last executing test programs:

701.413765ms ago: executing program 1 (id=3681):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x12, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000000f50800044000000001080001400000000008000640000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

584.878489ms ago: executing program 1 (id=3682):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x0) (async)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x3, 0x1, 0x8})
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x148, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0x100, 0x2a, [@cf={0x4, 0x6, {0x9, 0x42, 0x1, 0x10}}, @perr={0x84, 0xb5, {0x3, 0xb, [{{0x0, 0x1}, @broadcast, 0xc240, @value, 0x20}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x2f}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x2}, {{}, @device_b, 0x2, @void, 0x32}, {{}, @device_a, 0x54b, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0x400000, @value, 0xd}, {{}, @device_a, 0x1, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x19}, {{0x0, 0x1}, @device_b, 0x1000, @value, 0x27}, {{}, @broadcast, 0x1ff, @void, 0x2b}, {{}, @device_b, 0x9, @void, 0x40}]}}, @preq={0x82, 0x36, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x60, 0x2, 0x2, @device_b, 0x200, @value=@broadcast, 0x2, 0x6, 0x2, [{{0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x2}]}}, @channel_switch={0x25, 0x3, {0x1, 0x84, 0x6}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000)

412.643358ms ago: executing program 1 (id=3685):
syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x32, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x4c}}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x32, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x4c}}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) (async)

410.973231ms ago: executing program 0 (id=3687):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4, 0x100, 0xfffffe01, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "381748ab2e06e17b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77ba}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdc}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0xdb5ba761cc214b3e}, 0x40108c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)

365.250141ms ago: executing program 1 (id=3689):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000000000000000000181100003989b58d15a61910df71f6f9465dcdd78b8d94e2fce77b3afa2983028c5881fe66c9d6528f508a95567fb9984c34a58f1950548b3b1403c6d9e2f0644c8e58e27775b4ca494795dc9aa8673a12b821e9bc5a923854f848fe283cd052a5494a4bb19636744edb5dae68735ece6d44e565082f7a93df401c", @ANYBLOB="4ff153cb170be57e8f515075d4803c8a5f15933c996d6e9b97753be4404ec784ecf9f54ba1118d87c37b3ca2ec037df358de470aaf89a69721d8d6bf3c35c0f2c75fb7e3ba0f497c2cf6d4ae2d757652f1fe54effc23010a1d610f7452c423648c4f13a704a1a00474f511144d40ba4549027c264a3546254d104db7b4b588e7b76159a2a16e3b82fa20ca62a1a4639999c38cd222eec8ba8c947b5ab4e6a7fa7c6e6b7344ae16", @ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x14a80, 0x10, 0x38, &(0x7f00000015c0)="24006f20a01c2500", &(0x7f0000001480)=""/15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x5d)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r5, 0x0, 0x0, 0xee)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x40000, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'cbc(cast5)\x00'}}}]}, 0x138}}, 0x0)
r7 = socket$isdn(0x22, 0x3, 0x11)
getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x12020)
ioctl$TUNSETNOCSUM(r8, 0x80087601, 0x100000000010001)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$inet6(0xa, 0x3, 0x6) (async)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000000000000000000181100003989b58d15a61910df71f6f9465dcdd78b8d94e2fce77b3afa2983028c5881fe66c9d6528f508a95567fb9984c34a58f1950548b3b1403c6d9e2f0644c8e58e27775b4ca494795dc9aa8673a12b821e9bc5a923854f848fe283cd052a5494a4bb19636744edb5dae68735ece6d44e565082f7a93df401c", @ANYBLOB="4ff153cb170be57e8f515075d4803c8a5f15933c996d6e9b97753be4404ec784ecf9f54ba1118d87c37b3ca2ec037df358de470aaf89a69721d8d6bf3c35c0f2c75fb7e3ba0f497c2cf6d4ae2d757652f1fe54effc23010a1d610f7452c423648c4f13a704a1a00474f511144d40ba4549027c264a3546254d104db7b4b588e7b76159a2a16e3b82fa20ca62a1a4639999c38cd222eec8ba8c947b5ab4e6a7fa7c6e6b7344ae16", @ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x14a80, 0x10, 0x38, &(0x7f00000015c0)="24006f20a01c2500", &(0x7f0000001480)=""/15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x5d) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pwrite64(r5, 0x0, 0x0, 0xee) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x40000, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'cbc(cast5)\x00'}}}]}, 0x138}}, 0x0) (async)
socket$isdn(0x22, 0x3, 0x11) (async)
getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12020) (async)
ioctl$TUNSETNOCSUM(r8, 0x80087601, 0x100000000010001) (async)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9) (async)

312.778815ms ago: executing program 0 (id=3690):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r3, 0x0, 0x0, 0x61, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

308.255643ms ago: executing program 2 (id=3691):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe4}}, 0x2404c800)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe4}}, 0x2404c800) (async)

303.958171ms ago: executing program 0 (id=3692):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7, 0xa8, @random="006f02"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0}}], 0x1, 0x2000c044)
close(0x3)

203.774594ms ago: executing program 2 (id=3693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c000280140006000000000000000300000000000000000114000700ff00000000000000000000000000000108000400050000ef"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

203.318931ms ago: executing program 1 (id=3694):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
recvmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/156, 0x9c}], 0x1, &(0x7f0000000380)=""/6, 0x6}, 0x10020)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000014c0)=0x10000b, 0x61)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@iv={0xc8, 0x117, 0x2, 0xaf, "e8e0a118483932776398edd7c927e4ff375e3052fb314c1c312eb41da249bbf033ba470252f3593498ceed4ab3ae44cd705f6e2910de510b51b467b4076381406762a72caeec1c4caa3a3d97802308845034ed6e2849ef56df4cbd11a56032748ea46580b18d56dbd2a63857e620eeacfe72125b3f025d433610952916018afa7b745b210233e3fe2329c8ae7a30697fea8fc05efd3a4aab1476ed495c66cd2b18acfcc66167d0f4475bbeef818897"}], 0xc8}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

202.858822ms ago: executing program 0 (id=3695):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048801)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r2, 0x0)
shutdown(r2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x803, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="afe9b6e6b8373d142cd978e3afb8ace5cecffe013df8eef05757f139d8a6628312d1e430e4d67be76c2e5148a2cc7173f9eed666881f6f84f48f161b201a38ad3ed53328f0293f7ec6c6688a2ab6e160e6b9aa79a34eb83afa002cc9d9d6664415a9084771c6fbe5c3b40d6bf49d28942c079296e42d5273cb131ff4dab413ae6fa2460000000044886d2e768afe170426bbcbf16a5810d5fde32c9378ee8dd8b36ec5826ee157dcc796bc75a01a3685711ddf80c0e313f1deb650eb2ef1e70ddcc1f66864c238f8b5705cd5f12b183f"], 0xc4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000040)=0x4, 0x4)

201.662394ms ago: executing program 2 (id=3696):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
clock_gettime(0x0, &(0x7f0000001940)={<r3=>0x0, <r4=>0x0})
recvmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@caif=@rfm, 0x80, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/139, 0x8b}, {&(0x7f0000001300)=""/48, 0x30}], 0x4, &(0x7f0000001380)=""/186, 0xba}, 0x3}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001440)=""/14, 0xe}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/29, 0x1d}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/234, 0xea}], 0x5, &(0x7f0000001800)=""/136, 0x88}}], 0x2, 0x2, &(0x7f0000001980)={r3, r4+60000000}) (async)
recvmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@caif=@rfm, 0x80, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/139, 0x8b}, {&(0x7f0000001300)=""/48, 0x30}], 0x4, &(0x7f0000001380)=""/186, 0xba}, 0x3}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001440)=""/14, 0xe}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/29, 0x1d}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/234, 0xea}], 0x5, &(0x7f0000001800)=""/136, 0x88}}], 0x2, 0x2, &(0x7f0000001980)={r3, r4+60000000})
sendto(r0, &(0x7f00000019c0)="602f9904d0221f9dccc70113c5364c20444bda4ad6ca5c30fcad3c834415d26dc0e12c10d3e1b04953017c02a9a6f27c0ceea99a798d77332cdd20cb793b1bde70ab1206e4353fb04124bf59b9f8ec84a77308bd54bf1483fa97ea49c78587e2261f8c6a793db42662e920f59f494f7cbca89273c6a6c5b0d9fccc46237918d6060a7fa5ac6cdbd9cfb92f40815dd56b08b3bc21bbe8e619c8ad942a8dfdfecd686448661925788c1046956594733884350463aab6ebeeeafb5ccb62132ea245b3d38495544536bafb6e68a5192574b6b37cf71b7e11d3458ed13b", 0xdb, 0x4004011, &(0x7f0000001ac0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60040001}, 0x80850) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60040001}, 0x80850)
ioctl$int_in(r0, 0x5421, &(0x7f0000001c40)=0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x47c}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9d7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20000008)
connect(0xffffffffffffffff, &(0x7f0000001d80)=@caif=@rfm={0x25, 0x6, "a16140b93462b36bb0843b419a24fbaa"}, 0x80)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002600)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000025c0)={&(0x7f0000001e40)={0x748, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x2, {0x7, 0x8}, "01bfdb33978e6278"}]}}}, @NL80211_ATTR_FRAME={0x49e, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7340}, @device_b, @broadcast, @initial, {0xa, 0xf}, @value=@ver_80211n={0x0, 0x40, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x5, [{0x24, 0x1}, {0x4}, {0x16, 0x1}, {0x2, 0x1}, {0x6, 0x1}]}, @val={0x3, 0x1, 0xb}, @val={0x2d, 0x1a, {0x4020, 0x2, 0x1, 0x0, {0x7fffffffffffffff, 0x1b0c, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x6, 0x7b}}, @void, [{0xdd, 0xc1, "4195005830225f89f59aa2608b852d768b957106478c8d6ea5ba43e5899bf23b4be48257ffd0bfe3691692210a45225e6f3d22fa4a6fa02afc162221a5bedb735bbea5d3a364b4f57685f07cb04b857800ca751de237b983b151062dcdbf0f04f942e2daf2bf1dd3a3403d7a2f362d7ab927736333c8233a18822baa2f0acbb3e928cf7bf605a6f486a91ae7d4ae52d2a5982c48ed2dcd0ae5aefb7c1925cdfe6fc03e2ab2ce9f35e3aeccb2c1de96cc41fcc4b73cc11221d0df2927430c59df6b"}, {0xdd, 0x93, "dd943b7fe3d062ab62e7def9d23b59779a7d0c35742d2a55f6bda20d9c772ffb7167f603cdc5e4f9c9e9bc284f8b8085f476a01f1d6e526ce6a888fb1073eb0655763aebc6ee2a6ab769efff84a6a8535f8a38f4f78e6eea7ce7c21b4269c338b93117191a410e36e5abf36b817fb743ba3e7c35acf5e2682ba326ffa56414f48c0720a0073b13d81b48e614becda2dcc3e84c"}, {0xdd, 0x63, "31eb07149b955a1cb61efbb09c5443a4dda0783ac73f21a6a61ca9f6f890ad4306dff66ff4230b5bb050c131a425c7024ee09031c9a6e681b631f37969b0847bc5397c0960f8a1f97334b4d12fde5012e77eb9316d59e3fdf2daa61891fcfdf271269b"}, {0xdd, 0xfe, "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"}, {0xdd, 0xa0, "c6d8e49ac4eb343c3a6da15cc96f045d52ad0e1feda1143a6dd9b70c5caa74f83bb427066f151e1ca6252b42e9e920590953ecaaeeedc3a5b2ed9ceb7792078ad7c03e8d65f845b1cdb48e733c76c8bf3f9f7812569476612d7708936cc7892434bc0f8c5d1beb61ffd6a9d2209fa75dbd0a14a058b57def696e9bf7f024f14b7e988894188e00fe7bc90d6b2172c2a030357ee8dc9a7b06088875a712f922ac"}, {0xdd, 0xf7, "9eb6f8e277b99b0ec1bc713fce5112855d371769d15bd0c7a43350cd90ee04db2fc2a239831dbd70122ed6f692dce7b9e4699e865789a991b34b1773c87522e101e00263db4ec23f3c858162f208691843e3fab2cb6860ff8a2098dc7d7a35130507c299850df7b9ee0509560d42e381db93549978421a631051ec7b600da36f40c3136817884d6ae8d60390f5af6da8a16f1f9999e2dfa134a2e28b19cc3d07bed9cd3dd58c30a6cd58d076047cb267571f61f53823f34f83bd7255129b966adf0e0dd6a5e83007ff1e3d34c25536842f24d1a828b7936dc04ce17db15c3a2af77e4f6cee7330192f8fbabd86d63e5e4bf61a8f01cc10"}]}}, @NL80211_ATTR_FRAME={0x224, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @from_mac=@broadcast, @device_b, {0x2, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x6244, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x9e, "22b9854387a61c4e2334420155a2e788338ec584c2654d9d9eee1e69909432a68eb1f7ac2b2118db683bb525e7981625d1341447c3a8a078e19c2449d2201073322364182dfa0ce9d0ebb5f5fbdadd533e7cdeb64da8b50864d19b634f523b7cecd78dfa681c4a090350104f550f905764a4b503a6a23121a87513bafd9416416e7003bf6d3ddc614c2b42549d30a5c45019f2c2d0a7c0a9b55781224844"}, {@device_a, @broadcast, 0xa9, "93366f777d3cf34542ed4f4de3d557aa6c3a870448e419e441f51edb0f1c90c29644954715ccc3433ccb5db65a83ab2eb9a42c4a5694cf8604c0cb42d523082650153e8cec1b789291a894e46776fd543c3b92dc5c15b6bbe4eac0f1118c0f02ea511f0330b03ef562fab4d3d409442b48e4b8dc9b3600cebe085e2b5d2f4687e830595e273b54e601e14a2f41674b22367a7d339e389f531ff74269deca0485e1d7b1ad7ca7a43e5e"}, {@broadcast, @broadcast, 0x61, "fa5aaa09e2c5cd398a3c4d85836e078a94517fc3cb970a44d3ff3e9d157bb97158f0ed7086634ce74bc31abd7090e1853d918120d84527b038ad400a8bcf30747959ccaf205e3ddf80dccce04a09d4a2066d22de4b2fe9786bea39d092e9881266"}, {@broadcast, @device_b, 0x1f, "1eac12dfdccf2fef17783a358606c40c06bde62217814f82dd7561389ac147"}]}}]}, 0x748}, 0x1, 0x0, 0x0, 0x8004014}, 0x4008004) (async)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002600)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000025c0)={&(0x7f0000001e40)={0x748, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x2, {0x7, 0x8}, "01bfdb33978e6278"}]}}}, @NL80211_ATTR_FRAME={0x49e, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7340}, @device_b, @broadcast, @initial, {0xa, 0xf}, @value=@ver_80211n={0x0, 0x40, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x5, [{0x24, 0x1}, {0x4}, {0x16, 0x1}, {0x2, 0x1}, {0x6, 0x1}]}, @val={0x3, 0x1, 0xb}, @val={0x2d, 0x1a, {0x4020, 0x2, 0x1, 0x0, {0x7fffffffffffffff, 0x1b0c, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x6, 0x7b}}, @void, [{0xdd, 0xc1, "4195005830225f89f59aa2608b852d768b957106478c8d6ea5ba43e5899bf23b4be48257ffd0bfe3691692210a45225e6f3d22fa4a6fa02afc162221a5bedb735bbea5d3a364b4f57685f07cb04b857800ca751de237b983b151062dcdbf0f04f942e2daf2bf1dd3a3403d7a2f362d7ab927736333c8233a18822baa2f0acbb3e928cf7bf605a6f486a91ae7d4ae52d2a5982c48ed2dcd0ae5aefb7c1925cdfe6fc03e2ab2ce9f35e3aeccb2c1de96cc41fcc4b73cc11221d0df2927430c59df6b"}, {0xdd, 0x93, "dd943b7fe3d062ab62e7def9d23b59779a7d0c35742d2a55f6bda20d9c772ffb7167f603cdc5e4f9c9e9bc284f8b8085f476a01f1d6e526ce6a888fb1073eb0655763aebc6ee2a6ab769efff84a6a8535f8a38f4f78e6eea7ce7c21b4269c338b93117191a410e36e5abf36b817fb743ba3e7c35acf5e2682ba326ffa56414f48c0720a0073b13d81b48e614becda2dcc3e84c"}, {0xdd, 0x63, "31eb07149b955a1cb61efbb09c5443a4dda0783ac73f21a6a61ca9f6f890ad4306dff66ff4230b5bb050c131a425c7024ee09031c9a6e681b631f37969b0847bc5397c0960f8a1f97334b4d12fde5012e77eb9316d59e3fdf2daa61891fcfdf271269b"}, {0xdd, 0xfe, "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"}, {0xdd, 0xa0, "c6d8e49ac4eb343c3a6da15cc96f045d52ad0e1feda1143a6dd9b70c5caa74f83bb427066f151e1ca6252b42e9e920590953ecaaeeedc3a5b2ed9ceb7792078ad7c03e8d65f845b1cdb48e733c76c8bf3f9f7812569476612d7708936cc7892434bc0f8c5d1beb61ffd6a9d2209fa75dbd0a14a058b57def696e9bf7f024f14b7e988894188e00fe7bc90d6b2172c2a030357ee8dc9a7b06088875a712f922ac"}, {0xdd, 0xf7, "9eb6f8e277b99b0ec1bc713fce5112855d371769d15bd0c7a43350cd90ee04db2fc2a239831dbd70122ed6f692dce7b9e4699e865789a991b34b1773c87522e101e00263db4ec23f3c858162f208691843e3fab2cb6860ff8a2098dc7d7a35130507c299850df7b9ee0509560d42e381db93549978421a631051ec7b600da36f40c3136817884d6ae8d60390f5af6da8a16f1f9999e2dfa134a2e28b19cc3d07bed9cd3dd58c30a6cd58d076047cb267571f61f53823f34f83bd7255129b966adf0e0dd6a5e83007ff1e3d34c25536842f24d1a828b7936dc04ce17db15c3a2af77e4f6cee7330192f8fbabd86d63e5e4bf61a8f01cc10"}]}}, @NL80211_ATTR_FRAME={0x224, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @from_mac=@broadcast, @device_b, {0x2, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x6244, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x9e, "22b9854387a61c4e2334420155a2e788338ec584c2654d9d9eee1e69909432a68eb1f7ac2b2118db683bb525e7981625d1341447c3a8a078e19c2449d2201073322364182dfa0ce9d0ebb5f5fbdadd533e7cdeb64da8b50864d19b634f523b7cecd78dfa681c4a090350104f550f905764a4b503a6a23121a87513bafd9416416e7003bf6d3ddc614c2b42549d30a5c45019f2c2d0a7c0a9b55781224844"}, {@device_a, @broadcast, 0xa9, "93366f777d3cf34542ed4f4de3d557aa6c3a870448e419e441f51edb0f1c90c29644954715ccc3433ccb5db65a83ab2eb9a42c4a5694cf8604c0cb42d523082650153e8cec1b789291a894e46776fd543c3b92dc5c15b6bbe4eac0f1118c0f02ea511f0330b03ef562fab4d3d409442b48e4b8dc9b3600cebe085e2b5d2f4687e830595e273b54e601e14a2f41674b22367a7d339e389f531ff74269deca0485e1d7b1ad7ca7a43e5e"}, {@broadcast, @broadcast, 0x61, "fa5aaa09e2c5cd398a3c4d85836e078a94517fc3cb970a44d3ff3e9d157bb97158f0ed7086634ce74bc31abd7090e1853d918120d84527b038ad400a8bcf30747959ccaf205e3ddf80dccce04a09d4a2066d22de4b2fe9786bea39d092e9881266"}, {@broadcast, @device_b, 0x1f, "1eac12dfdccf2fef17783a358606c40c06bde62217814f82dd7561389ac147"}]}}]}, 0x748}, 0x1, 0x0, 0x0, 0x8004014}, 0x4008004)
syz_genetlink_get_family_id$batadv(&(0x7f0000002640), r0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xac}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41405) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xac}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41405)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0xb0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17, 0xa8, @random="c81f38ccaa11cee2464ccf43fa02f230734310"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x4000002)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x14, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4048010)
ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000002a00)) (async)
ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000002a00))
openat$ppp(0xffffffffffffff9c, &(0x7f0000002a40), 0x10000, 0x0) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002a40), 0x10000, 0x0)
ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000002a80)={0x21, 0x1})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002b00), r0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x2c, r8, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvtap0\x00'}}}, ["", "", "", ""]}, 0x2c}}, 0x40008c0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002c80)={'syztnl1\x00', <r10=>0x0, 0x7800, 0x8, 0xcd62, 0x1, {{0x20, 0x4, 0x0, 0x9, 0x80, 0x64, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_prespec={0x44, 0x44, 0x7d, 0x3, 0x5, [{@empty, 0x3}, {@local, 0xfffffff8}, {@loopback, 0x101}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x107}, {@multicast1, 0x7f}, {@multicast1, 0x9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x3f, [@local, @multicast2, @multicast2, @multicast2, @local, @multicast1, @multicast1, @loopback]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'wg0\x00', <r11=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003080)={0xffffffffffffffff, 0xe0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002dc0)=[0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000002e80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002ec0), &(0x7f0000002f00), 0x8, 0x62, 0x8, 0x8, &(0x7f0000002f40)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000030c0)={'vcan0\x00', <r13=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000003100)=<r14=>0x0, &(0x7f0000003140)=0x4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000003ac0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003840)={0x218, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}}, 0x800)

