888630000000004001f000800018004001f80100004800400658008008900", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYRESDEC=r6], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4048001}, 0x8000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newchain={0x68, 0x64, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x9, 0xfff1}, {0x0, 0x5}, {0x6, 0x7}}, [@TCA_CHAIN={0x3a, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x22, 0x2, 0x4}]}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendfile(r3, r3, 0x0, 0x2000000000000002)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800000201000000000000000280000000000005000000000600150007000000080005007f00000184b2"], 0x2c}}, 0x4000050)
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

1.347341606s ago: executing program 1 (id=3812):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x202}, 0x24}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f00000003c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRESOCT=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r10, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x400000000000247, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x480c0)
r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r13, 0x8004f50c, &(0x7f0000000240))
socket$unix(0x1, 0x1, 0x0)

1.151184245s ago: executing program 3 (id=3815):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r6)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
syz_emit_ethernet(0x583, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r9, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400f5a5d1f5e72520b06008fc24499953a8051639e459ee546f84b2223f8b86bfcab6380c58dbb4000000003bed7856c8a013a54c521e112018d817715dc2e4d7d101a9ec83f08f82b5d15a7dff9ba1028fa0c8b10385e0da043855620b6bd602a482c62d58030380d7076dce3115a00851f244d13ffc2ea4", @ANYRES16=0x0, @ANYBLOB="0100000000000000000006000009080004006401010008000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x20000090)
sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r3, 0x1)
r10 = socket(0x18, 0x2, 0x101)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)

959.015554ms ago: executing program 3 (id=3817):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffd7e)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x64, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = socket(0x1, 0x803, 0x0) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x44, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r15, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)

958.622413ms ago: executing program 3 (id=3818):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000800000000500000000100000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006728eecb24df216b3834be29328d4e25583f56fd4788e033c828ed27e6bb61556b332d69dd314252ca73f8e357a5b3ea1920c9610cc82314dc1c35d6847b4cb92191d212632931c0c87a46b6ab1e954fb30bf116eadd26607f10cce1953eea2eb178fc2c11eeafe2f84bdf496860999932bf3446875b4760d36f0be9c8a236ece7e3a9e281dd89beb0f1bb3657", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000380)="d6b8", 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xc5, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x88)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000000200000000000000000000000000000061e0b3f6b3e252de5772d331b743443f3611bc79bb61ad8388d4248d683c6d5ee88e3e272cf3c21e58c98f519dff595ea71420565ab713323c10b27facbf9526c4c0442cef2d0643532ba8304b02889dee42f96baf550624c7bee55d6cf226d0935f535e1372fb333d4ab3", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r4}, 0x38)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x9, 0x7fff}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8}}, @tmpl={0x4}]}, 0x128}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r8}, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x200, 0x70bd25, 0x25dfdbeb, {0x0, 0x0, 0x74, r8, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc0)
socket(0x23, 0x3, 0x7)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)

710.940795ms ago: executing program 3 (id=3821):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xbf}], 0x18}, 0x0) (async)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xbf}], 0x18}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}}], 0x1, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r8, 0x0, 0x0) (async)
bind$inet6(r8, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000060000002a0b000000000000ccbca46d019ca909065b3b8f0bc8d73f3bf9794342cee23ee37df360dceeb1f5d9455aee26f124fff6ac4cc0ee2e83097c980f4872c729e8f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r9, 0x5133c4bf67cd92a7}, 0x38)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x20000001)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000080)=ANY=[], 0xfdef) (async)
write$tun(r7, &(0x7f0000000080)=ANY=[], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

560.094908ms ago: executing program 3 (id=3824):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x40008, 0x800008}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = socket(0xa, 0x3, 0x2)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x50, 0xffffffffffffffff, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r4)
setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0)
socket$netlink(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r6, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c", 0x6b, 0x6000c804, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0x10, 0x3, 0x0)

559.222081ms ago: executing program 2 (id=3825):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r12=>0x0})
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r11, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r13=>0x0})
bind$packet(r10, &(0x7f0000000300)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000b40)={{r2}, "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"})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x62, &(0x7f0000000600)=ANY=[], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

420.353156ms ago: executing program 1 (id=3826):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f00000005c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xffffffbd)
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

419.656713ms ago: executing program 3 (id=3827):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00')
syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$packet(0x11, 0x2, 0x300)
unshare(0x2060200)
getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040))
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249686a289cdcc06d3d3dc082d8db8c4621a113177518601e882f2c04", 0x54}], 0x3)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @private0}, 0x1c)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x29}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="a7", 0x1}, {0x0, 0xc7}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002797da04457cd7402b0db624086f85ef989d62d6dfa4be3b1c42c6ab64694dd67e2a534ffae39a6a49539a92d0085144f3a5840bd2cddcbcbf90627a3772f91fa288ab51a805aadd436b86c4108be633a632c27a6bf8f811319772c24fcaea1349b45c56ef1cc54f0577970ffcdccebb95901e074664f41184b928c17d37e3b818b035f19d931d116d33018056733425fd6fcfa7dbbbe820937254552261f9d9f104cc235ea63ccd41bdd76f193424b0ec787e1fbdcc2a339659bdeb268368bafacca8c3626d43df50955", @ANYRES8=r6], 0x20, 0x2400e044}, 0x1)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r9, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)

308.167309ms ago: executing program 2 (id=3828):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r2, &(0x7f0000000680)=""/100, 0x64, 0x40000100, &(0x7f0000000740), 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x578}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050) (async)
setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x448}}, 0x0) (async)
sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) (async)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x31, 0x20, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
ppoll(&(0x7f00000000c0)=[{r7, 0x100a}, {r7, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0xfffffffffffffde3) (async)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r10, 0x8004b707, 0x0) (async)
connect$unix(r7, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000180)={0x20000010})

307.904444ms ago: executing program 1 (id=3829):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

254.489921ms ago: executing program 2 (id=3830):
socket$inet6(0xa, 0x1, 0x84) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400408}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x3c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000340)={0x0, 0x1})
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

253.838551ms ago: executing program 1 (id=3831):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000020000001c0012800900010062090064000000000c0000000009010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

252.679059ms ago: executing program 2 (id=3832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ec}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r13, 0x21eae}}, 0x20}}, 0x0)

148.793134ms ago: executing program 1 (id=3833):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3bffe2ffffbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b78000045a5000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000940)=""/110, 0x6e}], 0x3}, 0x8000}, {{&(0x7f0000000a00)=@ax25={{0x3, @rose}, [@null, @netrom, @remote, @rose, @bcast, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/119, 0x77}], 0x1, &(0x7f0000002b40)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000000d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/81, 0x51}, {&(0x7f0000000b40)=""/50, 0x32}, {&(0x7f0000000e80)=""/174, 0xae}], 0x3, &(0x7f0000000f80)=""/156, 0x9c}, 0x47ea}, {{&(0x7f0000001040)=@rc, 0x80, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/127, 0x7f}], 0x1, &(0x7f0000001180)=""/23, 0x17}, 0x4}], 0x4, 0x2, &(0x7f00000012c0))
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001540)={0x40, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x2c, 0x149, 0x0, 0x0, @binary="c1c17b53280c15c7e3f1df9dc1a1232b1c87c66214aa0f999de3498a3d0528e8b59935c31bc0cf91"}]}, 0x40}, {&(0x7f0000001440)={0xf0, 0x21, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@generic="4e0b1ce51060ffdb9c81349aed2b43fdf9616ce44c58b421d19c87d439894cc2ea886d3b8e12bab4e6f791772661efc0dac62c26e0891819be1cba52a31894450b626bdf6206ef98f9ddf06d47a282e334e3be3860f0d463b903cdac094e16b7c932413d041554b39d73965704ae71a171d4b7747d9c93ae4aaa107978f22f4b61c6ee0a27feeeb94736d92c0a38a577de", @nested={0x4, 0x72}, @generic="057fc4a1216793a3938dda6c0c2239a2fab2fa3a932b5c23c05ec11c337aaaa596eb260df93d745754e1091451db35836701129441c6919f72aeae360fc20ed733", @typed={0x8, 0x60, 0x0, 0x0, @uid}]}, 0xf0}, {&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xe4}], 0x3, 0x0, 0x0, 0x4000040}, 0x300)
sendmmsg$inet6(r1, &(0x7f0000002980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x7ff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="cd56a29e88ae991996c7820b022834a681dbabd667f730f5b9a88f0bf47645e343e59847432e05ef6809961e5cfe05c3682ea556eb95b06a40f640621a2d91dcc7e68374222c109411", 0x49}, {&(0x7f0000000200)="63ffcd86b3a7d7413b30ce26682c7853a118e7c8e89ee67802de6026c7485a83fa8319ae8daf9205b93eb53b1abfaf76f3acf78c69d7b4caede667f2a5810f9ad3638f62684fb8ba93686af56264e50bcd9260d7e744584dfe39dd3976204276a9ceced763cd5bb1b0a36cedaf642c995a50f04317fbd9459aa9285a753707317e64b186c8e716037eaeb2c03aa4c2ccbd81c0e16a28d6b34d69b5c66f16129917c064b601d40239dcf4f1bbbc7a605c596042997f59e13b7975b2d18ae1", 0xbe}, {&(0x7f00000002c0)="f57d043b14eb3d20b97744498eeb0c3c6c9617976631f514c0492e88c5eb5777d5e4b7097345f360077d8b5676d8db2e00dfdc4d49e425d6a86a988a1942", 0x3e}, {&(0x7f0000000300)="b056002d307cfbe3eeaaca77627f10431d29a9702df81cb9e1bda49ccf9d4eb7ecbd221731c1b27c43138fb9878204963ecf7b63402bdf99e7e2a2929de933c1269426e7c7f3b52ec9a2210c7bee98412942b59c570f60249800d9307d4a248209b914d85b9c943c0fc2bd42c5b35ee9ad8254c60601ff178c1a0f1344a80ac130442e4c1a2b66c4c39530176f78b98d0096a7dc092cf15076c3b638976963171248551b6bc06b5a1e7504418a473ec7a2b6a0f0ccd27d7870ef171b5dca22777fe20afc79f24e6412ede82a7f86e20aeb4c72cc3362589138cac16a0026ec6a5fb6", 0xe2}, {&(0x7f0000000400)="423ba58f2d6b461d2c98b612e40b3b6bd246498e0c633ba90e6efa31f22a3df5aaf62edd594fed81c85ac72b7daca3ccb82b94fd85724d8364a744e99e05554695f04cae9a6534a7c313939b2fa3bb5e74f0b76cab1c", 0x56}], 0x5, &(0x7f00000006c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @hopopts={{0x40, 0x29, 0x36, {0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @empty}]}}}], 0x58}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000780)="1cd6cb9ac71b9f1bab2658cc0f718d532a4cdb220b90714d1785fa4c20ecef9cfbeed2d64fca6d088abd04dbbe08f18f939bca567547139e7212ab592697f539", 0x40}, {&(0x7f00000007c0)="f97a967481e4d6cc36da70d876912f4a84048ba5063e6ef7c02d5c2008a6e768e7057e03d2e949fda6090b51d75cf9161dc38ff3cc89fda0940304743298ecbf794b57e9e4f80fa8d85f0cef9f9468158beb2a38903cb5c20288cf08ab06ed99d5baf4a1e5499296ffca657040cec61efd8fb30d0484e1f3bf37261c66e58eba7bee939eadc5fec7d33297e992bac99ecaa8243d33c5fa3a7daa6d9ab01483452a30f357f75b798500e567e77d7e7d24d4abdb57e00ebbf4080a7aa7", 0xbc}, {&(0x7f0000000880)="6f0015", 0x3}], 0x3}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001a40), 0x0, &(0x7f0000002b40)=ANY=[], 0x118}}, {{&(0x7f0000001bc0)={0xa, 0x4e23, 0x6, @private0, 0xe0d}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="5fc935659040d11ece2070b33dae41a8271ae1b8b9207bc9d13ea80841a8f4e1ace56b8f4c1fb47e10c376f4ed8eead3bdc17c73964c6e65b9f8934e4b6b7cb6a2d8e3076c1cd9a6c7b4825dfa7b7c0d3135331b21b7b75d7a5988dae3d138fccdd85ca90d5ebdb0b8", 0x69}, {&(0x7f0000001c80)="2ae2cace52f1e8482e8f57569f02991dd6fcaf8c0f53219b72a58b8c7307c2e304dd5ca0d3b937", 0x27}], 0x2, &(0x7f0000001d00)}}, {{&(0x7f0000001ec0)={0xa, 0x4e23, 0xb, @private0, 0x9}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f00)="a42f93767b3b9970f25322dc94e54b4116de78f703f81717a1d0d93fb2cd9217bd43fe9af80e22e77d70885ff8f54c8c1d319030f6ead00aa58484c5ac59ee63df1baf07b3f4c68b8be734228c9d2de270fcd318eb3f0cee1e92c8caec0c26918b19f31dee79a588", 0x68}, {&(0x7f0000001f80)="9ac68b18e013daa65dae0de5dda36e0e7e3b1479c7e0f69dc3dc6b6ac449a4b375c46209782c81ce86b88040f36817fcf3bb7bde3ebc3ebb5f3617e3cbac19e439070832ebbd2bade28684ae3ab6dfacf8e1378f7ee58073c49633ee2cb15c53f2750947310d61b70b68ec69368eb217a24a6d811887921b1faaaf124b3b5a080cce31bae1e36e78b6a1f54647682ca2820a86b09fb06a64ccf590df6fea9a29f1c8663df609f3fd77e6b1c27d5a30ac086130fa4d1591faf2ddccfe49257dd064ff0c738ceceea601601224f4098d55036e2411edc5394aacd1229b4a4ca277615b305c481e4002458ee15d5d5f4386fcaffe95c6", 0xf5}], 0x2, &(0x7f0000000b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x0, 0x0, [@mcast2, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x68, 0x27, '\x00', [@pad1, @generic={0x3, 0xeb, "3c3a832455661b508e7b8f62c6d4f7cd79687fa61045da95e3b2ec78c57c8d2eb83cb649028d0ac3c27f109ed05b5bdb2744203808fe1c1872b480fec469573cae86184140ef4f35dd54b043f0a6286c218903404f8302a5ff575394f33fbeb15b8d0b5d626a9fa8fba632d51597e22608d7751c8a4a8598e5b15f93f3164cacc35884177fbf6ff9b57ec17b6f2146c1b6bb7711f09a0eee55b3c042166e22d776fb5a0497e550e015a8f3e31d186b7da79e303ebc9ac36190861d92e75488f50dd1f69f83726c78dcf5ac242660c17b3d6a6ec5a97ff1eaa4fb48df883aa4c3ea0043367c3d1e9e67b208"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x8, {0x0, 0x0, 0x80, 0xa1}}, @generic={0x20, 0x3b, "d62e7525a0b10b8fd477889a4d1b08743e73fc3b972403114656ea9cf7582845586f6223f2bdbc37fa4534c019384ddf79ae02da7d0bc83e3b56b2"}]}}}], 0x1c8}}, {{&(0x7f0000002180)={0xa, 0x4e21, 0x12e, @loopback, 0x10001}, 0x1c, &(0x7f0000002380)=[{&(0x7f00000021c0)="5b22f3358dc681d9fc6e91c9b4f747e1c0ed760f87b2b77c5249baeca7f373de9af3729857c760cdfb2e930cf0b2745137323e091682a67cdfde9b2787e66093a5969bd5c00cb629877762790ae20ddfc4f7ab6e66d6e77972ec4e34b0594d2a78e400a8dd55500e5abea31e619a6757f0a51365609dca914f57ac3209be184ab232acc897916f5ed9dde5090290ea825483bff2ccbf546e5f1603283fe5974cba2f", 0xa2}, {&(0x7f0000002280)="d68ec46e1ff9c2fbbc6a288d666618655f990077b2b77e80275150b0821f1ae1fb3faba568b109f3251e3755995087871875e0e05ce9d7373e1baee65f4a59c9c79fd71c6a3859acd799beefc869af6575cacf60c745cb247613fdc6f41fffd2060122d3c9f05974d5b5723424ede041b3570cf2ef8b7f425a80b8f5b6883c9aa092ca56f9a668f98cd0174da871aeadd18f40c498f16f785a77bef6eaa7036b20fbd3fead6553a8c8dac8aaa18a57509f4b736742d69991eeaebaf9a830b27698c1a4a420cfd5b85e93040924dde1e06dd3368fcd8339514fc619b34497886fa8ced7f30662151f72f5a6fdcad5f63518a9f7f0f4fc90b914dc", 0xfa}], 0x2, &(0x7f0000002500)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x21, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x75, "3e2ed3ebef52da2b55c2b7572f7ea255a2f475299d2f43a5ab805c8b814bdc49553c9f5b8fd5f26e44b525fd5093fba561ce875e49e95c32243c3b62b97edab565106617097b4722e661672ac4dfc1bee910630cd3ac81d473404cf0cffd67cdf1dcd9c4ff600a5b748309df733d6451b65bd118a7"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe7}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0xe0}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x5, @empty, 0x10}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002640)="2181ed494d3a418e25afa433f300c4dc916ebac9c35be6fc2c17489d800b439b50d3e660925e8c619b2127ab5cb5c7a551ef8a21b3235a3bbcb12b162eb36272fce5511f57013a50b01f47dc4576cc245b81214a0638d307054bcdf770f97cedf23b3268a4f7fe32791bb5abc56411d0a0aa52e181e1b1ae14924f12b61eb8a993c3f7d50b242462311413b9718e91ac19f25ff21aa72e2e81543b0eef148db0a777334f08e9dedb2cc97cda7b97546eec7d274b1caa665a54161ba47e9b25625f45f3a9394bbc7c1c2b3a3c4f142ac2b568341caf34fba6e464cb24c842bf19fbaefeda8b6140071ce000da2ff7893c079b400008", 0xf5}], 0x1, &(0x7f0000000940)}}], 0x7, 0x40020)

