last executing test programs:

2.610079746s ago: executing program 2 (id=3166):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket(0x2b, 0x80801, 0x101) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 64)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x36) (async, rerun: 32)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
writev(r0, 0x0, 0x0) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
sendto$inet6(r2, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) (async)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r2, 0x1) (async)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12163, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x40000000000003, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000005f4, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.605100022s ago: executing program 2 (id=3167):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000540))
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000100)="9b497221ca334932c827e1f3568d298edf32e8ee402ea8529cfdb3015572f55d63035173f5cf25c0b765c684cdec", &(0x7f0000000200)=""/8, 0x4}, 0x20)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x44}}, 0x4008000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x68, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x9}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000740)=0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc}, 0x50)

2.491778016s ago: executing program 2 (id=3168):
readv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/214, 0xd6}, {&(0x7f0000001100)=""/205, 0xcd}, {&(0x7f0000001200)=""/247, 0xf7}], 0x4)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14, 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'vxcan0\x00', <r1=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002780)={0x1, 0x58, &(0x7f0000002700)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002780)={0x1, 0x58, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f00000013c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002500)=[{&(0x7f0000001400)="7bef115ec8543b93ef9ccb2e38caa65f08962e010216d2ae8f516367ea367e353552a1f0cc77dfc7922fac49cbb202efcddec538e122788ef3285d218d1ca92f2cfb6ac5775d9eff283daf2d6125b7b99f296e4c710baa3a9e9af149de4af26867ff6f0ed7d1a55a9bf6b12190d7", 0x6e}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="875e5322fa116845630f6b1b9fedd31f9a91b2dcbca0f20902061201f1d1fe1c32ad156af98607faad266b6ddaa80d44b4abed051cbbfd51164f50af2496d6a0bc7b9b51f599b3fef2596aa1421f35451ccf", 0x52}], 0x3, &(0x7f0000002540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000002580)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002680)=[{&(0x7f00000025c0)="6f1a1421fdcca53113c9a20e5651707ac325697863a5128c0a", 0x19}, {&(0x7f0000002600)="6ab0059847726914d64e14298181c4b7f2d023ebb8a0dcf1cb998641292e46e7d711cabdd5d3f11cef935dfae6f1a3fa3216a1ea465be5fc96da2564946f66789348b9238776b86ac822663bdac25d71e97c5855488e06d47c", 0x59}], 0x2, &(0x7f00000027c0)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0xfff}]}, @lsrr={0x83, 0x7, 0x92, [@dev={0xac, 0x14, 0x14, 0x26}]}, @end, @timestamp_addr={0x44, 0x34, 0xa, 0x1, 0x4, [{@private=0xa010101, 0xa}, {@multicast1, 0xa}, {@multicast2, 0x874}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x400}, {@remote, 0x726}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7f}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xa9, 0x0, 0x9, [0x1, 0x10000]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x150}}], 0x2, 0x20000004)
syz_emit_ethernet(0x107, &(0x7f00000029c0)={@broadcast, @broadcast, @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x4305, "bc1f76f8922523432c3169a038bc0fedb8a67939efae5f2a7d93c07737c67f5cb002d7c85f9524141e674bcf020cb1d94bcc1e4bfb5371b1e729170b50f1f317d0816f079403f68ea54b4422e5a66fa430e4fa086869ae58f25155552a167c4d43394a30a9c375c6db535cbd12559302c15c00ef0fa4f91223067356cb629b5256d8cfa46b60dfd3ef8664f899498fb6f8f66c3e01c265e5e3bb27fb2936a1c9131d465ecc886ccf6b9cf679bb740dd38d75bd16293e2c394fc996f65f17e3f70271bb983cb65959af702b18f232943eab13edc8a975287ae37905a450baa4ea7d819c893b4e8e96698078ea45308d84a706e73f4f"}}}, &(0x7f0000002b00)={0x1, 0x1, [0x77e, 0x6a6, 0xd7b, 0x992]})
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002b40)={'vxcan1\x00'})
r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000002b80)={{0x3, @default}, [@bcast, @remote, @netrom, @bcast, @remote, @default, @netrom, @rose]}, &(0x7f0000002c00)=0x48, 0x0)
accept$ax25(r4, &(0x7f0000002c40)={{0x3, @bcast}, [@default, @default, @null, @bcast, @remote, @remote, @netrom, @bcast]}, &(0x7f0000002cc0)=0x48)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002d00), 0x91c80, 0x0)
ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000002d40))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002f40)={0x1, &(0x7f0000002d80)="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", &(0x7f0000002e80)=""/130}, 0x20)
pipe(&(0x7f0000002f80)) (async)
pipe(&(0x7f0000002f80)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000002fc0)={<r8=>0x0, 0xf800, 0x20, 0xfffffffffffffffe, 0xfffffffffffffffa}, &(0x7f0000003000)=0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000003040)={r8, 0xfff9, 0xff}, &(0x7f0000003080)=0x8)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000030c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x2, 0x6f4a, 0x40c, 0x9, 0x2}, {0x9, 0x1, 0x3, 0x0, 0x4, 0x9}], ['\x00', '\x00']})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003280)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x80, r9, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1163}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x0, 0x7]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) (async)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x80, r9, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1163}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x0, 0x7]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000033c0)={0x0, @adiantum, 0x0, @desc2})
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000003400)="9aa03a7bf67058894a58c78f070a6704afc5945d94d20fa221d11b06b6bfc247671d840a8d21898b8091db456f7cf81d5896b516502d1c71cdfab1", 0x3b) (async)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000003400)="9aa03a7bf67058894a58c78f070a6704afc5945d94d20fa221d11b06b6bfc247671d840a8d21898b8091db456f7cf81d5896b516502d1c71cdfab1", 0x3b)
bind$inet(r6, &(0x7f0000003440)={0x2, 0x4e22, @private=0xa010100}, 0x10)
getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000003480)=0x3, &(0x7f00000034c0)=0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000003500)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000003600)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000003500)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000003600)=0xe8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003740)={@cgroup=r6, 0x2, 0x1, 0x8, &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000036c0)=[0x0, 0x0, 0x0], &(0x7f0000003700)=[0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003740)={@cgroup=r6, 0x2, 0x1, 0x8, &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000036c0)=[0x0, 0x0, 0x0], &(0x7f0000003700)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0xffffffffffffffff, r7, 0x0, 0x1, &(0x7f00000037c0)='\x00'}, 0x30) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0xffffffffffffffff, r7, 0x0, 0x1, &(0x7f00000037c0)='\x00', <r12=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003780)={@map=r7, r6, 0x3, 0x2c, 0x0, @void, @void, @void, @value=r12, r11}, 0x20)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003880), r6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000004b00)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004ac0)={&(0x7f00000038c0)={0x11dc, r13, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x80, 0x5, "69368d288874f5c4d8270e23c2fd98351ad809464fbf1204b1aad93b0bb7ddd7157af39b9de739cbd52862ad6633eccb1ae0c1dcaa52702939d61aec707133db5f65e825bbf49ce67de08fc007d6cd4074bfa65e8179a06cc0484ce145d39b3771dfd01a064593ab2c981317ee2267665433e3aa41127833c849f46c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':#\xd1\'+{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'E/C[&(*:\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\'[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{((&(\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x41)

