last executing test programs:

1.82126621s ago: executing program 2 (id=4317):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000002c0)={0x40, 0x1410, 0x1, 0x70bd26, 0x2ddfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv4_delrule={0xfffffffffffffd03, 0x21, 0x1, 0xfefffffd, 0x25dfdbfe, {0x2, 0x0, 0x10}, [@FRA_TUN_ID={0x0, 0xc, 0x1, 0x0, 0x1000}]}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r10 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x11c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r9, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

1.352814925s ago: executing program 2 (id=4323):
r0 = socket$tipc(0x1e, 0x7, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x2, 0x8000, 0xfffffffe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095", @ANYRES64=<r2=>r0], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x90c2d0ff9e084433, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$tipc(0x1e, 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r3, @ANYBLOB="010000040000e4dbdf2501000000cd901f64bded73fe8708dcff3c5c8c60f868d06abebb84bd23aab3a50c28fbef804fe89a8d74904ce2f0499e82d30832894b0a1d0a46941d8bf5eb1dda7d947663b6448f21f4296bb96cb02bec055adcc3bc849a72fcd8dbb2cffaba8b874e3072e75c0413f4b46e3a28ebd7ff409c22a699810c34bf2976134e03b1b968fe742062ba1b0d385e55f87deb1069d973fcfde3db65d37f8ad237b4"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="060000000800000004000000094000000a000000d18aac1f17424b3bd00c32ad879b0456e16ac2197c66da398a9381a217d410be65b3f727976163b3f4fcb31b8ca018c17ebb4f662f755755a3bd7f9717d03d874fd8e3489e95466f96c29ec87431d777dc66b69e63e961a1110f5610c6cb993e98f4769f5a82a7d104b26d643bffb308251b55ee500311afa37fd6334e378450bee4e0f2fc77799fa4e83701", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000200"/28], 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000480)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44\x05\x00%nN\xd4\xa2\x88\x00\xd1\x03\x00\x00\x00\xdd\x15\xcc\xd2\xf1d\'%\x11c\x00&\x06\x00\x00\x00\x00\x00\x00\x00K\x8a\xc3\x91l,'}, 0x30)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080)=0x96d9, 0xfe61)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r7)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="b8352ba115c2144bd7ad0b4c52b4968d91c9b3b25b161444ffc3c2d43c43e5477ff94a237772997d8583b6222807222e23491671b983b99a602c84622b5be5d071433a131d73c01d3e32aa77a9d267d8a097a411d0a846254c770f185609bbbd023b9354676c556c2e3e1af316a854e1f49a23ceab8b119e25a7895bd2504d32ebc5d6f19a5888ef338d8c4b9ba34500"/154, 0x9a}, {&(0x7f0000000340)="aadaba8df9dc", 0x6}, {&(0x7f0000000600)="c7473c463ece11e9b421df374e97cb3ef6cda3f7768f35444e522afb49d8874ab806476db844a3b4c8a819892e38a4d946f7df51bb3ffbe2472069cff6e57c66bf93fa259900f92c720227ad1c535cfc2b8ef2b0fa632ef5d3b572b4e6ec3f220f24b08207de27c9e6188f86ee90e33b5b49380544192a12d4b1bcc632b741cdfe3a0f501942bf72178cfef3796e523057ed96d23291dabe9048088b13d10e06d1d3947b7452befa3e29ba", 0xab}, {&(0x7f00000006c0)="870470368da2e8db4cb080028f2dd45be45fa8574815c513d70b417489e0d04432d476926cc478ba7794b4863b9e9a3d0971b233d12c53401bc10c395fb38eb13e75dcba5c652cb5be25359611c36456842fcfbbf9a1fa0f152c8e12dc172a826ca0e365ddf742353fc7da53ec512aa4cbc8665439d3a973f8c7448ad6be74e55da3f8c749ea29c7558a6fbdb86b9b221d984eaa7dd7b3682a7c80116958b3f0f7533e8d00", 0xa5}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000840)="e9ea3da1841dc5007454cdd5e6c64b4fe6203d8138d8564a4dddd538b26982752f45d29f025828576f732c2f7e21065f1f4345f29ab8ac2cd2685a97027f389ae3689b3d522a3e0f5627afba2b72501915ee0f90c2a749522d3f38362af5e64b5b07ff611df92069eb714fbcea73efbb9dba9504c5f3f472ad64ca1e4465f643715bc34181a501f118131a0d5c0d6c083dd22ddfe9512ce6db4344ee3fa73ba6521e32e10234cc68ed6aa033b21388802bb336b1eb2d7b5a10583f0086f5340ae3b8844e3457335bc00e068fdb4fd1207b5a8afddb991775509565ad024f03c9a53e139d34f6e6bec343", 0xea}, {&(0x7f0000000940)="73cd13efed9b0f0e73539247b83152134c4bb0a7fb96f25c7c9f83aa20cd739ffb17085cd00bd81297fe703ed7435ad0eb4691b340946f719b7d3f4ec3df8dbbc50756ba13aee02995caa9f0494ece159c04d3b99081de821c58cbdc4a1e505f6c3a069d677084e382322227c05d687a527c08d2a4437aa7ee3f1b805326246d3f53cfebffdc0e052f24a5bb5948c48788604a329c0f", 0x96}, {&(0x7f0000000540)="7c6dcba8ebff7f00000eab00a8ee1ad77bf2719000000000a3510f0e963eb83dd214b8c3e94e4dfb9d000000007f834e922dc3684904299ad2862f7eaf1c24d4", 0x40}], 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f5788ef0e18040092c2d89cbf20098ac0da70f0dbfa62a3abb5f84b4f2663abfc9fb293187c47da64bbd6ee2b1fa8d5d43c79d30a5370d8b7b9c1da6bcc3c8f2c93c01f9cb548efc06e3579fe9e00fffe4f6ef75a4d70a70bbff0feb0bfaff5ab3ea4ee1296bf9c36cc24e2af8a2e04d504d8dcd97bc91f56ac245a545d989fce39f603ec5344a44162a701d09dda23a97248a690d25928861879ccbae1284c7e6380ebf1d56848f2ce95690ac44a8489c2b14f921dd3ddb8c9c115e625c07b3b2271fdbb64ce7db15a2a5cf4b58ea30e8f1f8939acb2548c4c3e25e823fda3b79aafb1337a22f02d1b2f9c260ad987632ba4828215e669a94602933b0258024e58a228efa0b4709f73e6112f96f0f135589935b0429209150fc0b3bcf071c1474421aff07085ed4d748d903cd9309ed8372a53eda47bb2adea35fbec5c09746c884525631c23bb0672d829688e0c014048b0d0865f79bfa405314e1b5eb423fe05c00"/367], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.351660508s ago: executing program 1 (id=4324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="aa1e021000230078"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010025bd7000ffdbdf25020080ccfd02c8060004000008001e00010000000c000900f2002909", @ANYRES32=0x0, @ANYBLOB="ca609457a99a48e403efacf704da20fd93b44e215c69fa1842dbac8af6b4e706e85adbf4103cbf966c0d625f380825e948534ff3d1e99491194180abc45f97ce5d179913f6f9816e45fbfd789765715bfab7096827554a7eeb3fb3c8ebd0291fc7a0de519969649ea9a6aeea31728b9f7c81acdf49f41223475c49ec97d7b12893784ac4dd2fce1df0310ddf9a7f6a513e4b5ba164b4d7f04ca4dc49586c91283da3e2a9dd0ebf10bcf6af88ab95bb4544f8e37ccc0df60296eac1d1a0"], 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4048808)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f00000001c0)={0x0, 0x4})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$WPAN_WANTACK(r12, 0x0, 0x0, &(0x7f0000000200), 0x4)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

1.232887748s ago: executing program 2 (id=4325):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00')
syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$packet(0x11, 0x2, 0x300)
unshare(0x2060200)
getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040))
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x4}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249686a289cdcc06d3d3dc082d8db8c4621a113177518601e882f2c04", 0x54}], 0x3)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000004880)=ANY=[@ANYBLOB="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"/4485], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={<r9=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003880)="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", 0x1000}, {&(0x7f00000001c0)="cb46ee6a953b28a5ac2103ce0993456100cfaf0af93bc95862d902412923ff8e555ba0c5afa25eaea88aff8b48", 0x2d}, {&(0x7f0000000540)="9301ea772dd782aec09647f0ee1f0d121535a8cba7bbd8722a1f0a5aec1bcb36eb7efdca3fab1e0274da6929e25f61c108f2dc9d9831cab294931b4c8addc3aa6a374223f01450cc9f52a82974d52747b441a17441a360231cb7dda00e1755e0d82770122e3a27b89cab8d66ebb6181f4f049f519cc3eb3b7f59d3b0236568a3897db94592559d47e8554d94abc0b8250a34b5b4e035142919bc28fd3bd05d39d2ba292a56a8746c35a03f63a45cab21c15c2c97fac0b5cba86a0f7591eb7dd91043fdcf9341fb6400aed292a477f4e2ac7b54ae8a5becf4", 0xd8}, {&(0x7f0000000200)="54a0dfadd9c69bbfadcc2e1fe3be8e24f7b78e452f4b34651bcea167f3bb08d9cef758d9190bce3b12b2ca", 0x2b}], 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r9, @ANYRES32=r10], 0x20, 0x2400e044}, 0x24004040)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r11, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0)
setsockopt$inet_int(r11, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)

790.963566ms ago: executing program 0 (id=4329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000feff1300020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1fc, r10, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcf43}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8a5c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x219b}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x61f03af0}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2c13}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x810000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1b7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff9b2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1175}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000800}, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21124}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r15, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="8725", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

693.606796ms ago: executing program 0 (id=4330):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x3)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0xfffffe98, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x14, 0x27, 0x3, 0x2, [{@empty, 0x8}, {@remote, 0x314}]}, @end, @timestamp_prespec={0x44, 0x24, 0x7e, 0x3, 0xa, [{@local, 0x6}, {@private=0xa010100, 0xb}, {@empty, 0xfffffff8}, {@rand_addr=0x64010101, 0x8b}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x4, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRES32=r0, @ANYRES8=r5], 0x48)
r8 = socket(0x10, 0x80003, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r7, 0x7f, '\x00', r10, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

543.87166ms ago: executing program 0 (id=4331):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
listen(r3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r9 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

453.751411ms ago: executing program 1 (id=4332):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x4, 0x4d55, 0x3e0, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0xe}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r1=>0x0}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX=r1], 0x27)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0)

444.510063ms ago: executing program 1 (id=4333):
socket$inet6(0xa, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000bc", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050007000000"], 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000))
ioctl$int_in(r5, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xe}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x2810)

250.183182ms ago: executing program 2 (id=4334):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000045200010004000000000000001c0000001400", @ANYRESDEC=r0], 0x28}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000000)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ad000000", @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf250c0000000c009900ff7f00004e0000000800090005ac0f0009000700a980fd080d00000004002800040028001000508009000100a632c0a256000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4044800}, 0x8800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000400000000002000000300004802c0001800c0001007061796c6f6164001c0002800800044000000000080003400000000008000240000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000afe42359a7710d3"], 0x84}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), 0x0}, 0x20)
sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711048000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

246.929504ms ago: executing program 1 (id=4335):
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r0=>0x0, 0x94, 0xa, [0xffff, 0x5, 0x0, 0xb, 0x9, 0x4, 0xc0, 0x7f, 0x5, 0xb]}, &(0x7f0000000040)=0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r0, 0x48, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x2d, @mcast1, 0x800}]}, &(0x7f0000000140)=0x10)
r1 = socket$kcm(0x29, 0x3, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r3=>r2})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0x2, 0x6, 0x2200, r4, 0x8, '\x00', r5, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x3}, 0x50)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000002c0)={0x1, 0x7})
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000300)="b3b967a02517ee76f0a4125c3c655922bdfbfcc1f5acf99c805c48e798c25ac552374fe15ab334f74d7f861791ecb22a20ff273bcb254a9bc49cd2c4", 0x3c)
socket$alg(0x26, 0x5, 0x0)
write$bt_hci(r4, &(0x7f0000000340)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0xff}}}, 0x5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4)
setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000003c0)={0x5c, @empty, 0x4e22, 0x4, 'lblc\x00', 0xc, 0x90000, 0x52}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5ba0, 0x8}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000480)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, 0x25, r8, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xf, 0x3f2d35e2, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r6, r8, r4, r4, r8, r8, r9, r4], &(0x7f00000005c0)=[{0x4, 0x4, 0x1}, {0x3, 0x2, 0xd, 0x9}, {0x1, 0x1, 0x1, 0xb}, {0x1, 0x4, 0xa, 0x2}, {0x1, 0x5, 0x9, 0x7}, {0x2, 0x2, 0xf}, {0x9, 0x1, 0x9, 0x3}], 0x10, 0xff}, 0x94)
recvmmsg$unix(r8, &(0x7f0000002a40)=[{{&(0x7f0000000700), 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/240, 0xf0}, {&(0x7f0000001880)=""/66, 0x42}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/135, 0x87}], 0x5}}], 0x1, 0x40, &(0x7f0000002a80)={0x0, 0x3938700})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002ac0))
sendmsg$nl_netfilter(r7, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x20, 0x12, 0x8, 0x801, 0x70bd27, 0x25dfdbff, {0x5, 0x0, 0x1}, [@typed={0xc, 0x3e, 0x0, 0x0, @u64=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x44080)
r10 = accept$packet(r4, &(0x7f0000002dc0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002e00)=0x14)
bind$packet(r10, &(0x7f0000002e40)={0x11, 0x16, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000002e80)=0x7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={0xffffffffffffffff, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000002f00)=[0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0], 0x0, 0x54, &(0x7f0000002f80)=[{}], 0x8, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000003040)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000032c0)={'sit0\x00', &(0x7f00000031c0)={'tunl0\x00', r12, 0x700, 0x10, 0x70c5, 0x2, {{0x2d, 0x4, 0x1, 0x1, 0xb4, 0x66, 0x0, 0x2d, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x83, 0xa, "213e63178fccfdd1"}, @end, @cipso={0x86, 0x77, 0x1, [{0x1, 0x7, "49ebb27300"}, {0x7, 0x12, "d63a166b3b9a4bc7074489981191a379"}, {0x2, 0x4, 's^'}, {0x2, 0x9, "e0b1f751d90fa4"}, {0x0, 0x6, "14ce474b"}, {0x1, 0xd, "416e0af1e1a50a7356c713"}, {0x6, 0x11, "e451f98db8cf6e110083141ef4c859"}, {0x6, 0x12, "222f4c3c7db59a61f8d6fdf50bccf101"}, {0x0, 0xd, "6afffce974f5b36b37f7ff"}, {0x1, 0x8, "1f6cf4c78190"}]}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0x9, [0x7]}, @lsrr={0x83, 0x13, 0x2f, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}}})
connect$netrom(r4, &(0x7f0000003300)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000003380)=r4)
bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@bloom_filter={0x1e, 0x1, 0x2, 0x6ccf0, 0x8410, 0xffffffffffffffff, 0x0, '\x00', r11, r8, 0x1, 0x3, 0x3, 0x1, @value=r8}, 0x50)

245.200762ms ago: executing program 0 (id=4336):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="40c4acf0c28aedb281b2514b823ad56d94e8653d0bc9036a0ddae57e4b85d4c7ae1cd05404c1eac9bdae21d9e91d56ff08a38b5ba3568feddef18162f8552179a0840c60d274e9e317d0d28ecb921d8786547627166cb14d35c195cd6416bdbd11b9b0f6efe44c82024e9cd231b4ad8bd874ec8e5fbf28cf663e179cbe960c16f7b113d460110c1a9a281136aa2e99", @ANYRES64=r1, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x1}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xc5, @mcast1, 0x40}, @in={0x2, 0x4e1d, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x4}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r3}, 0x38) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8) (rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe) (async)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000040)={r6}, &(0x7f00000000c0)=0x8) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) (async, rerun: 32)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@allocspi={0x160, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2, [0x27f4, 0x7]}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x160}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r9=>0x0}) (async)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300) (async, rerun: 64)
sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (rerun: 64)
setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xff}, {0x3, 0x2, {0x2, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0x1, 0xff}, {0x0, 0xfffffffffffffffb, {0x2, 0xf0, 0x2}, {0x1}, 0xfe, 0xff}], 0x60) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0x5, 0xb}, {0x4, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)

243.356007ms ago: executing program 2 (id=4337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

