last executing test programs:

1.50262656s ago: executing program 0 (id=5493):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES16=r1], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10)
mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r1, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x61, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc, 0x8004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r6}, 0x50)
write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7100800000"], 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={<r8=>r5, &(0x7f00000003c0)='/^\\\x00', 0x480000, &(0x7f0000000540)={@_ha_fsid={[0x8, 0x80]}, {0xfffc, 0x3, 0x3, 0x9}}, 0x1, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x7fff})
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000700)={0x4, 0xb0}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r10, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0xfffffffffffffe65)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x2f, 0x9, 0x70bd2a, 0x4, {0x4}, [@nested={0xa, 0x11, 0x0, 0x1, [@generic="0000dedaf75d"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4a805}, 0x95)

1.414737241s ago: executing program 0 (id=5495):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5d)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
socket$inet6(0xa, 0x2, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5d) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)

1.340395976s ago: executing program 0 (id=5496):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000210029014a3b9e6126bd7000ffdbdf250a000000000000001c000000080018004e204e245da6eddf4c40c3d000ae0e4b3b9e883c8591db37930d206dbbc050f4a5fcf8a5cd6f1736037b358851a5517ff917afde346f8b523e56c92ffd618ce90dde2ccbd2e40119f9406229f7eb651d7b4a1b2e8d2cfd5c7c90515c3be6683d9ee342d91f1371dcd4d8d50ef44fa2278408117f35046fdfe5ed0c90560e73eb476bd16d30f03fbd98c91cf3deabac94085a41aad53cf3960bcf"], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) (async)
r6 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r6, 0x2}, 0x20) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
r7 = socket$igmp(0x2, 0x3, 0x2) (async)
socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r8, 0x0, 0x25, 0x0, @void}, 0x10) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r9)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, 0x0, 0x8050) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, r8) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)
socket$igmp(0x2, 0x3, 0x2)

1.130291254s ago: executing program 1 (id=5497):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x3, 0x4, 0x1}}, 0x2e)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000210029014a3b9e6126bd7000ffdbdf250a000000000000001c000000080018004e204e245da6eddf4c40c3d000ae0e4b3b9e883c8591db37930d206dbbc050f4a5fcf8a5cd6f1736037b358851a5517ff917afde346f8b523e56c92ffd618ce90dde2ccbd2e40119f9406229f7eb651d7b4a1b2e8d2cfd5c7c90515c3be6683d9ee342d91f1371dcd4d8d50ef44fa2278408117f35046fdfe5ed0c90560e73eb476bd16d30f03fbd98c91cf3deabac94085a41aad53cf3960bcf"], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r5 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r6, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r9)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, 0x0, 0x8050)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
splice(r5, &(0x7f0000000080)=0x5, r4, &(0x7f00000000c0)=0x4, 0x4, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r6)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, 0x0)

1.129972935s ago: executing program 0 (id=5498):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e00000009000000810000000100000008c00100", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040800"/17, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x840, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000000) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r4=>0x0}) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async)
sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)

748.409919ms ago: executing program 1 (id=5500):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000700)="b3853fdff6", 0x5)

659.208413ms ago: executing program 1 (id=5501):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2}, 0xa}}, 0x26)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c810, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xe8, 0x6, @broadcast}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000210029014a3b9e6126bd7000ffdbdf250a000000000000001c000000080018004e204e245da6eddf4c40c3d000ae0e4b3b9e883c8591db37930d206dbbc050f4a5fcf8a5cd6f1736037b358851a5517ff917afde346f8b523e56c92ffd618ce90dde2ccbd2e40119f9406229f7eb651d7b4a1b2e8d2cfd5c7c90515c3be6683d9ee342d91f1371dcd4d8d50ef44fa2278408117f35046fdfe5ed0c90560e73eb476bd16d30f03fbd98c91cf3deabac94085a41aad53cf3960bcf"], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r8, 0x0, 0x25, 0x0, @void}, 0x10) (async, rerun: 64)
syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f00000000c0), 0xffffffffffffff5b) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r9) (async, rerun: 64)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, 0x0, 0x8050) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)

658.66822ms ago: executing program 2 (id=5502):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
close(0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="81010000000000000000030000000800010000000000700007800c00018008000100", @ANYRES32=r5], 0xbc}}, 0x20040404) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc000000", @ANYRES16=<r6=>r4, @ANYBLOB="81010000000000000000030000000800010000000000700007800c00018008000100", @ANYRES32=r5], 0xbc}}, 0x20040404)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000180)="a0dec485cb4e366c4245f5d12286be74c84fabb84ea77d9eafc15f97fe6c3ce91c173db73a671bfb853af4a09f34c15c2893ae642dc4fa92cc9ff93b80135681769550ebb2cdaf9ccbb2314afce7e6457ec336a661e7281e6b3a3956d8e1810fc740892af2ebb70500ccc0908e478d3f59977b5601901e2732cd5d800200e65c5c135ef7a595136b83bb0c8c358f286e36e3c5"}, 0x20)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYRESDEC=r0], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

570.381541ms ago: executing program 1 (id=5503):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000040020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

570.082668ms ago: executing program 2 (id=5504):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async)
r1 = socket(0x1, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async, rerun: 32)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000800}, 0x40001) (async, rerun: 32)
r4 = socket(0x11, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r5=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0xd4, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x9a, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"}}}}}, 0x0) (async)
write$rfkill(r6, &(0x7f0000000540)={0x0, 0x0, 0x3, 0x41}, 0x8)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) (async)
socket$inet(0x2, 0xa, 0x8) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

567.388584ms ago: executing program 1 (id=5505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000600)={r2, 0x9}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0x5, 0xfff9, 0x5, 0xffffffff, 0x3, 0x1, 0x471, 0x779ac80e, r2}, &(0x7f0000000440)=0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x583}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x51ab}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40844)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4)
getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r2, 0xd, 0x9}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async)
socket(0x2, 0x80805, 0x0) (async)
sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000600)={r2, 0x9}, 0x8) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0x5, 0xfff9, 0x5, 0xffffffff, 0x3, 0x1, 0x471, 0x779ac80e, r2}, &(0x7f0000000440)=0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x583}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x51ab}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40844) (async)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) (async)
getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) (async)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r2, 0xd, 0x9}, 0x8) (async)

250.236304ms ago: executing program 1 (id=5506):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2004c004}, 0x400e000) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2004c004}, 0x400e000)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x5a, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @broadcast}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x97, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x40}, 0x200000e0)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) (async)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r7, 0x0, &(0x7f0000000200)) (async)
getsockname$packet(r7, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x8010)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

159.902899ms ago: executing program 2 (id=5507):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvfrom$llc(r2, 0x0, 0x0, 0x2100, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

153.558519ms ago: executing program 0 (id=5508):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x2040800}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x851) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x851)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r6 = socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0xfdc5) (async)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0xfdc5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r7, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r8)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, 0x0, 0x8050)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c20000030000000000000800450000700000000009019078ac1e0001ac14140c03019078032400004500000000010081008400077f000001640100fe863d00000003001208009a8c5903040000527c706ca03a061609020007651442eb000e7434954373561de584b703c80009e706d30bd224f80005cfa11c000000"], 0x0) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c20000030000000000000800450000700000000009019078ac1e0001ac14140c03019078032400004500000000010081008400077f000001640100fe863d00000003001208009a8c5903040000527c706ca03a061609020007651442eb000e7434954373561de584b703c80009e706d30bd224f80005cfa11c000000"], 0x0)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x8, 0x1, 0xf9, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x8, 0x1, 0xf9, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

100.433727ms ago: executing program 2 (id=5509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

99.936825ms ago: executing program 0 (id=5510):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000900000000000007b02400a58a1200000000002e0061004ebee5c5c405fa26c6b53bf3909533da2091138ece5b6ee808ed5333f04e052ecbb74ef4c464a240b4094f97f9e1353a64d6a4f89da39bcad2ea2778e33a862fcaa19c52dfa3c2c85159ab041056bd95b6bb9a3ef986593eca450c889ce924ac"], 0x0, 0x2f, 0x0, 0x1}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac00000082914745365efe7b896d9285e82824f3932415c01e33c74a89dbe101fb11ba4f6861853ec6b8df1ee773ca21be9228cf8f14a12be2f80ae94444416f5e34cae4381ef073f3e566e9d6488cd02156fa2de2d97e7330e3d3b00906551cda4a3029f4ebd1db73118dbc047580e7209d8305", @ANYRES16=0x0, @ANYBLOB="140926bd7000fedbdf254b0000000e00a80066697273746e616d650000000c00a70005000000000000000c00a600ce00000000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a700580d00000000000008000300020000000f00a8007365636f6e646e616d6500000f00a9007365636f6e646e616d650000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000004040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xc, 0x3}, {0x9, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0xac}]}, 0x24}, 0x1, 0x0, 0x0, 0x8095}, 0x20000841)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdf2500000000e50b19430703ad35f418498cb392f04302a9e498d1801f4b2a610c3a2c704675122ea6191fb6fe3d5aad1d72247f3035882c91879ab598386c431e77108e39b39f", @ANYRES32=0x0, @ANYBLOB="137c03002b1a07002c0012800e000100697036677265746170000000180002801400060000000000000000000000ffffe000000108000d0000000010"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x9, 0x6, 0x40)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="bd0700000000000002c14b467594c994004e21ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000001363e8bdb8b4f0480fd7808f64dfaaf2d04830a9f2bc7d952a65508b5e4d4d086b094430494a1168a91eeb68951faddb145bc0515531493f35a4d5d36a575890263942cb55bc142c4904873362385259f47288d607eeceba2af282cd65afb2dd4620996f9fcf2300813bea4d27ec0d"], 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r8, 0x3}, &(0x7f00000000c0)=0x8)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

50.422834ms ago: executing program 2 (id=5511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x7, 0x0, 0x5, 0x2, 0x5775d27c, 0x154, 0x100}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004000"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, <r4=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x21, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186900000500000000000000010000009500000000000000950000000000000018550000010000000000000000000000182b0000", @ANYRES32, @ANYBLOB="0000000009000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0xa, 0x2, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5], &(0x7f0000000fc0)=[{0x0, 0x2, 0x3, 0x8}], 0x10, 0x9}, 0x94)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0xb0b0, 0x8, 0xc018, 0x6, 0x86], 0x0, 0x0}, 0x78)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x70, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004600)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="00042abd7000fbdbdf254a000000080003", @ANYRES32=r12, @ANYBLOB="1f91b9004da1f4f4cf0c009900070000000c000000c96fb7014062542d46993e0fb8f139ee2a91aeb38885f3e96ef7a4298ad1ed3e284560155f73941e2f5a1bc2a7d1e74b791637b6fa76c829c151fac591c57b73fca7060c780ecd65b645c00e8eca32ba3480ed0e87ab6561428ae34a8bd7f6eb478d5a11e8931d269d7b26f130a8a2aae10a5b3921dee72cd104023aed521f094db2353379777b521dcefcf60300bb2614a87748a1976da244929d968d721e"], 0x28}, 0x1, 0x0, 0x0, 0x4c55}, 0x40488c0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x20004880)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x13, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, 0x0)

0s ago: executing program 2 (id=5512):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x5}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000075193448a982aa148c56ab430e9f13cf0807bf05528eddea8d9d083c0e26b33c8929f49ae757dfcb1827e15c5c7f5c04d025915ca217f2c131b11e78cac8ff774723e20f3922a10e9d084f35866d944b277907006f9b4ed9eba39e9256ef54059e53a281e4fa53b2a9052e95f0612433737ea1d22afb6f8bc52f25896ce2e19d87de2f6e51bc7f8593ab5ed097fcad23258d0a64e014750fdf6d09508ba7993de78d79ec702906873157e287e64d10944eb2c5ebc6d338c3e5a3bcee5481abed6e32860000", @ANYRES16=r3, @ANYBLOB="030f00000000000000000700000030000280080002000000000004000400f6ff04001c000380080001000000000000000100000000000800010000000000"], 0x44}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="603f3cc3", @ANYRES16=r3, @ANYBLOB="000526bd7000fedbdf2503000000100002800800020005000000040004003c0002800c00038008000200af0d00000800010001000080080001000e00000004000400040004000400040008000200080000000800010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000900)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="bc01b2b78f9ab9137c03002b1a07002c0012800e000100697036677265746170000000180002801400060000000000000000000000ffffe000010108000d00000000f1"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="02106d78196d5b2f0ff14bd31e0a56aabb2dbde418fe7a208a1e5fa42b9c1b0da699dd3f65e08acfbabece8308d869473c447f3b2ad131f624eebf658304a15b9329035c2d500157f11ecff6192691b597fe4df9f040e33049c26f704df79bfb3aeb5bda199485a3f885da344c6e2e18e1f9d118ef7b6a6832b6e7"], 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r8, 0x3}, &(0x7f00000000c0)=0x8)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 0 (id=5513):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4)
sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc885}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000300)={0x1, 0x22, "668dce571612f1af8a2151ae5406b0a4c37d0281712883334aea0cf1ebe1fde9632a"})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88845110400140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="76e096fa3a622ff986fc5f6700faa34115da0eab62e15d3ff395c73a7ab7d61bb52b42c9028b11b7d2e32666b2b895cabd891367"], 0x44}}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r11)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x3c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "3caecdf5f8d1853d75a758f3168a1ecd"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000015}, 0x8000)
r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r16 = openat$cgroup_ro(r15, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$cgroup_subtree(r16, &(0x7f0000000f40)=ANY=[], 0x10448)

kernel console output (not intermixed with test programs):