1.06857ms ago: executing program 2 (id=3834):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r0, 0x0, 0x2c, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)
socket(0x1e, 0x4, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYRESDEC], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="04002780a6baa71b38fe4e1400f400ff010000000000000000000000000001000000"], 0x120}], 0x1}, 0x300)

0s ago: executing program 2 (id=3835):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
socket(0x15, 0x5, 0x0) (async)
r3 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead0"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) (async)
sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) (async)
sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

63] CPU: 1 UID: 0 PID: 17063 Comm: syz.2.2715 Not tainted syzkaller #0 PREEMPT(full) 
[  277.943856][T17063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.943861][T17063] Call Trace:
[  277.943864][T17063]  <TASK>
[  277.943868][T17063]  dump_stack_lvl+0x189/0x250
[  277.943883][T17063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.943892][T17063]  ? __pfx__printk+0x10/0x10
[  277.943904][T17063]  ? kernfs_path_from_node+0x2f/0x290
[  277.943913][T17063]  ? kernfs_path_from_node+0x250/0x290
[  277.943919][T17063]  ? kernfs_path_from_node+0x2f/0x290
[  277.943953][T17063]  sysfs_warn_dup+0x8e/0xa0
[  277.943963][T17063]  sysfs_do_create_link_sd+0xc0/0x110
[  277.943972][T17063]  device_add_class_symlinks+0x1cf/0x240
[  277.943982][T17063]  device_add+0x475/0xb50
[  277.943991][T17063]  wiphy_register+0x1ba6/0x28d0
[  277.944010][T17063]  ? __pfx_wiphy_register+0x10/0x10
[  277.944020][T17063]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  277.944031][T17063]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  277.944041][T17063]  ieee80211_register_hw+0x3425/0x4080
[  277.944056][T17063]  ? ieee80211_register_hw+0x1461/0x4080
[  277.944067][T17063]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  277.944077][T17063]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.944090][T17063]  ? __hrtimer_setup+0x187/0x210
[  277.944097][T17063]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  277.944108][T17063]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  277.944128][T17063]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  277.944136][T17063]  ? trace_kmalloc+0x1f/0xd0
[  277.944143][T17063]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  277.944152][T17063]  ? kstrndup+0xbf/0x160
[  277.944163][T17063]  hwsim_new_radio_nl+0xea4/0x1b10
[  277.944172][T17063]  ? __pfx___nla_validate_parse+0x10/0x10
[  277.944189][T17063]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.944204][T17063]  ? __nla_parse+0x40/0x60
[  277.944216][T17063]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  277.944228][T17063]  genl_family_rcv_msg_doit+0x215/0x300
[  277.944239][T17063]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  277.944252][T17063]  ? bpf_lsm_capable+0x9/0x20
[  277.944260][T17063]  ? security_capable+0x7e/0x2e0
[  277.944272][T17063]  genl_rcv_msg+0x60e/0x790
[  277.944283][T17063]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.944290][T17063]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.944304][T17063]  netlink_rcv_skb+0x208/0x470
[  277.944314][T17063]  ? __lock_acquire+0xab9/0xd20
[  277.944324][T17063]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.944332][T17063]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.944349][T17063]  ? down_read+0x1ad/0x2e0
[  277.944357][T17063]  genl_rcv+0x28/0x40
[  277.944364][T17063]  netlink_unicast+0x82f/0x9e0
[  277.944376][T17063]  ? __pfx_netlink_unicast+0x10/0x10
[  277.944386][T17063]  ? netlink_sendmsg+0x642/0xb30
[  277.944391][T17063]  ? skb_put+0x11b/0x210
[  277.944400][T17063]  netlink_sendmsg+0x805/0xb30
[  277.944410][T17063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.944417][T17063]  ? aa_sock_msg_perm+0xf1/0x1d0
[  277.944425][T17063]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.944432][T17063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.944438][T17063]  __sock_sendmsg+0x21c/0x270
[  277.944449][T17063]  ____sys_sendmsg+0x505/0x830
[  277.944459][T17063]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.944470][T17063]  ? import_iovec+0x74/0xa0
[  277.944479][T17063]  ___sys_sendmsg+0x21f/0x2a0
[  277.944488][T17063]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.944510][T17063]  ? __fget_files+0x2a/0x420
[  277.944515][T17063]  ? __fget_files+0x3a0/0x420
[  277.944526][T17063]  __x64_sys_sendmsg+0x19b/0x260
[  277.944534][T17063]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.944546][T17063]  ? rcu_is_watching+0x15/0xb0
[  277.944555][T17063]  ? do_syscall_64+0xbe/0x3b0
[  277.944563][T17063]  do_syscall_64+0xfa/0x3b0
[  277.944568][T17063]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.944578][T17063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.944584][T17063]  ? exc_page_fault+0x9f/0xf0
[  277.944594][T17063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.944600][T17063] RIP: 0033:0x7f34be38ebe9
[  277.944608][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.944614][T17063] RSP: 002b:00007f34bc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.944622][T17063] RAX: ffffffffffffffda RBX: 00007f34be5c5fa0 RCX: 00007f34be38ebe9
[  277.944627][T17063] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  277.944632][T17063] RBP: 00007f34be411e19 R08: 0000000000000000 R09: 0000000000000000
[  277.944636][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.944640][T17063] R13: 00007f34be5c6038 R14: 00007f34be5c5fa0 R15: 00007ffce6c65a88
[  277.944651][T17063]  </TASK>
[  278.528002][T17091] lo speed is unknown, defaulting to 1000
[  278.817862][T17115] lo speed is unknown, defaulting to 1000
[  278.992051][T17117] validate_nla: 7 callbacks suppressed
[  278.992080][T17117] netlink: 'syz.3.2725': attribute type 2 has an invalid length.
[  279.352735][T17134] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001
[  279.459683][T17141] lo speed is unknown, defaulting to 1000
[  279.747031][T17155] lo speed is unknown, defaulting to 1000
[  279.831079][T17158] netlink: 'syz.1.2732': attribute type 6 has an invalid length.
[  280.119269][T17171] team0: Unable to change to the same mode the team is in
[  280.123521][T17171] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  280.162751][T17181] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  280.312685][T17187] bond1: (slave macvlan5): Releasing backup interface
[  280.446835][T17187] netlink: 'syz.1.2739': attribute type 10 has an invalid length.
[  280.594870][T17204] netlink: 'syz.3.2741': attribute type 10 has an invalid length.
[  280.618511][T17206] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  280.621960][T17206] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  280.673122][T17206] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  280.687484][T17206] 8021q: adding VLAN 0 to HW filter on device bond21
[  280.692589][T17206] bond21: (slave wlan0): Opening slave failed
[  280.798050][T17209] __nla_validate_parse: 21 callbacks suppressed
[  280.798065][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'.
[  280.807455][T17209] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  280.811061][T17209] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  280.838417][T17215] netlink: 'syz.2.2744': attribute type 10 has an invalid length.
[  280.842699][T17215] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2744'.
[  280.847027][T17215] 8021q: adding VLAN 0 to HW filter on device team0
[  280.905687][T17219] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  280.924596][T17219] bond22: entered promiscuous mode
[  280.926871][T17219] bond22: entered allmulticast mode
[  280.936152][T17219] bridge10: entered promiscuous mode
[  280.938184][T17219] bridge10: entered allmulticast mode
[  281.241282][T17237] netlink: 'syz.2.2749': attribute type 8 has an invalid length.
[  281.299719][T17241] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2750'.
[  281.432911][T17247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2752'.
[  281.437683][T17244] 8021q: adding VLAN 0 to HW filter on device bond9
[  281.497541][T17244] vlan0: left promiscuous mode
[  281.499822][T17244] veth1: left promiscuous mode
[  281.724120][T17252] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2753'.
[  281.872599][T17263] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2757'.
[  281.886257][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'.
[  282.147528][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'.
[  282.157304][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2762'.
[  282.192329][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  282.217563][T17285] tipc: Resetting bearer <eth:team0>
[  282.226356][T17291] lo speed is unknown, defaulting to 1000
[  282.326808][T17298] lo speed is unknown, defaulting to 1000
[  282.345203][T17304] syzkaller0: entered promiscuous mode
[  282.347056][T17304] syzkaller0: entered allmulticast mode
[  282.537040][T17306] smc: net device bond0 applied user defined pnetid SYZ2
[  282.559872][T17312] lo speed is unknown, defaulting to 1000
[  282.819296][T17317] lo speed is unknown, defaulting to 1000
[  283.574003][T17354] lo speed is unknown, defaulting to 1000
[  283.651583][T17356] ieee802154 phy1 wpan1: encryption failed: -22
[  283.659166][T17356] team0: Mode changed to "loadbalance"
[  283.706186][T17365] mac80211_hwsim hwsim187 wlan0: entered promiscuous mode
[  283.708684][T17365] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  283.716274][T17363] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  283.718752][T17363] CPU: 1 UID: 0 PID: 17363 Comm: syz.1.2781 Not tainted syzkaller #0 PREEMPT(full) 
[  283.718765][T17363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.718777][T17363] Call Trace:
[  283.718780][T17363]  <TASK>
[  283.718784][T17363]  dump_stack_lvl+0x189/0x250
[  283.718797][T17363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.718806][T17363]  ? __pfx__printk+0x10/0x10
[  283.718817][T17363]  ? kernfs_path_from_node+0x2f/0x290
[  283.718825][T17363]  ? kernfs_path_from_node+0x250/0x290
[  283.718831][T17363]  ? kernfs_path_from_node+0x2f/0x290
[  283.718840][T17363]  sysfs_warn_dup+0x8e/0xa0
[  283.718848][T17363]  sysfs_do_create_link_sd+0xc0/0x110
[  283.718856][T17363]  device_add_class_symlinks+0x1cf/0x240
[  283.718884][T17363]  device_add+0x475/0xb50
[  283.718895][T17363]  wiphy_register+0x1ba6/0x28d0
[  283.718913][T17363]  ? __pfx_wiphy_register+0x10/0x10
[  283.718922][T17363]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  283.718933][T17363]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  283.718943][T17363]  ieee80211_register_hw+0x3425/0x4080
[  283.718958][T17363]  ? ieee80211_register_hw+0x1461/0x4080
[  283.718969][T17363]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  283.718978][T17363]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.718991][T17363]  ? __hrtimer_setup+0x187/0x210
[  283.718998][T17363]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  283.719010][T17363]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  283.719031][T17363]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  283.719038][T17363]  ? trace_kmalloc+0x1f/0xd0
[  283.719046][T17363]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.719055][T17363]  ? kstrndup+0xbf/0x160
[  283.719067][T17363]  hwsim_new_radio_nl+0xea4/0x1b10
[  283.719077][T17363]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.719093][T17363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.719107][T17363]  ? __nla_parse+0x40/0x60
[  283.719117][T17363]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.719130][T17363]  genl_family_rcv_msg_doit+0x215/0x300
[  283.719140][T17363]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.719154][T17363]  ? bpf_lsm_capable+0x9/0x20
[  283.719163][T17363]  ? security_capable+0x7e/0x2e0
[  283.719175][T17363]  genl_rcv_msg+0x60e/0x790
[  283.719185][T17363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.719193][T17363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.719207][T17363]  netlink_rcv_skb+0x208/0x470
[  283.719216][T17363]  ? __lock_acquire+0xab9/0xd20
[  283.719226][T17363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.719234][T17363]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.719252][T17363]  ? down_read+0x1ad/0x2e0
[  283.719260][T17363]  genl_rcv+0x28/0x40
[  283.719267][T17363]  netlink_unicast+0x82f/0x9e0
[  283.719279][T17363]  ? __pfx_netlink_unicast+0x10/0x10
[  283.719288][T17363]  ? netlink_sendmsg+0x642/0xb30
[  283.719294][T17363]  ? skb_put+0x11b/0x210
[  283.719302][T17363]  netlink_sendmsg+0x805/0xb30
[  283.719312][T17363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.719320][T17363]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.719328][T17363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.719335][T17363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.719341][T17363]  __sock_sendmsg+0x21c/0x270
[  283.719352][T17363]  ____sys_sendmsg+0x505/0x830
[  283.719362][T17363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.719373][T17363]  ? import_iovec+0x74/0xa0
[  283.719383][T17363]  ___sys_sendmsg+0x21f/0x2a0
[  283.719392][T17363]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.719414][T17363]  ? __fget_files+0x2a/0x420
[  283.719420][T17363]  ? __fget_files+0x3a0/0x420
[  283.719430][T17363]  __x64_sys_sendmsg+0x19b/0x260
[  283.719439][T17363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.719450][T17363]  ? rcu_is_watching+0x15/0xb0
[  283.719459][T17363]  ? do_syscall_64+0xbe/0x3b0
[  283.719468][T17363]  do_syscall_64+0xfa/0x3b0
[  283.719473][T17363]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.719482][T17363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.719490][T17363]  ? exc_page_fault+0x9f/0xf0
[  283.719500][T17363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.719506][T17363] RIP: 0033:0x7f067898ebe9
[  283.719514][T17363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.719520][T17363] RSP: 002b:00007f0679803038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.719528][T17363] RAX: ffffffffffffffda RBX: 00007f0678bc6180 RCX: 00007f067898ebe9
[  283.719533][T17363] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000008a
[  283.719538][T17363] RBP: 00007f0678a11e19 R08: 0000000000000000 R09: 0000000000000000
[  283.719542][T17363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.719546][T17363] R13: 00007f0678bc6218 R14: 00007f0678bc6180 R15: 00007ffe5e99f888
[  283.719558][T17363]  </TASK>
[  284.184436][T17373] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  284.192135][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.3.2784 Not tainted syzkaller #0 PREEMPT(full) 
[  284.192153][T17373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.192161][T17373] Call Trace:
[  284.192167][T17373]  <TASK>
[  284.192172][T17373]  dump_stack_lvl+0x189/0x250
[  284.192195][T17373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.192211][T17373]  ? __pfx__printk+0x10/0x10
[  284.192232][T17373]  ? kernfs_path_from_node+0x2f/0x290
[  284.192246][T17373]  ? kernfs_path_from_node+0x250/0x290
[  284.192257][T17373]  ? kernfs_path_from_node+0x2f/0x290
[  284.192273][T17373]  sysfs_warn_dup+0x8e/0xa0
[  284.192286][T17373]  sysfs_do_create_link_sd+0xc0/0x110
[  284.192301][T17373]  device_add_class_symlinks+0x1cf/0x240
[  284.192318][T17373]  device_add+0x475/0xb50
[  284.192334][T17373]  wiphy_register+0x1ba6/0x28d0
[  284.192366][T17373]  ? __pfx_wiphy_register+0x10/0x10
[  284.192384][T17373]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  284.192404][T17373]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  284.192421][T17373]  ieee80211_register_hw+0x3425/0x4080
[  284.192448][T17373]  ? ieee80211_register_hw+0x1461/0x4080
[  284.192467][T17373]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  284.192484][T17373]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  284.192506][T17373]  ? __hrtimer_setup+0x187/0x210
[  284.192517][T17373]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  284.192537][T17373]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  284.192576][T17373]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  284.192591][T17373]  ? trace_kmalloc+0x1f/0xd0
[  284.192605][T17373]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  284.192621][T17373]  ? kstrndup+0xbf/0x160
[  284.192642][T17373]  hwsim_new_radio_nl+0xea4/0x1b10
[  284.192661][T17373]  ? __pfx___nla_validate_parse+0x10/0x10
[  284.192702][T17373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  284.192730][T17373]  ? __nla_parse+0x40/0x60
[  284.192752][T17373]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  284.192776][T17373]  genl_family_rcv_msg_doit+0x215/0x300
[  284.192798][T17373]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  284.192825][T17373]  ? bpf_lsm_capable+0x9/0x20
[  284.192842][T17373]  ? security_capable+0x7e/0x2e0
[  284.192906][T17373]  genl_rcv_msg+0x60e/0x790
[  284.192926][T17373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  284.192940][T17373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  284.192967][T17373]  netlink_rcv_skb+0x208/0x470
[  284.192983][T17373]  ? __lock_acquire+0xab9/0xd20
[  284.193001][T17373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  284.193017][T17373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  284.193049][T17373]  ? down_read+0x1ad/0x2e0
[  284.193064][T17373]  genl_rcv+0x28/0x40
[  284.193077][T17373]  netlink_unicast+0x82f/0x9e0
[  284.193101][T17373]  ? __pfx_netlink_unicast+0x10/0x10
[  284.193118][T17373]  ? netlink_sendmsg+0x642/0xb30
[  284.193128][T17373]  ? skb_put+0x11b/0x210
[  284.193144][T17373]  netlink_sendmsg+0x805/0xb30
[  284.193164][T17373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.193179][T17373]  ? aa_sock_msg_perm+0xf1/0x1d0
[  284.193193][T17373]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  284.193205][T17373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.193218][T17373]  __sock_sendmsg+0x21c/0x270
[  284.193237][T17373]  ____sys_sendmsg+0x505/0x830
[  284.193255][T17373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  284.193277][T17373]  ? import_iovec+0x74/0xa0
[  284.193294][T17373]  ___sys_sendmsg+0x21f/0x2a0
[  284.193309][T17373]  ? __pfx____sys_sendmsg+0x10/0x10