192.994842ms ago: executing program 1 (id=3697):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0)
read(r1, &(0x7f0000000140)=""/166, 0xa6)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1d, 0x802, 0x6)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690add", 0x4}], 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0a000300000000000820168004000180"], 0x28}}, 0x0)
mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10d00, 0xf)
socket$nl_netfilter(0x10, 0x3, 0xc)

105.097438ms ago: executing program 0 (id=3698):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040081)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00082bbd7000fddbdf250800000028000380050008004500000014000600ff020000000000000000000000000001080001000000000008000500400000001800038014000600"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4000030}, 0x801) (async)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00082bbd7000fddbdf250800000028000380050008004500000014000600ff020000000000000000000000000001080001000000000008000500400000001800038014000600"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4000030}, 0x801)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r5, 0x0)
r6 = epoll_create1(0x0)
epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8)
close(r6) (async)
close(r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x404, r7, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x400, 0x4a}}}}, [@NL80211_ATTR_TX_RATES={0x3dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xc, 0x4, 0x3, 0x7b, 0x2, 0xb, 0x6, 0x1b, 0x12, 0x16, 0x36, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x2, 0xad41, 0x2, 0x4, 0x100, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x3, 0x8, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xad0, 0x7, 0x2, 0x0, 0x6, 0xfff1, 0x800, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x9, 0x6, 0x8, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x2}, {0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x25d, 0x4, 0x6, 0x5, 0x2, 0xf, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0xa}, {0x7, 0x6}, {0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x800, 0x5, 0x4, 0xa, 0x6, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf7d, 0x14, 0x8, 0x7ff, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x5}, {0x4}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x7, 0x6}, {0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x4}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x3ff0, 0x5, 0x81, 0x3, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x48, 0x9, 0x9, 0x6, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeaf, 0x19, 0x83, 0x9df, 0x6, 0x3639, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0xc, 0x4, 0x4, 0x6c, 0x16, 0x4, 0x36, 0x30, 0x3, 0x30, 0x36, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4, 0x81, 0x949, 0x40, 0xde8b, 0xfffd]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x6}, {}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff93, 0x0, 0xff, 0xf001, 0x8, 0x100, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x5}, {}, {0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x7}, {0x2, 0x4}, {0x5, 0x7}, {0x1}, {0x2, 0x9}, {0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x48, 0x4, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x8}, {0x7}, {0x2, 0x6}, {0x1}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x2}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x0, 0x6, 0x1ff, 0x3, 0x2, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xbca1, 0x8, 0x1, 0x3, 0x8001, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x5, 0x3, 0x0, 0x9, 0x7, 0x24]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x6c, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0xa040248e8ee698ab, 0x1b, 0x6c, 0x5, 0x5, 0x1f, 0x2, 0x6, 0x3a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xb, 0x4, 0x3b, 0xb2c, 0x6, 0x5]}}]}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x40}, 0x4800) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x404, r7, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x400, 0x4a}}}}, [@NL80211_ATTR_TX_RATES={0x3dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xc, 0x4, 0x3, 0x7b, 0x2, 0xb, 0x6, 0x1b, 0x12, 0x16, 0x36, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x2, 0xad41, 0x2, 0x4, 0x100, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x3, 0x8, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xad0, 0x7, 0x2, 0x0, 0x6, 0xfff1, 0x800, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x9, 0x6, 0x8, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x2}, {0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x25d, 0x4, 0x6, 0x5, 0x2, 0xf, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0xa}, {0x7, 0x6}, {0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x800, 0x5, 0x4, 0xa, 0x6, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf7d, 0x14, 0x8, 0x7ff, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x5}, {0x4}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x7, 0x6}, {0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x4}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x3ff0, 0x5, 0x81, 0x3, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x48, 0x9, 0x9, 0x6, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeaf, 0x19, 0x83, 0x9df, 0x6, 0x3639, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0xc, 0x4, 0x4, 0x6c, 0x16, 0x4, 0x36, 0x30, 0x3, 0x30, 0x36, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4, 0x81, 0x949, 0x40, 0xde8b, 0xfffd]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xec, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x6}, {}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff93, 0x0, 0xff, 0xf001, 0x8, 0x100, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x8}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x5}, {}, {0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x7}, {0x2, 0x4}, {0x5, 0x7}, {0x1}, {0x2, 0x9}, {0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x48, 0x4, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x8}, {0x7}, {0x2, 0x6}, {0x1}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x2}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x0, 0x6, 0x1ff, 0x3, 0x2, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xbca1, 0x8, 0x1, 0x3, 0x8001, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x5, 0x3, 0x0, 0x9, 0x7, 0x24]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x6c, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0xa040248e8ee698ab, 0x1b, 0x6c, 0x5, 0x5, 0x1f, 0x2, 0x6, 0x3a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xb, 0x4, 0x3b, 0xb2c, 0x6, 0x5]}}]}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x40}, 0x4800)
r9 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="45bd", 0x2}], 0x1, 0x0, 0x0, 0x2008000}], 0x1, 0x24040806)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0) (async)
shutdown(r12, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000001c0)={<r13=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f0000000300)={r13, 0x7f, 0x2, '|0'}, 0xa)
sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

104.692239ms ago: executing program 2 (id=3699):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async, rerun: 64)
r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64)
sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0xfffffffffffffd92}, &(0x7f0000001540)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/91, 0x52}], 0x1}}, @fadd={0x58, 0x114, 0x6, {{0xa4f, 0xff}, &(0x7f0000000040), &(0x7f00000000c0)=0xc, 0x7, 0x0, 0x4, 0xff, 0x14, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x40}}], 0x118}, 0x0) (async, rerun: 64)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES8, @ANYRES64], 0x174}}, 0x40000)

5.840411ms ago: executing program 2 (id=3700):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

4.905601ms ago: executing program 0 (id=3701):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000022380300140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB="ec7f316e00593c4f27cfecc0a5dedc094f1bd1aff564aec98b5da44347cfb887d1a283275675ef122c7c99273f6791dbe378f8b5a023bceff9b237030e6157280740c528c6b73cbbd0f6ad09e0549dd44c3f62648331362c01afa0e33aab66ddddb8266e6c15de4d66f8e163fe168ea3697443e830f4ffd72c"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@local, 0x16, r1})

0s ago: executing program 2 (id=3702):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40004800)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001900010028bd7000fcdbdf250a0014000000000400040000060015000500000008001700ffffffff2326280905f843177449a181dc42c0488f03bfc7e7d9b33b5864a6a28e57a7780277cd74e42765e860ef43d8fc7f1f630a9be1cdf000e655109f3a2cad6be5694aa399b97165d8b9e9e96afac4448b6ecf406ff0af824f43350368fa3093f1bfc7743f1e2ff3d476bb1898ad694248898b94f9495fdb4b3c511fd6f06547ab27d7876c6f7faf8e8826fec466cc2a1835dd671f7271375e9b112810ad5276205ee025e7a6423344a78b944e6445799b83bf88981bbfdc"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001900010028bd7000fcdbdf250a0014000000000400040000060015000500000008001700ffffffff2326280905f843177449a181dc42c0488f03bfc7e7d9b33b5864a6a28e57a7780277cd74e42765e860ef43d8fc7f1f630a9be1cdf000e655109f3a2cad6be5694aa399b97165d8b9e9e96afac4448b6ecf406ff0af824f43350368fa3093f1bfc7743f1e2ff3d476bb1898ad694248898b94f9495fdb4b3c511fd6f06547ab27d7876c6f7faf8e8826fec466cc2a1835dd671f7271375e9b112810ad5276205ee025e7a6423344a78b944e6445799b83bf88981bbfdc"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0xa, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)) (async)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080))
listen(r2, 0x100) (async)
listen(r2, 0x100)
socket(0x2, 0xa, 0x300)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000600), 0x0, 0x4040000)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @loopback, 0x8eb}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="4a7814f43d99a4215e0276c384be307fdd89815c2fce01dda926b8907ee10f4c590edc", 0x23}], 0x1, &(0x7f0000000040), 0x0, 0x4855}, 0x4008850)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$rxrpc(0x21, 0x2, 0x2) (async)
socket$rxrpc(0x21, 0x2, 0x2)
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000a3920000730199000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18001846dd1b665c33362de1ea1c49000000000a528ded4779d0dd24429f1ea0a5a39199b98d6f337f003df6cd19c498a48769c4feaa0c8cb2c499468c10512dfd4e1f0ae1097a072df8"], &(0x7f00000003c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x24}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@delchain={0x54, 0x65, 0x203, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x7, 0x6}, {0x10, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xc, 0x6}}, @TCA_RATE={0x6, 0x5, {0x40, 0x2}}, @TCA_RATE={0x6, 0x5, {0x39}}, @TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r8)

kernel console output (not intermixed with test programs):