000000000
[  545.208922][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.208927][T23619] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  545.208940][T23619]  </TASK>
[  545.868799][T23645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4204'.
[  545.982732][T23653] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  546.336503][T23662] xt_CT: No such helper "netbios-ns"
[  546.972055][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'.
[  546.987685][T23710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'.
[  547.219893][T23717] __nla_validate_parse: 2 callbacks suppressed
[  547.223092][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'.
[  547.231689][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4220'.
[  548.497503][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4224'.
[  548.546262][T23733] dvmrp1: entered allmulticast mode
[  548.638201][T23738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4226'.
[  548.999999][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4228'.
[  549.000548][T23743] openvswitch: netlink: Flow actions attr not present in new flow.
[  549.006331][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 90 seconds
[  549.006362][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 90 seconds
[  549.006378][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 90 seconds
[  549.006394][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 90 seconds
[  549.962107][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'.
[  549.965339][T23777] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4234'.
[  550.816795][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'.
[  550.831807][T23779] syzkaller0: entered promiscuous mode
[  550.834229][T23779] syzkaller0: entered allmulticast mode
[  550.856805][T23791] xt_TPROXY: Can be used only with -p tcp or -p udp
[  550.859492][T23791] x_tables: duplicate underflow at hook 3
[  550.906346][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'.
[  550.910088][T23793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4238'.
[  551.179203][T23805] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  553.364873][T23827] __nla_validate_parse: 1 callbacks suppressed
[  553.367378][T23828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4244'.
[  553.370855][T23828] 8021q: VLANs not supported on sit0
[  553.373180][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4244'.
[  553.377224][T23827] 8021q: VLANs not supported on sit0
[  553.382459][T23827] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4244'.
[  553.391176][T23829] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[  553.396323][T23829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4245'.
[  554.568138][T23871] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  554.574808][T23871] CPU: 1 UID: 0 PID: 23871 Comm: syz.2.4253 Not tainted syzkaller #0 PREEMPT(full) 
[  554.574852][T23871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.574861][T23871] Call Trace:
[  554.574868][T23871]  <TASK>
[  554.574874][T23871]  dump_stack_lvl+0xe8/0x150
[  554.574898][T23871]  sysfs_warn_dup+0x8e/0xa0
[  554.574917][T23871]  sysfs_do_create_link_sd+0xc0/0x110
[  554.574937][T23871]  device_add_class_symlinks+0x1cf/0x240
[  554.574959][T23871]  device_add+0x467/0xb80
[  554.574980][T23871]  wiphy_register+0x1fc8/0x2ff0
[  554.575008][T23871]  ? __pfx_wiphy_register+0x10/0x10
[  554.575024][T23871]  ? __pfx_netdev_run_todo+0x10/0x10
[  554.575039][T23871]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  554.575059][T23871]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  554.575081][T23871]  ieee80211_register_hw+0x3d3d/0x4a50
[  554.575109][T23871]  ? ieee80211_register_hw+0x19b1/0x4a50
[  554.575145][T23871]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  554.575166][T23871]  ? __asan_memset+0x22/0x50
[  554.575184][T23871]  ? __hrtimer_setup+0x1b7/0x260
[  554.575199][T23871]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  554.575215][T23871]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  554.575249][T23871]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  554.575260][T23871]  ? kstrndup+0xbd/0x160
[  554.575277][T23871]  ? kstrndup+0xbd/0x160
[  554.575291][T23871]  hwsim_new_radio_nl+0xd8b/0xf90
[  554.575320][T23871]  genl_family_rcv_msg_doit+0x233/0x340
[  554.575345][T23871]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  554.575371][T23871]  ? bpf_lsm_capable+0x9/0x20
[  554.575389][T23871]  ? security_capable+0x7e/0x2c0
[  554.575407][T23871]  genl_rcv_msg+0x614/0x7a0
[  554.575431][T23871]  ? __pfx_genl_rcv_msg+0x10/0x10
[  554.575447][T23871]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  554.575466][T23871]  ? __pfx_ref_tracker_free+0x10/0x10
[  554.575487][T23871]  netlink_rcv_skb+0x226/0x4a0
[  554.575503][T23871]  ? __pfx_genl_rcv_msg+0x10/0x10
[  554.575523][T23871]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  554.575548][T23871]  ? down_read+0x2be/0x330
[  554.575565][T23871]  genl_rcv+0x28/0x40
[  554.575582][T23871]  netlink_unicast+0x7bd/0x940
[  554.575604][T23871]  netlink_sendmsg+0x813/0xb40
[  554.575676][T23871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.575709][T23871]  ? apparmor_socket_sendmsg+0x98/0x360
[  554.575728][T23871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.575743][T23871]  sock_sendmsg_nosec+0x13a/0x180
[  554.575762][T23871]  ____sys_sendmsg+0x54e/0x850
[  554.575782][T23871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.575803][T23871]  ? import_iovec+0x73/0xa0
[  554.575820][T23871]  ___sys_sendmsg+0x2a5/0x360
[  554.575833][T23871]  ? __lock_acquire+0x6df/0x2e50
[  554.575849][T23871]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.575866][T23871]  ? futex_wait+0x2a2/0x390
[  554.575905][T23871]  ? __fget_files+0x2a/0x420
[  554.575921][T23871]  ? __fget_files+0x3a2/0x420
[  554.575944][T23871]  __x64_sys_sendmsg+0x1b1/0x290
[  554.575960][T23871]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.575990][T23871]  do_syscall_64+0x166/0x520
[  554.576008][T23871]  ? trace_irq_disable+0x3b/0x140
[  554.576020][T23871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.576037][T23871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.576049][T23871] RIP: 0033:0x7fcfd079e159
[  554.576063][T23871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.576073][T23871] RSP: 002b:00007fcfd1582028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.576089][T23871] RAX: ffffffffffffffda RBX: 00007fcfd0a26090 RCX: 00007fcfd079e159
[  554.576098][T23871] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  554.576105][T23871] RBP: 00007fcfd0835024 R08: 0000000000000000 R09: 0000000000000000
[  554.576134][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.576143][T23871] R13: 00007fcfd0a26128 R14: 00007fcfd0a26090 R15: 00007ffdcb6d4898
[  554.576164][T23871]  </TASK>
[  555.211223][T23894] ip6gretap9: default qdisc (pfifo_fast) fail, fallback to noqueue
[  555.582080][T23908] pim6reg: entered allmulticast mode
[  555.588455][T23908] pim6reg: left allmulticast mode
[  555.640083][T23914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4262'.
[  555.697140][T23920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4266'.
[  555.703111][T23922] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4266'.
[  555.868268][T23935] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  556.358535][T23945] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  556.491261][T23956] netlink: 'syz.2.4277': attribute type 9 has an invalid length.
[  556.494957][T23956] netlink: 'syz.2.4277': attribute type 5 has an invalid length.
[  556.500969][T23956] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4277'.
[  556.530565][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4276'.
[  556.712505][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4280'.
[  559.235889][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 210 seconds
[  559.677804][T23986] IPVS: length: 103 != 24
[  560.666145][T24003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4287'.
[  560.688367][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'.
[  560.710385][T24005] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  560.710530][T24005] CPU: 0 UID: 0 PID: 24005 Comm: syz.1.4288 Not tainted syzkaller #0 PREEMPT(full) 
[  560.710546][T24005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  560.710554][T24005] Call Trace:
[  560.710559][T24005]  <TASK>
[  560.710565][T24005]  dump_stack_lvl+0xe8/0x150
[  560.710589][T24005]  sysfs_warn_dup+0x8e/0xa0
[  560.710608][T24005]  sysfs_do_create_link_sd+0xc0/0x110
[  560.710626][T24005]  device_add_class_symlinks+0x1cf/0x240
[  560.710648][T24005]  device_add+0x467/0xb80
[  560.710696][T24005]  wiphy_register+0x1fc8/0x2ff0
[  560.710724][T24005]  ? __pfx_wiphy_register+0x10/0x10
[  560.710738][T24005]  ? __pfx_netdev_run_todo+0x10/0x10
[  560.710753][T24005]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  560.710771][T24005]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  560.710793][T24005]  ieee80211_register_hw+0x3d3d/0x4a50
[  560.710819][T24005]  ? ieee80211_register_hw+0x19b1/0x4a50
[  560.710850][T24005]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  560.710867][T24005]  ? __asan_memset+0x22/0x50
[  560.710884][T24005]  ? __hrtimer_setup+0x1b7/0x260
[  560.710899][T24005]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  560.710913][T24005]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  560.710947][T24005]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  560.710958][T24005]  ? kstrndup+0xbd/0x160
[  560.710973][T24005]  ? kstrndup+0xbd/0x160
[  560.710986][T24005]  hwsim_new_radio_nl+0xd8b/0xf90
[  560.711013][T24005]  genl_family_rcv_msg_doit+0x233/0x340
[  560.711035][T24005]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  560.711061][T24005]  ? bpf_lsm_capable+0x9/0x20
[  560.711076][T24005]  ? security_capable+0x7e/0x2c0
[  560.711095][T24005]  genl_rcv_msg+0x614/0x7a0
[  560.711119][T24005]  ? __pfx_genl_rcv_msg+0x10/0x10
[  560.711139][T24005]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  560.711168][T24005]  netlink_rcv_skb+0x226/0x4a0
[  560.711183][T24005]  ? __pfx_genl_rcv_msg+0x10/0x10
[  560.711201][T24005]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  560.711223][T24005]  ? down_read+0x2be/0x330
[  560.711249][T24005]  genl_rcv+0x28/0x40
[  560.711265][T24005]  netlink_unicast+0x7bd/0x940
[  560.711286][T24005]  netlink_sendmsg+0x813/0xb40
[  560.711308][T24005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  560.711330][T24005]  ? apparmor_socket_sendmsg+0x98/0x360
[  560.711351][T24005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  560.711367][T24005]  sock_sendmsg_nosec+0x13a/0x180
[  560.711386][T24005]  ____sys_sendmsg+0x54e/0x850
[  560.711405][T24005]  ? __pfx_____sys_sendmsg+0x10/0x10
[  560.711426][T24005]  ? import_iovec+0x73/0xa0
[  560.711443][T24005]  ___sys_sendmsg+0x2a5/0x360
[  560.711456][T24005]  ? __lock_acquire+0x6df/0x2e50
[  560.711473][T24005]  ? __pfx____sys_sendmsg+0x10/0x10
[  560.711489][T24005]  ? futex_wait+0x2a2/0x390
[  560.711530][T24005]  ? __fget_files+0x2a/0x420
[  560.711547][T24005]  ? __fget_files+0x3a2/0x420
[  560.711572][T24005]  __x64_sys_sendmsg+0x1b1/0x290
[  560.711590][T24005]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  560.711622][T24005]  do_syscall_64+0x166/0x520
[  560.711642][T24005]  ? trace_irq_disable+0x3b/0x140
[  560.711683][T24005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.711703][T24005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.711716][T24005] RIP: 0033:0x7f50d3b9e159
[  560.711730][T24005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.711742][T24005] RSP: 002b:00007f50d4a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  560.711757][T24005] RAX: ffffffffffffffda RBX: 00007f50d3e25fa0 RCX: 00007f50d3b9e159
[  560.711767][T24005] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  560.711776][T24005] RBP: 00007f50d3c35024 R08: 0000000000000000 R09: 0000000000000000
[  560.711785][T24005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  560.711793][T24005] R13: 00007f50d3e26038 R14: 00007f50d3e25fa0 R15: 00007fffbeebe188
[  560.711817][T24005]  </TASK>
[  560.958507][T24018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.967849][T24018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.043443][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.049735][T24022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.075886][T24018] netlink: 'syz.2.4291': attribute type 2 has an invalid length.
[  561.196043][T24021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.524947][T24019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.866512][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'.
[  561.866564][T24044] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4297'.
[  561.988786][T24047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4298'.
[  562.184145][T24054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4300'.
[  562.425298][T24061] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  562.961126][T24066] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4304'.
[  562.993350][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4305'.
[  562.997165][T24069] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4305'.
[  563.074969][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  563.075032][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  563.349375][T24072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4303'.
[  563.609376][T24081] xt_CT: No such helper "netbios-ns"
[  564.249332][T24116] xt_CT: No such helper "netbios-ns"
[  564.349239][T24123] netlink: 'syz.1.4319': attribute type 12 has an invalid length.
[  565.271905][T24166] openvswitch: netlink: Flow actions attr not present in new flow.
[  566.621838][T24201] block nbd5: server does not support multiple connections per device.
[  566.625746][T24201] block nbd5: shutting down sockets
[  566.650336][T24197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.857006][T24231] __nla_validate_parse: 9 callbacks suppressed
[  567.857077][T24231] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4346'.
[  568.059271][T24237] tipc: New replicast peer: 172.20.20.187
[  568.066478][T24237] tipc: Enabled bearer <udp:syz0>, priority 10
[  568.778657][T24251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4349'.
[  569.135867][T24250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.138724][T24252] syzkaller0: entered promiscuous mode
[  569.139743][T24252] syzkaller0: entered allmulticast mode
[  569.239169][T24265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'.
[  569.242966][T24265] openvswitch: netlink: Flow actions attr not present in new flow.
[  569.341872][T24260] tipc: Resetting bearer <eth:syzkaller0>
[  569.356120][T24265] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4351'.
[  569.399555][T24260] tipc: Resetting bearer <eth:syzkaller0>
[  569.429134][T24260] tipc: Disabling bearer <eth:syzkaller0>
[  569.787275][T24299] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4364'.
[  569.881230][T24317] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4365'.
[  569.899230][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'.
[  569.902516][T24323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4366'.
[  570.361172][T24334] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4369'.
[  570.365956][T24334] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  570.514008][T24341] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  571.040880][T24362] netlink: 'syz.0.4375': attribute type 5 has an invalid length.
[  571.040933][T24362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4375'.
[  571.468904][T24377] netlink: 'syz.0.4378': attribute type 29 has an invalid length.
[  571.667427][T24390] netlink: 'syz.0.4380': attribute type 1 has an invalid length.
[  571.667469][T24390] netlink: 'syz.0.4380': attribute type 4 has an invalid length.
[  571.674144][T24390] netlink: 'syz.0.4380': attribute type 1 has an invalid length.
[  571.674183][T24390] netlink: 'syz.0.4380': attribute type 4 has an invalid length.
[  571.771303][T24397] syzkaller1: entered promiscuous mode
[  571.773372][T24397] syzkaller1: entered allmulticast mode
[  571.787224][T24397] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  572.028765][T24406] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  572.516219][T24407] dummy0: entered promiscuous mode
[  572.735578][T24400] dummy0: left promiscuous mode
[  574.951875][T24418] __nla_validate_parse: 6 callbacks suppressed
[  574.955551][T24418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'.
[  574.955599][T24418] openvswitch: netlink: Flow actions attr not present in new flow.
[  575.313125][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'.
[  575.343059][T24443] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4396'.
[  575.348528][T24443] openvswitch: netlink: Message has 4 unknown bytes.
[  575.455980][T24454] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4399'.
[  575.892196][T24462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'.
[  575.895677][T24462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4401'.
[  576.222202][T24474] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  576.226757][T24474] CPU: 1 UID: 0 PID: 24474 Comm: syz.2.4405 Not tainted syzkaller #0 PREEMPT(full) 
[  576.226786][T24474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  576.226793][T24474] Call Trace:
[  576.226797][T24474]  <TASK>
[  576.226801][T24474]  dump_stack_lvl+0xe8/0x150
[  576.226817][T24474]  sysfs_warn_dup+0x8e/0xa0
[  576.226829][T24474]  sysfs_do_create_link_sd+0xc0/0x110
[  576.226843][T24474]  device_add_class_symlinks+0x1cf/0x240
[  576.226856][T24474]  device_add+0x467/0xb80