173.742853ms ago: executing program 0 (id=4338):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff000000009fa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x7f, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={<r4=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x11f8, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x11e4, 0x16, 0x0, 0x1, [@nested={0x11e0, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@empty}, @nested={0x11c0, 0x72, 0x0, 0x1, [@nested={0x4, 0x13a}, @nested={0x11b5, 0xfa, 0x0, 0x1, [@generic="0d555ccabd6f7f5ecc02f316073126b8dcc1b935bd288d1c21d3cafdc99d09d0c003ca383ade8d42f22c52a4372afc80b94572652789c6377f5a6f76ad709434407bd27d2fdbd261bf7c106947c3dfb810c5ab05fa56ff81b8a2e68c532177100f00000000000000fd8e97124632bdb153a57ecf3d40b5a717b29acdddaff4ded5d0077c40dcf2faa933e59f5d9e2a89bc1dcf6e013ebde5a9e9c8a6d6", @nested={0x109, 0x6a, 0x0, 0x1, [@generic="df0fdda0f55ab57c3431f53f9b9fa3448b77a9cca4c7bb78a06a587bbb4315dbee0dcaacb8330e3cc497ca0f1a", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x27, 0x0, 0x0, 0x1, [@generic="d1140f169840a8d876db919b52e4c40cf8118f18f52eabaab4c3e9f55546a5", @nested={0x4, 0x10e}]}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r2}, @typed={0x9f, 0x2a, 0x0, 0x0, @binary="f2020177186a218e48c1d82b2bdbda6ef5ed4a194407aea525af353b6a12e8edcd57fa4ad36d193cece34103cbfbf99095cadaa1fcb802587269b4758dbc520386c234c0933f6d314d625f39c46e79f628b21efac3b6414e8184bdceacc26f1ef6792ed220c43be669dfab870b907e643c10499c9634939e5b76643344c5324fd65a290c30b406c458e93cc159b90f0b1cd00d41ccb4aa366e3237"}]}, @typed={0x4, 0xa8}, @typed={0x1004, 0xa0, 0x0, 0x0, @binary="08dbc6fca8476312328bb9c12cf3476b73923ef1f69244082683f8a101c23c82f7300af0127101be01f6e3b1ef041b38d3fc4b971b34b4aee5d09e792c5b17a035d86f27dc15ec6ee599914bf23bdc2d6befa1867800dfe01699d33587d7bdd62a70861e944ddbc03d4a53e54d71a1170e33f1c7e6bcf38c3016996ce556429e946d5de148d8b3990a0a8efed10c5f84dc7ef107de98a61476b3bb7010cbb8d3c19f7ede130551dbb868bfa18898185d171f6fa6cadcd2697167cd71a3cb138cb8592b53c7e2dd716846989223856a41f007687e4e0d5d27e273f3f1fd725ca14fe04df37f30812777efb19199bb04f02c33489ecba83b43a8cee1734c89fdedc7d2519288bde655776d837d7abd6418cdcf37b55b46ad18a6f0ab22a52d20108206455bafebd26b77803b8de22121a911867f1e8cc71f01d16a8bbcf13e3c13e4af025e677c65f91ccd5f7cef9963495ed2ec3f6ca43eaa464afd0ebd7a17dfe40ad922921438376042be945449e48a15e15da0f38d909042ce01ff66536f5ad63d61a5854885e042ff8b757ee4fdbe260e3a588a157c5bd4687a2371641ab4e0a73c61873c64a8078cbaed96c8a77a8cf75da66b302624a6b5315d8e58591b28505a4d330dcfffbb169ef76d238459fe1e80b51afe6138e0def3092657c6e5136d374350b0ccda384cbbb6d0b583224d55dba3f300e9230e0443d308aa999de03a4baa6c65a509dbbb151325e657da9cbcb02763903926326a682cb05f5dc1b7f759f4d22ab4af5664d5540c6ed4f6fc5ea44b9a917e2b07972983ecbce6d6cbac81241b011e55ffff622e11e00af785455650f480a36b44d8a7b03f0eaf6c2524ce9487d0b77035000b2a0104e58a7122fbcfb4d71d5fba58e4bf5691cbdbbb20d17011f44b9187267ff004818b435621d57cda3af76bb0e079b8d1968532969635166d778461f466b36d5f4d9186a4822db462661d7b42dbc141c4549fd2ea1315f2f347f0646ef99a7fce2f6f684f1917410a2799ff155482844dafc219c65c00c98dce976c426fddc51685dca264047515dcf7c4428df4bccb82898944c1cb33efa844dca18bcda5cb6c2107b0bd50e016873fce1771a82cb9de38731034c810770a4002a26dcbfc8cb21ba14dc91f75a701305297234a56d2c7681024d74951237c1bb9f61bb928c33ff1ac130a134b4ccc5645c723e073aeb80ecdd2cad7d8df0ddbd51ad8c755226ea3277c3b5dd929da34e85e61e123b05822156891b77eaabb874394dff6e6c6e1783add613a3f5e3830f51dfc12e2712f409570f3597f3cf83f3313390f5d695134e0e30482d6a2bbab21caabf27470e7762d75907da4c0c99a9d7dbe016f158ba8dfb4b348b3087f84d7323370f801d23e8945a6b1bf9c898f07dcffa1ca00684b6de92700b48ade09296cd5bc924e29313abd4aa065fc5241a0ccce48e153942a03153b1f729f1fcf688257bd2b3423c63d2f00179e1423563f892d0fa09adc6392712eb47e2b766c78e28060d423e47801b4bb0063c658ce0b8be3de0026884b8a5d79b2ec4423653fc7fa5e8c316dd88e8d4e56beb7b17260218239f398950fe96a8e7bfe3b6f4702088541f40681cb65de749552ac548ee43fc237362f1f2d1812c63603183c3ab24a2b087ad382c74f0689e35f5a5f5685f51d5e40f4513a381ab549aa74bc9caa77ebe1c09c7801a10607d3165d72721c57cbb61d7675cd019e988b4d5897e6f958d6a2c1c6a756839ad585b8c5fdcb165f59b260fd835e82e0677b2e99d681fbb7bc79599b97ee7d047f5d172202626a1ed3892af29cbbb7de3f7854c76370bce2a7908aa6a734fcee29511166e70f33d77cf13cfa63932e8d491858a83bbd5655ddaf94ed499f7c58ce2e7d0bf90dd8bb525d25eba9c01b65b9301640bd1c10987fa0aa82b011904c29ada195880007ca959f2af95275894bdd2f6d45f77f89d1c9aff2d1d1081f1d329ef2087c72e96fd382cda62223182ffee93d53dca7250789180afd982f52f05b17597f33f630ce0454cbb9c42fdb5919d42f2cb0a51da9d5900cf8031f0c02f28e28b84f92b7833f41032e409f7ddc63e1fdf1925ad07e39ee6775988b359356163609e0da7ad94ebc68a23ee134e5d514e3f0f6f3e812723c24903d18cf753ae6b826d90a9535c719e2abd077d1828656ffd2ce242d161048fa1168c931475ce4381e6201ee7be417a6154e87e8b036dc5a91eabf42664775f30e38edd9d53e08b4e238429955f6a7b0fc38b788a45983b95c15227aae78e5ac4f1ce37e65061e2c69815de9dfe061f33fadb327cc6c9c4dc064f1825e87c1d44ebf90a58a637b43909b3709b6e06a49cf34637a4ed2b0c96875f5556acfa8a5b11f23d7d33062b09521e73209e6893f9249238dcba2475b7de572be2a2d9085399252bd29b0d78ce19f10c6a0e3c929a208ec899a7df0c998ff519b3cc4334885f9a67ef271b68d527f769993b56f1e87a3b19dfbc9592e73439325a6e1c88feb6a8ee8bdc9356e43477ce80670b33076ca753285bee45b74c38381801687b65bad717dd9559db37145ea7cf9cc2ebe6fde6a68c9d3aa3dd0045c59c41da5dd4d6cd222be35efa2575c001e9b19a872766dbace40506ca18b6333fa56ce4f4347ebb6bc080171a5bcbf80404d37a2d7490ad4c2bddd5be690d93e4091706a079b73a9a1501d7d0234d098c8ff50c4bb37e1ee1deea2bb247f4ef18ce6667458936eb1bc497d50bcc2764eb0a7c8f5934e723a89900446a26eb23280b1a9910cefa4d970b77944dde47dec3d53ca578ad8ae1b9e9a581d1d846128e2904fd59bfaaa280abc3870f9450ae8c06ebe92da6aa812d67ddcae0969f9a57e22acbf6db7b6f5a1f91322d96269736129faad82541b45e70192f8611fe96526be967dac3395d6782413e79dab077a07c1c219b6f7fb2a4ee1ba538e45cc1669b5e834a357fb14fdbfdf09b31daa7f35a88186471c2fa0b8f8d219df984b451390d73e38af8e3c30082708937b95f869c26fb1fb13bebc38425e004373e0ed96519531b340123b1c1fa115794991c7b924a8168056235c5ad82d780fedf312fe107443d3f425bac35bf7579e5cc2e747828e1671914bf75516cc37add2e5f0fc288d7445b032f09f8faf31af23cb9b1261129dd1b9a3cca5dc53c60541d5004bc5159ea5496853a501169caeb8bb6adfc3fa98a5cf5e2576dd6d02d96e3b5f5390166443fa8e7fe606df8c442b512bae65acec52b6db44c144416fa0bed5279d8eba7fe614a7d86f98d91fda0130af050987c01fb4201e71f615dc809dfca2b6cbf50b9eb09e791dc09747a50dbc66a91e2406bb46099910c7190e7cf6b0cf2517701071b2aa175e812d415c2714334b834308b40325c1c1efed827d56fe17797f4a260ca8853c968edf1272895e5ce6637f54a192aa7b05efc9dee57da6ea8cd6ca8663ec29451a90c7cfd06bee12ae18b9e6b940aef3fb14c799e20290bc3d15d2d15d5c470700568772f36c52263e33ca64bd4f85f5ae7deb95c189610c2c82cc1a384463451dc35a55fbd5d99eff9b89d0d68738854248bd3b1bfdaa47514538532c14801a6ef42e2ac550bceb071b86aab2b634170fea4d81faf65dd1dd57f6b9dbf78f4bfb3a881e531dab127b68e6445895304573c8b6f6a33c29124055df22bacadc2bdbaa660f228a85bd11755dcf7646c374f7f96fa0b19eb33a8855de92be723cab9223eaf270e56a11f91fc4f3648cf79219f07a8f61458c3bf1e200ef3b49da9ee6d4d68b2d85d006d93c98001e07d3d31d51e16e573e9fc811ce9823ac9da6a83ae4f87cfb90fddc920d5c11a3928ce13dedaaa7681bb101a28656f296487cdefc221d5b1478fbf97fadc6cde41c1980495f56cbe6d359e977d4657ea5d08ba114509264df52511b31d5984c705ba1be1e4b3b6a43efe8d8af73df5cc4fb42fce03a9f5b97dee4f1c9df5ca9e4770bd6313a2bdbfcaa41b9149490cb5be5a7d4a7be1cfca5c6927033eff4c7737fc434284e018e5f291df6d790068c8ec0e9d6478a6465af5fa709d53bee84f218ef530849ac407e5dead94e28d9a1c904c5a97ad685b3cc03ca61a03542314899b6fdefd3938ab1450d08a0b39fab080b65672bf210559091f5914479a220a45b684b94fbb156282a2887d2ce4837b1bc81f093b498877b13a449e636d5546ab536b66f53f27573ac6022f3031ecec44ea9ea636b2e07ce7d4efd84e68e0af5bc093ecdeaa49ab113907579c9d4d2756958b00e2971c8544530404df72806104f4c9090dd2f78e2853dddf1fb5bfc3899a1bb4fe51b0cd5310196f0685a999d73ef3d10a8d3815e289a22079bb1ba062b7e0c2cb8ad1e484fd07feddff94e1be0da55519254dd8606d3bef2ff0a2d0cd6c4e2f883a4fd6339c71c916161dc13c6462c1e05c580625aa7f84f0e8e1a9873335d48367371903b49f1f4d5d38c58fe1cd594c75880aa2ad5a7b996ee1d29d8e5b13778f1e6a85c58887086f8f7403851d82fe1e9b491baa436e6239b5dea818643f5fb0bd3e1aee839fc2f9ebe7d743078e902554a262f4e2d9fc5c893c6a661c9da5a46635addbd5941b8f7835bbce0c2dbdefa8f4d5bb840df85d6c953cf5aef13a475d220811969b111caf2da493d7601f097c807f40d410ee51bd5a3b7f8867588592b09df61d0eb4e0dff8fc57bdea9f98d84278732a41c475af1e11a52eb5f2d04e7f959211acfcd6995d620abc86b838494f2a2394854525d9e1ea781eea6e4f73430d72204948b4b7a89ad95e22d33ede7ec4b11779071be25d856c22766bd615d5e464c70d8acb77291a449649874126f1cd2f45d8684a12e71ffd3c494b0c4fd473c9a0897ad5e619ded0d0d0039065110c6523019771286b82a0f99639447991338c47a72d4a88e76dad58f8ca23b8931cb873662d6d168c2431eaa4f6fb6224df090ee62e1f7112d7da3519c6de4f7a868e55d0de163ff8fc0230cb5ec338b2142ecfdb982a67a25bc1aefebc4fb9dfd4808eb37fa497bae5b39d02b9a7713dcac3df478e439858bda6e68da68fdccd76a0155d40a1cd14d38afdf49d7005c017684b68aab5150adeb5820d604c8b5fa89ce9be4a4a0dfff2fd0baf2dc4cd9d922e286407d596eee6a3811cbd55dd9b96db51300f08784142a69e4c8493fc318ede202e0eb0a5b99c793d3d0393fbf85f969530c8966be9e0fb1751d45925abfec51e13d7fd2bd0e4b552456e88e4a041afb8c07a1db6b3862d00591a4366a8bd8e3e4917a53264dfe562e9e2815a9f4ba31148800ef4101aa371dc60014ccc47abd7b0b35622a66df19b372a7f0604c2297498551fe20e9122fdbc98e548d5300f156e405d8a438e19952ee9fa0c546c579d32055e090fcacff10eaf798dc4ce582051bd5b8c7f0ded323d381e49d422bd9dcba4178002beca348c220cb58aa94c4430ecb8d788d2efb8bbd44664db7bab7643c6174a51f08da6bc44bd7e83714f380acae967a283ca5d2aa8aa553cde664f16c5b52fd26e6f1ae9a250067b91b3da0620def16498f0912dd56cd674a4a92ff493adceb75ebb3f300d4213918a7143821761f3ddf4ad81cf8a1d985fcf835a6339a1df1649039fb094e1dbe22261f8f17531b6419ce44fe387e8b23b69d4f73554fa02c7c1026bcebff8573f0402b0ac0407380e64a0fd091d870309eb9d84300ac63d32939a3ad6437a4379de62a2ef7e4b39c0ef6202f14d0e06453a6310acdf78c91ce477afce735"}]}]}, @typed={0x8, 0x81, 0x0, 0x0, @pid=r4}]}]}]}, 0x11f8}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

173.074797ms ago: executing program 1 (id=4339):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

10.684458ms ago: executing program 1 (id=4340):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={<r2=>0x0, 0xf8, "8f0e008e792e023c81f8c9064707aef28cefb2526e39ca73b35175a4dc6dad5c5240283c3ab6d7701723cb0c340e16f9c9cb315ab4bc5cb17b21b907b750fc4cef48ed82aaedc4d9304e820b90119e49317de8d69e57845f43aed3683034213772c1d7fd899f126659764ad454d6c0aea3b1ea4d56718e4944559237e40946f4ce53f5d428db8a88bfa7cd98918a141fc7fdbdfe88767aa08245ffddba5bbe91751b9440e305b20e0f8c67b7e6d9fd2badd2a7779f4801eca647c26cc5d78d9de62f172b17d619af2982442a842b49449eac756cdf02820195435b0878c8d11e7f34582be708297d56e89d5d4b4f46ce292c050733b6ce6a"}, &(0x7f00000001c0)=0x100)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x1d, 0x7, 0x9, 0x7fff, 0x80, 0x6}, &(0x7f0000000080)=0x9c)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r1, &(0x7f0000000540)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x0, 0xff, 0x3, 0x0, 0x104}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r4, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/244, 0xf4, 0x0, 0x0}, &(0x7f00000004c0)=0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000070000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="45000e0080000900080211000001080211000000ffffffffffff00000300000000000000070001000406f0027f0006a70602060072060303030303037107ff01ff0102030400000008000c006400000008000d0001000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="276422876adc6a6373", @ANYRES16=r8, @ANYBLOB="000428bd7000fedbdf25860000000c009900059500006a00000005001801100000000500190108000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x1a, 0x6, "97c01561360a64709445f69cc3879b12a346c4835f5f"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x60}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r10, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280700e444460000521f05884a57b6400e11323cf4dd40088076b27c7012b1920e7d0d83d3d062774c0080a08c5227aca173c28f73a399de5b1f823b7f6f567199098cb3a352f6961785f493c9d4af0cdd6a5e8fbb41b0544af4fef55e25baced00ff7feeba836439201bf765b4fedb5dab3913a2731e675f1c0422e9d84ab5a97c122cd601b4893593c6ef2addb842b3f4e56859598a44f2b82130d", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0)

2.307908ms ago: executing program 0 (id=4341):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00')
syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$packet(0x11, 0x2, 0x300)
unshare(0x2060200)
getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040))
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000540)="7a120d7983c5ab8fd6b7e74c0ea84b974a79cc6353031fec9897a483b86b6c544ae0daedc7f0023fa46d0f6e5f538f5fbc24a02987ced95d546569ddb6aee0cca9348cc7400df03e2baf16a96ee2a38145ba0208984901947db422054fd8f232ec2959294a0a05614ed6f437ad0af9ecb17e53f429e515c726e69542339bede1be90950c3ca554374a7f786fcfcd6d1c9163dc13450b6af025ccf2cbdabb7c63a19288c84a8d162fd4fddd3219db6770fa28cabdb7f2e1645b5293316b672065eaa6e1e4d0c641cd1b941ad5620f37f930912acd292aa5d07f2ff034a41d41fdb27655dadc0415519f5bb43e5f", 0xed}, {&(0x7f0000000340)="bf6679d00b9ff4c6b7affc6a0a028467cad9e9e8e8d555f267bdf0d432a6d3593260fe7767ab764933993c2cc17353f7ac1119aae06c6550145cdce866e3862f325e3102879c6dda252797ab3d77c1e057a7afa2d51f91feca3931e7f2f3aced1aa8804386a7886b7d170c51e5e8b00c7ce35d6b775775", 0x77}, {&(0x7f00000002c0)="c74578ca8e", 0x5}, {&(0x7f0000000640)="5a49be061d3086c078871e7419ca81335b1a0235f84b4afc916c6eef3a8f4b0e07b4bd15efebcf7e7fc203534935c077ec46576ca2afe9c45686773deb00000000e94d39155de90ca29c7c61f9644d8982f9509ed7927c75a2f3ad65b08b3fcf74c2ff6d47b40c0c", 0x68}, {&(0x7f00000009c0)="1629c0c79683f4bd73e378cedfa174c396bce40edbc9640d49334e43074f6aa5c449499fd38e14649277e58a817b734e1f4213bc2a7560cb762b9da4091da0fc8677fe480d19ebc13067283b47efe9637965c0956f0ba98026f07df99c7b671a2ebedaa65d6a609d57019cb9cfbc7a4a33e5fa9a558927eee5e2549c11a8f14971e027ff2721030932375e2364631afa317ffa864947b16f97440e42fe8980b1", 0xa0}, {&(0x7f0000000780)="eac455213ac145c19e952fd8dbadd3d5ef225ce3e9db934db1b3da471b4ebce3c3d7d547c1ae531a9b956b7136edb60632ef4ef0b6a4436679798cc716dd7b01388b1398441abe38e297d42a6cf251fe07d5ed7a84ed59a35b3835e0009d6dfe5f0acf3c129cec568b2e3b6dba0e33bb24a3a9c80028630844c0ab7c2f3f795e7796a414f12478084c213969450c34447185f3004f6a90450645f7d2381eb2e7db473d126898b6f9dfcfc5fa6e842db99d0e46260c444731bede80b0347fa78f73db43166701e6582b7c9407a4761836eb49e7ae967790d9addadaec", 0xdc}, {&(0x7f00000006c0)="c67cce9ab0d4833d71fd43d74a128ce5db981cca1387fe9f89af2b0c9ff427dc3e1bef3bfead47248d26a83d3595c2e282d9e15f7d3141c95c8d39929cf6c06fe9b17cd129bfb40f93e30700000034fa9f725aacf58e453ba51c22018500b9725982b70f506dc5f0bc5065321b831373404586b75b5d15d4301313b28c2a3c8c55322716d2fcc68301df199e04bff5", 0x8f}, {&(0x7f0000000880)="6ae935406c4f9d8d2b7d9fc431027ad95d86e29bcc3bc83bd78c431b5bef491ad131a7e75159e7f933e98f5ac5482b4f9e6c40be0491a4e7656992d5d19e614b45f95b1ff29e85bdd23162f0efaf7c38a4a0eda5a3d03b2cb80c67be8d5101876b198e8285a37b851f017c0f4c78e9ecb98fbcfd96c5444e2b47c5d0b971db301ba5c88333cd9295b63dc10868d883bb99c6e58363721b3ef9f0b90a", 0x9c}], 0x8)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x4000, &(0x7f0000000140)={0xa, 0x3, 0x0, @local}, 0x1c)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r9=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002797da04457cd7402b0db624086f85ef989d62d6dfa4be3b1c42c6ab64694dd67e2a534ffae39a6a49539a92d0085144f3a5840bd2cddcbcbf90627a3772f91fa288ab51a805aadd436b86c4108be633a632c27a6bf8f811319772c24fcaea1349b45c56ef1cc54f0577970ffcdccebb95901e074664f41184b928c17d37e3b818b035f19d931d116d33018056733425fd6fcfa7dbbbe820937254552261f9d9f104cc235ea63ccd41bdd76f193424b0ec787e1fbdcc2a339659bdeb268368bafacca8c3626d43df50955", @ANYRES32=r9], 0x20, 0x2400e044}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r10, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x14}], 0x1, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x1000006, 0x4)

0s ago: executing program 2 (id=4342):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x440, 0x3f4, 0x200, 0x70bd28, 0x25dfdbfc, {0x10, 0x1, 0x37, [0x400, 0x8, 0x0, 0x3, 0x1ff, 0xfffffe00, 0x1, 0x9, 0x40, 0xffff, 0x7, 0x4, 0xe, 0x1000, 0xffffffff, 0x100, 0xfffffff8, 0x7, 0x2, 0x9, 0x1ff, 0x7, 0x9, 0x8, 0x8001, 0x2, 0x8, 0x80000001, 0xffff8001, 0x9, 0x3, 0x0, 0x8001, 0x1, 0x7d, 0xfffffff9, 0x77ad, 0x1, 0xc, 0x5a38, 0x1, 0xa, 0x9, 0x1e13, 0x4, 0x800, 0xfffffff7, 0x7e93, 0x10000, 0x6, 0x2, 0xecb5, 0xe2, 0x2, 0x3ff, 0x1, 0x3, 0xfffff801, 0x9b5a, 0xffff, 0x6, 0x9, 0xd5e, 0x7], [0xd05f, 0x15818b4f, 0x80000001, 0xdd96, 0xff, 0x5183, 0x3, 0x65e26367, 0x800, 0xd, 0x9, 0x8, 0x2, 0x1, 0xcdc00000, 0x0, 0x1, 0x2, 0x4e, 0x5b4, 0x9, 0x8, 0x5b6, 0x1b1, 0x8, 0x1, 0x200, 0x8, 0xb, 0x9, 0x6, 0x1, 0x7fff, 0x6, 0xba, 0x9, 0x4, 0x4, 0xc, 0x800, 0x9, 0x5a, 0x7, 0xaaa8, 0x1ff, 0x6, 0x7f, 0x6a64, 0x5, 0x7, 0x5, 0xbfff, 0x2, 0x5, 0x8, 0x0, 0x1, 0x4, 0x1, 0xfffffffb, 0x4, 0x10001, 0x800, 0xfffffff9], [0x5, 0x8, 0x1, 0xf5c0, 0x0, 0x2, 0xfff, 0x7, 0x196, 0x100, 0x5e, 0x201, 0x3, 0x6, 0x0, 0x9, 0x48bc893c, 0x2, 0x20b52651, 0x914, 0x5, 0x0, 0xff, 0x787a, 0x9, 0xf16, 0x9, 0x7, 0x4e, 0x99, 0x8, 0x8, 0x2, 0x4, 0x0, 0x40, 0x9, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 0x5, 0x47, 0x3, 0x7fffffff, 0x4, 0x99fa, 0x3, 0xb, 0xfffffffd, 0x80000000, 0xce4e, 0xffff, 0xfff, 0x3, 0x40, 0xfffffffe, 0x3, 0x158, 0xb, 0x2], [0x8001, 0x1, 0x5, 0x7, 0x7, 0x8, 0x893d, 0xff, 0x7f, 0xff, 0x3, 0x401, 0x6, 0x1, 0x6751, 0x0, 0x3bbf7370, 0xd83c, 0x43, 0x18a, 0x1e, 0x0, 0x0, 0x8, 0x3800, 0x5, 0x5, 0x8fb, 0xc9, 0x6, 0x6, 0x7, 0xfffffff8, 0x4a6, 0x8001, 0x7f, 0x7, 0x1ff, 0x3, 0x1, 0xfe0000, 0x1, 0x6, 0x8, 0x7, 0x7, 0x6bd, 0x800, 0xffff, 0x7, 0x7, 0xfffffffa, 0x0, 0x9, 0xffff, 0x8, 0x4, 0x10000, 0x3, 0x9, 0x7, 0x0, 0x6, 0x7], 0x1e, ['$%{\xc7\x00', '+!]/@-\x00', '\x00', '/Z[(]^$.!)}\x00', '^\xb0&\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cgroup.stat\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20008014)
write$cgroup_type(r1, &(0x7f0000000680), 0x9)
socketpair(0x23, 0x6, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000700)=<r5=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000740)=r5)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'macvtap0\x00', 0x1000})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000007c0)={0x3, 'pim6reg\x00', {}, 0x9})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000800)={<r6=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}, [0xfffffffffffffffe, 0xc3f, 0x6, 0x6, 0x0, 0x80000000, 0x9c6, 0x5, 0xe56, 0x8000, 0x10001, 0x4, 0x3, 0xd1, 0x100]}, &(0x7f0000000900)=0x100)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000940)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x5, 0x4}, 0x90)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000a00)=""/12, &(0x7f0000000a40)=0xc)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001000)={<r8=>r6, 0x9c, &(0x7f0000000f40)=[@in6={0xa, 0x4e24, 0x7fffffff, @loopback, 0xfffffffe}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x1, @local, 0x2}, @in6={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x9, @private2, 0xfff}]}, &(0x7f0000001040)=0x10)
sendmmsg$inet_sctp(r4, &(0x7f0000001100)=[{&(0x7f0000000a80)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="2fb6e894a662aa45478950d7568fc29ad967f341b4159830ed9bc56257e9a1a4ef506d7e63cca267e236f5fb6f4fb72bc5553a47d0919367d93956c7601e379556e56f8cbdee890ecb45fcb728d732f251d9d1e84ff2ee1a9d16b78e977ec8cfd5c52a98ead730e81f97b4318c8b1cf69111290af4988b7a5663fe44ba5228bf34e813346964e82c0dedace2997c3f137e4222809a2bab2f182675dffd5cd9a50af2981dc426c815894801677974efea3bc129e945a5be30396dfbca0ac286851fef", 0xc2}, {&(0x7f0000000bc0)="e64265f041aa55", 0x7}, {&(0x7f0000000c00)="955fa307bedf7770952a1e68826de9748f4176ebd6eca75efd48cf58ebc7c3c29002256b4b8686cf333b5f7b4d73662a62159c454027ca051b061d09feee55569ef6844d1b09a8fb2bbc2997cb6aa3e14c4bd2da48d1c4672b841eb53faa9a05a7a83b51ce758b9515c2ca7f6b59086ae9", 0x71}, {&(0x7f0000000c80)="d91c7b446ea4cb", 0x7}, {&(0x7f0000000cc0)="e5ec7337a9fa70de5492b2f469436ddc6f14f1d84dd565fe4d22069cc0e203051b59b5cac197d71bcce1b7498e6d4574a56a98c7a7a400d83423350d9bc3b4413f53cbdf97883f13f16876ee7978a939e0927c2be3742364ea8929bae4896aa2c29e95f30561d7c7cab3f0134f2ff7e9271e8b1ecbb8f98dc99f695da3c923590bc0ad4e3b4faf87f648f78af55ce79fd657f16985c38ed979a4ee83f43c6cf4177931d8e556e34022ebed918dfc1a38817861de68ca9959ccbd0337bd6a", 0xbe}], 0x5, &(0x7f0000000e00)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x18, 0x800}, {&(0x7f0000000e40)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000e80)="da58ea33c4713636be55821a5d7668c2ec1f033ce72e4b3772fe9b49cc765ba81b2a1f3da0d2889ad93b444099fc9e0aee58cb8f897b977e0fa261233aeda6bf4806383ffaa4bd33c4ee3f89dd952cd12fee02ef74926c", 0x57}], 0x1, &(0x7f0000001080)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x0, 0x3, 0xace0, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x3, 0x8003, 0x0, 0x9, 0x8, 0x0, 0x1, r8}}], 0x68, 0x40801}], 0x2, 0x0)
r9 = accept$ax25(r3, 0x0, &(0x7f0000001180))
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan1\x00', <r10=>0x0})
clock_gettime(0x0, &(0x7f0000001240)={<r11=>0x0, <r12=>0x0})
clock_gettime(0x0, &(0x7f0000001280)={<r13=>0x0, <r14=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000001380)={&(0x7f0000001200)={0x1d, r10}, 0x10, &(0x7f0000001340)={&(0x7f00000012c0)={0x3, 0x703, 0x9, {r11, r12/1000+10000}, {r13, r14/1000+60000}, {0x2, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "c26a98cb7fee2ff91619726a43c2b773746cc1f3d8f83146a0025dd0234a260d070e01af9c6f28c3ca5d8f860844a12e8988ce399c13890a4e8ddfd605593fe1"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000013c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r15=>0x0})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001640)={<r16=>0x0, 0xff, 0x7, 0x1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001a40)={{r9}, r15, 0x1c, @inherit={0x50, &(0x7f00000015c0)={0x1, 0x1, 0x8a3, 0x176, {0x10, 0x0, 0x1, 0x65988000000, 0xffffffff}, [0x6a5]}}, @devid=r16})
sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000003b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000002a80)={0x1010, 0x464, 0x200, 0x70bd28, 0x25dfdbfe, "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", ["", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4040011}, 0x800)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003d00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003b80)={0x128, 0x1, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x2}}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfc01}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xa}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4010}, 0x4048814)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003d40))
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000003d80)=@sack_info={r8, 0x2}, 0xc)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000003dc0)={0x6, 0x208, 0x0, 0x6, r8}, 0x10)