[  284.193352][T17373]  ? __fget_files+0x2a/0x420
[  284.193362][T17373]  ? __fget_files+0x3a0/0x420
[  284.193381][T17373]  __x64_sys_sendmsg+0x19b/0x260
[  284.193397][T17373]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  284.193418][T17373]  ? rcu_is_watching+0x15/0xb0
[  284.193435][T17373]  ? do_syscall_64+0xbe/0x3b0
[  284.193450][T17373]  do_syscall_64+0xfa/0x3b0
[  284.193459][T17373]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.193476][T17373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.193487][T17373]  ? exc_page_fault+0x9f/0xf0
[  284.193505][T17373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.193517][T17373] RIP: 0033:0x7fe48998ebe9
[  284.193528][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.193539][T17373] RSP: 002b:00007fe48a8f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.193554][T17373] RAX: ffffffffffffffda RBX: 00007fe489bc5fa0 RCX: 00007fe48998ebe9
[  284.193563][T17373] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  284.193570][T17373] RBP: 00007fe489a11e19 R08: 0000000000000000 R09: 0000000000000000
[  284.193578][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.193584][T17373] R13: 00007fe489bc6038 R14: 00007fe489bc5fa0 R15: 00007ffde2c25538
[  284.193606][T17373]  </TASK>
[  284.395367][T17380] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  284.439520][T17380] validate_nla: 14 callbacks suppressed
[  284.439529][T17380] netlink: 'syz.2.2786': attribute type 27 has an invalid length.
[  284.546444][T17388] netlink: 'syz.3.2788': attribute type 8 has an invalid length.
[  284.588374][T17387] lo speed is unknown, defaulting to 1000
[  284.801442][T17390] netlink: 'syz.1.2790': attribute type 2 has an invalid length.
[  284.897223][T17393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.234959][T17414] netlink: 'syz.3.2795': attribute type 10 has an invalid length.
[  285.328927][T17418] team0: Unable to change to the same mode the team is in
[  285.332446][T17418] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  285.570037][T17436] netlink: 'syz.2.2802': attribute type 4 has an invalid length.
[  285.573729][T17436] tipc: Resetting bearer <eth:team0>
[  285.668937][T17440] lo speed is unknown, defaulting to 1000
[  286.079695][T17457] netlink: 'syz.2.2807': attribute type 1 has an invalid length.
[  286.188921][T17457] 8021q: adding VLAN 0 to HW filter on device bond24
[  286.231221][T17464] __nla_validate_parse: 19 callbacks suppressed
[  286.231231][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2810'.
[  286.253813][T17465] lo speed is unknown, defaulting to 1000
[  286.256476][T17461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  286.264276][T17464] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2810'.
[  286.327510][T17467] vlan1: entered promiscuous mode
[  286.329269][T17467] hsr_slave_1: entered promiscuous mode
[  286.332723][T17467] vlan1: entered allmulticast mode
[  286.334594][T17467] hsr_slave_1: entered allmulticast mode
[  286.386396][T17471] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2812'.
[  286.404665][T17469] lo speed is unknown, defaulting to 1000
[  286.422553][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'.
[  286.643486][T17480] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2813'.
[  286.752216][T17488] netlink: 'syz.2.2815': attribute type 1 has an invalid length.
[  286.841245][T17488] 8021q: adding VLAN 0 to HW filter on device bond25
[  286.846527][T17491] lo speed is unknown, defaulting to 1000
[  286.851443][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'.
[  286.916358][T17488] veth11: entered promiscuous mode
[  286.932569][T17488] bond25: (slave veth11): Enslaving as a backup interface with a down link
[  287.020231][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'.
[  287.211811][T17504] netlink: 'syz.2.2819': attribute type 6 has an invalid length.
[  287.235187][T17495] netlink: 'syz.1.2816': attribute type 2 has an invalid length.
[  287.322904][T17504] netlink: 'syz.2.2819': attribute type 12 has an invalid length.
[  287.326127][T17504] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2819'.
[  287.407566][T17491] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2816'.
[  287.701226][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'.
[  287.981610][T17535] 8021q: adding VLAN 0 to HW filter on device bond10
[  288.008046][T17537] mac80211_hwsim hwsim187 wlan0: left promiscuous mode
[  288.016221][T17537] bond10: (slave wlan0): Opening slave failed
[  288.172932][T17553] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  288.177455][T17553] CPU: 0 UID: 0 PID: 17553 Comm: syz.1.2830 Not tainted syzkaller #0 PREEMPT(full) 
[  288.177466][T17553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.177471][T17553] Call Trace:
[  288.177475][T17553]  <TASK>
[  288.177479][T17553]  dump_stack_lvl+0x189/0x250
[  288.177493][T17553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.177503][T17553]  ? __pfx__printk+0x10/0x10
[  288.177515][T17553]  ? kernfs_path_from_node+0x2f/0x290
[  288.177525][T17553]  ? kernfs_path_from_node+0x250/0x290
[  288.177532][T17553]  ? kernfs_path_from_node+0x2f/0x290
[  288.177542][T17553]  sysfs_warn_dup+0x8e/0xa0
[  288.177550][T17553]  sysfs_do_create_link_sd+0xc0/0x110
[  288.177559][T17553]  device_add_class_symlinks+0x1cf/0x240
[  288.177570][T17553]  device_add+0x475/0xb50
[  288.177579][T17553]  wiphy_register+0x1ba6/0x28d0
[  288.177605][T17553]  ? __pfx_wiphy_register+0x10/0x10
[  288.177619][T17553]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  288.177636][T17553]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  288.177651][T17553]  ieee80211_register_hw+0x3425/0x4080
[  288.177673][T17553]  ? ieee80211_register_hw+0x1461/0x4080
[  288.177684][T17553]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  288.177693][T17553]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  288.177706][T17553]  ? __hrtimer_setup+0x187/0x210
[  288.177713][T17553]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  288.177724][T17553]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  288.177747][T17553]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  288.177755][T17553]  ? trace_kmalloc+0x1f/0xd0
[  288.177763][T17553]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  288.177772][T17553]  ? kstrndup+0xbf/0x160
[  288.177783][T17553]  hwsim_new_radio_nl+0xea4/0x1b10
[  288.177794][T17553]  ? __pfx___nla_validate_parse+0x10/0x10
[  288.177811][T17553]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  288.177854][T17553]  ? __nla_parse+0x40/0x60
[  288.177874][T17553]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  288.177891][T17553]  genl_family_rcv_msg_doit+0x215/0x300
[  288.177903][T17553]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  288.177918][T17553]  ? bpf_lsm_capable+0x9/0x20
[  288.177931][T17553]  ? security_capable+0x7e/0x2e0
[  288.177951][T17553]  genl_rcv_msg+0x60e/0x790
[  288.177969][T17553]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.177976][T17553]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  288.177991][T17553]  netlink_rcv_skb+0x208/0x470
[  288.178000][T17553]  ? __lock_acquire+0xab9/0xd20
[  288.178009][T17553]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.178018][T17553]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  288.178035][T17553]  ? down_read+0x1ad/0x2e0
[  288.178043][T17553]  genl_rcv+0x28/0x40
[  288.178051][T17553]  netlink_unicast+0x82f/0x9e0
[  288.178072][T17553]  ? __pfx_netlink_unicast+0x10/0x10
[  288.178088][T17553]  ? netlink_sendmsg+0x642/0xb30
[  288.178097][T17553]  ? skb_put+0x11b/0x210
[  288.178109][T17553]  netlink_sendmsg+0x805/0xb30
[  288.178119][T17553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.178127][T17553]  ? aa_sock_msg_perm+0xf1/0x1d0
[  288.178135][T17553]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  288.178142][T17553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.178148][T17553]  __sock_sendmsg+0x21c/0x270
[  288.178159][T17553]  ____sys_sendmsg+0x505/0x830
[  288.178169][T17553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  288.178180][T17553]  ? import_iovec+0x74/0xa0
[  288.178190][T17553]  ___sys_sendmsg+0x21f/0x2a0
[  288.178198][T17553]  ? __pfx____sys_sendmsg+0x10/0x10
[  288.178221][T17553]  ? __fget_files+0x2a/0x420
[  288.178227][T17553]  ? __fget_files+0x3a0/0x420
[  288.178237][T17553]  __x64_sys_sendmsg+0x19b/0x260
[  288.178245][T17553]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  288.178257][T17553]  ? rcu_is_watching+0x15/0xb0
[  288.178266][T17553]  ? do_syscall_64+0xbe/0x3b0
[  288.178275][T17553]  do_syscall_64+0xfa/0x3b0
[  288.178280][T17553]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.178289][T17553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.178295][T17553]  ? exc_page_fault+0x9f/0xf0
[  288.178305][T17553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.178311][T17553] RIP: 0033:0x7f067898ebe9
[  288.178319][T17553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.178325][T17553] RSP: 002b:00007f0679845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  288.178333][T17553] RAX: ffffffffffffffda RBX: 00007f0678bc5fa0 RCX: 00007f067898ebe9
[  288.178338][T17553] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  288.178342][T17553] RBP: 00007f0678a11e19 R08: 0000000000000000 R09: 0000000000000000
[  288.178347][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.178350][T17553] R13: 00007f0678bc6038 R14: 00007f0678bc5fa0 R15: 00007ffe5e99f888
[  288.178362][T17553]  </TASK>
[  288.508736][T17567] lo speed is unknown, defaulting to 1000
[  288.660383][T17571] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  288.663710][T17571] bond22: left promiscuous mode
[  288.666097][T17571] bridge10: left promiscuous mode
[  288.676739][T17571] veth11: left promiscuous mode
[  288.929177][T17589] lo speed is unknown, defaulting to 1000
[  289.379308][T17604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.383142][T17604] syzkaller0: entered promiscuous mode
[  289.385257][T17604] syzkaller0: entered allmulticast mode
[  289.417599][T17603] tipc: Resetting bearer <eth:syzkaller0>
[  289.439206][T17603] tipc: Disabling bearer <eth:syzkaller0>
[  289.827720][T17644] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  289.832158][T17644] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  289.928530][T17659] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  289.959151][T17660] lo speed is unknown, defaulting to 1000
[  290.092167][T17677] mac80211_hwsim hwsim567 wlan1: left allmulticast mode
[  290.127608][T17677] validate_nla: 10 callbacks suppressed
[  290.127622][T17677] netlink: 'syz.1.2858': attribute type 10 has an invalid length.
[  290.148165][T17678] mac80211_hwsim hwsim567 wlan1: entered allmulticast mode
[  290.199051][T17682] netlink: 'syz.1.2859': attribute type 9 has an invalid length.
[  290.488665][T17701] mac80211_hwsim hwsim567 wlan1: left allmulticast mode
[  290.674250][T17716] team0: Unable to change to the same mode the team is in
[  290.678694][T17716] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  290.735652][T17718] veth0_to_bridge: left promiscuous mode
[  290.738357][T17718] vlan0: left promiscuous mode
[  290.741865][T17718] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  290.745089][T17718] veth9: left promiscuous mode
[  290.747045][T17718] veth11: left promiscuous mode
[  290.790550][T17724] netlink: 'syz.1.2871': attribute type 9 has an invalid length.
[  290.936644][T17729] bond22: left allmulticast mode
[  290.938456][T17729] bridge10: left allmulticast mode
[  290.956135][T17738] netlink: 'syz.3.2873': attribute type 1 has an invalid length.
[  291.009669][T17742] lo speed is unknown, defaulting to 1000
[  291.389146][T17762] __nla_validate_parse: 18 callbacks suppressed
[  291.389162][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2878'.
[  291.399620][T17762] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  291.405990][T17762] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  291.585711][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2880'.
[  291.896874][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'.
[  292.043607][T17787] netlink: 'syz.2.2884': attribute type 9 has an invalid length.
[  292.046894][T17787] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2884'.
[  292.173534][T17790] bond25: (slave veth11): Releasing backup interface
[  292.199037][T17790] team0: Unable to change to the same mode the team is in
[  292.205856][T17790] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  292.234238][T17795] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2887'.
[  292.309871][T17800] netlink: 'syz.1.2889': attribute type 10 has an invalid length.
[  292.436285][T17797] netlink: 'syz.2.2888': attribute type 12 has an invalid length.
[  292.439437][T17797] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2888'.
[  292.761634][T17833] netlink: 'syz.1.2897': attribute type 10 has an invalid length.
[  292.842372][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'.
[  292.967014][T17838] netlink: 'syz.3.2899': attribute type 11 has an invalid length.
[  293.250265][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'.
[  293.375890][T17853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.379145][T17853] syzkaller0: entered promiscuous mode
[  293.381231][T17853] syzkaller0: entered allmulticast mode
[  293.392470][T17853] tipc: Resetting bearer <eth:syzkaller0>
[  293.419432][T17854] tipc: Resetting bearer <eth:syzkaller0>
[  293.433044][T17854] tipc: Disabling bearer <eth:syzkaller0>
[  293.494103][T17858] netlink: 'syz.3.2904': attribute type 28 has an invalid length.
[  293.497520][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'.
[  293.503681][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'.
[  293.585094][T17864] netlink: 'syz.2.2905': attribute type 10 has an invalid length.
[  293.739065][T17872] netlink: 'syz.2.2908': attribute type 11 has an invalid length.
[  293.849005][T17870] 8021q: adding VLAN 0 to HW filter on device bond12
[  293.858081][T17870] bond12: (slave wlan0): Opening slave failed
[  293.974703][T17889] syz_tun: left allmulticast mode
[  294.246736][T17914] 8021q: adding VLAN 0 to HW filter on device bond26
[  294.279034][T17917] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.292945][T17917] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  294.298569][T17917] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  294.395342][T17930] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.699430][T17952] lo speed is unknown, defaulting to 1000
[  295.636218][T17988] lo speed is unknown, defaulting to 1000
[  295.980944][T18004] team0: Unable to change to the same mode the team is in
[  296.153510][T18014] validate_nla: 5 callbacks suppressed
[  296.153524][T18014] netlink: 'syz.1.2945': attribute type 10 has an invalid length.
[  296.221971][T18015] netlink: 'syz.2.2946': attribute type 10 has an invalid length.
[  297.054383][T18034] __nla_validate_parse: 6 callbacks suppressed
[  297.054393][T18034] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2953'.
[  297.068132][T18036] lo speed is unknown, defaulting to 1000
[  297.214906][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'.
[  297.227991][T18051] netlink: 'syz.2.2955': attribute type 8 has an invalid length.
[  297.359155][T18055] netlink: 'syz.3.2957': attribute type 1 has an invalid length.
[  297.369862][T18055] netlink: 'syz.3.2957': attribute type 1 has an invalid length.
[  297.415188][T18060] syzkaller0: entered promiscuous mode
[  297.417535][T18060] syzkaller0: entered allmulticast mode
[  297.431901][T18063] netlink: 'syz.3.2958': attribute type 1 has an invalid length.
[  297.521553][T18066] 8021q: adding VLAN 0 to HW filter on device bond13
[  297.546342][T18068] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  297.553050][T18063] veth5: entered promiscuous mode
[  297.558102][T18063] bond13: (slave veth5): Enslaving as a backup interface with a down link
[  297.569577][T18066] veth7: entered promiscuous mode
[  297.573870][T18066] bond13: (slave veth7): Enslaving as a backup interface with a down link
[  297.602982][T18066] bond13: (slave veth5): Releasing backup interface
[  297.605642][T18066] bond13: (slave veth5): the permanent HWaddr of slave - 5e:b8:0c:b8:b5:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  297.615558][T18066] bond13: (slave veth7): Releasing backup interface
[  297.676518][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2962'.
[  297.862533][T18093] veth0_to_bridge: left allmulticast mode
[  297.866641][T18093] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  297.879606][T18093] ip6gre1: left allmulticast mode
[  297.891647][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'.
[  297.957306][T18098] netlink: 'syz.1.2967': attribute type 9 has an invalid length.
[  298.021377][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'.
[  298.495448][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  298.758291][T18132] syz.1.2976: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  298.766093][T18132] CPU: 0 UID: 0 PID: 18132 Comm: syz.1.2976 Not tainted syzkaller #0 PREEMPT(full) 
[  298.766127][T18132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.766134][T18132] Call Trace:
[  298.766140][T18132]  <TASK>
[  298.766145][T18132]  dump_stack_lvl+0x189/0x250
[  298.766166][T18132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.766179][T18132]  ? __pfx__printk+0x10/0x10
[  298.766195][T18132]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.766210][T18132]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.766224][T18132]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  298.766237][T18132]  warn_alloc+0x214/0x310
[  298.766257][T18132]  ? __pfx_warn_alloc+0x10/0x10
[  298.766277][T18132]  ? __get_vm_area_node+0x28f/0x300
[  298.766291][T18132]  ? xskq_create+0xbf/0x170
[  298.766309][T18132]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  298.766349][T18132]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  298.766370][T18132]  ? __kasan_kmalloc+0x93/0xb0
[  298.766388][T18132]  vmalloc_user_noprof+0xad/0xf0
[  298.766403][T18132]  ? xskq_create+0xbf/0x170
[  298.766419][T18132]  xskq_create+0xbf/0x170
[  298.766436][T18132]  xsk_init_queue+0xb0/0x110
[  298.766453][T18132]  xsk_setsockopt+0x57b/0x8d0
[  298.766469][T18132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.766484][T18132]  ? __pfx_aa_sk_perm+0x10/0x10