[  576.226869][T24474]  wiphy_register+0x1fc8/0x2ff0
[  576.226887][T24474]  ? __pfx_wiphy_register+0x10/0x10
[  576.226897][T24474]  ? __pfx_netdev_run_todo+0x10/0x10
[  576.226906][T24474]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  576.226918][T24474]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  576.226929][T24474]  ieee80211_register_hw+0x3d3d/0x4a50
[  576.226947][T24474]  ? ieee80211_register_hw+0x19b1/0x4a50
[  576.226968][T24474]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  576.226980][T24474]  ? __asan_memset+0x22/0x50
[  576.226992][T24474]  ? __hrtimer_setup+0x1b7/0x260
[  576.227003][T24474]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  576.227013][T24474]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  576.227032][T24474]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  576.227039][T24474]  ? kstrndup+0xbd/0x160
[  576.227049][T24474]  ? kstrndup+0xbd/0x160
[  576.227057][T24474]  hwsim_new_radio_nl+0xd8b/0xf90
[  576.227074][T24474]  genl_family_rcv_msg_doit+0x233/0x340
[  576.227108][T24474]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  576.227124][T24474]  ? bpf_lsm_capable+0x9/0x20
[  576.227135][T24474]  ? security_capable+0x7e/0x2c0
[  576.227146][T24474]  genl_rcv_msg+0x614/0x7a0
[  576.227159][T24474]  ? __pfx_genl_rcv_msg+0x10/0x10
[  576.227170][T24474]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  576.227181][T24474]  ? __pfx_ref_tracker_free+0x10/0x10
[  576.227201][T24474]  netlink_rcv_skb+0x226/0x4a0
[  576.227211][T24474]  ? __pfx_genl_rcv_msg+0x10/0x10
[  576.227224][T24474]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  576.227240][T24474]  ? down_read+0x2be/0x330
[  576.227251][T24474]  genl_rcv+0x28/0x40
[  576.227263][T24474]  netlink_unicast+0x7bd/0x940
[  576.227280][T24474]  netlink_sendmsg+0x813/0xb40
[  576.227294][T24474]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.227308][T24474]  ? apparmor_socket_sendmsg+0x98/0x360
[  576.227321][T24474]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.227329][T24474]  sock_sendmsg_nosec+0x13a/0x180
[  576.227341][T24474]  ____sys_sendmsg+0x54e/0x850
[  576.227351][T24474]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.227363][T24474]  ? import_iovec+0x73/0xa0
[  576.227373][T24474]  ___sys_sendmsg+0x2a5/0x360
[  576.227380][T24474]  ? __lock_acquire+0x6df/0x2e50
[  576.227390][T24474]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.227400][T24474]  ? futex_wait+0x2a2/0x390
[  576.227422][T24474]  ? __fget_files+0x2a/0x420
[  576.227432][T24474]  ? __fget_files+0x3a2/0x420
[  576.227445][T24474]  __x64_sys_sendmsg+0x1b1/0x290
[  576.227455][T24474]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.227472][T24474]  do_syscall_64+0x166/0x520
[  576.227482][T24474]  ? trace_irq_disable+0x3b/0x140
[  576.227489][T24474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.227499][T24474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.227507][T24474] RIP: 0033:0x7fcfd079e159
[  576.227515][T24474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.227522][T24474] RSP: 002b:00007fcfd15a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.227532][T24474] RAX: ffffffffffffffda RBX: 00007fcfd0a25fa0 RCX: 00007fcfd079e159
[  576.227537][T24474] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000045
[  576.227542][T24474] RBP: 00007fcfd0835024 R08: 0000000000000000 R09: 0000000000000000
[  576.227547][T24474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.227551][T24474] R13: 00007fcfd0a26038 R14: 00007fcfd0a25fa0 R15: 00007ffdcb6d4898
[  576.227565][T24474]  </TASK>
[  576.565165][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'.
[  576.622527][T24488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4409'.
[  576.764837][T24497] xt_CT: No such helper "netbios-ns"
[  576.795288][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4412'.
[  576.959628][T24512] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4414'.
[  579.078529][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 120 seconds
[  579.082974][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 120 seconds
[  579.083001][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 120 seconds
[  579.083018][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 120 seconds
[  580.026447][T24550] __nla_validate_parse: 2 callbacks suppressed
[  580.026504][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'.
[  580.086516][T24547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4420'.
[  580.086729][T24547] nbd: socks must be embedded in a SOCK_ITEM attr
[  580.093208][T24547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4420'.
[  580.097244][T24547] nbd: socks must be embedded in a SOCK_ITEM attr
[  580.944499][T24587] syzkaller0: entered promiscuous mode
[  580.944616][T24587] syzkaller0: entered allmulticast mode
[  580.971410][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4430'.
[  581.365415][T24615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  581.368805][T24615] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4435'.
[  581.586166][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4438'.
[  581.589737][T24635] openvswitch: netlink: Flow actions attr not present in new flow.
[  582.017923][T24667] netlink: 'syz.2.4439': attribute type 12 has an invalid length.
[  582.572699][   T57] block nbd5: Receive control failed (result -32)
[  582.623137][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'.
[  582.628096][T24683] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4443'.
[  582.749678][T24685] blkio.reset_stats is deprecated
[  582.848878][T24690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4445'.
[  583.227329][T24704] xt_CT: No such helper "netbios-ns"
[  583.269513][T24708] netlink: 'syz.1.4450': attribute type 2 has an invalid length.
[  583.278810][T24708] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  583.282542][T24708] CPU: 1 UID: 0 PID: 24708 Comm: syz.1.4450 Not tainted syzkaller #0 PREEMPT(full) 
[  583.282580][T24708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  583.282587][T24708] Call Trace:
[  583.282595][T24708]  <TASK>
[  583.282601][T24708]  dump_stack_lvl+0xe8/0x150
[  583.282632][T24708]  sysfs_warn_dup+0x8e/0xa0
[  583.282670][T24708]  sysfs_do_create_link_sd+0xc0/0x110
[  583.282689][T24708]  device_add_class_symlinks+0x1cf/0x240
[  583.282740][T24708]  device_add+0x467/0xb80
[  583.282762][T24708]  wiphy_register+0x1fc8/0x2ff0
[  583.282792][T24708]  ? __pfx_wiphy_register+0x10/0x10
[  583.282812][T24708]  ? __pfx_netdev_run_todo+0x10/0x10
[  583.282830][T24708]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  583.282851][T24708]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  583.282872][T24708]  ieee80211_register_hw+0x3d3d/0x4a50
[  583.282899][T24708]  ? ieee80211_register_hw+0x19b1/0x4a50
[  583.282935][T24708]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  583.282955][T24708]  ? __asan_memset+0x22/0x50
[  583.282973][T24708]  ? __hrtimer_setup+0x1b7/0x260
[  583.282987][T24708]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  583.282997][T24708]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  583.283016][T24708]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  583.283023][T24708]  ? kstrndup+0xbd/0x160
[  583.283033][T24708]  ? kstrndup+0xbd/0x160
[  583.283041][T24708]  hwsim_new_radio_nl+0xd8b/0xf90
[  583.283059][T24708]  genl_family_rcv_msg_doit+0x233/0x340
[  583.283073][T24708]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  583.283091][T24708]  ? bpf_lsm_capable+0x9/0x20
[  583.283102][T24708]  ? security_capable+0x7e/0x2c0
[  583.283113][T24708]  genl_rcv_msg+0x614/0x7a0
[  583.283129][T24708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  583.283140][T24708]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  583.283156][T24708]  netlink_rcv_skb+0x226/0x4a0
[  583.283166][T24708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  583.283178][T24708]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  583.283193][T24708]  ? down_read+0x2be/0x330
[  583.283202][T24708]  genl_rcv+0x28/0x40
[  583.283212][T24708]  netlink_unicast+0x7bd/0x940
[  583.283225][T24708]  netlink_sendmsg+0x813/0xb40
[  583.283238][T24708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.283250][T24708]  ? apparmor_socket_sendmsg+0x98/0x360
[  583.283263][T24708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.283271][T24708]  sock_sendmsg_nosec+0x13a/0x180
[  583.283283][T24708]  ____sys_sendmsg+0x54e/0x850
[  583.283294][T24708]  ? __pfx_____sys_sendmsg+0x10/0x10
[  583.283305][T24708]  ? import_iovec+0x73/0xa0
[  583.283315][T24708]  ___sys_sendmsg+0x2a5/0x360
[  583.283323][T24708]  ? __lock_acquire+0x6df/0x2e50
[  583.283333][T24708]  ? __pfx____sys_sendmsg+0x10/0x10
[  583.283343][T24708]  ? futex_wait+0x2a2/0x390
[  583.283366][T24708]  ? __fget_files+0x2a/0x420
[  583.283375][T24708]  ? __fget_files+0x3a2/0x420
[  583.283389][T24708]  __x64_sys_sendmsg+0x1b1/0x290
[  583.283398][T24708]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  583.283415][T24708]  do_syscall_64+0x166/0x520
[  583.283426][T24708]  ? trace_irq_disable+0x3b/0x140
[  583.283433][T24708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.283443][T24708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.283451][T24708] RIP: 0033:0x7f50d3b9e159
[  583.283460][T24708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  583.283467][T24708] RSP: 002b:00007f50d4a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  583.283478][T24708] RAX: ffffffffffffffda RBX: 00007f50d3e25fa0 RCX: 00007f50d3b9e159
[  583.283484][T24708] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  583.283489][T24708] RBP: 00007f50d3c35024 R08: 0000000000000000 R09: 0000000000000000
[  583.283494][T24708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  583.283499][T24708] R13: 00007f50d3e26038 R14: 00007f50d3e25fa0 R15: 00007fffbeebe188
[  583.283512][T24708]  </TASK>
[  583.514578][T24709] xt_ecn: cannot match TCP bits for non-tcp packets
[  583.848415][T24736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.986492][T24721] tipc: Resetting bearer <eth:team0>
[  585.074674][T10433] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.074761][T10433] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.075097][T10433] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.075139][T10433] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.075195][T10433] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.075223][T10433] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.075255][T10433] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.075283][T10433] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.175210][T24750] netlink: 'syz.2.4458': attribute type 1 has an invalid length.
[  585.190337][T24750] 8021q: adding VLAN 0 to HW filter on device bond11
[  586.821063][T24729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  586.822651][T24756] __nla_validate_parse: 2 callbacks suppressed
[  586.822751][T24756] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4459'.
[  586.963322][T24767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  586.971383][T24767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.029390][T24767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.663171][T24784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'.
[  587.709155][T24786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4467'.
[  587.995197][T24788] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  588.982667][T24813] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  588.982755][T24813] CPU: 1 UID: 0 PID: 24813 Comm: syz.1.4472 Not tainted syzkaller #0 PREEMPT(full) 
[  588.982791][T24813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  588.982801][T24813] Call Trace:
[  588.982806][T24813]  <TASK>
[  588.982814][T24813]  dump_stack_lvl+0xe8/0x150
[  588.982837][T24813]  sysfs_warn_dup+0x8e/0xa0
[  588.982857][T24813]  sysfs_do_create_link_sd+0xc0/0x110
[  588.982877][T24813]  device_add_class_symlinks+0x1cf/0x240
[  588.982901][T24813]  device_add+0x467/0xb80
[  588.982942][T24813]  wiphy_register+0x1fc8/0x2ff0
[  588.982973][T24813]  ? __pfx_wiphy_register+0x10/0x10
[  588.982991][T24813]  ? __pfx_netdev_run_todo+0x10/0x10
[  588.983008][T24813]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  588.983027][T24813]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  588.983050][T24813]  ieee80211_register_hw+0x3d3d/0x4a50
[  588.983079][T24813]  ? ieee80211_register_hw+0x19b1/0x4a50
[  588.983117][T24813]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  588.983139][T24813]  ? __asan_memset+0x22/0x50
[  588.983158][T24813]  ? __hrtimer_setup+0x1b7/0x260
[  588.983176][T24813]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  588.983192][T24813]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  588.983232][T24813]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  588.983246][T24813]  ? kstrndup+0xbd/0x160
[  588.983262][T24813]  ? kstrndup+0xbd/0x160
[  588.983277][T24813]  hwsim_new_radio_nl+0xd8b/0xf90
[  588.983308][T24813]  genl_family_rcv_msg_doit+0x233/0x340
[  588.983334][T24813]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  588.983365][T24813]  ? bpf_lsm_capable+0x9/0x20
[  588.983386][T24813]  ? security_capable+0x7e/0x2c0
[  588.983404][T24813]  genl_rcv_msg+0x614/0x7a0
[  588.983428][T24813]  ? __pfx_genl_rcv_msg+0x10/0x10
[  588.983447][T24813]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  588.983475][T24813]  netlink_rcv_skb+0x226/0x4a0
[  588.983493][T24813]  ? __pfx_genl_rcv_msg+0x10/0x10
[  588.983513][T24813]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  588.983539][T24813]  ? down_read+0x2be/0x330
[  588.983557][T24813]  genl_rcv+0x28/0x40
[  588.983575][T24813]  netlink_unicast+0x7bd/0x940
[  588.983597][T24813]  netlink_sendmsg+0x813/0xb40
[  588.983617][T24813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.983639][T24813]  ? apparmor_socket_sendmsg+0x98/0x360
[  588.983661][T24813]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.983677][T24813]  sock_sendmsg_nosec+0x13a/0x180
[  588.983697][T24813]  ____sys_sendmsg+0x54e/0x850
[  588.983713][T24813]  ? __pfx_____sys_sendmsg+0x10/0x10
[  588.983762][T24813]  ? import_iovec+0x73/0xa0
[  588.983778][T24813]  ___sys_sendmsg+0x2a5/0x360
[  588.983791][T24813]  ? __lock_acquire+0x6df/0x2e50
[  588.983806][T24813]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.983823][T24813]  ? futex_wait+0x2a2/0x390
[  588.983863][T24813]  ? __fget_files+0x2a/0x420
[  588.983878][T24813]  ? __fget_files+0x3a2/0x420
[  588.983899][T24813]  __x64_sys_sendmsg+0x1b1/0x290
[  588.983913][T24813]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.983943][T24813]  do_syscall_64+0x166/0x520
[  588.983960][T24813]  ? trace_irq_disable+0x3b/0x140
[  588.983971][T24813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.983988][T24813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.984000][T24813] RIP: 0033:0x7f50d3b9e159
[  588.984013][T24813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.984024][T24813] RSP: 002b:00007f50d4a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.984040][T24813] RAX: ffffffffffffffda RBX: 00007f50d3e25fa0 RCX: 00007f50d3b9e159
[  588.984050][T24813] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  588.984059][T24813] RBP: 00007f50d3c35024 R08: 0000000000000000 R09: 0000000000000000
[  588.984068][T24813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.984076][T24813] R13: 00007f50d3e26038 R14: 00007f50d3e25fa0 R15: 00007fffbeebe188
[  588.984100][T24813]  </TASK>
[  589.315214][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 240 seconds
[  589.360559][T24822] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4474'.
[  589.707941][T24841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4478'.
[  589.798522][T24841] netlink: 'syz.2.4478': attribute type 1 has an invalid length.
[  589.967591][T24861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4482'.
[  591.013108][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'.
[  592.361526][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4502'.
[  592.366602][T24940] nbd: must specify at least one socket
[  592.480973][T24942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.712945][T24945] sock: sock_set_timeout: `syz.0.4503' (pid 24945) tries to set negative timeout
[  593.012011][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'.
[  593.015532][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'.
[  593.257811][T24973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4509'.
[  593.352167][T24979] pimreg: entered allmulticast mode
[  593.521273][T24992] syzkaller1: left promiscuous mode
[  593.523709][T24992] syzkaller1: left allmulticast mode
[  593.740936][T24999] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4516'.
[  593.994468][T25004] sctp: [Deprecated]: syz.1.4518 (pid 25004) Use of int in max_burst socket option.
[  593.994468][T25004] Use struct sctp_assoc_value instead
[  594.128620][T24977] pimreg: left allmulticast mode
[  595.022474][T25028] macsec0: entered promiscuous mode
[  595.027575][T25028] bridge0: entered promiscuous mode
[  595.333535][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4526'.
[  595.692234][T25048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4527'.
[  596.103430][T25059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.109681][T25059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.283550][T25067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.291959][T25067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.575052][T25061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.787997][T25080] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  597.016707][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'.
[  597.467950][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'.