yz.0.2193'.
[  201.798286][T13657] bond0: (slave batadv_slave_0): Error: Slave has XDP program loaded, please unload before enslaving
[  201.918276][T13659] lo speed is unknown, defaulting to 1000
[  201.921073][T13659] lo speed is unknown, defaulting to 1000
[  202.212776][T13684] netlink: 'syz.0.2200': attribute type 1 has an invalid length.
[  202.333900][T13684] macvlan1: entered promiscuous mode
[  202.335908][T13684] macvlan1: entered allmulticast mode
[  202.354347][T13684] bond67: entered promiscuous mode
[  202.357928][T13684] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  202.409933][T13684] bond67: left promiscuous mode
[  202.440029][T13676] lo speed is unknown, defaulting to 1000
[  202.459989][T13676] lo speed is unknown, defaulting to 1000
[  202.514540][T13701] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  202.524973][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.530872][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.542139][T13701] netlink: 'syz.0.2202': attribute type 2 has an invalid length.
[  202.552260][T13701] netlink: 'syz.0.2202': attribute type 2 has an invalid length.
[  202.554468][T13701] netlink: 'syz.0.2202': attribute type 2 has an invalid length.
[  202.566133][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.570614][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.573888][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.598287][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.601120][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.604139][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  202.784688][T13707] netlink: 'syz.0.2204': attribute type 23 has an invalid length.
[  202.884330][T13712] netlink: 'syz.1.2206': attribute type 23 has an invalid length.
[  202.894548][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'.
[  203.108239][T13723] netlink: 'syz.1.2210': attribute type 1 has an invalid length.
[  203.389519][T13737] netlink: 'syz.0.2215': attribute type 1 has an invalid length.
[  204.633419][T13677] net_ratelimit: 37 callbacks suppressed
[  204.633438][T13677] Set syz1 is full, maxelem 65536 reached
[  204.683171][T13759] syzkaller0: entered promiscuous mode
[  204.709655][T13760] xt_hashlimit: size too large, truncated to 1048576
[  205.102793][T13795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  205.173603][T13798] syzkaller1: entered promiscuous mode
[  205.175222][T13798] syzkaller1: entered allmulticast mode
[  205.261438][T13784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.343203][T13812] macsec3: entered promiscuous mode
[  205.344758][T13812] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  205.535563][T13823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  205.588793][T13825] bond66: (slave vxcan1): The slave device specified does not support setting the MAC address
[  205.591748][T13825] bond66: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  205.598754][T13825] bond66: (slave vxcan1): making interface the new active one
[  205.601299][T13825] bond66: (slave vxcan1): Enslaving as an active interface with an up link
[  205.604528][T13825] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.609408][T13826] bond66 (unregistering): (slave vxcan1): Releasing backup interface
[  205.612905][T13826] bond66 (unregistering): Released all slaves
[  205.925532][T13850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.253939][T13863] validate_nla: 6 callbacks suppressed
[  206.253953][T13863] netlink: 'syz.2.2251': attribute type 3 has an invalid length.
[  206.510689][T13875] ip6gretap0: entered promiscuous mode
[  206.513042][T13875] ip6gretap0: left promiscuous mode
[  206.685169][T13882] lo speed is unknown, defaulting to 1000
[  206.689483][T13882] lo speed is unknown, defaulting to 1000
[  206.880145][T13887] __nla_validate_parse: 11 callbacks suppressed
[  206.880158][T13887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2260'.
[  206.885847][T13887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2260'.
[  206.923004][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2261'.
[  207.102531][T13893] x_tables: duplicate underflow at hook 3
[  207.105484][T13901] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  207.109364][T13893] netlink: 584 bytes leftover after parsing attributes in process `syz.0.2262'.
[  207.195194][T13905] bond66: entered promiscuous mode
[  207.197270][T13905] bond66: entered allmulticast mode
[  207.199173][T13905] 8021q: adding VLAN 0 to HW filter on device bond66
[  207.245907][T13909] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  207.320297][T13912] netlink: 'syz.2.2267': attribute type 1 has an invalid length.
[  207.326501][T13913] netlink: 'syz.2.2267': attribute type 1 has an invalid length.
[  207.330604][T13915] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  207.336320][T13915] workqueue: Failed to create a rescuer kthread for wq "bond67": -EINTR
[  207.374465][T13921] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004
[  207.660297][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'.
[  207.712672][T13946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  207.763143][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'.
[  207.784376][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2280'.
[  207.794679][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'.
[  207.918959][T13964] lo speed is unknown, defaulting to 1000
[  207.921928][T13964] lo speed is unknown, defaulting to 1000
[  207.933166][T13960] netlink: 'syz.2.2283': attribute type 10 has an invalid length.
[  207.935820][T13960] netlink: 'syz.2.2283': attribute type 10 has an invalid length.
[  208.114013][T13974] bond32: option ad_select: invalid value (34)
[  208.117691][T13974] bond32 (unregistering): Released all slaves
[  208.168609][T13975] lo speed is unknown, defaulting to 1000
[  208.171993][T13975] lo speed is unknown, defaulting to 1000
[  208.256916][T13979] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2286'.
[  208.315979][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'.
[  208.654565][T14002] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  208.762719][T14010] netlink: 'syz.0.2296': attribute type 2 has an invalid length.
[  211.595421][T14011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.655904][T14026] netlink: 'syz.2.2299': attribute type 1 has an invalid length.
[  211.738861][T14032] batman_adv: batadv0: Adding interface: geneve3
[  211.740757][T14032] batman_adv: batadv0: The MTU of interface geneve3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  211.750083][T14032] batman_adv: batadv0: Interface activated: geneve3
[  211.753116][ T5809] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.767963][ T5809] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.771087][ T5809] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.773940][ T5809] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.778175][T14036] netlink: zone id is out of range
[  211.782984][T14036] netlink: zone id is out of range
[  211.784485][T14036] netlink: zone id is out of range
[  211.785974][T14036] netlink: zone id is out of range
[  211.790809][T14036] netlink: zone id is out of range
[  211.792742][T14036] netlink: zone id is out of range
[  211.794456][T14036] netlink: zone id is out of range
[  211.796018][T14036] netlink: zone id is out of range
[  211.798483][T14036] netlink: zone id is out of range
[  211.800061][T14036] netlink: zone id is out of range
[  211.854311][T14042] veth0: Caught tx_queue_len zero misconfig
[  212.022044][T14053] netlink: 'syz.1.2308': attribute type 11 has an invalid length.
[  212.054280][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.317541][T14070] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  212.319713][T14070] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  212.333691][T14078] netlink: 'syz.2.2315': attribute type 1 has an invalid length.
[  212.336611][T14078] netlink: 'syz.2.2315': attribute type 2 has an invalid length.
[  212.339386][T14078] netlink: 'syz.2.2315': attribute type 1 has an invalid length.
[  212.341883][T14078] netlink: 'syz.2.2315': attribute type 3 has an invalid length.
[  212.346822][T14078] __nla_validate_parse: 7 callbacks suppressed
[  212.346834][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'.
[  212.444367][T14085] lo speed is unknown, defaulting to 1000
[  212.447652][T14085] lo speed is unknown, defaulting to 1000
[  212.541990][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'.
[  212.625662][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'.
[  212.933608][  T126] block nbd3: Possible stuck request ffff88810a140000: control (read@0,1024B). Runtime 60 seconds
[  212.936610][  T126] block nbd3: Possible stuck request ffff88810a140200: control (read@1024,1024B). Runtime 60 seconds
[  212.939670][  T126] block nbd3: Possible stuck request ffff88810a140400: control (read@2048,1024B). Runtime 60 seconds
[  212.942673][  T126] block nbd3: Possible stuck request ffff88810a140600: control (read@3072,1024B). Runtime 60 seconds
[  213.333411][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  213.446814][T14098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  213.512112][T14112] netlink: 'syz.2.2326': attribute type 23 has an invalid length.
[  213.514417][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'.
[  213.616533][T14127] delete_channel: no stack
[  213.678385][T14132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'.
[  213.682146][T14132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'.
[  213.685430][T14132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'.
[  213.767143][T14140] netlink: 'syz.0.2336': attribute type 23 has an invalid length.
[  213.769537][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'.
[  213.781015][T14142] netlink: 'syz.1.2338': attribute type 1 has an invalid length.
[  213.856887][T14144] macvlan6: entered promiscuous mode
[  213.858595][T14144] macvlan6: entered allmulticast mode
[  213.860937][T14144] bond67: entered promiscuous mode
[  213.863129][T14144] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  213.868384][T14144] bond67: left promiscuous mode
[  214.044002][T14151] lo speed is unknown, defaulting to 1000
[  214.048409][T14151] lo speed is unknown, defaulting to 1000
[  214.057852][T14156] lo speed is unknown, defaulting to 1000
[  214.069215][T14162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2344'.
[  214.182552][T14169] macvtap1: entered promiscuous mode
[  214.184275][T14169] macvtap1: entered allmulticast mode
[  214.186391][T14169] @0: entered allmulticast mode
[  214.188658][T14169] @0: entered promiscuous mode
[  214.191367][T14169] team0: Device macvtap1 failed to register rx_handler
[  214.193947][T14169] @0: left allmulticast mode
[  214.197042][T14169] @0: left promiscuous mode
[  214.216762][T14156] lo speed is unknown, defaulting to 1000
[  214.292151][T14174] netlink: 'syz.0.2346': attribute type 23 has an invalid length.
[  214.557608][T14187] lo speed is unknown, defaulting to 1000
[  214.567445][T14187] lo speed is unknown, defaulting to 1000
[  214.866434][T14194] geneve4: entered promiscuous mode
[  214.886513][T14194] geneve4: entered allmulticast mode
[  214.890979][ T5861] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  214.897293][ T5861] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  214.906067][ T5861] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  214.923512][ T5861] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  214.996199][T14201] netlink: 'syz.2.2354': attribute type 1 has an invalid length.
[  215.079618][T14206] macvlan0: entered promiscuous mode
[  215.081206][T14206] macvlan0: entered allmulticast mode
[  215.083322][T14206] bond32: entered promiscuous mode
[  215.085036][T14206] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  215.095835][T14206] bond32: left promiscuous mode
[  215.242475][T14209] syzkaller0: left promiscuous mode
[  215.323072][T14215] syzkaller0: entered promiscuous mode
[  215.333863][T14215] macsec2: entered promiscuous mode
[  215.336479][T14215] syzkaller0: port 1(macsec2) entered blocking state
[  215.339097][T14215] syzkaller0: port 1(macsec2) entered disabled state
[  215.341213][T14215] macsec2: entered allmulticast mode
[  215.356782][T14215] macsec2: left allmulticast mode
[  215.415583][T14217] lo speed is unknown, defaulting to 1000
[  215.425686][T14217] lo speed is unknown, defaulting to 1000
[  216.030246][T14252] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  216.184397][T14256] ip6tnl0: Caught tx_queue_len zero misconfig
[  216.483992][T14265] xt_hashlimit: max too large, truncated to 1048576
[  216.493667][T14265] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  216.716597][T14275] validate_nla: 3 callbacks suppressed
[  216.716609][T14275] netlink: 'syz.2.2376': attribute type 23 has an invalid length.
[  216.882499][T14288] net_ratelimit: 134 callbacks suppressed
[  216.882516][T14288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  217.093648][T14302] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  217.228681][T14316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  217.280712][T14318] lo speed is unknown, defaulting to 1000
[  217.283387][T14318] lo speed is unknown, defaulting to 1000
[  217.561708][T14328] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  217.564442][T14328] __nla_validate_parse: 12 callbacks suppressed
[  217.564450][T14328] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2392'.
[  217.594657][T14328] : renamed from wg2
[  217.661049][T14336] openvswitch: netlink: IP tunnel dst address not specified
[  217.769825][T14340] veth0_to_hsr: entered allmulticast mode
[  217.797148][T14341] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2395'.
[  217.813790][T14341] syzkaller1: entered promiscuous mode
[  217.816538][T14341] syzkaller1: entered allmulticast mode
[  217.901133][T14350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2399'.
[  218.001469][T14363] netlink: 'syz.0.2403': attribute type 1 has an invalid length.
[  218.020438][T14360] netlink: 'syz.1.2402': attribute type 11 has an invalid length.
[  218.033292][T14363] macvlan1: entered promiscuous mode
[  218.035287][T14363] macvlan1: entered allmulticast mode
[  218.039799][T14363] bond68: entered promiscuous mode
[  218.042361][T14363] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  218.051929][T14363] bond68: left promiscuous mode
[  218.064017][T14360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.301082][T14385] lo speed is unknown, defaulting to 1000
[  218.303483][T14385] lo speed is unknown, defaulting to 1000
[  218.516090][T14398] xt_hashlimit: size too large, truncated to 1048576
[  218.585245][T14404] Cannot find del_set index 0 as target
[  218.773697][T14418] vlan0: entered allmulticast mode
[  218.778655][T14418] veth0_to_bond: entered allmulticast mode
[  218.791324][T14418] batman_adv: batadv0: Adding interface: vlan0
[  218.793538][T14418] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.800694][T14418] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  218.874172][T14425] lo speed is unknown, defaulting to 1000
[  218.877335][T14425] lo speed is unknown, defaulting to 1000
[  218.930225][T14431] macsec2: entered promiscuous mode
[  219.036501][T14436] xt_CT: No such helper "syz0"
[  219.205578][T14448] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  219.210171][T14441] lo speed is unknown, defaulting to 1000
[  219.214864][T14441] lo speed is unknown, defaulting to 1000
[  219.225256][T14442] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  219.353418][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'.
[  219.741823][T14465] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  219.761174][T14465] macvlan1: entered promiscuous mode
[  219.762847][T14465] macvlan1: entered allmulticast mode
[  219.765024][T14465] bond69: entered promiscuous mode
[  219.768555][T14465] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  219.772832][T14465] bond69: left promiscuous mode
[  219.931566][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'.
[  220.022722][T14473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  220.117365][T14477] netlink: 'syz.1.2433': attribute type 1 has an invalid length.
[  220.120919][T14477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2433'.
[  220.140486][T14479] lo speed is unknown, defaulting to 1000
[  220.148123][T14479] lo speed is unknown, defaulting to 1000
[  220.148966][T14480] lo speed is unknown, defaulting to 1000
[  220.226157][T14483] netlink: 'syz.2.2434': attribute type 8 has an invalid length.
[  220.262439][T14480] lo speed is unknown, defaulting to 1000
[  220.630448][T14494] lo speed is unknown, defaulting to 1000
[  220.632914][T14494] lo speed is unknown, defaulting to 1000
[  220.644967][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'.
[  220.762494][T14504] netlink: 'syz.1.2440': attribute type 3 has an invalid length.
[  220.766087][T14504] netlink: 'syz.1.2440': attribute type 12 has an invalid length.
[  221.174095][T14529] netlink: 'syz.0.2448': attribute type 13 has an invalid length.
[  221.340600][T14537] netlink: 'syz.2.2449': attribute type 1 has an invalid length.
[  221.342960][T14537] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2449'.
[  221.348615][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'.
[  221.356960][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'.
[  221.687741][T14556] lo speed is unknown, defaulting to 1000
[  221.691271][T14556] lo speed is unknown, defaulting to 1000
[  221.791869][T14569] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  222.280542][T14597] xt_hashlimit: size too large, truncated to 1048576
[  222.296614][T14598] xt_hashlimit: size too large, truncated to 1048576
[  222.545513][T14635] syzkaller1: entered promiscuous mode
[  222.550566][T14635] syzkaller1: entered allmulticast mode
[  222.641835][T14645] __nla_validate_parse: 8 callbacks suppressed
[  222.641851][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'.
[  222.701457][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'.
[  222.859506][T14656] validate_nla: 4 callbacks suppressed
[  222.859522][T14656] netlink: 'syz.1.2479': attribute type 1 has an invalid length.
[  222.896266][T14656] 8021q: adding VLAN 0 to HW filter on device bond68
[  222.914536][T14656] veth13: entered promiscuous mode
[  222.993344][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'.
[  223.156469][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2483'.
[  223.186627][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'.
[  223.220837][T14678] xt_ecn: cannot match TCP bits for non-tcp packets
[  223.292622][T14679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2485'.
[  223.380990][T14682] xt_l2tp: unknown flags: 51
[  223.609417][T14699] netlink: 'syz.2.2492': attribute type 23 has an invalid length.
[  223.611815][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'.
[  223.655562][T14702] netlink: 'syz.2.2493': attribute type 1 has an invalid length.
[  223.658492][T14702] netlink: 'syz.2.2493': attribute type 2 has an invalid length.
[  223.661567][T14702] netlink: 'syz.2.2493': attribute type 1 has an invalid length.
[  223.663923][T14702] netlink: 'syz.2.2493': attribute type 2 has an invalid length.
[  223.668814][T14702] netlink: 'syz.2.2493': attribute type 1 has an invalid length.
[  223.690161][T14702] gretap4: entered allmulticast mode
[  223.693439][T14702] bond33: (slave gretap4): making interface the new active one
[  223.696006][T14702] bond33: (slave gretap4): Enslaving as an active interface with an up link
[  223.700625][T14706] netlink: 'syz.2.2493': attribute type 1 has an invalid length.
[  223.703142][T14706] netlink: 'syz.2.2493': attribute type 2 has an invalid length.
[  223.729279][T14709] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  224.000894][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2497'.
[  224.004237][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2497'.
[  224.008018][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2497'.
[  224.446590][T14742] netlink: 'syz.0.2505': attribute type 23 has an invalid length.
[  224.620076][T14750] lo speed is unknown, defaulting to 1000