2.38200209s ago: executing program 2 (id=3169):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/17, @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x802)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611182000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x5}, {0x10, 0x7}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x4, 0x40010020, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

1.652416018s ago: executing program 0 (id=3176):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005e00010200"/18, @ANYBLOB="b41b71a5e1b2e2"], 0x1c}}, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4$x25(r1, 0x0, 0x0, 0x0)

1.580695731s ago: executing program 0 (id=3177):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r5 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xa0179e08})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = getuid()
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r8}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) (async)
getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async)
unshare(0x22020600) (async)
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) (async)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, 0x0) (async)
setsockopt$sock_attach_bpf(r10, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

1.522145812s ago: executing program 0 (id=3178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20008044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a393110000000000000000000800010002000000"], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea15"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000080)=0xffdffffe, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000200000004000000ffa93f5cf7bf2d0514c0de6e8851e9f0cd90e1ca4f050ff06a8eebb7639dc7b3d8464f36a654c3e8e5c40235c4f2e1dea05fa2b6121be3b92e3147702a2df422977e8c32a92414a745b18963d0aa79533a6c07febed0ea7e5482b33dd26673174572d22660e2d0566a2a341e5e7b8d2490b202f5df9edda70efbc40f849dfb43fb66f5045efb1bd4e3abc8a7d05e2db035387ca32c785ca85ed1ffb787d9f5bc10f3031dff90b33d5e520bc49c8ef70a09eeba6d95956a07c171c83fa16aa79434a54904"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

541.256782ms ago: executing program 1 (id=3180):
r0 = socket$inet(0x2, 0x1, 0x100)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x67)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0xa, 0x801, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1ccd723cb9b20a8cdc25bb53000000240001000100000000000000000000000600030000000000"], 0x1c}}, 0x8004)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x8000000003, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x4, 0x1}}, 0xe8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x9, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000047f000002000000a00a0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8=r7, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000004000000040000000a00000000000000fbd713a8136bfb9fa00b55cff9d332ab8675c043ee7fecbd302a20cd219e60cd9e0ad521ed74", @ANYRES32=r10, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r11, 0x58, &(0x7f0000000300)}, 0x10)

538.819721ms ago: executing program 0 (id=3181):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "2570a50e15c00591", "d43e2ed095822ae7208075ef3365f373", "a2316d00", "4e5af27e926df668"}, 0x28)

538.026754ms ago: executing program 1 (id=3182):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9507, 0x20a80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x400c014)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0x20}}, 0x40090)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0)
close(r1)

481.740673ms ago: executing program 0 (id=3183):
r0 = socket$kcm(0x2b, 0x1, 0x0)
listen(r0, 0x6)

481.248587ms ago: executing program 2 (id=3184):
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xfffffffe}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x2b, 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x30bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f2, 0x4, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x400007fd, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x20000000)
r13 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r14 = socket$xdp(0x2c, 0x3, 0x0)
ppoll(&(0x7f0000000300)=[{r9, 0x240}, {r9, 0x200}, {r7, 0x20}, {r6, 0x1000}, {r10, 0x8400}, {r13, 0x1470}, {r9, 0x20}, {r14, 0x4210}, {r8, 0x1000}], 0x9, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x3]}, 0x8)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0d", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r15=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r15, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20)

480.128335ms ago: executing program 0 (id=3185):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa03f4907812000000000000000000000000015a817f0000017f000001"], 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