[  298.766502][T18132]  ? __fget_files+0x2a/0x420
[  298.766513][T18132]  ? aa_sock_opt_perm+0xff/0x1b0
[  298.766525][T18132]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  298.766537][T18132]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.766559][T18132]  do_sock_setsockopt+0x17c/0x1b0
[  298.766576][T18132]  __x64_sys_setsockopt+0x13f/0x1b0
[  298.766592][T18132]  do_syscall_64+0xfa/0x3b0
[  298.766602][T18132]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.766618][T18132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.766628][T18132]  ? exc_page_fault+0x9f/0xf0
[  298.766643][T18132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.766653][T18132] RIP: 0033:0x7f067898ebe9
[  298.766663][T18132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.766670][T18132] RSP: 002b:00007f0679845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  298.766678][T18132] RAX: ffffffffffffffda RBX: 00007f0678bc5fa0 RCX: 00007f067898ebe9
[  298.766683][T18132] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  298.766688][T18132] RBP: 00007f0678a11e19 R08: 0000000000000004 R09: 0000000000000000
[  298.766692][T18132] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  298.766696][T18132] R13: 00007f0678bc6038 R14: 00007f0678bc5fa0 R15: 00007ffe5e99f888
[  298.766730][T18132]  </TASK>
[  298.766753][T18132] Mem-Info:
[  298.878120][T18132] active_anon:10977 inactive_anon:131 isolated_anon:0
[  298.878120][T18132]  active_file:1106 inactive_file:34527 isolated_file:0
[  298.878120][T18132]  unevictable:1768 dirty:59 writeback:0
[  298.878120][T18132]  slab_reclaimable:24984 slab_unreclaimable:159109
[  298.878120][T18132]  mapped:20370 shmem:2785 pagetables:1104
[  298.878120][T18132]  sec_pagetables:0 bounce:0
[  298.878120][T18132]  kernel_misc_reclaimable:0
[  298.878120][T18132]  free:177975 free_pcp:15573 free_cma:0
[  298.899121][T18132] Node 0 active_anon:18340kB inactive_anon:524kB active_file:3336kB inactive_file:129024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:65264kB dirty:188kB writeback:0kB shmem:5560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8016kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.918560][T18132] Node 1 active_anon:25568kB inactive_anon:0kB active_file:1088kB inactive_file:9084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16216kB dirty:48kB writeback:0kB shmem:5580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6620kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.932270][T18132] Node 0 DMA free:6068kB boost:2048kB min:2688kB low:2848kB high:3008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:624kB local_pcp:364kB free_cma:0kB
[  298.944511][T18132] lowmem_reserve[]: 0 811 811 811 811
[  298.946916][T18132] Node 0 DMA32 free:41900kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18300kB inactive_anon:524kB active_file:3336kB inactive_file:129024kB unevictable:3536kB writepending:188kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:25808kB local_pcp:17652kB free_cma:0kB
[  298.970018][T18132] lowmem_reserve[]: 0 0 0 0 0
[  298.972256][T18132] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.983543][T18132] lowmem_reserve[]: 0 0 854 854 854
[  298.985785][T18132] Node 1 Normal free:208776kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19108kB inactive_anon:0kB active_file:1088kB inactive_file:9084kB unevictable:3536kB writepending:48kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39100kB local_pcp:18724kB free_cma:0kB
[  298.997811][T18132] lowmem_reserve[]: 0 0 0 0 0
[  298.999671][T18132] Node 0 DMA: 11*4kB (UM) 29*8kB (UM) 38*16kB (UM) 42*32kB (UM) 24*64kB (UM) 6*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 6068kB
[  299.005295][T18132] Node 0 DMA32: 751*4kB (UME) 416*8kB (UME) 263*16kB (UM) 132*32kB (UM) 208*64kB (UME) 14*128kB (UME) 15*256kB (UM) 8*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 41900kB
[  299.012975][T18132] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  299.030305][T18132] Node 1 Normal: 143*4kB (ME) 424*8kB (UME) 52*16kB (ME) 280*32kB (UME) 127*64kB (UM) 21*128kB (UME) 14*256kB (UM) 8*512kB (UM) 1*1024kB (U) 5*2048kB (UM) 42*4096kB (UM) = 215548kB
[  299.037122][T18132] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.041117][T18132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.044325][T18132] 38418 total pagecache pages
[  299.045941][T18132] 0 pages in swap cache
[  299.047334][T18132] Free swap  = 124996kB
[  299.048779][T18132] Total swap = 124996kB
[  299.050369][T18132] 786301 pages RAM
[  299.051841][T18132] 0 pages HighMem/MovableOnly
[  299.053802][T18132] 241337 pages reserved
[  299.055507][T18132] 0 pages cma reserved
[  299.265952][T18149] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2981'.
[  299.396721][T18153] netlink: 'syz.3.2980': attribute type 10 has an invalid length.
[  299.473265][T18156] netlink: 'syz.1.2983': attribute type 1 has an invalid length.
[  299.573778][T18156] 8021q: adding VLAN 0 to HW filter on device bond24
[  299.579426][T18156] bond24: (slave wlan0): Opening slave failed
[  299.591461][T18156] vlan2: entered allmulticast mode
[  299.594789][T18156] bond24: (slave vlan2): Opening slave failed
[  299.686944][T18161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2984'.
[  299.690664][T18161] vlan0: entered promiscuous mode
[  299.726815][T18163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  299.744260][T18164] lo speed is unknown, defaulting to 1000
[  300.009879][T18171] lo speed is unknown, defaulting to 1000
[  300.451143][T18186] 8021q: adding VLAN 0 to HW filter on device bond25
[  300.455915][T18186] bond25: (slave wlan0): Opening slave failed
[  300.486047][T18199] mac80211_hwsim hwsim567 wlan1: entered allmulticast mode
[  300.628276][T18213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2998'.
[  300.731331][T18223] _Z`Ԁ@: entered promiscuous mode
[  300.751778][T18223] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  300.755729][T18223] CPU: 1 UID: 0 PID: 18223 Comm: syz.1.2998 Not tainted syzkaller #0 PREEMPT(full) 
[  300.755740][T18223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.755746][T18223] Call Trace:
[  300.755750][T18223]  <TASK>
[  300.755753][T18223]  dump_stack_lvl+0x189/0x250
[  300.755767][T18223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.755776][T18223]  ? __pfx__printk+0x10/0x10
[  300.755788][T18223]  ? kernfs_path_from_node+0x2f/0x290
[  300.755796][T18223]  ? kernfs_path_from_node+0x250/0x290
[  300.755804][T18223]  ? kernfs_path_from_node+0x2f/0x290
[  300.755814][T18223]  sysfs_warn_dup+0x8e/0xa0
[  300.755822][T18223]  sysfs_do_create_link_sd+0xc0/0x110
[  300.755830][T18223]  device_add_class_symlinks+0x1cf/0x240
[  300.755841][T18223]  device_add+0x475/0xb50
[  300.755855][T18223]  wiphy_register+0x1ba6/0x28d0
[  300.755882][T18223]  ? __pfx_wiphy_register+0x10/0x10
[  300.755898][T18223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  300.755916][T18223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  300.755932][T18223]  ieee80211_register_hw+0x3425/0x4080
[  300.755956][T18223]  ? ieee80211_register_hw+0x1461/0x4080
[  300.755977][T18223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  300.755991][T18223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.756003][T18223]  ? __hrtimer_setup+0x187/0x210
[  300.756010][T18223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  300.756022][T18223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  300.756043][T18223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  300.756051][T18223]  ? trace_kmalloc+0x1f/0xd0
[  300.756059][T18223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  300.756067][T18223]  ? kstrndup+0xbf/0x160
[  300.756078][T18223]  hwsim_new_radio_nl+0xea4/0x1b10
[  300.756088][T18223]  ? __pfx___nla_validate_parse+0x10/0x10
[  300.756104][T18223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.756118][T18223]  ? __nla_parse+0x40/0x60
[  300.756128][T18223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  300.756141][T18223]  genl_family_rcv_msg_doit+0x215/0x300
[  300.756152][T18223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  300.756165][T18223]  ? bpf_lsm_capable+0x9/0x20
[  300.756174][T18223]  ? security_capable+0x7e/0x2e0
[  300.756186][T18223]  genl_rcv_msg+0x60e/0x790
[  300.756196][T18223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.756204][T18223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.756218][T18223]  netlink_rcv_skb+0x208/0x470
[  300.756227][T18223]  ? __lock_acquire+0xab9/0xd20
[  300.756237][T18223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.756245][T18223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.756262][T18223]  ? down_read+0x1ad/0x2e0
[  300.756270][T18223]  genl_rcv+0x28/0x40
[  300.756277][T18223]  netlink_unicast+0x82f/0x9e0
[  300.756290][T18223]  ? __pfx_netlink_unicast+0x10/0x10
[  300.756299][T18223]  ? netlink_sendmsg+0x642/0xb30
[  300.756304][T18223]  ? skb_put+0x11b/0x210
[  300.756313][T18223]  netlink_sendmsg+0x805/0xb30
[  300.756323][T18223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.756331][T18223]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.756338][T18223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.756345][T18223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.756351][T18223]  __sock_sendmsg+0x21c/0x270
[  300.756362][T18223]  ____sys_sendmsg+0x505/0x830
[  300.756372][T18223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.756383][T18223]  ? import_iovec+0x74/0xa0
[  300.756393][T18223]  ___sys_sendmsg+0x21f/0x2a0
[  300.756401][T18223]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.756423][T18223]  ? __fget_files+0x2a/0x420
[  300.756429][T18223]  ? __fget_files+0x3a0/0x420
[  300.756439][T18223]  __x64_sys_sendmsg+0x19b/0x260
[  300.756447][T18223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.756459][T18223]  ? rcu_is_watching+0x15/0xb0
[  300.756468][T18223]  ? do_syscall_64+0xbe/0x3b0
[  300.756476][T18223]  do_syscall_64+0xfa/0x3b0
[  300.756481][T18223]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.756490][T18223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.756497][T18223]  ? exc_page_fault+0x9f/0xf0
[  300.756514][T18223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.756521][T18223] RIP: 0033:0x7f067898ebe9
[  300.756529][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.756536][T18223] RSP: 002b:00007f0679824038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.756546][T18223] RAX: ffffffffffffffda RBX: 00007f0678bc6090 RCX: 00007f067898ebe9
[  300.756551][T18223] RDX: 0000000000000350 RSI: 0000200000000040 RDI: 000000000000000b
[  300.756556][T18223] RBP: 00007f0678a11e19 R08: 0000000000000000 R09: 0000000000000000
[  300.756560][T18223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.756564][T18223] R13: 00007f0678bc6128 R14: 00007f0678bc6090 R15: 00007ffe5e99f888
[  300.756577][T18223]  </TASK>
[  300.979405][T18230] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3003'.
[  300.996614][T18230] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  301.002975][T18230] CPU: 1 UID: 0 PID: 18230 Comm: syz.2.3003 Not tainted syzkaller #0 PREEMPT(full) 
[  301.002992][T18230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.003000][T18230] Call Trace:
[  301.003005][T18230]  <TASK>
[  301.003011][T18230]  dump_stack_lvl+0x189/0x250
[  301.003035][T18230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.003049][T18230]  ? __pfx__printk+0x10/0x10
[  301.003070][T18230]  ? kernfs_path_from_node+0x2f/0x290
[  301.003084][T18230]  ? kernfs_path_from_node+0x250/0x290
[  301.003095][T18230]  ? kernfs_path_from_node+0x2f/0x290
[  301.003111][T18230]  sysfs_warn_dup+0x8e/0xa0
[  301.003125][T18230]  sysfs_do_create_link_sd+0xc0/0x110
[  301.003138][T18230]  device_add_class_symlinks+0x1cf/0x240
[  301.003154][T18230]  device_add+0x475/0xb50
[  301.003171][T18230]  wiphy_register+0x1ba6/0x28d0
[  301.003201][T18230]  ? __pfx_wiphy_register+0x10/0x10
[  301.003218][T18230]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  301.003238][T18230]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  301.003255][T18230]  ieee80211_register_hw+0x3425/0x4080
[  301.003281][T18230]  ? ieee80211_register_hw+0x1461/0x4080
[  301.003301][T18230]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  301.003318][T18230]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  301.003341][T18230]  ? __hrtimer_setup+0x187/0x210
[  301.003351][T18230]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  301.003371][T18230]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  301.003410][T18230]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  301.003425][T18230]  ? trace_kmalloc+0x1f/0xd0
[  301.003437][T18230]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  301.003453][T18230]  ? kstrndup+0xbf/0x160
[  301.003471][T18230]  hwsim_new_radio_nl+0xea4/0x1b10
[  301.003489][T18230]  ? __pfx___nla_validate_parse+0x10/0x10
[  301.003525][T18230]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  301.003549][T18230]  ? __nla_parse+0x40/0x60
[  301.003565][T18230]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  301.003586][T18230]  genl_family_rcv_msg_doit+0x215/0x300
[  301.003603][T18230]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  301.003628][T18230]  ? bpf_lsm_capable+0x9/0x20
[  301.003643][T18230]  ? security_capable+0x7e/0x2e0
[  301.003667][T18230]  genl_rcv_msg+0x60e/0x790
[  301.003720][T18230]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.003736][T18230]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  301.003761][T18230]  netlink_rcv_skb+0x208/0x470
[  301.003778][T18230]  ? __lock_acquire+0xab9/0xd20
[  301.003796][T18230]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.003810][T18230]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  301.003842][T18230]  ? down_read+0x1ad/0x2e0
[  301.003856][T18230]  genl_rcv+0x28/0x40
[  301.003869][T18230]  netlink_unicast+0x82f/0x9e0
[  301.003893][T18230]  ? __pfx_netlink_unicast+0x10/0x10
[  301.003910][T18230]  ? netlink_sendmsg+0x642/0xb30
[  301.003921][T18230]  ? skb_put+0x11b/0x210
[  301.003936][T18230]  netlink_sendmsg+0x805/0xb30
[  301.003955][T18230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.003970][T18230]  ? aa_sock_msg_perm+0xf1/0x1d0
[  301.003983][T18230]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  301.003996][T18230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.004008][T18230]  __sock_sendmsg+0x21c/0x270
[  301.004026][T18230]  ____sys_sendmsg+0x505/0x830
[  301.004044][T18230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.004066][T18230]  ? import_iovec+0x74/0xa0
[  301.004084][T18230]  ___sys_sendmsg+0x21f/0x2a0
[  301.004099][T18230]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.004139][T18230]  ? __fget_files+0x2a/0x420
[  301.004149][T18230]  ? __fget_files+0x3a0/0x420
[  301.004167][T18230]  __x64_sys_sendmsg+0x19b/0x260
[  301.004183][T18230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.004204][T18230]  ? rcu_is_watching+0x15/0xb0
[  301.004220][T18230]  ? do_syscall_64+0xbe/0x3b0
[  301.004235][T18230]  do_syscall_64+0xfa/0x3b0
[  301.004245][T18230]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.004260][T18230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.004271][T18230]  ? exc_page_fault+0x9f/0xf0
[  301.004289][T18230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.004300][T18230] RIP: 0033:0x7f34be38ebe9
[  301.004313][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.004324][T18230] RSP: 002b:00007f34bc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.004339][T18230] RAX: ffffffffffffffda RBX: 00007f34be5c5fa0 RCX: 00007f34be38ebe9
[  301.004347][T18230] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  301.004354][T18230] RBP: 00007f34be411e19 R08: 0000000000000000 R09: 0000000000000000
[  301.004362][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.004369][T18230] R13: 00007f34be5c6038 R14: 00007f34be5c5fa0 R15: 00007ffce6c65a88
[  301.004391][T18230]  </TASK>
[  301.339047][T18238] validate_nla: 5 callbacks suppressed
[  301.339061][T18238] netlink: 'syz.3.3006': attribute type 9 has an invalid length.
[  301.491792][T18253] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  301.509657][T18255] netlink: 'syz.2.3010': attribute type 6 has an invalid length.
[  301.608459][T18260] netlink: 'syz.1.3012': attribute type 9 has an invalid length.
[  301.702334][T18261] netlink: 'syz.2.3010': attribute type 12 has an invalid length.
[  301.846746][T18273] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  301.858041][T18275] mac80211_hwsim hwsim617 wlan1: entered allmulticast mode
[  301.884328][T18275] netlink: 'syz.2.3016': attribute type 10 has an invalid length.
[  301.894951][T18275] macsec2: entered promiscuous mode
[  301.897048][T18275] batadv0: entered promiscuous mode
[  301.904361][T18275] batadv0: left promiscuous mode
[  301.951045][T18279] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  301.955158][T18279] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  301.994783][T18278] ieee802154 phy1 wpan1: encryption failed: -22
[  302.226643][T18291] netlink: 'syz.3.3021': attribute type 10 has an invalid length.
[  302.226661][T18292] netlink: 'syz.3.3021': attribute type 10 has an invalid length.
[  302.234287][T18291] mac80211_hwsim hwsim595 wlan1: entered allmulticast mode
[  302.272098][T18294] sctp: [Deprecated]: syz.3.3022 (pid 18294) Use of int in maxseg socket option.
[  302.272098][T18294] Use struct sctp_assoc_value instead
[  302.277777][T18294] sctp: [Deprecated]: syz.3.3022 (pid 18294) Use of int in maxseg socket option.
[  302.277777][T18294] Use struct sctp_assoc_value instead
[  302.445261][T18302] __nla_validate_parse: 6 callbacks suppressed
[  302.445274][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'.
[  302.550005][T18307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3025'.
[  302.747874][T18312] team0: Unable to change to the same mode the team is in
[  302.752727][T18312] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  302.804532][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'.
[  302.860117][T18320] netlink: 'syz.2.3026': attribute type 10 has an invalid length.
[  302.884099][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  302.887889][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3029'.
[  302.892066][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3029'.