[  224.624062][T14750] lo speed is unknown, defaulting to 1000
[  224.682772][T14758] IPVS: stopping backup sync thread 5866 ...
[  224.723713][T14764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.912582][T14772] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  224.973279][T14776] gtp1: entered promiscuous mode
[  225.161563][T14788] TCP: TCP_TX_DELAY enabled
[  225.373432][T14796] syzkaller1: entered promiscuous mode
[  225.375058][T14796] syzkaller1: entered allmulticast mode
[  225.542034][T14809] lo speed is unknown, defaulting to 1000
[  225.545474][T14809] lo speed is unknown, defaulting to 1000
[  225.769639][T14816] veth0_to_hsr: left allmulticast mode
[  225.772747][T14816] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  225.775264][T14816] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  225.783650][T14816] bond65: left promiscuous mode
[  225.785028][T14816] bond65: left allmulticast mode
[  226.024152][T14828] macvlan0: entered promiscuous mode
[  226.027375][T14828] macvlan0: entered allmulticast mode
[  226.030295][T14828] bond34: entered promiscuous mode
[  226.032794][T14828] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  226.041422][T14828] bond34: left promiscuous mode
[  226.187353][T14837] netlink: 'syz.1.2534': attribute type 11 has an invalid length.
[  226.273298][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.276336][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.288484][T14849] pim6reg99999999: entered allmulticast mode
[  226.290686][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.296573][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.329255][T14858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  226.400783][T14854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.412241][   T34] audit: type=1107 audit(1770403812.372:12): pid=14853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  226.458504][T14867] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  226.673185][T14887] IPVS: Error connecting to the multicast addr
[  226.732129][T14903] vlan1: entered promiscuous mode
[  226.733686][T14903] bridge0: entered promiscuous mode
[  226.814770][T14903] netlink: 'syz.0.2552': attribute type 11 has an invalid length.
[  226.857560][T14911] sctp: [Deprecated]: syz.2.2555 (pid 14911) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.857560][T14911] Use struct sctp_sack_info instead
[  226.863924][T14911] Cannot find del_set index 2 as target
[  226.919847][T14920] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  226.921574][T14919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  227.064381][T14927] syzkaller0: left promiscuous mode
[  227.066338][T14927] syzkaller0: left allmulticast mode
[  227.204229][T14944] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  227.206443][T14944] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  227.217660][T14944] pimreg: entered allmulticast mode
[  227.233825][T14944] dvmrp0: left allmulticast mode
[  227.235799][T14944] pimreg: left allmulticast mode
[  227.369023][T14952] batadv5: entered promiscuous mode
[  227.381812][T14953] batadv5: entered promiscuous mode
[  227.620213][T14965] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0
[  227.671778][T14968] __nla_validate_parse: 36 callbacks suppressed
[  227.671797][T14968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2572'.
[  227.677513][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'.
[  227.746261][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.752796][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.756230][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.761233][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.764756][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.768461][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.772125][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.775859][T14973] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2573'.
[  227.940749][T14985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  228.075087][T14993] validate_nla: 16 callbacks suppressed
[  228.075100][T14993] netlink: 'syz.0.2580': attribute type 3 has an invalid length.
[  228.111749][T14995] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  228.692626][T15028] lo: Caught tx_queue_len zero misconfig
[  229.067995][T15063] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  229.075513][T15058] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  229.094031][T15063] 8021q: adding VLAN 0 to HW filter on device bond69
[  229.098714][T15057] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  229.111363][T15063] macvlan6: entered promiscuous mode
[  229.128626][T15063] macvlan6: entered allmulticast mode
[  229.132803][T15063] bond69: entered allmulticast mode
[  229.134996][T15063] bond69: entered promiscuous mode
[  229.137405][T15063] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  229.142358][T15063] team0: Port device macvlan6 added
[  229.233091][T15072] veth15: entered promiscuous mode
[  229.243427][T15072] openvswitch: netlink: Invalid VLAN frame
[  229.294612][ T5253] udevd[5253]: worker [9917] /devices/virtual/block/nbd3 is taking a long time
[  229.477939][T15089] lo speed is unknown, defaulting to 1000
[  229.480472][T15089] lo speed is unknown, defaulting to 1000
[  229.740136][T15094] netlink: 'syz.2.2612': attribute type 3 has an invalid length.
[  229.873847][T15096] lo speed is unknown, defaulting to 1000
[  229.879820][T15096] lo speed is unknown, defaulting to 1000
[  230.444152][T15115] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  230.448223][T15115] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  230.635516][T15124] netlink: 'syz.1.2622': attribute type 2 has an invalid length.
[  231.038307][T15128] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  231.970288][T15140] xt_hashlimit: size too large, truncated to 1048576
[  232.116463][T15144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.329578][T15169] openvswitch: netlink: Flow actions attr not present in new flow.
[  232.649968][T15199] sctp: [Deprecated]: syz.2.2646 (pid 15199) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.649968][T15199] Use struct sctp_sack_info instead
[  232.678452][T15195] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  232.699936][T15195] 8021q: adding VLAN 0 to HW filter on device bond70
[  232.702933][T15194] __nla_validate_parse: 95 callbacks suppressed
[  232.703078][T15194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2644'.
[  232.759265][T15207] syzkaller1: entered promiscuous mode
[  232.760963][T15207] syzkaller1: entered allmulticast mode
[  232.915134][T15215] netlink: 'syz.0.2649': attribute type 83 has an invalid length.
[  233.833577][T15224] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2652'.
[  233.837136][T15224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2652'.
[  233.846914][T15232] netlink: 'syz.2.2654': attribute type 11 has an invalid length.
[  233.946384][T15248] netlink: 'syz.2.2657': attribute type 23 has an invalid length.
[  233.948783][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  233.961066][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'.
[  234.121762][T15267] netlink: 'syz.2.2662': attribute type 1 has an invalid length.
[  234.145999][T15267] macvlan0: entered promiscuous mode
[  234.147931][T15267] macvlan0: entered allmulticast mode
[  234.150352][T15267] bond35: entered promiscuous mode
[  234.152192][T15267] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  234.158548][T15267] bond35: left promiscuous mode
[  234.170533][T15270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'.
[  234.210871][T15272] netlink: 'syz.0.2664': attribute type 23 has an invalid length.
[  234.213847][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'.
[  234.290392][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'.
[  234.290621][T15281] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  234.409639][T15298] bridge_slave_0: entered promiscuous mode
[  234.411556][T15298] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  234.421298][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'.
[  234.423862][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2670'.
[  234.516822][T15304] netlink: 'syz.0.2674': attribute type 23 has an invalid length.
[  234.928959][T15318] netlink: 'syz.0.2677': attribute type 5 has an invalid length.
[  235.198331][T15332] veth16: entered allmulticast mode
[  235.567740][T15346] bond0: Error: Cannot enslave bond to itself.
[  236.129071][T15360] pim6reg1: entered promiscuous mode
[  236.130875][T15360] pim6reg1: entered allmulticast mode
[  236.150632][T15363] netlink: 'syz.2.2692': attribute type 1 has an invalid length.
[  236.194580][T15365] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  236.236591][T15369] netlink: 'syz.0.2695': attribute type 3 has an invalid length.
[  236.404471][T15377] 8021q: adding VLAN 0 to HW filter on device bond36
[  236.796816][T15391] nbd0: detected capacity change from 0 to 127
[  236.801592][   T56] block nbd0: Receive control failed (result -104)
[  237.301617][T15411] netlink: 'syz.0.2708': attribute type 23 has an invalid length.
[  237.819123][T15441] netlink: 'syz.0.2716': attribute type 1 has an invalid length.
[  237.850771][T15441] macvlan1: entered promiscuous mode
[  237.852790][T15441] macvlan1: entered allmulticast mode
[  237.856016][T15441] bond71: entered promiscuous mode
[  237.859695][T15441] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  237.863606][T15441] bond71: left promiscuous mode
[  237.990366][T15446] __nla_validate_parse: 25 callbacks suppressed
[  237.990388][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2718'.
[  238.001804][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2718'.
[  238.012105][T15446] xfrm1: entered allmulticast mode
[  238.055109][T15448] netlink: 'syz.0.2719': attribute type 3 has an invalid length.
[  238.134752][T15450] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  238.138396][T15450] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  238.142868][T15450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.223664][T15460] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.226517][T15460] 8021q: adding VLAN 0 to HW filter on device team0
[  238.233208][T15460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.140769][T15469] IPVS: length: 203 != 24
[  239.239275][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'.
[  239.303631][T15477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  239.392164][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'.
[  239.394939][T15482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'.
[  239.549512][T15492] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2731'.
[  239.582250][T15494] tipc: Failed to remove unknown binding: 66,0,0/3549843178:2082492190/2082492191
[  239.586242][T15494] tipc: Failed to remove unknown binding: 66,0,0/3549843178:2082492190/2082492191
[  239.590678][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'.
[  239.627484][T15496] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  240.054655][T15516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.060529][ T5801] Bluetooth: hci2: command 0x0405 tx timeout
[  240.074678][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'.
[  240.080804][T15516] macvtap1: entered promiscuous mode
[  240.082322][T15516] batadv0: entered promiscuous mode
[  240.087893][T15516] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  240.106876][T15517] openvswitch: netlink: Flow actions attr not present in new flow.
[  240.111290][T15516] batadv0: left promiscuous mode
[  240.213213][T15527] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2740'.
[  240.360178][T15540] lo speed is unknown, defaulting to 1000
[  240.362834][T15540] lo speed is unknown, defaulting to 1000
[  240.596976][T15546] netlink: 'syz.1.2746': attribute type 1 has an invalid length.
[  240.636249][T15546] macvlan7: entered promiscuous mode
[  240.638893][T15546] macvlan7: entered allmulticast mode
[  240.641275][T15546] bond70: entered promiscuous mode
[  240.644182][T15546] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  240.649923][T15546] bond70: left promiscuous mode
[  240.830513][T15552] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20000
[  240.840353][   T34] audit: type=1107 audit(1770403826.802:13): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='VhkO**&)_E+u_`Cm5 "b'
[  240.840353][   T34] {R_=~R/nRfh'Ęo/iuU{B|nhŠA?Nhw)ey=Է-x?@Z{_Z4o!%6@[%w)^:YԬ"Kĭdېyy0K%
[  240.840353][   T34] bma"'Dz'
[  240.969756][   T34] audit: type=1804 audit(1770403826.932:14): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2749" name="/newroot/868/memory.events" dev="tmpfs" ino=4437 res=1 errno=0
[  240.991357][   T34] audit: type=1800 audit(1770403826.932:15): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2749" name="memory.events" dev="tmpfs" ino=4437 res=0 errno=0
[  241.009400][   T34] audit: type=1804 audit(1770403826.952:16): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2749" name="/newroot/868/memory.events" dev="tmpfs" ino=4437 res=1 errno=0
[  241.156613][T15568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2753'.
[  241.370071][T15587] openvswitch: netlink: IP tunnel dst address not specified
[  241.558849][T15604] netlink: 'syz.2.2762': attribute type 1 has an invalid length.
[  241.601918][T15604] macvlan0: entered promiscuous mode
[  241.605121][T15604] macvlan0: entered allmulticast mode
[  241.608459][T15604] bond37: entered promiscuous mode
[  241.610932][T15604] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  241.619560][T15604] bond37: left promiscuous mode
[  241.860440][T15614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.954770][T15622] netlink: 'syz.1.2769': attribute type 3 has an invalid length.
[  241.959918][T15623] netlink: 'syz.1.2769': attribute type 3 has an invalid length.
[  241.975478][T15626] netlink: 'syz.0.2767': attribute type 13 has an invalid length.
[  242.755802][T15671] netlink: 'syz.1.2782': attribute type 1 has an invalid length.
[  242.844375][T15673] macvlan7: entered promiscuous mode
[  242.848548][T15673] macvlan7: entered allmulticast mode
[  242.851542][T15673] bond71: entered promiscuous mode
[  242.853899][T15673] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  242.865129][T15673] bond71: left promiscuous mode
[  243.010612][  T126] block nbd3: Possible stuck request ffff88810a140000: control (read@0,1024B). Runtime 90 seconds
[  243.014138][  T126] block nbd3: Possible stuck request ffff88810a140200: control (read@1024,1024B). Runtime 90 seconds
[  243.018063][  T126] block nbd3: Possible stuck request ffff88810a140400: control (read@2048,1024B). Runtime 90 seconds
[  243.021504][  T126] block nbd3: Possible stuck request ffff88810a140600: control (read@3072,1024B). Runtime 90 seconds
[  243.080254][T15689] __nla_validate_parse: 10 callbacks suppressed
[  243.080260][T15687] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2788'.
[  243.080266][T15689] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2788'.
[  243.087503][T15690] bond0: Caught tx_queue_len zero misconfig
[  243.098107][T15687] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000
[  243.103003][T15690] netlink: 'syz.1.2787': attribute type 4 has an invalid length.
[  243.106211][T15690] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2787'.
[  243.159419][T15694] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2789'.
[  243.169725][T15695] netlink: 'syz.1.2790': attribute type 28 has an invalid length.
[  243.172797][T15696] netlink: 'syz.1.2790': attribute type 13 has an invalid length.
[  243.175646][T15696] netlink: 'syz.1.2790': attribute type 12 has an invalid length.
[  243.230319][T15704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2791'.
[  243.242059][T15703] delete_channel: no stack
[  243.249675][T15709] sctp: [Deprecated]: syz.2.2793 (pid 15709) Use of int in max_burst socket option.
[  243.249675][T15709] Use struct sctp_assoc_value instead
[  243.328642][T15713] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2795'.
[  243.335921][T15713] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2795'.
[  243.401653][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'.
[  243.413812][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  243.642931][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'.
[  243.724732][T15749] syzkaller1: entered promiscuous mode
[  243.726378][T15749] syzkaller1: entered allmulticast mode
[  243.770691][T15758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.775558][T15758] tipc: Resetting bearer <eth:syzkaller0>
[  243.959477][T15777] xt_hashlimit: size too large, truncated to 1048576
[  244.108608][T15793] xt_socket: unknown flags 0xfc
[  244.146040][T15795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.945748][T15833] netlink: 'syz.1.2829': attribute type 11 has an invalid length.
[  245.112301][T15847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  245.411048][T15863] ipvlan2: entered allmulticast mode
[  245.412843][T15863] veth0_vlan: entered allmulticast mode
[  245.649891][T15880] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  245.933327][T15904] validate_nla: 5 callbacks suppressed
[  245.933344][T15904] netlink: 'syz.2.2847': attribute type 1 has an invalid length.
[  245.969183][T15904] macvlan0: entered promiscuous mode
[  245.973355][T15904] macvlan0: entered allmulticast mode
[  245.978994][T15904] bond38: entered promiscuous mode
[  245.981566][T15904] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  245.989258][T15904] bond38: left promiscuous mode
[  246.446090][T15921] netlink: 'syz.0.2851': attribute type 1 has an invalid length.
[  246.449585][T15921] netlink: 'syz.0.2851': attribute type 3 has an invalid length.
[  246.622437][T15935] netlink: 'syz.1.2856': attribute type 1 has an invalid length.
[  246.645559][T15935] macvlan7: entered promiscuous mode
[  246.649456][T15935] macvlan7: entered allmulticast mode
[  246.653080][T15935] bond72: entered promiscuous mode
[  246.655627][T15935] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  246.661930][T15935] bond72: left promiscuous mode
[  246.807229][T15946] lo speed is unknown, defaulting to 1000
[  246.813821][T15946] lo speed is unknown, defaulting to 1000
[  246.892347][T15954] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  246.900921][T15954] gtp2: entered promiscuous mode
[  246.902789][T15954] gtp2: entered allmulticast mode
[  247.109606][T15966] netlink: 'syz.1.2866': attribute type 1 has an invalid length.
[  247.154135][T15969] 8021q: adding VLAN 0 to HW filter on device bond39
[  247.167912][T15966] macvlan7: entered promiscuous mode
[  247.169483][T15966] macvlan7: entered allmulticast mode
[  247.171558][T15966] bond73: entered promiscuous mode
[  247.173349][T15966] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  247.185299][T15966] bond73: left promiscuous mode
[  247.289215][T15973] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  247.304570][T15973] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  247.360430][T15982] syzkaller1: entered promiscuous mode
[  247.362097][T15982] syzkaller1: entered allmulticast mode
[  247.427911][T15991] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  247.468729][T15991] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  247.510175][T15993] lo speed is unknown, defaulting to 1000
[  247.514893][T15993] lo speed is unknown, defaulting to 1000
[  247.583722][T15999] netlink: 'syz.1.2876': attribute type 1 has an invalid length.
[  247.600374][T16002] unsupported nlmsg_type 40
[  247.616910][T15999] macvlan7: entered promiscuous mode
[  247.618477][T15999] macvlan7: entered allmulticast mode
[  247.620497][T15999] bond74: entered promiscuous mode
[  247.622367][T15999] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  247.632015][T15999] bond74: left promiscuous mode
[  247.899941][T16016] syzkaller0: entered promiscuous mode
[  247.901589][T16016] syzkaller0: entered allmulticast mode
[  247.946454][T16017] netlink: 'syz.0.2882': attribute type 39 has an invalid length.
[  248.000381][T16020] netlink: 'syz.1.2884': attribute type 1 has an invalid length.
[  248.003325][T16014] IPVS: length: 24 != 36888