189.819241ms ago: executing program 1 (id=3186):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0xfffffffffffffffe, 0xc001)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="c778e52f2ed349ea3aad389cbaf4d39900ed9b14e5808896b18c7f7dbb43", 0x1e}, {&(0x7f0000000140)="2d7dab9bfb297f9ae41f0def0b4c5678200482a284a628c3a830513c53fc097c7987b4b4c606733c52f572aa0f0864366b07f03e7af04a73e52e7b62bc1b884edde60ffb6192424c7b924f5214ce6dcea55637a0f5f17be7d78627bdf73a63e80a028d35d2a23ddd2ebf7dc4aec0cd3d3550037e01069753742c8afd1a054c4462277e378dd0d4ebba4a1e147f0857ae334daa48db6c6f80250f020880068ccd2b1a934f3a948105d865be2da47ea5c73d3ed31e5476fb891d122935c0767b725d96e8f634a35a3fb388c2886334ef652b297487f76b8815b85dc157fd1ac4bd323ca033a11b470f8d398f731a74bfc2bc286955f7577133", 0xf8}, {&(0x7f0000000240)="58cd97a9c4fe8c29218a32b1fa6e77a19da66ab3b92e5a5df7282790287877d372eac3c8d455f2d0e7da2e801ba1d17d6a8fab78139cbed89b0cfdd1f4c33e20e0bc494cef45718374b99392c3f7b6c095ec4caaa9f0ffbe231d7c813795465435e21c311821e2605ab519a7e6e014fb9ca446e179f3448b6ee240b4d56b8bc8517c11895d1a0e6b3528eba598d65216b3a0e4168bea168f2827eac7123a4d41dbb5f99ecf232705bdbb929a7c", 0xad}, {&(0x7f0000000300)="e87838d1851207802595d1b4310f428c7874df3e909bbfe09d32916a8887fb94109aab58c8fe3777f8bf3dab3d4a03f4697d7bbbe535a7ca9dd3a51ebd5884f052c0736afd0d2334ff6fb9ba074a4ae314ab5d29aea637d3057555b0d5bcad3518612fc299dc65b5e6c6", 0x6a}, {&(0x7f0000000380)="2caacc6db92d5eaa196f728d0243a33c7ba4910046512e669909e58bea1817bdd59c00684ead72f0f8ccedace5f7377f2c60f914b4564a3a8a595604fc50451e427572034a1744d7269c9bba4d9d166556a2355f823894521ca484e500dddd501732514f98aec25a00a7f85175567c06cadd36d75ae048f5", 0x78}], 0x5, &(0x7f0000000480)=[{0xe0, 0x102, 0x2, "2832f471fa12f0bb6a3642a48aa055aa22c844255bc7fbae367a7103834e6122db21db88a03d53c8d2afe3f18c073b39421c73e19f3de1a3cae4deb512f9ae16e6f0baef7c6e05c99429658868177472d429ee33e0f0a509432643cc5b8c71594c409518a1736f93f1bf926d08778793502566ec7a56277c70decee8e5e2f58edca21f30c55ce98a20949601ee3330a1a9928ad48ef769f88a595c9a3cfb8e1b0b0e60a3393c86a73227a5f765101add0e6f2e186221e403562a1071dab8c6ab5d1a48c7b37be036ae4ab396e41319"}, {0xa0, 0x109, 0x18, "dd2a1520234b0dea44ed8b5e1381f97e22959de1fa11c15f19d942054f474a4045eabef321a6cf8e66e87f0779b736564186e7a11f79d123f4301d2f6d3ca1cb88f9bf8272dc3be92686b57d14561d5a86fe20f2a704541420130f20937ca81a6eb9de834cc39f36824dd465cd4962bb30cbc699932c71dad17fa596ef90a663b3c944cc6d10a34c16399dab38a3c0"}, {0x58, 0x119, 0xffff6d1e, "22ced4f981ec66d1e1c125cc1888b8e6f865ca7cf67da1e6a5a056a7bd1b27355ede9af658b0ab5d8ec8329e2bca0f1648b1e08b8fbc0285081c83d839ac40613971efdb79bc7806"}, {0xf8, 0x116, 0x2, "bea6f219f66df7f7ad7c9a41361a27765e6351cd46cca8eae2a3109606851a40336e2a5c7252b1a6f4297975762b3fcf1b22fdeb8f6c01b92b068528fc86c677a03eff72496be15ae8bdec7c57bfd679ccb48932b86350f7bf8fea6acd84a2f76ebe5942bb072e578daa6cb65bf2a7348dd84eb9a06a5f55bb19658576108372f7a591386494b80541cf33f9d82cd4280de59d95c2c620e3d5e370600026d24aed531eeeef3654c9a8de344ce2b215c305229866e0cb065af4daec8fdaef2b145bdb34bb2e8344c36063aebb539dc4ad78c32b0d6391a1951dc4ad87af509ae647b26acb84d44c"}], 0x2d0}, 0x20) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000007c0)={0x1, 0x1ff, 0xfffffffffffffffe}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000840)={'syztnl0\x00', <r2=>0x0, 0x10, 0x8000, 0x7, 0x4, {{0x1a, 0x4, 0x2, 0x30, 0x68, 0x65, 0x0, 0x9, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x73, 0x1, 0x9, [{@multicast2, 0x61a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@empty, 0x9e}, {@local, 0x8000}, {@remote, 0x5}, {@multicast1, 0x9}, {@loopback, 0x3}, {@broadcast, 0xfffffff7}]}, @generic={0x82, 0xf, "817ecdb9c61034c87b05b558f5"}]}}}}}) (rerun: 32)
sendto$packet(r1, &(0x7f0000000800)="cda19b80f6998d27bc09662462cbb028659193f3", 0x14, 0x8020, &(0x7f0000000940)={0x11, 0x10, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) (async, rerun: 64)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64)
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000980)={'tunl0\x00'})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x78}}, 0x20000090) (async)
pwrite64(r0, &(0x7f0000000b40)="e151cf3f6fe69bbf8e80ab77248becc71549b5cc1bf47fb4251b3a9338f0065d28e21dc08e0adbda3e2e6c87884fca38273e205f8ca8a4fe5de061409a60199def9198f982ad26bc14b73b4a", 0x4c, 0x401) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@map=r1, 0x2e, 0x1, 0x4, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = openat$cgroup(r1, &(0x7f0000000d40)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@cgroup=r6, r1, 0x3, 0x2008, 0x0, @value=r1, @void, @void, @void, r5}, 0x20) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000e00)={<r7=>0x0, @in6={{0xa, 0x4e23, 0x28000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, &(0x7f0000000ec0)=0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000f00)={r7, 0x8}, 0x8) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r1)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xb4, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001140)={'vxcan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xe0, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "bbaf08c649e9bcc970078754b0e7c3303700c6d9780f763467c16dbd7ac2e96bd15eb0dfbb2f128743319afb9b5f673879bac4849ff442411614c9914bc40198175e824008f8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x88}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8880}, 0x20008081) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0xb1, 0xc, "02007c23b1ab98656b3f5b1fa852f4dc66ec254a110b9437be39c155fc569cbd6282aae4a2023a875f6194e5992cbd6d36412ecc84df006c329706a53af51427bea3c3e2bfeefa03117133b785c111eb436dd6d9b03d2f015f9447b18559873d85a0412326dd6d5adf422868ae5fd2487ba961acf1be161163f618b54be151744c92a85a699a961fea1548bfe68e847eeebfb27f443756af928b5bc6bab387285beb91b36ccba61d6db1d4bb58"}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ecbc233}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51c6b9ea}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66049c1f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10d59777}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2659f5d1}]}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3b905f28}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8402a2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x5e, 0xc, "bb8a596a4aebed7c0960062e8583eaa34188f402f7aba534c5617f7ba17b1322623123dbc51726cc727ca1348e95e12508bdccc0b57935b721a8bce26e9429628dfbdd63153ea8fdef1d83e4fc3c854c849734b15fc13dedb29e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x21c}}, 0x1) (async, rerun: 32)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001600)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e24, @empty}, 0x3e1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x6, 0x5}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$kcm(0x29, 0x0, 0x0) (async, rerun: 64)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001ac0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001700)={0x374, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x737}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f911469675ef2399ff6011af15ebd8f0e5e92a2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9528bbad162f4e7d8e836b51c974cd6744d7e4e20e1735939d0dbc1ca6fb1b7c1c9ea4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "d511ab1813145c172d7ff7b8b2015eb2bf2261285bc30f1ea9c9a6858763f7e9453b4be08eb993f29a4615dec7f8929e248329f0a818c8030a86e18c001fd70a5429176a575d42e98d5978c2d25d9bea414a8ae41f184058f2699281af8b52e9b84b2435ab6b9d57fdeef4d7f314c97e35201e055624f758c51d8b53945b1ae8cb8dcc2bb0cfdb0f82ac479acf10a2b6fa563a834acec9150ae674a5792d4c7088ee749e45"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "963223a35f77a6c97eccdfc9b18412b9868987c066"}}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "0d93167d6299988d040f98fc1ec0eb8fdfbfd0a846aecd29f798f9baf6d3a0482dac9a1e2798e74d3e653e3259fb3d06c8dbada5e04efb606c126bf5ecae5d538dd6bc4aea4d3b84e89804912a109bdc4e843577eab96fb8ed1ce74b41a43d5948c8336fdbc8964d04f339a7c36a805e8606f5de6e79003241d72051fbbfc38e543915df3be531984ec0c0cec3bbb490095eb6099bb1a5939e4d3b1c9a168ebbf7904b332ade5e71bd3849b95e417e5bc1601e2e7c23d87dcb338b"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4000}, 0x8041)