[  597.530098][T25110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.552772][T25114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  598.513435][T25137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4545'.
[  598.520459][T25137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4545'.
[  598.691443][T25145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4547'.
[  598.699659][T25145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4547'.
[  598.712423][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4547'.
[  598.717141][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'.
[  599.022804][T25157] netlink: 'syz.1.4554': attribute type 1 has an invalid length.
[  599.035254][T25157] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4554'.
[  599.370944][T25169] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4556'.
[  599.792550][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'.
[  600.128044][T25198] netlink: 'syz.1.4564': attribute type 1 has an invalid length.
[  600.130647][T25198] netlink: 'syz.1.4564': attribute type 4 has an invalid length.
[  600.825842][T25214] netlink: 'syz.2.4570': attribute type 23 has an invalid length.
[  600.862690][T25216] No such timeout policy "s	"
[  600.865113][T25216] netlink: Failed to associated timeout policy 's	'
[  601.511318][T25250] syzkaller0: entered promiscuous mode
[  601.521799][T25250] syzkaller0: entered allmulticast mode
[  601.737090][T25264] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20000
[  602.221380][T25277] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  602.660706][T25304] __nla_validate_parse: 38 callbacks suppressed
[  602.666791][T25304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4591'.
[  602.668830][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'.
[  602.668842][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4590'.
[  602.673266][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'.
[  602.673279][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4590'.
[  602.988085][T25313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4593'.
[  603.449464][T25332] netlink: 'syz.1.4600': attribute type 15 has an invalid length.
[  603.470955][T25332] bridge0: port 4(wlan1) entered blocking state
[  603.473179][T25332] bridge0: port 4(wlan1) entered disabled state
[  603.480309][T25332] mac80211_hwsim hwsim392 wlan1: entered allmulticast mode
[  603.487734][T25332] mac80211_hwsim hwsim392 wlan1: entered promiscuous mode
[  603.519339][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'.
[  603.522471][T25337] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4601'.
[  603.756710][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'.
[  603.844071][T25362] netlink: 'syz.1.4609': attribute type 1 has an invalid length.
[  603.847338][T25362] netlink: 'syz.1.4609': attribute type 4 has an invalid length.
[  603.850661][T25362] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4609'.
[  605.163169][T25454] syzkaller1: entered promiscuous mode
[  605.165314][T25454] syzkaller1: entered allmulticast mode
[  605.517927][T25461] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  606.749234][T25512] syzkaller1: entered promiscuous mode
[  606.757536][T25512] syzkaller1: entered allmulticast mode
[  607.769575][T25546] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  607.938622][T25562] __nla_validate_parse: 10 callbacks suppressed
[  607.938685][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4655'.
[  607.948753][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'.
[  607.948813][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4655'.
[  607.963023][T25562] 8021q: adding VLAN 0 to HW filter on device bond12
[  608.016851][T25570] openvswitch: netlink: Message has 8 unknown bytes.
[  608.532281][T25608] xt_TCPMSS: Only works on TCP SYN packets
[  608.540362][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'.
[  608.559178][T25608] nbd: nbd1 already in use
[  608.619549][T25618] netlink: 'syz.0.4665': attribute type 23 has an invalid length.
[  608.622965][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'.
[  608.702672][T25620] netlink: 'syz.2.4666': attribute type 29 has an invalid length.
[  608.758094][T25625] netlink: 'syz.0.4665': attribute type 23 has an invalid length.
[  608.761171][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'.
[  608.828558][T25633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4666'.
[  609.231134][T25651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4669'.
[  609.257895][T25651] 8021q: adding VLAN 0 to HW filter on device bond13
[  609.677740][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 150 seconds
[  609.677808][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 150 seconds
[  609.677847][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 150 seconds
[  609.677876][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 150 seconds
[  609.734941][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'.
[  609.737803][T25664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4671'.
[  609.880662][T25679] netlink: 'syz.1.4672': attribute type 23 has an invalid length.
[  609.945273][T25668] No such timeout policy "s	"
[  609.946999][T25668] netlink: Failed to associated timeout policy 's	'
[  610.372539][T25726] ip_tables: iptables: counters copy to user failed while replacing table
[  610.546370][T25741] batman_adv: batadv0: Adding interface: macvtap0
[  610.548873][T25741] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.557703][T25741] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  611.792698][T25776] netlink: 'syz.2.4695': attribute type 23 has an invalid length.
[  611.798888][T25776] No such timeout policy "s	"
[  611.801088][T25776] netlink: Failed to associated timeout policy 's	'
[  611.809933][T25777] netlink: 'syz.2.4695': attribute type 23 has an invalid length.
[  611.816253][T25776] No such timeout policy "s	"
[  611.818563][T25776] netlink: Failed to associated timeout policy 's	'
[  612.320918][T25862] netlink: 'syz.1.4700': attribute type 23 has an invalid length.
[  612.384372][T25867] No such timeout policy "s	"
[  612.387765][T25867] netlink: Failed to associated timeout policy 's	'
[  613.016361][T25785] workqueue: Failed to create a rescuer kthread for wq "nfc51_nci_rx_wq": -EINTR
[  613.087750][T25957] __nla_validate_parse: 5 callbacks suppressed
[  613.087819][T25957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4703'.
[  613.210710][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  613.268714][T25963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'.
[  613.324711][T25957] bond12: entered allmulticast mode
[  613.368370][T25961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4704'.
[  614.450038][T26005] xt_CT: No such helper "netbios-ns"
[  615.915564][T26039] xt_CT: No such helper "netbios-ns"
[  616.015476][T26039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4722'.
[  616.303485][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'.
[  616.481535][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4731'.
[  616.482232][T26072] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4731'.
[  617.570271][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4737'.
[  617.583233][T26090] openvswitch: netlink: Flow actions attr not present in new flow.
[  617.590857][T26090] netlink: 'syz.0.4737': attribute type 19 has an invalid length.
[  617.595022][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'.
[  617.599726][T26090] netlink: 'syz.0.4737': attribute type 19 has an invalid length.
[  618.161607][T26115] __nla_validate_parse: 2 callbacks suppressed
[  618.165038][T26115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4741'.
[  618.168977][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4741'.
[  618.172952][T26115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4741'.
[  618.339904][T26119] xt_CT: No such helper "netbios-ns"
[  618.402595][T26125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4745'.
[  618.420902][T26125] syzkaller0: entered promiscuous mode
[  618.423091][T26125] syzkaller0: entered allmulticast mode
[  619.232952][T26137] x_tables: duplicate underflow at hook 3
[  619.396645][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 270 seconds
[  619.503183][T26155] x_tables: duplicate underflow at hook 3
[  620.409451][T26167] gre6: entered promiscuous mode
[  620.411244][T26167] gre6: entered allmulticast mode
[  620.487962][T26181] ip6gretap0: entered promiscuous mode
[  620.490304][T26181] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  620.509341][T26181] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  620.513067][T26181] ip6gretap0: left promiscuous mode
[  620.518564][T26181] bond0 (unregistering): Released all slaves
[  620.556524][T26183] xt_CT: No such helper "netbios-ns"
[  621.710364][T26211] netlink: 564 bytes leftover after parsing attributes in process `syz.1.4766'.
[  621.862161][T26221] bridge0: entered promiscuous mode
[  621.862920][T26221] bridge0: entered allmulticast mode
[  621.963193][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4769'.
[  622.225587][T26239] netlink: 'syz.0.4772': attribute type 1 has an invalid length.
[  622.225633][T26239] netlink: 'syz.0.4772': attribute type 2 has an invalid length.
[  622.235788][T26239] openvswitch: netlink: IPv4 tunnel dst address is zero
[  622.414583][T26246] netlink: 'syz.2.4773': attribute type 9 has an invalid length.
[  622.418957][T26246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'.
[  622.466065][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'.
[  622.484278][T26240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4774'.
[  622.830180][T26261] netlink: 'syz.1.4776': attribute type 4 has an invalid length.
[  622.830789][T26261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4776'.
[  623.455778][T26272] netlink: 'syz.0.4778': attribute type 23 has an invalid length.
[  623.459059][T26272] netlink: 'syz.0.4778': attribute type 11 has an invalid length.
[  623.678443][T26274] xt_CT: No such helper "netbios-ns"
[  623.780476][T26289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4783'.
[  624.515138][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  624.515212][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  624.640179][T26329] ip_tables: iptables: counters copy to user failed while replacing table
[  625.267494][T26349] bond13 (unregistering): Released all slaves
[  625.287275][T26338] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  627.218850][T26405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4808'.
[  627.219362][T26405] openvswitch: netlink: Flow actions attr not present in new flow.
[  627.326655][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'.
[  627.333231][T26407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4810'.
[  627.346231][T26410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4809'.
[  627.354128][T26409] netlink: 'syz.1.4807': attribute type 1 has an invalid length.
[  627.461719][T26409] bond13: option mode: invalid value (10)
[  627.466259][T26414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4811'.
[  627.471190][T26409] bond13 (unregistering): Released all slaves
[  627.655311][T26409] : renamed from dummy0
[  627.949701][T26420] bond13: Unable to set up delay as MII monitoring is disabled
[  628.093835][T26420] bond13 (unregistering): Released all slaves
[  628.329940][T26440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'.
[  628.333527][T26440] block nbd6: Unsupported socket: should be TCP or UNIX.
[  628.532203][T26454] netlink: 'syz.0.4820': attribute type 23 has an invalid length.
[  628.605449][T26456] No such timeout policy "s	"
[  628.607471][T26456] netlink: Failed to associated timeout policy 's	'
[  628.923218][T26473] batman_adv: batadv0: Adding interface: veth0
[  628.927274][T26473] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.941744][T26473] batman_adv: batadv0: Interface activated: veth0
[  628.969305][T26473] batman_adv: batadv0: Removing interface: macvtap0
[  628.974609][T26473] batman_adv: batadv0: Interface deactivated: veth0
[  628.974654][T26473] batman_adv: batadv0: Removing interface: veth0
[  629.202525][T26481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4827'.
[  630.371922][T26519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.591142][T26536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.599229][T26536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.662146][T26537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.542407][ T5043] udevd[5043]: worker [13699] /devices/virtual/block/nbd1 timeout; kill it
[  633.549802][ T5043] udevd[5043]: seq 21375 '/devices/virtual/block/nbd1' killed
[  633.552910][ T5043] udevd[5043]: worker [13255] /devices/virtual/block/nbd2 is taking a long time
[  633.611904][T26544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4840'.
[  633.616386][T26544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4840'.
[  633.616461][T26544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4840'.
[  633.636319][T26544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4840'.
[  634.001650][T26581] ip_tables: iptables: counters copy to user failed while replacing table
[  634.001843][T26579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4846'.
[  634.082494][T26585] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  634.747241][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4853'.
[  634.760753][T26607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.785636][T26608] syzkaller0: entered promiscuous mode
[  634.788188][T26608] syzkaller0: entered allmulticast mode
[  635.559281][T26624] bond5: entered allmulticast mode
[  635.565570][T26622] bond5: left allmulticast mode
[  635.795963][T26637] C: renamed from veth1_to_team
[  635.805181][T26637] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4860'.
[  636.187641][T26661] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  636.281310][T26662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.729478][T26684] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4872'.
[  636.729533][T26684] openvswitch: netlink: Flow actions attr not present in new flow.
[  636.738408][T26684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4872'.
[  636.745723][T26684] ip_tables: iptables: counters copy to user failed while replacing table
[  636.762492][T26684] tipc: Enabled bearer <udp:s>, priority 10
[  637.312063][T26695] IPv6: NLM_F_REPLACE set, but no existing node found!
[  637.395919][T26703] syzkaller0: entered promiscuous mode
[  637.397936][T26703] syzkaller0: entered allmulticast mode
[  639.712445][ T7931] tipc: Node number set to 7405569
[  639.932882][T26739] netlink: 'syz.0.4883': attribute type 12 has an invalid length.
[  639.936986][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 180 seconds
[  639.937015][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 180 seconds
[  639.937029][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 180 seconds
[  639.937045][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 180 seconds
[  640.929283][T26742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  640.952775][T26753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.401652][T26799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4901'.
[  642.817637][T26826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.825029][T26826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.974650][T26830] syzkaller1: entered promiscuous mode
[  642.974689][T26830] syzkaller1: entered allmulticast mode
[  643.050641][T26836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.406213][T26833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.686905][T26875] syzkaller1: entered promiscuous mode
[  643.688864][T26875] syzkaller1: entered allmulticast mode
[  643.829919][T26891] syzkaller1: left promiscuous mode
[  643.831764][T26891] syzkaller1: left allmulticast mode
[  644.057087][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'.
[  644.061789][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'.
[  644.128916][T26901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4920'.
[  644.132466][T26901] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[  644.141779][T26901] geneve5: entered promiscuous mode
[  644.785098][T26911] netlink: 'syz.0.4924': attribute type 29 has an invalid length.
[  644.804895][T26913] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4924'.
[  645.411249][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4925'.
[  645.511064][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'.
[  645.753018][T26939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4932'.
[  646.097086][T26957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.103038][T26957] netlink: 'syz.0.4940': attribute type 4 has an invalid length.
[  646.111255][T26957] netlink: 'syz.0.4940': attribute type 4 has an invalid length.
[  646.218122][T26958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4939'.
[  646.242111][T26966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4941'.
[  647.928217][T27005] __nla_validate_parse: 3 callbacks suppressed
[  647.928293][T27005] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4947'.
[  647.967876][T27001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4946'.
[  648.257817][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'.
[  648.320697][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'.
[  648.638920][T27039] netlink: Unknown conntrack attr (0)
[  648.641574][T27039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.703422][T27039] team0: Port device syz_tun added
[  648.751880][T27043] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4954'.
[  648.757974][T27043] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4954'.