kernel console output (not intermixed with test programs):

uest failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  301.081797][T18412] sctp: [Deprecated]: syz.2.3070 (pid 18412) Use of int in max_burst socket option.
[  301.081797][T18412] Use struct sctp_assoc_value instead
[  301.193982][T18418] vlan4: entered allmulticast mode
[  301.407068][   T61] block nbd0: Possible stuck request ffff888022db0000: control (read@0,1024B). Runtime 240 seconds
[  301.411320][   T61] block nbd0: Possible stuck request ffff888022db0200: control (read@1024,1024B). Runtime 240 seconds
[  301.416023][   T61] block nbd0: Possible stuck request ffff888022db0400: control (read@2048,1024B). Runtime 240 seconds
[  301.420321][   T61] block nbd0: Possible stuck request ffff888022db0600: control (read@3072,1024B). Runtime 240 seconds
[  301.627648][T18447] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  301.748880][T18467] bond1: (slave macvlan29): Releasing backup interface
[  301.751649][T18467] bond1: (slave macvlan29): the permanent HWaddr of slave - 7a:1b:73:19:83:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  301.761897][T18467] bond1: (slave macvlan30): Releasing backup interface
[  301.900003][T18485] bond3: (slave macvlan18): making interface the new active one
[  301.903344][T18485] bond3: (slave macvlan18): Enslaving as an active interface with an up link
[  302.566956][T18497] __nla_validate_parse: 6 callbacks suppressed
[  302.566965][T18497] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3091'.
[  302.668412][T18505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3093'.
[  302.731909][T18507] bond1: (slave macvlan31): Enslaving as a backup interface with an up link
[  302.770860][T18510] syzkaller0: entered promiscuous mode
[  302.773180][T18510] syzkaller0: entered allmulticast mode
[  302.776466][T18510] tipc: Resetting bearer <eth:syzkaller0>
[  302.855848][T18510] tipc: Resetting bearer <eth:syzkaller0>
[  302.889217][T18514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3096'.
[  302.894446][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3096'.
[  303.211202][T18528] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  303.248168][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'.
[  303.308008][T18532] validate_nla: 9 callbacks suppressed
[  303.308022][T18532] netlink: 'syz.0.3101': attribute type 9 has an invalid length.
[  303.425806][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'.
[  303.537620][T12325] tipc: Resetting bearer <eth:syzkaller0>
[  303.544346][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3103'.
[  303.617802][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'.
[  303.739617][T18559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3108'.
[  303.772780][T18542] netlink: 'syz.1.3102': attribute type 2 has an invalid length.
[  303.822042][T18565] 8021q: adding VLAN 0 to HW filter on device macvlan32
[  303.826013][T18565] bond1: (slave macvlan32): Enslaving as a backup interface with a down link
[  303.830188][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'.
[  303.833249][T18567] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  303.839517][T18565] tipc: Resetting bearer <eth:syzkaller0>
[  303.843536][T18565] bond1: (slave macvlan31): Releasing backup interface
[  303.846676][T18565] bond1: (slave macvlan31): the permanent HWaddr of slave - 92:fa:b9:3d:4c:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  303.858544][T18565] bond1: (slave macvlan32): Releasing backup interface
[  303.981096][T18578] netlink: 'syz.2.3115': attribute type 1 has an invalid length.
[  304.000500][T18578] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  304.004021][T18578] CPU: 0 UID: 0 PID: 18578 Comm: syz.2.3115 Not tainted syzkaller #0 PREEMPT(full) 
[  304.004039][T18578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.004047][T18578] Call Trace:
[  304.004054][T18578]  <TASK>
[  304.004060][T18578]  dump_stack_lvl+0x189/0x250
[  304.004092][T18578]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.004108][T18578]  ? __pfx__printk+0x10/0x10
[  304.004131][T18578]  ? kernfs_path_from_node+0x2f/0x290
[  304.004146][T18578]  ? kernfs_path_from_node+0x250/0x290
[  304.004159][T18578]  ? kernfs_path_from_node+0x2f/0x290
[  304.004176][T18578]  sysfs_warn_dup+0x8e/0xa0
[  304.004190][T18578]  sysfs_do_create_link_sd+0xc0/0x110
[  304.004205][T18578]  device_add_class_symlinks+0x1cf/0x240
[  304.004222][T18578]  device_add+0x475/0xb50
[  304.004239][T18578]  wiphy_register+0x1ba6/0x28d0
[  304.004271][T18578]  ? __pfx_wiphy_register+0x10/0x10
[  304.004289][T18578]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  304.004310][T18578]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  304.004327][T18578]  ieee80211_register_hw+0x3425/0x4080
[  304.004354][T18578]  ? ieee80211_register_hw+0x1461/0x4080
[  304.004405][T18578]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  304.004424][T18578]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.004450][T18578]  ? __hrtimer_setup+0x187/0x210
[  304.004463][T18578]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.004484][T18578]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  304.004524][T18578]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  304.004539][T18578]  ? trace_kmalloc+0x1f/0xd0
[  304.004554][T18578]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  304.004570][T18578]  ? kstrndup+0xbf/0x160
[  304.004592][T18578]  hwsim_new_radio_nl+0xea4/0x1b10
[  304.004611][T18578]  ? __pfx___nla_validate_parse+0x10/0x10
[  304.004641][T18578]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.004667][T18578]  ? __nla_parse+0x40/0x60
[  304.004689][T18578]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  304.004712][T18578]  genl_family_rcv_msg_doit+0x215/0x300
[  304.004733][T18578]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  304.004759][T18578]  ? bpf_lsm_capable+0x9/0x20
[  304.004774][T18578]  ? security_capable+0x7e/0x2e0
[  304.004798][T18578]  genl_rcv_msg+0x60e/0x790
[  304.004818][T18578]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.004831][T18578]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.004859][T18578]  netlink_rcv_skb+0x208/0x470
[  304.004876][T18578]  ? __lock_acquire+0xab9/0xd20
[  304.004894][T18578]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.004909][T18578]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.004944][T18578]  ? down_read+0x1ad/0x2e0
[  304.004981][T18578]  genl_rcv+0x28/0x40
[  304.004994][T18578]  netlink_unicast+0x82f/0x9e0
[  304.005019][T18578]  ? __pfx_netlink_unicast+0x10/0x10
[  304.005038][T18578]  ? netlink_sendmsg+0x642/0xb30
[  304.005047][T18578]  ? skb_put+0x11b/0x210
[  304.005071][T18578]  netlink_sendmsg+0x805/0xb30
[  304.005091][T18578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.005110][T18578]  ? aa_sock_msg_perm+0xf1/0x1d0
[  304.005123][T18578]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.005137][T18578]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.005150][T18578]  __sock_sendmsg+0x21c/0x270
[  304.005170][T18578]  ____sys_sendmsg+0x505/0x830
[  304.005190][T18578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.005213][T18578]  ? import_iovec+0x74/0xa0
[  304.005231][T18578]  ___sys_sendmsg+0x21f/0x2a0
[  304.005247][T18578]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.005291][T18578]  ? __fget_files+0x2a/0x420
[  304.005302][T18578]  ? __fget_files+0x3a0/0x420
[  304.005320][T18578]  __x64_sys_sendmsg+0x19b/0x260
[  304.005336][T18578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.005384][T18578]  ? rcu_is_watching+0x15/0xb0
[  304.005404][T18578]  ? do_syscall_64+0xbe/0x3b0
[  304.005420][T18578]  do_syscall_64+0xfa/0x3b0
[  304.005431][T18578]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.005449][T18578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.005460][T18578]  ? exc_page_fault+0x9f/0xf0
[  304.005479][T18578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.005491][T18578] RIP: 0033:0x7f43dc58ebe9
[  304.005504][T18578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.005515][T18578] RSP: 002b:00007f43dd4bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.005530][T18578] RAX: ffffffffffffffda RBX: 00007f43dc7c5fa0 RCX: 00007f43dc58ebe9
[  304.005539][T18578] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  304.005547][T18578] RBP: 00007f43dc611e19 R08: 0000000000000000 R09: 0000000000000000
[  304.005554][T18578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.005561][T18578] R13: 00007f43dc7c6038 R14: 00007f43dc7c5fa0 R15: 00007ffccdbed5b8
[  304.005584][T18578]  </TASK>
[  304.468633][T18589] bond3: (slave macvlan18): Releasing active interface
[  304.514256][T18589] netlink: 'syz.2.3117': attribute type 10 has an invalid length.
[  304.578522][T18604] netlink: 'syz.1.3119': attribute type 10 has an invalid length.
[  304.581219][T18593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.603972][T18593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.642554][T18607] netlink: 'syz.0.3120': attribute type 10 has an invalid length.
[  304.757698][T18612] openvswitch: netlink: Flow key attr not present in new flow.
[  304.778852][T18615] netlink: 'syz.1.3123': attribute type 6 has an invalid length.
[  304.829297][T18615] netlink: 'syz.1.3123': attribute type 12 has an invalid length.
[  305.149059][T18623] netlink: 'syz.0.3125': attribute type 12 has an invalid length.
[  306.203113][T18673] netlink: 'syz.2.3135': attribute type 10 has an invalid length.
[  306.798919][T18703] 8021q: adding VLAN 0 to HW filter on device bond33
[  306.808745][T18704] tipc: Resetting bearer <eth:syzkaller0>
[  306.959971][T18709] 8021q: adding VLAN 0 to HW filter on device bond34
[  306.974518][T18714] bond34: (slave wlan0): Opening slave failed
[  307.938271][T18758] __nla_validate_parse: 16 callbacks suppressed
[  307.938285][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'.
[  308.093559][T18769] batadv_slave_0: entered promiscuous mode
[  308.099312][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3162'.
[  308.113395][T18769] bond1: entered promiscuous mode
[  308.118651][T18769] bond1: entered allmulticast mode
[  308.122186][T18769] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.407870][T18793] validate_nla: 9 callbacks suppressed
[  308.407880][T18793] netlink: 'syz.2.3167': attribute type 2 has an invalid length.
[  308.417049][T18793] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  308.467618][T18799] netlink: 'syz.0.3169': attribute type 6 has an invalid length.
[  308.487638][T18797] netlink: 14200 bytes leftover after parsing attributes in process `syz.0.3169'.
[  308.595122][T18806] netlink: 'syz.1.3172': attribute type 11 has an invalid length.
[  308.667304][T18804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3170'.
[  308.697922][T18808] netlink: 'syz.0.3173': attribute type 9 has an invalid length.
[  308.943045][T18827] netlink: 'syz.2.3177': attribute type 9 has an invalid length.
[  309.094930][T18823] netlink: 'syz.0.3176': attribute type 2 has an invalid length.
[  309.105047][T18823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3176'.
[  309.305020][T18839] tipc: Resetting bearer <eth:syzkaller0>
[  309.409789][T18837] tipc: Resetting bearer <eth:syzkaller0>
[  309.468335][T18846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3181'.
[  309.764736][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3185'.
[  309.836063][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  309.847635][T18865] ip6gretap3: entered allmulticast mode
[  309.854067][T18865] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3187'.
[  310.650715][T18914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3199'.
[  310.678256][T18899] netlink: 'syz.2.3195': attribute type 2 has an invalid length.
[  310.685537][T18899] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3195'.
[  310.930177][T18920] team0: Unable to change to the same mode the team is in
[  310.942934][T18920] vlan0: entered promiscuous mode
[  310.950824][T18920] tipc: Enabling of bearer <eth:ueam0> rejected, failed to enable media
[  311.084545][T18938] mac80211_hwsim hwsim352 wlan0: entered promiscuous mode
[  311.089161][T18938] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  311.111845][T18937] netlink: 'syz.1.3204': attribute type 10 has an invalid length.
[  311.203222][T18941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.241252][T18946] netlink: 'syz.2.3206': attribute type 1 has an invalid length.
[  311.241324][T18945] netlink: 'syz.2.3206': attribute type 1 has an invalid length.
[  311.306810][T18946] 8021q: adding VLAN 0 to HW filter on device bond27
[  311.348658][T18951] bond27: (slave geneve3): making interface the new active one
[  311.356889][T18951] bond27: (slave geneve3): Enslaving as an active interface with an up link
[  311.381638][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.397978][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.413107][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.418729][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.605787][T18956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  311.617952][T18962] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  311.622688][T18962] CPU: 0 UID: 0 PID: 18962 Comm: syz.2.3208 Not tainted syzkaller #0 PREEMPT(full) 
[  311.622705][T18962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.622714][T18962] Call Trace:
[  311.622721][T18962]  <TASK>
[  311.622726][T18962]  dump_stack_lvl+0x189/0x250
[  311.622750][T18962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.622765][T18962]  ? __pfx__printk+0x10/0x10
[  311.622788][T18962]  ? kernfs_path_from_node+0x2f/0x290
[  311.622803][T18962]  ? kernfs_path_from_node+0x250/0x290
[  311.622815][T18962]  ? kernfs_path_from_node+0x2f/0x290
[  311.622830][T18962]  sysfs_warn_dup+0x8e/0xa0
[  311.622844][T18962]  sysfs_do_create_link_sd+0xc0/0x110
[  311.622858][T18962]  device_add_class_symlinks+0x1cf/0x240
[  311.622875][T18962]  device_add+0x475/0xb50
[  311.622891][T18962]  wiphy_register+0x1ba6/0x28d0
[  311.622923][T18962]  ? __pfx_wiphy_register+0x10/0x10
[  311.622940][T18962]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  311.622961][T18962]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  311.622978][T18962]  ieee80211_register_hw+0x3425/0x4080
[  311.623016][T18962]  ? ieee80211_register_hw+0x1461/0x4080
[  311.623038][T18962]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  311.623056][T18962]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.623080][T18962]  ? __hrtimer_setup+0x187/0x210
[  311.623092][T18962]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  311.623112][T18962]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  311.623152][T18962]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  311.623164][T18962]  ? trace_kmalloc+0x1f/0xd0
[  311.623178][T18962]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  311.623193][T18962]  ? kstrndup+0xbf/0x160
[  311.623212][T18962]  hwsim_new_radio_nl+0xea4/0x1b10
[  311.623229][T18962]  ? __pfx___nla_validate_parse+0x10/0x10
[  311.623257][T18962]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.623313][T18962]  ? __nla_parse+0x40/0x60
[  311.623338][T18962]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  311.623362][T18962]  genl_family_rcv_msg_doit+0x215/0x300
[  311.623382][T18962]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  311.623407][T18962]  ? bpf_lsm_capable+0x9/0x20
[  311.623420][T18962]  ? security_capable+0x7e/0x2e0
[  311.623443][T18962]  genl_rcv_msg+0x60e/0x790
[  311.623461][T18962]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.623474][T18962]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  311.623498][T18962]  netlink_rcv_skb+0x208/0x470
[  311.623514][T18962]  ? __lock_acquire+0xab9/0xd20
[  311.623531][T18962]  ? __pfx_genl_rcv_msg+0x10/0x10
[  311.623546][T18962]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  311.623578][T18962]  ? down_read+0x1ad/0x2e0
[  311.623593][T18962]  genl_rcv+0x28/0x40
[  311.623606][T18962]  netlink_unicast+0x82f/0x9e0
[  311.623629][T18962]  ? __pfx_netlink_unicast+0x10/0x10
[  311.623646][T18962]  ? netlink_sendmsg+0x642/0xb30
[  311.623655][T18962]  ? skb_put+0x11b/0x210
[  311.623670][T18962]  netlink_sendmsg+0x805/0xb30
[  311.623688][T18962]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.623703][T18962]  ? aa_sock_msg_perm+0xf1/0x1d0
[  311.623716][T18962]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  311.623728][T18962]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.623740][T18962]  __sock_sendmsg+0x21c/0x270
[  311.623759][T18962]  ____sys_sendmsg+0x505/0x830
[  311.623778][T18962]  ? __pfx_____sys_sendmsg+0x10/0x10
[  311.623800][T18962]  ? import_iovec+0x74/0xa0
[  311.623817][T18962]  ___sys_sendmsg+0x21f/0x2a0
[  311.623830][T18962]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.623869][T18962]  ? __fget_files+0x2a/0x420
[  311.623880][T18962]  ? __fget_files+0x3a0/0x420
[  311.623898][T18962]  __x64_sys_sendmsg+0x19b/0x260
[  311.623914][T18962]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.623937][T18962]  ? rcu_is_watching+0x15/0xb0
[  311.623950][T18962]  ? trace_sys_enter+0x25/0x100
[  311.623971][T18962]  do_syscall_64+0xfa/0x3b0
[  311.623981][T18962]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.624006][T18962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.624017][T18962]  ? exc_page_fault+0x9f/0xf0
[  311.624034][T18962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.624045][T18962] RIP: 0033:0x7f43dc58ebe9
[  311.624056][T18962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.624067][T18962] RSP: 002b:00007f43dd49b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.624080][T18962] RAX: ffffffffffffffda RBX: 00007f43dc7c6090 RCX: 00007f43dc58ebe9
[  311.624089][T18962] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  311.624096][T18962] RBP: 00007f43dc611e19 R08: 0000000000000000 R09: 0000000000000000
[  311.624103][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.624111][T18962] R13: 00007f43dc7c6128 R14: 00007f43dc7c6090 R15: 00007ffccdbed5b8
[  311.624133][T18962]  </TASK>
[  312.677311][T19013] 8021q: adding VLAN 0 to HW filter on device bond28
[  312.760839][T19019] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  312.904216][T19022] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  312.923031][T19022] mac80211_hwsim hwsim352 wlan0: left promiscuous mode
[  312.987007][ T5965] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.991146][ T5965] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.996671][ T5965] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.000674][ T5965] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.020180][T19022] __nla_validate_parse: 7 callbacks suppressed
[  313.020197][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[  313.092382][T19029] 8021q: adding VLAN 0 to HW filter on device bond35
[  313.109031][T19029] veth15: entered promiscuous mode
[  313.113719][T19029] bond35: (slave veth15): Enslaving as a backup interface with a down link
[  313.117442][T19029] tipc: Resetting bearer <eth:syzkaller0>
[  313.125716][T19029] bond35: (slave veth15): Releasing backup interface
[  313.144932][T19030] tipc: Resetting bearer <eth:syzkaller0>
[  313.244190][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'.
[  313.391011][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'.
[  313.507375][T19060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3236'.
[  313.732041][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'.
[  314.294313][T19087] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  314.330683][T19087] tipc: Resetting bearer <eth:syzkaller0>
[  314.419648][T19095] tun1: tun_chr_ioctl cmd 2147767520
[  314.561231][T19105] validate_nla: 5 callbacks suppressed
[  314.561272][T19105] netlink: 'syz.2.3247': attribute type 1 has an invalid length.
[  314.637353][T19105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3247'.
[  314.644086][T19105] bond27: (slave geneve3): Releasing active interface
[  314.715020][T19114] netlink: 460 bytes leftover after parsing attributes in process `syz.1.3249'.
[  314.729684][T19113] netlink: 'syz.1.3249': attribute type 8 has an invalid length.
[  314.759571][T19120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3252'.
[  314.804755][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3253'.
[  314.810384][T19122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'.
[  314.868946][T19127] team0: Unable to change to the same mode the team is in
[  314.874571][T19126] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  314.994438][T19134] netlink: 'syz.2.3256': attribute type 10 has an invalid length.
[  315.222162][T19142] team0: Mode changed to "loadbalance"
[  315.380909][T19152] syzkaller0: left promiscuous mode
[  315.382989][T19152] syzkaller0: left allmulticast mode
[  315.389112][T19152] tipc: Resetting bearer <eth:syzkaller0>
[  315.393180][T19152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.508698][T19147] netlink: 'syz.1.3262': attribute type 10 has an invalid length.
[  315.680103][T19170] netlink: 'syz.1.3267': attribute type 2 has an invalid length.
[  316.353632][T19207] vlan0: left promiscuous mode
[  316.358283][T19207] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  316.377538][T19207] ip6gretap3: left allmulticast mode
[  316.745929][T19231] tipc: Resetting bearer <eth:syzkaller0>
[  316.759534][T19231] netlink: 'syz.0.3283': attribute type 10 has an invalid length.
[  316.767992][T19231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.772357][T19231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  316.797327][T19218] netlink: 'syz.2.3280': attribute type 2 has an invalid length.
[  316.949980][T19236] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  317.187592][T19247] netlink: 'syz.2.3286': attribute type 2 has an invalid length.
[  317.805089][T19292] netlink: 'syz.0.3298': attribute type 10 has an invalid length.
[  317.846873][T19293] can: request_module (can-proto-0) failed.
[  317.903795][T19293] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  317.908811][T19293] netlink: 'syz.2.3299': attribute type 4 has an invalid length.
[  317.938932][T19293] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  317.993627][T19302] netlink: 'syz.2.3301': attribute type 11 has an invalid length.
[  318.057080][T19308] __nla_validate_parse: 18 callbacks suppressed
[  318.057095][T19308] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.160293][T19310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3304'.
[  318.328118][T19315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3306'.