92.083841ms ago: executing program 2 (id=3187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000180)=""/68, 0x35, 0x44, 0x0, 0x3, 0x10000}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

81.022222ms ago: executing program 1 (id=3188):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="2e000000010003", 0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000380)=0x8001, 0x4)

7.935752ms ago: executing program 1 (id=3189):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x7ff, 0x249, 0x1, 0x6, "31e945", 0x8, [0x4f1f, 0x4, 0x100, 0xa, 0xfd, 0x2218, 0x0, 0x6]}})

0s ago: executing program 1 (id=3190):
r0 = socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="5980a642beaf34ff0f0000121690ad0d2b", 0x11}], 0x1}, 0x2000c001) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async, rerun: 64)
connect$rose(r4, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async, rerun: 64)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000001", @ANYRES16=r8, @ANYBLOB="8304000000000000000001000000340002800c00018008000100050000000c00018008000100070000000c00018008000100030000000c000180080001000400000004000180"], 0x4c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xb}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0xc800) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x444, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x414, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x4, 0x3, 0x7fff, 0x7, 0x7, 0x9, 0x5, 0x0, 0x4, 0x8, 0x7, 0x9, 0xd3, 0xd, 0x101, 0x40, 0x502c, 0xb, 0x4, 0x1000, 0x8000000, 0x9, 0xffffffff, 0x9f5, 0x197, 0x9, 0xc1, 0xfff, 0x7, 0x10000, 0x7, 0x2, 0xfffffffd, 0xb, 0x80, 0xfffffffd, 0xa, 0x9, 0x6, 0x70d, 0xa, 0xe6c, 0x400, 0x7ff, 0x2, 0x1, 0xf0bb, 0x100, 0x1, 0x2, 0x5e, 0x0, 0x9, 0x8cb, 0x6, 0xb9a9, 0x5, 0x2, 0xce49, 0x85db, 0x1ff, 0x101, 0x0, 0xffffffff, 0x7, 0x5, 0x7f, 0x58, 0x2, 0x4, 0x4, 0x5, 0x1, 0xefff, 0xffffff5e, 0x0, 0x7, 0x2, 0x3, 0x21cf0758, 0xa, 0x3, 0x6, 0x0, 0x7, 0x0, 0x7, 0x8, 0x1, 0x6, 0xb, 0x9, 0x4, 0x9, 0x6, 0x400, 0x83a1, 0x6, 0x81, 0xc, 0x3, 0x2481, 0x3, 0xac8, 0xbe, 0xfb2, 0x0, 0x8, 0x6e, 0x4, 0x8, 0x101, 0xfffffffc, 0x1, 0x7fff, 0x5da6, 0xf, 0x5, 0xffffffff, 0x1, 0x80, 0x9, 0x716a, 0x6, 0x7, 0x4, 0x9, 0x3, 0x5, 0x1, 0x1000, 0x2, 0x1, 0x4, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x5, 0x3, 0x7, 0xff, 0x1, 0xfffffffc, 0xf71, 0x1, 0x9, 0x0, 0x9, 0x3, 0x9, 0x2, 0xffff, 0x9, 0x4, 0x4, 0x6, 0x85, 0x5, 0x7, 0x2, 0x3, 0x6, 0x34, 0x1, 0x0, 0x5, 0x399, 0x10, 0xb, 0x8001, 0xd5ab, 0x5, 0xc, 0x9, 0xd, 0x6, 0x8, 0x80000001, 0x0, 0xfffff105, 0x5, 0x5, 0x5, 0x5, 0xffffffff, 0x8, 0x3, 0x400, 0x8001, 0x6, 0x2, 0x5, 0x0, 0x400, 0x7, 0x400, 0x7, 0x2, 0xfffffffe, 0x659, 0x1, 0xfffffff7, 0x7fff, 0x2, 0x94, 0x9, 0x9, 0x3, 0xffffffd9, 0x9, 0x7ff, 0xa30a, 0x5, 0x42, 0xfffffff8, 0x3ff, 0x1, 0x0, 0x9, 0x2, 0x3, 0x4, 0xfffffffc, 0x1, 0x100, 0x4, 0xfffffff9, 0x8, 0x8001, 0x1ff, 0xfffffff8, 0x1, 0xb, 0x8000000, 0xc, 0xe, 0x31, 0xe, 0x69fc, 0x7, 0x7, 0xf2a, 0x4, 0x6bf, 0xc, 0x41, 0x1, 0x374, 0x8, 0x6, 0x5, 0x40]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x8849}, 0x20004800) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600)

kernel console output (not intermixed with test programs):