[  303.078821][T18330] vlan0: left promiscuous mode
[  303.093226][T18330] mac80211_hwsim hwsim567 wlan1: left allmulticast mode
[  303.426459][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3032'.
[  303.431130][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3032'.
[  303.435179][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3032'.
[  303.438346][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3032'.
[  303.554061][T18339] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  303.558220][T18339] CPU: 1 UID: 0 PID: 18339 Comm: syz.3.3033 Not tainted syzkaller #0 PREEMPT(full) 
[  303.558238][T18339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.558247][T18339] Call Trace:
[  303.558252][T18339]  <TASK>
[  303.558258][T18339]  dump_stack_lvl+0x189/0x250
[  303.558282][T18339]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.558299][T18339]  ? __pfx__printk+0x10/0x10
[  303.558321][T18339]  ? kernfs_path_from_node+0x2f/0x290
[  303.558335][T18339]  ? kernfs_path_from_node+0x250/0x290
[  303.558348][T18339]  ? kernfs_path_from_node+0x2f/0x290
[  303.558365][T18339]  sysfs_warn_dup+0x8e/0xa0
[  303.558379][T18339]  sysfs_do_create_link_sd+0xc0/0x110
[  303.558395][T18339]  device_add_class_symlinks+0x1cf/0x240
[  303.558412][T18339]  device_add+0x475/0xb50
[  303.558429][T18339]  wiphy_register+0x1ba6/0x28d0
[  303.558462][T18339]  ? __pfx_wiphy_register+0x10/0x10
[  303.558480][T18339]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  303.558502][T18339]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  303.558530][T18339]  ieee80211_register_hw+0x3425/0x4080
[  303.558559][T18339]  ? ieee80211_register_hw+0x1461/0x4080
[  303.558582][T18339]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  303.558601][T18339]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  303.558626][T18339]  ? __hrtimer_setup+0x187/0x210
[  303.558638][T18339]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  303.558687][T18339]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  303.558729][T18339]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  303.558745][T18339]  ? trace_kmalloc+0x1f/0xd0
[  303.558760][T18339]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  303.558776][T18339]  ? kstrndup+0xbf/0x160
[  303.558797][T18339]  hwsim_new_radio_nl+0xea4/0x1b10
[  303.558816][T18339]  ? __pfx___nla_validate_parse+0x10/0x10
[  303.558846][T18339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.558873][T18339]  ? __nla_parse+0x40/0x60
[  303.558894][T18339]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  303.558917][T18339]  genl_family_rcv_msg_doit+0x215/0x300
[  303.558938][T18339]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  303.558964][T18339]  ? bpf_lsm_capable+0x9/0x20
[  303.558980][T18339]  ? security_capable+0x7e/0x2e0
[  303.559003][T18339]  genl_rcv_msg+0x60e/0x790
[  303.559026][T18339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.559040][T18339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.559067][T18339]  netlink_rcv_skb+0x208/0x470
[  303.559084][T18339]  ? __lock_acquire+0xab9/0xd20
[  303.559102][T18339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.559118][T18339]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.559153][T18339]  ? down_read+0x1ad/0x2e0
[  303.559169][T18339]  genl_rcv+0x28/0x40
[  303.559183][T18339]  netlink_unicast+0x82f/0x9e0
[  303.559209][T18339]  ? __pfx_netlink_unicast+0x10/0x10
[  303.559228][T18339]  ? netlink_sendmsg+0x642/0xb30
[  303.559238][T18339]  ? skb_put+0x11b/0x210
[  303.559256][T18339]  netlink_sendmsg+0x805/0xb30
[  303.559276][T18339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.559291][T18339]  ? aa_sock_msg_perm+0xf1/0x1d0
[  303.559305][T18339]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.559318][T18339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.559331][T18339]  __sock_sendmsg+0x21c/0x270
[  303.559351][T18339]  ____sys_sendmsg+0x505/0x830
[  303.559370][T18339]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.559391][T18339]  ? import_iovec+0x74/0xa0
[  303.559409][T18339]  ___sys_sendmsg+0x21f/0x2a0
[  303.559425][T18339]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.559469][T18339]  ? __fget_files+0x2a/0x420
[  303.559480][T18339]  ? __fget_files+0x3a0/0x420
[  303.559500][T18339]  __x64_sys_sendmsg+0x19b/0x260
[  303.559522][T18339]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.559543][T18339]  ? rcu_is_watching+0x15/0xb0
[  303.559561][T18339]  ? do_syscall_64+0xbe/0x3b0
[  303.559576][T18339]  do_syscall_64+0xfa/0x3b0
[  303.559586][T18339]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.559602][T18339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.559614][T18339]  ? exc_page_fault+0x9f/0xf0
[  303.559631][T18339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.559643][T18339] RIP: 0033:0x7fe48998ebe9
[  303.559682][T18339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.559694][T18339] RSP: 002b:00007fe48a8f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.559709][T18339] RAX: ffffffffffffffda RBX: 00007fe489bc5fa0 RCX: 00007fe48998ebe9
[  303.559719][T18339] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  303.559727][T18339] RBP: 00007fe489a11e19 R08: 0000000000000000 R09: 0000000000000000
[  303.559735][T18339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.559743][T18339] R13: 00007fe489bc6038 R14: 00007fe489bc5fa0 R15: 00007ffde2c25538
[  303.559765][T18339]  </TASK>
[  304.563559][T18378] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  304.566053][T18378] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  304.656555][T18380] lo speed is unknown, defaulting to 1000
[  304.714711][T18386] mac80211_hwsim hwsim595 wlan1: left allmulticast mode
[  304.737263][T18386] netlink: 'syz.3.3044': attribute type 10 has an invalid length.
[  304.883387][T18385] netlink: 'syz.2.3042': attribute type 2 has an invalid length.
[  305.116411][T18405] 8021q: adding VLAN 0 to HW filter on device bond14
[  305.789138][T18456] lo speed is unknown, defaulting to 1000
[  306.573834][T18479] validate_nla: 5 callbacks suppressed
[  306.573843][T18479] netlink: 'syz.2.3066': attribute type 1 has an invalid length.
[  306.676888][T18475] netlink: 'syz.1.3065': attribute type 11 has an invalid length.
[  306.680320][T18479] 8021q: adding VLAN 0 to HW filter on device bond27
[  306.856806][T18485] openvswitch: netlink: Duplicate or invalid key (type 0).
[  306.859554][T18485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.872189][T18491] lo speed is unknown, defaulting to 1000
[  306.994273][T18497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.216313][T18505] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  307.240064][T18505] CPU: 1 UID: 0 PID: 18505 Comm: syz.2.3072 Not tainted syzkaller #0 PREEMPT(full) 
[  307.240077][T18505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.240082][T18505] Call Trace:
[  307.240086][T18505]  <TASK>
[  307.240089][T18505]  dump_stack_lvl+0x189/0x250
[  307.240104][T18505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.240113][T18505]  ? __pfx__printk+0x10/0x10
[  307.240125][T18505]  ? kernfs_path_from_node+0x2f/0x290
[  307.240134][T18505]  ? kernfs_path_from_node+0x250/0x290
[  307.240142][T18505]  ? kernfs_path_from_node+0x2f/0x290
[  307.240152][T18505]  sysfs_warn_dup+0x8e/0xa0
[  307.240161][T18505]  sysfs_do_create_link_sd+0xc0/0x110
[  307.240170][T18505]  device_add_class_symlinks+0x1cf/0x240
[  307.240180][T18505]  device_add+0x475/0xb50
[  307.240189][T18505]  wiphy_register+0x1ba6/0x28d0
[  307.240209][T18505]  ? __pfx_wiphy_register+0x10/0x10
[  307.240219][T18505]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  307.240231][T18505]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  307.240240][T18505]  ieee80211_register_hw+0x3425/0x4080
[  307.240256][T18505]  ? ieee80211_register_hw+0x1461/0x4080
[  307.240267][T18505]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  307.240277][T18505]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.240291][T18505]  ? __hrtimer_setup+0x187/0x210
[  307.240298][T18505]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  307.240309][T18505]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  307.240330][T18505]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  307.240338][T18505]  ? trace_kmalloc+0x1f/0xd0
[  307.240346][T18505]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  307.240355][T18505]  ? kstrndup+0xbf/0x160
[  307.240366][T18505]  hwsim_new_radio_nl+0xea4/0x1b10
[  307.240376][T18505]  ? __pfx___nla_validate_parse+0x10/0x10
[  307.240399][T18505]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  307.240421][T18505]  ? __nla_parse+0x40/0x60
[  307.240434][T18505]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  307.240447][T18505]  genl_family_rcv_msg_doit+0x215/0x300
[  307.240460][T18505]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  307.240473][T18505]  ? bpf_lsm_capable+0x9/0x20
[  307.240482][T18505]  ? security_capable+0x7e/0x2e0
[  307.240501][T18505]  genl_rcv_msg+0x60e/0x790
[  307.240519][T18505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.240530][T18505]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  307.240552][T18505]  netlink_rcv_skb+0x208/0x470
[  307.240567][T18505]  ? __lock_acquire+0xab9/0xd20
[  307.240583][T18505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.240592][T18505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.240609][T18505]  ? down_read+0x1ad/0x2e0
[  307.240651][T18505]  genl_rcv+0x28/0x40
[  307.240663][T18505]  netlink_unicast+0x82f/0x9e0
[  307.240684][T18505]  ? __pfx_netlink_unicast+0x10/0x10
[  307.240707][T18505]  ? netlink_sendmsg+0x642/0xb30
[  307.240716][T18505]  ? skb_put+0x11b/0x210
[  307.240729][T18505]  netlink_sendmsg+0x805/0xb30
[  307.240740][T18505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.240749][T18505]  ? aa_sock_msg_perm+0xf1/0x1d0
[  307.240761][T18505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.240774][T18505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.240785][T18505]  __sock_sendmsg+0x21c/0x270
[  307.240804][T18505]  ____sys_sendmsg+0x505/0x830
[  307.240823][T18505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.240837][T18505]  ? import_iovec+0x74/0xa0
[  307.240852][T18505]  ___sys_sendmsg+0x21f/0x2a0
[  307.240866][T18505]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.240905][T18505]  ? __fget_files+0x2a/0x420
[  307.240915][T18505]  ? __fget_files+0x3a0/0x420
[  307.240933][T18505]  __x64_sys_sendmsg+0x19b/0x260
[  307.240945][T18505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.240961][T18505]  ? rcu_is_watching+0x15/0xb0
[  307.240976][T18505]  ? do_syscall_64+0xbe/0x3b0
[  307.240990][T18505]  do_syscall_64+0xfa/0x3b0
[  307.240999][T18505]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.241014][T18505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.241025][T18505]  ? exc_page_fault+0x9f/0xf0
[  307.241042][T18505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.241052][T18505] RIP: 0033:0x7f34be38ebe9
[  307.241060][T18505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.241070][T18505] RSP: 002b:00007f34bc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.241082][T18505] RAX: ffffffffffffffda RBX: 00007f34be5c5fa0 RCX: 00007f34be38ebe9
[  307.241090][T18505] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  307.241097][T18505] RBP: 00007f34be411e19 R08: 0000000000000000 R09: 0000000000000000
[  307.241104][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.241111][T18505] R13: 00007f34be5c6038 R14: 00007f34be5c5fa0 R15: 00007ffce6c65a88
[  307.241132][T18505]  </TASK>
[  307.442381][T18510] syz_tun: mtu less than device minimum
[  307.459200][T18512] __nla_validate_parse: 19 callbacks suppressed
[  307.459211][T18512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3075'.
[  307.506268][T18514] gre2: entered allmulticast mode
[  307.514899][T18514] bond0: (slave macvlan0): Opening slave failed
[  307.545189][T18516] bond0: (slave macvlan1): Opening slave failed
[  307.722046][T18525] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  307.727198][T18525] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  307.771841][T18525] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  307.826141][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'.
[  307.838038][T18525] 8021q: adding VLAN 0 to HW filter on device bond15
[  307.850025][T18526] bond15: (slave wlan0): Opening slave failed
[  307.865761][T18525] netlink: 'syz.3.3080': attribute type 11 has an invalid length.
[  307.868474][T18525] netlink: 'syz.3.3080': attribute type 4 has an invalid length.
[  307.872585][T18525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3080'.
[  307.929531][T18540] veth5: left promiscuous mode
[  307.931732][T18540] veth7: left promiscuous mode
[  308.021462][T18550] lo speed is unknown, defaulting to 1000
[  308.070312][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'.
[  308.144788][T18555] netlink: 'syz.2.3087': attribute type 11 has an invalid length.
[  308.455830][T18569] mac80211_hwsim hwsim617 wlan1: left allmulticast mode
[  308.512963][T18575] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  308.522623][T18575] mac80211_hwsim hwsim617 wlan1: entered allmulticast mode
[  308.551955][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'.
[  308.923864][T18593] lo speed is unknown, defaulting to 1000
[  308.990485][T18600] netlink: 'syz.1.3095': attribute type 12 has an invalid length.
[  308.997735][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'.
[  309.134483][T18599] netlink: 'syz.2.3094': attribute type 2 has an invalid length.
[  309.159721][T18599] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3094'.
[  309.387399][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'.
[  309.503658][T18617] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3101'.
[  309.615793][T18620] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3102'.
[  309.795536][T18629] syzkaller1: entered promiscuous mode
[  309.798030][T18629] syzkaller1: entered allmulticast mode
[  309.815135][T18633] bond0: (slave macvlan1): Opening slave failed
[  309.916948][T18638] syz_tun: entered allmulticast mode
[  310.059347][T18656] netlink: 'syz.2.3110': attribute type 1 has an invalid length.
[  310.083094][T18656] 8021q: adding VLAN 0 to HW filter on device bond28
[  310.096381][T18656] veth13: entered promiscuous mode
[  310.101932][T18656] bond28: (slave veth13): Enslaving as a backup interface with a down link
[  310.107404][T18656] bond28: (slave veth13): Releasing backup interface
[  310.145220][T18661] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004
[  310.364125][T18678] syzkaller0: entered promiscuous mode
[  310.366211][T18678] syzkaller0: entered allmulticast mode
[  310.371383][T18677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.428321][T18681] tipc: Resetting bearer <eth:syzkaller0>
[  310.455805][T18681] tipc: Disabling bearer <eth:syzkaller0>
[  310.705505][T18693] netlink: 'syz.2.3121': attribute type 10 has an invalid length.
[  310.708281][T18693] syz_tun: entered promiscuous mode
[  311.372253][T18710] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  311.376325][T18710] CPU: 1 UID: 0 PID: 18710 Comm: syz.3.3125 Not tainted syzkaller #0 PREEMPT(full) 
[  311.376336][T18710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.376341][T18710] Call Trace:
[  311.376345][T18710]  <TASK>
[  311.376349][T18710]  dump_stack_lvl+0x189/0x250
[  311.376364][T18710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.376374][T18710]  ? __pfx__printk+0x10/0x10
[  311.376392][T18710]  ? kernfs_path_from_node+0x2f/0x290
[  311.376400][T18710]  ? kernfs_path_from_node+0x250/0x290
[  311.376407][T18710]  ? kernfs_path_from_node+0x2f/0x290
[  311.376416][T18710]  sysfs_warn_dup+0x8e/0xa0
[  311.376423][T18710]  sysfs_do_create_link_sd+0xc0/0x110
[  311.376432][T18710]  device_add_class_symlinks+0x1cf/0x240
[  311.376442][T18710]  device_add+0x475/0xb50
[  311.376452][T18710]  wiphy_register+0x1ba6/0x28d0
[  311.376469][T18710]  ? __pfx_wiphy_register+0x10/0x10
[  311.376478][T18710]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  311.376490][T18710]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  311.376501][T18710]  ieee80211_register_hw+0x3425/0x4080
[  311.376525][T18710]  ? ieee80211_register_hw+0x1461/0x4080
[  311.376542][T18710]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  311.376557][T18710]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.376606][T18710]  ? __hrtimer_setup+0x187/0x210
[  311.376619][T18710]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  311.376639][T18710]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  311.376677][T18710]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  311.376691][T18710]  ? trace_kmalloc+0x1f/0xd0
[  311.376705][T18710]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  311.376721][T18710]  ? kstrndup+0xbf/0x160
[  311.376743][T18710]  hwsim_new_radio_nl+0xea4/0x1b10
[  311.376759][T18710]  ? __pfx___nla_validate_parse+0x10/0x10
[  311.376788][T18710]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.376809][T18710]  ? __nla_parse+0x40/0x60
[  311.376821][T18710]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  311.376834][T18710]  genl_family_rcv_msg_doit+0x215/0x300
[  311.376846][T18710]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  311.376861][T18710]  ? bpf_lsm_capable+0x9/0x20
[  311.376870][T18710]  ? security_capable+0x7e/0x2e0
[  311.376883][T18710]  genl_rcv_msg+0x60e/0x790
[  311.376894][T18710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.376901][T18710]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.376916][T18710]  netlink_rcv_skb+0x208/0x470
[  311.376925][T18710]  ? __lock_acquire+0xab9/0xd20
[  311.376935][T18710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.376944][T18710]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  311.376961][T18710]  ? down_read+0x1ad/0x2e0
[  311.376969][T18710]  genl_rcv+0x28/0x40
[  311.376977][T18710]  netlink_unicast+0x82f/0x9e0
[  311.376990][T18710]  ? __pfx_netlink_unicast+0x10/0x10
[  311.377000][T18710]  ? netlink_sendmsg+0x642/0xb30
[  311.377005][T18710]  ? skb_put+0x11b/0x210
[  311.377014][T18710]  netlink_sendmsg+0x805/0xb30
[  311.377024][T18710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.377032][T18710]  ? aa_sock_msg_perm+0xf1/0x1d0
