last executing test programs:

3.264319589s ago: executing program 1 (id=12048):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket(0x10, 0x3, 0x0)
tee(r3, r3, 0x2, 0xa)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
socket$inet6(0xa, 0x2, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
socket(0x10, 0x3, 0x0) (async)
tee(r3, r3, 0x2, 0xa) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)

3.172987972s ago: executing program 1 (id=12049):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x7, 0x0, 0x5, 0x2, 0x5775d27c, 0x154, 0x100}, 0x20) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004000"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, <r3=>0xffffffffffffffff}, 0x0, 0x0}, 0x20) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1b, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x85}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf7}}, @jmp={0x5, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x8}]}, 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0xa, 0x2, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], &(0x7f0000000fc0)=[{0xfffffff7, 0x2, 0x7, 0x8}], 0x10, 0x9}, 0x94) (async)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0xb0b0, 0x8, 0xc018, 0x6, 0x86], 0x0, 0x0}, 0x78) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200d3000000000000000000000048000880440000801400040002004e227f6dac0000010000000000000000060005000001000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b907e3e2adbde6bf6cff0583b43dca3a02ca3adb5a8f59f6eea25b1fa2bc83e01eae29ec010cdab94f906e283932e"], 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYRESOCT=r3, @ANYRES32=r10, @ANYBLOB="d500000000000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0}) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r12, &(0x7f00000001c0)={0xa, 0x4, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async)
setsockopt$inet6_tcp_int(r12, 0x11a, 0x3, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000004640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004600)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00042abd7000fbdbdf254a000000080003", @ANYRES32=r11, @ANYBLOB="1f91b9004da1f4f4cf0c009900070000000c000000c96fb7014062542d46993e0fb8f139ee2a91aeb38885f3e96ef7a4298ad1ed3e284560155f73941e2f5a1bc2a7d1e74b791637b6fa76c829c151fac591c57b73fca7060c780ecd65b645c00e8eca32ba3480ed0e87ab6561428ae34a8bd7f6eb478d5a11e8931d269d7b26f130a8a2aae10a5b3921dee72cd104023aed521f094db2353379777b521dcefcf60300bb2614a87748a1976da244929d968d721e"], 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x40488c0) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x20004880)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)

3.094378956s ago: executing program 1 (id=12053):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000040600000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000)

3.014235828s ago: executing program 1 (id=12055):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (rerun: 32)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x84) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) (rerun: 64)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b4, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x12d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xa1, 0x1}}, @cf={0x4, 0x6, {0x7, 0x10, 0x7, 0x1ff}}, @measure_req={0x26, 0xad, {0x5, 0x35, 0xe, "d7e74d33845197acf53f8a128961120a61ac58c1dd8025246364a3d7b92c82ecb31467ac120c95a708b1eb9a985e42cf6cf6093d314846095afcaf26cb09d8f2bae15c371e3b8570193977d4b29a9f51781691c5938b6f8af808ef879630f760f7242e7b568df557b552b9075d25cce2a35c311466b240e4f918364f989af05da49fdb99b8caa93bd8a73cb3c1321efa8b0f01c296585ce7f5054f3c0abe3121e265e61cb30a6168053c"}}, @preq={0x82, 0x62, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x8, 0xa, 0x9, @device_b, 0x9, @value=@broadcast, 0x800, 0x1, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x3}, {{}, @device_a, 0x5}, {{}, @device_a, 0xe16}, {{0x1, 0x0, 0x1}, @device_a, 0xcdb9}, {{}, @device_b, 0x1}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xf, 0xb5, 0x3}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x5, 0x32, 0x9, @device_b, 0x0, @value=@device_b, 0x3ff, 0x8, 0x5, [{{}, @broadcast, 0x29c}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0xffffffff}, {{0x1}, @device_b, 0xb08b}, {{}, @device_a, 0x22}]}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x80, 0x9}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xe9, 0x2a, [@random_vendor={0xdd, 0xe3, "4f8581e41782790f0ed4148d293e9d2757f4bfae04c09e79ef7d402ef0167e7ac580933191b1a24e054e0e4e78701c25fdae37bf07340c8bf8c04e28114b2f32dff7435a3ed14ddd045b9b652078f945fdf394340f012099b552e20d1d86a81739ac54d8a98df3636051abcc1e65659392440354b85fe1522f4981562e67f9f323c6f683299f454560abe145aba2e44ff76751f5838129dbd49494e5d80876c006b620142f0b07de1e444a09262aca5c9ce00f06fbfc0dea02154ec6c1f65e9993439f698d9889846c7bf2a7e5dbf2ceb01b8dd475fc3924916e2fbec0e2afd1ce3920"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8011}, 0x24008058)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000840)={'wg1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@bridge_getvlan={0x38, 0x72, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x49084}, 0x800) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r6) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x224, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000cc0))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)) (async)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), r6)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000f80)={{<r9=>r0, &(0x7f0000000dc0)='$\x00', 0x8040, &(0x7f0000000e00)={@_ha_fsid={[0x7, 0x2]}, {0x5, 0x7, 0x401, 0x7}}, 0x2, &(0x7f0000000e40)={@_ha_fsid}, &(0x7f0000000e80)=0x4}, {[0x400000, 0xe8, 0xffffffff, 0x33]}, 0x4, 0x89, &(0x7f0000000ec0)=""/137})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001100)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x78, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3db1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008001}, 0x10000) (async, rerun: 64)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r2, 0xe04, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x59}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r9)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r11, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x680c0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r6) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001440)={'wpan3\x00', <r13=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2402000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r12, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r14, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xf4, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x39cf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x15) (rerun: 64)

2.883878238s ago: executing program 0 (id=12057):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r0=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, r0}, 0x50)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38)
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000003c0))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket(0x8, 0x800, 0xdf5)

2.28394053s ago: executing program 2 (id=12058):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0xffffffffffffffdd)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6, @broadcast}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="b3853fdff6", 0x5)
socket$l2tp(0x2, 0x2, 0x73) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0xffffffffffffffdd) (async)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6, @broadcast}, 0x10) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="b3853fdff6", 0x5) (async)

2.104816131s ago: executing program 2 (id=12059):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x23)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa10000006900000701006542b05a996dfb050008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x40004)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.087675123s ago: executing program 1 (id=12060):
socket$l2tp(0x2, 0x2, 0x73)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa}, {0xffff, 0x5}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x4e3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r12=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r11}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r12, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x80, r1}, 0x38)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r13, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)={0x74, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x61, 0xa9, 0x0, 0x1, [@generic="57d753865b", @generic="17b54d21c9175f05d9bb893aa2b05ef7d9600c09417fb1de1425bf45a62bf99e1835c314d61f90b927f82b8955bcf9442304dbf68e88ddd6036ae71d5a442ee7d7f756d99a8fa19bab1928e1f7cba282289761765820a077"]}]}, 0x74}], 0x1, 0x0, 0x0, 0x24008015}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r13, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xb0, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x77, 0x6, "9795e2adaa35b7e728dd59d6be346eff85ec1c5703261e813e4c68ed9824bb3500c030fa8e78c79d2ea67c5979c8a43850629583dc70183db3727a433a6479625b5336fae5b674c736155bee1434e488bbf5977e50ad9ed10a2a316931f4a47a5982c9417581fc9125bc8713c5dd95b24b345c"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4040801)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f00000000c0))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

2.033832991s ago: executing program 2 (id=12061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000001100000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000)

2.033387498s ago: executing program 0 (id=12062):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x60000)
accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x6e)

1.980909706s ago: executing program 2 (id=12063):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @rand_addr=0x64010101}, 0xa}}, 0x26)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000210029014a3b9e6126bd7000ffdbdf250a000000000000001c000000080018004e204e245da6eddf4c40c3d000ae0e4b3b9e883c8591db37930d206dbbc050f4a5fcf8a5cd6f1736037b358851a5517ff917afde346f8b523e56c92ffd618ce90dde2ccbd2e40119f9406229f7eb651d7b4a1b2e8d2cfd5c7c90515c3be6683d9ee342d91f1371dcd4d8d50ef44fa2278408117f35046fdfe5ed0c90560e73eb476bd16d30f03fbd98c91cf3deabac94085a41aad53cf3960bcf"], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r6 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team_slave_0\x00', 0x4})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r7, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r8)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, 0x0, 0x8050)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x8, 0x1, 0xfa, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.974195518s ago: executing program 0 (id=12064):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0xff000000, 'team_slave_1\x00', 'veth1\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x52ffe4dd04836947}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x8, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000002c0)=0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'vcan0\x00'}}, 0x1e)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000086000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xb0, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xac)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x7d, 0x0, &(0x7f00000001c0)=0xf92b27301eb6905b)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x20006004}, 0x20000000)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800f7da5d23370400"/20, @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf250200000514000700fe80000000000000000000000000002cb0caa32bbc810f0059f69eaebf0067845294bf"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x840)

1.892943944s ago: executing program 2 (id=12065):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x8, 0x2, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0xd85d}}}, 0x32)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000210029014a3b9e6126bd7000ffdbdf250a000000000000001c000000080018004e204e245da6eddf4c40c3d000ae0e4b3b9e883c8591db37930d206dbbc050f4a5fcf8a5cd6f1736037b358851a5517ff917afde346f8b523e56c92ffd618ce90dde2ccbd2e40119f9406229f7eb651d7b4a1b2e8d2cfd5c7c90515c3be6683d9ee342d91f1371dcd4d8d50ef44fa2278408117f35046fdfe5ed0c90560e73eb476bd16d30f03fbd98c91cf3deabac94085a41aad53cf3960bcf"], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf2507000000080002000200000008000200020000000800010000000000080002000200000008000100030000000800020002000000080001000000000008000100030000000800010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20002810}, 0x40000)
r4 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0xb)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x5c4, 0xa, 0x0, 0x7ff, 0x3dc, 0x0, 0x8], [0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5}, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r9)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, 0x0, 0x8050)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r5)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)

1.665901253s ago: executing program 0 (id=12066):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16", 0x1}], 0x1}}], 0x2, 0x20000000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.661273052s ago: executing program 0 (id=12067):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
unshare(0x8040480)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000080)
sendmsg$unix(r1, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c}}], 0x20, 0x448c0}, 0x4)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e22, @multicast2}})
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5)

9.718052ms ago: executing program 2 (id=12068):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030003000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

6.227548ms ago: executing program 0 (id=12069):
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5d551453f4603f62282f97ebf1710bc6d8c9fd9b548eb607f47ca459147e1b8c9ae1be328620e927e492b1"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbf9, {0x0, 0x0, 0x74, r5, {0x1, 0xfff1}, {0xafabc05531515610, 0xc}, {0xa, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x5c004}, 0x24048004)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r8, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf2512000000080006000000000008000700ab0000003400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="089e8dbb", @ANYRES32=r8, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000ed00000000851000000600000218000000", @ANYRES16=0x0, @ANYBLOB="00000000000000002c000000000000e3180000000000000000000000000000000095000000000000004269cb95af38c48520601f81120f767f84757713258eef6474e6b739e7dd7acee3c1770e6cfd687bb7220e00000000000000055ccfb347e4fb50edd75760f79490444e4327ed19255e96bd00"/129], 0x0, 0xc}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r14, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

0s ago: executing program 1 (id=12070):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600200008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)

kernel console output (not intermixed with test programs):