[  649.023291][T27056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4957'.
[  649.131191][T27061] netlink: 'syz.1.4958': attribute type 1 has an invalid length.
[  649.171106][T27061] bond13: entered promiscuous mode
[  649.173442][T27061] bond13: entered allmulticast mode
[  649.181987][T27061] 8021q: adding VLAN 0 to HW filter on device bond13
[  649.402788][T27066] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  649.429086][T27066] tipc: Enabled bearer <udp:syz2>, priority 10
[  649.544692][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  649.603749][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 300 seconds
[  649.739769][T27077] syzkaller0: entered promiscuous mode
[  649.741731][T27077] syzkaller0: entered allmulticast mode
[  649.814507][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  650.026142][T27099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4964'.
[  650.030519][T27099] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4964'.
[  650.041346][T27096] xt_CT: You must specify a L4 protocol and not use inversions on it
[  650.072361][T27098] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  650.210974][T27109] syzkaller0: entered promiscuous mode
[  650.213534][T27109] syzkaller0: entered allmulticast mode
[  650.344598][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  651.281215][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4972'.
[  651.393826][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  651.835565][T27167] netlink: 'syz.2.4982': attribute type 1 has an invalid length.
[  652.443811][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  653.219317][T27191] __nla_validate_parse: 6 callbacks suppressed
[  653.228436][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4988'.
[  653.229917][T27191] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4988'.
[  653.335625][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4991'.
[  653.474452][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  654.066646][T27203] syzkaller1: entered promiscuous mode
[  654.069205][T27203] syzkaller1: entered allmulticast mode
[  654.513884][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  654.585663][T27221] block nbd7: server does not support multiple connections per device.
[  654.590402][T27221] block nbd7: shutting down sockets
[  654.716205][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'.
[  655.122643][T27268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5006'.
[  655.553928][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  655.697770][T27272] netlink: 'syz.1.5008': attribute type 29 has an invalid length.
[  655.761737][T27275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5008'.
[  655.815846][T27279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5008'.
[  656.299742][T27315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5019'.
[  656.398718][T27321] mac80211_hwsim hwsim489 wlan0: entered promiscuous mode
[  656.398760][T27321] mac80211_hwsim hwsim489 wlan0: entered allmulticast mode
[  656.398893][T27321] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  656.469339][T27324] ip_tables: iptables: counters copy to user failed while replacing table
[  656.498343][T27328] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5023'.
[  656.594208][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  656.850898][T27352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5029'.
[  657.633823][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  658.068163][T27375] netlink: 'syz.2.5037': attribute type 3 has an invalid length.
[  658.673793][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  658.960598][T27377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.111313][T27405] __nla_validate_parse: 6 callbacks suppressed
[  659.111391][T27405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5043'.
[  659.119568][T27405] netlink: 'syz.1.5043': attribute type 1 has an invalid length.
[  659.232624][T27405] bond14: entered promiscuous mode
[  659.240534][T27405] 8021q: adding VLAN 0 to HW filter on device bond14
[  659.658458][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5050'.
[  659.662140][T27429] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5050'.
[  659.723982][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  659.876517][T27442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5054'.
[  660.690047][T27445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5055'.
[  660.690098][T27445] openvswitch: netlink: Flow actions attr not present in new flow.
[  660.753800][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  661.009007][T27456] netlink: NAT attribute has 4 unknown bytes
[  661.009050][T27456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.232091][T27468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5064'.
[  661.432440][T27471] 8021q: VLANs not supported on syzkaller1
[  661.449265][T27471] xt_CT: No such helper "netbios-ns"
[  661.793830][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  661.919358][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'.
[  662.833745][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  663.022321][   T34] audit: type=1804 audit(1788898653.466:4): pid=27492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5071" name="/newroot/1651/cgroup.controllers" dev="tmpfs" ino=8408 res=1 errno=0
[  663.036564][   T34] audit: type=1800 audit(1788898653.486:5): pid=27492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5071" name="cgroup.controllers" dev="tmpfs" ino=8408 res=0 errno=0
[  663.873721][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  664.127491][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'.
[  664.914639][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  665.954258][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  667.004062][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  667.639335][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'.
[  667.642852][T27616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5080'.
[  667.670547][T27618] block nbd7: server does not support multiple connections per device.
[  667.674631][T27618] block nbd7: shutting down sockets
[  668.033749][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  668.689937][T27633] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5083'.
[  668.812710][T27636] bridge0: port 1(wlan1) entered blocking state
[  668.818839][T27636] bridge0: port 1(wlan1) entered disabled state
[  668.822074][T27636] mac80211_hwsim hwsim497 wlan1: entered allmulticast mode
[  668.827140][T27636] mac80211_hwsim hwsim497 wlan1: entered promiscuous mode
[  669.073982][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  669.203687][T27648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.261180][T27654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5088'.
[  669.271917][T27654] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  669.875420][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5091'.
[  669.875472][T27666] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5091'.
[  669.965015][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 210 seconds
[  669.965077][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 210 seconds
[  669.965399][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 210 seconds
[  669.965610][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 210 seconds
[  670.113798][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  670.372174][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5098'.
[  671.038660][T27691] nbd: socks must be embedded in a SOCK_ITEM attr
[  671.046804][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5100'.
[  671.050509][T27693] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5100'.
[  671.154548][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  671.335025][T27703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5103'.
[  671.454191][T27710] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5106'.
[  671.488752][T27714] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  671.493446][T27714] CPU: 1 UID: 0 PID: 27714 Comm: syz.0.5108 Not tainted syzkaller #0 PREEMPT(full) 
[  671.493473][T27714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  671.493480][T27714] Call Trace:
[  671.493485][T27714]  <TASK>
[  671.493489][T27714]  dump_stack_lvl+0xe8/0x150
[  671.493504][T27714]  sysfs_warn_dup+0x8e/0xa0
[  671.493516][T27714]  sysfs_do_create_link_sd+0xc0/0x110
[  671.493528][T27714]  device_add_class_symlinks+0x1cf/0x240
[  671.493541][T27714]  device_add+0x467/0xb80
[  671.493553][T27714]  wiphy_register+0x1fc8/0x2ff0
[  671.493585][T27714]  ? __pfx_wiphy_register+0x10/0x10
[  671.493595][T27714]  ? __pfx_netdev_run_todo+0x10/0x10
[  671.493605][T27714]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  671.493617][T27714]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  671.493644][T27714]  ieee80211_register_hw+0x3d3d/0x4a50
[  671.493663][T27714]  ? ieee80211_register_hw+0x19b1/0x4a50
[  671.493683][T27714]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  671.493695][T27714]  ? __asan_memset+0x22/0x50
[  671.493706][T27714]  ? __hrtimer_setup+0x1b7/0x260
[  671.493716][T27714]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  671.493726][T27714]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  671.493744][T27714]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  671.493751][T27714]  ? kstrndup+0xbd/0x160
[  671.493761][T27714]  ? kstrndup+0xbd/0x160
[  671.493769][T27714]  hwsim_new_radio_nl+0xd8b/0xf90
[  671.493790][T27714]  genl_family_rcv_msg_doit+0x233/0x340
[  671.493805][T27714]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  671.493821][T27714]  ? bpf_lsm_capable+0x9/0x20
[  671.493831][T27714]  ? security_capable+0x7e/0x2c0
[  671.493842][T27714]  genl_rcv_msg+0x614/0x7a0
[  671.493855][T27714]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.493866][T27714]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  671.493882][T27714]  netlink_rcv_skb+0x226/0x4a0
[  671.493891][T27714]  ? __pfx_genl_rcv_msg+0x10/0x10
[  671.493932][T27714]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  671.493957][T27714]  ? down_read+0x2be/0x330
[  671.493973][T27714]  genl_rcv+0x28/0x40
[  671.493985][T27714]  netlink_unicast+0x7bd/0x940
[  671.493998][T27714]  netlink_sendmsg+0x813/0xb40
[  671.494011][T27714]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.494024][T27714]  ? apparmor_socket_sendmsg+0x98/0x360
[  671.494036][T27714]  ? __pfx_netlink_sendmsg+0x10/0x10
[  671.494044][T27714]  sock_sendmsg_nosec+0x13a/0x180
[  671.494055][T27714]  ____sys_sendmsg+0x54e/0x850
[  671.494066][T27714]  ? __pfx_____sys_sendmsg+0x10/0x10
[  671.494077][T27714]  ? import_iovec+0x73/0xa0
[  671.494087][T27714]  ___sys_sendmsg+0x2a5/0x360
[  671.494095][T27714]  ? __lock_acquire+0x6df/0x2e50
[  671.494104][T27714]  ? __pfx____sys_sendmsg+0x10/0x10
[  671.494113][T27714]  ? futex_wait+0x2a2/0x390
[  671.494136][T27714]  ? __fget_files+0x2a/0x420
[  671.494145][T27714]  ? __fget_files+0x3a2/0x420
[  671.494158][T27714]  __x64_sys_sendmsg+0x1b1/0x290
[  671.494167][T27714]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  671.494184][T27714]  do_syscall_64+0x166/0x520
[  671.494194][T27714]  ? trace_irq_disable+0x3b/0x140
[  671.494201][T27714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.494211][T27714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.494218][T27714] RIP: 0033:0x7f8efeb9e159
[  671.494227][T27714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.494233][T27714] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  671.494243][T27714] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  671.494248][T27714] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  671.494253][T27714] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  671.494257][T27714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.494262][T27714] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  671.494274][T27714]  </TASK>
[  672.141450][T27726] netlink: 'syz.2.5112': attribute type 7 has an invalid length.
[  672.204511][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  672.336386][T27732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5114'.
[  672.386718][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5117'.
[  672.596638][T27744] IPVS: set_ctl: invalid protocol: 12 172.30.0.1:20003
[  672.698972][T27747] xt_IDLETIMER: label is empty or not nul-terminated
[  673.233752][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  673.309249][T27748] xt_IDLETIMER: label is empty or not nul-terminated
[  673.629493][T11944] block nbd7: Receive control failed (result -32)
[  673.630207][   T57] block nbd7: Receive control failed (result -32)
[  674.273809][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  674.982045][T27801] __nla_validate_parse: 4 callbacks suppressed
[  674.982575][T27801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5130'.
[  674.997156][T27804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5131'.
[  675.000080][T27804] openvswitch: netlink: Flow actions attr not present in new flow.
[  675.039291][T27806] netlink: 'syz.2.5132': attribute type 1 has an invalid length.
[  675.042266][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5132'.
[  675.313821][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  675.691984][T27812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'.
[  675.698060][T27812] bridge0: left promiscuous mode
[  675.931732][T27814] mac80211_hwsim hwsim489 wlan0: left promiscuous mode
[  675.935501][T27814] mac80211_hwsim hwsim489 wlan0: left allmulticast mode
[  675.950775][T27814] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  676.059822][T27827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5138'.
[  676.063551][T27827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5138'.
[  676.075160][T27827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5138'.
[  676.190943][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5141'.
[  676.225377][T27842] x_tables: duplicate underflow at hook 1
[  676.353771][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  676.434489][T27845] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5144'.
[  676.978996][T27863] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5148'.
[  677.403744][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  678.433901][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  679.473794][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  679.493537][T27938] netlink: 'syz.0.5165': attribute type 5 has an invalid length.
[  679.497522][T27938] netlink: 'syz.0.5165': attribute type 11 has an invalid length.
[  679.664698][T27941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  679.664743][T27941] IPv6: NLM_F_CREATE should be set when creating new route
[  679.664789][T27941] IPv6: NLM_F_CREATE should be set when creating new route
[  679.664817][T27941] IPv6: NLM_F_CREATE should be set when creating new route
[  679.671211][T27941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  679.688192][T27944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  679.696000][T27941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  679.736504][T27950] xt_CT: No such helper "netbios-ns"
[  680.214433][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 330 seconds
[  680.271286][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.420633][T28003] __nla_validate_parse: 8 callbacks suppressed
[  680.430735][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5180'.
[  680.443433][T28009] netlink: 'syz.2.5182': attribute type 2 has an invalid length.
[  680.460187][T28009] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  680.464983][T28009] CPU: 1 UID: 0 PID: 28009 Comm: syz.2.5182 Not tainted syzkaller #0 PREEMPT(full) 
[  680.465020][T28009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  680.465030][T28009] Call Trace:
[  680.465039][T28009]  <TASK>
[  680.465045][T28009]  dump_stack_lvl+0xe8/0x150
[  680.465071][T28009]  sysfs_warn_dup+0x8e/0xa0
[  680.465092][T28009]  sysfs_do_create_link_sd+0xc0/0x110
[  680.465116][T28009]  device_add_class_symlinks+0x1cf/0x240
[  680.465139][T28009]  device_add+0x467/0xb80
[  680.465161][T28009]  wiphy_register+0x1fc8/0x2ff0
[  680.465191][T28009]  ? __pfx_wiphy_register+0x10/0x10
[  680.465207][T28009]  ? __pfx_netdev_run_todo+0x10/0x10
[  680.465221][T28009]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  680.465238][T28009]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  680.465258][T28009]  ieee80211_register_hw+0x3d3d/0x4a50
[  680.465284][T28009]  ? ieee80211_register_hw+0x19b1/0x4a50
[  680.465320][T28009]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  680.465341][T28009]  ? __asan_memset+0x22/0x50
[  680.465360][T28009]  ? __hrtimer_setup+0x1b7/0x260
[  680.465376][T28009]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  680.465391][T28009]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  680.465425][T28009]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  680.465436][T28009]  ? kstrndup+0xbd/0x160
[  680.465453][T28009]  ? kstrndup+0xbd/0x160
[  680.465466][T28009]  hwsim_new_radio_nl+0xd8b/0xf90
[  680.465504][T28009]  genl_family_rcv_msg_doit+0x233/0x340
[  680.465531][T28009]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  680.465560][T28009]  ? bpf_lsm_capable+0x9/0x20
[  680.465579][T28009]  ? security_capable+0x7e/0x2c0
[  680.465597][T28009]  genl_rcv_msg+0x614/0x7a0
[  680.465621][T28009]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.465639][T28009]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  680.465668][T28009]  netlink_rcv_skb+0x226/0x4a0
[  680.465684][T28009]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.465704][T28009]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.465729][T28009]  ? down_read+0x2be/0x330