7.199770][T13731]  ? __nla_parse+0x40/0x60
[  267.199785][T13731]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  267.199807][T13731]  genl_family_rcv_msg_doit+0x215/0x300
[  267.199828][T13731]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  267.199854][T13731]  ? bpf_lsm_capable+0x9/0x20
[  267.199869][T13731]  ? security_capable+0x7e/0x2e0
[  267.199892][T13731]  genl_rcv_msg+0x60e/0x790
[  267.199912][T13731]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.199927][T13731]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.199954][T13731]  netlink_rcv_skb+0x208/0x470
[  267.199965][T13731]  ? __lock_acquire+0xab9/0xd20
[  267.199982][T13731]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.199999][T13731]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.200025][T13731]  ? down_read+0x1ad/0x2e0
[  267.200041][T13731]  genl_rcv+0x28/0x40
[  267.200055][T13731]  netlink_unicast+0x82f/0x9e0
[  267.200078][T13731]  ? __pfx_netlink_unicast+0x10/0x10
[  267.200098][T13731]  ? netlink_sendmsg+0x642/0xb30
[  267.200109][T13731]  ? skb_put+0x11b/0x210
[  267.200125][T13731]  netlink_sendmsg+0x805/0xb30
[  267.200145][T13731]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.200161][T13731]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.200175][T13731]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.200187][T13731]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.200200][T13731]  __sock_sendmsg+0x21c/0x270
[  267.200221][T13731]  ____sys_sendmsg+0x505/0x830
[  267.200240][T13731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.200262][T13731]  ? import_iovec+0x74/0xa0
[  267.200280][T13731]  ___sys_sendmsg+0x21f/0x2a0
[  267.200328][T13731]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.200378][T13731]  ? __fget_files+0x2a/0x420
[  267.200389][T13731]  ? __fget_files+0x3a0/0x420
[  267.200408][T13731]  __x64_sys_sendmsg+0x19b/0x260
[  267.200425][T13731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.200448][T13731]  ? rcu_is_watching+0x15/0xb0
[  267.200465][T13731]  ? do_syscall_64+0xbe/0x3b0
[  267.200482][T13731]  do_syscall_64+0xfa/0x3b0
[  267.200493][T13731]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.200505][T13731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.200516][T13731]  ? exc_page_fault+0x9f/0xf0
[  267.200530][T13731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.200541][T13731] RIP: 0033:0x7f4329d8ec29
[  267.200552][T13731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.200562][T13731] RSP: 002b:00007f432ab98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.200573][T13731] RAX: ffffffffffffffda RBX: 00007f4329fd5fa0 RCX: 00007f4329d8ec29
[  267.200579][T13731] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  267.200583][T13731] RBP: 00007f4329e11e41 R08: 0000000000000000 R09: 0000000000000000
[  267.200588][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.200593][T13731] R13: 00007f4329fd6038 R14: 00007f4329fd5fa0 R15: 00007ffee770c858
[  267.200605][T13731]  </TASK>
[  267.503002][T13739] netlink: 'syz.0.2033': attribute type 5 has an invalid length.
[  267.506576][T13739] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2033'.
[  268.323726][T13761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2037'.
[  268.326878][T13761] bridge_slave_0: entered allmulticast mode
[  268.330482][T13761] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2037'.
[  268.531173][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2039'.
[  268.536436][T13770] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2040'.
[  268.702524][T13789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.711214][T13789] netlink: 'syz.1.2043': attribute type 1 has an invalid length.
[  268.714999][T13789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2043'.
[  268.831694][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'.
[  268.889318][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'.
[  269.012225][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'.
[  269.016038][T13811] nbd: must specify a size in bytes for the device
[  269.788078][T13832] netlink: 'syz.1.2055': attribute type 1 has an invalid length.
[  269.859775][T13834] IPVS: persistence engine module ip_vs_pe_ not found
[  269.995936][T13843] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  269.999626][T13842] IPVS: stopping backup sync thread 13843 ...
[  270.051742][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.181562][T13849] block nbd1: server does not support multiple connections per device.
[  270.184767][T13849] block nbd1: shutting down sockets
[  270.217109][T13852] netlink: 'syz.2.2063': attribute type 4 has an invalid length.
[  270.780825][T13896] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  270.787338][T13896] netlink: 'syz.2.2077': attribute type 3 has an invalid length.
[  270.867107][ T5859] Bluetooth: hci2: command 0x040f tx timeout
[  270.888864][T13910] netlink: 'syz.0.2081': attribute type 33 has an invalid length.
[  271.109617][T13927] openvswitch: netlink: EtherType 0 is less than min 600
[  271.252579][T13935] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  271.255892][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.1.2091 Not tainted syzkaller #0 PREEMPT(full) 
[  271.255909][T13935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.255918][T13935] Call Trace:
[  271.255924][T13935]  <TASK>
[  271.255930][T13935]  dump_stack_lvl+0x189/0x250
[  271.255954][T13935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.255971][T13935]  ? __pfx__printk+0x10/0x10
[  271.255995][T13935]  ? kernfs_path_from_node+0x2f/0x290
[  271.256010][T13935]  ? kernfs_path_from_node+0x250/0x290
[  271.256024][T13935]  ? kernfs_path_from_node+0x2f/0x290
[  271.256043][T13935]  sysfs_warn_dup+0x8e/0xa0
[  271.256058][T13935]  sysfs_do_create_link_sd+0xc0/0x110
[  271.256074][T13935]  device_add_class_symlinks+0x1cf/0x240
[  271.256094][T13935]  device_add+0x475/0xb50
[  271.256113][T13935]  wiphy_register+0x1ba6/0x28d0
[  271.256142][T13935]  ? __pfx_wiphy_register+0x10/0x10
[  271.256155][T13935]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  271.256180][T13935]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  271.256201][T13935]  ieee80211_register_hw+0x3484/0x4100
[  271.256231][T13935]  ? ieee80211_register_hw+0x13f1/0x4100
[  271.256283][T13935]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  271.256305][T13935]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.256332][T13935]  ? __hrtimer_setup+0x187/0x210
[  271.256345][T13935]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  271.256368][T13935]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  271.256412][T13935]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  271.256430][T13935]  ? trace_kmalloc+0x1f/0xd0
[  271.256445][T13935]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  271.256463][T13935]  ? kstrndup+0xbf/0x160
[  271.256485][T13935]  hwsim_new_radio_nl+0xea4/0x1b10
[  271.256507][T13935]  ? __pfx___nla_validate_parse+0x10/0x10
[  271.256533][T13935]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.256562][T13935]  ? __nla_parse+0x40/0x60
[  271.256579][T13935]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  271.256605][T13935]  genl_family_rcv_msg_doit+0x215/0x300
[  271.256628][T13935]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  271.256657][T13935]  ? bpf_lsm_capable+0x9/0x20
[  271.256673][T13935]  ? security_capable+0x7e/0x2e0
[  271.256699][T13935]  genl_rcv_msg+0x60e/0x790
[  271.256721][T13935]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.256738][T13935]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.256768][T13935]  netlink_rcv_skb+0x208/0x470
[  271.256779][T13935]  ? __lock_acquire+0xab9/0xd20