[  318.330582][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.413342][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.418179][T19318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.421438][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.425097][T19318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.428715][T19318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3308'.
[  318.537791][T19315] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3306'.
[  318.957753][T19345] bond1: left promiscuous mode
[  318.959872][T19345] bond1: left allmulticast mode
[  318.962321][T19345] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.997374][T19344] 8021q: adding VLAN 0 to HW filter on device macvlan34
[  319.002168][T19344] bond1: (slave macvlan34): Enslaving as a backup interface with a down link
[  319.372070][T19367] tipc: Resetting bearer <eth:syzkaller0>
[  319.383082][T19368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.401002][T19368] veth1_to_batadv: mtu less than device minimum
[  319.437461][T19366] tipc: Resetting bearer <eth:syzkaller0>
[  320.015804][ T5238] Bluetooth: hci2: command tx timeout
[  320.067144][T12349] tipc: Resetting bearer <eth:syzkaller0>
[  320.390736][T19433] validate_nla: 1 callbacks suppressed
[  320.390788][T19433] netlink: 'syz.0.3330': attribute type 2 has an invalid length.
[  320.520948][T19437] sctp: [Deprecated]: syz.1.3333 (pid 19437) Use of int in max_burst socket option.
[  320.520948][T19437] Use struct sctp_assoc_value instead
[  320.924487][T19450] netlink: 'syz.1.3335': attribute type 10 has an invalid length.
[  321.009099][T19456] netlink: 'syz.2.3337': attribute type 2 has an invalid length.
[  321.219022][T19470] netlink: 'syz.1.3341': attribute type 1 has an invalid length.
[  321.394557][T19474] netlink: 'syz.1.3342': attribute type 10 has an invalid length.
[  321.800537][T19503] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  321.820003][T19496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  321.824142][T19496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  321.888010][T19506] lo: entered promiscuous mode
[  321.892495][T19506] tunl0: entered promiscuous mode
[  321.895837][T19506] gre0: entered promiscuous mode
[  321.902097][T19506] gretap0: entered promiscuous mode
[  321.906669][T19506] erspan0: entered promiscuous mode
[  321.910713][T19506] ip_vti0: entered promiscuous mode
[  321.914068][T19506] ip6_vti0: entered promiscuous mode
[  321.918294][T19506] sit0: entered promiscuous mode
[  321.925868][T19506] ip6tnl0: entered promiscuous mode
[  321.929505][T19506] ip6gre0: entered promiscuous mode
[  321.933031][T19506] syz_tun: entered promiscuous mode
[  321.938464][T19506] ip6gretap0: entered promiscuous mode
[  321.942313][T19506] team0: entered promiscuous mode
[  321.945057][T19506] 8021q: adding VLAN 0 to HW filter on device team0
[  321.948780][T19506] tipc: Resetting bearer <eth:team0>
[  321.951130][T19506] tipc: Resetting bearer <eth:team0>
[  321.953471][T19506] !: entered promiscuous mode
[  321.958022][T19506] nlmon0: entered promiscuous mode
[  321.961426][T19506] caif0: entered promiscuous mode
[  321.963664][T19506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.782311][T19532] netlink: 'syz.2.3356': attribute type 4 has an invalid length.
[  322.927621][T19558] netlink: 'syz.1.3364': attribute type 1 has an invalid length.
[  322.930914][T19558] netlink: 'syz.1.3364': attribute type 1 has an invalid length.
[  323.013091][T19562] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  323.026242][T19560] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  323.189025][T19573] vlan3: entered promiscuous mode
[  323.192733][T19573] macvtap0: entered promiscuous mode
[  323.242559][T19576] __nla_validate_parse: 18 callbacks suppressed
[  323.242569][T19576] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3368'.
[  323.355795][T19588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3371'.
[  323.382005][T19590] tipc: Enabled bearer <eth:gre0>, priority 10
[  323.632776][T19600] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3374'.
[  323.891580][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'.
[  324.401322][T19651] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  324.498080][T19651] tipc: Resetting bearer <eth:team0>
[  324.501277][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'.
[  324.568904][T19654] netlink: 'syz.2.3391': attribute type 10 has an invalid length.
[  324.593428][T19654] mac80211_hwsim hwsim665 wlan1: entered allmulticast mode
[  324.643126][T19663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'.
[  324.649123][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'.
[  324.654220][T19663] mac80211_hwsim hwsim352 wlan0: entered promiscuous mode
[  324.658469][T19663] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  324.699790][T19667] netlink: 'syz.2.3394': attribute type 1 has an invalid length.
[  324.775979][T19674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3396'.
[  324.845087][T19667] 8021q: adding VLAN 0 to HW filter on device bond31
[  324.864786][T19667] mac80211_hwsim hwsim352 wlan0: left promiscuous mode
[  324.870464][T19667] bond31: (slave wlan0): Opening slave failed
[  325.056620][T19688] team0: Unable to change to the same mode the team is in
[  325.096974][T19688] vlan0: entered promiscuous mode
[  325.101602][T19688] erspan0: entered promiscuous mode
[  325.110053][T19688] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  325.420114][T19695] 8021q: adding VLAN 0 to HW filter on device bond36
[  325.647208][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3407'.
[  325.894875][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3411'.
[  325.971863][T19725] validate_nla: 2 callbacks suppressed
[  325.971878][T19725] netlink: 'syz.0.3410': attribute type 10 has an invalid length.
[  326.328312][T19742] netlink: 'syz.2.3415': attribute type 6 has an invalid length.
[  326.334100][T19742] netlink: 'syz.2.3415': attribute type 12 has an invalid length.
[  326.695019][T19757] netlink: 'syz.1.3409': attribute type 10 has an invalid length.
[  326.791206][T19763] netlink: 'syz.2.3420': attribute type 2 has an invalid length.
[  327.133145][T19777] netlink: 'syz.1.3425': attribute type 9 has an invalid length.
[  327.217341][T19779] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  327.220010][T19779] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  327.225593][T19779] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  327.251172][T19779] 8021q: adding VLAN 0 to HW filter on device bond32
[  327.266698][T19779] bond32: (slave wlan0): Opening slave failed
[  327.279606][T19779] vlan2: entered allmulticast mode
[  327.283255][T19779] bond32: (slave vlan2): Opening slave failed
[  327.300803][T19787] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  327.674684][T19825] mac80211_hwsim hwsim625 wlan0: entered promiscuous mode
[  327.681234][T19825] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  328.009129][T19841] netlink: 'syz.1.3443': attribute type 10 has an invalid length.
[  328.079030][T19845] IPVS: Error connecting to the multicast addr
[  328.252906][T19858] __nla_validate_parse: 7 callbacks suppressed
[  328.252920][T19858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3448'.
[  328.266691][T19850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3446'.
[  328.664149][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'.
[  328.691869][T19862] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3449'.
[  328.701645][T19862] gretap0: entered promiscuous mode
[  328.811862][T19873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3451'.
[  328.929664][ T1119] block nbd1: Possible stuck request ffff888022e28000: control (read@0,1024B). Runtime 240 seconds
[  328.934341][ T1119] block nbd1: Possible stuck request ffff888022e28200: control (read@1024,1024B). Runtime 240 seconds
[  328.943642][ T1119] block nbd1: Possible stuck request ffff888022e28400: control (read@2048,1024B). Runtime 240 seconds
[  328.948424][ T1119] block nbd1: Possible stuck request ffff888022e28600: control (read@3072,1024B). Runtime 240 seconds
[  329.028803][T19886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.032075][T19886] syzkaller0: entered promiscuous mode
[  329.033892][T19886] syzkaller0: entered allmulticast mode
[  329.049819][T19886] tipc: Resetting bearer <eth:syzkaller0>
[  329.055009][T19885] tipc: Resetting bearer <eth:syzkaller0>
[  329.110191][T19885] tipc: Disabling bearer <eth:syzkaller0>
[  329.223726][T19889] batadv_slave_0: left promiscuous mode
[  329.229949][T19889] tipc: Resetting bearer <eth:syzkaller0>
[  329.254579][T19889] vlan4: left allmulticast mode
[  329.258976][T19889] veth15: left promiscuous mode
[  329.448118][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'.
[  329.533207][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'.
[  329.731112][T19926] delete_channel: no stack
[  329.803695][T19947] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3469'.
[  329.916891][T19951] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3470'.
[  329.926295][T19945] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3468'.
[  330.254627][T19965] mac80211_hwsim hwsim664 wlan0: entered promiscuous mode
[  330.260377][T19965] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  330.267916][T19967] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  330.825496][T19985] block nbd4: server does not support multiple connections per device.
[  330.831332][T19985] block nbd4: shutting down sockets
[  331.043913][T19998] validate_nla: 42 callbacks suppressed
[  331.043928][T19998] netlink: 'syz.0.3481': attribute type 1 has an invalid length.
[  331.055655][T19998] netlink: 'syz.0.3481': attribute type 1 has an invalid length.
[  331.213262][T20019] netlink: 'syz.1.3483': attribute type 1 has an invalid length.
[  331.218732][T20019] netlink: 'syz.1.3483': attribute type 4 has an invalid length.
[  331.474314][   T61] block nbd0: Possible stuck request ffff888022db0000: control (read@0,1024B). Runtime 270 seconds
[  331.479692][   T61] block nbd0: Possible stuck request ffff888022db0200: control (read@1024,1024B). Runtime 270 seconds
[  331.483787][   T61] block nbd0: Possible stuck request ffff888022db0400: control (read@2048,1024B). Runtime 270 seconds
[  331.488347][   T61] block nbd0: Possible stuck request ffff888022db0600: control (read@3072,1024B). Runtime 270 seconds
[  331.530393][T20021] netlink: 'syz.1.3486': attribute type 12 has an invalid length.
[  331.667001][T20049] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  331.671553][T20042] netlink: 'syz.2.3490': attribute type 12 has an invalid length.
[  332.132760][T20070] netlink: 'syz.0.3497': attribute type 1 has an invalid length.
[  332.171479][T20075] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  332.256113][T20079] macvlan36: entered allmulticast mode
[  332.258019][T20079] veth1_vlan: entered allmulticast mode
[  332.261393][T20079] veth1_vlan: left allmulticast mode
[  332.280834][T20080] macvlan36: entered allmulticast mode
[  332.283139][T20080] veth1_vlan: entered allmulticast mode
[  332.287177][T20080] veth1_vlan: left allmulticast mode
[  332.367754][T20085] mac80211_hwsim hwsim665 wlan1: left allmulticast mode
[  332.376458][T20085] netlink: 'syz.2.3502': attribute type 10 has an invalid length.
[  332.425694][T20087] syzkaller1: entered promiscuous mode
[  332.428093][T20087] syzkaller1: entered allmulticast mode
[  332.708237][T20105] netlink: 'syz.2.3506': attribute type 6 has an invalid length.
[  333.787533][T20139] mac80211_hwsim hwsim664 wlan0: left promiscuous mode
[  333.834871][T20137] __nla_validate_parse: 11 callbacks suppressed
[  333.834887][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3514'.
[  333.850870][T20137] netlink: 'syz.2.3514': attribute type 12 has an invalid length.
[  334.187383][T20165] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3522'.
[  334.201328][T20167] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3521'.
[  334.301322][T20169] vlan0: left promiscuous mode
[  334.303589][T20169] erspan0: left promiscuous mode
[  334.371930][T20178] syzkaller0: entered promiscuous mode
[  334.379532][T20178] syzkaller0: entered allmulticast mode
[  334.382511][T20178] tipc: Resetting bearer <eth:syzkaller0>
[  334.393859][T20174] unsupported nla_type 62487
[  334.419907][T20182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3526'.
[  334.423768][T20182] 8021q: adding VLAN 0 to HW filter on device bond1
[  334.431135][T20182] 8021q: adding VLAN 0 to HW filter on device macvlan36
[  334.434837][T20182] bond1: (slave macvlan36): Enslaving as a backup interface with a down link
[  334.534961][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'.
[  334.945154][T20198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3531'.
[  335.173242][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3533'.
[  335.180358][T20210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3533'.
[  335.184398][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3533'.
[  335.188738][T20210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3533'.
[  335.800395][T20241] mac80211_hwsim hwsim710 wlan1: entered allmulticast mode
[  335.903558][T20241] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  335.907782][T20241] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  336.101681][T20255] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  336.363169][T20264] tipc: Resetting bearer <eth:syzkaller0>
[  336.367669][T20264] bond1: (slave macvlan34): Releasing backup interface
[  336.370486][T20264] bond1: (slave macvlan34): the permanent HWaddr of slave - 66:47:b9:dc:da:ad - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  336.379380][T20264] bond1: (slave macvlan36): Releasing backup interface
[  336.454399][T20268] validate_nla: 4 callbacks suppressed
[  336.454413][T20268] netlink: 'syz.0.3549': attribute type 10 has an invalid length.
[  336.571263][T20270] wg1 speed is unknown, defaulting to 1000
[  336.573999][T20270] wg1 speed is unknown, defaulting to 1000
[  336.578279][T20270] wg1 speed is unknown, defaulting to 1000
[  336.591541][T20270] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  336.612297][T20270] wg1 speed is unknown, defaulting to 1000
[  336.618370][T20270] wg1 speed is unknown, defaulting to 1000
[  336.622300][T20270] wg1 speed is unknown, defaulting to 1000
[  337.065162][T20292] mac80211_hwsim hwsim352 wlan0: entered promiscuous mode
[  337.069466][T20292] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  337.124815][T20294] netlink: 'syz.2.3557': attribute type 6 has an invalid length.
[  337.125341][T20295] netlink: 'syz.2.3557': attribute type 6 has an invalid length.
[  337.303233][T20301] wg1 speed is unknown, defaulting to 1000
[  338.680142][T20389] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  338.958773][T20399] wg1 speed is unknown, defaulting to 1000
[  339.041458][T20406] wg1 speed is unknown, defaulting to 1000
[  339.136681][T20414] netlink: 'syz.2.3584': attribute type 1 has an invalid length.
[  339.136792][T20413] __nla_validate_parse: 9 callbacks suppressed
[  339.136804][T20413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3584'.
[  339.276104][T20424] wg1 speed is unknown, defaulting to 1000
[  339.302491][T20426] netlink: 'syz.2.3586': attribute type 6 has an invalid length.
[  339.366273][T20433] mac80211_hwsim hwsim753 wlan1: entered allmulticast mode
[  339.371637][T20424] netlink: 'syz.1.3585': attribute type 2 has an invalid length.
[  339.384054][T20424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3585'.
[  339.417839][T20438] wg1 speed is unknown, defaulting to 1000
[  339.578702][T20449] sctp: [Deprecated]: syz.1.3592 (pid 20449) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.578702][T20449] Use struct sctp_sack_info instead
[  339.584639][T20449] sctp: [Deprecated]: syz.1.3592 (pid 20449) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.584639][T20449] Use struct sctp_sack_info instead
[  339.600212][T20449] xt_limit: Overflow, try lower: 604147548/4200216962
[  339.638495][T20449] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  339.669443][T20446] tipc: Resetting bearer <eth:syzkaller0>
[  339.677929][T20446] syzkaller0: left promiscuous mode
[  339.679822][T20446] syzkaller0: left allmulticast mode
[  339.754055][T20457] netlink: 'syz.1.3593': attribute type 10 has an invalid length.
[  339.804316][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'.
[  339.888440][T20472] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3597'.
[  339.888442][T20469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3597'.
[  339.903306][T20471] netlink: 'syz.0.3598': attribute type 10 has an invalid length.
[  339.907077][T20471] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  339.960893][T20475] syz.0.3599 uses old SIOCAX25GETINFO
[  339.974322][T20476] lo: left promiscuous mode
[  339.980555][T20476] tunl0: left promiscuous mode
[  339.982681][T20476] gre0: left promiscuous mode
[  339.984449][T20476] gretap0: left promiscuous mode
[  339.995531][T20476] erspan0: left promiscuous mode
[  339.997820][T20476] ip_vti0: left promiscuous mode
[  340.004822][T20476] ip6_vti0: left promiscuous mode
[  340.008797][T20476] sit0: left promiscuous mode
[  340.011031][T20476] ip6tnl0: left promiscuous mode
[  340.013467][T20476] ip6gre0: left promiscuous mode
[  340.016846][T20476] syz_tun: left promiscuous mode
[  340.019286][T20476] ip6gretap0: left promiscuous mode
[  340.023569][T20476] team0: left promiscuous mode
[  340.025648][T20476] !: left promiscuous mode
[  340.028189][T20476] nlmon0: left promiscuous mode
[  340.030139][T20476] caif0: left promiscuous mode
[  340.052681][T20476] mac80211_hwsim hwsim625 wlan0: left promiscuous mode
[  340.063824][T20476] mac80211_hwsim hwsim710 wlan1: left allmulticast mode
[  340.116052][T20486] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3603'.
[  340.120204][T20486] netlink: 'syz.0.3603': attribute type 10 has an invalid length.
[  340.224511][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'.
[  340.361137][T20507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3607'.
[  340.369031][T20507] mac80211_hwsim hwsim710 wlan1: entered allmulticast mode
[  340.417438][T20509] wg1 speed is unknown, defaulting to 1000
[  340.507998][T20509] netlink: 'syz.1.3608': attribute type 2 has an invalid length.
[  340.517372][T20509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3608'.
[  340.787106][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3609'.
[  341.412569][T20549] wg1 speed is unknown, defaulting to 1000
[  341.423607][T20559] veth17: entered promiscuous mode
[  341.464110][T20562] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  341.469503][T20562] CPU: 0 UID: 0 PID: 20562 Comm: syz.1.3622 Not tainted syzkaller #0 PREEMPT(full) 
[  341.469521][T20562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  341.469529][T20562] Call Trace:
[  341.469535][T20562]  <TASK>
[  341.469540][T20562]  dump_stack_lvl+0x189/0x250
[  341.469564][T20562]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.469579][T20562]  ? __pfx__printk+0x10/0x10
[  341.469602][T20562]  ? kernfs_path_from_node+0x2f/0x290
[  341.469616][T20562]  ? kernfs_path_from_node+0x250/0x290
[  341.469629][T20562]  ? kernfs_path_from_node+0x2f/0x290
[  341.469647][T20562]  sysfs_warn_dup+0x8e/0xa0
[  341.469662][T20562]  sysfs_do_create_link_sd+0xc0/0x110
[  341.469686][T20562]  device_add_class_symlinks+0x1cf/0x240
[  341.469704][T20562]  device_add+0x475/0xb50
[  341.469721][T20562]  wiphy_register+0x1ba6/0x28d0
[  341.469754][T20562]  ? __pfx_wiphy_register+0x10/0x10
[  341.469772][T20562]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  341.469794][T20562]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  341.469813][T20562]  ieee80211_register_hw+0x3425/0x4080
[  341.469839][T20562]  ? ieee80211_register_hw+0x1461/0x4080
[  341.469860][T20562]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  341.469878][T20562]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  341.469902][T20562]  ? __hrtimer_setup+0x187/0x210
[  341.469913][T20562]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  341.469933][T20562]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  341.470002][T20562]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  341.470019][T20562]  ? trace_kmalloc+0x1f/0xd0
[  341.470034][T20562]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  341.470051][T20562]  ? kstrndup+0xbf/0x160
[  341.470073][T20562]  hwsim_new_radio_nl+0xea4/0x1b10
[  341.470091][T20562]  ? __pfx___nla_validate_parse+0x10/0x10
[  341.470122][T20562]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  341.470148][T20562]  ? __nla_parse+0x40/0x60
[  341.470169][T20562]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  341.470192][T20562]  genl_family_rcv_msg_doit+0x215/0x300
[  341.470213][T20562]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  341.470238][T20562]  ? bpf_lsm_capable+0x9/0x20
[  341.470254][T20562]  ? security_capable+0x7e/0x2e0
[  341.470279][T20562]  genl_rcv_msg+0x60e/0x790
[  341.470299][T20562]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.470312][T20562]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  341.470340][T20562]  netlink_rcv_skb+0x208/0x470
[  341.470356][T20562]  ? __lock_acquire+0xab9/0xd20
[  341.470375][T20562]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.470390][T20562]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  341.470424][T20562]  ? down_read+0x1ad/0x2e0
[  341.470438][T20562]  genl_rcv+0x28/0x40
[  341.470452][T20562]  netlink_unicast+0x82f/0x9e0
[  341.470477][T20562]  ? __pfx_netlink_unicast+0x10/0x10
[  341.470497][T20562]  ? netlink_sendmsg+0x642/0xb30
[  341.470506][T20562]  ? skb_put+0x11b/0x210
[  341.470543][T20562]  netlink_sendmsg+0x805/0xb30
[  341.470564][T20562]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.470580][T20562]  ? aa_sock_msg_perm+0xf1/0x1d0
[  341.470594][T20562]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  341.470608][T20562]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.470621][T20562]  __sock_sendmsg+0x21c/0x270
[  341.470643][T20562]  ____sys_sendmsg+0x505/0x830
[  341.470662][T20562]  ? __pfx_____sys_sendmsg+0x10/0x10
[  341.470692][T20562]  ? import_iovec+0x74/0xa0
[  341.470710][T20562]  ___sys_sendmsg+0x21f/0x2a0
[  341.470726][T20562]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.470770][T20562]  ? __fget_files+0x2a/0x420
[  341.470782][T20562]  ? __fget_files+0x3a0/0x420
[  341.470802][T20562]  __x64_sys_sendmsg+0x19b/0x260
[  341.470818][T20562]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  341.470841][T20562]  ? rcu_is_watching+0x15/0xb0
[  341.470859][T20562]  ? do_syscall_64+0xbe/0x3b0
[  341.470874][T20562]  do_syscall_64+0xfa/0x3b0