[  680.465746][T28009]  genl_rcv+0x28/0x40
[  680.465765][T28009]  netlink_unicast+0x7bd/0x940
[  680.465788][T28009]  netlink_sendmsg+0x813/0xb40
[  680.465827][T28009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.465851][T28009]  ? apparmor_socket_sendmsg+0x98/0x360
[  680.465874][T28009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.465891][T28009]  sock_sendmsg_nosec+0x13a/0x180
[  680.465912][T28009]  ____sys_sendmsg+0x54e/0x850
[  680.465959][T28009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  680.465982][T28009]  ? import_iovec+0x73/0xa0
[  680.466000][T28009]  ___sys_sendmsg+0x2a5/0x360
[  680.466015][T28009]  ? __lock_acquire+0x6df/0x2e50
[  680.466034][T28009]  ? __pfx____sys_sendmsg+0x10/0x10
[  680.466051][T28009]  ? futex_wait+0x2a2/0x390
[  680.466096][T28009]  ? __fget_files+0x2a/0x420
[  680.466113][T28009]  ? __fget_files+0x3a2/0x420
[  680.466138][T28009]  __x64_sys_sendmsg+0x1b1/0x290
[  680.466155][T28009]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  680.466184][T28009]  do_syscall_64+0x166/0x520
[  680.466204][T28009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.466223][T28009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.466235][T28009] RIP: 0033:0x7fcfd079e159
[  680.466250][T28009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.466262][T28009] RSP: 002b:00007fcfd15a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  680.466279][T28009] RAX: ffffffffffffffda RBX: 00007fcfd0a25fa0 RCX: 00007fcfd079e159
[  680.466288][T28009] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  680.466296][T28009] RBP: 00007fcfd0835024 R08: 0000000000000000 R09: 0000000000000000
[  680.466306][T28009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.466314][T28009] R13: 00007fcfd0a26038 R14: 00007fcfd0a25fa0 R15: 00007ffdcb6d4898
[  680.466338][T28009]  </TASK>
[  680.514973][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  680.857796][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5183'.
[  680.857845][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'.
[  681.287093][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5189'.
[  681.296569][T28039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5189'.
[  681.554138][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  682.348385][T28080] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  682.491469][T28082] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  682.594110][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  682.671869][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5205'.
[  682.945521][T28108] syzkaller0: entered promiscuous mode
[  682.947683][T28108] syzkaller0: entered allmulticast mode
[  683.018978][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'.
[  683.098369][T28101] =v: renamed from veth0_to_bond
[  683.194862][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5209'.
[  683.643814][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  684.550192][T28164] netlink: 'syz.0.5220': attribute type 10 has an invalid length.
[  684.673822][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  685.270748][T28197] syzkaller0: entered promiscuous mode
[  685.272747][T28197] syzkaller0: entered allmulticast mode
[  685.499285][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5233'.
[  685.499817][T28204] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5233'.
[  685.713735][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  685.960290][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  685.963285][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  686.098243][T28240] Bluetooth: hci0: unsupported parameter 512
[  686.100368][T28240] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[  686.229047][T28247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5246'.
[  686.231991][T28247] openvswitch: netlink: Flow actions attr not present in new flow.
[  686.286029][T28248] xt_CT: No such helper "netbios-ns"
[  686.302643][T28248] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.308560][T28248] team0: Port device bond0 added
[  686.763740][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  686.901090][T28266] syzkaller0: entered promiscuous mode
[  686.903461][T28266] syzkaller0: entered allmulticast mode
[  687.138059][T28274] xt_IDLETIMER: label is empty or not nul-terminated
[  687.793762][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  688.238291][T28288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  688.675654][T28293] netlink: 'syz.1.5256': attribute type 11 has an invalid length.
[  688.833882][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  689.053150][T28319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5259'.
[  689.058093][T28319] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5259'.
[  689.360503][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5263'.
[  689.877412][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  690.923813][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  691.184341][T28381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.502372][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.502714][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.502965][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.503179][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.522878][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.523152][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.523412][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.536010][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.539459][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.542816][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'.
[  691.953835][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  692.226204][T28436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.250004][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.256648][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.266316][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.274670][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.281092][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.294122][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.302434][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.314581][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.324929][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.338790][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.348598][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.360340][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.375236][T28441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.380120][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.400334][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.416146][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.426291][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.432741][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.439316][T28441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.449506][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.460096][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.467628][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.477591][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.486440][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.491213][T28441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.503154][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.509565][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.517563][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.524622][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.535616][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.543533][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.548869][T28441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.564828][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.571661][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.578891][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.586219][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.597184][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.607666][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.662211][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.671738][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.692023][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.706211][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.716608][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.722845][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.730839][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.737799][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.743246][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.748391][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.753676][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.758667][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.763538][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.769447][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.775250][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.781056][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.786686][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.792376][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.799617][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.804944][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.811029][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.817534][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.822773][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.828484][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.833530][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.839076][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.844109][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.948125][T28462] openvswitch: netlink: Flow actions attr not present in new flow.
[  692.993746][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  693.685429][T28505] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  693.839915][T28507] netlink: 'syz.0.5294': attribute type 2 has an invalid length.
[  694.012219][T28517] netlink: 'syz.1.5295': attribute type 10 has an invalid length.
[  694.035012][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  694.251588][T28536] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  694.255723][T28536] CPU: 1 UID: 0 PID: 28536 Comm: syz.0.5299 Not tainted syzkaller #0 PREEMPT(full) 
[  694.255752][T28536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  694.255758][T28536] Call Trace:
[  694.255762][T28536]  <TASK>
[  694.255766][T28536]  dump_stack_lvl+0xe8/0x150
[  694.255781][T28536]  sysfs_warn_dup+0x8e/0xa0
[  694.255792][T28536]  sysfs_do_create_link_sd+0xc0/0x110
[  694.255804][T28536]  device_add_class_symlinks+0x1cf/0x240
[  694.255817][T28536]  device_add+0x467/0xb80
[  694.255828][T28536]  wiphy_register+0x1fc8/0x2ff0
[  694.255844][T28536]  ? __pfx_wiphy_register+0x10/0x10
[  694.255854][T28536]  ? __pfx_netdev_run_todo+0x10/0x10
[  694.255863][T28536]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  694.255875][T28536]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  694.255887][T28536]  ieee80211_register_hw+0x3d3d/0x4a50
[  694.255904][T28536]  ? ieee80211_register_hw+0x19b1/0x4a50
[  694.255923][T28536]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  694.255936][T28536]  ? __asan_memset+0x22/0x50
[  694.255947][T28536]  ? __hrtimer_setup+0x1b7/0x260
[  694.255994][T28536]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  694.256003][T28536]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  694.256022][T28536]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  694.256029][T28536]  ? kstrndup+0xbd/0x160
[  694.256038][T28536]  ? kstrndup+0xbd/0x160
[  694.256064][T28536]  hwsim_new_radio_nl+0xd8b/0xf90
[  694.256082][T28536]  genl_family_rcv_msg_doit+0x233/0x340
[  694.256097][T28536]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  694.256112][T28536]  ? bpf_lsm_capable+0x9/0x20
[  694.256123][T28536]  ? security_capable+0x7e/0x2c0
[  694.256133][T28536]  genl_rcv_msg+0x614/0x7a0
[  694.256146][T28536]  ? __pfx_genl_rcv_msg+0x10/0x10
[  694.256162][T28536]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  694.256185][T28536]  netlink_rcv_skb+0x226/0x4a0
[  694.256198][T28536]  ? __pfx_genl_rcv_msg+0x10/0x10
[  694.256215][T28536]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  694.256233][T28536]  ? down_read+0x2be/0x330
[  694.256242][T28536]  genl_rcv+0x28/0x40
[  694.256252][T28536]  netlink_unicast+0x7bd/0x940
[  694.256271][T28536]  netlink_sendmsg+0x813/0xb40
[  694.256292][T28536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.256312][T28536]  ? apparmor_socket_sendmsg+0x98/0x360
[  694.256324][T28536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.256332][T28536]  sock_sendmsg_nosec+0x13a/0x180
[  694.256344][T28536]  ____sys_sendmsg+0x54e/0x850
[  694.256354][T28536]  ? __pfx_____sys_sendmsg+0x10/0x10
[  694.256366][T28536]  ? import_iovec+0x73/0xa0
[  694.256376][T28536]  ___sys_sendmsg+0x2a5/0x360
[  694.256383][T28536]  ? __lock_acquire+0x6df/0x2e50
[  694.256392][T28536]  ? __pfx____sys_sendmsg+0x10/0x10
[  694.256401][T28536]  ? futex_wait+0x2a2/0x390
[  694.256424][T28536]  ? __fget_files+0x2a/0x420
[  694.256434][T28536]  ? __fget_files+0x3a2/0x420
[  694.256447][T28536]  __x64_sys_sendmsg+0x1b1/0x290
[  694.256456][T28536]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  694.256473][T28536]  do_syscall_64+0x166/0x520
[  694.256483][T28536]  ? trace_irq_disable+0x3b/0x140
[  694.256493][T28536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.256503][T28536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.256510][T28536] RIP: 0033:0x7f8efeb9e159
[  694.256518][T28536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.256525][T28536] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  694.256534][T28536] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  694.256540][T28536] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  694.256545][T28536] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  694.256549][T28536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  694.256554][T28536] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  694.256566][T28536]  </TASK>
[  694.852125][T28556] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  695.073733][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  695.157864][T28577] netlink: 'syz.0.5308': attribute type 23 has an invalid length.
[  695.246682][T28577] No such timeout policy "s"
[  695.248442][T28577] netlink: Failed to associated timeout policy 's'
[  695.368634][T28593] IPVS: Scheduler module ip_vs_sip not found
[  695.371478][T28593] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  695.375037][T28593] netlink: 'syz.0.5311': attribute type 1 has an invalid length.
[  695.501873][T28593] 8021q: adding VLAN 0 to HW filter on device bond14
[  695.752894][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.113885][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  696.341115][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.352778][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.387868][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.401282][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.411079][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.423035][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.434893][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.441953][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.450539][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.457513][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.464776][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.475545][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.483042][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.490425][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.497925][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.505155][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.511708][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.518808][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.526105][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.533081][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.541764][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.549107][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.557600][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.565047][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.573338][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.580776][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.588090][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.596701][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.603436][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.610314][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.617436][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.624606][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.631299][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.639478][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.647006][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.656237][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.663116][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.671758][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.679810][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.687782][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.694430][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.701173][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.708562][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.718092][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.725684][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.732553][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.740400][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.748096][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.758046][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.765462][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.771987][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.780852][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.788585][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.795454][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.802138][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.815556][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.826531][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.835752][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.847074][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.860436][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.870637][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.885363][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.895739][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.906400][T28611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.129118][T28635] __nla_validate_parse: 11 callbacks suppressed