[  271.256798][T13935]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.256816][T13935]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.256843][T13935]  ? down_read+0x1ad/0x2e0
[  271.256862][T13935]  genl_rcv+0x28/0x40
[  271.256877][T13935]  netlink_unicast+0x82f/0x9e0
[  271.256902][T13935]  ? __pfx_netlink_unicast+0x10/0x10
[  271.256941][T13935]  ? netlink_sendmsg+0x642/0xb30
[  271.256955][T13935]  ? skb_put+0x11b/0x210
[  271.256973][T13935]  netlink_sendmsg+0x805/0xb30
[  271.256995][T13935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.257012][T13935]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.257026][T13935]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.257040][T13935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.257055][T13935]  __sock_sendmsg+0x21c/0x270
[  271.257076][T13935]  ____sys_sendmsg+0x505/0x830
[  271.257097][T13935]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.257122][T13935]  ? import_iovec+0x74/0xa0
[  271.257142][T13935]  ___sys_sendmsg+0x21f/0x2a0
[  271.257161][T13935]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.257207][T13935]  ? __fget_files+0x2a/0x420
[  271.257218][T13935]  ? __fget_files+0x3a0/0x420
[  271.257238][T13935]  __x64_sys_sendmsg+0x19b/0x260
[  271.257281][T13935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.257306][T13935]  ? rcu_is_watching+0x15/0xb0
[  271.257323][T13935]  ? do_syscall_64+0xbe/0x3b0
[  271.257342][T13935]  do_syscall_64+0xfa/0x3b0
[  271.257354][T13935]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.257375][T13935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.257388][T13935]  ? exc_page_fault+0x9f/0xf0
[  271.257403][T13935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.257414][T13935] RIP: 0033:0x7f94af78ec29
[  271.257426][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.257438][T13935] RSP: 002b:00007f94b05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.257453][T13935] RAX: ffffffffffffffda RBX: 00007f94af9d5fa0 RCX: 00007f94af78ec29
[  271.257463][T13935] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  271.257470][T13935] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  271.257478][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.257486][T13935] R13: 00007f94af9d6038 R14: 00007f94af9d5fa0 R15: 00007ffd90fbafc8
[  271.257507][T13935]  </TASK>
[  271.947310][T13959] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  271.948774][T13956] IPVS: stopping backup sync thread 13959 ...
[  272.314719][T13967] team0: Mode changed to "loadbalance"
[  272.403052][T13970] __nla_validate_parse: 9 callbacks suppressed
[  272.403066][T13970] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2100'.
[  272.449579][T13970] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2100'.
[  272.577963][T13983] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  272.582452][T13981] IPVS: stopping backup sync thread 13983 ...
[  272.939869][T13998] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2108'.
[  273.069649][T14000] pim6reg1: entered promiscuous mode
[  273.073887][T14000] pim6reg1: entered allmulticast mode
[  273.550471][T14011] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2112'.
[  273.552742][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'.
[  273.983452][T14021] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2114'.
[  274.094871][T14023] IPVS: Scheduler module ip_vs_sip not found
[  274.140236][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'.
[  274.145378][T14028] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2116'.
[  274.239566][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  274.305542][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2121'.
[  274.334701][T14043] netlink: 'syz.0.2121': attribute type 6 has an invalid length.
[  274.464037][   T56] block nbd1: Receive control failed (result -107)
[  274.511641][T14046] nbd1: detected capacity change from 0 to 63
[  274.781558][T14058] block nbd2: server does not support multiple connections per device.
[  274.785054][T14058] block nbd2: shutting down sockets
[  274.900591][T14064] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003
[  275.011190][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.015791][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.017667][T14072] tun7: persist enabled
[  275.019407][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.023180][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.025634][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.027522][T14072] tun7: persist enabled
[  275.029039][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.030939][T14072] tun7: persist enabled
[  275.032990][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.035447][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.037578][T14072] tun7: persist enabled
[  275.039224][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.041216][T14072] tun7: persist enabled
[  275.043304][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.045715][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.047714][T14072] tun7: persist enabled
[  275.049356][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.053556][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.057026][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.058843][T14072] tun7: persist enabled
[  275.060342][T14071] tun7: tun_chr_ioctl cmd 1074025673
[  275.064302][T14072] tun7: tun_chr_ioctl cmd 1074025675
[  275.066242][T14072] tun7: persist enabled
[  275.067883][T14070] tun7: tun_chr_ioctl cmd 1074025675
[  275.069796][T14070] tun7: persist enabled
[  275.177262][T14082] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  275.352951][T14096] tun2: tun_chr_ioctl cmd 1074025675
[  275.355069][T14096] tun2: persist enabled
[  275.356840][T14096] tun2: tun_chr_ioctl cmd 1074025675
[  275.358913][T14096] tun2: persist enabled
[  275.365891][T14096] tun2: tun_chr_ioctl cmd 1074025673
[  275.435258][T14104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  275.438972][T14103] IPVS: stopping backup sync thread 14104 ...
[  275.487801][T14110] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  275.492884][T14110] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  275.609363][T14114] gre0: entered promiscuous mode
[  275.610995][T14114] gre0: entered allmulticast mode
[  275.734578][T14127] netlink: 'syz.1.2150': attribute type 1 has an invalid length.
[  276.169905][T14146] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  276.190738][T14146] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  276.193807][T14146] CPU: 0 UID: 0 PID: 14146 Comm: syz.2.2155 Not tainted syzkaller #0 PREEMPT(full) 
[  276.193818][T14146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.193823][T14146] Call Trace:
[  276.193827][T14146]  <TASK>
[  276.193831][T14146]  dump_stack_lvl+0x189/0x250
[  276.193844][T14146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.193854][T14146]  ? __pfx__printk+0x10/0x10
[  276.193866][T14146]  ? kernfs_path_from_node+0x2f/0x290
[  276.193875][T14146]  ? kernfs_path_from_node+0x250/0x290
[  276.193882][T14146]  ? kernfs_path_from_node+0x2f/0x290
[  276.193892][T14146]  sysfs_warn_dup+0x8e/0xa0
[  276.193918][T14146]  sysfs_do_create_link_sd+0xc0/0x110
[  276.193927][T14146]  device_add_class_symlinks+0x1cf/0x240
[  276.193939][T14146]  device_add+0x475/0xb50
[  276.193950][T14146]  wiphy_register+0x1ba6/0x28d0
[  276.193965][T14146]  ? __pfx_wiphy_register+0x10/0x10
[  276.193972][T14146]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  276.193986][T14146]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  276.193997][T14146]  ieee80211_register_hw+0x3484/0x4100
[  276.194019][T14146]  ? ieee80211_register_hw+0x13f1/0x4100