[  311.377039][T18710]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  311.377046][T18710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.377053][T18710]  __sock_sendmsg+0x21c/0x270
[  311.377064][T18710]  ____sys_sendmsg+0x505/0x830
[  311.377074][T18710]  ? __pfx_____sys_sendmsg+0x10/0x10
[  311.377085][T18710]  ? import_iovec+0x74/0xa0
[  311.377095][T18710]  ___sys_sendmsg+0x21f/0x2a0
[  311.377104][T18710]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.377126][T18710]  ? __fget_files+0x2a/0x420
[  311.377132][T18710]  ? __fget_files+0x3a0/0x420
[  311.377143][T18710]  __x64_sys_sendmsg+0x19b/0x260
[  311.377152][T18710]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.377163][T18710]  ? rcu_is_watching+0x15/0xb0
[  311.377173][T18710]  ? do_syscall_64+0xbe/0x3b0
[  311.377182][T18710]  do_syscall_64+0xfa/0x3b0
[  311.377187][T18710]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.377197][T18710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.377204][T18710]  ? exc_page_fault+0x9f/0xf0
[  311.377214][T18710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.377220][T18710] RIP: 0033:0x7fe48998ebe9
[  311.377228][T18710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.377234][T18710] RSP: 002b:00007fe48a8f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.377242][T18710] RAX: ffffffffffffffda RBX: 00007fe489bc5fa0 RCX: 00007fe48998ebe9
[  311.377247][T18710] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  311.377252][T18710] RBP: 00007fe489a11e19 R08: 0000000000000000 R09: 0000000000000000
[  311.377256][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.377260][T18710] R13: 00007fe489bc6038 R14: 00007fe489bc5fa0 R15: 00007ffde2c25538
[  311.377272][T18710]  </TASK>
[  311.612706][T18712] validate_nla: 2 callbacks suppressed
[  311.612720][T18712] netlink: 'syz.3.3126': attribute type 10 has an invalid length.
[  311.619294][T18712] mac80211_hwsim hwsim680 wlan1: entered allmulticast mode
[  311.683171][T18714] openvswitch: netlink: IPv4 tun info is not correct
[  312.228393][T18734] netlink: 'syz.2.3131': attribute type 1 has an invalid length.
[  312.263074][T18737] netlink: 'syz.1.3129': attribute type 10 has an invalid length.
[  312.342103][T18742] lo speed is unknown, defaulting to 1000
[  312.426848][T18746] netlink: 'syz.3.3135': attribute type 10 has an invalid length.
[  312.435612][T18746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.443419][T18746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.475649][T18741] lo speed is unknown, defaulting to 1000
[  313.104039][T18757] netlink: 'syz.1.3137': attribute type 8 has an invalid length.
[  313.198459][T18759] netlink: 'syz.1.3139': attribute type 12 has an invalid length.
[  313.389760][T18776] netlink: 'syz.2.3145': attribute type 10 has an invalid length.
[  313.406791][T18776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  313.411805][T18776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.510998][T18785] netlink: 'syz.3.3147': attribute type 1 has an invalid length.
[  313.513695][T18785] netlink: 'syz.3.3147': attribute type 1 has an invalid length.
[  313.516459][T18784] __nla_validate_parse: 9 callbacks suppressed
[  313.516467][T18784] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3148'.
[  313.619487][T18786] netlink: 'syz.3.3147': attribute type 1 has an invalid length.
[  313.800137][T18798] lo speed is unknown, defaulting to 1000
[  313.827674][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3151'.
[  313.989089][T18804] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3152'.
[  313.998638][T18804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3152'.
[  314.137250][T18808] 8021q: adding VLAN 0 to HW filter on device bond1
[  314.139859][T18809] bond1: option mode: unable to set because the bond device is up
[  314.152641][T18808] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  314.156276][T18808] bond1: (slave macvlan6): Enslaving as a backup interface with a down link
[  314.165424][T18808] bond1: (slave macvlan6): Releasing backup interface
[  314.271182][T18819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3157'.
[  314.318474][T18826] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  314.324007][T18826] bond1: (slave macvlan7): Enslaving as a backup interface with a down link
[  314.336156][T18822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3158'.
[  314.343507][T18822] syz_tun: left promiscuous mode
[  314.347942][T18822] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  314.363511][T18822] mac80211_hwsim hwsim617 wlan1: left allmulticast mode
[  314.366802][T18830] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3160'.
[  314.370768][T18822] gre2: left allmulticast mode
[  314.372846][T18830] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3160'.
[  314.376776][T18822] veth13: left promiscuous mode
[  314.577795][T18844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3164'.
[  314.618565][T18852] ieee802154 phy1 wpan1: encryption failed: -22
[  314.621944][T18853] ieee802154 phy1 wpan1: encryption failed: -22
[  314.682678][T18857] lo speed is unknown, defaulting to 1000
[  314.793712][T18859] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3166'.
[  315.128689][T18868] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  315.135359][T18868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  315.184047][T18872] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  316.027637][T18922] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  316.316097][T18936] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.321988][T18936] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  316.649614][T18939] lo speed is unknown, defaulting to 1000
[  316.759472][T18940] validate_nla: 6 callbacks suppressed
[  316.759484][T18940] netlink: 'syz.2.3187': attribute type 2 has an invalid length.
[  316.912693][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.427454][T18949] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  317.736632][T18963] mac80211_hwsim hwsim680 wlan1: left allmulticast mode
[  317.754869][T18963] netlink: 'syz.3.3192': attribute type 10 has an invalid length.
[  317.768867][T18963] mac80211_hwsim hwsim680 wlan1: entered allmulticast mode
[  317.920131][T18970] netlink: 'syz.1.3194': attribute type 12 has an invalid length.
[  317.955808][T18972] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  318.003465][T18976] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  318.172489][T18987] netlink: 'syz.2.3199': attribute type 8 has an invalid length.
[  318.212301][T18989] sch_tbf: burst 4402 is lower than device lo mtu (65550) !
[  318.258273][T18991] netlink: 'syz.2.3202': attribute type 1 has an invalid length.
[  318.285329][T18991] 8021q: adding VLAN 0 to HW filter on device bond29
[  318.291725][T18994] netlink: 'syz.1.3203': attribute type 12 has an invalid length.
[  318.306636][T18991] veth17: entered promiscuous mode
[  318.312145][T18991] bond29: (slave veth17): Enslaving as a backup interface with a down link
[  318.318468][T18991] bond29: (slave veth17): Releasing backup interface
[  318.455215][T19005] netlink: 'syz.1.3206': attribute type 10 has an invalid length.
[  318.514349][T19009] lo speed is unknown, defaulting to 1000
[  318.547625][T19011] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  318.717461][T19015] lo speed is unknown, defaulting to 1000
[  318.830457][T19009] netlink: 'syz.1.3207': attribute type 2 has an invalid length.
[  318.834799][T19009] __nla_validate_parse: 12 callbacks suppressed
[  318.834813][T19009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3207'.
[  318.860712][T19009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3207'.
[  318.969708][T19014] lo speed is unknown, defaulting to 1000
[  318.993721][T19021] netlink: 'syz.3.3210': attribute type 12 has an invalid length.
[  319.335214][T19027] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3212'.
[  319.926059][T19042] lo speed is unknown, defaulting to 1000
[  319.984149][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'.
[  320.198963][T19058] netlink: 'syz.3.3220': attribute type 1 has an invalid length.
[  320.324146][T19060] 8021q: adding VLAN 0 to HW filter on device bond26
[  320.354290][T19060] bond26: (slave wlan0): Opening slave failed
[  320.436370][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3222'.
[  320.439280][T19066] lo speed is unknown, defaulting to 1000
[  320.745087][T19083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3227'.
[  320.753798][T19083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3227'.
[  320.840339][T19087] bond1: option mode: unable to set because the bond device has slaves
[  320.874759][T19087] bond1: (slave macvlan7): Releasing backup interface
[  320.918943][T19090] syzkaller1: entered promiscuous mode
[  320.921906][T19090] syzkaller1: entered allmulticast mode
[  321.121689][T19104] sctp: [Deprecated]: syz.1.3235 (pid 19104) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.121689][T19104] Use struct sctp_sack_info instead
[  321.192262][T19116] team0: Unable to change to the same mode the team is in
[  321.292175][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'.
[  321.308512][T19122] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3241'.
[  321.754392][T19134] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3244'.
[  321.764532][T19135] validate_nla: 10 callbacks suppressed
[  321.764545][T19135] netlink: 'syz.3.3243': attribute type 10 has an invalid length.
[  322.112312][T19148] syzkaller1: entered promiscuous mode
[  322.114401][T19148] syzkaller1: entered allmulticast mode
[  322.940530][T19166] veth17: left promiscuous mode
[  322.992484][T19171] bond0: (slave macvlan0): Opening slave failed
[  323.131162][T19176] netlink: 'syz.2.3255': attribute type 10 has an invalid length.
[  323.329751][T19190] netlink: 'syz.2.3260': attribute type 1 has an invalid length.
[  323.338116][T19190] netlink: 'syz.2.3260': attribute type 1 has an invalid length.
[  323.369699][T19195] lo speed is unknown, defaulting to 1000
[  323.514924][T19204] IPv6: NLM_F_CREATE should be specified when creating new route
[  323.670156][T19198] netlink: 'syz.1.3261': attribute type 2 has an invalid length.
[  323.707864][T19206] mac80211_hwsim hwsim680 wlan1: left allmulticast mode
[  323.787609][T19214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.892962][T19219] lo speed is unknown, defaulting to 1000
[  324.106204][T19223] netlink: 'syz.2.3267': attribute type 2 has an invalid length.
[  324.125618][T19229] netlink: 'syz.3.3269': attribute type 10 has an invalid length.
[  324.144995][T19223] __nla_validate_parse: 5 callbacks suppressed
[  324.145011][T19223] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3267'.
[  324.172844][T19229] mac80211_hwsim hwsim680 wlan1: entered allmulticast mode
[  324.284834][T19236] lo speed is unknown, defaulting to 1000
[  324.603896][T19245] lo speed is unknown, defaulting to 1000
[  324.707561][T19248] bond0: (slave macvlan1): Opening slave failed
[  324.818956][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3274'.
[  324.832266][T19246] netlink: 'syz.2.3272': attribute type 2 has an invalid length.
[  324.850784][T19246] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3272'.
[  325.110970][T19266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3278'.
[  325.114033][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3278'.
[  325.168240][T19270] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3280'.
[  325.232946][T19268] netlink: 'syz.1.3279': attribute type 10 has an invalid length.
[  325.355197][T19279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3283'.
[  325.597633][T19285] netlink: 1564 bytes leftover after parsing attributes in process `syz.2.3285'.
[  325.604946][T19285] netlink: 2717 bytes leftover after parsing attributes in process `syz.2.3285'.
[  325.608887][T19285] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3285'.
[  325.731503][T19304] ip6erspan0: entered promiscuous mode
[  325.733606][T19304] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check.
[  325.916480][T19315] netlink: 'syz.3.3288': attribute type 10 has an invalid length.
[  326.175545][T19327] mac80211_hwsim hwsim567 wlan1: entered allmulticast mode
[  326.898845][T19338] validate_nla: 5 callbacks suppressed
[  326.898859][T19338] netlink: 'syz.2.3299': attribute type 12 has an invalid length.
[  327.250523][T19353] netlink: 'syz.1.3304': attribute type 12 has an invalid length.
[  327.256039][T19353] team0: Unable to change to the same mode the team is in
[  327.264544][T19346] lo speed is unknown, defaulting to 1000
[  327.267393][T19353] vlan0: entered promiscuous mode
[  327.753823][T19391] netlink: 'syz.2.3312': attribute type 1 has an invalid length.
[  327.790614][T19391] 8021q: adding VLAN 0 to HW filter on device bond30
[  327.825317][T19391] veth19: entered promiscuous mode
[  327.831719][T19391] bond30: (slave veth19): Enslaving as a backup interface with a down link
[  327.843240][T19391] bond30: (slave veth19): Releasing backup interface
[  328.073432][T19419] lo speed is unknown, defaulting to 1000
[  328.318796][T19410] lo speed is unknown, defaulting to 1000
[  328.602771][T19437] netlink: 'syz.3.3321': attribute type 10 has an invalid length.
[  328.830508][T19459] lo speed is unknown, defaulting to 1000
[  329.008904][T19474] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  329.015695][T19474] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  329.023088][T19465] netlink: 'syz.3.3325': attribute type 2 has an invalid length.
[  329.139694][T19474] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  329.171771][T19474] 8021q: adding VLAN 0 to HW filter on device bond27
[  329.180924][T19474] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  329.184005][T19477] vlan2: entered allmulticast mode
[  329.190672][T19477] bond27: (slave vlan2): Opening slave failed
[  329.204674][T19474] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  329.390397][T19499] __nla_validate_parse: 13 callbacks suppressed
[  329.390413][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'.
[  329.448251][T19502] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3331'.
[  329.575082][T19507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.578152][T19507] syzkaller0: entered promiscuous mode
[  329.582679][T19507] syzkaller0: entered allmulticast mode
[  329.594963][T19507] tipc: Resetting bearer <eth:syzkaller0>
[  329.607121][T19506] tipc: Resetting bearer <eth:syzkaller0>
[  329.616657][T19506] tipc: Disabling bearer <eth:syzkaller0>
[  329.722195][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'.
[  329.918123][T19520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3338'.
[  330.002050][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'.
[  330.053688][T19529] nbd: must specify an index to disconnect
[  330.060466][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'.
[  330.373947][T19541] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  330.591396][T19552] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3347'.
[  330.592476][T19553] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3348'.
[  330.598963][T19552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3347'.
[  330.645773][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3349'.
[  331.335087][ T9838] lo speed is unknown, defaulting to 1000
[  331.337573][ T5881] lo speed is unknown, defaulting to 1000
[  331.348291][ T9838] lo speed is unknown, defaulting to 1000
[  331.522386][T19618] 8021q: adding VLAN 0 to HW filter on device bond28
[  331.534427][T19618] bond28: (slave wlan0): Opening slave failed
[  331.562253][T19618] vlan2: entered allmulticast mode
[  331.568126][T19618] bond28: (slave vlan2): Opening slave failed
[  331.721904][T19640] mac80211_hwsim hwsim738 wlan1: entered allmulticast mode
[  331.806186][T19650] mac80211_hwsim hwsim739 wlan1: entered allmulticast mode
[  331.843257][T19650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.848216][T19650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.028554][T19662] validate_nla: 71 callbacks suppressed
[  332.028569][T19662] netlink: 'syz.2.3372': attribute type 1 has an invalid length.
[  332.035056][T19662] netlink: 'syz.2.3372': attribute type 4 has an invalid length.
[  332.063881][T19665] netlink: 'syz.1.3373': attribute type 1 has an invalid length.
[  332.093273][T19665] 8021q: adding VLAN 0 to HW filter on device bond29
[  332.187800][T19675] netlink: 'syz.1.3376': attribute type 12 has an invalid length.
[  332.310295][T19684] netlink: 'syz.1.3379': attribute type 11 has an invalid length.
[  332.721087][T19696] netlink: 'syz.3.3382': attribute type 15 has an invalid length.
[  332.797198][T19698] netlink: 'syz.3.3383': attribute type 10 has an invalid length.
[  332.926624][T19712] syzkaller1: entered promiscuous mode
[  332.928655][T19712] syzkaller1: entered allmulticast mode
[  333.103794][T19714] lo speed is unknown, defaulting to 1000
[  333.189529][T19717] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.213020][T19717] bond0: (slave macvlan0): Opening slave failed
[  333.324452][T19714] netlink: 'syz.3.3388': attribute type 2 has an invalid length.
[  333.564938][T19738] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  333.567359][T19738] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  333.692192][T19747] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.784778][T19752] lo speed is unknown, defaulting to 1000
[  333.954700][T19758] bond0: (slave macvlan1): Opening slave failed
[  334.385684][T19775] netlink: 'syz.2.3406': attribute type 10 has an invalid length.
[  334.522432][T19787] lo speed is unknown, defaulting to 1000
[  334.544408][T19785] bridge11: entered promiscuous mode
[  334.546533][T19785] bridge11: entered allmulticast mode
[  334.693730][T19790] netlink: 'syz.1.3408': attribute type 2 has an invalid length.
[  334.737454][T19799] batadv_slave_1: entered promiscuous mode
[  334.767068][T19801] batadv_slave_1: left promiscuous mode
[  334.796477][T19787] __nla_validate_parse: 10 callbacks suppressed
[  334.796491][T19787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3408'.
[  334.804604][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'.
[  335.214192][T19816] team0: Mode changed to "broadcast"
[  335.221069][T19816] vlan0: entered promiscuous mode
[  335.225223][T19816] veth1: entered promiscuous mode