 get link speed/duplex
[ 1083.273997][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1083.743369][T18282] netlink: 'syz.0.10781': attribute type 12 has an invalid length.
[ 1083.934996][T18291] __nla_validate_parse: 5 callbacks suppressed
[ 1083.935066][T18291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10784'.
[ 1083.986162][T18293] vlan2: entered promiscuous mode
[ 1083.986202][T18293] macvlan0: entered promiscuous mode
[ 1084.009994][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10786'.
[ 1084.158270][T18321] netlink: 'syz.2.10792': attribute type 1 has an invalid length.
[ 1084.160985][T18321] netlink: 'syz.2.10792': attribute type 268 has an invalid length.
[ 1084.165141][T18321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10792'.
[ 1084.169119][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10792'.
[ 1084.242084][T18325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10794'.
[ 1084.291801][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10796'.
[ 1084.630513][T18369] xt_CT: No such helper "netbios-ns"
[ 1084.737067][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10804'.
[ 1084.847480][T18382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10805'.
[ 1085.177849][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10810'.
[ 1085.253287][T18403] netlink: 'syz.2.10811': attribute type 23 has an invalid length.
[ 1085.334984][T18404] No such timeout policy "s	"
[ 1085.623822][ T5637] net_ratelimit: 17 callbacks suppressed
[ 1085.626602][ T5637] bond14: (slave bridge4): failed to get link speed/duplex
[ 1085.663211][T18408] netlink: 'syz.2.10813': attribute type 4 has an invalid length.
[ 1085.684942][T18413] tunl0: Caught tx_queue_len zero misconfig
[ 1085.734157][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1085.844624][ T5637] bond14: (slave bridge4): failed to get link speed/duplex
[ 1085.863168][T15260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.863232][T15260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.882598][T18421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1085.953731][ T5637] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.063797][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.173700][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.265914][T18427] netlink: 'syz.0.10820': attribute type 1 has an invalid length.
[ 1086.269203][T18428] netlink: 'syz.0.10820': attribute type 1 has an invalid length.
[ 1086.294075][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.404111][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.513747][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.624799][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1086.984967][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10831'.
[ 1086.985050][T18470] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1087.188913][T18480] erspan0: entered promiscuous mode
[ 1087.189832][T18479] erspan0: left promiscuous mode
[ 1087.276197][T18491] netlink: 'syz.0.10836': attribute type 16 has an invalid length.
[ 1090.654131][ T5651] net_ratelimit: 35 callbacks suppressed
[ 1090.654752][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1090.764067][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1090.875369][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1090.983879][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.094107][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.203954][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.313808][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.423814][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.534124][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1091.654191][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1095.724160][T15114] net_ratelimit: 35 callbacks suppressed
[ 1095.724260][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1095.833806][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1095.943874][ T5637] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.053877][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.163872][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.273846][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.383820][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.493824][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.603878][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1096.713828][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1098.838012][T18496] __nla_validate_parse: 3 callbacks suppressed
[ 1098.840628][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10838'.
[ 1098.848041][T18499] netlink: 'syz.0.10837': attribute type 12 has an invalid length.
[ 1098.848164][T18499] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10837'.
[ 1099.130736][T18523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10845'.
[ 1099.221833][T18534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10848'.
[ 1099.221955][T18534] block nbd0: reconnected socket
[ 1099.222240][T23908] block nbd0: Receive control failed (result -32)
[ 1099.293908][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10852'.
[ 1099.462358][T18553] xt_CT: No such helper "netbios-ns"
[ 1099.506180][T18557] syzkaller1: entered promiscuous mode
[ 1099.506236][T18557] syzkaller1: entered allmulticast mode
[ 1099.569799][T18564] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1099.602975][T18566] mac80211_hwsim hwsim976 wlan1: left promiscuous mode
[ 1099.679613][T18566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.752153][T18570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10857'.
[ 1099.754155][T18570] block nbd0: reconnected socket
[ 1099.761039][T23908] block nbd0: Receive control failed (result -32)
[ 1099.965441][T18579] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10859'.
[ 1100.255247][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10860'.
[ 1100.445789][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10861'.
[ 1100.905766][T18600] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10862'.
[ 1101.404713][T15114] net_ratelimit: 26 callbacks suppressed
[ 1101.404832][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1101.515931][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1101.572504][T18603] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1101.588185][T18607] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1101.601731][T18604] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1101.601917][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1101.602256][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1101.623533][T18611] mac80211_hwsim hwsim1117 wlan1: entered promiscuous mode
[ 1101.624152][T18611] bond29: (slave wlan1): Opening slave failed
[ 1101.635422][T18617] netlink: 'syz.0.10866': attribute type 23 has an invalid length.
[ 1101.638131][T18617] netlink: 'syz.0.10866': attribute type 11 has an invalid length.
[ 1101.644044][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1101.764688][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1101.764889][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1101.793985][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1101.859180][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1101.860764][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1101.904061][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.030278][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1102.036959][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1102.055148][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.132233][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1102.132503][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1102.174270][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.218717][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1102.228207][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1102.286156][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.392240][T18604] bond29: (slave wireguard5): The slave device specified does not support setting the MAC address
[ 1102.400153][T18604] bond29: (slave wireguard5): Error -95 calling set_mac_address
[ 1102.434210][T18651] nbd: must specify at least one socket
[ 1102.504268][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.613781][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1102.642118][T18660] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1102.642178][T18660] CPU: 0 UID: 0 PID: 18660 Comm: syz.1.10874 Not tainted syzkaller #0 PREEMPT(full) 
[ 1102.642215][T18660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1102.642226][T18660] Call Trace:
[ 1102.642232][T18660]  <TASK>
[ 1102.642239][T18660]  dump_stack_lvl+0xe8/0x150
[ 1102.642266][T18660]  sysfs_warn_dup+0x8e/0xa0
[ 1102.642288][T18660]  sysfs_do_create_link_sd+0xc0/0x110
[ 1102.642311][T18660]  device_add_class_symlinks+0x1cf/0x240
[ 1102.642335][T18660]  device_add+0x467/0xb80
[ 1102.642358][T18660]  wiphy_register+0x1fc8/0x2ff0
[ 1102.642389][T18660]  ? __pfx_wiphy_register+0x10/0x10
[ 1102.642407][T18660]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1102.642423][T18660]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1102.642444][T18660]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1102.642476][T18660]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1102.642507][T18660]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1102.642547][T18660]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1102.642601][T18660]  ? __asan_memset+0x22/0x50
[ 1102.642621][T18660]  ? __hrtimer_setup+0x1b7/0x260
[ 1102.642640][T18660]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1102.642657][T18660]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1102.642694][T18660]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1102.642706][T18660]  ? kstrndup+0xbd/0x160
[ 1102.642724][T18660]  ? kstrndup+0xbd/0x160
[ 1102.642740][T18660]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1102.642774][T18660]  genl_family_rcv_msg_doit+0x233/0x340
[ 1102.642801][T18660]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1102.642851][T18660]  ? bpf_lsm_capable+0x9/0x20
[ 1102.642873][T18660]  ? security_capable+0x7e/0x2c0
[ 1102.642893][T18660]  genl_rcv_msg+0x614/0x7a0
[ 1102.642917][T18660]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1102.642937][T18660]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1102.642967][T18660]  netlink_rcv_skb+0x226/0x4a0
[ 1102.642984][T18660]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1102.643005][T18660]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1102.643055][T18660]  ? down_read+0x2be/0x330
[ 1102.643074][T18660]  genl_rcv+0x28/0x40
[ 1102.643092][T18660]  netlink_unicast+0x7bd/0x940
[ 1102.643115][T18660]  netlink_sendmsg+0x813/0xb40
[ 1102.643139][T18660]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1102.643162][T18660]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1102.643183][T18660]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1102.643199][T18660]  sock_sendmsg_nosec+0x13a/0x180
[ 1102.643218][T18660]  ____sys_sendmsg+0x54e/0x850
[ 1102.643237][T18660]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1102.643258][T18660]  ? import_iovec+0x73/0xa0
[ 1102.643277][T18660]  ___sys_sendmsg+0x2a5/0x360
[ 1102.643291][T18660]  ? __lock_acquire+0x6df/0x2e50
[ 1102.643308][T18660]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1102.643326][T18660]  ? futex_wait+0x2a2/0x390
[ 1102.643367][T18660]  ? __fget_files+0x2a/0x420
[ 1102.643384][T18660]  ? __fget_files+0x3a2/0x420
[ 1102.643407][T18660]  __x64_sys_sendmsg+0x1b1/0x290
[ 1102.643422][T18660]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1102.643452][T18660]  do_syscall_64+0x166/0x520
[ 1102.643479][T18660]  ? trace_irq_disable+0x3b/0x140
[ 1102.643491][T18660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.643509][T18660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.643523][T18660] RIP: 0033:0x7fb8b6f9e159
[ 1102.643537][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1102.643596][T18660] RSP: 002b:00007fb8b7f3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1102.643612][T18660] RAX: ffffffffffffffda RBX: 00007fb8b7225fa0 RCX: 00007fb8b6f9e159
[ 1102.643622][T18660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[ 1102.643630][T18660] RBP: 00007fb8b7035024 R08: 0000000000000000 R09: 0000000000000000
[ 1102.643638][T18660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1102.643646][T18660] R13: 00007fb8b7226038 R14: 00007fb8b7225fa0 R15: 00007ffc4b225c48
[ 1102.643669][T18660]  </TASK>
[ 1103.160793][T18672] syzkaller1: entered promiscuous mode
[ 1103.160847][T18672] syzkaller1: entered allmulticast mode
[ 1103.167524][T15780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1103.167592][T15780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1103.370468][T18712] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1103.674319][T18732] netlink: 'syz.2.10890': attribute type 12 has an invalid length.
[ 1104.148196][T18745] __nla_validate_parse: 39 callbacks suppressed
[ 1104.148285][T18745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10894'.
[ 1104.148330][T18745] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1104.754192][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10903'.
[ 1104.897682][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10906'.
[ 1105.219374][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10910'.
[ 1105.223852][T18821] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10910'.
[ 1105.232224][T18821] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10910'.
[ 1105.237235][T18821] netlink: 'syz.1.10910': attribute type 23 has an invalid length.
[ 1105.564308][T18838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1105.571449][T18838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1105.637383][T18846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1105.704970][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10919'.
[ 1105.802107][T18862] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1105.822994][T18867] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1106.223357][T18898] ip6gre3: entered promiscuous mode
[ 1106.225953][T18898] ip6gre3: entered allmulticast mode
[ 1106.228820][ T5651] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1106.229007][ T5651] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1106.256217][ T3585] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1106.442812][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10931'.
[ 1106.442865][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10931'.
[ 1106.454273][ T3585] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1106.483886][T10648] net_ratelimit: 30 callbacks suppressed
[ 1106.483953][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1106.594023][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1106.703846][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1106.711038][T18926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10935'.
[ 1106.814118][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1106.934351][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1107.043836][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1107.093864][ T3585] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1107.164279][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1107.274082][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1107.383947][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1107.493980][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1108.585864][T19010] netlink: 'syz.2.10955': attribute type 23 has an invalid length.
[ 1109.140919][T19030] xt_check_table_hooks: 55 callbacks suppressed
[ 1109.141004][T19030] x_tables: duplicate underflow at hook 1
[ 1109.335754][T19036] xt_CT: No such helper "netbios-ns"
[ 1109.437181][T19044] __nla_validate_parse: 7 callbacks suppressed
[ 1109.437250][T19044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10966'.
[ 1109.511666][T19055] syzkaller0: entered promiscuous mode
[ 1109.516445][T19055] syzkaller0: entered allmulticast mode
[ 1109.520533][T19056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1109.520795][T19057] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1109.530741][T19056] tipc: Resetting bearer <eth:syzkaller0>
[ 1109.537023][T19059] netlink: 'syz.2.10970': attribute type 21 has an invalid length.
[ 1109.602643][T19054] tipc: Resetting bearer <eth:syzkaller0>
[ 1109.607230][T19064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10971'.
[ 1109.620907][T19054] tipc: Disabling bearer <eth:syzkaller0>
[ 1109.725000][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10978'.
[ 1109.725281][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10978'.
[ 1109.738787][T19084] netlink: 'syz.0.10977': attribute type 10 has an invalid length.
[ 1109.738833][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10977'.
[ 1109.776628][T19089] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10978'.
[ 1109.828000][T19093] x_tables: duplicate underflow at hook 2
[ 1109.893390][T19095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10980'.
[ 1109.970840][T19098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10982'.
[ 1109.976162][T19097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10982'.
[ 1109.984971][T19097] syzkaller1: entered promiscuous mode
[ 1109.987103][T19097] syzkaller1: entered allmulticast mode
[ 1110.213821][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1110.474171][T19156] netlink: 'syz.0.10993': attribute type 12 has an invalid length.
[ 1110.820417][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11001'.
[ 1110.912757][T19194] netlink: 'syz.1.11003': attribute type 23 has an invalid length.
[ 1110.916055][T19194] netlink: 'syz.1.11003': attribute type 11 has an invalid length.
[ 1111.130648][T19215] Bluetooth: hci0: unsupported parameter 5135
[ 1111.130695][T19215] Bluetooth: hci0: unsupported parameter 8192
[ 1111.130734][T19215] Bluetooth: hci0: unsupported parameter 5135
[ 1111.130756][T19215] Bluetooth: hci0: unsupported parameter 8192
[ 1111.132185][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.170451][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.202211][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.221685][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.244321][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.293531][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.315172][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.353424][T19244] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1111.357359][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.384316][T19201] xt_CT: No such helper "netbios-ns"
[ 1111.494920][   T13] net_ratelimit: 35 callbacks suppressed