[  341.470884][T20562]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.470901][T20562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.470911][T20562]  ? exc_page_fault+0x9f/0xf0
[  341.470927][T20562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.470937][T20562] RIP: 0033:0x7fc1c4f8ebe9
[  341.470948][T20562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.470986][T20562] RSP: 002b:00007fc1c5dba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.471000][T20562] RAX: ffffffffffffffda RBX: 00007fc1c51c6090 RCX: 00007fc1c4f8ebe9
[  341.471009][T20562] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  341.471016][T20562] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  341.471023][T20562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.471031][T20562] R13: 00007fc1c51c6128 R14: 00007fc1c51c6090 R15: 00007ffdb84a9458
[  341.471053][T20562]  </TASK>
[  341.484384][T20564] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  341.768354][T20572] mac80211_hwsim hwsim753 wlan1: left allmulticast mode
[  341.783912][T20572] validate_nla: 3 callbacks suppressed
[  341.784046][T20572] netlink: 'syz.2.3626': attribute type 10 has an invalid length.
[  341.888163][T20578] netlink: 'syz.0.3625': attribute type 10 has an invalid length.
[  342.445083][T20607] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  342.617550][T20629] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  342.619043][   T33] audit: type=1800 audit(1757241358.706:3): pid=20627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3641" name="memory.events" dev="tmpfs" ino=5508 res=0 errno=0
[  342.632055][T20627] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  342.639239][T20627] CPU: 1 UID: 0 PID: 20627 Comm: syz.1.3641 Not tainted syzkaller #0 PREEMPT(full) 
[  342.639255][T20627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.639262][T20627] Call Trace:
[  342.639267][T20627]  <TASK>
[  342.639272][T20627]  dump_stack_lvl+0x189/0x250
[  342.639293][T20627]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.639306][T20627]  ? __pfx__printk+0x10/0x10
[  342.639328][T20627]  ? kernfs_path_from_node+0x2f/0x290
[  342.639341][T20627]  ? kernfs_path_from_node+0x250/0x290
[  342.639352][T20627]  ? kernfs_path_from_node+0x2f/0x290
[  342.639366][T20627]  sysfs_warn_dup+0x8e/0xa0
[  342.639379][T20627]  sysfs_do_create_link_sd+0xc0/0x110
[  342.639395][T20627]  device_add_class_symlinks+0x1cf/0x240
[  342.639410][T20627]  device_add+0x475/0xb50
[  342.639421][T20627]  wiphy_register+0x1ba6/0x28d0
[  342.639440][T20627]  ? __pfx_wiphy_register+0x10/0x10
[  342.639449][T20627]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  342.639462][T20627]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  342.639472][T20627]  ieee80211_register_hw+0x3425/0x4080
[  342.639488][T20627]  ? ieee80211_register_hw+0x1461/0x4080
[  342.639500][T20627]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  342.639510][T20627]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.639524][T20627]  ? __hrtimer_setup+0x187/0x210
[  342.639531][T20627]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  342.639542][T20627]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  342.639563][T20627]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  342.639571][T20627]  ? trace_kmalloc+0x1f/0xd0
[  342.639579][T20627]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  342.639588][T20627]  ? kstrndup+0xbf/0x160
[  342.639600][T20627]  hwsim_new_radio_nl+0xea4/0x1b10
[  342.639610][T20627]  ? __pfx___nla_validate_parse+0x10/0x10
[  342.639628][T20627]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  342.639649][T20627]  ? __nla_parse+0x40/0x60
[  342.639660][T20627]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  342.639674][T20627]  genl_family_rcv_msg_doit+0x215/0x300
[  342.639686][T20627]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  342.639706][T20627]  ? bpf_lsm_capable+0x9/0x20
[  342.639719][T20627]  ? security_capable+0x7e/0x2e0
[  342.639740][T20627]  genl_rcv_msg+0x60e/0x790
[  342.639756][T20627]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.639767][T20627]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  342.639790][T20627]  netlink_rcv_skb+0x208/0x470
[  342.639805][T20627]  ? __lock_acquire+0xab9/0xd20
[  342.639821][T20627]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.639834][T20627]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.639865][T20627]  ? down_read+0x1ad/0x2e0
[  342.639878][T20627]  genl_rcv+0x28/0x40
[  342.639892][T20627]  netlink_unicast+0x82f/0x9e0
[  342.639914][T20627]  ? __pfx_netlink_unicast+0x10/0x10
[  342.639932][T20627]  ? netlink_sendmsg+0x642/0xb30
[  342.639966][T20627]  ? skb_put+0x11b/0x210
[  342.639983][T20627]  netlink_sendmsg+0x805/0xb30
[  342.640002][T20627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.640017][T20627]  ? aa_sock_msg_perm+0xf1/0x1d0
[  342.640032][T20627]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.640046][T20627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.640059][T20627]  __sock_sendmsg+0x21c/0x270
[  342.640077][T20627]  ____sys_sendmsg+0x505/0x830
[  342.640095][T20627]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.640116][T20627]  ? import_iovec+0x74/0xa0
[  342.640133][T20627]  ___sys_sendmsg+0x21f/0x2a0
[  342.640149][T20627]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.640193][T20627]  ? __fget_files+0x2a/0x420
[  342.640203][T20627]  ? __fget_files+0x3a0/0x420
[  342.640222][T20627]  __x64_sys_sendmsg+0x19b/0x260
[  342.640238][T20627]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.640260][T20627]  ? rcu_is_watching+0x15/0xb0
[  342.640277][T20627]  ? do_syscall_64+0xbe/0x3b0
[  342.640290][T20627]  do_syscall_64+0xfa/0x3b0
[  342.640302][T20627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.640312][T20627]  ? asm_sysvec_call_function_single+0x1a/0x20
[  342.640327][T20627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.640339][T20627] RIP: 0033:0x7fc1c4f8ebe9
[  342.640350][T20627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.640360][T20627] RSP: 002b:00007fc1c5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.640375][T20627] RAX: ffffffffffffffda RBX: 00007fc1c51c5fa0 RCX: 00007fc1c4f8ebe9
[  342.640384][T20627] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  342.640392][T20627] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  342.640400][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.640408][T20627] R13: 00007fc1c51c6038 R14: 00007fc1c51c5fa0 R15: 00007ffdb84a9458
[  342.640431][T20627]  </TASK>
[  342.657471][T20631] sctp: [Deprecated]: syz.2.3643 (pid 20631) Use of int in max_burst socket option.
[  342.657471][T20631] Use struct sctp_assoc_value instead
[  342.883166][T20639] netlink: 'syz.0.3645': attribute type 1 has an invalid length.
[  342.921401][T20639] 8021q: adding VLAN 0 to HW filter on device bond39
[  342.948388][T20639] veth19: entered promiscuous mode
[  342.953904][T20639] bond39: (slave veth19): Enslaving as a backup interface with a down link
[  343.055898][T20639] bond39: (slave veth19): Releasing backup interface
[  343.121592][T20645] wg1 speed is unknown, defaulting to 1000
[  343.247560][T20649] netlink: 'syz.2.3647': attribute type 2 has an invalid length.
[  344.217386][T20699] __nla_validate_parse: 44 callbacks suppressed
[  344.217400][T20699] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3657'.
[  344.244528][T20699] netlink: 'syz.1.3657': attribute type 3 has an invalid length.
[  344.249579][T20699] netlink: 'syz.1.3657': attribute type 9 has an invalid length.
[  344.257523][T20701] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3658'.
[  344.278377][ T5297] udevd[5297]: worker [13437] terminated by signal 33 (Unknown signal 33)
[  344.281720][ T5297] udevd[5297]: worker [13437] failed while handling '/devices/virtual/mac80211_hwsim/hwsim778'
[  344.422301][T20703] netlink: 'syz.0.3659': attribute type 9 has an invalid length.
[  344.427628][T20703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3659'.
[  344.653249][T20716] veth0_to_team: entered promiscuous mode
[  344.655555][T20716] veth0_to_team: entered allmulticast mode
[  344.673535][T20710] netlink: 'syz.1.3661': attribute type 12 has an invalid length.
[  344.676579][T20710] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3661'.
[  344.795362][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'.
[  345.254378][T20743] netlink: 'syz.1.3669': attribute type 4 has an invalid length.
[  345.617746][T20754] netlink: 'syz.2.3672': attribute type 10 has an invalid length.
[  345.622601][T20754] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  345.743758][T20759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3674'.
[  345.750660][T20760] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  345.792580][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3675'.
[  346.005335][T20776] mac80211_hwsim hwsim777 wlan1: left allmulticast mode
[  346.078975][T20783] sctp: [Deprecated]: syz.2.3681 (pid 20783) Use of int in max_burst socket option.
[  346.078975][T20783] Use struct sctp_assoc_value instead
[  346.337059][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3687'.
[  346.359227][T20800] wg1 speed is unknown, defaulting to 1000
[  346.513604][T20800] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3685'.
[  346.565367][T20809] mac80211_hwsim hwsim710 wlan1: left allmulticast mode
[  346.775714][T20815] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3690'.
[  346.948177][T20823] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  346.972084][T20823] validate_nla: 2 callbacks suppressed
[  346.972096][T20823] netlink: 'syz.0.3692': attribute type 10 has an invalid length.
[  346.982728][T20823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  346.986727][T20823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.030936][T20820] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  347.052064][T20826] netlink: 'syz.1.3693': attribute type 1 has an invalid length.
[  347.057242][T20826] netlink: 'syz.1.3693': attribute type 1 has an invalid length.
[  347.143393][T20826] netlink: 'syz.1.3693': attribute type 1 has an invalid length.
[  347.160563][T20826] 8021q: adding VLAN 0 to HW filter on device bond26
[  347.167189][T20826] bond26: (slave wlan0): Opening slave failed
[  347.839505][T20838] netlink: 'syz.2.3696': attribute type 2 has an invalid length.
[  347.885416][T20841] netlink: 'syz.2.3697': attribute type 10 has an invalid length.
[  347.946056][T20845] netlink: 'syz.0.3695': attribute type 10 has an invalid length.
[  347.954348][T20844] netlink: 'syz.2.3698': attribute type 10 has an invalid length.
[  348.136733][T20853] netlink: 'syz.2.3702': attribute type 10 has an invalid length.
[  348.204638][T20857] netlink: 'syz.1.3704': attribute type 1 has an invalid length.
[  348.262239][T20857] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  348.422068][T20880] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  348.819486][T20914] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  348.974468][T20925] wg1 speed is unknown, defaulting to 1000
[  349.580113][T20971] __nla_validate_parse: 11 callbacks suppressed
[  349.580128][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'.
[  349.643504][T20974] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  349.661821][T20974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.665062][T20974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  350.109468][T20976] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  350.154580][T20981] wg1 speed is unknown, defaulting to 1000
[  350.469773][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3739'.
[  350.544165][T21000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.557705][T21000] syzkaller0: entered promiscuous mode
[  350.561303][T21000] syzkaller0: entered allmulticast mode
[  350.662072][T21000] tipc: Resetting bearer <eth:syzkaller0>
[  350.695597][T20999] tipc: Resetting bearer <eth:syzkaller0>
[  350.720528][T20999] tipc: Disabling bearer <eth:syzkaller0>
[  350.739398][T21005] team0: Mode changed to "loadbalance"
[  350.853377][T21016] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3746'.
[  350.970934][T21023] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  351.014973][T21026] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  351.038278][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3747'.
[  351.590997][T21036] wg1 speed is unknown, defaulting to 1000
[  351.735323][T21047] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  351.970306][T21058] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000
[  352.042033][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'.
[  352.174610][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'.
[  352.196286][T21081] 8021q: adding VLAN 0 to HW filter on device bond40
[  352.200936][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'.
[  352.300074][T21088] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  352.304218][T21083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.322627][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'.
[  352.367447][T21083] siw: device registration error -23
[  352.473761][T21096] veth0_to_team: left promiscuous mode
[  352.476547][T21096] veth0_to_team: left allmulticast mode
[  352.490516][T21096] mac80211_hwsim hwsim352 wlan0: left promiscuous mode
[  352.504910][T21096] mac80211_hwsim hwsim777 wlan1: left allmulticast mode
[  352.693244][T21105] mac80211_hwsim hwsim352 wlan0: entered promiscuous mode
[  352.696995][T21105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  352.730182][T21107] wg1 speed is unknown, defaulting to 1000
[  352.787685][T21110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.799035][T21112] 8021q: adding VLAN 0 to HW filter on device bond3
[  352.815034][T21112] 8021q: adding VLAN 0 to HW filter on device macvlan19
[  352.820631][T21112] bond3: (slave macvlan19): Enslaving as a backup interface with a down link
[  352.828357][T21112] bond3: (slave macvlan19): Releasing backup interface
[  352.858917][T21110] validate_nla: 10 callbacks suppressed
[  352.858928][T21110] netlink: 'syz.0.3769': attribute type 2 has an invalid length.
[  352.889399][T21110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3769'.
[  353.136666][T21129] mac80211_hwsim hwsim352 wlan0: left promiscuous mode
[  353.169699][T21133] openvswitch: netlink: Multiple metadata blocks provided
[  353.174248][T21133] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3776'.
[  353.320423][T21145] team0: Unable to change to the same mode the team is in
[  353.380513][T21148] netlink: 'syz.2.3781': attribute type 10 has an invalid length.
[  353.424770][T21157] netlink: 'syz.1.3782': attribute type 11 has an invalid length.
[  353.509313][T21158] netlink: 'syz.1.3782': attribute type 11 has an invalid length.
[  353.554167][T21168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.752945][T21175] netlink: 'syz.2.3786': attribute type 10 has an invalid length.
[  353.765953][T21175] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  353.847700][T21182] mac80211_hwsim hwsim777 wlan1: left allmulticast mode
[  353.880932][T21182] netlink: 'syz.2.3790': attribute type 10 has an invalid length.
[  353.887001][T21182] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  353.938540][T21189] mac80211_hwsim hwsim777 wlan1: left allmulticast mode
[  353.969779][T21189] netlink: 'syz.2.3794': attribute type 10 has an invalid length.
[  353.973790][T21189] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  354.068144][T21203] netlink: 'syz.1.3798': attribute type 10 has an invalid length.
[  357.267169][T21231] netlink: 'syz.0.3804': attribute type 9 has an invalid length.
[  357.380879][T21241] bond1: (slave macvlan26): Error -22 calling dev_set_mtu
[  357.480709][T21239] mac80211_hwsim hwsim777 wlan1: left allmulticast mode
[  357.497096][T21241] __nla_validate_parse: 7 callbacks suppressed
[  357.497112][T21241] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3807'.
[  357.590816][T21254] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  357.598589][T21256] wg1 speed is unknown, defaulting to 1000
[  357.690393][T21256] netlink: 'syz.2.3810': attribute type 2 has an invalid length.
[  357.702276][T21265] vlan3: entered allmulticast mode
[  357.720841][T21256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3810'.
[  357.863877][T21271] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  357.905943][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'.
[  357.980068][T21281] wg1 speed is unknown, defaulting to 1000
[  358.031821][T21286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3817'.
[  358.095141][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3819'.
[  358.158235][T21296] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  358.250858][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'.
[  358.277275][T21307] netlink: 'syz.1.3821': attribute type 9 has an invalid length.
[  358.317041][T21309] netlink: 'syz.2.3822': attribute type 1 has an invalid length.
[  358.375586][T21306] netlink: 'syz.1.3821': attribute type 9 has an invalid length.
[  358.378099][T21309] 8021q: adding VLAN 0 to HW filter on device bond34
[  358.442150][T21309] veth23: entered promiscuous mode
[  358.447830][T21309] bond34: (slave veth23): Enslaving as a backup interface with a down link
[  358.453597][T21313] bond34: (slave veth23): Releasing backup interface
[  358.679838][T21322] netlink: 'syz.2.3823': attribute type 10 has an invalid length.
[  358.921389][T21334] 8021q: adding VLAN 0 to HW filter on device bond1
[  358.957631][T21334] 8021q: adding VLAN 0 to HW filter on device macvlan37
[  358.962533][T21334] bond1: (slave macvlan37): Enslaving as a backup interface with a down link
[  358.969702][T21334] bond1: (slave macvlan37): Releasing backup interface
[  358.986001][ T1119] block nbd1: Possible stuck request ffff888022e28000: control (read@0,1024B). Runtime 270 seconds
[  358.989659][ T1119] block nbd1: Possible stuck request ffff888022e28200: control (read@1024,1024B). Runtime 270 seconds
[  358.993806][ T1119] block nbd1: Possible stuck request ffff888022e28400: control (read@2048,1024B). Runtime 270 seconds
[  359.000131][ T1119] block nbd1: Possible stuck request ffff888022e28600: control (read@3072,1024B). Runtime 270 seconds
[  359.038041][T21343] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  359.046996][T21343] CPU: 1 UID: 0 PID: 21343 Comm: syz.0.3830 Not tainted syzkaller #0 PREEMPT(full) 
[  359.047017][T21343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  359.047025][T21343] Call Trace:
[  359.047032][T21343]  <TASK>
[  359.047038][T21343]  dump_stack_lvl+0x189/0x250
[  359.047061][T21343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.047077][T21343]  ? __pfx__printk+0x10/0x10
[  359.047100][T21343]  ? kernfs_path_from_node+0x2f/0x290
[  359.047115][T21343]  ? kernfs_path_from_node+0x250/0x290
[  359.047130][T21343]  ? kernfs_path_from_node+0x2f/0x290
[  359.047148][T21343]  sysfs_warn_dup+0x8e/0xa0
[  359.047164][T21343]  sysfs_do_create_link_sd+0xc0/0x110
[  359.047180][T21343]  device_add_class_symlinks+0x1cf/0x240
[  359.047199][T21343]  device_add+0x475/0xb50
[  359.047215][T21343]  wiphy_register+0x1ba6/0x28d0
[  359.047247][T21343]  ? __pfx_wiphy_register+0x10/0x10
[  359.047264][T21343]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  359.047286][T21343]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  359.047304][T21343]  ieee80211_register_hw+0x3425/0x4080
[  359.047333][T21343]  ? ieee80211_register_hw+0x1461/0x4080
[  359.047354][T21343]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  359.047372][T21343]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  359.047396][T21343]  ? __hrtimer_setup+0x187/0x210
[  359.047408][T21343]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  359.047429][T21343]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  359.047467][T21343]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  359.047482][T21343]  ? trace_kmalloc+0x1f/0xd0
[  359.047497][T21343]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  359.047514][T21343]  ? kstrndup+0xbf/0x160
[  359.047535][T21343]  hwsim_new_radio_nl+0xea4/0x1b10
[  359.047553][T21343]  ? __pfx___nla_validate_parse+0x10/0x10
[  359.047582][T21343]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  359.047609][T21343]  ? __nla_parse+0x40/0x60
[  359.047631][T21343]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  359.047653][T21343]  genl_family_rcv_msg_doit+0x215/0x300
[  359.047675][T21343]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  359.047701][T21343]  ? bpf_lsm_capable+0x9/0x20
[  359.047723][T21343]  ? security_capable+0x7e/0x2e0
[  359.047748][T21343]  genl_rcv_msg+0x60e/0x790
[  359.047794][T21343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  359.047811][T21343]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  359.047841][T21343]  netlink_rcv_skb+0x208/0x470
[  359.047858][T21343]  ? __lock_acquire+0xab9/0xd20
[  359.047878][T21343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  359.047896][T21343]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  359.047928][T21343]  ? down_read+0x1ad/0x2e0
[  359.047944][T21343]  genl_rcv+0x28/0x40
[  359.047957][T21343]  netlink_unicast+0x82f/0x9e0
[  359.047983][T21343]  ? __pfx_netlink_unicast+0x10/0x10
[  359.048002][T21343]  ? netlink_sendmsg+0x642/0xb30
[  359.048012][T21343]  ? skb_put+0x11b/0x210
[  359.048029][T21343]  netlink_sendmsg+0x805/0xb30
[  359.048049][T21343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.048064][T21343]  ? aa_sock_msg_perm+0xf1/0x1d0
[  359.048079][T21343]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  359.048092][T21343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.048105][T21343]  __sock_sendmsg+0x21c/0x270
[  359.048125][T21343]  ____sys_sendmsg+0x505/0x830
[  359.048144][T21343]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.048166][T21343]  ? import_iovec+0x74/0xa0
[  359.048183][T21343]  ___sys_sendmsg+0x21f/0x2a0
[  359.048199][T21343]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.048242][T21343]  ? __fget_files+0x2a/0x420
[  359.048253][T21343]  ? __fget_files+0x3a0/0x420
[  359.048273][T21343]  __x64_sys_sendmsg+0x19b/0x260
[  359.048289][T21343]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.048311][T21343]  ? rcu_is_watching+0x15/0xb0
[  359.048329][T21343]  ? do_syscall_64+0xbe/0x3b0
[  359.048344][T21343]  do_syscall_64+0xfa/0x3b0
[  359.048354][T21343]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.048371][T21343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.048384][T21343]  ? exc_page_fault+0x9f/0xf0
[  359.048403][T21343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.048415][T21343] RIP: 0033:0x7f06d298ebe9