[  276.194039][T14146]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  276.194057][T14146]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.194081][T14146]  ? __hrtimer_setup+0x187/0x210
[  276.194092][T14146]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  276.194107][T14146]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  276.194150][T14146]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  276.194161][T14146]  ? trace_kmalloc+0x1f/0xd0
[  276.194170][T14146]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  276.194204][T14146]  ? kstrndup+0xbf/0x160
[  276.194222][T14146]  hwsim_new_radio_nl+0xea4/0x1b10
[  276.194235][T14146]  ? __pfx___nla_validate_parse+0x10/0x10
[  276.194249][T14146]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  276.194266][T14146]  ? __nla_parse+0x40/0x60
[  276.194275][T14146]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  276.194290][T14146]  genl_family_rcv_msg_doit+0x215/0x300
[  276.194308][T14146]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  276.194324][T14146]  ? bpf_lsm_capable+0x9/0x20
[  276.194334][T14146]  ? security_capable+0x7e/0x2e0
[  276.194349][T14146]  genl_rcv_msg+0x60e/0x790
[  276.194362][T14146]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.194371][T14146]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  276.194388][T14146]  netlink_rcv_skb+0x208/0x470
[  276.194395][T14146]  ? __lock_acquire+0xab9/0xd20
[  276.194406][T14146]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.194417][T14146]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.194442][T14146]  ? down_read+0x1ad/0x2e0
[  276.194456][T14146]  genl_rcv+0x28/0x40
[  276.194472][T14146]  netlink_unicast+0x82f/0x9e0
[  276.194497][T14146]  ? __pfx_netlink_unicast+0x10/0x10
[  276.194516][T14146]  ? netlink_sendmsg+0x642/0xb30
[  276.194524][T14146]  ? skb_put+0x11b/0x210
[  276.194534][T14146]  netlink_sendmsg+0x805/0xb30
[  276.194548][T14146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.194558][T14146]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.194567][T14146]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.194574][T14146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.194583][T14146]  __sock_sendmsg+0x21c/0x270
[  276.194598][T14146]  ____sys_sendmsg+0x505/0x830
[  276.194616][T14146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.194639][T14146]  ? import_iovec+0x74/0xa0
[  276.194657][T14146]  ___sys_sendmsg+0x21f/0x2a0
[  276.194674][T14146]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.194717][T14146]  ? __fget_files+0x2a/0x420
[  276.194724][T14146]  ? __fget_files+0x3a0/0x420
[  276.194736][T14146]  __x64_sys_sendmsg+0x19b/0x260
[  276.194746][T14146]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.194760][T14146]  ? rcu_is_watching+0x15/0xb0
[  276.194771][T14146]  ? do_syscall_64+0xbe/0x3b0
[  276.194781][T14146]  do_syscall_64+0xfa/0x3b0
[  276.194788][T14146]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.194796][T14146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.194803][T14146]  ? exc_page_fault+0x9f/0xf0
[  276.194811][T14146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.194818][T14146] RIP: 0033:0x7f9bec78ec29
[  276.194843][T14146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.194850][T14146] RSP: 002b:00007f9bed591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.194859][T14146] RAX: ffffffffffffffda RBX: 00007f9bec9d5fa0 RCX: 00007f9bec78ec29
[  276.194864][T14146] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  276.194869][T14146] RBP: 00007f9bec811e41 R08: 0000000000000000 R09: 0000000000000000
[  276.194873][T14146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.194878][T14146] R13: 00007f9bec9d6038 R14: 00007f9bec9d5fa0 R15: 00007fff6f0f7298
[  276.194890][T14146]  </TASK>
[  276.818252][T14185] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  276.821892][T14184] IPVS: stopping backup sync thread 14185 ...
[  277.723049][T14216] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  277.725748][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) 
[  277.725759][T14216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.725763][T14216] Call Trace:
[  277.725767][T14216]  <TASK>
[  277.725771][T14216]  dump_stack_lvl+0x189/0x250
[  277.725786][T14216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.725796][T14216]  ? __pfx__printk+0x10/0x10
[  277.725810][T14216]  ? kernfs_path_from_node+0x2f/0x290
[  277.725819][T14216]  ? kernfs_path_from_node+0x250/0x290
[  277.725828][T14216]  ? kernfs_path_from_node+0x2f/0x290
[  277.725838][T14216]  sysfs_warn_dup+0x8e/0xa0
[  277.725846][T14216]  sysfs_do_create_link_sd+0xc0/0x110
[  277.725856][T14216]  device_add_class_symlinks+0x1cf/0x240
[  277.725868][T14216]  device_add+0x475/0xb50
[  277.725879][T14216]  wiphy_register+0x1ba6/0x28d0
[  277.725894][T14216]  ? __pfx_wiphy_register+0x10/0x10
[  277.725902][T14216]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  277.725915][T14216]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  277.725927][T14216]  ieee80211_register_hw+0x3484/0x4100
[  277.725943][T14216]  ? ieee80211_register_hw+0x13f1/0x4100
[  277.725957][T14216]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  277.725969][T14216]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.725985][T14216]  ? __hrtimer_setup+0x187/0x210
[  277.725992][T14216]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  277.726002][T14216]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  277.726024][T14216]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  277.726035][T14216]  ? trace_kmalloc+0x1f/0xd0
[  277.726044][T14216]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  277.726054][T14216]  ? kstrndup+0xbf/0x160
[  277.726068][T14216]  hwsim_new_radio_nl+0xea4/0x1b10
[  277.726079][T14216]  ? __pfx___nla_validate_parse+0x10/0x10
[  277.726097][T14216]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.726113][T14216]  ? __nla_parse+0x40/0x60
[  277.726122][T14216]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  277.726136][T14216]  genl_family_rcv_msg_doit+0x215/0x300
[  277.726150][T14216]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  277.726196][T14216]  ? bpf_lsm_capable+0x9/0x20
[  277.726212][T14216]  ? security_capable+0x7e/0x2e0
[  277.726228][T14216]  genl_rcv_msg+0x60e/0x790
[  277.726241][T14216]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.726250][T14216]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  277.726268][T14216]  netlink_rcv_skb+0x208/0x470
[  277.726275][T14216]  ? __lock_acquire+0xab9/0xd20
[  277.726287][T14216]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.726298][T14216]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.726314][T14216]  ? down_read+0x1ad/0x2e0
[  277.726323][T14216]  genl_rcv+0x28/0x40
[  277.726333][T14216]  netlink_unicast+0x82f/0x9e0
[  277.726348][T14216]  ? __pfx_netlink_unicast+0x10/0x10
[  277.726360][T14216]  ? netlink_sendmsg+0x642/0xb30
[  277.726367][T14216]  ? skb_put+0x11b/0x210
[  277.726378][T14216]  netlink_sendmsg+0x805/0xb30
[  277.726389][T14216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.726399][T14216]  ? aa_sock_msg_perm+0xf1/0x1d0
[  277.726408][T14216]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.726416][T14216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.726424][T14216]  __sock_sendmsg+0x21c/0x270
[  277.726437][T14216]  ____sys_sendmsg+0x505/0x830
[  277.726449][T14216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.726462][T14216]  ? import_iovec+0x74/0xa0
[  277.726474][T14216]  ___sys_sendmsg+0x21f/0x2a0
[  277.726490][T14216]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.726515][T14216]  ? __fget_files+0x2a/0x420
[  277.726521][T14216]  ? __fget_files+0x3a0/0x420
[  277.726532][T14216]  __x64_sys_sendmsg+0x19b/0x260