[ 1111.495082][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1111.516745][T19254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1111.528179][T19254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1111.594833][T19254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1111.615951][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1111.736257][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1111.848111][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1111.974206][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.086744][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.204675][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.222083][T19316] mac80211_hwsim hwsim1117 wlan1: left promiscuous mode
[ 1112.252824][T19316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1112.315202][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.424790][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.469327][T19338] netlink: 'syz.2.11036': attribute type 1 has an invalid length.
[ 1112.480816][T19338] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[ 1112.549901][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1112.560805][T19352] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1112.710493][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1112.764945][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1112.968176][ T6283] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1112.979500][T19383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1113.528866][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1113.686288][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1113.828128][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1113.976786][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1114.074423][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1114.165989][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1114.245874][T19400] netlink: 'syz.0.11053': attribute type 23 has an invalid length.
[ 1114.496839][T19428] __nla_validate_parse: 27 callbacks suppressed
[ 1114.496931][T19428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11061'.
[ 1115.238678][T19488] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004
[ 1115.309623][T19498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11080'.
[ 1115.452550][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11083'.
[ 1115.452627][T19512] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11083'.
[ 1115.820416][T19538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11088'.
[ 1115.824582][T19538] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1115.973031][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11096'.
[ 1115.978349][T19563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11096'.
[ 1115.982548][T19553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1116.000901][T19553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1116.061954][T19553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1116.095265][T19568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11098'.
[ 1116.127440][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11097'.
[ 1116.564415][T10648] net_ratelimit: 30 callbacks suppressed
[ 1116.564924][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1116.599790][T19607] mac80211_hwsim hwsim1140 wlan0: entered promiscuous mode
[ 1116.602258][T19607] mac80211_hwsim hwsim1140 wlan0: entered allmulticast mode
[ 1116.605706][T19607] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1116.684232][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1116.717452][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11112'.
[ 1116.793870][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1116.903811][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.015450][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.123890][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.234001][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.343883][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.453990][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1117.813794][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1118.985161][T19749] mac80211_hwsim hwsim1140 wlan0: left promiscuous mode
[ 1118.985217][T19749] mac80211_hwsim hwsim1140 wlan0: left allmulticast mode
[ 1119.113029][T19768] syzkaller0: left promiscuous mode
[ 1119.116940][T19768] syzkaller0: left allmulticast mode
[ 1119.987383][T19839] syzkaller0: entered promiscuous mode
[ 1119.989861][T19839] syzkaller0: entered allmulticast mode
[ 1120.047939][T19841] xt_ct_set_helper: 22 callbacks suppressed
[ 1120.048020][T19841] xt_CT: No such helper "netbios-ns"
[ 1120.092140][T19844] __nla_validate_parse: 12 callbacks suppressed
[ 1120.092219][T19844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11154'.
[ 1120.096342][T19844] block nbd0: reconnected socket
[ 1120.102556][T23908] block nbd0: Receive control failed (result -32)
[ 1120.141112][T19848] validate_nla: 2 callbacks suppressed
[ 1120.141174][T19848] netlink: 'syz.1.11156': attribute type 29 has an invalid length.
[ 1120.171983][T19848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11156'.
[ 1120.176098][T19848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11156'.
[ 1120.275509][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11159'.
[ 1120.329201][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11161'.
[ 1120.434097][T19862] sctp: [Deprecated]: syz.1.11160 (pid 19862) Use of int in maxseg socket option.
[ 1120.434097][T19862] Use struct sctp_assoc_value instead
[ 1120.442244][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11161'.
[ 1120.445678][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11161'.
[ 1120.569777][T19877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11162'.
[ 1120.569873][T19877] block nbd0: reconnected socket
[ 1120.577117][T23908] block nbd0: Receive control failed (result -32)
[ 1120.825127][T19901] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11168'.
[ 1120.876314][T19903] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1120.880470][T19903] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1121.328773][T19916] netlink: 'syz.2.11173': attribute type 12 has an invalid length.
[ 1121.328837][T19916] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11173'.
[ 1121.365023][T19914] bond33: (slave wlan1): Releasing backup interface
[ 1121.604166][   T13] net_ratelimit: 36 callbacks suppressed
[ 1121.604251][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1121.725873][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1122.054112][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1122.164429][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1122.273824][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1122.394027][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1122.968314][T20001] netlink: 'syz.0.11188': attribute type 11 has an invalid length.
[ 1123.206841][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1123.301136][T20012] xt_CT: No such helper "netbios-ns"
[ 1123.315659][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1123.333333][T20018] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1123.337439][T20018] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1123.337503][T20018] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1123.350475][T20020] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1123.399318][T20022] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1123.506338][T20026] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1123.638284][T20037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1123.652647][T20037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1123.725113][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1123.769136][T20037] syzkaller0: entered promiscuous mode
[ 1123.769262][T20037] syzkaller0: entered allmulticast mode
[ 1123.819403][T20042] Cannot find del_set index 2 as target
[ 1124.624793][T20052] macsec0: entered promiscuous mode
[ 1124.640447][T20052] syz_tun: left promiscuous mode
[ 1124.652571][T20052] macsec0 (unregistering): left promiscuous mode
[ 1125.169862][T20080] netlink: 'syz.2.11217': attribute type 23 has an invalid length.
[ 1125.169901][T20080] __nla_validate_parse: 33 callbacks suppressed
[ 1125.169955][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11217'.
[ 1125.302826][T20089] netlink: 'syz.2.11217': attribute type 23 has an invalid length.
[ 1125.302889][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11217'.
[ 1125.685712][T20108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11223'.
[ 1125.685758][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11223'.
[ 1125.755574][T20117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.319846][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11231'.
[ 1126.468826][T20146] netlink: 'syz.2.11234': attribute type 11 has an invalid length.
[ 1126.468889][T20146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11234'.
[ 1126.633969][T20151] xt_CT: No such helper "netbios-ns"
[ 1126.673845][T10648] net_ratelimit: 27 callbacks suppressed
[ 1126.673935][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1126.788290][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1126.913830][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.006398][T20164] ip_tables: iptables: counters copy to user failed while replacing table
[ 1127.023846][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.075993][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11239'.
[ 1127.134710][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.221383][T20184] netlink: 'syz.2.11244': attribute type 12 has an invalid length.
[ 1127.232415][T20184] netlink: 'syz.2.11244': attribute type 12 has an invalid length.
[ 1127.243873][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.354939][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.483881][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.593749][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1127.853386][T20245] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1127.859579][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11254'.
[ 1127.901659][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11253'.
[ 1128.389078][T20290] netlink: 'syz.0.11259': attribute type 16 has an invalid length.
[ 1128.389134][T20290] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.11259'.
[ 1128.407683][T20290] netlink: 'syz.0.11259': attribute type 21 has an invalid length.
[ 1128.407756][T20290] netlink: 'syz.0.11259': attribute type 5 has an invalid length.
[ 1128.425061][T20290] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1129.347088][T20331] No such timeout policy "s	"
[ 1130.377110][T20366] mac80211_hwsim hwsim1155 wlan0: entered promiscuous mode
[ 1130.381166][T20366] mac80211_hwsim hwsim1155 wlan0: entered allmulticast mode
[ 1130.385684][T20366] __nla_validate_parse: 6 callbacks suppressed
[ 1130.391026][T20366] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11273'.
[ 1130.791552][T20376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1130.804406][T20382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11278'.
[ 1131.175962][T20415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11286'.
[ 1131.411384][T20435] netlink: 'syz.0.11289': attribute type 29 has an invalid length.
[ 1131.463275][T20435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11289'.
[ 1131.464426][T20435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11289'.
[ 1131.474060][T10648] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1131.474134][T10648] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1131.474149][T10648] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1131.647540][T20456] mac80211_hwsim hwsim1155 wlan0: left promiscuous mode
[ 1131.647593][T20456] mac80211_hwsim hwsim1155 wlan0: left allmulticast mode
[ 1131.694266][T15114] net_ratelimit: 39 callbacks suppressed
[ 1131.694397][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1131.789677][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11296'.
[ 1131.804090][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1131.963886][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1132.233763][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1132.350315][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1132.407910][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11306'.
[ 1132.453920][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1132.460335][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11307'.
[ 1132.463983][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1132.564307][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1132.845548][T20557] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 1133.073940][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1133.706899][T20604] xt_hashlimit: size too large, truncated to 1048576
[ 1133.813809][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1133.815562][T20611] xt_hashlimit: size too large, truncated to 1048576
[ 1134.357824][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11328'.
[ 1134.382882][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11328'.
[ 1134.492055][T20642] xt_CT: No such helper "netbios-ns"
[ 1134.620168][T20650] netlink: 'syz.0.11332': attribute type 23 has an invalid length.
[ 1134.620232][T20650] netlink: 'syz.0.11332': attribute type 11 has an invalid length.
[ 1135.865174][T20686] netlink: 'syz.0.11342': attribute type 1 has an invalid length.
[ 1135.876373][T20688] __nla_validate_parse: 3 callbacks suppressed
[ 1135.876443][T20688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11343'.
[ 1135.882153][T20692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11343'.
[ 1135.911868][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11344'.
[ 1135.912332][T20695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11344'.
[ 1136.023299][T20702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11346'.
[ 1136.084299][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11346'.
[ 1136.158582][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11347'.
[ 1136.469021][T20715] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11348'.
[ 1136.728672][T20722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11350'.
[ 1136.784485][   T12] net_ratelimit: 32 callbacks suppressed
[ 1136.785757][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1136.905601][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1136.980448][T20753] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11356'.
[ 1137.014706][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.124593][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.234008][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.345377][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.453975][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.563979][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1137.663807][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1137.977549][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1138.151595][T20784] netlink: 'syz.1.11363': attribute type 1 has an invalid length.
[ 1141.105594][T20791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1141.360626][T20817] __nla_validate_parse: 6 callbacks suppressed
[ 1141.363452][T20817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11367'.
[ 1141.438095][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11370'.
[ 1141.505236][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11372'.
[ 1141.563296][T20837] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11374'.
[ 1141.563369][T20837] block nbd0: NBD_DISCONNECT
[ 1141.564480][T20837] block nbd0: Send disconnect failed -32
[ 1141.564497][T20837] block nbd0: shutting down sockets
[ 1141.803895][T10648] net_ratelimit: 36 callbacks suppressed
[ 1141.808915][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1141.814524][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1141.884510][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11378'.
[ 1141.917900][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.008239][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1142.008291][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.025481][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.032970][T20857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1142.072813][T20869] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11381'.
[ 1142.144474][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.254401][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.271282][T20871] netlink: 'syz.0.11382': attribute type 4 has an invalid length.
[ 1142.271325][T20871] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.11382'.
[ 1142.368578][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.473812][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.547630][T20886] syzkaller1: entered promiscuous mode
[ 1142.547778][T20886] syzkaller1: entered allmulticast mode
[ 1142.605305][T20888] xt_hashlimit: size too large, truncated to 1048576
[ 1142.610606][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1142.689583][T20893] ip_tables: iptables: counters copy to user failed while replacing table
[ 1142.836498][T20905] netlink: 'syz.2.11390': attribute type 4 has an invalid length.
[ 1143.162121][T20942] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11402'.
[ 1143.194722][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11403'.
[ 1143.241417][T20948] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1143.241480][T20948] CPU: 0 UID: 0 PID: 20948 Comm: syz.2.11402 Not tainted syzkaller #0 PREEMPT(full) 
[ 1143.241517][T20948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1143.241527][T20948] Call Trace:
[ 1143.241533][T20948]  <TASK>
[ 1143.241540][T20948]  dump_stack_lvl+0xe8/0x150
[ 1143.241566][T20948]  sysfs_warn_dup+0x8e/0xa0
[ 1143.241587][T20948]  sysfs_do_create_link_sd+0xc0/0x110
[ 1143.241610][T20948]  device_add_class_symlinks+0x1cf/0x240
[ 1143.241633][T20948]  device_add+0x467/0xb80
[ 1143.241653][T20948]  wiphy_register+0x1fc8/0x2ff0
[ 1143.241712][T20948]  ? __pfx_wiphy_register+0x10/0x10
[ 1143.241729][T20948]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1143.241746][T20948]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1143.241765][T20948]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1143.241786][T20948]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1143.241815][T20948]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1143.241852][T20948]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1143.241873][T20948]  ? __asan_memset+0x22/0x50
[ 1143.241892][T20948]  ? __hrtimer_setup+0x1b7/0x260
[ 1143.241908][T20948]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1143.241923][T20948]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1143.241955][T20948]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1143.241966][T20948]  ? kstrndup+0xbd/0x160
[ 1143.241982][T20948]  ? kstrndup+0xbd/0x160
[ 1143.241995][T20948]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1143.242023][T20948]  genl_family_rcv_msg_doit+0x233/0x340
[ 1143.242066][T20948]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1143.242086][T20948]  ? bpf_lsm_capable+0x9/0x20