[  359.048427][T21343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.048438][T21343] RSP: 002b:00007f06d3877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.048452][T21343] RAX: ffffffffffffffda RBX: 00007f06d2bc5fa0 RCX: 00007f06d298ebe9
[  359.048461][T21343] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  359.048468][T21343] RBP: 00007f06d2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  359.048475][T21343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.048483][T21343] R13: 00007f06d2bc6038 R14: 00007f06d2bc5fa0 R15: 00007ffe97991ef8
[  359.048506][T21343]  </TASK>
[  359.293471][T21351] netlink: 'syz.0.3832': attribute type 7 has an invalid length.
[  359.296792][T21351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3832'.
[  359.428870][T21361] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  359.536910][T21369] netlink: 'syz.0.3837': attribute type 1 has an invalid length.
[  359.540408][T21369] netlink: 'syz.0.3837': attribute type 1 has an invalid length.
[  359.582528][T21373] mac80211_hwsim hwsim777 wlan1: entered allmulticast mode
[  359.606715][T21373] netlink: 'syz.2.3838': attribute type 10 has an invalid length.
[  359.685374][T21378] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  359.818503][T21390] mac80211_hwsim hwsim664 wlan0: entered promiscuous mode
[  359.821518][T21390] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  360.803392][T21414] netlink: 'syz.1.3849': attribute type 12 has an invalid length.
[  361.072872][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'.
[  361.078943][T21426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'.
[  361.170672][T21431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3855'.
[  361.333020][T21440] netlink: 'syz.1.3857': attribute type 12 has an invalid length.
[  361.537783][   T61] block nbd0: Possible stuck request ffff888022db0000: control (read@0,1024B). Runtime 300 seconds
[  361.542206][   T61] block nbd0: Possible stuck request ffff888022db0200: control (read@1024,1024B). Runtime 300 seconds
[  361.546403][   T61] block nbd0: Possible stuck request ffff888022db0400: control (read@2048,1024B). Runtime 300 seconds
[  361.550553][   T61] block nbd0: Possible stuck request ffff888022db0600: control (read@3072,1024B). Runtime 300 seconds
[  361.952875][T21486] mac80211_hwsim hwsim710 wlan1: entered allmulticast mode
[  362.378187][T21514] wg1 speed is unknown, defaulting to 1000
[  362.845884][T21547] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.853454][T21547] 8021q: adding VLAN 0 to HW filter on device macvlan38
[  362.857206][T21547] bond1: (slave macvlan38): Enslaving as a backup interface with a down link
[  362.857339][T21549] __nla_validate_parse: 9 callbacks suppressed
[  362.857348][T21549] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3888'.
[  362.868672][T21547] bond1: (slave macvlan38): Releasing backup interface
[  362.886186][T21549] veth25: entered allmulticast mode
[  362.917972][T21545] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  362.921413][T21545] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  363.076864][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'.
[  363.109651][T21561] sctp: [Deprecated]: syz.0.3890 (pid 21561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.109651][T21561] Use struct sctp_sack_info instead
[  363.123949][T21555] sctp: [Deprecated]: syz.0.3890 (pid 21555) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.123949][T21555] Use struct sctp_sack_info instead
[  363.146894][T21555] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3890'.
[  363.444591][T21574] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3893'.
[  363.449095][T21574] validate_nla: 8 callbacks suppressed
[  363.449108][T21574] netlink: 'syz.2.3893': attribute type 10 has an invalid length.
[  363.631504][T21576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3894'.
[  363.710297][T21578] wg1 speed is unknown, defaulting to 1000
[  363.732990][T21583] geneve2: entered promiscuous mode
[  363.750014][ T5965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  363.753864][ T5965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  363.764001][ T5965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  363.776753][ T5965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  363.782578][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'.
[  363.782580][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'.
[  363.847214][T21590] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3898'.
[  363.862855][T21578] netlink: 'syz.0.3895': attribute type 9 has an invalid length.
[  363.874345][T21578] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3895'.
[  363.952988][T21593] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  364.161044][T21598] netlink: 'syz.1.3901': attribute type 6 has an invalid length.
[  364.182632][T21598] netlink: 'syz.1.3901': attribute type 12 has an invalid length.
[  364.190049][T21600] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  364.191882][T21598] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3901'.
[  364.397146][T21606] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  364.400049][T21606] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  364.452505][T21608] mac80211_hwsim hwsim710 wlan1: left allmulticast mode
[  364.486319][T21608] netlink: 'syz.1.3904': attribute type 10 has an invalid length.
[  364.490448][T21608] mac80211_hwsim hwsim710 wlan1: entered allmulticast mode
[  364.612276][T21606] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  364.650485][T21606] 8021q: adding VLAN 0 to HW filter on device bond35
[  364.665089][T21606] bond35: (slave wlan0): Opening slave failed
[  364.744542][T21619] wg1 speed is unknown, defaulting to 1000
[  364.751340][T21624] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.202850][T21653] mac80211_hwsim hwsim625 wlan0: entered promiscuous mode
[  365.205763][T21653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.291692][T21662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.295162][T21662] syzkaller0: entered promiscuous mode
[  365.297468][T21662] syzkaller0: entered allmulticast mode
[  365.340515][T21664] team0: Mode changed to "broadcast"
[  365.343651][T21664] vlan0: entered promiscuous mode
[  365.358040][T21662] tipc: Resetting bearer <eth:syzkaller0>
[  365.362376][T21661] tipc: Resetting bearer <eth:syzkaller0>
[  365.374747][T21661] tipc: Disabling bearer <eth:syzkaller0>
[  365.445880][T21669] netlink: 'syz.1.3920': attribute type 1 has an invalid length.
[  365.592268][T21680] veth23: left promiscuous mode
[  365.594760][T21680] veth25: left allmulticast mode
[  365.660403][T21684] netlink: 'syz.2.3925': attribute type 1 has an invalid length.
[  365.663691][T21684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.723344][T21687] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  365.973270][T21700] 8021q: adding VLAN 0 to HW filter on device bond36
[  365.987806][T21700] bond36: (slave wlan0): Opening slave failed
[  365.996020][T21705] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  366.008290][T21700] vlan2: entered allmulticast mode
[  366.011068][T21700] bond36: (slave vlan2): Opening slave failed
[  366.049937][T21707] mac80211_hwsim hwsim664 wlan0: left promiscuous mode
[  366.065131][T21707] veth17: left promiscuous mode
[  366.070559][T21707] veth19: left promiscuous mode
[  366.355593][T21729] team0: Mode changed to "loadbalance"
[  366.415673][T12325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.420607][T12325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.430063][T21734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.438039][T21733] tipc: Resetting bearer <eth:syzkaller0>
[  367.579755][T21733] tipc: Disabling bearer <eth:syzkaller0>
[  367.805996][T21761] wg1 speed is unknown, defaulting to 1000
[  367.950967][T21774] wg1 speed is unknown, defaulting to 1000
[  367.999105][T21777] wg1 speed is unknown, defaulting to 1000
[  368.047264][T21761] __nla_validate_parse: 14 callbacks suppressed
[  368.047275][T21761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3948'.
[  368.244926][T21774] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3952'.
[  368.406654][T21777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3953'.
[  368.669427][T21793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3955'.
[  368.775595][T21798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3956'.
[  368.860209][T21801] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3957'.
[  368.864229][T21801] validate_nla: 7 callbacks suppressed
[  368.864240][T21801] netlink: 'syz.1.3957': attribute type 1 has an invalid length.
[  368.938535][T21786] wg1 speed is unknown, defaulting to 1000
[  368.959740][T21803] 8021q: adding VLAN 0 to HW filter on device bond27
[  369.017293][T21803] netlink: 'syz.1.3957': attribute type 10 has an invalid length.
[  369.502268][T21845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3966'.
[  369.545812][T21844] vlan0: left promiscuous mode
[  369.552018][T21844] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  369.571954][T21852] netlink: 'syz.2.3967': attribute type 9 has an invalid length.
[  369.571986][T21844] mac80211_hwsim hwsim625 wlan0: left promiscuous mode
[  369.581358][T21852] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3967'.
[  369.586340][T21844] geneve2: left promiscuous mode
[  369.601837][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.605994][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.610693][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.615443][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.623775][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'.
[  369.783128][T21856] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3969'.
[  369.841596][T21858] team0: Unable to change to the same mode the team is in
[  369.893116][T21865] netlink: 'syz.2.3970': attribute type 9 has an invalid length.
[  370.082923][T21870] netlink: 'syz.2.3972': attribute type 12 has an invalid length.
[  370.304847][T21885] wg1 speed is unknown, defaulting to 1000
[  370.504905][T21880] netlink: 'syz.2.3975': attribute type 2 has an invalid length.
[  370.509826][T21885] netlink: 'syz.2.3975': attribute type 2 has an invalid length.
[  370.522960][T21876] netlink: 'syz.1.3974': attribute type 10 has an invalid length.
[  370.709288][T21911] netlink: 'syz.1.3978': attribute type 1 has an invalid length.
[  370.810501][T21912] 8021q: adding VLAN 0 to HW filter on device bond28
[  370.814060][T21916] netlink: 'syz.0.3980': attribute type 10 has an invalid length.
[  370.829207][T21911] veth11: entered promiscuous mode
[  370.832630][T21916] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  370.961127][T21925] veth11: left promiscuous mode
[  370.977891][T21919] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  371.718365][T21945] wg1 speed is unknown, defaulting to 1000
[  371.749122][T21944] wg1 speed is unknown, defaulting to 1000
[  372.111309][T21956] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  372.156696][T21964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.160674][T21964] syzkaller0: entered promiscuous mode
[  372.163017][T21964] syzkaller0: entered allmulticast mode
[  372.167145][T21964] tipc: Resetting bearer <eth:syzkaller0>
[  372.222741][T21962] tipc: Resetting bearer <eth:syzkaller0>
[  372.456137][T21983] tipc: Resetting bearer <eth:syzkaller0>
[  372.460601][T21983] team0: Unable to change to the same mode the team is in
[  372.464213][T21983] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  372.558527][T21996] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  372.561305][T21996] CPU: 0 UID: 0 PID: 21996 Comm: syz.1.4001 Not tainted syzkaller #0 PREEMPT(full) 
[  372.561322][T21996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.561328][T21996] Call Trace:
[  372.561332][T21996]  <TASK>
[  372.561337][T21996]  dump_stack_lvl+0x189/0x250
[  372.561352][T21996]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.561361][T21996]  ? __pfx__printk+0x10/0x10
[  372.561373][T21996]  ? kernfs_path_from_node+0x2f/0x290
[  372.561381][T21996]  ? kernfs_path_from_node+0x250/0x290
[  372.561388][T21996]  ? kernfs_path_from_node+0x2f/0x290
[  372.561397][T21996]  sysfs_warn_dup+0x8e/0xa0
[  372.561406][T21996]  sysfs_do_create_link_sd+0xc0/0x110
[  372.561415][T21996]  device_add_class_symlinks+0x1cf/0x240
[  372.561425][T21996]  device_add+0x475/0xb50
[  372.561434][T21996]  wiphy_register+0x1ba6/0x28d0
[  372.561453][T21996]  ? __pfx_wiphy_register+0x10/0x10
[  372.561463][T21996]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  372.561475][T21996]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  372.561485][T21996]  ieee80211_register_hw+0x3425/0x4080
[  372.561500][T21996]  ? ieee80211_register_hw+0x1461/0x4080
[  372.561512][T21996]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  372.561522][T21996]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.561535][T21996]  ? __hrtimer_setup+0x187/0x210
[  372.561542][T21996]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  372.561554][T21996]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  372.561575][T21996]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  372.561583][T21996]  ? trace_kmalloc+0x1f/0xd0
[  372.561591][T21996]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  372.561600][T21996]  ? kstrndup+0xbf/0x160
[  372.561612][T21996]  hwsim_new_radio_nl+0xea4/0x1b10
[  372.561646][T21996]  ? __pfx___nla_validate_parse+0x10/0x10
[  372.561664][T21996]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.561678][T21996]  ? __nla_parse+0x40/0x60
[  372.561690][T21996]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  372.561704][T21996]  genl_family_rcv_msg_doit+0x215/0x300
[  372.561716][T21996]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.561730][T21996]  ? bpf_lsm_capable+0x9/0x20
[  372.561740][T21996]  ? security_capable+0x7e/0x2e0
[  372.561754][T21996]  genl_rcv_msg+0x60e/0x790
[  372.561765][T21996]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.561773][T21996]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.561788][T21996]  netlink_rcv_skb+0x208/0x470
[  372.561796][T21996]  ? __lock_acquire+0xab9/0xd20
[  372.561806][T21996]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.561815][T21996]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.561832][T21996]  ? down_read+0x1ad/0x2e0
[  372.561840][T21996]  genl_rcv+0x28/0x40
[  372.561847][T21996]  netlink_unicast+0x82f/0x9e0
[  372.561860][T21996]  ? __pfx_netlink_unicast+0x10/0x10
[  372.561870][T21996]  ? netlink_sendmsg+0x642/0xb30
[  372.561875][T21996]  ? skb_put+0x11b/0x210
[  372.561884][T21996]  netlink_sendmsg+0x805/0xb30
[  372.561894][T21996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.561902][T21996]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.561910][T21996]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.561917][T21996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.561923][T21996]  __sock_sendmsg+0x21c/0x270
[  372.561934][T21996]  ____sys_sendmsg+0x505/0x830
[  372.561944][T21996]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.561956][T21996]  ? import_iovec+0x74/0xa0
[  372.561965][T21996]  ___sys_sendmsg+0x21f/0x2a0
[  372.561973][T21996]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.561996][T21996]  ? __fget_files+0x2a/0x420
[  372.562002][T21996]  ? __fget_files+0x3a0/0x420
[  372.562012][T21996]  __x64_sys_sendmsg+0x19b/0x260
[  372.562021][T21996]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.562033][T21996]  ? rcu_is_watching+0x15/0xb0
[  372.562042][T21996]  ? do_syscall_64+0xbe/0x3b0
[  372.562050][T21996]  do_syscall_64+0xfa/0x3b0
[  372.562056][T21996]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.562065][T21996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.562072][T21996]  ? exc_page_fault+0x9f/0xf0
[  372.562082][T21996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.562089][T21996] RIP: 0033:0x7fc1c4f8ebe9
[  372.562096][T21996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.562102][T21996] RSP: 002b:00007fc1c5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.562111][T21996] RAX: ffffffffffffffda RBX: 00007fc1c51c5fa0 RCX: 00007fc1c4f8ebe9
[  372.562115][T21996] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  372.562120][T21996] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  372.562124][T21996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.562128][T21996] R13: 00007fc1c51c6038 R14: 00007fc1c51c5fa0 R15: 00007ffdb84a9458
[  372.562140][T21996]  </TASK>
[  372.581010][T21998] tipc: Resetting bearer <eth:syzkaller0>
[  372.764891][T21998] syzkaller0: left promiscuous mode
[  372.883507][T22007] netlink: 'syz.0.4004': attribute type 11 has an invalid length.
[  372.983366][T22008] netlink: 'syz.0.4004': attribute type 11 has an invalid length.
[  373.150504][T22020] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  373.169854][T22020] __nla_validate_parse: 13 callbacks suppressed
[  373.169869][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'.
[  373.321141][T22033] 8021q: adding VLAN 0 to HW filter on device bond44
[  373.341419][T22028] bond44: (slave wlan0): Opening slave failed
[  373.368108][T22038] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4013'.
[  373.503638][T22050] 8021q: adding VLAN 0 to HW filter on device bond45
[  373.665542][T22065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4020'.
[  373.669444][T22065] tipc: Invalid UDP bearer configuration
[  373.669486][T22065] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  373.957709][T22088] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  373.980653][T22077] wg1 speed is unknown, defaulting to 1000
[  374.038579][T22091] validate_nla: 9 callbacks suppressed
[  374.038592][T22091] netlink: 'syz.1.4026': attribute type 12 has an invalid length.
[  374.166161][T22104] mac80211_hwsim hwsim843 wlan1: entered allmulticast mode
[  374.186240][T22104] netlink: 'syz.1.4029': attribute type 10 has an invalid length.
[  374.191584][T22104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  374.194961][T22104] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  374.307406][T22109] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4030'.
[  374.312279][T22110] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4030'.
[  374.352061][T22113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4031'.
[  374.512671][T22117] netlink: 'syz.2.4032': attribute type 6 has an invalid length.
[  374.519790][T22118] netlink: 'syz.2.4032': attribute type 12 has an invalid length.
[  374.523217][T22118] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4032'.
[  374.683451][T22117] netlink: 'syz.2.4032': attribute type 12 has an invalid length.
[  374.688539][T22117] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4032'.
[  374.850655][T22128] openvswitch: netlink: Flow key attr not present in new flow.
[  374.858463][T22130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4035'.
[  374.945422][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'.
[  375.070237][T22142] mac80211_hwsim hwsim843 wlan1: left allmulticast mode
[  375.227332][T22149] netlink: 'syz.1.4041': attribute type 10 has an invalid length.
[  375.293217][T22154] wg1 speed is unknown, defaulting to 1000
[  375.308469][T22152] wg1 speed is unknown, defaulting to 1000
[  375.544730][T22152] netlink: 'syz.1.4042': attribute type 2 has an invalid length.
[  375.591845][T22154] netlink: 'syz.0.4043': attribute type 2 has an invalid length.
[  375.673254][T22167] team0: Unable to change to the same mode the team is in
[  375.743400][T22175] netlink: 'syz.0.4048': attribute type 1 has an invalid length.
[  375.826448][T22178] netlink: 'syz.0.4048': attribute type 12 has an invalid length.
[  375.919232][T22181] mac80211_hwsim hwsim352 wlan0: entered promiscuous mode
[  375.924716][T22181] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  376.269769][T22203] wg1 speed is unknown, defaulting to 1000
[  376.350086][T22209] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  376.666448][T22233] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  376.669783][T22233] CPU: 0 UID: 0 PID: 22233 Comm: syz.1.4062 Not tainted syzkaller #0 PREEMPT(full) 
[  376.669798][T22233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.669805][T22233] Call Trace:
[  376.669811][T22233]  <TASK>
[  376.669816][T22233]  dump_stack_lvl+0x189/0x250
[  376.669837][T22233]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.669851][T22233]  ? __pfx__printk+0x10/0x10
[  376.669871][T22233]  ? kernfs_path_from_node+0x2f/0x290
[  376.669884][T22233]  ? kernfs_path_from_node+0x250/0x290
[  376.669895][T22233]  ? kernfs_path_from_node+0x2f/0x290
[  376.669911][T22233]  sysfs_warn_dup+0x8e/0xa0
[  376.669924][T22233]  sysfs_do_create_link_sd+0xc0/0x110
[  376.669938][T22233]  device_add_class_symlinks+0x1cf/0x240
[  376.669954][T22233]  device_add+0x475/0xb50
[  376.669969][T22233]  wiphy_register+0x1ba6/0x28d0
[  376.669999][T22233]  ? __pfx_wiphy_register+0x10/0x10
[  376.670014][T22233]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  376.670034][T22233]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  376.670050][T22233]  ieee80211_register_hw+0x3425/0x4080
[  376.670076][T22233]  ? ieee80211_register_hw+0x1461/0x4080
[  376.670096][T22233]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  376.670112][T22233]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.670135][T22233]  ? __hrtimer_setup+0x187/0x210
[  376.670146][T22233]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  376.670166][T22233]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  376.670203][T22233]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  376.670216][T22233]  ? trace_kmalloc+0x1f/0xd0
[  376.670230][T22233]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  376.670245][T22233]  ? kstrndup+0xbf/0x160
[  376.670265][T22233]  hwsim_new_radio_nl+0xea4/0x1b10
[  376.670282][T22233]  ? __pfx___nla_validate_parse+0x10/0x10
[  376.670316][T22233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.670341][T22233]  ? __nla_parse+0x40/0x60
[  376.670360][T22233]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  376.670382][T22233]  genl_family_rcv_msg_doit+0x215/0x300
[  376.670402][T22233]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  376.670425][T22233]  ? bpf_lsm_capable+0x9/0x20
[  376.670440][T22233]  ? security_capable+0x7e/0x2e0
[  376.670462][T22233]  genl_rcv_msg+0x60e/0x790
[  376.670480][T22233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.670493][T22233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.670518][T22233]  netlink_rcv_skb+0x208/0x470
[  376.670534][T22233]  ? __lock_acquire+0xab9/0xd20
[  376.670551][T22233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.670565][T22233]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  376.670621][T22233]  ? down_read+0x1ad/0x2e0