[  335.243668][T19816] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  335.766817][T19831] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.170445][T19845] netlink: 'syz.3.3425': attribute type 8 has an invalid length.
[  336.233482][T19844] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3426'.
[  336.234012][T19842] lo speed is unknown, defaulting to 1000
[  336.242410][T19844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.245101][T19844] syzkaller0: entered promiscuous mode
[  336.247121][T19844] syzkaller0: entered allmulticast mode
[  336.253846][T19843] tipc: Resetting bearer <eth:syzkaller0>
[  336.283542][T19843] tipc: Disabling bearer <eth:syzkaller0>
[  336.403588][T19846] ieee802154 phy1 wpan1: encryption failed: -90
[  336.411768][T19846] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3427'.
[  336.676877][T19863] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3431'.
[  336.693746][T19863] veth9: entered promiscuous mode
[  336.788946][T19872] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3434'.
[  336.944963][T19878] bond0: option mode: unable to set because the bond device is up
[  336.953407][T19878] bond0: (slave macvlan1): Opening slave failed
[  337.052696][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'.
[  337.145952][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'.
[  337.181914][T19887] validate_nla: 1 callbacks suppressed
[  337.181928][T19887] netlink: 'syz.3.3438': attribute type 1 has an invalid length.
[  337.192805][T19887] netlink: 'syz.3.3438': attribute type 1 has an invalid length.
[  337.277760][T19887] netlink: 'syz.3.3438': attribute type 1 has an invalid length.
[  337.351869][T19887] 8021q: adding VLAN 0 to HW filter on device bond16
[  337.363052][T19898] netlink: 'syz.1.3440': attribute type 1 has an invalid length.
[  337.366238][T19898] netlink: 'syz.1.3440': attribute type 1 has an invalid length.
[  337.433020][T19901] sctp: [Deprecated]: syz.3.3441 (pid 19901) Use of int in max_burst socket option deprecated.
[  337.433020][T19901] Use struct sctp_assoc_value instead
[  337.452340][T19898] netlink: 'syz.1.3440': attribute type 1 has an invalid length.
[  337.479088][T19898] 8021q: adding VLAN 0 to HW filter on device bond30
[  337.515730][T19898] bond30: (slave wlan0): Opening slave failed
[  337.538381][T19910] syzkaller0: entered promiscuous mode
[  337.544367][T19910] syzkaller0: entered allmulticast mode
[  337.558333][T19910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3443'.
[  337.568101][T19910] mac80211_hwsim hwsim187 wlan0: entered promiscuous mode
[  337.571844][T19910] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  337.584705][T19913] netlink: 'syz.1.3444': attribute type 6 has an invalid length.
[  337.599127][T19913] netlink: 'syz.1.3444': attribute type 12 has an invalid length.
[  337.604740][T19913] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3444'.
[  337.738439][T19920] netlink: 'syz.1.3446': attribute type 9 has an invalid length.
[  338.079187][T19937] syzkaller0: entered promiscuous mode
[  338.082192][T19937] syzkaller0: entered allmulticast mode
[  339.162544][T19944] lo speed is unknown, defaulting to 1000
[  339.186580][T19946] netlink: 'syz.3.3454': attribute type 83 has an invalid length.
[  339.262683][T19952] mac80211_hwsim hwsim187 wlan0: left promiscuous mode
[  340.491419][T19994] lo speed is unknown, defaulting to 1000
[  340.692588][T20000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.851695][T20015] __nla_validate_parse: 1 callbacks suppressed
[  340.851705][T20015] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3470'.
[  340.985816][T20021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3471'.
[  340.991230][T20019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3471'.
[  341.307059][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.311594][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.315094][T20035] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.335432][T20034] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3476'.
[  341.353748][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.357181][T20035] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.406214][T20035] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3475'.
[  341.646607][T20060] !: renamed from dummy0
[  341.744328][T20065] ieee802154 phy1 wpan1: encryption failed: -22
[  341.868802][T20074] syzkaller1: entered promiscuous mode
[  341.871288][T20074] syzkaller1: entered allmulticast mode
[  341.934620][T20081] vlan0: left promiscuous mode
[  341.944946][T20081] mac80211_hwsim hwsim738 wlan1: left allmulticast mode
[  342.098186][T20090] syz_tun: entered promiscuous mode
[  342.121202][T20090] mac80211_hwsim hwsim738 wlan1: entered allmulticast mode
[  342.190072][T20102] team0: Port device dummy0 added
[  342.196186][T20102] validate_nla: 12 callbacks suppressed
[  342.196199][T20102] netlink: 'syz.1.3487': attribute type 10 has an invalid length.
[  342.205402][T20100] team0: Port device dummy0 removed
[  342.215045][T20105] bond0: option mode: unable to set because the bond device is up
[  342.269714][T20108] netlink: 'syz.1.3489': attribute type 9 has an invalid length.
[  342.448517][T20127] veth0_to_bridge: entered promiscuous mode
[  342.453613][T20127] veth0_to_bridge: left promiscuous mode
[  342.539810][T20142] mac80211_hwsim hwsim738 wlan1: left allmulticast mode
[  342.550988][T20132] mac80211_hwsim hwsim738 wlan1: entered allmulticast mode
[  342.627718][T20147] mac80211_hwsim hwsim738 wlan1: left allmulticast mode
[  342.646886][T20147] netlink: 'syz.1.3500': attribute type 10 has an invalid length.
[  342.654280][T20147] lo speed is unknown, defaulting to 1000
[  342.662466][T20147] mac80211_hwsim hwsim738 wlan1: entered allmulticast mode
[  342.713199][T20152] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  342.718707][T20152] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  342.745497][T20160] mac80211_hwsim hwsim187 wlan0: entered promiscuous mode
[  342.752014][T20160] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  342.804292][T20152] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  342.823198][T20152] 8021q: adding VLAN 0 to HW filter on device bond31
[  342.871703][T20152] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  342.876572][T20152] bond31: (slave wlan0): Opening slave failed
[  342.892739][T20152] vlan0: entered allmulticast mode
[  342.895082][T20152] bond31: (slave vlan0): Opening slave failed
[  343.173716][T20196] netlink: 'syz.3.3514': attribute type 12 has an invalid length.
[  343.368772][T20205] lo speed is unknown, defaulting to 1000
[  343.788391][T20238] syz_tun: left promiscuous mode
[  343.811348][T20238] mac80211_hwsim hwsim738 wlan1: left allmulticast mode
[  343.883010][ T5711] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.887667][ T5711] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.941809][T20242] 8021q: adding VLAN 0 to HW filter on device bond32
[  343.945463][ T5711] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.951566][ T5711] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.118504][ T5711] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.121759][ T5711] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.174858][ T5711] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.178171][ T5711] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  344.281429][T20265] netlink: 'syz.3.3533': attribute type 1 has an invalid length.
[  344.322135][T20271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.326139][T20272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.378327][T20274] mac80211_hwsim hwsim699 wlan1: entered allmulticast mode
[  344.431429][T20274] netlink: 'syz.2.3535': attribute type 10 has an invalid length.
[  344.437808][T20274] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  344.440079][T20277] netlink: 'syz.3.3536': attribute type 1 has an invalid length.
[  344.441074][T20274] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.605760][T20280] 8021q: adding VLAN 0 to HW filter on device bond17
[  344.608829][T20277] mac80211_hwsim hwsim187 wlan0: left promiscuous mode
[  344.622776][T20277] bond17: (slave wlan0): Opening slave failed
[  344.713436][T20279] lo speed is unknown, defaulting to 1000
[  344.970936][T20299] lo speed is unknown, defaulting to 1000
[  345.068358][T20305] tipc: Enabling <ib:lo> not permitted
[  345.070703][T20305] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  345.081231][T20305] mac80211_hwsim hwsim187 wlan0: entered promiscuous mode
[  345.083816][T20305] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  345.168266][T20307] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.436147][T20323] mac80211_hwsim hwsim738 wlan1: entered allmulticast mode
[  345.965605][T20354] __nla_validate_parse: 30 callbacks suppressed
[  345.965615][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'.
[  346.028797][T20362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3555'.
[  346.042661][T20352] ieee802154 phy1 wpan1: encryption failed: -22
[  346.246863][T20379] sch_tbf: peakrate 1024 is lower than or equals to rate 30259 !
[  346.330700][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'.
[  346.373217][T20384] lo speed is unknown, defaulting to 1000
[  346.604293][T20402] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3566'.
[  346.654670][T20405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3567'.
[  347.013258][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'.
[  347.025092][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.027962][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.034235][T20419] netlink: zone id is out of range
[  347.036080][T20419] netlink: zone id is out of range
[  347.043884][T20419] netlink: zone id is out of range
[  347.046892][T20419] netlink: zone id is out of range
[  347.049219][T20419] netlink: zone id is out of range
[  347.051551][T20419] netlink: zone id is out of range
[  347.053819][T20419] netlink: zone id is out of range
[  347.056926][T20419] netlink: zone id is out of range
[  347.059071][T20419] netlink: zone id is out of range
[  347.063641][T20419] netlink: zone id is out of range
[  347.177412][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'.
[  347.230424][T20424] lo speed is unknown, defaulting to 1000
[  347.446650][T20424] validate_nla: 14 callbacks suppressed
[  347.446665][T20424] netlink: 'syz.3.3574': attribute type 2 has an invalid length.
[  347.572137][T20432] netlink: 'syz.3.3576': attribute type 6 has an invalid length.
[  347.578649][T20432] netlink: 'syz.3.3576': attribute type 12 has an invalid length.
[  347.584986][T20432] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3576'.
[  347.676408][T20435] netlink: 'syz.2.3575': attribute type 10 has an invalid length.
[  348.124400][T20461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.139403][T20458] tipc: Disabling bearer <eth:syzkaller0>
[  348.145133][T20459] dvmrp1: tun_chr_ioctl cmd 1074025681
[  348.406656][T20464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3584'.
[  348.478448][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[  349.311645][T20485] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  349.383949][T20501] mac80211_hwsim hwsim738 wlan1: left allmulticast mode
[  349.445076][T20505] netlink: 'syz.1.3595': attribute type 10 has an invalid length.
[  349.546015][T20511] syzkaller1: entered promiscuous mode
[  349.549016][T20511] syzkaller1: entered allmulticast mode
[  349.629537][T20513] netlink: 'syz.3.3596': attribute type 10 has an invalid length.
[  349.700363][T20515] mac80211_hwsim hwsim699 wlan1: left allmulticast mode
[  350.019283][T20544] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  350.024957][T20544] CPU: 1 UID: 0 PID: 20544 Comm: syz.2.3607 Not tainted syzkaller #0 PREEMPT(full) 
[  350.024973][T20544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.024981][T20544] Call Trace:
[  350.024986][T20544]  <TASK>
[  350.024991][T20544]  dump_stack_lvl+0x189/0x250
[  350.025013][T20544]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.025027][T20544]  ? __pfx__printk+0x10/0x10
[  350.025046][T20544]  ? kernfs_path_from_node+0x2f/0x290
[  350.025059][T20544]  ? kernfs_path_from_node+0x250/0x290
[  350.025070][T20544]  ? kernfs_path_from_node+0x2f/0x290
[  350.025086][T20544]  sysfs_warn_dup+0x8e/0xa0
[  350.025099][T20544]  sysfs_do_create_link_sd+0xc0/0x110
[  350.025113][T20544]  device_add_class_symlinks+0x1cf/0x240
[  350.025130][T20544]  device_add+0x475/0xb50
[  350.025145][T20544]  wiphy_register+0x1ba6/0x28d0
[  350.025204][T20544]  ? __pfx_wiphy_register+0x10/0x10
[  350.025220][T20544]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  350.025246][T20544]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  350.025262][T20544]  ieee80211_register_hw+0x3425/0x4080
[  350.025286][T20544]  ? ieee80211_register_hw+0x1461/0x4080
[  350.025305][T20544]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  350.025320][T20544]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  350.025341][T20544]  ? __hrtimer_setup+0x187/0x210
[  350.025353][T20544]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  350.025372][T20544]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  350.025409][T20544]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  350.025422][T20544]  ? trace_kmalloc+0x1f/0xd0
[  350.025434][T20544]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  350.025449][T20544]  ? kstrndup+0xbf/0x160
[  350.025469][T20544]  hwsim_new_radio_nl+0xea4/0x1b10
[  350.025487][T20544]  ? __pfx___nla_validate_parse+0x10/0x10
[  350.025514][T20544]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.025539][T20544]  ? __nla_parse+0x40/0x60
[  350.025559][T20544]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  350.025581][T20544]  genl_family_rcv_msg_doit+0x215/0x300
[  350.025601][T20544]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  350.025643][T20544]  ? bpf_lsm_capable+0x9/0x20
[  350.025660][T20544]  ? security_capable+0x7e/0x2e0
[  350.025683][T20544]  genl_rcv_msg+0x60e/0x790
[  350.025702][T20544]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.025715][T20544]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.025742][T20544]  netlink_rcv_skb+0x208/0x470
[  350.025758][T20544]  ? __lock_acquire+0xab9/0xd20
[  350.025774][T20544]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.025789][T20544]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.025822][T20544]  ? down_read+0x1ad/0x2e0
[  350.025836][T20544]  genl_rcv+0x28/0x40
[  350.025848][T20544]  netlink_unicast+0x82f/0x9e0
[  350.025871][T20544]  ? __pfx_netlink_unicast+0x10/0x10
[  350.025889][T20544]  ? netlink_sendmsg+0x642/0xb30
[  350.025899][T20544]  ? skb_put+0x11b/0x210
[  350.025914][T20544]  netlink_sendmsg+0x805/0xb30
[  350.025932][T20544]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.025946][T20544]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.025960][T20544]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.025972][T20544]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.025985][T20544]  __sock_sendmsg+0x21c/0x270
[  350.026002][T20544]  ____sys_sendmsg+0x505/0x830
[  350.026021][T20544]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.026040][T20544]  ? import_iovec+0x74/0xa0
[  350.026057][T20544]  ___sys_sendmsg+0x21f/0x2a0
[  350.026072][T20544]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.026114][T20544]  ? __fget_files+0x2a/0x420
[  350.026125][T20544]  ? __fget_files+0x3a0/0x420
[  350.026143][T20544]  __x64_sys_sendmsg+0x19b/0x260
[  350.026186][T20544]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.026243][T20544]  ? do_syscall_64+0xbe/0x3b0
[  350.026261][T20544]  do_syscall_64+0xfa/0x3b0
[  350.026270][T20544]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.026286][T20544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.026297][T20544]  ? exc_page_fault+0x9f/0xf0
[  350.026315][T20544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.026326][T20544] RIP: 0033:0x7f34be38ebe9
[  350.026338][T20544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.026348][T20544] RSP: 002b:00007f34bc5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.026361][T20544] RAX: ffffffffffffffda RBX: 00007f34be5c6090 RCX: 00007f34be38ebe9
[  350.026370][T20544] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  350.026377][T20544] RBP: 00007f34be411e19 R08: 0000000000000000 R09: 0000000000000000
[  350.026384][T20544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.026391][T20544] R13: 00007f34be5c6128 R14: 00007f34be5c6090 R15: 00007ffce6c65a88
[  350.026413][T20544]  </TASK>
[  350.510803][T20556] netlink: 'syz.3.3612': attribute type 13 has an invalid length.
[  350.514235][T20556] netlink: 'syz.3.3612': attribute type 17 has an invalid length.
[  350.555778][T20556] 8021q: adding VLAN 0 to HW filter on device team0
[  350.558540][T20556] tipc: Resetting bearer <eth:team0>
[  350.635528][T20561] netlink: 'syz.3.3613': attribute type 9 has an invalid length.
[  350.718477][T20564] netlink: 'syz.1.3614': attribute type 9 has an invalid length.
[  350.824089][T20568] siw: device registration error -23
[  351.003873][T20572] 8021q: adding VLAN 0 to HW filter on device bond18
[  351.007956][T20572] mac80211_hwsim hwsim187 wlan0: left promiscuous mode
[  351.011392][T20572] bond18: (slave wlan0): Opening slave failed
[  351.090257][T20577] __nla_validate_parse: 11 callbacks suppressed
[  351.090274][T20577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3618'.
[  351.184935][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[  351.294949][T20587] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.345575][T20589] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3622'.
[  351.439469][T20590] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3622'.
[  351.725100][T20594] 8021q: adding VLAN 0 to HW filter on device bond33
[  351.732962][T20594] bond33: (slave wlan0): Opening slave failed
[  351.745789][T20594] vlan0: entered allmulticast mode
[  352.153656][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'.
[  352.165919][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'.
[  352.183021][T20633] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3634'.
[  352.468026][T20649] syzkaller1: entered promiscuous mode
[  352.470752][T20649] syzkaller1: entered allmulticast mode
[  352.476618][T20649] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3639'.
[  352.745489][T20656] macvtap0: entered promiscuous mode