[ 1143.242098][T20948]  ? security_capable+0x7e/0x2c0
[ 1143.242111][T20948]  genl_rcv_msg+0x614/0x7a0
[ 1143.242126][T20948]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1143.242137][T20948]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1143.242150][T20948]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1143.242170][T20948]  netlink_rcv_skb+0x226/0x4a0
[ 1143.242180][T20948]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1143.242192][T20948]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1143.242208][T20948]  ? down_read+0x2be/0x330
[ 1143.242218][T20948]  genl_rcv+0x28/0x40
[ 1143.242229][T20948]  netlink_unicast+0x7bd/0x940
[ 1143.242242][T20948]  netlink_sendmsg+0x813/0xb40
[ 1143.242256][T20948]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1143.242270][T20948]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1143.242284][T20948]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1143.242294][T20948]  sock_sendmsg_nosec+0x13a/0x180
[ 1143.242306][T20948]  ____sys_sendmsg+0x54e/0x850
[ 1143.242317][T20948]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1143.242329][T20948]  ? import_iovec+0x73/0xa0
[ 1143.242339][T20948]  ___sys_sendmsg+0x2a5/0x360
[ 1143.242347][T20948]  ? __lock_acquire+0x6df/0x2e50
[ 1143.242359][T20948]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1143.242374][T20948]  ? futex_wait+0x2a2/0x390
[ 1143.242410][T20948]  ? __fget_files+0x2a/0x420
[ 1143.242428][T20948]  ? __fget_files+0x3a2/0x420
[ 1143.242449][T20948]  __x64_sys_sendmsg+0x1b1/0x290
[ 1143.242461][T20948]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1143.242477][T20948]  do_syscall_64+0x166/0x520
[ 1143.242488][T20948]  ? trace_irq_disable+0x3b/0x140
[ 1143.242495][T20948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.242506][T20948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.242513][T20948] RIP: 0033:0x7fb36d79e159
[ 1143.242523][T20948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1143.242530][T20948] RSP: 002b:00007fb36e71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1143.242540][T20948] RAX: ffffffffffffffda RBX: 00007fb36da26090 RCX: 00007fb36d79e159
[ 1143.242546][T20948] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[ 1143.242551][T20948] RBP: 00007fb36d835024 R08: 0000000000000000 R09: 0000000000000000
[ 1143.242556][T20948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1143.242560][T20948] R13: 00007fb36da26128 R14: 00007fb36da26090 R15: 00007fff2a22dec8
[ 1143.242573][T20948]  </TASK>
[ 1143.328455][T20946] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11404'.
[ 1144.160192][T20966] netlink: 'syz.1.11408': attribute type 23 has an invalid length.
[ 1144.478534][T20979] netlink: 'syz.1.11413': attribute type 12 has an invalid length.
[ 1144.670222][T15261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1144.673155][T15261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1144.700167][T20997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1144.717404][T21005] netlink: 'syz.0.11420': attribute type 23 has an invalid length.
[ 1144.780595][T21009] No such timeout policy "s	"
[ 1144.892891][T21020] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 1145.080507][T21034] netlink: 'syz.0.11423': attribute type 23 has an invalid length.
[ 1145.080631][T21034] netlink: 'syz.0.11423': attribute type 11 has an invalid length.
[ 1146.051534][T21106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1146.059483][T21106] syzkaller0: MTU too low for tipc bearer
[ 1146.061782][T21106] tipc: Disabling bearer <eth:syzkaller0>
[ 1147.014075][    C0] net_ratelimit: 32 callbacks suppressed
[ 1147.014174][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1148.064098][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1149.059714][T21118] bridge0: port 1(syz_tun) entered blocking state
[ 1149.059829][T21118] bridge0: port 1(syz_tun) entered disabled state
[ 1149.096014][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1149.113959][   T12] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.323210][T21147] __nla_validate_parse: 9 callbacks suppressed
[ 1149.326763][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11446'.
[ 1149.345139][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.464159][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.586965][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.697023][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.736824][T21159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11450'.
[ 1149.746667][T21159] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11450'.
[ 1149.750120][T21159] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11450'.
[ 1149.814915][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1149.888079][T21168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11453'.
[ 1149.891270][T21168] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1150.077406][T21196] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.11460'.
[ 1150.081296][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11460'.
[ 1150.087341][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11460'.
[ 1150.087381][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11460'.
[ 1150.139719][T21198] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1150.143229][T21198] CPU: 1 UID: 0 PID: 21198 Comm: syz.0.11461 Not tainted syzkaller #0 PREEMPT(full) 
[ 1150.143248][T21198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1150.143256][T21198] Call Trace:
[ 1150.143262][T21198]  <TASK>
[ 1150.143269][T21198]  dump_stack_lvl+0xe8/0x150
[ 1150.143293][T21198]  sysfs_warn_dup+0x8e/0xa0
[ 1150.143312][T21198]  sysfs_do_create_link_sd+0xc0/0x110
[ 1150.143333][T21198]  device_add_class_symlinks+0x1cf/0x240
[ 1150.143354][T21198]  device_add+0x467/0xb80
[ 1150.143375][T21198]  wiphy_register+0x1fc8/0x2ff0
[ 1150.143402][T21198]  ? __pfx_wiphy_register+0x10/0x10
[ 1150.143419][T21198]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1150.143434][T21198]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1150.143455][T21198]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1150.143477][T21198]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1150.143505][T21198]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1150.143540][T21198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1150.143587][T21198]  ? __asan_memset+0x22/0x50
[ 1150.143608][T21198]  ? __hrtimer_setup+0x1b7/0x260
[ 1150.143624][T21198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1150.143641][T21198]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1150.143701][T21198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1150.143715][T21198]  ? kstrndup+0xbd/0x160
[ 1150.143732][T21198]  ? kstrndup+0xbd/0x160
[ 1150.143746][T21198]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1150.143774][T21198]  genl_family_rcv_msg_doit+0x233/0x340
[ 1150.143798][T21198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1150.143825][T21198]  ? bpf_lsm_capable+0x9/0x20
[ 1150.143843][T21198]  ? security_capable+0x7e/0x2c0
[ 1150.143861][T21198]  genl_rcv_msg+0x614/0x7a0
[ 1150.143885][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.143903][T21198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1150.143932][T21198]  netlink_rcv_skb+0x226/0x4a0
[ 1150.143949][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.143968][T21198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1150.143998][T21198]  ? down_read+0x2be/0x330
[ 1150.144016][T21198]  genl_rcv+0x28/0x40
[ 1150.144033][T21198]  netlink_unicast+0x7bd/0x940
[ 1150.144056][T21198]  netlink_sendmsg+0x813/0xb40
[ 1150.144077][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.144099][T21198]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1150.144120][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.144135][T21198]  sock_sendmsg_nosec+0x13a/0x180
[ 1150.144155][T21198]  ____sys_sendmsg+0x54e/0x850
[ 1150.144174][T21198]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1150.144194][T21198]  ? import_iovec+0x73/0xa0
[ 1150.144212][T21198]  ___sys_sendmsg+0x2a5/0x360
[ 1150.144225][T21198]  ? __lock_acquire+0x6df/0x2e50
[ 1150.144241][T21198]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1150.144259][T21198]  ? futex_wait+0x2a2/0x390
[ 1150.144300][T21198]  ? __fget_files+0x2a/0x420
[ 1150.144317][T21198]  ? __fget_files+0x3a2/0x420
[ 1150.144340][T21198]  __x64_sys_sendmsg+0x1b1/0x290
[ 1150.144357][T21198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1150.144387][T21198]  do_syscall_64+0x166/0x520
[ 1150.144405][T21198]  ? trace_irq_disable+0x3b/0x140
[ 1150.144418][T21198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.144436][T21198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.144450][T21198] RIP: 0033:0x7f587459e159
[ 1150.144463][T21198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.144474][T21198] RSP: 002b:00007f5875531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1150.144490][T21198] RAX: ffffffffffffffda RBX: 00007f5874825fa0 RCX: 00007f587459e159
[ 1150.144499][T21198] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1150.144507][T21198] RBP: 00007f5874635024 R08: 0000000000000000 R09: 0000000000000000
[ 1150.144515][T21198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.144523][T21198] R13: 00007f5874826038 R14: 00007f5874825fa0 R15: 00007ffce7331638
[ 1150.144547][T21198]  </TASK>
[ 1150.175113][T21198] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1150.175125][T21198] CPU: 1 UID: 0 PID: 21198 Comm: syz.0.11461 Not tainted syzkaller #0 PREEMPT(full) 
[ 1150.175135][T21198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1150.175139][T21198] Call Trace:
[ 1150.175143][T21198]  <TASK>
[ 1150.175147][T21198]  dump_stack_lvl+0xe8/0x150
[ 1150.175162][T21198]  sysfs_warn_dup+0x8e/0xa0
[ 1150.175174][T21198]  sysfs_do_create_link_sd+0xc0/0x110
[ 1150.175187][T21198]  device_add_class_symlinks+0x1cf/0x240
[ 1150.175201][T21198]  device_add+0x467/0xb80
[ 1150.175212][T21198]  wiphy_register+0x1fc8/0x2ff0
[ 1150.175228][T21198]  ? __pfx_wiphy_register+0x10/0x10
[ 1150.175238][T21198]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1150.175248][T21198]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1150.175259][T21198]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1150.175272][T21198]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1150.175288][T21198]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1150.175308][T21198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1150.175339][T21198]  ? __asan_memset+0x22/0x50
[ 1150.175351][T21198]  ? __hrtimer_setup+0x1b7/0x260
[ 1150.175361][T21198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1150.175371][T21198]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1150.175389][T21198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1150.175396][T21198]  ? kstrndup+0xbd/0x160
[ 1150.175406][T21198]  ? kstrndup+0xbd/0x160
[ 1150.175414][T21198]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1150.175431][T21198]  genl_family_rcv_msg_doit+0x233/0x340
[ 1150.175446][T21198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1150.175465][T21198]  ? bpf_lsm_capable+0x9/0x20
[ 1150.175477][T21198]  ? security_capable+0x7e/0x2c0
[ 1150.175487][T21198]  genl_rcv_msg+0x614/0x7a0
[ 1150.175501][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.175511][T21198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1150.175530][T21198]  netlink_rcv_skb+0x226/0x4a0
[ 1150.175543][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.175561][T21198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1150.175583][T21198]  ? down_read+0x2be/0x330
[ 1150.175596][T21198]  genl_rcv+0x28/0x40
[ 1150.175610][T21198]  netlink_unicast+0x7bd/0x940
[ 1150.175630][T21198]  netlink_sendmsg+0x813/0xb40
[ 1150.175652][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.175701][T21198]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1150.175722][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.175734][T21198]  sock_sendmsg_nosec+0x13a/0x180
[ 1150.175751][T21198]  ____sys_sendmsg+0x54e/0x850
[ 1150.175768][T21198]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1150.175788][T21198]  ? import_iovec+0x73/0xa0
[ 1150.175804][T21198]  ___sys_sendmsg+0x2a5/0x360
[ 1150.175815][T21198]  ? __lock_acquire+0x6df/0x2e50
[ 1150.175830][T21198]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1150.175846][T21198]  ? futex_wait+0x2a2/0x390
[ 1150.175885][T21198]  ? __fget_files+0x2a/0x420
[ 1150.175901][T21198]  ? __fget_files+0x3a2/0x420
[ 1150.175923][T21198]  __x64_sys_sendmsg+0x1b1/0x290
[ 1150.175940][T21198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1150.175969][T21198]  do_syscall_64+0x166/0x520
[ 1150.175985][T21198]  ? trace_irq_disable+0x3b/0x140
[ 1150.175996][T21198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.176013][T21198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.176025][T21198] RIP: 0033:0x7f587459e159
[ 1150.176039][T21198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.176049][T21198] RSP: 002b:00007f5875531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1150.176064][T21198] RAX: ffffffffffffffda RBX: 00007f5874825fa0 RCX: 00007f587459e159
[ 1150.176072][T21198] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1150.176079][T21198] RBP: 00007f5874635024 R08: 0000000000000000 R09: 0000000000000000
[ 1150.176087][T21198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.176094][T21198] R13: 00007f5874826038 R14: 00007f5874825fa0 R15: 00007ffce7331638
[ 1150.176116][T21198]  </TASK>
[ 1150.211203][T21198] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1150.211216][T21198] CPU: 1 UID: 0 PID: 21198 Comm: syz.0.11461 Not tainted syzkaller #0 PREEMPT(full) 
[ 1150.211225][T21198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1150.211230][T21198] Call Trace:
[ 1150.211234][T21198]  <TASK>
[ 1150.211237][T21198]  dump_stack_lvl+0xe8/0x150
[ 1150.211254][T21198]  sysfs_warn_dup+0x8e/0xa0
[ 1150.211265][T21198]  sysfs_do_create_link_sd+0xc0/0x110
[ 1150.211277][T21198]  device_add_class_symlinks+0x1cf/0x240
[ 1150.211291][T21198]  device_add+0x467/0xb80
[ 1150.211302][T21198]  wiphy_register+0x1fc8/0x2ff0
[ 1150.211318][T21198]  ? __pfx_wiphy_register+0x10/0x10
[ 1150.211328][T21198]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1150.211338][T21198]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1150.211350][T21198]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1150.211362][T21198]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1150.211378][T21198]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1150.211399][T21198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1150.211411][T21198]  ? __asan_memset+0x22/0x50
[ 1150.211422][T21198]  ? __hrtimer_setup+0x1b7/0x260
[ 1150.211432][T21198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1150.211445][T21198]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1150.211476][T21198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1150.211488][T21198]  ? kstrndup+0xbd/0x160
[ 1150.211506][T21198]  ? kstrndup+0xbd/0x160
[ 1150.211522][T21198]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1150.211550][T21198]  genl_family_rcv_msg_doit+0x233/0x340
[ 1150.211582][T21198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1150.211608][T21198]  ? bpf_lsm_capable+0x9/0x20
[ 1150.211624][T21198]  ? security_capable+0x7e/0x2c0
[ 1150.211643][T21198]  genl_rcv_msg+0x614/0x7a0
[ 1150.211665][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.211727][T21198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1150.211757][T21198]  netlink_rcv_skb+0x226/0x4a0
[ 1150.211773][T21198]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1150.211793][T21198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1150.211820][T21198]  ? down_read+0x2be/0x330
[ 1150.211837][T21198]  genl_rcv+0x28/0x40
[ 1150.211854][T21198]  netlink_unicast+0x7bd/0x940
[ 1150.211877][T21198]  netlink_sendmsg+0x813/0xb40
[ 1150.211899][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.211921][T21198]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1150.211941][T21198]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1150.211956][T21198]  sock_sendmsg_nosec+0x13a/0x180
[ 1150.211972][T21198]  ____sys_sendmsg+0x54e/0x850
[ 1150.211982][T21198]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1150.211996][T21198]  ? import_iovec+0x73/0xa0
[ 1150.212012][T21198]  ___sys_sendmsg+0x2a5/0x360
[ 1150.212024][T21198]  ? __lock_acquire+0x6df/0x2e50
[ 1150.212040][T21198]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1150.212056][T21198]  ? futex_wait+0x2a2/0x390
[ 1150.212096][T21198]  ? __fget_files+0x2a/0x420
[ 1150.212112][T21198]  ? __fget_files+0x3a2/0x420
[ 1150.212136][T21198]  __x64_sys_sendmsg+0x1b1/0x290
[ 1150.212152][T21198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1150.212182][T21198]  do_syscall_64+0x166/0x520
[ 1150.212200][T21198]  ? trace_irq_disable+0x3b/0x140
[ 1150.212213][T21198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.212229][T21198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.212243][T21198] RIP: 0033:0x7f587459e159
[ 1150.212258][T21198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.212271][T21198] RSP: 002b:00007f5875531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1150.212285][T21198] RAX: ffffffffffffffda RBX: 00007f5874825fa0 RCX: 00007f587459e159
[ 1150.212293][T21198] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1150.212301][T21198] RBP: 00007f5874635024 R08: 0000000000000000 R09: 0000000000000000
[ 1150.212311][T21198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.212318][T21198] R13: 00007f5874826038 R14: 00007f5874825fa0 R15: 00007ffce7331638
[ 1150.212341][T21198]  </TASK>
[ 1150.273023][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11462'.
[ 1152.124072][T10648] net_ratelimit: 20 callbacks suppressed
[ 1152.124234][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.214166][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1152.235478][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.355128][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.473946][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.593942][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.703933][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.813990][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1152.924033][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1153.033984][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1153.256863][T21252] sctp: [Deprecated]: syz.1.11474 (pid 21252) Use of int in max_burst socket option deprecated.
[ 1153.256863][T21252] Use struct sctp_assoc_value instead
[ 1153.777558][T21298] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1154.266956][T21332] netlink: 'syz.0.11492': attribute type 4 has an invalid length.
[ 1154.346456][T21343] __nla_validate_parse: 5 callbacks suppressed
[ 1154.348603][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11497'.
[ 1154.402015][T21356] wg2: Caught tx_queue_len zero misconfig