[  376.670634][T22233]  genl_rcv+0x28/0x40
[  376.670646][T22233]  netlink_unicast+0x82f/0x9e0
[  376.670669][T22233]  ? __pfx_netlink_unicast+0x10/0x10
[  376.670686][T22233]  ? netlink_sendmsg+0x642/0xb30
[  376.670695][T22233]  ? skb_put+0x11b/0x210
[  376.670710][T22233]  netlink_sendmsg+0x805/0xb30
[  376.670728][T22233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.670741][T22233]  ? aa_sock_msg_perm+0xf1/0x1d0
[  376.670754][T22233]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  376.670766][T22233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.670777][T22233]  __sock_sendmsg+0x21c/0x270
[  376.670794][T22233]  ____sys_sendmsg+0x505/0x830
[  376.670811][T22233]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.670849][T22233]  ? import_iovec+0x74/0xa0
[  376.670865][T22233]  ___sys_sendmsg+0x21f/0x2a0
[  376.670879][T22233]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.670918][T22233]  ? __fget_files+0x2a/0x420
[  376.670928][T22233]  ? __fget_files+0x3a0/0x420
[  376.670946][T22233]  __x64_sys_sendmsg+0x19b/0x260
[  376.670961][T22233]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  376.670981][T22233]  ? rcu_is_watching+0x15/0xb0
[  376.670995][T22233]  ? do_syscall_64+0xbe/0x3b0
[  376.671009][T22233]  do_syscall_64+0xfa/0x3b0
[  376.671018][T22233]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.671032][T22233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.671043][T22233]  ? exc_page_fault+0x9f/0xf0
[  376.671060][T22233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.671070][T22233] RIP: 0033:0x7fc1c4f8ebe9
[  376.671081][T22233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.671091][T22233] RSP: 002b:00007fc1c5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.671104][T22233] RAX: ffffffffffffffda RBX: 00007fc1c51c5fa0 RCX: 00007fc1c4f8ebe9
[  376.671112][T22233] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  376.671119][T22233] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  376.671126][T22233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.671133][T22233] R13: 00007fc1c51c6038 R14: 00007fc1c51c5fa0 R15: 00007ffdb84a9458
[  376.671154][T22233]  </TASK>
[  376.861241][T22233] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  376.864491][T22233] CPU: 0 UID: 0 PID: 22233 Comm: syz.1.4062 Not tainted syzkaller #0 PREEMPT(full) 
[  376.864505][T22233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.864511][T22233] Call Trace:
[  376.864517][T22233]  <TASK>
[  376.864524][T22233]  dump_stack_lvl+0x189/0x250
[  376.864544][T22233]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.864555][T22233]  ? __pfx__printk+0x10/0x10
[  376.864571][T22233]  ? kernfs_path_from_node+0x2f/0x290
[  376.864610][T22233]  ? kernfs_path_from_node+0x250/0x290
[  376.864619][T22233]  ? kernfs_path_from_node+0x2f/0x290
[  376.864632][T22233]  sysfs_warn_dup+0x8e/0xa0
[  376.864644][T22233]  sysfs_do_create_link_sd+0xc0/0x110
[  376.864656][T22233]  device_add_class_symlinks+0x1cf/0x240
[  376.864671][T22233]  device_add+0x475/0xb50
[  376.864685][T22233]  wiphy_register+0x1ba6/0x28d0
[  376.864711][T22233]  ? __pfx_wiphy_register+0x10/0x10
[  376.864725][T22233]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  376.864744][T22233]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  376.864759][T22233]  ieee80211_register_hw+0x3425/0x4080
[  376.864784][T22233]  ? ieee80211_register_hw+0x1461/0x4080
[  376.864803][T22233]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  376.864819][T22233]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.864841][T22233]  ? __hrtimer_setup+0x187/0x210
[  376.864852][T22233]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  376.864868][T22233]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  376.864900][T22233]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  376.864911][T22233]  ? trace_kmalloc+0x1f/0xd0
[  376.864921][T22233]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  376.864934][T22233]  ? kstrndup+0xbf/0x160
[  376.864955][T22233]  hwsim_new_radio_nl+0xea4/0x1b10
[  376.864972][T22233]  ? __pfx___nla_validate_parse+0x10/0x10
[  376.864999][T22233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.865023][T22233]  ? __nla_parse+0x40/0x60
[  376.865042][T22233]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  376.865063][T22233]  genl_family_rcv_msg_doit+0x215/0x300
[  376.865082][T22233]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  376.865106][T22233]  ? bpf_lsm_capable+0x9/0x20
[  376.865121][T22233]  ? security_capable+0x7e/0x2e0
[  376.865144][T22233]  genl_rcv_msg+0x60e/0x790
[  376.865187][T22233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.865202][T22233]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  376.865228][T22233]  netlink_rcv_skb+0x208/0x470
[  376.865244][T22233]  ? __lock_acquire+0xab9/0xd20
[  376.865260][T22233]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.865282][T22233]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  376.865314][T22233]  ? down_read+0x1ad/0x2e0
[  376.865328][T22233]  genl_rcv+0x28/0x40
[  376.865340][T22233]  netlink_unicast+0x82f/0x9e0
[  376.865361][T22233]  ? __pfx_netlink_unicast+0x10/0x10
[  376.865377][T22233]  ? netlink_sendmsg+0x642/0xb30
[  376.865386][T22233]  ? skb_put+0x11b/0x210
[  376.865400][T22233]  netlink_sendmsg+0x805/0xb30
[  376.865418][T22233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.865432][T22233]  ? aa_sock_msg_perm+0xf1/0x1d0
[  376.865444][T22233]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  376.865456][T22233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.865468][T22233]  __sock_sendmsg+0x21c/0x270
[  376.865486][T22233]  ____sys_sendmsg+0x505/0x830
[  376.865503][T22233]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.865524][T22233]  ? import_iovec+0x74/0xa0
[  376.865540][T22233]  ___sys_sendmsg+0x21f/0x2a0
[  376.865554][T22233]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.865620][T22233]  ? __fget_files+0x2a/0x420
[  376.865632][T22233]  ? __fget_files+0x3a0/0x420
[  376.865651][T22233]  __x64_sys_sendmsg+0x19b/0x260
[  376.865666][T22233]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  376.865687][T22233]  ? rcu_is_watching+0x15/0xb0
[  376.865702][T22233]  ? do_syscall_64+0xbe/0x3b0
[  376.865717][T22233]  do_syscall_64+0xfa/0x3b0
[  376.865725][T22233]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.865741][T22233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.865753][T22233]  ? exc_page_fault+0x9f/0xf0
[  376.865770][T22233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.865782][T22233] RIP: 0033:0x7fc1c4f8ebe9
[  376.865794][T22233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.865803][T22233] RSP: 002b:00007fc1c5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  376.865817][T22233] RAX: ffffffffffffffda RBX: 00007fc1c51c5fa0 RCX: 00007fc1c4f8ebe9
[  376.865826][T22233] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  376.865833][T22233] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  376.865840][T22233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.865848][T22233] R13: 00007fc1c51c6038 R14: 00007fc1c51c5fa0 R15: 00007ffdb84a9458
[  376.865869][T22233]  </TASK>
[  377.190639][T22237] 8021q: adding VLAN 0 to HW filter on device bond29
[  377.199421][T22237] bond29: (slave wlan0): Opening slave failed
[  377.210364][T22237] vlan3: entered allmulticast mode
[  377.213280][T22237] bond29: (slave vlan3): Opening slave failed
[  377.446444][T22250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.450028][T22250] syzkaller0: entered promiscuous mode
[  377.452376][T22250] syzkaller0: entered allmulticast mode
[  377.483305][T22250] tipc: Resetting bearer <eth:syzkaller0>
[  377.494313][T22252] mac80211_hwsim hwsim843 wlan1: entered allmulticast mode
[  377.529273][T22249] tipc: Resetting bearer <eth:syzkaller0>
[  377.554422][T22249] tipc: Disabling bearer <eth:syzkaller0>
[  377.686051][T22264] mac80211_hwsim hwsim843 wlan1: left allmulticast mode
[  377.695682][T22267] _Z`Ԁ@S: entered promiscuous mode
[  377.940385][T22292] 8021q: adding VLAN 0 to HW filter on device bond1
[  378.222330][T22308] : renamed from bond_slave_0
[  378.227362][T22309] __nla_validate_parse: 11 callbacks suppressed
[  378.227375][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'.
[  378.238515][T22309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4082'.
[  378.488506][T22331] mac80211_hwsim hwsim352 wlan0: left promiscuous mode
[  379.094340][T22345] validate_nla: 10 callbacks suppressed
[  379.094351][T22345] netlink: 'syz.1.4090': attribute type 1 has an invalid length.
[  379.113957][T22345] 8021q: adding VLAN 0 to HW filter on device bond30
[  379.120622][T22345] bond30: (slave wlan0): Opening slave failed
[  379.174646][T22349] wg1 speed is unknown, defaulting to 1000
[  379.308174][T22349] netlink: 'syz.1.4091': attribute type 2 has an invalid length.
[  379.428816][T22356] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4093'.
[  379.573310][T22365] syzkaller1: entered promiscuous mode
[  379.578811][T22365] syzkaller1: entered allmulticast mode
[  379.586112][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'.
[  379.702841][T22368] netlink: 'syz.1.4097': attribute type 10 has an invalid length.
[  379.732374][T22370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4098'.
[  379.776665][T22372] netlink: 'syz.1.4099': attribute type 1 has an invalid length.
[  379.779721][T22372] netlink: 'syz.1.4099': attribute type 1 has an invalid length.
[  379.849101][T22372] netlink: 'syz.1.4099': attribute type 1 has an invalid length.
[  379.866942][T22372] 8021q: adding VLAN 0 to HW filter on device bond31
[  379.873243][T22372] bond31: (slave wlan0): Opening slave failed
[  379.882814][T22372] vlan3: entered allmulticast mode
[  379.885913][T22372] bond31: (slave vlan3): Opening slave failed
[  380.243757][T22389] sctp: [Deprecated]: syz.1.4103 (pid 22389) Use of int in max_burst socket option deprecated.
[  380.243757][T22389] Use struct sctp_assoc_value instead
[  380.312340][T22391] wg1 speed is unknown, defaulting to 1000
[  380.351128][T22392] wg1 speed is unknown, defaulting to 1000
[  380.404401][T22397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4105'.
[  380.429609][T22397] netlink: 'syz.0.4105': attribute type 10 has an invalid length.
[  380.628499][T22401] netlink: 'syz.2.4107': attribute type 2 has an invalid length.
[  380.636845][T22401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4107'.
[  380.701826][T22404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4108'.
[  380.745954][T22409] wg1 speed is unknown, defaulting to 1000
[  381.176330][T22448] mac80211_hwsim hwsim830 wlan1: entered allmulticast mode
[  381.201110][T22449] wg1 speed is unknown, defaulting to 1000
[  381.310588][T22449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4121'.
[  381.472665][T22463] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4123'.
[  381.883569][T22480] netlink: 'syz.0.4127': attribute type 9 has an invalid length.
[  382.030814][T22488] bond1: option mode: unable to set because the bond device is up
[  382.091781][T22490] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  382.095005][T22490] CPU: 0 UID: 0 PID: 22490 Comm: syz.1.4130 Not tainted syzkaller #0 PREEMPT(full) 
[  382.095021][T22490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.095028][T22490] Call Trace:
[  382.095034][T22490]  <TASK>
[  382.095041][T22490]  dump_stack_lvl+0x189/0x250
[  382.095062][T22490]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.095077][T22490]  ? __pfx__printk+0x10/0x10
[  382.095097][T22490]  ? kernfs_path_from_node+0x2f/0x290
[  382.095110][T22490]  ? kernfs_path_from_node+0x250/0x290
[  382.095122][T22490]  ? kernfs_path_from_node+0x2f/0x290
[  382.095138][T22490]  sysfs_warn_dup+0x8e/0xa0
[  382.095156][T22490]  sysfs_do_create_link_sd+0xc0/0x110
[  382.095190][T22490]  device_add_class_symlinks+0x1cf/0x240
[  382.095209][T22490]  device_add+0x475/0xb50
[  382.095234][T22490]  wiphy_register+0x1ba6/0x28d0
[  382.095265][T22490]  ? __pfx_wiphy_register+0x10/0x10
[  382.095282][T22490]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  382.095300][T22490]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  382.095318][T22490]  ieee80211_register_hw+0x3425/0x4080
[  382.095345][T22490]  ? ieee80211_register_hw+0x1461/0x4080
[  382.095365][T22490]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  382.095382][T22490]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.095404][T22490]  ? __hrtimer_setup+0x187/0x210
[  382.095415][T22490]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  382.095435][T22490]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  382.095470][T22490]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  382.095483][T22490]  ? trace_kmalloc+0x1f/0xd0
[  382.095496][T22490]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  382.095512][T22490]  ? kstrndup+0xbf/0x160
[  382.095561][T22490]  hwsim_new_radio_nl+0xea4/0x1b10
[  382.095578][T22490]  ? __pfx___nla_validate_parse+0x10/0x10
[  382.095607][T22490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  382.095633][T22490]  ? __nla_parse+0x40/0x60
[  382.095652][T22490]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  382.095673][T22490]  genl_family_rcv_msg_doit+0x215/0x300
[  382.095694][T22490]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  382.095718][T22490]  ? bpf_lsm_capable+0x9/0x20
[  382.095733][T22490]  ? security_capable+0x7e/0x2e0
[  382.095756][T22490]  genl_rcv_msg+0x60e/0x790
[  382.095775][T22490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.095788][T22490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  382.095814][T22490]  netlink_rcv_skb+0x208/0x470
[  382.095829][T22490]  ? __lock_acquire+0xab9/0xd20
[  382.095848][T22490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.095863][T22490]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  382.095894][T22490]  ? down_read+0x1ad/0x2e0
[  382.095908][T22490]  genl_rcv+0x28/0x40
[  382.095921][T22490]  netlink_unicast+0x82f/0x9e0
[  382.095944][T22490]  ? __pfx_netlink_unicast+0x10/0x10
[  382.095961][T22490]  ? netlink_sendmsg+0x642/0xb30
[  382.095970][T22490]  ? skb_put+0x11b/0x210
[  382.095986][T22490]  netlink_sendmsg+0x805/0xb30
[  382.096005][T22490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.096019][T22490]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.096033][T22490]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.096045][T22490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.096057][T22490]  __sock_sendmsg+0x21c/0x270
[  382.096076][T22490]  ____sys_sendmsg+0x505/0x830
[  382.096109][T22490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.096129][T22490]  ? import_iovec+0x74/0xa0
[  382.096147][T22490]  ___sys_sendmsg+0x21f/0x2a0
[  382.096162][T22490]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.096203][T22490]  ? __fget_files+0x2a/0x420
[  382.096219][T22490]  ? __fget_files+0x3a0/0x420
[  382.096239][T22490]  __x64_sys_sendmsg+0x19b/0x260
[  382.096254][T22490]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.096275][T22490]  ? rcu_is_watching+0x15/0xb0
[  382.096292][T22490]  ? do_syscall_64+0xbe/0x3b0
[  382.096307][T22490]  do_syscall_64+0xfa/0x3b0
[  382.096317][T22490]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.096333][T22490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.096345][T22490]  ? exc_page_fault+0x9f/0xf0
[  382.096363][T22490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.096373][T22490] RIP: 0033:0x7fc1c4f8ebe9
[  382.096386][T22490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.096395][T22490] RSP: 002b:00007fc1c5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.096408][T22490] RAX: ffffffffffffffda RBX: 00007fc1c51c5fa0 RCX: 00007fc1c4f8ebe9
[  382.096417][T22490] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  382.096424][T22490] RBP: 00007fc1c5011e19 R08: 0000000000000000 R09: 0000000000000000
[  382.096432][T22490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.096439][T22490] R13: 00007fc1c51c6038 R14: 00007fc1c51c5fa0 R15: 00007ffdb84a9458
[  382.096459][T22490]  </TASK>
[  382.494122][T22503] wg1 speed is unknown, defaulting to 1000
[  382.541676][T22510] mac80211_hwsim hwsim830 wlan1: left allmulticast mode
[  382.571934][T22510] netlink: 'syz.2.4137': attribute type 10 has an invalid length.
[  382.733922][T22503] nbd: nbd0 already in use
[  382.737980][T22503] nbd: nbd0 already in use
[  382.882128][T22535] wg1 speed is unknown, defaulting to 1000
[  382.951911][T22543] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  383.071347][T22543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  383.076930][T22543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  383.593965][T22572] __nla_validate_parse: 7 callbacks suppressed
[  383.593980][T22572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4151'.
[  383.600995][T22572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4151'.
[  383.670952][T22576] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4153'.
[  383.805660][T22574] 8021q: adding VLAN 0 to HW filter on device bond37
[  383.814409][T22582] bond37: (slave wlan0): Opening slave failed
[  383.860971][T22586] wg1 speed is unknown, defaulting to 1000
[  383.902336][T22588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4154'.
[  383.925164][T22593] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:19999
[  383.930208][T22593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4156'.
[  384.053393][T22594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4156'.
[  384.166680][T22601] validate_nla: 7 callbacks suppressed
[  384.166694][T22601] netlink: 'syz.2.4155': attribute type 10 has an invalid length.
[  384.244683][T22606] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  384.250265][T22606] batadv_slave_1: entered promiscuous mode
[  384.261245][T22605] batadv_slave_1: left promiscuous mode
[  384.278755][T22611] netlink: 'syz.2.4160': attribute type 6 has an invalid length.
[  384.319589][T22618] openvswitch: netlink: Duplicate or invalid key (type 0).
[  384.323692][T22618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.387989][T22626] wg1 speed is unknown, defaulting to 1000
[  384.407176][T22628] netlink: 'syz.2.4166': attribute type 1 has an invalid length.
[  384.410710][T22628] netlink: 'syz.2.4166': attribute type 1 has an invalid length.
[  384.516247][T22628] netlink: 'syz.2.4166': attribute type 1 has an invalid length.
[  384.538388][T22628] 8021q: adding VLAN 0 to HW filter on device bond38
[  384.555782][T22628] bond38: (slave wlan0): Opening slave failed
[  384.563078][T22628] vlan2: entered allmulticast mode
[  384.566308][T22628] bond38: (slave vlan2): Opening slave failed
[  384.700889][T22643] netlink: 'syz.2.4168': attribute type 6 has an invalid length.
[  384.708105][T22643] netlink: 'syz.2.4168': attribute type 12 has an invalid length.
[  384.711437][T22643] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4168'.
[  384.869061][T22646] netlink: 'syz.1.4169': attribute type 4 has an invalid length.
[  384.924081][T22653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4171'.
[  385.017015][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'.
[  385.114848][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'.
[  385.289188][T22679] netlink: 'syz.0.4179': attribute type 1 has an invalid length.
[  385.292044][T22679] netlink: 'syz.0.4179': attribute type 1 has an invalid length.
[  385.415713][T22680] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR
[  385.550993][T22690] wg1 speed is unknown, defaulting to 1000
[  385.847324][T22707] 8021q: adding VLAN 0 to HW filter on device bond32
[  385.893646][T22707] bond32: (slave veth13): Enslaving as an active interface with a down link
[  385.903532][T22704] syzkaller0: left allmulticast mode
[  385.918605][T22704] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  385.943965][T22707] gretap2: entered promiscuous mode
[  385.949670][T22707] bond32: (slave gretap2): making interface the new active one
[  385.953885][T22707] bond32: (slave gretap2): Enslaving as an active interface with an up link
[  385.964585][T22710] macvlan26: entered promiscuous mode
[  385.969043][T22710] macvlan26: entered allmulticast mode
[  385.971779][T22710] bond32: entered promiscuous mode
[  385.974541][T22710] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  385.977933][T22710] bond32: (slave macvlan26): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  385.987114][T22710] bond32: left promiscuous mode
[  386.182035][T22718] 8021q: adding VLAN 0 to HW filter on device bond39
[  386.188753][T22721] team0: Unable to change to the same mode the team is in
[  386.194147][T22718] bond39: (slave wlan0): Opening slave failed
[  386.200200][T22721] vlan0: entered promiscuous mode
[  386.203687][T22721] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  386.232963][T22718] can: request_module (can-proto-0) failed.
[  386.236406][T22718] openvswitch: netlink: IP tunnel dst address not specified
[  386.290257][T22727] wg1 speed is unknown, defaulting to 1000
[  386.308249][T22723] wg1 speed is unknown, defaulting to 1000
[  387.050392][T22758] TCP: TCP_TX_DELAY enabled
[  387.074008][T22761] mac80211_hwsim hwsim843 wlan1: entered allmulticast mode
[  387.289847][T22786] bond32: (slave veth13): Releasing active interface
[  387.292318][T22786] bond32: (slave veth13): the permanent HWaddr of slave - 52:21:c6:b6:93:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  387.305713][T22786] bond32: (slave gretap2): Releasing active interface
[  387.308607][T22786] gretap2: left promiscuous mode
[  387.746584][T22821] delete_channel: no stack
[  387.787498][T22823] mac80211_hwsim hwsim843 wlan1: left allmulticast mode
[  388.213824][T22849] mac80211_hwsim hwsim830 wlan1: entered allmulticast mode
[  388.514111][T22870] 8021q: adding VLAN 0 to HW filter on device bond46
[  388.524606][T22870] bond46: (slave wlan1): Opening slave failed
[  388.596030][T22876] __nla_validate_parse: 16 callbacks suppressed
[  388.596045][T22876] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4230'.
[  388.957716][T22905] delete_channel: no stack
[  388.979811][T22905] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  388.984023][T22905] bond1: (slave ip6gre2): Error -95 calling set_mac_address
[  389.023568][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'.
[  389.060953][ T1119] block nbd1: Possible stuck request ffff888022e28000: control (read@0,1024B). Runtime 300 seconds
[  389.065972][ T1119] block nbd1: Possible stuck request ffff888022e28200: control (read@1024,1024B). Runtime 300 seconds
[  389.070654][ T1119] block nbd1: Possible stuck request ffff888022e28400: control (read@2048,1024B). Runtime 300 seconds