[  697.134312][T28635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5319'.
[  697.163694][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  697.833478][T28646] netlink: 'syz.0.5323': attribute type 2 has an invalid length.
[  697.836260][T28647] netlink: 'syz.0.5323': attribute type 2 has an invalid length.
[  697.862532][T28646] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  697.868949][T28646] CPU: 1 UID: 0 PID: 28646 Comm: syz.0.5323 Not tainted syzkaller #0 PREEMPT(full) 
[  697.869015][T28646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  697.869025][T28646] Call Trace:
[  697.869031][T28646]  <TASK>
[  697.869037][T28646]  dump_stack_lvl+0xe8/0x150
[  697.869060][T28646]  sysfs_warn_dup+0x8e/0xa0
[  697.869079][T28646]  sysfs_do_create_link_sd+0xc0/0x110
[  697.869098][T28646]  device_add_class_symlinks+0x1cf/0x240
[  697.869120][T28646]  device_add+0x467/0xb80
[  697.869140][T28646]  wiphy_register+0x1fc8/0x2ff0
[  697.869187][T28646]  ? __pfx_wiphy_register+0x10/0x10
[  697.869206][T28646]  ? __pfx_netdev_run_todo+0x10/0x10
[  697.869222][T28646]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  697.869242][T28646]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  697.869263][T28646]  ieee80211_register_hw+0x3d3d/0x4a50
[  697.869291][T28646]  ? ieee80211_register_hw+0x19b1/0x4a50
[  697.869328][T28646]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  697.869348][T28646]  ? __asan_memset+0x22/0x50
[  697.869367][T28646]  ? __hrtimer_setup+0x1b7/0x260
[  697.869382][T28646]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  697.869398][T28646]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  697.869433][T28646]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  697.869445][T28646]  ? kstrndup+0xbd/0x160
[  697.869462][T28646]  ? kstrndup+0xbd/0x160
[  697.869476][T28646]  hwsim_new_radio_nl+0xd8b/0xf90
[  697.869507][T28646]  genl_family_rcv_msg_doit+0x233/0x340
[  697.869532][T28646]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  697.869560][T28646]  ? bpf_lsm_capable+0x9/0x20
[  697.869584][T28646]  ? security_capable+0x7e/0x2c0
[  697.869602][T28646]  genl_rcv_msg+0x614/0x7a0
[  697.869626][T28646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  697.869644][T28646]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  697.869673][T28646]  netlink_rcv_skb+0x226/0x4a0
[  697.869689][T28646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  697.869709][T28646]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  697.869736][T28646]  ? down_read+0x2be/0x330
[  697.869753][T28646]  genl_rcv+0x28/0x40
[  697.869771][T28646]  netlink_unicast+0x7bd/0x940
[  697.869794][T28646]  netlink_sendmsg+0x813/0xb40
[  697.869817][T28646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  697.869839][T28646]  ? apparmor_socket_sendmsg+0x98/0x360
[  697.869860][T28646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  697.869875][T28646]  sock_sendmsg_nosec+0x13a/0x180
[  697.869895][T28646]  ____sys_sendmsg+0x54e/0x850
[  697.869914][T28646]  ? __pfx_____sys_sendmsg+0x10/0x10
[  697.869935][T28646]  ? import_iovec+0x73/0xa0
[  697.869952][T28646]  ___sys_sendmsg+0x2a5/0x360
[  697.869994][T28646]  ? __lock_acquire+0x6df/0x2e50
[  697.870011][T28646]  ? __pfx____sys_sendmsg+0x10/0x10
[  697.870028][T28646]  ? futex_wait+0x2a2/0x390
[  697.870068][T28646]  ? __fget_files+0x2a/0x420
[  697.870083][T28646]  ? __fget_files+0x3a2/0x420
[  697.870107][T28646]  __x64_sys_sendmsg+0x1b1/0x290
[  697.870123][T28646]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  697.870153][T28646]  do_syscall_64+0x166/0x520
[  697.870171][T28646]  ? trace_irq_disable+0x3b/0x140
[  697.870183][T28646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.870201][T28646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.870213][T28646] RIP: 0033:0x7f8efeb9e159
[  697.870227][T28646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.870238][T28646] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  697.870253][T28646] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  697.870262][T28646] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  697.870271][T28646] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  697.870279][T28646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  697.870286][T28646] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  697.870309][T28646]  </TASK>
[  697.880771][T28649] netlink: 'syz.1.5324': attribute type 4 has an invalid length.
[  698.201723][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  698.398953][T28673] netlink: 'syz.2.5328': attribute type 11 has an invalid length.
[  698.609990][T28690] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5332'.
[  698.671141][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5334'.
[  698.676399][T28693] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5334'.
[  699.234534][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  699.446409][T28731] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  699.628374][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  699.634820][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  699.639411][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  699.645610][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  699.649746][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  699.675246][T28740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5342'.
[  700.041724][   T99] block nbd2: Possible stuck request ffff888109bf0000: control (read@0,1024B). Runtime 240 seconds
[  700.045893][   T99] block nbd2: Possible stuck request ffff888109bf0200: control (read@1024,1024B). Runtime 240 seconds
[  700.045910][   T99] block nbd2: Possible stuck request ffff888109bf0400: control (read@2048,1024B). Runtime 240 seconds
[  700.045920][   T99] block nbd2: Possible stuck request ffff888109bf0600: control (read@3072,1024B). Runtime 240 seconds
[  700.274245][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  700.492143][T28762] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  701.313828][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  702.363723][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  702.427320][T28818] bridge5: entered promiscuous mode
[  702.429657][T28818] bridge5: entered allmulticast mode
[  703.166142][T28832] syzkaller1: entered promiscuous mode
[  703.166180][T28832] syzkaller1: entered allmulticast mode
[  703.172626][T28838] netlink: 'syz.1.5361': attribute type 10 has an invalid length.
[  703.177845][T28838] team0 (unregistering): Port device team_slave_0 removed
[  703.182739][T28838] team0 (unregistering): Port device team_slave_1 removed
[  703.341567][T28847] __nla_validate_parse: 29 callbacks suppressed
[  703.342166][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5365'.
[  703.394530][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  703.603033][T28853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  703.792538][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'.
[  704.257766][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'.
[  704.440564][T28914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5381'.
[  704.444470][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  704.462726][T28914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5381'.
[  705.401430][T28929] mac80211_hwsim hwsim489 wlan0: entered promiscuous mode
[  705.401481][T28929] mac80211_hwsim hwsim489 wlan0: entered allmulticast mode
[  705.410314][T28929] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5385'.
[  705.416941][T28929] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5385'.
[  705.473739][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  705.488175][T28946] netlink: 'syz.0.5387': attribute type 2 has an invalid length.
[  705.510705][T28946] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  705.511239][T28946] CPU: 0 UID: 0 PID: 28946 Comm: syz.0.5387 Not tainted syzkaller #0 PREEMPT(full) 
[  705.511251][T28946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  705.511256][T28946] Call Trace:
[  705.511260][T28946]  <TASK>
[  705.511264][T28946]  dump_stack_lvl+0xe8/0x150
[  705.511281][T28946]  sysfs_warn_dup+0x8e/0xa0
[  705.511294][T28946]  sysfs_do_create_link_sd+0xc0/0x110
[  705.511306][T28946]  device_add_class_symlinks+0x1cf/0x240
[  705.511320][T28946]  device_add+0x467/0xb80
[  705.511333][T28946]  wiphy_register+0x1fc8/0x2ff0
[  705.511351][T28946]  ? __pfx_wiphy_register+0x10/0x10
[  705.511360][T28946]  ? __pfx_netdev_run_todo+0x10/0x10
[  705.511370][T28946]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  705.511382][T28946]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  705.511395][T28946]  ieee80211_register_hw+0x3d3d/0x4a50
[  705.511412][T28946]  ? ieee80211_register_hw+0x19b1/0x4a50
[  705.511433][T28946]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  705.511445][T28946]  ? __asan_memset+0x22/0x50
[  705.511456][T28946]  ? __hrtimer_setup+0x1b7/0x260
[  705.511466][T28946]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  705.511476][T28946]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  705.511494][T28946]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  705.511501][T28946]  ? kstrndup+0xbd/0x160
[  705.511513][T28946]  ? kstrndup+0xbd/0x160
[  705.511521][T28946]  hwsim_new_radio_nl+0xd8b/0xf90
[  705.511538][T28946]  genl_family_rcv_msg_doit+0x233/0x340
[  705.511552][T28946]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  705.511568][T28946]  ? bpf_lsm_capable+0x9/0x20
[  705.511578][T28946]  ? security_capable+0x7e/0x2c0
[  705.511589][T28946]  genl_rcv_msg+0x614/0x7a0
[  705.511602][T28946]  ? __pfx_genl_rcv_msg+0x10/0x10
[  705.511613][T28946]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  705.511630][T28946]  netlink_rcv_skb+0x226/0x4a0
[  705.511639][T28946]  ? __pfx_genl_rcv_msg+0x10/0x10
[  705.511651][T28946]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  705.511665][T28946]  ? down_read+0x2be/0x330
[  705.511675][T28946]  genl_rcv+0x28/0x40
[  705.511685][T28946]  netlink_unicast+0x7bd/0x940
[  705.511697][T28946]  netlink_sendmsg+0x813/0xb40
[  705.511710][T28946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.511740][T28946]  ? apparmor_socket_sendmsg+0x98/0x360
[  705.511755][T28946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.511764][T28946]  sock_sendmsg_nosec+0x13a/0x180
[  705.511776][T28946]  ____sys_sendmsg+0x54e/0x850
[  705.511786][T28946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  705.511799][T28946]  ? import_iovec+0x73/0xa0
[  705.511809][T28946]  ___sys_sendmsg+0x2a5/0x360
[  705.511818][T28946]  ? __lock_acquire+0x6df/0x2e50
[  705.511828][T28946]  ? __pfx____sys_sendmsg+0x10/0x10
[  705.511837][T28946]  ? futex_wait+0x2a2/0x390
[  705.511860][T28946]  ? __fget_files+0x2a/0x420
[  705.511870][T28946]  ? __fget_files+0x3a2/0x420
[  705.511883][T28946]  __x64_sys_sendmsg+0x1b1/0x290
[  705.511893][T28946]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  705.511910][T28946]  do_syscall_64+0x166/0x520
[  705.511921][T28946]  ? trace_irq_disable+0x3b/0x140
[  705.511928][T28946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.511938][T28946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.511946][T28946] RIP: 0033:0x7f8efeb9e159
[  705.511956][T28946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.511963][T28946] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  705.511996][T28946] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  705.512004][T28946] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  705.512016][T28946] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  705.512021][T28946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  705.512026][T28946] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  705.512040][T28946]  </TASK>
[  705.515433][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5386'.
[  706.312012][T28962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.339042][T28962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.348210][T28965] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5389'.
[  706.405735][T28962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.513814][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  707.120712][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5391'.
[  707.297379][T28978] syzkaller1: left promiscuous mode
[  707.298029][T28978] syzkaller1: left allmulticast mode
[  707.553749][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  707.856577][T28995] netlink: 'syz.0.5397': attribute type 1 has an invalid length.
[  708.293354][T29022] syz.1.5404 (29022) used obsolete PPPIOCDETACH ioctl
[  708.359900][T29024] __nla_validate_parse: 7 callbacks suppressed
[  708.360152][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5404'.
[  708.361179][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5404'.
[  708.603819][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  708.829307][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5408'.
[  708.843522][T29046] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5408'.
[  708.935952][T29055] xt_CT: No such helper "netbios-ns"
[  708.969263][T29059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5412'.
[  709.030123][T29059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5412'.
[  709.573499][T29071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5415'.
[  709.643783][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  709.865734][T29091] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5418'.
[  710.291507][   T99] block nbd1: Possible stuck request ffff888109bb8000: control (read@0,4096B). Runtime 360 seconds
[  710.403341][T29102] IPVS: Unknown mcast interface: pim6reg0
[  710.423204][T29105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5423'.
[  710.468083][T29105] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  710.468903][T29105] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  710.641720][T29118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5426'.
[  710.648878][T29118] openvswitch: netlink: Flow actions attr not present in new flow.
[  710.673744][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  711.688456][T29165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.701314][T29165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.713777][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  711.825192][T29172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  712.665828][T29205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  712.753795][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  713.401690][T29236] __nla_validate_parse: 4 callbacks suppressed
[  713.401759][T29236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5453'.
[  713.794341][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  714.107361][T29247] bond15: entered promiscuous mode
[  714.109600][T29247] 8021q: adding VLAN 0 to HW filter on device bond15
[  714.267743][T29263] dvmrp1: entered allmulticast mode
[  714.318312][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5461'.
[  714.835609][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  714.937280][T29304] netlink: 'syz.0.5470': attribute type 2 has an invalid length.
[  714.996360][T29304] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  714.996465][T29304] CPU: 1 UID: 0 PID: 29304 Comm: syz.0.5470 Not tainted syzkaller #0 PREEMPT(full) 
[  714.996491][T29304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  714.996498][T29304] Call Trace:
[  714.996502][T29304]  <TASK>
[  714.996506][T29304]  dump_stack_lvl+0xe8/0x150
[  714.996523][T29304]  sysfs_warn_dup+0x8e/0xa0
[  714.996536][T29304]  sysfs_do_create_link_sd+0xc0/0x110
[  714.996549][T29304]  device_add_class_symlinks+0x1cf/0x240
[  714.996563][T29304]  device_add+0x467/0xb80
[  714.996576][T29304]  wiphy_register+0x1fc8/0x2ff0
[  714.996593][T29304]  ? __pfx_wiphy_register+0x10/0x10
[  714.996603][T29304]  ? __pfx_netdev_run_todo+0x10/0x10
[  714.996614][T29304]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  714.996626][T29304]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  714.996639][T29304]  ieee80211_register_hw+0x3d3d/0x4a50
[  714.996655][T29304]  ? ieee80211_register_hw+0x19b1/0x4a50
[  714.996677][T29304]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  714.996690][T29304]  ? __asan_memset+0x22/0x50
[  714.996702][T29304]  ? __hrtimer_setup+0x1b7/0x260