[ 1154.818276][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11508'.
[ 1155.024322][T21408] x_tables: duplicate entry at hook 3
[ 1155.372792][T21430] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1155.663892][T21454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11526'.
[ 1155.929187][T21475] xt_l2tp: unknown flags: 51
[ 1155.959921][T10960] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1155.979304][T21477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1156.774388][T21497] syzkaller1: entered promiscuous mode
[ 1156.774450][T21497] syzkaller1: entered allmulticast mode
[ 1156.782831][T21497] syzkaller0: entered promiscuous mode
[ 1156.783228][T21497] syzkaller0: entered allmulticast mode
[ 1156.789163][T21497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1156.795199][T21496] tipc: Resetting bearer <eth:syzkaller0>
[ 1156.819561][T21496] tipc: Disabling bearer <eth:syzkaller0>
[ 1156.846218][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11539'.
[ 1157.059956][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11543'.
[ 1157.127028][T21504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11542'.
[ 1157.139605][T21504] syzkaller1: entered promiscuous mode
[ 1157.142774][T21504] syzkaller1: entered allmulticast mode
[ 1157.189521][T21514] x_tables: duplicate underflow at hook 3
[ 1157.204508][   T13] net_ratelimit: 45 callbacks suppressed
[ 1157.204593][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1157.269106][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11547'.
[ 1157.269181][T21518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11547'.
[ 1157.414458][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1157.454633][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1157.546104][T21532] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11551'.
[ 1157.563801][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1157.677391][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11555'.
[ 1157.680366][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1157.751940][T21547] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1157.751994][T21547] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1157.784111][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1158.013961][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1158.203820][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1158.313880][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1158.423815][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1158.745536][T21585] netlink: 'syz.0.11564': attribute type 23 has an invalid length.
[ 1158.745603][T21585] netlink: 'syz.0.11564': attribute type 11 has an invalid length.
[ 1159.421245][T21607] __nla_validate_parse: 9 callbacks suppressed
[ 1159.424811][T21608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11571'.
[ 1159.429147][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11571'.
[ 1159.491526][T21611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11572'.
[ 1159.500291][T21611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11572'.
[ 1159.652108][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11577'.
[ 1159.753263][T21636] netlink: 'syz.1.11579': attribute type 2 has an invalid length.
[ 1159.767415][T21636] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1159.767481][T21636] CPU: 1 UID: 0 PID: 21636 Comm: syz.1.11579 Not tainted syzkaller #0 PREEMPT(full) 
[ 1159.767519][T21636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1159.767530][T21636] Call Trace:
[ 1159.767536][T21636]  <TASK>
[ 1159.767544][T21636]  dump_stack_lvl+0xe8/0x150
[ 1159.767571][T21636]  sysfs_warn_dup+0x8e/0xa0
[ 1159.767592][T21636]  sysfs_do_create_link_sd+0xc0/0x110
[ 1159.767613][T21636]  device_add_class_symlinks+0x1cf/0x240
[ 1159.767636][T21636]  device_add+0x467/0xb80
[ 1159.767658][T21636]  wiphy_register+0x1fc8/0x2ff0
[ 1159.767686][T21636]  ? __pfx_wiphy_register+0x10/0x10
[ 1159.767732][T21636]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1159.767751][T21636]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1159.767772][T21636]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1159.767796][T21636]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1159.767845][T21636]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1159.767882][T21636]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1159.767904][T21636]  ? __asan_memset+0x22/0x50
[ 1159.767925][T21636]  ? __hrtimer_setup+0x1b7/0x260
[ 1159.767941][T21636]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1159.767958][T21636]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1159.767993][T21636]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1159.768008][T21636]  ? kstrndup+0xbd/0x160
[ 1159.768025][T21636]  ? kstrndup+0xbd/0x160
[ 1159.768041][T21636]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1159.768071][T21636]  genl_family_rcv_msg_doit+0x233/0x340
[ 1159.768098][T21636]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1159.768135][T21636]  ? bpf_lsm_capable+0x9/0x20
[ 1159.768156][T21636]  ? security_capable+0x7e/0x2c0
[ 1159.768177][T21636]  genl_rcv_msg+0x614/0x7a0
[ 1159.768204][T21636]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1159.768224][T21636]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1159.768254][T21636]  netlink_rcv_skb+0x226/0x4a0
[ 1159.768273][T21636]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1159.768294][T21636]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1159.768323][T21636]  ? down_read+0x2be/0x330
[ 1159.768342][T21636]  genl_rcv+0x28/0x40
[ 1159.768360][T21636]  netlink_unicast+0x7bd/0x940
[ 1159.768383][T21636]  netlink_sendmsg+0x813/0xb40
[ 1159.768406][T21636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1159.768430][T21636]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1159.768452][T21636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1159.768468][T21636]  sock_sendmsg_nosec+0x13a/0x180
[ 1159.768492][T21636]  ____sys_sendmsg+0x54e/0x850
[ 1159.768513][T21636]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1159.768534][T21636]  ? import_iovec+0x73/0xa0
[ 1159.768553][T21636]  ___sys_sendmsg+0x2a5/0x360
[ 1159.768567][T21636]  ? __lock_acquire+0x6df/0x2e50
[ 1159.768585][T21636]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1159.768603][T21636]  ? futex_wait+0x2a2/0x390
[ 1159.768641][T21636]  ? __fget_files+0x2a/0x420
[ 1159.768659][T21636]  ? __fget_files+0x3a2/0x420
[ 1159.768684][T21636]  __x64_sys_sendmsg+0x1b1/0x290
[ 1159.768731][T21636]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1159.768763][T21636]  do_syscall_64+0x166/0x520
[ 1159.768784][T21636]  ? trace_irq_disable+0x3b/0x140
[ 1159.768798][T21636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.768818][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.768832][T21636] RIP: 0033:0x7fb8b6f9e159
[ 1159.768847][T21636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1159.768860][T21636] RSP: 002b:00007fb8b7f3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1159.768877][T21636] RAX: ffffffffffffffda RBX: 00007fb8b7225fa0 RCX: 00007fb8b6f9e159
[ 1159.768886][T21636] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1159.768896][T21636] RBP: 00007fb8b7035024 R08: 0000000000000000 R09: 0000000000000000
[ 1159.768904][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1159.768913][T21636] R13: 00007fb8b7226038 R14: 00007fb8b7225fa0 R15: 00007ffc4b225c48
[ 1159.768935][T21636]  </TASK>
[ 1160.052018][T21648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11581'.
[ 1160.057371][T21647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11581'.
[ 1160.148306][T21660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11584'.
[ 1161.122570][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11588'.
[ 1161.122623][T21673] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11588'.
[ 1161.250078][T21677] netlink: 'syz.1.11589': attribute type 23 has an invalid length.
[ 1161.360669][T21678] No such timeout policy "s	"
[ 1162.274171][ T5651] net_ratelimit: 42 callbacks suppressed
[ 1162.274266][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1162.333072][T21759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1162.370840][T21759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1162.384146][T21759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1162.394000][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1162.447600][T21765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1162.505884][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1162.543350][T21774] xt_CT: No such helper "netbios-ns"
[ 1162.613996][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1162.616367][ T5651] bond14: (slave bridge4): failed to get link speed/duplex
[ 1162.708029][T21782] netlink: 'syz.1.11622': attribute type 39 has an invalid length.
[ 1162.724113][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1162.933756][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1163.043893][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1163.088503][T21815] ip_tables: iptables: counters copy to user failed while replacing table
[ 1163.387570][T15261] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1163.408461][T21832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1163.920896][T21869] netlink: 'syz.0.11648': attribute type 1 has an invalid length.
[ 1164.258470][T21905] netlink: 'syz.2.11654': attribute type 1 has an invalid length.
[ 1164.258855][T21905] netlink: 'syz.2.11654': attribute type 2 has an invalid length.
[ 1164.486485][T21920] __nla_validate_parse: 14 callbacks suppressed
[ 1164.489272][T21920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11658'.
[ 1164.489285][T21920] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11658'.
[ 1164.489291][T21920] netlink: 'syz.1.11658': attribute type 5 has an invalid length.
[ 1164.489295][T21920] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11658'.
[ 1164.551310][T21927] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11659'.
[ 1165.217751][T21959] x_tables: duplicate underflow at hook 3
[ 1165.407811][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11664'.
[ 1165.677796][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11668'.
[ 1165.813759][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1166.086651][T22033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11675'.
[ 1166.241820][T22035] netlink: 'syz.0.11676': attribute type 1 has an invalid length.
[ 1166.245729][T22035] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.11676'.
[ 1166.288639][T22039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11677'.
[ 1166.509593][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11679'.
[ 1166.759336][T22062] syzkaller0: left promiscuous mode
[ 1166.759384][T22062] syzkaller0: left allmulticast mode
[ 1166.966276][T22093] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1166.966327][T22093] CPU: 1 UID: 0 PID: 22093 Comm: syz.1.11689 Not tainted syzkaller #0 PREEMPT(full) 
[ 1166.966359][T22093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1166.966369][T22093] Call Trace:
[ 1166.966375][T22093]  <TASK>
[ 1166.966381][T22093]  dump_stack_lvl+0xe8/0x150
[ 1166.966406][T22093]  sysfs_warn_dup+0x8e/0xa0
[ 1166.966424][T22093]  sysfs_do_create_link_sd+0xc0/0x110
[ 1166.966445][T22093]  device_add_class_symlinks+0x1cf/0x240
[ 1166.966468][T22093]  device_add+0x467/0xb80
[ 1166.966488][T22093]  wiphy_register+0x1fc8/0x2ff0
[ 1166.966516][T22093]  ? __pfx_wiphy_register+0x10/0x10
[ 1166.966534][T22093]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1166.966551][T22093]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1166.966571][T22093]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1166.966592][T22093]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1166.966620][T22093]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1166.966656][T22093]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1166.966677][T22093]  ? __asan_memset+0x22/0x50
[ 1166.966696][T22093]  ? __hrtimer_setup+0x1b7/0x260
[ 1166.966736][T22093]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1166.966754][T22093]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1166.966788][T22093]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1166.966801][T22093]  ? kstrndup+0xbd/0x160
[ 1166.966819][T22093]  ? kstrndup+0xbd/0x160
[ 1166.966833][T22093]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1166.966863][T22093]  genl_family_rcv_msg_doit+0x233/0x340
[ 1166.966907][T22093]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1166.966935][T22093]  ? bpf_lsm_capable+0x9/0x20
[ 1166.966953][T22093]  ? security_capable+0x7e/0x2c0
[ 1166.966972][T22093]  genl_rcv_msg+0x614/0x7a0
[ 1166.966996][T22093]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1166.967014][T22093]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1166.967042][T22093]  netlink_rcv_skb+0x226/0x4a0
[ 1166.967060][T22093]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1166.967080][T22093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1166.967107][T22093]  ? down_read+0x2be/0x330
[ 1166.967125][T22093]  genl_rcv+0x28/0x40
[ 1166.967143][T22093]  netlink_unicast+0x7bd/0x940
[ 1166.967166][T22093]  netlink_sendmsg+0x813/0xb40
[ 1166.967194][T22093]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1166.967217][T22093]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1166.967238][T22093]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1166.967253][T22093]  sock_sendmsg_nosec+0x13a/0x180
[ 1166.967273][T22093]  ____sys_sendmsg+0x54e/0x850
[ 1166.967291][T22093]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1166.967313][T22093]  ? import_iovec+0x73/0xa0
[ 1166.967331][T22093]  ___sys_sendmsg+0x2a5/0x360
[ 1166.967344][T22093]  ? __lock_acquire+0x6df/0x2e50
[ 1166.967362][T22093]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1166.967379][T22093]  ? futex_wait+0x2a2/0x390
[ 1166.967419][T22093]  ? __fget_files+0x2a/0x420
[ 1166.967436][T22093]  ? __fget_files+0x3a2/0x420
[ 1166.967459][T22093]  __x64_sys_sendmsg+0x1b1/0x290
[ 1166.967477][T22093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1166.967507][T22093]  do_syscall_64+0x166/0x520
[ 1166.967524][T22093]  ? trace_irq_disable+0x3b/0x140
[ 1166.967537][T22093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.967555][T22093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.967568][T22093] RIP: 0033:0x7fb8b6f9e159
[ 1166.967581][T22093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.967593][T22093] RSP: 002b:00007fb8b7f1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1166.967609][T22093] RAX: ffffffffffffffda RBX: 00007fb8b7226090 RCX: 00007fb8b6f9e159
[ 1166.967618][T22093] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[ 1166.967627][T22093] RBP: 00007fb8b7035024 R08: 0000000000000000 R09: 0000000000000000
[ 1166.967635][T22093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1166.967642][T22093] R13: 00007fb8b7226128 R14: 00007fb8b7226090 R15: 00007ffc4b225c48
[ 1166.967664][T22093]  </TASK>
[ 1166.996157][T22100] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1166.996172][T22100] CPU: 1 UID: 0 PID: 22100 Comm: syz.1.11689 Not tainted syzkaller #0 PREEMPT(full) 
[ 1166.996187][T22100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1166.996203][T22100] Call Trace:
[ 1166.996208][T22100]  <TASK>
[ 1166.996215][T22100]  dump_stack_lvl+0xe8/0x150
[ 1166.996237][T22100]  sysfs_warn_dup+0x8e/0xa0
[ 1166.996258][T22100]  sysfs_do_create_link_sd+0xc0/0x110
[ 1166.996279][T22100]  device_add_class_symlinks+0x1cf/0x240
[ 1166.996302][T22100]  device_add+0x467/0xb80
[ 1166.996322][T22100]  wiphy_register+0x1fc8/0x2ff0
[ 1166.996350][T22100]  ? __pfx_wiphy_register+0x10/0x10
[ 1166.996368][T22100]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1166.996385][T22100]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1166.996405][T22100]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1166.996428][T22100]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1166.996456][T22100]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1166.996493][T22100]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1166.996514][T22100]  ? __asan_memset+0x22/0x50
[ 1166.996534][T22100]  ? __hrtimer_setup+0x1b7/0x260
[ 1166.996551][T22100]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1166.996568][T22100]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1166.996601][T22100]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1166.996614][T22100]  ? kstrndup+0xbd/0x160
[ 1166.996632][T22100]  ? kstrndup+0xbd/0x160
[ 1166.996647][T22100]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1166.996676][T22100]  genl_family_rcv_msg_doit+0x233/0x340
[ 1166.996701][T22100]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1166.996755][T22100]  ? bpf_lsm_capable+0x9/0x20
[ 1166.996773][T22100]  ? security_capable+0x7e/0x2c0
[ 1166.996792][T22100]  genl_rcv_msg+0x614/0x7a0
[ 1166.996816][T22100]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1166.996833][T22100]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1166.996863][T22100]  netlink_rcv_skb+0x226/0x4a0
[ 1166.996881][T22100]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1166.996900][T22100]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1166.996927][T22100]  ? down_read+0x2be/0x330
[ 1166.996945][T22100]  genl_rcv+0x28/0x40
[ 1166.996962][T22100]  netlink_unicast+0x7bd/0x940
[ 1166.996985][T22100]  netlink_sendmsg+0x813/0xb40
[ 1166.997007][T22100]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1166.997029][T22100]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1166.997051][T22100]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1166.997067][T22100]  sock_sendmsg_nosec+0x13a/0x180
[ 1166.997087][T22100]  ____sys_sendmsg+0x54e/0x850
[ 1166.997106][T22100]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1166.997147][T22100]  ? import_iovec+0x73/0xa0
[ 1166.997166][T22100]  ___sys_sendmsg+0x2a5/0x360
[ 1166.997181][T22100]  ? __lock_acquire+0x6df/0x2e50
[ 1166.997205][T22100]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1166.997218][T22100]  ? __lock_acquire+0x6df/0x2e50
[ 1166.997256][T22100]  ? __fget_files+0x2a/0x420
[ 1166.997273][T22100]  ? __fget_files+0x3a2/0x420
[ 1166.997297][T22100]  __x64_sys_sendmsg+0x1b1/0x290
[ 1166.997312][T22100]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1166.997330][T22100]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1166.997350][T22100]  ? do_user_addr_fault+0xc4c/0x1340
[ 1166.997371][T22100]  do_syscall_64+0x166/0x520
[ 1166.997390][T22100]  ? trace_irq_disable+0x3b/0x140
[ 1166.997402][T22100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.997420][T22100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.997434][T22100] RIP: 0033:0x7fb8b6f9e159
[ 1166.997448][T22100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.997458][T22100] RSP: 002b:00007fb8b7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1166.997474][T22100] RAX: ffffffffffffffda RBX: 00007fb8b7226450 RCX: 00007fb8b6f9e159