[  352.747727][T20656] macvtap0: entered allmulticast mode
[  352.900149][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'.
[  353.036803][T20676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3644'.
[  353.245470][T20678] tipc: Resetting bearer <eth:team0>
[  353.254673][T20678] vlan0: left promiscuous mode
[  353.257759][T20678] veth1: left promiscuous mode
[  353.361018][T20684] ip6erspan0: left promiscuous mode
[  353.375004][T20684] veth19: left promiscuous mode
[  353.377541][T20684] bridge11: left promiscuous mode
[  353.379741][T20684] bridge11: left allmulticast mode
[  353.425280][T20697] validate_nla: 8 callbacks suppressed
[  353.425360][T20697] netlink: 'syz.2.3651': attribute type 1 has an invalid length.
[  353.872988][T20716] netlink: 'syz.2.3656': attribute type 8 has an invalid length.
[  353.908420][T20713] netlink: 'syz.1.3655': attribute type 12 has an invalid length.
[  353.989159][T20715] tipc: Enabling of bearer <et:g> rejected, media not registered
[  354.093576][T20722] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  354.096884][T20722] net_ratelimit: 5 callbacks suppressed
[  354.096893][T20722] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  354.105924][T20724] mac80211_hwsim hwsim798 wlan1: entered allmulticast mode
[  354.143360][T20724] netlink: 'syz.1.3660': attribute type 10 has an invalid length.
[  354.148574][T20724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  354.153696][T20724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  354.314250][T20739] netlink: 'syz.3.3664': attribute type 1 has an invalid length.
[  354.317084][T20739] netlink: 'syz.3.3664': attribute type 1 has an invalid length.
[  354.343614][T20746] netlink: 'syz.3.3665': attribute type 1 has an invalid length.
[  354.346354][T20746] netlink: 'syz.3.3665': attribute type 1 has an invalid length.
[  354.385587][T20748] lo speed is unknown, defaulting to 1000
[  354.398668][T20746] netlink: 'syz.3.3665': attribute type 1 has an invalid length.
[  354.415592][T20746] 8021q: adding VLAN 0 to HW filter on device bond19
[  354.516028][T20753] netlink: 'syz.3.3667': attribute type 9 has an invalid length.
[  354.718682][T20757] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  354.850323][T20757] vlan0: entered promiscuous mode
[  354.852125][T20757] veth1: entered promiscuous mode
[  354.854702][T20757] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  355.001685][T20763] lo speed is unknown, defaulting to 1000
[  355.725533][T20783] vlan0: left promiscuous mode
[  355.727592][T20783] veth1: left promiscuous mode
[  356.091823][T20792] 8021q: adding VLAN 0 to HW filter on device bond32
[  356.096277][T20805] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.102696][T20792] bond32: (slave wlan0): Opening slave failed
[  356.134246][T20792] vlan0: entered allmulticast mode
[  356.137466][T20792] bond32: (slave vlan0): Opening slave failed
[  356.188787][T20810] __nla_validate_parse: 18 callbacks suppressed
[  356.188798][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'.
[  356.297799][T20817] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001
[  356.434180][T20820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3686'.
[  356.571240][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'.
[  356.607041][T20833] lo speed is unknown, defaulting to 1000
[  356.633823][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'.
[  356.773566][T20845] ieee802154 phy1 wpan1: encryption failed: -22
[  356.965809][T20857] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3696'.
[  357.252965][T20863] lo speed is unknown, defaulting to 1000
[  357.445010][T20869] batadv0: entered promiscuous mode
[  357.487186][T20864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3698'.
[  357.741825][T20883] lo speed is unknown, defaulting to 1000
[  357.761751][T20879] mac80211_hwsim hwsim798 wlan1: left allmulticast mode
[  358.173818][T20899] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3707'.
[  358.272753][T20908] bond0: option mode: unable to set because the bond device is up
[  358.293369][T20902] lo speed is unknown, defaulting to 1000
[  358.417773][T20912] k*]: entered promiscuous mode
[  358.444845][T20912] 8021q: adding VLAN 0 to HW filter on device team0
[  358.447467][T20912] tipc: Resetting bearer <eth:team0>
[  358.449515][T20912] tipc: Resetting bearer <eth:team0>
[  358.454518][T20912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.782100][T20924] bond0: (slave macvlan1): Opening slave failed
[  358.807588][T20925] validate_nla: 13 callbacks suppressed
[  358.807602][T20925] netlink: 'syz.3.3715': attribute type 10 has an invalid length.
[  359.256014][T20960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.259453][T20960] syzkaller0: entered promiscuous mode
[  359.265695][T20960] syzkaller0: entered allmulticast mode
[  359.271965][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3725'.
[  359.286026][T20960] tipc: Resetting bearer <eth:syzkaller0>
[  359.291187][T20959] tipc: Resetting bearer <eth:syzkaller0>
[  359.299799][T20959] tipc: Disabling bearer <eth:syzkaller0>
[  359.452186][T20969] netlink: 'syz.1.3727': attribute type 27 has an invalid length.
[  359.578359][T20978] netlink: 'syz.1.3730': attribute type 11 has an invalid length.
[  359.734515][T20983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3731'.
[  360.013079][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'.
[  360.365451][T21025] lo speed is unknown, defaulting to 1000
[  360.369331][T21028] netlink: 'syz.2.3745': attribute type 9 has an invalid length.
[  360.491185][T21031] netlink: 'syz.2.3746': attribute type 10 has an invalid length.
[  360.537454][T21026] netlink: 'syz.3.3744': attribute type 2 has an invalid length.
[  360.673553][T21039] tipc: Resetting bearer <eth:team0>
[  360.989442][T21059] bond0: (slave macvlan1): Opening slave failed
[  361.043636][T21065] mac80211_hwsim hwsim778 wlan0: entered promiscuous mode
[  361.046329][T21065] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  361.073964][T21067] tipc: Resetting bearer <eth:team0>
[  361.136476][T21071] netlink: 'syz.1.3759': attribute type 1 has an invalid length.
[  361.139738][T21071] netlink: 'syz.1.3759': attribute type 1 has an invalid length.
[  361.163496][T21072] ieee802154 phy1 wpan1: encryption failed: -22
[  361.201824][T21074] __nla_validate_parse: 3 callbacks suppressed
[  361.201834][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'.
[  361.235774][T21071] netlink: 'syz.1.3759': attribute type 1 has an invalid length.
[  361.258654][T21071] 8021q: adding VLAN 0 to HW filter on device bond33
[  361.261630][T21077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3761'.
[  361.271298][T21071] mac80211_hwsim hwsim778 wlan0: left promiscuous mode
[  361.274815][T21071] bond33: (slave wlan0): Opening slave failed
[  361.284682][T21071] vlan0: entered allmulticast mode
[  361.287164][T21071] bond33: (slave vlan0): Opening slave failed
[  361.454457][T21086] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  361.469109][T21086] netlink: 'syz.2.3764': attribute type 10 has an invalid length.
[  361.525156][T21095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3766'.
[  361.675455][T21108] bond0: (slave macvlan1): Opening slave failed
[  361.718692][T21110] netlink: 212856 bytes leftover after parsing attributes in process `syz.2.3771'.
[  361.728011][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'.
[  361.787743][T21112] tipc: Resetting bearer <eth:team0>
[  361.793533][T21112] team0: Unable to change to the same mode the team is in
[  361.796815][T21112] vlan0: entered promiscuous mode
[  361.798691][T21112] veth1: entered promiscuous mode
[  361.843414][T21116] tipc: Resetting bearer <eth:team0>
[  362.084150][T21132] sctp: [Deprecated]: syz.3.3777 (pid 21132) Use of int in max_burst socket option deprecated.
[  362.084150][T21132] Use struct sctp_assoc_value instead
[  362.326775][T21149] lo speed is unknown, defaulting to 1000
[  362.515726][T21152] netlink: 'syz.1.3782': attribute type 2 has an invalid length.
[  362.538064][T21152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3782'.
[  362.985295][T21185] lo speed is unknown, defaulting to 1000
[  363.055938][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3794'.
[  363.233672][T21199] syz_tun: left allmulticast mode
[  363.318776][T21211] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3797'.
[  363.325744][T21211] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3797'.
[  363.552421][T21215] ieee802154 phy1 wpan1: encryption failed: -22
[  363.583365][T21215] team0: Mode changed to "loadbalance"
[  363.597248][T21217] 8021q: adding VLAN 0 to HW filter on device bond20
[  363.609486][T21217] veth9: entered promiscuous mode
[  363.614407][T21217] bond20: (slave veth9): Enslaving as a backup interface with a down link
[  363.632746][T21217] tipc: Resetting bearer <eth:team0>
[  363.636528][T21217] bond20: (slave veth9): Releasing backup interface
[  363.689658][T21222] lo speed is unknown, defaulting to 1000
[  363.764040][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'.
[  363.956998][T21247] validate_nla: 2 callbacks suppressed
[  363.957029][T21247] netlink: 'syz.3.3804': attribute type 6 has an invalid length.
[  363.982562][T21247] netlink: 'syz.3.3804': attribute type 12 has an invalid length.
[  363.993094][T21228] netlink: 'syz.2.3801': attribute type 2 has an invalid length.
[  364.152688][T21260] tipc: Resetting bearer <eth:team0>
[  364.233768][T21260] ieee802154 phy1 wpan1: encryption failed: -22
[  364.301520][T21278] netlink: 'syz.1.3812': attribute type 1 has an invalid length.
[  364.304337][T21278] netlink: 'syz.1.3812': attribute type 1 has an invalid length.
[  364.371085][T21287] netlink: 'syz.2.3814': attribute type 1 has an invalid length.
[  364.382285][T21290] netlink: 'syz.1.3812': attribute type 1 has an invalid length.
[  364.384619][T21287] bond34: entered promiscuous mode
[  364.386963][T21287] bond34: entered allmulticast mode
[  364.419064][T21290] 8021q: adding VLAN 0 to HW filter on device bond34
[  364.429779][T21287] bridge16: entered promiscuous mode
[  364.433040][T21287] bridge16: entered allmulticast mode
[  364.437121][T21293] netlink: 'syz.3.3815': attribute type 6 has an invalid length.
[  364.437586][T21287] bond34: (slave bridge16): making interface the new active one
[  364.444646][T21287] bond34: (slave bridge16): Enslaving as an active interface with an up link
[  364.453646][T21293] netlink: 'syz.3.3815': attribute type 12 has an invalid length.
[  365.045204][T21333] tipc: Resetting bearer <eth:team0>
[  365.075587][T21335] netlink: 'syz.2.3825': attribute type 1 has an invalid length.
[  365.111016][T21335] 8021q: adding VLAN 0 to HW filter on device bond35
[  365.122960][T21333] ieee802154 phy1 wpan1: encryption failed: -22
[  365.126703][T21335] ipvlan0: entered allmulticast mode
[  365.128960][T21335] bond35: entered allmulticast mode
[  365.165064][T21335] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  365.211166][T21335] bond34: left promiscuous mode
[  365.213411][T21335] bond34: left allmulticast mode
[  365.217717][T21335] bridge16: left promiscuous mode
[  365.220204][T21335] bridge16: left allmulticast mode
[  365.230620][T21335] ipvlan0: left allmulticast mode
[  365.232984][T21335] bond35: left allmulticast mode
[  365.393660][T21360] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  365.397867][T21360] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  365.404751][T21360] bond1: (slave macvlan0): Releasing backup interface
[  365.457591][T21370] lo speed is unknown, defaulting to 1000
[  365.647219][T21384] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  365.652130][T21384] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  365.656366][T21384] CPU: 0 UID: 0 PID: 21384 Comm: syz.2.3835 Not tainted syzkaller #0 PREEMPT(full) 
[  365.660227][T21384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  365.664265][T21384] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  365.666860][T21384] Code: 18 00 74 08 4c 89 ef e8 8d e8 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 8a e7 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 61 e8 01 f8 4d 89 2e 41 80 3c 1f 00
[  365.674781][T21384] RSP: 0018:ffffc90008a3f3a0 EFLAGS: 00010246
[  365.677387][T21384] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880227fb980
[  365.680690][T21384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  365.683926][T21384] RBP: ffff8880299adfb0 R08: dffffc0000000000 R09: 0000000000000002
[  365.687130][T21384] R10: 000000000000000a R11: 0000000000000000 R12: ffff8880299acda8
[  365.690482][T21384] R13: ffff8880299adfa8 R14: 0000000000000000 R15: 1ffff110053359b6
[  365.693799][T21384] FS:  00007f34bc5d56c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  365.697549][T21384] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  365.700240][T21384] CR2: 00007f34bc5d4fc8 CR3: 0000000048794000 CR4: 00000000000006f0
[  365.703457][T21384] Call Trace:
[  365.704907][T21384]  <TASK>
[  365.706211][T21384]  xfrm_state_insert+0x54/0x60
[  365.708036][T21384]  ipcomp6_init_state+0x655/0x900
[  365.709749][T21384]  __xfrm_init_state+0xa76/0x13f0
[  365.711453][T21384]  ? __xfrm_init_state+0x7ef/0x13f0
[  365.713228][T21384]  xfrm_init_state+0x18/0xa0
[  365.714911][T21384]  pfkey_add+0x1d38/0x2e00
[  365.716609][T21384]  ? __pfx_pfkey_add+0x10/0x10
[  365.718408][T21384]  ? kmem_cache_free+0x18f/0x400
[  365.720274][T21384]  pfkey_sendmsg+0xbfe/0x1090
[  365.721978][T21384]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  365.724009][T21384]  ? aa_sock_msg_perm+0xf1/0x1d0
[  365.725746][T21384]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  365.727847][T21384]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  365.729777][T21384]  __sock_sendmsg+0x21c/0x270
[  365.731586][T21384]  ____sys_sendmsg+0x52d/0x830
[  365.733443][T21384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.735575][T21384]  ? import_iovec+0x74/0xa0
[  365.737319][T21384]  ___sys_sendmsg+0x21f/0x2a0
[  365.739184][T21384]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.741256][T21384]  ? __fget_files+0x2a/0x420
[  365.743032][T21384]  ? __fget_files+0x3a0/0x420
[  365.744806][T21384]  __sys_sendmmsg+0x227/0x430
[  365.746629][T21384]  ? __pfx___sys_sendmmsg+0x10/0x10
[  365.748706][T21384]  ? do_futex+0x333/0x420
[  365.750546][T21384]  ? __pfx___sys_bpf+0x10/0x10
[  365.752641][T21384]  ? rcu_is_watching+0x15/0xb0
[  365.754668][T21384]  __x64_sys_sendmmsg+0xa0/0xc0
[  365.756788][T21384]  do_syscall_64+0xfa/0x3b0
[  365.758799][T21384]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.761098][T21384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.763763][T21384]  ? exc_page_fault+0x9f/0xf0
[  365.765763][T21384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.768313][T21384] RIP: 0033:0x7f34be38ebe9
[  365.770221][T21384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.778499][T21384] RSP: 002b:00007f34bc5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  365.782048][T21384] RAX: ffffffffffffffda RBX: 00007f34be5c6090 RCX: 00007f34be38ebe9
[  365.785326][T21384] RDX: 000000000400008a RSI: 0000200000000180 RDI: 000000000000000f
[  365.788642][T21384] RBP: 00007f34be411e19 R08: 0000000000000000 R09: 0000000000000000
[  365.791880][T21384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  365.795191][T21384] R13: 00007f34be5c6128 R14: 00007f34be5c6090 R15: 00007ffce6c65a88
[  365.798513][T21384]  </TASK>
[  365.799783][T21384] Modules linked in:
[  365.801611][T21384] ---[ end trace 0000000000000000 ]---
[  365.803948][T21384] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  365.806517][T21384] Code: 18 00 74 08 4c 89 ef e8 8d e8 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 8a e7 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 61 e8 01 f8 4d 89 2e 41 80 3c 1f 00
[  365.814161][T21384] RSP: 0018:ffffc90008a3f3a0 EFLAGS: 00010246
[  365.816622][T21384] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880227fb980
[  365.820083][T21384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  365.823357][T21384] RBP: ffff8880299adfb0 R08: dffffc0000000000 R09: 0000000000000002
[  365.826665][T21384] R10: 000000000000000a R11: 0000000000000000 R12: ffff8880299acda8
[  365.830042][T21384] R13: ffff8880299adfa8 R14: 0000000000000000 R15: 1ffff110053359b6
[  365.833253][T21384] FS:  00007f34bc5d56c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  365.836851][T21384] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  365.839566][T21384] CR2: 00007f34bc5d4fc8 CR3: 0000000048794000 CR4: 00000000000006f0
[  365.842956][T21384] Kernel panic - not syncing: Fatal exception in interrupt
[  365.846727][T21384] Kernel Offset: disabled
[  365.848529][T21384] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:18:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008a3ebd0
R8 =ffff888106248237 R9 =1ffff11020c49046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd90f R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f34bc5d56c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f34bc5d4fc8 CR3=0000000048794000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f34be597498 00007f34be597470 XMM03=00007f34be5974a8 00007f34be5974a0
XMM04=00007f34bf0fd100 00007f34be597460 XMM05=00007f34be597478 00007f34be5974c0
XMM06=00007f34be5974b8 00007f34be5974b0 XMM07=00007f34be5974a8 00007f34be5974a0
XMM08=0000000000000000 00007f34be412ee7 XMM09=0000000000000000 00007f34be412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff822bce89 RCX=ed35310c69253c00 RDX=0000000000000000
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=0000000000000cc0 RSP=ffffc900089cf470
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940008da8f9
R12=dffffc0000000000 R13=ffffffff822bce89 R14=ffffffff8e139f20 R15=ffff88801b6f1a10
RIP=ffffffff8b7cab20 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f06798246c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005558802d87e8 CR3=000000011f6ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe489b97498 00007fe489b97470 XMM03=00007fe489b974a8 00007fe489b974a0
XMM04=00007fe48a6fd100 00007fe489b97460 XMM05=00007fe489b97478 00007fe489b974c0
XMM06=00007fe489b974b8 00007fe489b974b0 XMM07=00007fe489b974a8 00007fe489b974a0
XMM08=25370982bebb7dfa fcd65f4233670518 XMM09=0000000000000000 00007fe489a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