[  248.031867][T16020] bond75: entered promiscuous mode
[  248.033523][T16020] 8021q: adding VLAN 0 to HW filter on device bond75
[  248.044564][T16016] m1Ie5n: entered promiscuous mode
[  248.091101][T16020] bond75: (slave veth17): making interface the new active one
[  248.093408][T16020] veth17: entered promiscuous mode
[  248.095562][T16020] bond75: (slave veth17): Enslaving as an active interface with an up link
[  248.388649][T16048] netlink: set zone limit has 4 unknown bytes
[  248.435841][T16053] __nla_validate_parse: 34 callbacks suppressed
[  248.435850][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'.
[  248.452214][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'.
[  248.494480][T16055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2896'.
[  248.533561][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'.
[  248.557111][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2896'.
[  248.560929][T16055] netlink: 'syz.0.2896': attribute type 39 has an invalid length.
[  248.691927][T16061] lo speed is unknown, defaulting to 1000
[  248.695637][T16061] lo speed is unknown, defaulting to 1000
[  248.734708][T16064] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  249.200359][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'.
[  249.209852][T16087] vlan0: entered promiscuous mode
[  249.211879][T16087] bridge0: entered promiscuous mode
[  249.286636][T16087] netlink: 'syz.1.2906': attribute type 11 has an invalid length.
[  249.290937][T16087] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.2906'.
[  249.362102][T16092] "syz.1.2907" (16092) uses obsolete ecb(arc4) skcipher
[  249.733832][T16100] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.736569][T16100] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  249.741690][T16100] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  250.136245][T16107] tipc: Resetting bearer <eth:syzkaller0>
[  250.805742][T16107] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  250.974813][T16114] lo speed is unknown, defaulting to 1000
[  250.978663][T16114] lo speed is unknown, defaulting to 1000
[  250.983747][T16117] lo speed is unknown, defaulting to 1000
[  251.055264][T16122] validate_nla: 2 callbacks suppressed
[  251.055284][T16122] netlink: 'syz.1.2916': attribute type 1 has an invalid length.
[  251.080345][T16125] netlink: 'syz.2.2915': attribute type 29 has an invalid length.
[  251.092165][T16122] macvlan7: entered promiscuous mode
[  251.093971][T16122] macvlan7: entered allmulticast mode
[  251.098073][T16122] bond76: entered promiscuous mode
[  251.100224][T16122] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  251.105231][T16122] bond76: left promiscuous mode
[  251.120224][T16117] lo speed is unknown, defaulting to 1000
[  251.452738][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  251.655343][T16156] lo speed is unknown, defaulting to 1000
[  251.661473][T16156] lo speed is unknown, defaulting to 1000
[  252.021947][T16169] lo speed is unknown, defaulting to 1000
[  252.025859][T16169] lo speed is unknown, defaulting to 1000
[  252.052171][T16171] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2928'.
[  252.463426][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'.
[  252.868349][T16188] gre0: entered promiscuous mode
[  252.870238][T16188] gre0: entered allmulticast mode
[  253.314644][T16222] geneve4: entered promiscuous mode
[  253.319263][ T5861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.322009][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.325973][ T5861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.330574][ T5861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.494995][T16232] __nla_validate_parse: 2 callbacks suppressed
[  253.495010][T16232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2942'.
[  253.690961][T16234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.703446][T16234] tipc: Resetting bearer <eth:syzkaller0>
[  253.751024][T16236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  253.824856][T16238] netlink: 'syz.2.2949': attribute type 1 has an invalid length.
[  253.881756][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'.
[  253.925400][T16243] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2950'.
[  253.962471][T16250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2953'.
[  254.024078][T16250] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.036188][T16250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.046334][   T34] audit: type=1107 audit(1770403840.002:17): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  254.050612][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'.
[  254.055112][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'.
[  254.089730][T16257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.116430][T16258] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[  254.212363][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2957'.
[  254.215633][T16264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2957'.
[  254.328207][T16268] netlink: 'syz.1.2958': attribute type 32 has an invalid length.
[  254.331349][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'.
[  254.353159][T16268] bond78: Setting coupled_control to off (0)
[  254.423262][T16274] netlink: 'syz.1.2959': attribute type 13 has an invalid length.
[  254.816804][   T24] tipc: Node number set to 3278829745
[  254.916153][T16278] pim6reg1: entered promiscuous mode
[  254.919061][T16278] pim6reg1: entered allmulticast mode
[  255.021098][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'.
[  255.108001][T16287] netlink: 'syz.0.2963': attribute type 1 has an invalid length.
[  255.179366][T16293] netlink: 'syz.0.2965': attribute type 1 has an invalid length.
[  255.182994][T16292] netlink: 'syz.0.2965': attribute type 7 has an invalid length.
[  255.185369][T16292] netlink: 'syz.0.2965': attribute type 8 has an invalid length.
[  255.223041][T16296] openvswitch: netlink: IPv4 tun info is not correct
[  255.229468][T16296] syzkaller1: tun_chr_ioctl cmd 1074025677
[  255.231324][T16296] syzkaller1: linktype set to 768
[  255.441034][T16302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  255.718075][T16322] tipc: Resetting bearer <eth:syzkaller0>
[  258.304116][T16301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.442207][T16363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  258.512659][T16365] geneve4: entered promiscuous mode
[  258.517055][ T5861] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.528728][ T5861] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.534704][ T5861] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.538265][ T5861] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.323186][T16367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.460591][T16394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  259.703206][T16420] __nla_validate_parse: 33 callbacks suppressed
[  259.703227][T16420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2992'.
[  259.751614][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2993'.
[  259.794132][T16432] validate_nla: 3 callbacks suppressed
[  259.794144][T16432] netlink: 'syz.2.2994': attribute type 10 has an invalid length.
[  259.812249][T16432] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  259.818891][T16432] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  259.822692][T16432] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  259.970586][T16444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2996'.
[  260.080006][T16448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2997'.
[  260.080365][T16456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.120125][T16458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3000'.
[  260.181237][T16460] lo speed is unknown, defaulting to 1000
[  260.183927][T16460] lo speed is unknown, defaulting to 1000
[  260.221396][T16462] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  260.296170][T16464] sctp: [Deprecated]: syz.1.3002 (pid 16464) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.296170][T16464] Use struct sctp_sack_info instead
[  260.408484][T16467] bond79: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  260.412729][T16467] bond79 (unregistering): Released all slaves
[  260.460877][T16468] bond79: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  260.474778][T16468] bond79 (unregistering): Released all slaves
[  260.672362][T16485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3008'.
[  260.704242][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'.
[  260.735423][T16493] netlink: 'syz.1.3009': attribute type 4 has an invalid length.
[  260.982766][T16511] lo speed is unknown, defaulting to 1000
[  260.990244][T16511] lo speed is unknown, defaulting to 1000
[  261.341393][T16532] tipc: New replicast peer: 255.255.255.255
[  261.346420][T16532] tipc: Enabled bearer <udp:syz2>, priority 10
[  261.462865][T16540] netlink: 'syz.2.3015': attribute type 1 has an invalid length.
[  261.489467][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'.
[  261.494345][T16540] bond40 (unregistering): Released all slaves
[  261.524271][T16543] netlink: 'syz.1.3016': attribute type 1 has an invalid length.
[  261.605888][T16547] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  261.611453][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'.
[  261.714299][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3023'.
[  261.782858][T16566] bridge0: port 1(batadv0) entered blocking state
[  261.785416][T16566] bridge0: port 1(batadv0) entered disabled state
[  261.788693][T16566] batadv0: entered allmulticast mode
[  261.792262][T16566] batadv0: entered promiscuous mode
[  261.811248][T16566] batadv0: left allmulticast mode
[  261.812791][T16566] batadv0: left promiscuous mode
[  261.814316][T16566] bridge0: port 1(batadv0) entered disabled state
[  261.816275][T16559] netlink: 'syz.0.3021': attribute type 10 has an invalid length.
[  261.935704][T16577] netlink: 'syz.1.3030': attribute type 8 has an invalid length.
[  262.161388][T16589] lo speed is unknown, defaulting to 1000
[  262.165071][T16589] lo speed is unknown, defaulting to 1000
[  262.647926][T16598] netlink: 'syz.0.3036': attribute type 1 has an invalid length.
[  262.918521][T16615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  263.054934][T16628] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  263.611103][T16638] x_tables: ip_tables: icmp match: only valid for protocol 1
[  264.289842][T16663] netlink: 'syz.0.3057': attribute type 1 has an invalid length.
[  264.319384][T16663] macvlan1: entered promiscuous mode
[  264.321251][T16663] macvlan1: entered allmulticast mode
[  264.323703][T16663] bond72: entered promiscuous mode
[  264.325916][T16663] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  264.330974][T16663] bond72: left promiscuous mode
[  264.510023][T16670] tipc: Resetting bearer <eth:syzkaller0>
[  264.574722][T16678] netlink: 'syz.1.3064': attribute type 1 has an invalid length.
[  264.604387][T16678] macvlan7: entered promiscuous mode
[  264.606553][T16678] macvlan7: entered allmulticast mode
[  264.610978][T16678] bond79: entered promiscuous mode
[  264.613583][T16678] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  264.620317][T16678] bond79: left promiscuous mode
[  264.671871][ T5861] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.675457][ T5861] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.681228][ T5861] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.684300][ T5861] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.730067][T16685] __nla_validate_parse: 19 callbacks suppressed
[  264.730089][T16685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3066'.
[  264.834180][T16689] bond69: left allmulticast mode
[  264.836960][T16689] bond69: left promiscuous mode
[  264.902586][ T5861] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.909215][ T5861] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.913539][ T5861] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.923952][ T5861] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.249023][T16700] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  265.399105][T16704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  265.495520][T16706] x_tables: duplicate entry at hook 3
[  265.598497][T16711] netlink: 'syz.0.3073': attribute type 1 has an invalid length.
[  265.638066][T16711] macvlan1: entered promiscuous mode
[  265.639674][T16711] macvlan1: entered allmulticast mode
[  265.641843][T16711] bond73: entered promiscuous mode
[  265.643691][T16711] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  265.657729][T16711] bond73: left promiscuous mode
[  265.788493][T16717] lo speed is unknown, defaulting to 1000
[  265.793478][T16717] lo speed is unknown, defaulting to 1000
[  265.911463][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'.
[  266.152211][T16725] tipc: Resetting bearer <eth:syzkaller0>
[  266.371039][T16740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  266.578254][T16748] netlink: 'syz.2.3081': attribute type 1 has an invalid length.
[  266.594284][T16748] bond40: entered promiscuous mode
[  266.596136][T16748] 8021q: adding VLAN 0 to HW filter on device bond40
[  266.611273][T16748] bond40: (slave bridge10): making interface the new active one
[  266.613905][T16748] bridge10: entered promiscuous mode
[  266.616256][T16748] bond40: (slave bridge10): Enslaving as an active interface with an up link
[  266.626998][T16748] bond40: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  266.631252][T16748] bond40: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  266.814995][T16756] lo speed is unknown, defaulting to 1000
[  266.819668][T16756] lo speed is unknown, defaulting to 1000
[  267.146390][T16773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3089'.
[  267.183344][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'.
[  267.235146][T16771] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  267.302456][T16782] netlink: 'syz.0.3092': attribute type 29 has an invalid length.
[  267.305718][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'.
[  267.307522][T16782] netlink: 'syz.0.3092': attribute type 29 has an invalid length.
[  267.313825][T16782] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3092'.
[  267.330457][   T25] block nbd0: Possible stuck request ffff88810a010000: control (read@0,1024B). Runtime 30 seconds
[  267.333941][   T25] block nbd0: Possible stuck request ffff88810a010200: control (read@1024,1024B). Runtime 30 seconds
[  267.337817][   T25] block nbd0: Possible stuck request ffff88810a010400: control (read@2048,1024B). Runtime 30 seconds
[  267.340873][   T25] block nbd0: Possible stuck request ffff88810a010600: control (read@3072,1024B). Runtime 30 seconds
[  267.362978][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  267.373238][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'.
[  267.399601][T16786] ip6gretap0: entered promiscuous mode
[  267.413042][T16786] ip6gretap0: left promiscuous mode
[  267.537261][T16796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  267.636551][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.639290][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.641166][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.650432][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.653553][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.658845][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.661915][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.666276][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.670601][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.677689][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.679975][T16806] syzkaller1: tun_chr_ioctl cmd 1074025673
[  267.739716][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'.
[  267.741713][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'.
[  267.774443][T16824] netlink: 'syz.2.3101': attribute type 4 has an invalid length.
[  269.966953][ T3574] wlan0: Trigger new scan to find an IBSS to join
[  270.757381][T16824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.893489][T16861] __nla_validate_parse: 5 callbacks suppressed
[  270.893502][T16861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3111'.
[  270.898139][T16858] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3110'.
[  270.900884][T16858] netlink: Unknown conntrack attr (0)
[  270.936370][T16865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  270.980072][T16867] netlink: 'syz.1.3114': attribute type 58 has an invalid length.
[  270.982783][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3114'.
[  271.096463][T16877] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  271.180421][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[  271.196862][T16887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3120'.
[  271.216113][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3121'.
[  271.258330][T16898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.266597][T16898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.272151][T16904] ip6gre1: entered allmulticast mode
[  271.313523][T16910] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3127'.
[  271.319970][T16910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3127'.
[  271.416560][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'.
[  271.792305][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'.
[  271.862170][T16951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  271.879512][T16952] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  271.891574][T16946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  271.907725][T16956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.149272][T16992] netlink: 'syz.0.3144': attribute type 10 has an invalid length.
[  272.928009][ T1092] wlan0: Trigger new scan to find an IBSS to join
[  272.944631][T17004] lo speed is unknown, defaulting to 1000
[  272.947548][T17004] lo speed is unknown, defaulting to 1000
[  273.081570][T17014] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  273.097988][  T126] block nbd3: Possible stuck request ffff88810a140000: control (read@0,1024B). Runtime 120 seconds
[  273.100935][  T126] block nbd3: Possible stuck request ffff88810a140200: control (read@1024,1024B). Runtime 120 seconds
[  273.104150][  T126] block nbd3: Possible stuck request ffff88810a140400: control (read@2048,1024B). Runtime 120 seconds
[  273.107467][  T126] block nbd3: Possible stuck request ffff88810a140600: control (read@3072,1024B). Runtime 120 seconds
[  273.388645][T17035] netlink: 'syz.0.3156': attribute type 8 has an invalid length.
[  273.459957][T17032] lo speed is unknown, defaulting to 1000
[  273.466287][T17032] lo speed is unknown, defaulting to 1000
[  273.474629][T17036] netlink: 'syz.2.3154': attribute type 11 has an invalid length.
[  273.577768][T17041] netlink: 'syz.1.3159': attribute type 2 has an invalid length.
[  273.658937][T17051] netlink: 'syz.1.3160': attribute type 1 has an invalid length.
[  273.682912][T17051] bond80: (slave geneve5): making interface the new active one
[  273.685613][T17051] bond80: (slave geneve5): Enslaving as an active interface with an up link
[  273.701126][T17049] bond41: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  273.709243][T17049] bond41 (unregistering): Released all slaves
[  273.725781][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  273.740214][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  273.743674][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  273.746157][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  273.838293][T17064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.900083][T17065] netlink: 'syz.1.3164': attribute type 4 has an invalid length.
[  273.923834][T17068] netlink: 'syz.2.3165': attribute type 10 has an invalid length.
[  274.156304][T17082] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  274.178116][T17084] openvswitch: netlink: Invalid VLAN frame