[ 1166.997483][T22100] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[ 1166.997492][T22100] RBP: 00007fb8b7035024 R08: 0000000000000000 R09: 0000000000000000
[ 1166.997500][T22100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1166.997508][T22100] R13: 00007fb8b72264e8 R14: 00007fb8b7226450 R15: 00007ffc4b225c48
[ 1166.997529][T22100]  </TASK>
[ 1167.337937][   T13] net_ratelimit: 39 callbacks suppressed
[ 1167.338029][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1167.447118][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1167.553833][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1167.571198][T22121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.577790][T22121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.639272][T22121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.684027][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1167.794034][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1167.823998][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1167.903986][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1168.013918][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1168.123953][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1168.234517][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1168.370777][T22149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.385179][T22149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.443402][T22149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1169.615472][T22204] __nla_validate_parse: 8 callbacks suppressed
[ 1169.615553][T22204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11719'.
[ 1169.640253][T22204] tap0: tun_chr_ioctl cmd 1074025676
[ 1169.640316][T22204] tap0: owner set to 0
[ 1169.719964][T22207] sctp: [Deprecated]: syz.1.11720 (pid 22207) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1169.719964][T22207] Use struct sctp_sack_info instead
[ 1169.720098][T22207] sctp: [Deprecated]: syz.1.11720 (pid 22207) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1169.720098][T22207] Use struct sctp_sack_info instead
[ 1170.919273][T22221] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1170.942656][T22233] xt_CT: No such helper "netbios-ns"
[ 1171.107691][T22251] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11730'.
[ 1171.704985][T10648] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9
[ 1172.027365][T22295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11741'.
[ 1172.363983][   T13] net_ratelimit: 39 callbacks suppressed
[ 1172.364595][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1172.471539][T22281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1172.475114][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1172.585624][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1172.693912][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1172.849844][T22334] syzkaller0: entered promiscuous mode
[ 1172.851713][T22334] syzkaller0: entered allmulticast mode
[ 1172.863712][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1172.973776][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1173.014380][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1173.083752][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1173.193826][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1173.304039][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1173.540345][T22338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1173.545713][T22338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1173.617454][T22343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1174.983495][T22380] tipc: Resetting bearer <eth:syzkaller0>
[ 1174.991835][T22380] tipc: Resetting bearer <eth:syzkaller0>
[ 1176.155812][T22426] netlink: 'syz.1.11770': attribute type 12 has an invalid length.
[ 1176.356643][T22438] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11773'.
[ 1176.466460][T22464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11777'.
[ 1176.511640][T22468] Cannot find del_set index 17 as target
[ 1176.831775][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11789'.
[ 1176.907129][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11790'.
[ 1177.129264][T22512] syzkaller1: entered promiscuous mode
[ 1177.129334][T22512] syzkaller1: entered allmulticast mode
[ 1177.185397][T22523] syzkaller0: entered promiscuous mode
[ 1177.185445][T22523] syzkaller0: entered allmulticast mode
[ 1177.309934][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11796'.
[ 1177.313690][T22525] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11796'.
[ 1177.350165][T22527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11797'.
[ 1177.463938][T10648] net_ratelimit: 39 callbacks suppressed
[ 1177.463993][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1177.501230][T22543] netlink: 'syz.2.11802': attribute type 23 has an invalid length.
[ 1177.505649][T22543] netlink: 'syz.2.11802': attribute type 11 has an invalid length.
[ 1177.622329][T22558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11805'.
[ 1177.744255][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1177.765232][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11806'.
[ 1177.765304][T22561] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11806'.
[ 1177.811104][T22563] openvswitch: netlink: IPv4 tun info is not correct
[ 1177.864349][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1177.902886][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913030][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913146][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913227][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913325][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913399][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.913511][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.937415][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.937517][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.941475][T22571] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1177.974015][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1178.056364][T22568] xt_CT: No such helper "netbios-ns"
[ 1178.083847][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1178.132800][T22590] xt_bpf: check failed: parse error
[ 1178.150348][T22589] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1178.193857][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1178.224050][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1178.234436][T22599] netlink: 'syz.2.11818': attribute type 30 has an invalid length.
[ 1178.244401][T22599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1178.248906][T22599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1178.304537][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1178.413813][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1178.581907][T22612] syzkaller0: entered promiscuous mode
[ 1178.583699][T22612] syzkaller0: entered allmulticast mode
[ 1180.809717][T22655] xt_CT: No such helper "netbios-ns"
[ 1182.290667][T22716] __nla_validate_parse: 46 callbacks suppressed
[ 1182.290729][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11844'.
[ 1182.555261][T22740] netlink: 'syz.1.11850': attribute type 12 has an invalid length.
[ 1182.556237][T15114] net_ratelimit: 16 callbacks suppressed
[ 1182.556254][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1182.774129][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1182.785794][T22754] netlink: 'syz.1.11850': attribute type 12 has an invalid length.
[ 1182.884514][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1182.923401][T22763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11853'.
[ 1182.946165][T22764] bond31: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1182.955562][T22764] bond31: (slave lo): Enslaving as an active interface with an up link
[ 1182.955782][T22764] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1183.028518][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1183.103497][T22778] netlink: ct_mark mask cannot be 0
[ 1183.103681][T22778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1183.144237][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1183.223015][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11860'.
[ 1183.255148][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1183.268267][T22796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11862'.
[ 1183.268318][T22796] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1183.470901][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11867'.
[ 1183.512653][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11868'.
[ 1183.551889][T22823] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11870'.
[ 1183.620436][T22823] nbd0: detected capacity change from 0 to 127
[ 1183.631045][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11870'.
[ 1183.753045][T23918] block nbd0: Receive control failed (result -104)
[ 1183.778916][T22827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11871'.
[ 1183.781977][T22827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11871'.
[ 1183.785799][T22827] netlink: 'syz.0.11871': attribute type 8 has an invalid length.
[ 1183.794780][T22827] netlink: 'syz.0.11871': attribute type 62 has an invalid length.
[ 1184.269795][T22857] xt_CT: No such helper "netbios-ns"
[ 1185.632081][T22947] netlink: 'syz.2.11899': attribute type 29 has an invalid length.
[ 1186.289141][T22988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1186.350662][T22989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1186.362434][T22988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1186.796688][T22992] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1186.964960][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[ 1186.966729][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[ 1186.966779][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[ 1186.967094][   T11] block nbd0: Dead connection, failed to find a fallback
[ 1186.967102][   T11] block nbd0: shutting down sockets
[ 1186.967142][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[ 1186.967184][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1186.967260][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1186.967310][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.967320][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1186.967328][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.967336][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1186.970374][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970389][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1186.970527][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970538][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1186.970578][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970588][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1186.970626][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970635][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1186.970806][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970818][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1186.970858][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.970867][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1186.970905][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1186.971688][T22355] ldm_validate_partition_table(): Disk read failed.
[ 1186.972325][T22355] Dev nbd0: unable to read RDB block 0
[ 1186.973843][T22355]  nbd0: unable to read partition table
[ 1186.994716][T22355] ldm_validate_partition_table(): Disk read failed.
[ 1186.995277][T22355] Dev nbd0: unable to read RDB block 0
[ 1186.998908][T22355]  nbd0: unable to read partition table
[ 1187.007177][T22355] ldm_validate_partition_table(): Disk read failed.
[ 1187.010354][T22355] Dev nbd0: unable to read RDB block 0
[ 1187.010976][T22355]  nbd0: unable to read partition table
[ 1187.015100][T22355] ldm_validate_partition_table(): Disk read failed.
[ 1187.015664][T22355] Dev nbd0: unable to read RDB block 0
[ 1187.018673][T22355]  nbd0: unable to read partition table
[ 1187.574725][    C0] net_ratelimit: 51 callbacks suppressed
[ 1187.574833][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1187.693824][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1187.803861][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1187.913714][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.025251][T10648] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.133953][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.254106][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.364178][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.474047][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1188.585337][T15114] bond14: (slave bridge4): failed to get link speed/duplex
[ 1190.246114][T23015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1190.471401][T23037] __nla_validate_parse: 11 callbacks suppressed
[ 1190.471961][T23037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11919'.
[ 1190.620613][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11920'.
[ 1190.626674][T23047] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11920'.
[ 1190.812243][T23065] gre0: entered promiscuous mode
[ 1190.812309][T23065] gre0: entered allmulticast mode
[ 1190.856904][T23065] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1190.857504][T23065] bridge0: port 2(bond18) entered blocking state
[ 1190.857744][T23065] bridge0: port 2(bond18) entered disabled state
[ 1190.857861][T23065] bond18: entered allmulticast mode
[ 1190.859635][T23065] bond18: entered promiscuous mode
[ 1190.860215][T23065] bridge0: port 2(bond18) entered blocking state
[ 1190.860294][T23065] bridge0: port 2(bond18) entered listening state
[ 1190.886487][T23066] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1190.889629][T23066] bridge0: port 3(bond19) entered blocking state
[ 1190.889677][T23066] bridge0: port 3(bond19) entered disabled state
[ 1190.889732][T23066] bond19: entered allmulticast mode
[ 1190.897218][T23066] bond19: entered promiscuous mode
[ 1190.899472][T23066] bridge0: port 3(bond19) entered blocking state
[ 1190.899612][T23066] bridge0: port 3(bond19) entered listening state
[ 1190.905432][ T6283] bridge0: port 2(bond18) entered disabled state
[ 1190.911082][ T6283] bridge0: port 3(bond19) entered disabled state
[ 1191.648839][T23104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11937'.
[ 1191.737641][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11939'.
[ 1192.652901][T23121] Bluetooth: hci0: unsupported parameter 1280
[ 1192.652964][T23121] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[ 1192.659270][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11940'.
[ 1192.685352][   T13] net_ratelimit: 37 callbacks suppressed
[ 1192.685435][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1192.773970][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1192.794532][   T13] bond14: (slave bridge4): failed to get link speed/duplex
[ 1193.112094][T23158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1193.467467][T23156] tipc: Resetting bearer <eth:syzkaller0>
[ 1193.814047][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1194.463860][ T5651] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1194.463921][ T5651] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.464100][ T5651] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1194.464448][ T5651] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1194.464466][ T5651] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.464482][ T5651] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1194.464505][ T5651] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1194.464522][ T5651] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.464538][ T5651] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1194.464561][ T5651] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1194.464577][ T5651] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.464593][ T5651] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1194.529400][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11950'.
[ 1194.539162][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11950'.
[ 1194.554167][ T5651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1194.554253][ T5651] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1194.554277][ T5651] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1194.554299][ T5651] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1194.672872][T23182] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1194.672937][T23182] CPU: 1 UID: 0 PID: 23182 Comm: syz.0.11953 Not tainted syzkaller #0 PREEMPT(full) 
[ 1194.672974][T23182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1194.672984][T23182] Call Trace:
[ 1194.672991][T23182]  <TASK>
[ 1194.672998][T23182]  dump_stack_lvl+0xe8/0x150
[ 1194.673025][T23182]  sysfs_warn_dup+0x8e/0xa0
[ 1194.673045][T23182]  sysfs_do_create_link_sd+0xc0/0x110
[ 1194.673065][T23182]  device_add_class_symlinks+0x1cf/0x240
[ 1194.673086][T23182]  device_add+0x467/0xb80
[ 1194.673108][T23182]  wiphy_register+0x1fc8/0x2ff0
[ 1194.673140][T23182]  ? __pfx_wiphy_register+0x10/0x10
[ 1194.673158][T23182]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1194.673174][T23182]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1194.673195][T23182]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1194.673217][T23182]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1194.673247][T23182]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1194.673287][T23182]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1194.673308][T23182]  ? __asan_memset+0x22/0x50
[ 1194.673328][T23182]  ? __hrtimer_setup+0x1b7/0x260
[ 1194.673346][T23182]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1194.673363][T23182]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1194.673399][T23182]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1194.673412][T23182]  ? kstrndup+0xbd/0x160
[ 1194.673430][T23182]  ? kstrndup+0xbd/0x160
[ 1194.673445][T23182]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1194.673477][T23182]  genl_family_rcv_msg_doit+0x233/0x340
[ 1194.673504][T23182]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1194.673534][T23182]  ? bpf_lsm_capable+0x9/0x20
[ 1194.673552][T23182]  ? security_capable+0x7e/0x2c0
[ 1194.673597][T23182]  genl_rcv_msg+0x614/0x7a0
[ 1194.673624][T23182]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1194.673645][T23182]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1194.673678][T23182]  netlink_rcv_skb+0x226/0x4a0
[ 1194.673697][T23182]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1194.673720][T23182]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1194.673750][T23182]  ? down_read+0x2be/0x330
[ 1194.673768][T23182]  genl_rcv+0x28/0x40
[ 1194.673822][T23182]  netlink_unicast+0x7bd/0x940
[ 1194.673847][T23182]  netlink_sendmsg+0x813/0xb40