[  389.075602][ T1119] block nbd1: Possible stuck request ffff888022e28600: control (read@3072,1024B). Runtime 300 seconds
[  389.089972][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'.
[  389.330836][T22922] validate_nla: 25 callbacks suppressed
[  389.330846][T22922] netlink: 'syz.0.4241': attribute type 10 has an invalid length.
[  389.364712][T22926] netlink: 'syz.2.4240': attribute type 12 has an invalid length.
[  389.374219][T22926] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4240'.
[  389.572325][T22937] netlink: 'syz.2.4245': attribute type 10 has an invalid length.
[  389.608500][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'.
[  389.689912][T22943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4248'.
[  389.888517][T22950] wg1 speed is unknown, defaulting to 1000
[  389.901423][T22948] syzkaller0: entered promiscuous mode
[  389.904007][T22948] syzkaller0: entered allmulticast mode
[  389.906956][T22948] tipc: Resetting bearer <eth:syzkaller0>
[  389.978374][T22952] netlink: 'syz.2.4250': attribute type 2 has an invalid length.
[  389.998098][T22950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4250'.
[  390.237529][T22963] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  390.246562][T22964] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  390.258119][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4252'.
[  390.269685][T22966] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4253'.
[  390.373868][T22968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4254'.
[  390.402923][T22968] mac80211_hwsim hwsim830 wlan1: left allmulticast mode
[  390.417697][T22968] netlink: 'syz.2.4254': attribute type 10 has an invalid length.
[  390.443871][T22974] netlink: 'syz.1.4257': attribute type 1 has an invalid length.
[  390.447154][T22974] netlink: 'syz.1.4257': attribute type 1 has an invalid length.
[  390.501330][T22974] netlink: 'syz.1.4257': attribute type 1 has an invalid length.
[  390.516599][T22974] 8021q: adding VLAN 0 to HW filter on device bond33
[  390.520361][T22978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.524369][T22974] bond33: (slave wlan0): Opening slave failed
[  390.532576][T22974] vlan3: entered allmulticast mode
[  390.535149][T22974] bond33: (slave vlan3): Opening slave failed
[  390.541158][T22978] syzkaller0: entered promiscuous mode
[  390.543570][T22978] syzkaller0: entered allmulticast mode
[  390.555886][T22978] tipc: Resetting bearer <eth:syzkaller0>
[  390.561357][T22977] tipc: Resetting bearer <eth:syzkaller0>
[  390.586003][T22977] tipc: Disabling bearer <eth:syzkaller0>
[  390.692399][T22991] netlink: 'syz.1.4262': attribute type 3 has an invalid length.
[  390.816612][T23001] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  390.877568][T23001] wg1 speed is unknown, defaulting to 1000
[  391.542010][T23023] netlink: 'syz.0.4269': attribute type 10 has an invalid length.
[  391.635015][   T61] block nbd0: Possible stuck request ffff888022db0000: control (read@0,1024B). Runtime 330 seconds
[  391.640924][   T61] block nbd0: Possible stuck request ffff888022db0200: control (read@1024,1024B). Runtime 330 seconds
[  391.645844][   T61] block nbd0: Possible stuck request ffff888022db0400: control (read@2048,1024B). Runtime 330 seconds
[  391.650960][   T61] block nbd0: Possible stuck request ffff888022db0600: control (read@3072,1024B). Runtime 330 seconds
[  391.693451][T23039] wg1 speed is unknown, defaulting to 1000
[  392.247011][T23057] team0: Mode changed to "broadcast"
[  392.253310][T23057] vlan0: entered promiscuous mode
[  392.262570][T23057] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  393.272355][T23100] ipvlan3: entered promiscuous mode
[  393.527267][T23116] wg1 speed is unknown, defaulting to 1000
[  393.808055][T23141] tipc: Resetting bearer <eth:syzkaller0>
[  393.821918][T23137] team0: Unable to change to the same mode the team is in
[  393.824609][T23135] __nla_validate_parse: 15 callbacks suppressed
[  393.824617][T23135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4298'.
[  393.830637][T23137] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  393.870245][T23143] mac80211_hwsim hwsim666 wlan1: entered allmulticast mode
[  393.880094][T23143] tipc: Resetting bearer <eth:syzkaller0>
[  393.992825][T23147] tipc: Resetting bearer <eth:syzkaller0>
[  394.005154][T23147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4302'.
[  394.014046][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'.
[  394.020709][T23146] mac80211_hwsim hwsim843 wlan1: entered allmulticast mode
[  394.090696][T23149] 8021q: adding VLAN 0 to HW filter on device bond47
[  394.097855][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'.
[  394.117470][T23149] veth23: entered promiscuous mode
[  394.500749][T23169] validate_nla: 13 callbacks suppressed
[  394.500766][T23169] netlink: 'syz.0.4308': attribute type 6 has an invalid length.
[  394.533497][T23174] netlink: 'syz.2.4309': attribute type 10 has an invalid length.
[  394.769004][T23192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4316'.
[  394.786751][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[  394.869124][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'.
[  394.894817][T23197] wg1 speed is unknown, defaulting to 1000
[  394.983460][T23205] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4319'.
[  395.112647][T23200] wg1 speed is unknown, defaulting to 1000
[  395.165994][T23197] netlink: 'syz.2.4317': attribute type 2 has an invalid length.
[  395.302613][T23214] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  395.382614][T23214] tipc: Resetting bearer <eth:syzkaller0>
[  395.463507][T23219] netlink: 'syz.1.4324': attribute type 10 has an invalid length.
[  395.508696][T23219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  395.512494][T23219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  395.813247][T23230] vlan0: left promiscuous mode
[  395.818553][T23230] syzkaller0: left promiscuous mode
[  395.820944][T23230] syzkaller0: left allmulticast mode
[  395.844214][T23230] mac80211_hwsim hwsim666 wlan1: left allmulticast mode
[  395.854496][T23230] veth23: left promiscuous mode
[  395.936585][T23237] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  396.154588][T23242] wg1 speed is unknown, defaulting to 1000
[  396.244027][T23245] mac80211_hwsim hwsim625 wlan0: entered promiscuous mode
[  396.248605][T23245] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  396.270417][T23242] netlink: 'syz.0.4331': attribute type 2 has an invalid length.
[  396.300438][T23248] mac80211_hwsim hwsim843 wlan1: left allmulticast mode
[  396.441804][T23251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4334'.
[  396.480029][T23256] netlink: 'syz.2.4337': attribute type 9 has an invalid length.
[  396.483332][T23256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4337'.
[  396.528805][T23262] 8021q: adding VLAN 0 to HW filter on device bond1
[  396.623467][T23262] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  396.628542][T23262] bond1: (slave macvlan26): Enslaving as a backup interface with a down link
[  396.634021][T23265] bond1: (slave macvlan26): Releasing backup interface
[  396.736624][   T34] INFO: task udevd:5952 blocked for more than 143 seconds.
[  396.739619][   T34]       Not tainted syzkaller #0
[  396.742112][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.747291][   T34] task:udevd           state:D stack:21928 pid:5952  tgid:5952  ppid:1      task_flags:0x400140 flags:0x00004006
[  396.752685][   T34] Call Trace:
[  396.754085][   T34]  <TASK>
[  396.757174][   T34]  __schedule+0x1798/0x4cc0
[  396.759064][   T34]  ? __pfx___schedule+0x10/0x10
[  396.761166][   T34]  ? schedule+0x91/0x360
[  396.762956][   T34]  schedule+0x165/0x360
[  396.764739][   T34]  io_schedule+0x80/0xd0
[  396.767802][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  396.770046][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  396.772502][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  396.774798][   T34]  ? __filemap_get_folio+0x770/0xaf0
[  396.779118][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  396.783052][   T34]  do_read_cache_folio+0x1aa/0x590
[  396.785359][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  396.787599][   T34]  read_part_sector+0xb6/0x2b0
[  396.789148][T23275] ieee80211 phy906: Selected rate control algorithm 'minstrel_ht'
[  396.789540][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  396.794975][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  396.797536][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  396.800104][   T34]  bdev_disk_changed+0x75f/0x14b0
[  396.802271][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  396.804571][   T34]  ? wait_on_inode+0xc0/0x230
[  396.806610][   T34]  blkdev_get_whole+0x380/0x510
[  396.808725][   T34]  bdev_open+0x31e/0xd30
[  396.810570][   T34]  blkdev_open+0x3a8/0x510
[  396.812484][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  396.814571][   T34]  do_dentry_open+0x953/0x13f0
[  396.817101][   T34]  vfs_open+0x3b/0x340
[  396.819186][   T34]  ? path_openat+0x2ecd/0x3830
[  396.821462][   T34]  path_openat+0x2ee5/0x3830
[  396.823553][   T34]  ? arch_stack_walk+0xfc/0x150
[  396.825879][   T34]  ? stack_depot_save_flags+0x40/0x860
[  396.828316][   T34]  ? __pfx_path_openat+0x10/0x10
[  396.830682][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.834285][   T34]  do_filp_open+0x1fa/0x410
[  396.837747][   T34]  ? __lock_acquire+0xab9/0xd20
[  396.839754][T23277] netlink: 'syz.2.4343': attribute type 2 has an invalid length.
[  396.839875][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  396.844295][   T34]  ? _raw_spin_unlock+0x28/0x50
[  396.846311][   T34]  ? alloc_fd+0x64c/0x6c0
[  396.848088][   T34]  do_sys_openat2+0x121/0x1c0
[  396.849979][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  396.852153][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  396.854226][   T34]  ? rcu_is_watching+0x15/0xb0
[  396.856280][   T34]  __x64_sys_openat+0x138/0x170
[  396.858244][   T34]  do_syscall_64+0xfa/0x3b0
[  396.860077][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.862630][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  396.865077][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.867632][   T34] RIP: 0033:0x7f48db5169a4
[  396.869468][   T34] RSP: 002b:00007ffcbfd6fa60 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  396.872715][   T34] RAX: ffffffffffffffda RBX: 0000562454f6a780 RCX: 00007f48db5169a4
[  396.875852][   T34] RDX: 00000000000a0800 RSI: 0000562454f66540 RDI: 00000000ffffff9c
[  396.878959][   T34] RBP: 0000562454f66540 R08: 0000000000000001 R09: 7fffffffffffffff
[  396.882080][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  396.885282][   T34] R13: 0000562454f61950 R14: 0000000000000001 R15: 0000562454f4a910
[  396.890143][   T34]  </TASK>
[  396.890737][T23277] netlink: 'syz.2.4343': attribute type 2 has an invalid length.
[  396.891642][   T34] 
[  396.891642][   T34] Showing all locks held in the system:
[  396.898648][   T34] 1 lock held by khungtaskd/34:
[  396.900621][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  396.904446][   T34] 2 locks held by getty/5676:
[  396.906382][   T34]  #0: ffff888028d7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  396.910092][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  396.914073][   T34] 1 lock held by udevd/5952:
[  396.916292][   T34]  #0: ffff888107188358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  396.919887][   T34] 1 lock held by udevd/6503:
[  396.921762][   T34]  #0: ffff888022d73358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  396.925623][   T34] 2 locks held by syz.2.4343/23275:
[  396.927773][   T34] 
[  396.929052][   T34] =============================================
[  396.929052][   T34] 
[  396.932389][   T34] NMI backtrace for cpu 1
[  396.932401][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  396.932412][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.932437][   T34] Call Trace:
[  396.932442][   T34]  <TASK>
[  396.932447][   T34]  dump_stack_lvl+0x189/0x250
[  396.932464][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.932475][   T34]  ? __pfx__printk+0x10/0x10
[  396.932496][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  396.932512][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  396.932526][   T34]  ? __pfx__printk+0x10/0x10
[  396.932541][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  396.932557][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  396.932571][   T34]  watchdog+0xf93/0xfe0
[  396.932588][   T34]  ? watchdog+0x1de/0xfe0
[  396.932604][   T34]  kthread+0x711/0x8a0
[  396.932618][   T34]  ? __pfx_watchdog+0x10/0x10
[  396.932630][   T34]  ? __pfx_kthread+0x10/0x10
[  396.932643][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  396.932656][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.932669][   T34]  ? __pfx_kthread+0x10/0x10
[  396.932681][   T34]  ret_from_fork+0x3fc/0x770
[  396.932693][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  396.932707][   T34]  ? __switch_to_asm+0x39/0x70
[  396.932719][   T34]  ? __switch_to_asm+0x33/0x70
[  396.932730][   T34]  ? __pfx_kthread+0x10/0x10
[  396.932742][   T34]  ret_from_fork_asm+0x1a/0x30
[  396.932763][   T34]  </TASK>
[  396.932785][   T34] Sending NMI from CPU 1 to CPUs 0:
[  396.989427][    C0] NMI backtrace for cpu 0
[  396.989439][    C0] CPU: 0 UID: 0 PID: 23275 Comm: syz.2.4343 Not tainted syzkaller #0 PREEMPT(full) 
[  396.989447][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.989451][    C0] RIP: 0010:lock_acquire+0xa1/0x360
[  396.989464][    C0] Code: 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 83 94 85 00 83 3d dc 63 06 0e 00 0f 84 fa 00 00 00 65 8b 05 9f 62 03 11 <85> c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 80 a0 92 83 b8 ec 0a 00
[  396.989470][    C0] RSP: 0018:ffffc90008e36798 EFLAGS: 00000202
[  396.989477][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 177cc7b62f948800
[  396.989482][    C0] RDX: 0000000000000000 RSI: ffffffff8172c1b2 RDI: 1ffffffff1c273e4
[  396.989486][    C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: 0000000000000000
[  396.989491][    C0] R10: ffffc90008e36958 R11: ffffffff81ac3aa0 R12: 0000000000000002
[  396.989495][    C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000000
[  396.989499][    C0] FS:  00007f43dd4bc6c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  396.989504][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.989509][    C0] CR2: 000000110c37aec3 CR3: 0000000040b1e000 CR4: 00000000000006f0
[  396.989535][    C0] Call Trace:
[  396.989539][    C0]  <TASK>
[  396.989544][    C0]  ? unwind_next_frame+0xa5/0x2390
[  396.989553][    C0]  ? ip_set_create+0x1291/0x1940
[  396.989561][    C0]  ? unwind_next_frame+0xa5/0x2390
[  396.989567][    C0]  unwind_next_frame+0xc2/0x2390
[  396.989573][    C0]  ? unwind_next_frame+0xa5/0x2390
[  396.989580][    C0]  ? unwind_next_frame+0xa5/0x2390
[  396.989587][    C0]  ? hash_net4_destroy+0x6d/0x210
[  396.989597][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  396.989605][    C0]  arch_stack_walk+0x11c/0x150
[  396.989614][    C0]  ? ip_set_create+0x1291/0x1940
[  396.989622][    C0]  stack_trace_save+0x9c/0xe0
[  396.989628][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  396.989637][    C0]  save_stack+0xf5/0x1f0
[  396.989645][    C0]  ? __pfx_save_stack+0x10/0x10
[  396.989652][    C0]  ? __free_frozen_pages+0xbc4/0xd30
[  396.989660][    C0]  ? vfree+0x25a/0x400
[  396.989667][    C0]  ? hash_net4_destroy+0x6d/0x210
[  396.989675][    C0]  ? ip_set_create+0x1291/0x1940
[  396.989684][    C0]  ? page_ext_put+0x97/0xc0
[  396.989692][    C0]  __reset_page_owner+0x71/0x1f0
[  396.989700][    C0]  __free_frozen_pages+0xbc4/0xd30
[  396.989710][    C0]  vfree+0x25a/0x400
[  396.989718][    C0]  hash_net4_destroy+0x6d/0x210
[  396.989728][    C0]  ip_set_create+0x1291/0x1940
[  396.989738][    C0]  ? __pfx_ip_set_create+0x10/0x10
[  396.989751][    C0]  nfnetlink_rcv_msg+0xb4d/0x1130
[  396.989788][    C0]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  396.989799][    C0]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  396.989812][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  396.989824][    C0]  netlink_rcv_skb+0x208/0x470
[  396.989833][    C0]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  396.989841][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.989852][    C0]  ? bpf_lsm_capable+0x9/0x20
[  396.989860][    C0]  ? security_capable+0x7e/0x2e0
[  396.989870][    C0]  nfnetlink_rcv+0x26a/0x2520
[  396.989877][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  396.989886][    C0]  ? kernel_text_address+0xa5/0xe0
[  396.989895][    C0]  ? __kernel_text_address+0xd/0x40
[  396.989903][    C0]  ? unwind_get_return_address+0x4d/0x90
[  396.989909][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  396.989916][    C0]  ? arch_stack_walk+0xfc/0x150
[  396.989926][    C0]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  396.989934][    C0]  ? stack_depot_save_flags+0x40/0x860
[  396.989943][    C0]  ? __lock_acquire+0xab9/0xd20
[  396.989956][    C0]  ? __lock_acquire+0xab9/0xd20
[  396.989966][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.989976][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.989986][    C0]  netlink_unicast+0x82f/0x9e0
[  396.989996][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  396.990004][    C0]  ? netlink_sendmsg+0x642/0xb30
[  396.990009][    C0]  ? skb_put+0x11b/0x210
[  396.990015][    C0]  netlink_sendmsg+0x805/0xb30
[  396.990023][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.990029][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.990035][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.990041][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.990047][    C0]  __sock_sendmsg+0x21c/0x270
[  396.990055][    C0]  ____sys_sendmsg+0x505/0x830
[  396.990063][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.990071][    C0]  ? import_iovec+0x74/0xa0
[  396.990079][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  396.990086][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.990101][    C0]  ? __fget_files+0x2a/0x420
[  396.990106][    C0]  ? __fget_files+0x3a0/0x420
[  396.990113][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  396.990120][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.990129][    C0]  ? rcu_is_watching+0x15/0xb0
[  396.990136][    C0]  ? do_syscall_64+0xbe/0x3b0
[  396.990143][    C0]  do_syscall_64+0xfa/0x3b0
[  396.990148][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.990156][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.990163][    C0]  ? exc_page_fault+0x9f/0xf0
[  396.990171][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.990177][    C0] RIP: 0033:0x7f43dc58ebe9
[  396.990184][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.990189][    C0] RSP: 002b:00007f43dd4bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.990196][    C0] RAX: ffffffffffffffda RBX: 00007f43dc7c5fa0 RCX: 00007f43dc58ebe9
[  396.990200][    C0] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  396.990205][    C0] RBP: 00007f43dc611e19 R08: 0000000000000000 R09: 0000000000000000
[  396.990209][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.990212][    C0] R13: 00007f43dc7c6038 R14: 00007f43dc7c5fa0 R15: 00007ffccdbed5b8
[  396.990220][    C0]  </TASK>
[  396.990837][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  397.197347][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  397.200401][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.204099][   T34] Call Trace:
[  397.205447][   T34]  <TASK>
[  397.206506][   T34]  dump_stack_lvl+0x99/0x250
[  397.208156][   T34]  ? __asan_memcpy+0x40/0x70
[  397.209771][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.211649][   T34]  ? __pfx__printk+0x10/0x10
[  397.213436][   T34]  vpanic+0x281/0x750
[  397.215121][   T34]  ? __pfx_vpanic+0x10/0x10
[  397.217139][   T34]  ? preempt_schedule+0xae/0xc0
[  397.219287][   T34]  ? preempt_schedule_common+0x83/0xd0
[  397.221718][   T34]  panic+0xb9/0xc0
[  397.223417][   T34]  ? __pfx_panic+0x10/0x10
[  397.225414][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  397.227785][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  397.230186][   T34]  watchdog+0xfd2/0xfe0
[  397.231768][   T34]  ? watchdog+0x1de/0xfe0
[  397.233614][   T34]  kthread+0x711/0x8a0
[  397.235318][   T34]  ? __pfx_watchdog+0x10/0x10
[  397.237384][   T34]  ? __pfx_kthread+0x10/0x10
[  397.239185][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  397.241153][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.243308][   T34]  ? __pfx_kthread+0x10/0x10
[  397.245233][   T34]  ret_from_fork+0x3fc/0x770
[  397.247126][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  397.249351][   T34]  ? __switch_to_asm+0x39/0x70
[  397.251448][   T34]  ? __switch_to_asm+0x33/0x70
[  397.253568][   T34]  ? __pfx_kthread+0x10/0x10
[  397.255641][   T34]  ret_from_fork_asm+0x1a/0x30
[  397.257786][   T34]  </TASK>
[  397.259884][   T34] Kernel Offset: disabled
[  397.261808][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:36:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000110c24c000 RBX=00007f06d36f5720 RCX=0000000000000004 RDX=0000000000001868
RSI=0000000000000f61 RDI=0000000000000010 RBP=ffffffff8243d867 RSP=00007ffe97991f30
R8 =00007f06d2bc6038 R9 =00007f06d2bb2000 R10=00007f06d23ff008 R11=0000000000000005
R12=0000000000000005 R13=0000000000000000 R14=ffffffff8243d867 R15=00000000000008d9
RIP=00007f06d286ec2c RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556d641500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ec3 CR3=000000006133f000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0a00080000000525 dfdbfe0070bd2700
XMM02=00007f06d2b97498 00007f06d2b97470 XMM03=00007f06d2b974a8 00007f06d2b974a0
XMM04=00007f06d36fd100 00007f06d2b97460 XMM05=00007f06d2b97478 00007f06d2b974c0
XMM06=00007f06d2b974b8 00007f06d2b974b0 XMM07=00007f06d2b974a8 00007f06d2b974a0
XMM08=0000000000000000 00007f06d2a12ee7 XMM09=0000000000000000 00007f06d2a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021518237 R9 =1ffff110042a3046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8dc R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000034000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000001b0008 0004010100000000
XMM02=b5ed4f5b76bf0192 4336a8ebfef70fd0 XMM03=5aab849d2e42c0f1 75e631273a91b3da
XMM04=2b84dbadf26e3c59 93481b60cd22c197 XMM05=0d13822b4fa49895 85564e3f2b84dbad
XMM06=f26e3c5993481b60 cd22c1975aab849d XMM07=2e42c0f175e63127 3a91b3dab5ed4f5b
XMM08=76bf01924336a8eb fef70fd0ceba255e XMM09=0000000000000000 00007fc1c5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