[  274.200651][T17082] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  274.234590][T17082] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  274.290423][T17082] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  274.342195][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  274.350836][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  274.360750][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  274.369170][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  274.616297][T17103] netlink: 'syz.0.3177': attribute type 1 has an invalid length.
[  274.618912][T17103] netlink: 'syz.0.3177': attribute type 1 has an invalid length.
[  275.090550][T17121] bond41: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  275.095515][T17121] bond41 (unregistering): Released all slaves
[  275.135303][T17123] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  275.484720][T17141] xt_hashlimit: size too large, truncated to 1048576
[  275.539621][T17144] x9: renamed from bridge_slave_0
[  275.746222][T17168] tipc: Resetting bearer <eth:syzkaller0>
[  275.749625][T17168] xt_hashlimit: size too large, truncated to 1048576
[  275.789765][T17171] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  275.792518][T17171] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  275.948706][T17181] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  275.968590][ T1096] wlan0: Trigger new scan to find an IBSS to join
[  276.025325][T17185] bond81: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  276.030099][T17185] bond81 (unregistering): Released all slaves
[  276.149463][T17190] bond81: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  276.154970][T17190] bond81 (unregistering): Released all slaves
[  276.417909][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.621742][T17210] __nla_validate_parse: 128 callbacks suppressed
[  276.621757][T17210] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.3205'.
[  276.674228][T17216] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3207'.
[  276.764878][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'.
[  276.768182][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'.
[  276.788022][T17222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3210'.
[  276.843685][T17222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3210'.
[  276.875034][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'.
[  276.940604][T17232] validate_nla: 2 callbacks suppressed
[  276.940618][T17232] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  276.948578][T17232] netlink: 1323 bytes leftover after parsing attributes in process `syz.2.3212'.
[  277.038225][T17251] xt_ecn: cannot match TCP bits for non-tcp packets
[  277.383401][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'.
[  277.433529][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3227'.
[  277.455921][T17302] macsec2: entered promiscuous mode
[  277.534470][T17314] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  277.939267][T17347] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20003
[  278.161244][T17358] netlink: 'syz.2.3240': attribute type 1 has an invalid length.
[  278.260608][T17365] batman_adv: batadv0: Removing interface: gretap1
[  278.263619][T17365] batman_adv: batadv0: Interface deactivated: geneve3
[  278.266111][T17365] batman_adv: batadv0: Removing interface: geneve3
[  278.269651][T17365] batman_adv: batadv0: Removing interface: vlan0
[  278.311815][T17375] netlink: 'syz.2.3243': attribute type 12 has an invalid length.
[  278.562579][T17392] xt_CT: No such helper "snmp_trap"
[  278.701210][T17410] sctp: [Deprecated]: syz.0.3253 (pid 17410) Use of struct sctp_assoc_value in delayed_ack socket option.
[  278.701210][T17410] Use struct sctp_sack_info instead
[  278.710356][T17410] netlink: 'syz.0.3253': attribute type 8 has an invalid length.
[  278.732766][T17392] lo speed is unknown, defaulting to 1000
[  278.742635][T17392] lo speed is unknown, defaulting to 1000
[  278.838453][T17417] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  278.844065][T17417] team_slave_1: mtu less than device minimum
[  279.163526][T17439] netlink: Conntrack attr has 3 unknown bytes
[  279.406225][T17455] team0 (unregistering): Port device macvlan3 removed
[  279.414625][T17455] team0 (unregistering): Port device macvlan6 removed
[  279.499050][T17458] netlink: 'syz.1.3265': attribute type 2 has an invalid length.
[  279.880040][T17476] netlink: 'syz.1.3270': attribute type 23 has an invalid length.
[  279.980053][T17490] bridge0: port 1(veth1_to_hsr) entered blocking state
[  279.982391][T17490] bridge0: port 1(veth1_to_hsr) entered disabled state
[  279.984809][T17490] veth1_to_hsr: entered allmulticast mode
[  279.990843][T17490] veth1_to_hsr: entered promiscuous mode
[  280.032401][T17495] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)%	]3DL̥
[  280.073358][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.077525][T17495] CPU: 0 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.077537][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.077543][T17495] Call Trace:
[  280.077547][T17495]  <TASK>
[  280.077551][T17495]  dump_stack_lvl+0xe8/0x150
[  280.077569][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.077580][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.077590][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.077601][T17495]  device_add+0x475/0xb70
[  280.077616][T17495]  wiphy_register+0x1d73/0x2d50
[  280.077638][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.077652][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.077666][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.077685][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.077697][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.077714][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.077757][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.077779][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.077789][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.077800][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.077822][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.077829][T17495]  ? kstrndup+0xbf/0x160
[  280.077843][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.077863][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.077878][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.077890][T17495]  ? __nla_parse+0x40/0x60
[  280.077900][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.077921][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.077936][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.077954][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.077967][T17495]  ? security_capable+0x7e/0x2c0
[  280.077986][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.078000][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.078011][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.078025][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.078035][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.078047][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.078054][T17495]  ? genl_rcv+0x19/0x40
[  280.078073][T17495]  ? down_read+0x272/0x2e0
[  280.078082][T17495]  ? genl_rcv+0xd/0x40
[  280.078094][T17495]  genl_rcv+0x28/0x40
[  280.078104][T17495]  netlink_unicast+0x80f/0x9b0
[  280.078116][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.078124][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.078132][T17495]  ? skb_put+0x11b/0x210
[  280.078142][T17495]  netlink_sendmsg+0x813/0xb40
[  280.078155][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.078166][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.078178][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.078185][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.078194][T17495]  __sock_sendmsg+0x21c/0x270
[  280.078207][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.078215][T17495]  ? __might_fault+0xaf/0x130
[  280.078230][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.078243][T17495]  ? import_iovec+0x73/0xa0
[  280.078254][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.078262][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.078272][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.078298][T17495]  ? __fget_files+0x2a/0x420
[  280.078308][T17495]  ? __fget_files+0x3a0/0x420
[  280.078322][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.078332][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.078339][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.078353][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.078368][T17495]  do_syscall_64+0xe2/0xf80
[  280.078377][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.078385][T17495]  ? trace_irq_disable+0x37/0x100
[  280.078397][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.078405][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.078414][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.078431][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.078442][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.078447][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.078452][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.078457][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.078461][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.078476][T17495]  </TASK>
[  280.221511][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.225804][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.225817][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.225823][T17495] Call Trace:
[  280.225826][T17495]  <TASK>
[  280.225830][T17495]  dump_stack_lvl+0xe8/0x150
[  280.225845][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.225855][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.225865][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.225875][T17495]  device_add+0x475/0xb70
[  280.225889][T17495]  wiphy_register+0x1d73/0x2d50
[  280.225909][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.225920][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.225931][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.225944][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.225955][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.225972][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.225986][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.226003][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.226013][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.226024][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.226046][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.226053][T17495]  ? kstrndup+0xbf/0x160
[  280.226067][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.226086][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.226102][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.226114][T17495]  ? __nla_parse+0x40/0x60
[  280.226124][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.226140][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.226155][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.226173][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.226182][T17495]  ? security_capable+0x7e/0x2c0
[  280.226195][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.226210][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.226220][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.226235][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.226245][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.226256][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.226264][T17495]  ? genl_rcv+0x19/0x40
[  280.226282][T17495]  ? down_read+0x272/0x2e0
[  280.226292][T17495]  ? genl_rcv+0xd/0x40
[  280.226303][T17495]  genl_rcv+0x28/0x40
[  280.226313][T17495]  netlink_unicast+0x80f/0x9b0
[  280.226325][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.226334][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.226342][T17495]  ? skb_put+0x11b/0x210
[  280.226351][T17495]  netlink_sendmsg+0x813/0xb40
[  280.226365][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.226375][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.226387][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.226394][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.226403][T17495]  __sock_sendmsg+0x21c/0x270
[  280.226416][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.226424][T17495]  ? __might_fault+0xaf/0x130
[  280.226439][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.226452][T17495]  ? import_iovec+0x73/0xa0
[  280.226462][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.226470][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.226481][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.226506][T17495]  ? __fget_files+0x2a/0x420
[  280.226521][T17495]  ? __fget_files+0x3a0/0x420
[  280.226536][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.226545][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.226552][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.226566][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.226586][T17495]  do_syscall_64+0xe2/0xf80
[  280.226595][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.226602][T17495]  ? trace_irq_disable+0x37/0x100
[  280.226615][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.226622][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.226630][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.226637][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.226661][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.226668][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.226673][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.226677][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.226681][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.226696][T17495]  </TASK>
[  280.372745][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.376619][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.376632][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.376638][T17495] Call Trace:
[  280.376657][T17495]  <TASK>
[  280.376663][T17495]  dump_stack_lvl+0xe8/0x150
[  280.376679][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.376690][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.376726][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.376745][T17495]  device_add+0x475/0xb70
[  280.376762][T17495]  wiphy_register+0x1d73/0x2d50
[  280.376781][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.376793][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.376805][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.376834][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.376845][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.376855][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.376870][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.376883][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.376900][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.376911][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.376922][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.376944][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.376951][T17495]  ? kstrndup+0xbf/0x160
[  280.376964][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.376983][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.376999][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.377011][T17495]  ? __nla_parse+0x40/0x60
[  280.377020][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.377036][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.377051][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.377069][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.377078][T17495]  ? security_capable+0x7e/0x2c0
[  280.377092][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.377106][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.377116][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.377131][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.377140][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.377152][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.377159][T17495]  ? genl_rcv+0x19/0x40
[  280.377178][T17495]  ? down_read+0x272/0x2e0
[  280.377188][T17495]  ? genl_rcv+0xd/0x40
[  280.377199][T17495]  genl_rcv+0x28/0x40
[  280.377209][T17495]  netlink_unicast+0x80f/0x9b0
[  280.377221][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.377230][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.377238][T17495]  ? skb_put+0x11b/0x210
[  280.377247][T17495]  netlink_sendmsg+0x813/0xb40
[  280.377260][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.377271][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.377282][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.377290][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.377299][T17495]  __sock_sendmsg+0x21c/0x270
[  280.377317][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.377331][T17495]  ? __might_fault+0xaf/0x130
[  280.377353][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.377374][T17495]  ? import_iovec+0x73/0xa0
[  280.377390][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.377404][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.377421][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.377457][T17495]  ? __fget_files+0x2a/0x420
[  280.377468][T17495]  ? __fget_files+0x3a0/0x420
[  280.377482][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.377492][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.377500][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.377513][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.377535][T17495]  do_syscall_64+0xe2/0xf80
[  280.377559][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.377569][T17495]  ? trace_irq_disable+0x37/0x100
[  280.377590][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.377602][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.377615][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.377626][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.377640][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.377649][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.377656][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.377664][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.377672][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.377695][T17495]  </TASK>
[  280.530641][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.534234][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.534246][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.534251][T17495] Call Trace:
[  280.534256][T17495]  <TASK>
[  280.534260][T17495]  dump_stack_lvl+0xe8/0x150
[  280.534276][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.534286][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.534295][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.534306][T17495]  device_add+0x475/0xb70
[  280.534320][T17495]  wiphy_register+0x1d73/0x2d50
[  280.534340][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.534351][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.534361][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.534375][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.534386][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.534396][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.534410][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.534423][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.534441][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.534450][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.534462][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.534483][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.534490][T17495]  ? kstrndup+0xbf/0x160
[  280.534504][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.534522][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.534538][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.534549][T17495]  ? __nla_parse+0x40/0x60
[  280.534560][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.534577][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.534592][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.534609][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.534618][T17495]  ? security_capable+0x7e/0x2c0
[  280.534632][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.534646][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.534656][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.534671][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.534706][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.534719][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.534727][T17495]  ? genl_rcv+0x19/0x40