[  714.996714][T29304]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  714.996723][T29304]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  714.996742][T29304]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  714.996749][T29304]  ? kstrndup+0xbd/0x160
[  714.996759][T29304]  ? kstrndup+0xbd/0x160
[  714.996767][T29304]  hwsim_new_radio_nl+0xd8b/0xf90
[  714.996784][T29304]  genl_family_rcv_msg_doit+0x233/0x340
[  714.996800][T29304]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  714.996818][T29304]  ? bpf_lsm_capable+0x9/0x20
[  714.996829][T29304]  ? security_capable+0x7e/0x2c0
[  714.996840][T29304]  genl_rcv_msg+0x614/0x7a0
[  714.996854][T29304]  ? __pfx_genl_rcv_msg+0x10/0x10
[  714.996865][T29304]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  714.996881][T29304]  netlink_rcv_skb+0x226/0x4a0
[  714.996891][T29304]  ? __pfx_genl_rcv_msg+0x10/0x10
[  714.996902][T29304]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  714.996917][T29304]  ? down_read+0x2be/0x330
[  714.996927][T29304]  genl_rcv+0x28/0x40
[  714.996937][T29304]  netlink_unicast+0x7bd/0x940
[  714.996950][T29304]  netlink_sendmsg+0x813/0xb40
[  714.996963][T29304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.996976][T29304]  ? apparmor_socket_sendmsg+0x98/0x360
[  714.996989][T29304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  714.997023][T29304]  sock_sendmsg_nosec+0x13a/0x180
[  714.997038][T29304]  ____sys_sendmsg+0x54e/0x850
[  714.997050][T29304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  714.997063][T29304]  ? import_iovec+0x73/0xa0
[  714.997075][T29304]  ___sys_sendmsg+0x2a5/0x360
[  714.997084][T29304]  ? __lock_acquire+0x6df/0x2e50
[  714.997094][T29304]  ? __pfx____sys_sendmsg+0x10/0x10
[  714.997105][T29304]  ? futex_wait+0x2a2/0x390
[  714.997137][T29304]  ? __fget_files+0x2a/0x420
[  714.997147][T29304]  ? __fget_files+0x3a2/0x420
[  714.997161][T29304]  __x64_sys_sendmsg+0x1b1/0x290
[  714.997172][T29304]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  714.997190][T29304]  do_syscall_64+0x166/0x520
[  714.997202][T29304]  ? trace_irq_disable+0x3b/0x140
[  714.997211][T29304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.997222][T29304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.997231][T29304] RIP: 0033:0x7f8efeb9e159
[  714.997240][T29304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.997247][T29304] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.997257][T29304] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  714.997263][T29304] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  714.997268][T29304] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  714.997273][T29304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  714.997278][T29304] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  714.997292][T29304]  </TASK>
[  715.188606][T11944] block nbd8: Receive control failed (result -32)
[  715.195476][   T57] block nbd8: Receive control failed (result -32)
[  715.883758][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  716.923686][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  716.962833][T29351] syzkaller0: entered promiscuous mode
[  716.965114][T29351] syzkaller0: entered allmulticast mode
[  717.302567][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5483'.
[  717.639804][T29374] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  717.953958][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  718.369395][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'.
[  718.373504][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'.
[  718.518810][T29404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  718.679963][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5500'.
[  718.728670][T29424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5502'.
[  718.738219][T29424] block nbd0: reconnected socket
[  718.740158][T29425] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5502'.
[  718.778663][T11944] block nbd0: Receive control failed (result -32)
[  718.994638][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  719.079996][T29435] syzkaller1: entered promiscuous mode
[  719.080062][T29435] syzkaller1: entered allmulticast mode
[  719.333507][T29466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5511'.
[  719.337719][T29466] openvswitch: netlink: Flow actions attr not present in new flow.
[  719.381054][T29470] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5510'.
[  719.429219][T29473] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5512'.
[  719.559453][T29478] 8021q: VLANs not supported on sit0
[  719.563332][T29478] 
[  719.564169][T29478] ======================================================
[  719.566639][T29478] WARNING: possible circular locking dependency detected
[  719.568852][T29478] syzkaller #0 Not tainted
[  719.570234][T29478] ------------------------------------------------------
[  719.572863][T29478] syz.0.5513/29478 is trying to acquire lock:
[  719.575276][T29478] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  719.578566][T29478] 
[  719.578566][T29478] but task is already holding lock:
[  719.580965][T29478] ffff88810c030980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  719.584060][T29478] 
[  719.584060][T29478] which lock already depends on the new lock.
[  719.584060][T29478] 
[  719.587850][T29478] 
[  719.587850][T29478] the existing dependency chain (in reverse order) is:
[  719.591279][T29478] 
[  719.591279][T29478] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  719.594337][T29478]        down_write+0x96/0x200
[  719.596265][T29478]        kernfs_add_one+0x41/0x6f0
[  719.598295][T29478]        kernfs_create_dir_ns+0x1a1/0x230
[  719.600555][T29478]        internal_create_group+0x440/0x1180
[  719.602617][T29478]        cpuhp_invoke_callback+0x434/0x810
[  719.604679][T29478]        cpuhp_issue_call+0x3f0/0x750
[  719.606638][T29478]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  719.608867][T29478]        __cpuhp_setup_state+0x3f/0x60
[  719.610766][T29478]        do_one_initcall+0x250/0x870
[  719.612562][T29478]        do_initcall_level+0x10a/0x1a0
[  719.614868][T29478]        do_initcalls+0x59/0xa0
[  719.616924][T29478]        kernel_init_freeable+0x29d/0x3e0
[  719.619324][T29478]        kernel_init+0x22/0x1d0
[  719.621343][T29478]        ret_from_fork+0x514/0xb70
[  719.623404][T29478]        ret_from_fork_asm+0x1a/0x30
[  719.625484][T29478] 
[  719.625484][T29478] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  719.628697][T29478] 
[  719.628697][T29478] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  719.631866][T29478]        cpus_read_lock+0x42/0x160
[  719.633963][T29478]        static_key_slow_inc+0x12/0x30
[  719.636294][T29478]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  719.638883][T29478]        nbd_genl_foreach_sock+0x265/0x450
[  719.641051][T29478]        nbd_genl_reconfigure+0xbbb/0x1040
[  719.642823][T29478]        genl_family_rcv_msg_doit+0x233/0x340
[  719.644842][T29478]        genl_rcv_msg+0x614/0x7a0
[  719.646643][T29478]        netlink_rcv_skb+0x226/0x4a0
[  719.648769][T29478]        genl_rcv+0x28/0x40
[  719.650605][T29478]        netlink_unicast+0x7bd/0x940
[  719.652586][T29478]        netlink_sendmsg+0x813/0xb40
[  719.654376][T29478]        sock_sendmsg_nosec+0x13a/0x180
[  719.656365][T29478]        ____sys_sendmsg+0x54e/0x850
[  719.658490][T29478]        ___sys_sendmsg+0x2a5/0x360
[  719.660617][T29478]        __x64_sys_sendmsg+0x1b1/0x290
[  719.662764][T29478]        do_syscall_64+0x166/0x520
[  719.664917][T29478]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.667559][T29478] 
[  719.667559][T29478] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  719.670638][T29478]        __mutex_lock+0x19d/0x1550
[  719.672718][T29478]        nbd_queue_rq+0x373/0xff0
[  719.674739][T29478]        blk_mq_dispatch_rq_list+0x499/0x1990
[  719.677190][T29478]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  719.679954][T29478]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  719.682976][T29478]        blk_mq_run_work_fn+0x16c/0x300
[  719.685353][T29478]        process_scheduled_works+0xc3d/0x1630
[  719.687934][T29478]        worker_thread+0xa47/0xfb0
[  719.690043][T29478]        kthread+0x38b/0x480
[  719.691737][T29478]        ret_from_fork+0x514/0xb70
[  719.693546][T29478]        ret_from_fork_asm+0x1a/0x30
[  719.695479][T29478] 
[  719.695479][T29478] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  719.698443][T29478]        __mutex_lock+0x19d/0x1550
[  719.700530][T29478]        nbd_queue_rq+0xc1/0xff0
[  719.702481][T29478]        blk_mq_dispatch_rq_list+0x499/0x1990
[  719.704958][T29478]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  719.707495][T29478]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  719.710091][T29478]        blk_mq_run_work_fn+0x16c/0x300
[  719.712371][T29478]        process_scheduled_works+0xc3d/0x1630
[  719.714870][T29478]        worker_thread+0xa47/0xfb0
[  719.716956][T29478]        kthread+0x38b/0x480
[  719.718862][T29478]        ret_from_fork+0x514/0xb70
[  719.720942][T29478]        ret_from_fork_asm+0x1a/0x30
[  719.723088][T29478] 
[  719.723088][T29478] -> #3 (set->srcu){.+.+}-{0:0}:
[  719.725955][T29478]        __synchronize_srcu+0xc9/0x2f0
[  719.728177][T29478]        elevator_switch+0x1e8/0x7b0
[  719.730322][T29478]        elevator_change+0x2fa/0x480
[  719.732462][T29478]        elevator_set_default+0x375/0x440
[  719.734773][T29478]        blk_register_queue+0x3f3/0x4e0
[  719.737072][T29478]        __add_disk+0x6cb/0xe30
[  719.739090][T29478]        add_disk_fwnode+0x100/0x3a0
[  719.741003][T29478]        nbd_dev_add+0x733/0xb60
[  719.742648][T29478]        nbd_init+0x168/0x1f0
[  719.744177][T29478]        do_one_initcall+0x250/0x870
[  719.745943][T29478]        do_initcall_level+0x10a/0x1a0
[  719.747998][T29478]        do_initcalls+0x59/0xa0
[  719.749866][T29478]        kernel_init_freeable+0x29d/0x3e0
[  719.752138][T29478]        kernel_init+0x22/0x1d0
[  719.753769][T29478]        ret_from_fork+0x514/0xb70
[  719.755450][T29478]        ret_from_fork_asm+0x1a/0x30
[  719.757122][T29478] 
[  719.757122][T29478] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  719.759562][T29478]        __mutex_lock+0x19d/0x1550
[  719.761496][T29478]        elevator_change+0x1af/0x480
[  719.763474][T29478]        elevator_set_none+0xb5/0x140
[  719.765222][T29478]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  719.767291][T29478]        nbd_start_device+0x189/0xb30
[  719.769031][T29478]        nbd_genl_connect+0x167d/0x1cd0
[  719.770850][T29478]        genl_family_rcv_msg_doit+0x233/0x340
[  719.772776][T29478]        genl_rcv_msg+0x614/0x7a0
[  719.774368][T29478]        netlink_rcv_skb+0x226/0x4a0
[  719.776341][T29478]        genl_rcv+0x28/0x40
[  719.778177][T29478]        netlink_unicast+0x7bd/0x940
[  719.780333][T29478]        netlink_sendmsg+0x813/0xb40
[  719.782423][T29478]        sock_sendmsg_nosec+0x13a/0x180
[  719.784646][T29478]        ____sys_sendmsg+0x54e/0x850
[  719.786767][T29478]        ___sys_sendmsg+0x2a5/0x360
[  719.788853][T29478]        __x64_sys_sendmsg+0x1b1/0x290
[  719.790981][T29478]        do_syscall_64+0x166/0x520
[  719.793070][T29478]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.795704][T29478] 
[  719.795704][T29478] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  719.799120][T29478]        blk_alloc_queue+0x544/0x690
[  719.801202][T29478]        __blk_mq_alloc_disk+0x194/0x390
[  719.803431][T29478]        nbd_dev_add+0x494/0xb60
[  719.805174][T29478]        nbd_init+0x168/0x1f0
[  719.806666][T29478]        do_one_initcall+0x250/0x870
[  719.808470][T29478]        do_initcall_level+0x10a/0x1a0
[  719.810518][T29478]        do_initcalls+0x59/0xa0
[  719.812517][T29478]        kernel_init_freeable+0x29d/0x3e0
[  719.814782][T29478]        kernel_init+0x22/0x1d0
[  719.816776][T29478]        ret_from_fork+0x514/0xb70
[  719.818858][T29478]        ret_from_fork_asm+0x1a/0x30
[  719.820892][T29478] 
[  719.820892][T29478] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  719.823630][T29478]        __lock_acquire+0x15ff/0x2e50
[  719.825328][T29478]        lock_acquire+0x115/0x350
[  719.826923][T29478]        fs_reclaim_acquire+0x71/0x100
[  719.828632][T29478]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  719.830717][T29478]        alloc_inode+0xb8/0x1b0
[  719.832556][T29478]        iget_locked+0x131/0x6a0
[  719.834284][T29478]        kernfs_get_inode+0x4f/0x770
[  719.836141][T29478]        kernfs_iop_lookup+0x1fe/0x320
[  719.838003][T29478]        lookup_open+0x9e1/0x1a40
[  719.839794][T29478]        path_openat+0x677/0x1d60
[  719.841538][T29478]        do_file_open+0x23e/0x4a0
[  719.843087][T29478]        do_sys_openat2+0x115/0x200
[  719.844660][T29478]        __x64_sys_openat+0x138/0x170
[  719.846333][T29478]        do_syscall_64+0x166/0x520
[  719.848158][T29478]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.850440][T29478] 
[  719.850440][T29478] other info that might help us debug this:
[  719.850440][T29478] 
[  719.853556][T29478] Chain exists of:
[  719.853556][T29478]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  719.853556][T29478] 
[  719.857559][T29478]  Possible unsafe locking scenario:
[  719.857559][T29478] 
[  719.859748][T29478]        CPU0                    CPU1
[  719.861287][T29478]        ----                    ----
[  719.862848][T29478]   rlock(&root->kernfs_rwsem);
[  719.864332][T29478]                                lock(cpuhp_state_mutex);
[  719.866541][T29478]                                lock(&root->kernfs_rwsem);
[  719.869047][T29478]   lock(fs_reclaim);
[  719.870269][T29478] 
[  719.870269][T29478]  *** DEADLOCK ***
[  719.870269][T29478] 
[  719.872729][T29478] locks held by syz.0.5513/29478: 3, last CPU#1:
[  719.874646][T29478]  #0: ffff8881153b6460 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  719.877446][T29478]  #1: ffff88819f2d8f80 (&type->i_mutex_dir_key#7){++++}-{4:4}, at: lookup_open+0x242/0x1a40
[  719.880682][T29478]  #2: ffff88810c030980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  719.883978][T29478] 
[  719.883978][T29478] stack backtrace:
[  719.885789][T29478] CPU: 1 UID: 0 PID: 29478 Comm: syz.0.5513 Not tainted syzkaller #0 PREEMPT(full) 
[  719.889148][T29478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  719.892569][T29478] Call Trace:
[  719.893785][T29478]  <TASK>
[  719.894783][T29478]  dump_stack_lvl+0xe8/0x150
[  719.896465][T29478]  print_circular_bug+0x2e2/0x300
[  719.898041][T29478]  check_noncircular+0x12f/0x150
[  719.899621][T29478]  __lock_acquire+0x15ff/0x2e50
[  719.901144][T29478]  ? __lock_acquire+0x6df/0x2e50
[  719.902664][T29478]  lock_acquire+0x115/0x350
[  719.904117][T29478]  ? kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  719.905992][T29478]  ? lock_acquire+0x115/0x350
[  719.907488][T29478]  fs_reclaim_acquire+0x71/0x100
[  719.909083][T29478]  ? kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  719.910951][T29478]  kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  719.912762][T29478]  ? alloc_inode+0xb8/0x1b0
[  719.914238][T29478]  ? alloc_inode+0xb8/0x1b0
[  719.915680][T29478]  ? find_inode_fast+0xd2/0x740
[  719.917165][T29478]  alloc_inode+0xb8/0x1b0
[  719.918488][T29478]  iget_locked+0x131/0x6a0
[  719.919843][T29478]  kernfs_get_inode+0x4f/0x770
[  719.921326][T29478]  kernfs_iop_lookup+0x1fe/0x320
[  719.922896][T29478]  lookup_open+0x9e1/0x1a40
[  719.924360][T29478]  path_openat+0x677/0x1d60
[  719.925798][T29478]  do_file_open+0x23e/0x4a0
[  719.927285][T29478]  ? __pfx_do_file_open+0x10/0x10
[  719.928886][T29478]  ? _raw_spin_unlock+0x28/0x50
[  719.930450][T29478]  ? alloc_fd+0x651/0x6c0
[  719.931794][T29478]  do_sys_openat2+0x115/0x200
[  719.933303][T29478]  ? __se_sys_futex+0x3a8/0x450
[  719.934838][T29478]  ? __pfx_do_sys_openat2+0x10/0x10
[  719.936425][T29478]  ? rcu_is_watching+0x16/0xb0
[  719.937930][T29478]  __x64_sys_openat+0x138/0x170
[  719.939415][T29478]  do_syscall_64+0x166/0x520
[  719.940877][T29478]  ? trace_irq_disable+0x3b/0x140
[  719.942478][T29478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.944389][T29478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.946258][T29478] RIP: 0033:0x7f8efeb9e159
[  719.947723][T29478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.955469][T29478] RSP: 002b:00007f8effae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  719.958974][T29478] RAX: ffffffffffffffda RBX: 00007f8efee25fa0 RCX: 00007f8efeb9e159
[  719.962116][T29478] RDX: 000000000000275a RSI: 00002000000003c0 RDI: 0000000000000012
[  719.965375][T29478] RBP: 00007f8efec35024 R08: 0000000000000000 R09: 0000000000000000
[  719.968881][T29478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.972036][T29478] R13: 00007f8efee26038 R14: 00007f8efee25fa0 R15: 00007ffd88f2fe68
[  719.975209][T29478]  </TASK>
[  720.011960][T29479] sctp: [Deprecated]: syz.2.5514 (pid 29479) Use of int in max_burst socket option.
[  720.011960][T29479] Use struct sctp_assoc_value instead
[  720.034191][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  721.073748][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  722.113714][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  723.153684][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  723.446249][ T5043] udevd[5043]: worker [13255] /devices/virtual/block/nbd2 timeout; kill it
[  723.446338][ T5043] udevd[5043]: seq 27231 '/devices/virtual/block/nbd2' killed
[  724.193776][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  725.233724][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  726.273955][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  727.313724][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  728.353697][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  729.393793][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