[ 1194.673873][T23182]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1194.673897][T23182]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1194.673921][T23182]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1194.673938][T23182]  sock_sendmsg_nosec+0x13a/0x180
[ 1194.673960][T23182]  ____sys_sendmsg+0x54e/0x850
[ 1194.673981][T23182]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1194.674004][T23182]  ? import_iovec+0x73/0xa0
[ 1194.674022][T23182]  ___sys_sendmsg+0x2a5/0x360
[ 1194.674036][T23182]  ? __lock_acquire+0x6df/0x2e50
[ 1194.674054][T23182]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1194.674072][T23182]  ? futex_wait+0x2a2/0x390
[ 1194.674112][T23182]  ? __fget_files+0x2a/0x420
[ 1194.674129][T23182]  ? __fget_files+0x3a2/0x420
[ 1194.674153][T23182]  __x64_sys_sendmsg+0x1b1/0x290
[ 1194.674169][T23182]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1194.674198][T23182]  do_syscall_64+0x166/0x520
[ 1194.674216][T23182]  ? trace_irq_disable+0x3b/0x140
[ 1194.674228][T23182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.674246][T23182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.674259][T23182] RIP: 0033:0x7f587459e159
[ 1194.674274][T23182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1194.674287][T23182] RSP: 002b:00007f5875531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1194.674303][T23182] RAX: ffffffffffffffda RBX: 00007f5874825fa0 RCX: 00007f587459e159
[ 1194.674312][T23182] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1194.674320][T23182] RBP: 00007f5874635024 R08: 0000000000000000 R09: 0000000000000000
[ 1194.674329][T23182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1194.674336][T23182] R13: 00007f5874826038 R14: 00007f5874825fa0 R15: 00007ffce7331638
[ 1194.674359][T23182]  </TASK>
[ 1194.818159][T23185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11954'.
[ 1194.863980][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1195.078232][T23217] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1195.080970][T23217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1195.123270][T23198] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1195.544865][T23262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11971'.
[ 1195.548971][T23262] xfrm3: entered promiscuous mode
[ 1195.549267][T23262] xfrm3: entered allmulticast mode
[ 1195.549611][T23262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11971'.
[ 1195.903979][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1195.971041][T23289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11980'.
[ 1195.971093][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11980'.
[ 1196.022320][T23296] netlink: 'syz.2.11982': attribute type 12 has an invalid length.
[ 1196.022369][T23296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11982'.
[ 1196.198009][T23300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11984'.
[ 1196.202237][T23300] dummy0: mtu less than device minimum
[ 1196.317705][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11987'.
[ 1197.983961][    C0] net_ratelimit: 4 callbacks suppressed
[ 1197.984051][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1199.024071][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1199.394943][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11988'.
[ 1199.698413][T23332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11990'.
[ 1199.698724][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11990'.
[ 1199.740209][T23341] netlink: 'syz.2.11992': attribute type 23 has an invalid length.
[ 1199.740261][T23341] netlink: 'syz.2.11992': attribute type 11 has an invalid length.
[ 1199.790085][T23343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1199.948265][T23347] dummy0: mtu less than device minimum
[ 1199.964342][T23349] netlink: 'syz.0.11995': attribute type 1 has an invalid length.
[ 1199.968162][T23349] netlink: 'syz.0.11995': attribute type 1 has an invalid length.
[ 1200.030162][T23352] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1200.030888][T23351] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1200.064091][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1200.121070][T23360] netlink: ct_mark mask cannot be 0
[ 1200.121142][T23360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1200.409283][T23388] netlink: 'syz.2.12008': attribute type 2 has an invalid length.
[ 1200.427575][T23390] netlink: ct_mark mask cannot be 0
[ 1200.434022][T23388] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1200.434349][T23388] CPU: 0 UID: 0 PID: 23388 Comm: syz.2.12008 Not tainted syzkaller #0 PREEMPT(full) 
[ 1200.434377][T23388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1200.434384][T23388] Call Trace:
[ 1200.434388][T23388]  <TASK>
[ 1200.434393][T23388]  dump_stack_lvl+0xe8/0x150
[ 1200.434416][T23388]  sysfs_warn_dup+0x8e/0xa0
[ 1200.434430][T23388]  sysfs_do_create_link_sd+0xc0/0x110
[ 1200.434443][T23388]  device_add_class_symlinks+0x1cf/0x240
[ 1200.434458][T23388]  device_add+0x467/0xb80
[ 1200.434471][T23388]  wiphy_register+0x1fc8/0x2ff0
[ 1200.434488][T23388]  ? __pfx_wiphy_register+0x10/0x10
[ 1200.434499][T23388]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1200.434510][T23388]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1200.434522][T23388]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1200.434534][T23388]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1200.434551][T23388]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1200.434573][T23388]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1200.434587][T23388]  ? __asan_memset+0x22/0x50
[ 1200.434598][T23388]  ? __hrtimer_setup+0x1b7/0x260
[ 1200.434609][T23388]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1200.434618][T23388]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1200.434638][T23388]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1200.434645][T23388]  ? kstrndup+0xbd/0x160
[ 1200.434655][T23388]  ? kstrndup+0xbd/0x160
[ 1200.434663][T23388]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1200.434680][T23388]  genl_family_rcv_msg_doit+0x233/0x340
[ 1200.434695][T23388]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1200.434713][T23388]  ? bpf_lsm_capable+0x9/0x20
[ 1200.434724][T23388]  ? security_capable+0x7e/0x2c0
[ 1200.434736][T23388]  genl_rcv_msg+0x614/0x7a0
[ 1200.434750][T23388]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1200.434761][T23388]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1200.434778][T23388]  netlink_rcv_skb+0x226/0x4a0
[ 1200.434821][T23388]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1200.434839][T23388]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1200.434856][T23388]  ? down_read+0x2be/0x330
[ 1200.434867][T23388]  genl_rcv+0x28/0x40
[ 1200.434878][T23388]  netlink_unicast+0x7bd/0x940
[ 1200.434892][T23388]  netlink_sendmsg+0x813/0xb40
[ 1200.434908][T23388]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1200.434921][T23388]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1200.434934][T23388]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1200.434942][T23388]  sock_sendmsg_nosec+0x13a/0x180
[ 1200.434955][T23388]  ____sys_sendmsg+0x54e/0x850
[ 1200.434966][T23388]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1200.434978][T23388]  ? import_iovec+0x73/0xa0
[ 1200.434989][T23388]  ___sys_sendmsg+0x2a5/0x360
[ 1200.434997][T23388]  ? __lock_acquire+0x6df/0x2e50
[ 1200.435007][T23388]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1200.435017][T23388]  ? futex_wait+0x2a2/0x390
[ 1200.435040][T23388]  ? __fget_files+0x2a/0x420
[ 1200.435050][T23388]  ? __fget_files+0x3a2/0x420
[ 1200.435063][T23388]  __x64_sys_sendmsg+0x1b1/0x290
[ 1200.435073][T23388]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1200.435091][T23388]  do_syscall_64+0x166/0x520
[ 1200.435103][T23388]  ? trace_irq_disable+0x3b/0x140
[ 1200.435110][T23388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1200.435120][T23388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1200.435129][T23388] RIP: 0033:0x7fb36d79e159
[ 1200.435139][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1200.435146][T23388] RSP: 002b:00007fb36e73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1200.435156][T23388] RAX: ffffffffffffffda RBX: 00007fb36da25fa0 RCX: 00007fb36d79e159
[ 1200.435162][T23388] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[ 1200.435168][T23388] RBP: 00007fb36d835024 R08: 0000000000000000 R09: 0000000000000000
[ 1200.435173][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1200.435178][T23388] R13: 00007fb36da26038 R14: 00007fb36da25fa0 R15: 00007fff2a22dec8
[ 1200.435192][T23388]  </TASK>
[ 1200.543103][T23397] ip6erspan1: entered allmulticast mode
[ 1200.666552][T23399] ip6gretap19: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1201.645089][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.650141][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.657857][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.674820][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.686695][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.697532][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.706702][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.721171][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.732498][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.746312][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.751443][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.759671][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.766056][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.771528][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.777347][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.782496][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.790563][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.805240][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.818230][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.828329][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.833149][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.839344][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.846449][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.855426][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.868698][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.881294][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.891045][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.909290][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.922811][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.933549][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.945758][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.956471][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.968395][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.978982][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.989750][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.001865][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.012285][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.023336][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.036930][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.048593][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.064813][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.074981][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.081143][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.088320][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.095168][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.102070][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.111096][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.125962][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.182909][T23437] __nla_validate_parse: 11 callbacks suppressed
[ 1202.185325][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12020'.
[ 1202.188292][T23437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12020'.
[ 1202.286256][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.292042][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.295377][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.298367][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.301519][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.305038][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.308116][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.311247][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.314933][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.319280][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.322726][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.326674][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.329636][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.333214][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.336477][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.340429][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.344220][T23416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1202.822355][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12024'.
[ 1203.173982][    C0] net_ratelimit: 3 callbacks suppressed
[ 1203.174071][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1203.322464][T23474] wg2 speed is unknown, defaulting to 1000
[ 1203.822332][T23486] netlink: 'syz.1.12029': attribute type 10 has an invalid length.
[ 1203.868914][T23482] netlink: 'syz.0.12028': attribute type 3 has an invalid length.
[ 1203.982977][T23495] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[ 1203.988092][T23495] CPU: 1 UID: 0 PID: 23495 Comm: syz.2.12031 Not tainted syzkaller #0 PREEMPT(full) 
[ 1203.988151][T23495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1203.988163][T23495] Call Trace:
[ 1203.988170][T23495]  <TASK>
[ 1203.988177][T23495]  dump_stack_lvl+0xe8/0x150
[ 1203.988207][T23495]  sysfs_warn_dup+0x8e/0xa0
[ 1203.988231][T23495]  sysfs_do_create_link_sd+0xc0/0x110
[ 1203.988255][T23495]  device_add_class_symlinks+0x1cf/0x240
[ 1203.988301][T23495]  device_add+0x467/0xb80
[ 1203.988325][T23495]  wiphy_register+0x1fc8/0x2ff0
[ 1203.988355][T23495]  ? __pfx_wiphy_register+0x10/0x10
[ 1203.988372][T23495]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1203.988394][T23495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1203.988418][T23495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1203.988441][T23495]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1203.988471][T23495]  ? ieee80211_register_hw+0x19b1/0x4a50
[ 1203.988509][T23495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1203.988531][T23495]  ? __asan_memset+0x22/0x50
[ 1203.988550][T23495]  ? __hrtimer_setup+0x1b7/0x260
[ 1203.988569][T23495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1203.988587][T23495]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 1203.988622][T23495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1203.988636][T23495]  ? kstrndup+0xbd/0x160
[ 1203.988654][T23495]  ? kstrndup+0xbd/0x160
[ 1203.988669][T23495]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1203.988702][T23495]  genl_family_rcv_msg_doit+0x233/0x340
[ 1203.988728][T23495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1203.988757][T23495]  ? bpf_lsm_capable+0x9/0x20
[ 1203.988776][T23495]  ? security_capable+0x7e/0x2c0
[ 1203.988823][T23495]  genl_rcv_msg+0x614/0x7a0
[ 1203.988859][T23495]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1203.988885][T23495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1203.988915][T23495]  netlink_rcv_skb+0x226/0x4a0
[ 1203.988935][T23495]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1203.988959][T23495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1203.988987][T23495]  ? down_read+0x2be/0x330
[ 1203.989007][T23495]  genl_rcv+0x28/0x40
[ 1203.989027][T23495]  netlink_unicast+0x7bd/0x940
[ 1203.989051][T23495]  netlink_sendmsg+0x813/0xb40
[ 1203.989075][T23495]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1203.989097][T23495]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1203.989116][T23495]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1203.989133][T23495]  sock_sendmsg_nosec+0x13a/0x180
[ 1203.989153][T23495]  ____sys_sendmsg+0x54e/0x850
[ 1203.989173][T23495]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1203.989194][T23495]  ? import_iovec+0x73/0xa0
[ 1203.989213][T23495]  ___sys_sendmsg+0x2a5/0x360
[ 1203.989228][T23495]  ? __lock_acquire+0x6df/0x2e50
[ 1203.989247][T23495]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1203.989264][T23495]  ? futex_wait+0x2a2/0x390
[ 1203.989304][T23495]  ? __fget_files+0x2a/0x420
[ 1203.989322][T23495]  ? __fget_files+0x3a2/0x420
[ 1203.989346][T23495]  __x64_sys_sendmsg+0x1b1/0x290
[ 1203.989364][T23495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1203.989394][T23495]  do_syscall_64+0x166/0x520
[ 1203.989413][T23495]  ? trace_irq_disable+0x3b/0x140
[ 1203.989427][T23495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1203.989445][T23495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1203.989459][T23495] RIP: 0033:0x7fb36d79e159
[ 1203.989472][T23495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1203.989482][T23495] RSP: 002b:00007fb36e73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1203.989503][T23495] RAX: ffffffffffffffda RBX: 00007fb36da25fa0 RCX: 00007fb36d79e159
[ 1203.989513][T23495] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1203.989522][T23495] RBP: 00007fb36d835024 R08: 0000000000000000 R09: 0000000000000000
[ 1203.989533][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1203.989541][T23495] R13: 00007fb36da26038 R14: 00007fb36da25fa0 R15: 00007fff2a22dec8
[ 1203.989565][T23495]  </TASK>
[ 1204.043216][T23496] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12030'.
[ 1204.204776][T23499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12032'.
[ 1204.223922][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1204.274936][T23501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12033'.
[ 1204.341705][T23517] x_tables: duplicate underflow at hook 2
[ 1204.491266][T23536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12040'.
[ 1204.551191][T23544] No such timeout policy "s	"
[ 1204.553420][T23544] netlink: Failed to associated timeout policy 's	'
[ 1204.713529][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12042'.
[ 1204.721984][T23552] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1204.722061][T23552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1204.785086][T23559] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[ 1204.802581][T23560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12047'.
[ 1204.809247][T23560] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1204.910944][T23570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12049'.
[ 1204.914244][T23570] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1205.066734][T23583] openvswitch: netlink: Key 6 has unexpected len 20 expected 2