[  280.534745][T17495]  ? down_read+0x272/0x2e0
[  280.534754][T17495]  ? genl_rcv+0xd/0x40
[  280.534766][T17495]  genl_rcv+0x28/0x40
[  280.534776][T17495]  netlink_unicast+0x80f/0x9b0
[  280.534788][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.534797][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.534805][T17495]  ? skb_put+0x11b/0x210
[  280.534818][T17495]  netlink_sendmsg+0x813/0xb40
[  280.534832][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.534843][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.534855][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.534862][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.534871][T17495]  __sock_sendmsg+0x21c/0x270
[  280.534884][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.534892][T17495]  ? __might_fault+0xaf/0x130
[  280.534908][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.534920][T17495]  ? import_iovec+0x73/0xa0
[  280.534931][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.534939][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.534949][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.534974][T17495]  ? __fget_files+0x2a/0x420
[  280.534984][T17495]  ? __fget_files+0x3a0/0x420
[  280.534999][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.535008][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.535015][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.535029][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.535044][T17495]  do_syscall_64+0xe2/0xf80
[  280.535053][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.535060][T17495]  ? trace_irq_disable+0x37/0x100
[  280.535073][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.535081][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.535090][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.535096][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.535106][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.535111][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.535116][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.535121][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.535125][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.535139][T17495]  </TASK>
[  280.568410][T17500] lo speed is unknown, defaulting to 1000
[  280.677530][T17507] netlink: 'syz.0.3278': attribute type 32 has an invalid length.
[  280.680636][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.684543][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.684562][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.684570][T17495] Call Trace:
[  280.684577][T17495]  <TASK>
[  280.684585][T17495]  dump_stack_lvl+0xe8/0x150
[  280.684609][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.684632][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.684646][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.684658][T17495]  device_add+0x475/0xb70
[  280.684704][T17495]  wiphy_register+0x1d73/0x2d50
[  280.684725][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.684736][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.684746][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.684760][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.684772][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.684782][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.684796][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.684810][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.684827][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.684837][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.684848][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.684870][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.684878][T17495]  ? kstrndup+0xbf/0x160
[  280.684892][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.684911][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.684927][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.684938][T17495]  ? __nla_parse+0x40/0x60
[  280.684948][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.684964][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.684979][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.684997][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.685006][T17495]  ? security_capable+0x7e/0x2c0
[  280.685020][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.685034][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.685045][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.685059][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.685069][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.685081][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.685088][T17495]  ? genl_rcv+0x19/0x40
[  280.685107][T17495]  ? down_read+0x272/0x2e0
[  280.685116][T17495]  ? genl_rcv+0xd/0x40
[  280.685127][T17495]  genl_rcv+0x28/0x40
[  280.685137][T17495]  netlink_unicast+0x80f/0x9b0
[  280.685150][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.685158][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.685166][T17495]  ? skb_put+0x11b/0x210
[  280.685176][T17495]  netlink_sendmsg+0x813/0xb40
[  280.685189][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.685200][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.685211][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.685218][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.685228][T17495]  __sock_sendmsg+0x21c/0x270
[  280.685240][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.685248][T17495]  ? __might_fault+0xaf/0x130
[  280.685263][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.685276][T17495]  ? import_iovec+0x73/0xa0
[  280.685286][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.685293][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.685303][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.685329][T17495]  ? __fget_files+0x2a/0x420
[  280.685339][T17495]  ? __fget_files+0x3a0/0x420
[  280.685353][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.685362][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.685369][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.685383][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.685398][T17495]  do_syscall_64+0xe2/0xf80
[  280.685408][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.685415][T17495]  ? trace_irq_disable+0x37/0x100
[  280.685428][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.685436][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.685445][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.685451][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.685461][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.685466][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.685471][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.685476][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.685480][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.685494][T17495]  </TASK>
[  280.694617][T17500] lo speed is unknown, defaulting to 1000
[  280.830558][T17495] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  280.834287][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.1.3276 Not tainted syzkaller #0 PREEMPT(full) 
[  280.834299][T17495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.834305][T17495] Call Trace:
[  280.834310][T17495]  <TASK>
[  280.834315][T17495]  dump_stack_lvl+0xe8/0x150
[  280.834330][T17495]  sysfs_warn_dup+0x8e/0xa0
[  280.834340][T17495]  sysfs_do_create_link_sd+0xc0/0x110
[  280.834349][T17495]  device_add_class_symlinks+0x1cf/0x240
[  280.834360][T17495]  device_add+0x475/0xb70
[  280.834374][T17495]  wiphy_register+0x1d73/0x2d50
[  280.834394][T17495]  ? __pfx_wiphy_register+0x10/0x10
[  280.834405][T17495]  ? __pfx_netdev_run_todo+0x10/0x10
[  280.834415][T17495]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  280.834430][T17495]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  280.834441][T17495]  ieee80211_register_hw+0x3571/0x4220
[  280.834451][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.834465][T17495]  ? ieee80211_register_hw+0x13f1/0x4220
[  280.834479][T17495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  280.834496][T17495]  ? __hrtimer_setup+0x181/0x200
[  280.834506][T17495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  280.834517][T17495]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  280.834539][T17495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  280.834546][T17495]  ? kstrndup+0xbf/0x160
[  280.834560][T17495]  hwsim_new_radio_nl+0xf35/0x1bd0
[  280.834579][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.834595][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.834612][T17495]  ? __nla_parse+0x40/0x60
[  280.834622][T17495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  280.834638][T17495]  genl_family_rcv_msg_doit+0x22a/0x330
[  280.834679][T17495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  280.834698][T17495]  ? bpf_lsm_capable+0x9/0x20
[  280.834708][T17495]  ? security_capable+0x7e/0x2c0
[  280.834722][T17495]  genl_rcv_msg+0x61c/0x7a0
[  280.834736][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.834747][T17495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  280.834762][T17495]  netlink_rcv_skb+0x232/0x4b0
[  280.834771][T17495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  280.834783][T17495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.834790][T17495]  ? genl_rcv+0x19/0x40
[  280.834809][T17495]  ? down_read+0x272/0x2e0
[  280.834819][T17495]  ? genl_rcv+0xd/0x40
[  280.834830][T17495]  genl_rcv+0x28/0x40
[  280.834840][T17495]  netlink_unicast+0x80f/0x9b0
[  280.834852][T17495]  ? __pfx_netlink_unicast+0x10/0x10
[  280.834863][T17495]  ? netlink_sendmsg+0x650/0xb40
[  280.834871][T17495]  ? skb_put+0x11b/0x210
[  280.834880][T17495]  netlink_sendmsg+0x813/0xb40
[  280.834894][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.834904][T17495]  ? aa_sock_msg_perm+0xf1/0x1b0
[  280.834916][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.834923][T17495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.834933][T17495]  __sock_sendmsg+0x21c/0x270
[  280.834946][T17495]  ____sys_sendmsg+0x4d7/0x810
[  280.834954][T17495]  ? __might_fault+0xaf/0x130
[  280.834969][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.834982][T17495]  ? import_iovec+0x73/0xa0
[  280.834992][T17495]  ___sys_sendmsg+0x2a5/0x360
[  280.835000][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  280.835010][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.835036][T17495]  ? __fget_files+0x2a/0x420
[  280.835046][T17495]  ? __fget_files+0x3a0/0x420
[  280.835061][T17495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  280.835070][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.835077][T17495]  ? __se_sys_rt_sigprocmask+0x1e0/0x320
[  280.835090][T17495]  ? rcu_is_watching+0x15/0xb0
[  280.835105][T17495]  do_syscall_64+0xe2/0xf80
[  280.835115][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.835122][T17495]  ? trace_irq_disable+0x37/0x100
[  280.835135][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.835142][T17495] RIP: 0033:0x7f7cc8b9acb9
[  280.835150][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.835157][T17495] RSP: 002b:00007f7cc9adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.835166][T17495] RAX: ffffffffffffffda RBX: 00007f7cc8e16090 RCX: 00007f7cc8b9acb9
[  280.835172][T17495] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  280.835177][T17495] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  280.835181][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.835186][T17495] R13: 00007f7cc8e16128 R14: 00007f7cc8e16090 R15: 00007ffe77962558
[  280.835199][T17495]  </TASK>
[  281.084863][T17517] lo speed is unknown, defaulting to 1000
[  281.139541][T17515] netlink: 'syz.2.3280': attribute type 30 has an invalid length.
[  281.142243][T17517] lo speed is unknown, defaulting to 1000
[  281.250524][T17523] syzkaller1: tun_chr_ioctl cmd 1074025677
[  281.253083][T17523] syzkaller1: linktype set to 768
[  281.311542][T17523] syzkaller1: tun_chr_ioctl cmd 2147767519
[  281.693953][T17545] syzkaller0: mtu less than device minimum
[  281.709229][T17545] __nla_validate_parse: 99 callbacks suppressed
[  281.709242][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'.
[  281.715849][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'.
[  281.745109][T17551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3287'.
[  281.833655][T17563] blkio.reset_stats is deprecated
[  282.004737][T17574] IPVS: stopping backup sync thread 5934 ...
[  282.022145][T17577] netlink: 'syz.1.3292': attribute type 32 has an invalid length.
[  282.026325][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'.
[  282.057351][T17577] smc: net device wlan0 applied user defined pnetid SYZ0
[  282.094007][T17584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3293'.
[  282.132371][T17587] netlink: 'syz.1.3294': attribute type 1 has an invalid length.
[  282.173936][T17587] bond82: (slave vxcan3): The slave device specified does not support setting the MAC address
[  282.177727][T17587] bond82: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  282.182360][T17587] bond82: (slave vxcan3): making interface the new active one
[  282.185010][T17587] bond82: (slave vxcan3): Enslaving as an active interface with an up link
[  282.234871][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  282.239447][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  282.243038][T17587] bond82 (unregistering): (slave vxcan3): Releasing backup interface
[  282.249274][T17587] bond82 (unregistering): Released all slaves
[  282.354594][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  282.359131][T17590] netlink: 155876 bytes leftover after parsing attributes in process `syz.2.3295'.
[  282.540652][T17607] openvswitch: netlink: Tunnel attr 77 out of range max 16
[  282.575700][T17609] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  282.648273][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'.
[  282.688340][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x12
[  282.702540][T17614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  282.708800][T17623] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  282.773846][T17637] netlink: zone id is out of range
[  282.780275][T17637] netlink: zone id is out of range
[  282.781896][T17637] netlink: zone id is out of range
[  282.783370][T17637] netlink: zone id is out of range
[  282.784815][T17637] netlink: zone id is out of range
[  282.786346][T17637] netlink: zone id is out of range
[  282.791775][T17638] netlink: 'syz.2.3304': attribute type 1 has an invalid length.
[  282.910941][T17650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.205565][T17682] syzkaller1: entered promiscuous mode
[  283.207781][T17682] syzkaller1: entered allmulticast mode
[  283.226106][T17684] netlink: 'syz.1.3325': attribute type 23 has an invalid length.
[  283.339115][T17692] gre0: left promiscuous mode
[  283.340550][T17692] gre0: left allmulticast mode
[  283.358501][T17692] tipc: Resetting bearer <eth:syzkaller0>
[  283.365777][T17692] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  283.368915][T17692] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  283.381080][T17692] bond66: left promiscuous mode
[  283.382938][T17692] bond66: left allmulticast mode
[  283.385080][T17692] veth13: left promiscuous mode
[  283.388127][T17692] macvlan6: left promiscuous mode
[  283.389881][T17692] macvlan6: left allmulticast mode
[  283.391520][T17692] veth15: left promiscuous mode
[  283.393209][T17692] ipvlan2: left allmulticast mode
[  283.394992][T17692] veth0_vlan: left allmulticast mode
[  283.398848][T17692] gtp2: left promiscuous mode
[  283.400371][T17692] gtp2: left allmulticast mode
[  283.401927][T17692] bond75: left promiscuous mode
[  283.403328][T17692] veth17: left promiscuous mode
[  283.405210][T17692] geneve4: left promiscuous mode
[  283.425338][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.432787][T17691] netlink: 'syz.0.3327': attribute type 39 has an invalid length.
[  283.447214][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.450423][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.453709][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.528665][T17699] netlink: 'syz.1.3330': attribute type 10 has an invalid length.
[  283.594593][T17699] lo speed is unknown, defaulting to 1000
[  283.598743][T17699] lo speed is unknown, defaulting to 1000
[  283.836143][T17707] netlink: 'syz.1.3332': attribute type 23 has an invalid length.
[  283.999643][T17716] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  284.005614][T17718] netlink: 'syz.1.3336': attribute type 142 has an invalid length.
[  284.341969][T17741] netlink: 'syz.0.3343': attribute type 10 has an invalid length.
[  284.412470][T17741] lo speed is unknown, defaulting to 1000
[  284.416090][T17741] lo speed is unknown, defaulting to 1000
[  284.820882][T17771] tc_dump_action: action bad kind
[  285.108888][T17784] macsec0: entered allmulticast mode
[  285.149949][T17793] net_ratelimit: 38 callbacks suppressed
[  285.149968][T17793] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  285.549338][T17827] xt_CT: You must specify a L4 protocol and not use inversions on it
[  285.815032][T17850] lo speed is unknown, defaulting to 1000
[  285.818543][T17850] lo speed is unknown, defaulting to 1000
[  286.182494][T17861] lo speed is unknown, defaulting to 1000
[  286.186159][T17861] lo speed is unknown, defaulting to 1000
[  286.232462][T17863] pim6reg: entered allmulticast mode
[  286.251870][T17863] pim6reg: left allmulticast mode
[  286.430589][T17870] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  286.576008][T17885] nbd: nbd0 already in use
[  286.579517][T17883] block nbd0: NBD_DISCONNECT
[  286.580931][T17883] block nbd0: Send disconnect failed -32
[  286.582686][T17883] block nbd0: shutting down sockets
[  286.621338][T17884] block nbd0: NBD_DISCONNECT
[  286.621395][    C1] blk_print_req_error: 138 callbacks suppressed
[  286.621407][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.627904][    C1] buffer_io_error: 138 callbacks suppressed
[  286.627914][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  286.632454][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.635592][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  286.638057][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.640897][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  286.643786][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.647514][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  286.659764][T10664] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.667386][T17884] block nbd0: Send disconnect failed -32
[  286.670347][T10664] Buffer I/O error on dev nbd0, logical block 0, async page read
[  286.687272][  T126] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  286.691799][  T126] Buffer I/O error on dev nbd0, logical block 1, async page read
[  286.694172][  T126] Buffer I/O error on dev nbd0, logical block 2, async page read
[  286.696421][  T126] Buffer I/O error on dev nbd0, logical block 3, async page read
[  286.700166][T10664] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.702924][T10664] Buffer I/O error on dev nbd0, logical block 0, async page read
[  286.705359][T10664] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.720413][T10664] Buffer I/O error on dev nbd0, logical block 1, async page read
[  286.722695][T10664] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.725397][T10664] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  286.747606][T10664] ldm_validate_partition_table(): Disk read failed.
[  286.750252][T10664] Dev nbd0: unable to read RDB block 0
[  286.752511][T10664]  nbd0: unable to read partition table
[  286.757790][T10664] ldm_validate_partition_table(): Disk read failed.
[  286.760631][T10664] Dev nbd0: unable to read RDB block 0
[  286.764196][T10664]  nbd0: unable to read partition table
[  286.985537][T17916] __nla_validate_parse: 50 callbacks suppressed