[ 1205.119331][T23589] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1205.122776][T23589] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1205.254029][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1206.056134][T23645] syzkaller0: entered promiscuous mode
[ 1206.059954][T23645] syzkaller0: entered allmulticast mode
[ 1206.300918][T23658] sctp: [Deprecated]: syz.0.12064 (pid 23658) Use of int in maxseg socket option.
[ 1206.300918][T23658] Use struct sctp_assoc_value instead
[ 1208.089910][T23676] __nla_validate_parse: 8 callbacks suppressed
[ 1208.089991][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1208.107018][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12068'.
[ 1208.159101][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1208.163203][T23676] 
[ 1208.164034][T23676] ======================================================
[ 1208.166235][T23676] WARNING: possible circular locking dependency detected
[ 1208.168883][T23676] syzkaller #0 Not tainted
[ 1208.170824][T23676] ------------------------------------------------------
[ 1208.173725][T23676] syz.0.12069/23676 is trying to acquire lock:
[ 1208.175763][T23676] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[ 1208.175882][T23685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12072'.
[ 1208.183481][T23676] 
[ 1208.183481][T23676] but task is already holding lock:
[ 1208.186630][T23676] ffff8881012d42a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[ 1208.190975][T23676] 
[ 1208.190975][T23676] which lock already depends on the new lock.
[ 1208.190975][T23676] 
[ 1208.195562][T23676] 
[ 1208.195562][T23676] the existing dependency chain (in reverse order) is:
[ 1208.200571][T23676] 
[ 1208.200571][T23676] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[ 1208.204333][T23676]        down_read+0x4a/0x330
[ 1208.206294][T23676]        kernfs_remove_by_name_ns+0x3f/0x140
[ 1208.208748][T23676]        internal_create_group+0x58e/0x1180
[ 1208.211224][T23676]        sysfs_update_groups+0x60/0x130
[ 1208.213534][T23676]        pmu_dev_alloc+0x29b/0x300
[ 1208.215695][T23676]        perf_event_sysfs_init+0x76/0x100
[ 1208.218067][T23676]        do_one_initcall+0x250/0x870
[ 1208.220309][T23676]        do_initcall_level+0x10a/0x1a0
[ 1208.222592][T23676]        do_initcalls+0x59/0xa0
[ 1208.224612][T23676]        kernel_init_freeable+0x29d/0x3e0
[ 1208.226974][T23676]        kernel_init+0x22/0x1d0
[ 1208.229019][T23676]        ret_from_fork+0x514/0xb70
[ 1208.231177][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.233352][T23676] 
[ 1208.233352][T23676] -> #9 (pmus_lock){+.+.}-{4:4}:
[ 1208.236270][T23676]        __mutex_lock+0x19d/0x1550
[ 1208.238397][T23676]        perf_event_init_cpu+0x1d1/0x7a0
[ 1208.240773][T23676]        cpuhp_invoke_callback+0x434/0x810
[ 1208.243258][T23676]        cpuhp_thread_fun+0x362/0x780
[ 1208.245484][T23676]        smpboot_thread_fn+0x565/0xa70
[ 1208.247731][T23676]        kthread+0x38b/0x480
[ 1208.249683][T23676]        ret_from_fork+0x514/0xb70
[ 1208.251854][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.254069][T23676] 
[ 1208.254069][T23676] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[ 1208.257177][T23676]        cpuhp_thread_fun+0x127/0x780
[ 1208.259345][T23676]        smpboot_thread_fn+0x565/0xa70
[ 1208.261518][T23676]        kthread+0x38b/0x480
[ 1208.263441][T23676]        ret_from_fork+0x514/0xb70
[ 1208.265535][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.267734][T23676] 
[ 1208.267734][T23676] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 1208.270764][T23676]        cpus_read_lock+0x42/0x160
[ 1208.272432][T23676]        static_key_slow_inc+0x12/0x30
[ 1208.274099][T23676]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[ 1208.275979][T23676]        nbd_genl_foreach_sock+0x265/0x450
[ 1208.278107][T23676]        nbd_genl_reconfigure+0xbbb/0x1040
[ 1208.280020][T23676]        genl_family_rcv_msg_doit+0x233/0x340
[ 1208.282264][T23676]        genl_rcv_msg+0x614/0x7a0
[ 1208.284353][T23676]        netlink_rcv_skb+0x226/0x4a0
[ 1208.286445][T23676]        genl_rcv+0x28/0x40
[ 1208.288358][T23676]        netlink_unicast+0x7bd/0x940
[ 1208.290459][T23676]        netlink_sendmsg+0x813/0xb40
[ 1208.292614][T23676]        sock_sendmsg_nosec+0x13a/0x180
[ 1208.294761][T23676]        ____sys_sendmsg+0x54e/0x850
[ 1208.296788][T23676]        ___sys_sendmsg+0x2a5/0x360
[ 1208.298874][T23676]        __x64_sys_sendmsg+0x1b1/0x290
[ 1208.300960][T23676]        do_syscall_64+0x166/0x520
[ 1208.302908][T23676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.305314][T23676] 
[ 1208.305314][T23676] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1208.308238][T23676]        __mutex_lock+0x19d/0x1550
[ 1208.310310][T23676]        nbd_queue_rq+0x373/0xff0
[ 1208.312353][T23676]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1208.314830][T23676]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1208.317547][T23676]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1208.320188][T23676]        blk_mq_run_work_fn+0x16c/0x300
[ 1208.322435][T23676]        process_scheduled_works+0xc3d/0x1630
[ 1208.324881][T23676]        worker_thread+0xa47/0xfb0
[ 1208.327043][T23676]        kthread+0x38b/0x480
[ 1208.328879][T23676]        ret_from_fork+0x514/0xb70
[ 1208.330907][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.332935][T23676] 
[ 1208.332935][T23676] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1208.335774][T23676]        __mutex_lock+0x19d/0x1550
[ 1208.337849][T23676]        nbd_queue_rq+0xc1/0xff0
[ 1208.339877][T23676]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1208.342308][T23676]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1208.345025][T23676]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1208.347591][T23676]        blk_mq_run_work_fn+0x16c/0x300
[ 1208.349830][T23676]        process_scheduled_works+0xc3d/0x1630
[ 1208.352246][T23676]        worker_thread+0xa47/0xfb0
[ 1208.354296][T23676]        kthread+0x38b/0x480
[ 1208.356150][T23676]        ret_from_fork+0x514/0xb70
[ 1208.358203][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.360358][T23676] 
[ 1208.360358][T23676] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1208.363146][T23676]        __synchronize_srcu+0xc9/0x2f0
[ 1208.365349][T23676]        elevator_switch+0x1e8/0x7b0
[ 1208.367500][T23676]        elevator_change+0x2fa/0x480
[ 1208.369695][T23676]        elevator_set_default+0x375/0x440
[ 1208.372028][T23676]        blk_register_queue+0x3f3/0x4e0
[ 1208.374295][T23676]        __add_disk+0x6cb/0xe30
[ 1208.376313][T23676]        add_disk_fwnode+0x100/0x3a0
[ 1208.378477][T23676]        nbd_dev_add+0x733/0xb60
[ 1208.380524][T23676]        nbd_init+0x168/0x1f0
[ 1208.382433][T23676]        do_one_initcall+0x250/0x870
[ 1208.384552][T23676]        do_initcall_level+0x10a/0x1a0
[ 1208.386740][T23676]        do_initcalls+0x59/0xa0
[ 1208.388711][T23676]        kernel_init_freeable+0x29d/0x3e0
[ 1208.391010][T23676]        kernel_init+0x22/0x1d0
[ 1208.392966][T23676]        ret_from_fork+0x514/0xb70
[ 1208.395028][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.397159][T23676] 
[ 1208.397159][T23676] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1208.400263][T23676]        __mutex_lock+0x19d/0x1550
[ 1208.402337][T23676]        elevator_change+0x1af/0x480
[ 1208.404478][T23676]        elevator_set_none+0xb5/0x140
[ 1208.406707][T23676]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1208.409300][T23676]        nbd_start_device+0x189/0xb30
[ 1208.411510][T23676]        nbd_genl_connect+0x167d/0x1cd0
[ 1208.413729][T23676]        genl_family_rcv_msg_doit+0x233/0x340
[ 1208.416230][T23676]        genl_rcv_msg+0x614/0x7a0
[ 1208.418320][T23676]        netlink_rcv_skb+0x226/0x4a0
[ 1208.420710][T23676]        genl_rcv+0x28/0x40
[ 1208.422653][T23676]        netlink_unicast+0x7bd/0x940
[ 1208.424886][T23676]        netlink_sendmsg+0x813/0xb40
[ 1208.427098][T23676]        sock_sendmsg_nosec+0x13a/0x180
[ 1208.429383][T23676]        ____sys_sendmsg+0x54e/0x850
[ 1208.431585][T23676]        ___sys_sendmsg+0x2a5/0x360
[ 1208.433727][T23676]        __x64_sys_sendmsg+0x1b1/0x290
[ 1208.436139][T23676]        do_syscall_64+0x166/0x520
[ 1208.438285][T23676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.440912][T23676] 
[ 1208.440912][T23676] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[ 1208.444288][T23676]        blk_alloc_queue+0x544/0x690
[ 1208.446455][T23676]        __blk_mq_alloc_disk+0x194/0x390
[ 1208.448778][T23676]        nbd_dev_add+0x494/0xb60
[ 1208.450451][T23676]        nbd_init+0x168/0x1f0
[ 1208.452021][T23676]        do_one_initcall+0x250/0x870
[ 1208.453723][T23676]        do_initcall_level+0x10a/0x1a0
[ 1208.455547][T23676]        do_initcalls+0x59/0xa0
[ 1208.457084][T23676]        kernel_init_freeable+0x29d/0x3e0
[ 1208.458936][T23676]        kernel_init+0x22/0x1d0
[ 1208.460934][T23676]        ret_from_fork+0x514/0xb70
[ 1208.462631][T23676]        ret_from_fork_asm+0x1a/0x30
[ 1208.464324][T23676] 
[ 1208.464324][T23676] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1208.466776][T23676]        fs_reclaim_acquire+0x71/0x100
[ 1208.468853][T23676]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[ 1208.471090][T23676]        alloc_inode+0xb8/0x1b0
[ 1208.472707][T23676]        iget_locked+0x131/0x6a0
[ 1208.474400][T23676]        kernfs_get_inode+0x4f/0x770
[ 1208.476193][T23676]        kernfs_get_tree+0x5cd/0x980
[ 1208.477941][T23676]        vfs_get_tree+0x92/0x2a0
[ 1208.479544][T23676]        do_new_mount+0x319/0xdc0
[ 1208.481228][T23676]        __se_sys_mount+0x31d/0x420
[ 1208.483074][T23676]        do_syscall_64+0x166/0x520
[ 1208.484872][T23676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.487125][T23676] 
[ 1208.487125][T23676] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1208.489714][T23676]        __lock_acquire+0x15ff/0x2e50
[ 1208.491636][T23676]        lock_acquire+0x115/0x350
[ 1208.493285][T23676]        down_write+0x96/0x200
[ 1208.495029][T23676]        kernfs_remove_by_name_ns+0x4e/0x140
[ 1208.497210][T23676]        _cfg80211_unregister_wdev+0x133/0x5a0
[ 1208.499267][T23676]        cfg80211_netdev_notifier_call+0x7a6/0x13b0
[ 1208.501283][T23676]        notifier_call_chain+0x1a5/0x3d0
[ 1208.503184][T23676]        unregister_netdevice_many_notify+0x17f9/0x2140
[ 1208.505673][T23676]        virt_wifi_event+0x234/0x280
[ 1208.507492][T23676]        notifier_call_chain+0x1a5/0x3d0
[ 1208.509318][T23676]        unregister_netdevice_many_notify+0x17f9/0x2140
[ 1208.511586][T23676]        rtnl_dellink+0x5be/0x810
[ 1208.513338][T23676]        rtnetlink_rcv_msg+0x802/0xc00
[ 1208.515187][T23676]        netlink_rcv_skb+0x226/0x4a0
[ 1208.516968][T23676]        netlink_unicast+0x7bd/0x940
[ 1208.518724][T23676]        netlink_sendmsg+0x813/0xb40
[ 1208.520478][T23676]        sock_sendmsg_nosec+0x13a/0x180
[ 1208.522408][T23676]        ____sys_sendmsg+0x54e/0x850
[ 1208.524149][T23676]        ___sys_sendmsg+0x2a5/0x360
[ 1208.525826][T23676]        __x64_sys_sendmsg+0x1b1/0x290
[ 1208.527585][T23676]        do_syscall_64+0x166/0x520
[ 1208.529653][T23676]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.532207][T23676] 
[ 1208.532207][T23676] other info that might help us debug this:
[ 1208.532207][T23676] 
[ 1208.535775][T23676] Chain exists of:
[ 1208.535775][T23676]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[ 1208.535775][T23676] 
[ 1208.540267][T23676]  Possible unsafe locking scenario:
[ 1208.540267][T23676] 
[ 1208.543165][T23676]        CPU0                    CPU1
[ 1208.544880][T23676]        ----                    ----
[ 1208.546586][T23676]   rlock(&root->kernfs_supers_rwsem);
[ 1208.548508][T23676]                                lock(pmus_lock);
[ 1208.550931][T23676]                                lock(&root->kernfs_supers_rwsem);
[ 1208.553858][T23676]   lock(&root->kernfs_rwsem);
[ 1208.555783][T23676] 
[ 1208.555783][T23676]  *** DEADLOCK ***
[ 1208.555783][T23676] 
[ 1208.558670][T23676] locks held by syz.0.12069/23676: 3, last CPU#0:
[ 1208.560727][T23676]  #0: ffffffff90250cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810
[ 1208.564267][T23676]  #1: ffff88810ced47a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x79c/0x13b0
[ 1208.568574][T23676]  #2: ffff8881012d42a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[ 1208.572908][T23676] 
[ 1208.572908][T23676] stack backtrace:
[ 1208.575256][T23676] CPU: 0 UID: 0 PID: 23676 Comm: syz.0.12069 Not tainted syzkaller #0 PREEMPT(full) 
[ 1208.578911][T23676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1208.582743][T23676] Call Trace:
[ 1208.583934][T23676]  <TASK>
[ 1208.584884][T23676]  dump_stack_lvl+0xe8/0x150
[ 1208.586352][T23676]  print_circular_bug+0x2e2/0x300
[ 1208.587960][T23676]  check_noncircular+0x12f/0x150
[ 1208.589513][T23676]  __lock_acquire+0x15ff/0x2e50
[ 1208.591059][T23676]  lock_acquire+0x115/0x350
[ 1208.592495][T23676]  ? kernfs_remove_by_name_ns+0x4e/0x140
[ 1208.594446][T23676]  down_write+0x96/0x200
[ 1208.595792][T23676]  ? kernfs_remove_by_name_ns+0x4e/0x140
[ 1208.597836][T23676]  ? __pfx_down_write+0x10/0x10
[ 1208.599556][T23676]  ? down_read+0x2be/0x330
[ 1208.601341][T23676]  kernfs_remove_by_name_ns+0x4e/0x140
[ 1208.603494][T23676]  _cfg80211_unregister_wdev+0x133/0x5a0
[ 1208.605714][T23676]  cfg80211_netdev_notifier_call+0x7a6/0x13b0
[ 1208.608169][T23676]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[ 1208.610691][T23676]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1208.612721][T23676]  ? __flush_work+0x101/0xca0
[ 1208.614261][T23676]  ? __flush_work+0x101/0xca0
[ 1208.615783][T23676]  ? __lock_acquire+0x6df/0x2e50
[ 1208.617354][T23676]  ? __pfx___flush_work+0x10/0x10
[ 1208.618965][T23676]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1208.620553][T23676]  ? xfrm_dev_policy_flush+0x43f/0x4b0
[ 1208.622531][T23676]  ? __local_bh_enable_ip+0xd6/0x140
[ 1208.624645][T23676]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1208.626723][T23676]  ? xfrm_dev_policy_flush+0x43f/0x4b0
[ 1208.628893][T23676]  ? __local_bh_enable_ip+0xd6/0x140
[ 1208.630978][T23676]  ? xfrm_dev_policy_flush+0x43f/0x4b0
[ 1208.633118][T23676]  ? ipmr_device_event+0x1fd/0x220
[ 1208.635167][T23676]  notifier_call_chain+0x1a5/0x3d0
[ 1208.637216][T23676]  unregister_netdevice_many_notify+0x17f9/0x2140
[ 1208.639744][T23676]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1208.642436][T23676]  ? ipvlan_device_event+0x146/0xfa0
[ 1208.644560][T23676]  ? ipvlan_device_event+0x4aa/0xfa0
[ 1208.646648][T23676]  ? __pfx_virt_wifi_rx_handler+0x10/0x10
[ 1208.648781][T23676]  virt_wifi_event+0x234/0x280
[ 1208.650391][T23676]  ? __pfx_virt_wifi_event+0x10/0x10
[ 1208.652077][T23676]  ? pppoe_device_event+0x80/0x6c0
[ 1208.653972][T23676]  ? hdlc_device_event+0x70/0x2f0
[ 1208.655968][T23676]  notifier_call_chain+0x1a5/0x3d0
[ 1208.657995][T23676]  unregister_netdevice_many_notify+0x17f9/0x2140
[ 1208.660553][T23676]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1208.663214][T23676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.665622][T23676]  ? __pfx_veth_dellink+0x10/0x10
[ 1208.667614][T23676]  ? __pfx_veth_dellink+0x10/0x10
[ 1208.669651][T23676]  rtnl_dellink+0x5be/0x810
[ 1208.671446][T23676]  ? __pfx_rtnl_dellink+0x10/0x10
[ 1208.673462][T23676]  ? lock_acquire+0x115/0x350
[ 1208.675359][T23676]  ? lock_acquire+0x115/0x350
[ 1208.677238][T23676]  ? __pfx_rtnl_dellink+0x10/0x10
[ 1208.679174][T23676]  ? __pfx_rtnl_dellink+0x10/0x10
[ 1208.680900][T23676]  rtnetlink_rcv_msg+0x802/0xc00
[ 1208.682636][T23676]  ? netlink_sendmsg+0x5d4/0xb40
[ 1208.684257][T23676]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1208.686009][T23676]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1208.687693][T23676]  ? __lock_acquire+0x6df/0x2e50
[ 1208.689559][T23676]  netlink_rcv_skb+0x226/0x4a0
[ 1208.691257][T23676]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1208.693288][T23676]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1208.695061][T23676]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1208.696777][T23676]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1208.698517][T23676]  netlink_unicast+0x7bd/0x940
[ 1208.700078][T23676]  netlink_sendmsg+0x813/0xb40
[ 1208.701797][T23676]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1208.703570][T23676]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1208.705460][T23676]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1208.707241][T23676]  sock_sendmsg_nosec+0x13a/0x180
[ 1208.708921][T23676]  ____sys_sendmsg+0x54e/0x850
[ 1208.710596][T23676]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1208.712316][T23676]  ? import_iovec+0x73/0xa0
[ 1208.713891][T23676]  ___sys_sendmsg+0x2a5/0x360
[ 1208.715506][T23676]  ? __lock_acquire+0x6df/0x2e50
[ 1208.717195][T23676]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1208.718967][T23676]  ? futex_wait+0x2a2/0x390
[ 1208.720485][T23676]  ? __fget_files+0x2a/0x420
[ 1208.722034][T23676]  ? __fget_files+0x3a2/0x420
[ 1208.723567][T23676]  __x64_sys_sendmsg+0x1b1/0x290
[ 1208.725180][T23676]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1208.726994][T23676]  do_syscall_64+0x166/0x520
[ 1208.728641][T23676]  ? trace_irq_disable+0x3b/0x140
[ 1208.730340][T23676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.732323][T23676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.734232][T23676] RIP: 0033:0x7f587459e159
[ 1208.735701][T23676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1208.741967][T23676] RSP: 002b:00007f5875531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1208.744655][T23676] RAX: ffffffffffffffda RBX: 00007f5874825fa0 RCX: 00007f587459e159
[ 1208.747318][T23676] RDX: 0000000024048004 RSI: 0000200000000200 RDI: 0000000000000005
[ 1208.750165][T23676] RBP: 00007f5874635024 R08: 0000000000000000 R09: 0000000000000000
[ 1208.752794][T23676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1208.755384][T23676] R13: 00007f5874826038 R14: 00007f5874825fa0 R15: 00007ffce7331638
[ 1208.757998][T23676]  </TASK>
[ 1208.760003][    C0] net_ratelimit: 5 callbacks suppressed
[ 1208.760055][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1208.769083][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1208.783767][T23679] bridge13: entered promiscuous mode
[ 1208.836848][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1208.847139][T23676] ieee80211 phy1250: Selected rate control algorithm 'minstrel_ht'
[ 1209.814014][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1210.854395][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1211.903963][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1212.943972][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1213.973850][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1215.013943][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1216.054182][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1217.093912][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1218.133912][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