[  286.985548][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  286.997625][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.000520][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.003262][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.005984][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.009101][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.012198][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.015140][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.018339][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.021065][T17916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'.
[  287.029915][T17918] ip6gre2: entered promiscuous mode
[  287.031468][T17918] ip6gre2: entered allmulticast mode
[  287.075499][T17920] validate_nla: 8 callbacks suppressed
[  287.075513][T17920] netlink: 'syz.0.3391': attribute type 29 has an invalid length.
[  288.018443][T17947] tipc: Resetting bearer <eth:syzkaller0>
[  288.037106][T17947] tipc: Resetting bearer <eth:syzkaller0>
[  288.308554][T17958] netlink: 'syz.2.3401': attribute type 1 has an invalid length.
[  288.682742][T17973] netlink: 'syz.2.3408': attribute type 1 has an invalid length.
[  288.697690][T17973] bond41: entered promiscuous mode
[  288.699242][T17973] bond41: entered allmulticast mode
[  288.702636][T17973] 8021q: adding VLAN 0 to HW filter on device bond41
[  288.760171][T17985] x_tables: duplicate underflow at hook 1
[  288.909117][T17998] tipc: Resetting bearer <eth:syzkaller0>
[  288.914415][T17998] A link change request failed with some changes committed already. Interface 98F may have been left with an inconsistent configuration, please check.
[  288.947915][T18006] xt_HMARK: spi-set and port-set can't be combined
[  288.986612][T18012] netlink: 'syz.1.3419': attribute type 23 has an invalid length.
[  289.055330][T18019] netlink: 'syz.0.3422': attribute type 2 has an invalid length.
[  289.066461][T18024] netlink: 'syz.1.3423': attribute type 21 has an invalid length.
[  289.088950][T18026] netlink: 'syz.0.3425': attribute type 12 has an invalid length.
[  289.093693][T18026] sctp: [Deprecated]: syz.0.3425 (pid 18026) Use of int in maxseg socket option.
[  289.093693][T18026] Use struct sctp_assoc_value instead
[  289.199145][T18044] netlink: 'syz.2.3430': attribute type 23 has an invalid length.
[  289.412328][T18066] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  289.573411][T18080] netlink: 'syz.1.3444': attribute type 4 has an invalid length.
[  289.576049][T18080] netlink: 'syz.1.3444': attribute type 4 has an invalid length.
[  289.583911][  T836] lo speed is unknown, defaulting to 1000
[  289.585690][  T836] syz0: Port: 1 Link ACTIVE
[  289.588508][  T836] lo speed is unknown, defaulting to 1000
[  289.722485][T18101] macvlan0: entered promiscuous mode
[  289.726566][T18101] macvlan0: entered allmulticast mode
[  289.729324][T18101] bond42: entered promiscuous mode
[  289.733085][T18101] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  289.737633][T18101] bond42: left promiscuous mode
[  289.796844][T18111] openvswitch: netlink: Key type 66 is out of range max 32
[  289.843575][T18119] 8021q: adding VLAN 0 to HW filter on device bond43
[  290.505079][T18178] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.612628][T18180] macvlan0: entered promiscuous mode
[  290.614567][T18180] macvlan0: entered allmulticast mode
[  290.617075][T18180] bond44: entered promiscuous mode
[  290.619634][T18180] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  290.624974][T18180] bond44: left promiscuous mode
[  290.711936][T18183] A link change request failed with some changes committed already. Interface 98F may have been left with an inconsistent configuration, please check.
[  291.336408][   T56] block nbd0: Receive control failed (result -32)
[  291.642959][T18244] sctp: [Deprecated]: syz.0.3490 (pid 18244) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.642959][T18244] Use struct sctp_sack_info instead
[  291.931716][T18264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.034054][T18273] 8021q: adding VLAN 0 to HW filter on device bond45
[  292.048733][T18273] __nla_validate_parse: 41 callbacks suppressed
[  292.048752][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'.
[  292.072982][T18273] veth11: entered promiscuous mode
[  292.088030][T18280] bridge_slave_0: left promiscuous mode
[  292.091281][T18280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  292.215811][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'.
[  292.223032][T18290] lo speed is unknown, defaulting to 1000
[  292.230651][T18290] lo speed is unknown, defaulting to 1000
[  292.351681][T18295] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3508'.
[  292.357567][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'.
[  292.387260][T18295] sch_tbf: burst 1 is lower than device syzkaller0 mtu (313) !
[  292.473717][T18303] netlink: 'syz.1.3510': attribute type 11 has an invalid length.
[  292.480866][T18303] validate_nla: 7 callbacks suppressed
[  292.480879][T18303] netlink: 'syz.1.3510': attribute type 9 has an invalid length.
[  292.486038][T18303] netlink: 'syz.1.3510': attribute type 11 has an invalid length.
[  292.489550][T18303] netlink: 'syz.1.3510': attribute type 12 has an invalid length.
[  292.493742][T18303] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3510'.
[  292.496551][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'.
[  292.653024][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'.
[  292.671890][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'.
[  292.675313][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'.
[  292.774415][  T782] lo speed is unknown, defaulting to 1000
[  292.776326][  T782] syz0: Port: 1 Link DOWN
[  292.779870][  T782] lo speed is unknown, defaulting to 1000
[  292.841454][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3519'.
[  293.042487][T18337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  293.114092][T18343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.176829][T18346] netlink: 'syz.1.3528': attribute type 10 has an invalid length.
[  293.344131][   T34] audit: type=1800 audit(1770403879.302:18): pid=18355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3531" name="pids.current" dev="tmpfs" ino=6013 res=0 errno=0
[  293.391819][T18359] vlan0: entered promiscuous mode
[  293.393582][T18359] bridge0: entered promiscuous mode
[  293.548892][T18372] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  293.582011][T18372] macvlan4: entered promiscuous mode
[  293.584107][T18372] macvlan4: entered allmulticast mode
[  293.587561][T18372] bond82: entered promiscuous mode
[  293.589971][T18372] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  293.595867][T18372] bond82: left promiscuous mode
[  293.730176][T18379] netlink: 'syz.0.3537': attribute type 2 has an invalid length.
[  294.396190][T18388] netlink: 'syz.2.3539': attribute type 23 has an invalid length.
[  294.563132][T18396] rdma_op ffff88810a49d1f0 conn xmit_rdma 0000000000000000
[  294.568966][T18398] netlink: 'syz.2.3544': attribute type 1 has an invalid length.
[  294.597337][T18398] macvlan0: entered promiscuous mode
[  294.599332][T18398] macvlan0: entered allmulticast mode
[  294.602208][T18398] bond46: entered promiscuous mode
[  294.604628][T18398] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  294.614982][T18398] bond46: left promiscuous mode
[  294.727214][T18407] gretap0: entered promiscuous mode
[  294.918040][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.924071][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.934574][T18420] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.940356][T18420] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.366739][T18394] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  295.368672][T18394] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  295.378634][T18394] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  295.381316][T18394] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  295.406194][T18450] bond74: option primary_reselect: invalid value (4)
[  295.411984][T18450] bond74 (unregistering): Released all slaves
[  295.483333][T18394] tipc: Resetting bearer <eth:syzkaller0>
[  295.518025][T18456] netlink: 'syz.0.3562': attribute type 1 has an invalid length.
[  295.593315][T18456] macvlan1: entered promiscuous mode
[  295.595290][T18456] macvlan1: entered allmulticast mode
[  295.598583][T18456] bond74: entered promiscuous mode
[  295.601391][T18456] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  295.610774][T18456] bond74: left promiscuous mode
[  296.090508][T18512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  296.094501][T18512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.454769][T18543] Bluetooth: hci0: Opcode 0x080f failed: -22
[  297.098443][T18576] netlink: 'syz.1.3580': attribute type 29 has an invalid length.
[  297.147378][T18585] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  297.149616][T18585] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  297.276197][T18595] __nla_validate_parse: 19 callbacks suppressed
[  297.276208][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3587'.
[  297.298614][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3589'.
[  297.469298][   T34] audit: type=1800 audit(1770403883.432:19): pid=18607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3589" name="memory.events" dev="tmpfs" ino=6160 res=0 errno=0
[  297.474982][T18611] lo speed is unknown, defaulting to 1000
[  297.478429][T18611] lo speed is unknown, defaulting to 1000
[  297.500439][T18617] IPv6: sit3: Disabled Multicast RS
[  297.520310][T18599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.548179][T18621] validate_nla: 2 callbacks suppressed
[  297.548195][T18621] netlink: 'syz.2.3597': attribute type 1 has an invalid length.
[  297.552897][T18621] netlink: 'syz.2.3597': attribute type 2 has an invalid length.
[  297.741531][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'.
[  297.769301][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'.
[  298.165914][T18672] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3613'.
[  298.205397][T18672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3613'.
[  298.210386][T18672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3613'.
[  298.212977][T18672] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3613'.
[  298.220725][T18674] pim6reg: entered allmulticast mode
[  298.230342][T18674] pim6reg: left allmulticast mode
[  298.273649][T18677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3615'.
[  298.276591][T18677] netlink: 'syz.0.3615': attribute type 1 has an invalid length.
[  298.282484][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'.
[  298.296214][T18677] gretap0: left promiscuous mode
[  298.298953][T18677] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  298.301235][T18677] geneve4: left promiscuous mode
[  298.303401][T18677] ip6gre2: left promiscuous mode
[  298.403813][T18687] netlink: 'syz.0.3617': attribute type 1 has an invalid length.
[  298.406033][T18687] NCSI netlink: No device for ifindex 0
[  298.458570][T18695] openvswitch: netlink: Flow key attr not present in new flow.
[  298.561287][T18710] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000
[  298.596400][T18708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.658924][T18719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.725100][T18723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.796187][T18733] netlink: 'syz.2.3635': attribute type 6 has an invalid length.
[  298.839111][T18739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.842112][T18741] netlink: 'syz.1.3638': attribute type 3 has an invalid length.
[  298.854233][T18741] netlink: 'syz.1.3638': attribute type 3 has an invalid length.
[  299.137586][T18769] netlink: 'syz.2.3647': attribute type 1 has an invalid length.
[  299.172452][T18769] macvlan0: entered promiscuous mode
[  299.174591][T18769] macvlan0: entered allmulticast mode
[  299.178099][T18769] bond47: entered promiscuous mode
[  299.180543][T18769] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  299.186203][T18769] bond47: left promiscuous mode
[  299.448298][T18795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  299.511585][T18799] netlink: 'syz.2.3659': attribute type 12 has an invalid length.
[  299.515618][T18799] netlink: 'syz.2.3659': attribute type 12 has an invalid length.
[  299.662140][T18806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.345338][T18819] hsr_slave_1 (unregistering): left promiscuous mode
[  300.492951][T18836] vlan1: entered promiscuous mode
[  300.673456][T18852] lo speed is unknown, defaulting to 1000
[  300.677108][T18852] lo speed is unknown, defaulting to 1000
[  300.715238][T18856] ipt_rpfilter: unknown options
[  301.008203][T18877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.342876][T18904] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  301.711393][T18925] 
[  301.712161][T18925] ======================================================
[  301.714145][T18925] WARNING: possible circular locking dependency detected
[  301.716349][T18925] syzkaller #0 Not tainted
[  301.717800][T18925] ------------------------------------------------------
[  301.719788][T18925] syz.1.3697/18925 is trying to acquire lock:
[  301.721606][T18925] ffffffff8f925e18 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  301.724728][T18925] 
[  301.724728][T18925] but task is already holding lock:
[  301.727233][T18925] ffffffff8f925db8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  301.730635][T18925] 
[  301.730635][T18925] which lock already depends on the new lock.
[  301.730635][T18925] 
[  301.734279][T18925] 
[  301.734279][T18925] the existing dependency chain (in reverse order) is:
[  301.737150][T18925] 
[  301.737150][T18925] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  301.739396][T18925]        _raw_spin_lock_bh+0x36/0x50
[  301.741003][T18925]        nr_rt_ioctl+0x3e1/0xdf0
[  301.742497][T18925]        sock_do_ioctl+0x101/0x320
[  301.743997][T18925]        sock_ioctl+0x5c6/0x7f0
[  301.745452][T18925]        __se_sys_ioctl+0xfc/0x170
[  301.747036][T18925]        do_syscall_64+0xe2/0xf80
[  301.748606][T18925]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.750794][T18925] 
[  301.750794][T18925] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  301.753140][T18925]        _raw_spin_lock_bh+0x36/0x50
[  301.754710][T18925]        nr_rt_ioctl+0x1e4/0xdf0
[  301.756222][T18925]        sock_do_ioctl+0x101/0x320
[  301.757904][T18925]        sock_ioctl+0x5c6/0x7f0
[  301.759464][T18925]        __se_sys_ioctl+0xfc/0x170
[  301.761153][T18925]        do_syscall_64+0xe2/0xf80
[  301.762819][T18925]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.765098][T18925] 
[  301.765098][T18925] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  301.767638][T18925]        __lock_acquire+0x15a5/0x2cf0
[  301.769191][T18925]        lock_acquire+0x106/0x330
[  301.770641][T18925]        _raw_spin_lock_bh+0x36/0x50
[  301.772111][T18925]        nr_rt_device_down+0xa9/0x720
[  301.773629][T18925]        nr_device_event+0x137/0x150
[  301.775234][T18925]        notifier_call_chain+0x19d/0x3a0
[  301.776948][T18925]        __dev_notify_flags+0x16d/0x310
[  301.778496][T18925]        netif_change_flags+0xe8/0x1a0
[  301.780007][T18925]        dev_change_flags+0x130/0x260
[  301.781664][T18925]        dev_ioctl+0x7b4/0x1150
[  301.783245][T18925]        sock_do_ioctl+0x23e/0x320
[  301.784864][T18925]        sock_ioctl+0x5c6/0x7f0
[  301.786327][T18925]        __se_sys_ioctl+0xfc/0x170
[  301.787792][T18925]        do_syscall_64+0xe2/0xf80
[  301.789279][T18925]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.791172][T18925] 
[  301.791172][T18925] other info that might help us debug this:
[  301.791172][T18925] 
[  301.794313][T18925] Chain exists of:
[  301.794313][T18925]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  301.794313][T18925] 
[  301.798841][T18925]  Possible unsafe locking scenario:
[  301.798841][T18925] 
[  301.801302][T18925]        CPU0                    CPU1
[  301.803121][T18925]        ----                    ----
[  301.805121][T18925]   lock(nr_neigh_list_lock);
[  301.806873][T18925]                                lock(&nr_node->node_lock);
[  301.809511][T18925]                                lock(nr_neigh_list_lock);
[  301.812150][T18925]   lock(nr_node_list_lock);
[  301.813847][T18925] 
[  301.813847][T18925]  *** DEADLOCK ***
[  301.813847][T18925] 
[  301.816743][T18925] 2 locks held by syz.1.3697/18925:
[  301.818670][T18925]  #0: ffffffff8f7a9ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  301.821847][T18925]  #1: ffffffff8f925db8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  301.825446][T18925] 
[  301.825446][T18925] stack backtrace:
[  301.827355][T18925] CPU: 1 UID: 0 PID: 18925 Comm: syz.1.3697 Not tainted syzkaller #0 PREEMPT(full) 
[  301.827366][T18925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.827373][T18925] Call Trace:
[  301.827379][T18925]  <TASK>
[  301.827385][T18925]  dump_stack_lvl+0xe8/0x150
[  301.827398][T18925]  print_circular_bug+0x2e1/0x300
[  301.827411][T18925]  check_noncircular+0x12e/0x150
[  301.827423][T18925]  __lock_acquire+0x15a5/0x2cf0
[  301.827433][T18925]  ? __lock_acquire+0x6b5/0x2cf0
[  301.827443][T18925]  ? dsa_user_netdevice_event+0x495/0x2850
[  301.827453][T18925]  ? packet_notifier+0x126/0xcd0
[  301.827464][T18925]  ? nr_rt_device_down+0xa9/0x720
[  301.827472][T18925]  lock_acquire+0x106/0x330
[  301.827481][T18925]  ? nr_rt_device_down+0xa9/0x720
[  301.827490][T18925]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  301.827501][T18925]  ? nr_rt_device_down+0xa9/0x720
[  301.827509][T18925]  _raw_spin_lock_bh+0x36/0x50
[  301.827517][T18925]  ? nr_rt_device_down+0xa9/0x720
[  301.827524][T18925]  nr_rt_device_down+0xa9/0x720
[  301.827535][T18925]  nr_device_event+0x137/0x150
[  301.827547][T18925]  notifier_call_chain+0x19d/0x3a0
[  301.827559][T18925]  __dev_notify_flags+0x16d/0x310
[  301.827569][T18925]  ? __pfx___dev_notify_flags+0x10/0x10
[  301.827609][T18925]  ? __dev_change_flags+0x4c6/0x690
[  301.827619][T18925]  ? __pfx___dev_change_flags+0x10/0x10
[  301.827627][T18925]  ? full_name_hash+0x92/0xe0
[  301.827639][T18925]  netif_change_flags+0xe8/0x1a0
[  301.827649][T18925]  dev_change_flags+0x130/0x260
[  301.827657][T18925]  dev_ioctl+0x7b4/0x1150
[  301.827666][T18925]  sock_do_ioctl+0x23e/0x320
[  301.827677][T18925]  ? __pfx_sock_do_ioctl+0x10/0x10
[  301.827685][T18925]  ? do_futex+0x395/0x420
[  301.827698][T18925]  sock_ioctl+0x5c6/0x7f0
[  301.827707][T18925]  ? __pfx_sock_ioctl+0x10/0x10
[  301.827716][T18925]  ? __fget_files+0x2a/0x420
[  301.827730][T18925]  ? __fget_files+0x3a0/0x420
[  301.827739][T18925]  ? __fget_files+0x2a/0x420
[  301.827749][T18925]  ? bpf_lsm_file_ioctl+0x9/0x20
[  301.827758][T18925]  ? __pfx_sock_ioctl+0x10/0x10
[  301.827767][T18925]  __se_sys_ioctl+0xfc/0x170
[  301.827775][T18925]  do_syscall_64+0xe2/0xf80
[  301.827784][T18925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.827791][T18925]  ? trace_irq_disable+0x37/0x100
[  301.827802][T18925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.827810][T18925] RIP: 0033:0x7f7cc8b9acb9
[  301.827819][T18925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.827826][T18925] RSP: 002b:00007f7cc9b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  301.827836][T18925] RAX: ffffffffffffffda RBX: 00007f7cc8e15fa0 RCX: 00007f7cc8b9acb9
[  301.827842][T18925] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000f
[  301.827847][T18925] RBP: 00007f7cc8c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  301.827852][T18925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.827857][T18925] R13: 00007f7cc8e16038 R14: 00007f7cc8e15fa0 R15: 00007ffe77962558
[  301.827866][T18925]  </TASK>
[  303.167018][  T126] block nbd3: Possible stuck request ffff88810a140000: control (read@0,1024B). Runtime 150 seconds
[  303.170918][  T126] block nbd3: Possible stuck request ffff88810a140200: control (read@1024,1024B). Runtime 150 seconds
[  303.174700][  T126] block nbd3: Possible stuck request ffff88810a140400: control (read@2048,1024B). Runtime 150 seconds
[  303.178670][  T126] block nbd3: Possible stuck request ffff88810a140600: control (read@3072,1024B). Runtime 150 seconds