[  277.726542][T14216]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.726557][T14216]  ? rcu_is_watching+0x15/0xb0
[  277.726568][T14216]  ? do_syscall_64+0xbe/0x3b0
[  277.726579][T14216]  do_syscall_64+0xfa/0x3b0
[  277.726587][T14216]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.726594][T14216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.726601][T14216]  ? exc_page_fault+0x9f/0xf0
[  277.726610][T14216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.726617][T14216] RIP: 0033:0x7f9bec78ec29
[  277.726624][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.726631][T14216] RSP: 002b:00007f9bed591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.726640][T14216] RAX: ffffffffffffffda RBX: 00007f9bec9d5fa0 RCX: 00007f9bec78ec29
[  277.726646][T14216] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  277.726651][T14216] RBP: 00007f9bec811e41 R08: 0000000000000000 R09: 0000000000000000
[  277.726655][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.726659][T14216] R13: 00007f9bec9d6038 R14: 00007f9bec9d5fa0 R15: 00007fff6f0f7298
[  277.726672][T14216]  </TASK>
[  278.044294][T14225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.047636][T14225] syzkaller0: entered promiscuous mode
[  278.050054][T14225] syzkaller0: entered allmulticast mode
[  278.075405][T14225] tipc: Resetting bearer <eth:syzkaller0>
[  278.829358][T14224] tipc: Resetting bearer <eth:syzkaller0>
[  278.842318][T14224] tipc: Disabling bearer <eth:syzkaller0>
[  279.029768][T14251] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  279.115750][T14255] __nla_validate_parse: 12 callbacks suppressed
[  279.115759][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2187'.
[  279.157762][T14263] netlink: 'syz.1.2189': attribute type 1 has an invalid length.
[  279.160504][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'.
[  280.244784][T14282] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2193'.
[  280.393076][T14292] xfrm0: entered promiscuous mode
[  280.395908][T14292] xfrm0: entered allmulticast mode
[  280.837711][T14311] IPVS: persistence engine module ip_vs_pe_ not found
[  280.998760][T14319] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  281.003570][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.2.2201 Not tainted syzkaller #0 PREEMPT(full) 
[  281.003608][T14319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.003617][T14319] Call Trace:
[  281.003622][T14319]  <TASK>
[  281.003629][T14319]  dump_stack_lvl+0x189/0x250
[  281.003653][T14319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.003670][T14319]  ? __pfx__printk+0x10/0x10
[  281.003694][T14319]  ? kernfs_path_from_node+0x2f/0x290
[  281.003709][T14319]  ? kernfs_path_from_node+0x250/0x290
[  281.003723][T14319]  ? kernfs_path_from_node+0x2f/0x290
[  281.003741][T14319]  sysfs_warn_dup+0x8e/0xa0
[  281.003756][T14319]  sysfs_do_create_link_sd+0xc0/0x110
[  281.003772][T14319]  device_add_class_symlinks+0x1cf/0x240
[  281.003791][T14319]  device_add+0x475/0xb50
[  281.003810][T14319]  wiphy_register+0x1ba6/0x28d0
[  281.003838][T14319]  ? __pfx_wiphy_register+0x10/0x10
[  281.003859][T14319]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  281.003884][T14319]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  281.003905][T14319]  ieee80211_register_hw+0x3484/0x4100
[  281.003936][T14319]  ? ieee80211_register_hw+0x13f1/0x4100
[  281.003963][T14319]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  281.003984][T14319]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  281.004011][T14319]  ? __hrtimer_setup+0x187/0x210
[  281.004023][T14319]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  281.004040][T14319]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  281.004085][T14319]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  281.004104][T14319]  ? trace_kmalloc+0x1f/0xd0
[  281.004161][T14319]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  281.004180][T14319]  ? kstrndup+0xbf/0x160
[  281.004202][T14319]  hwsim_new_radio_nl+0xea4/0x1b10
[  281.004223][T14319]  ? __pfx___nla_validate_parse+0x10/0x10
[  281.004249][T14319]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  281.004278][T14319]  ? __nla_parse+0x40/0x60
[  281.004295][T14319]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  281.004320][T14319]  genl_family_rcv_msg_doit+0x215/0x300
[  281.004345][T14319]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  281.004375][T14319]  ? bpf_lsm_capable+0x9/0x20
[  281.004392][T14319]  ? security_capable+0x7e/0x2e0
[  281.004415][T14319]  genl_rcv_msg+0x60e/0x790
[  281.004437][T14319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  281.004459][T14319]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  281.004490][T14319]  netlink_rcv_skb+0x208/0x470
[  281.004503][T14319]  ? __lock_acquire+0xab9/0xd20
[  281.004523][T14319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  281.004542][T14319]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  281.004571][T14319]  ? down_read+0x1ad/0x2e0
[  281.004589][T14319]  genl_rcv+0x28/0x40
[  281.004604][T14319]  netlink_unicast+0x82f/0x9e0
[  281.004632][T14319]  ? __pfx_netlink_unicast+0x10/0x10
[  281.004653][T14319]  ? netlink_sendmsg+0x642/0xb30
[  281.004665][T14319]  ? skb_put+0x11b/0x210
[  281.004683][T14319]  netlink_sendmsg+0x805/0xb30
[  281.004705][T14319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.004722][T14319]  ? aa_sock_msg_perm+0xf1/0x1d0
[  281.004737][T14319]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  281.004751][T14319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.004766][T14319]  __sock_sendmsg+0x21c/0x270
[  281.004788][T14319]  ____sys_sendmsg+0x505/0x830
[  281.004810][T14319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.004833][T14319]  ? import_iovec+0x74/0xa0
[  281.004853][T14319]  ___sys_sendmsg+0x21f/0x2a0
[  281.004872][T14319]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.004918][T14319]  ? __fget_files+0x2a/0x420
[  281.004930][T14319]  ? __fget_files+0x3a0/0x420
[  281.004950][T14319]  __x64_sys_sendmsg+0x19b/0x260
[  281.004969][T14319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  281.004994][T14319]  ? rcu_is_watching+0x15/0xb0
[  281.005012][T14319]  ? do_syscall_64+0xbe/0x3b0
[  281.005030][T14319]  do_syscall_64+0xfa/0x3b0
[  281.005042][T14319]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.005055][T14319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.005068][T14319]  ? exc_page_fault+0x9f/0xf0
[  281.005083][T14319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.005095][T14319] RIP: 0033:0x7f9bec78ec29
[  281.005108][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.005119][T14319] RSP: 002b:00007f9bed570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.005162][T14319] RAX: ffffffffffffffda RBX: 00007f9bec9d6090 RCX: 00007f9bec78ec29
[  281.005172][T14319] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  281.005180][T14319] RBP: 00007f9bec811e41 R08: 0000000000000000 R09: 0000000000000000
[  281.005187][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.005195][T14319] R13: 00007f9bec9d6128 R14: 00007f9bec9d6090 R15: 00007fff6f0f7298
[  281.005217][T14319]  </TASK>
[  281.214515][T14322] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2203'.
[  281.383427][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'.
[  281.809640][T14348] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  281.813547][T14347] IPVS: stopping backup sync thread 14348 ...
[  282.452443][T14365] block nbd2: server does not support multiple connections per device.
[  282.455640][T14365] block nbd2: shutting down sockets
[  282.570297][T14372] netlink: 'syz.1.2220': attribute type 3 has an invalid length.
[  282.574791][T14372] netlink: 'syz.1.2220': attribute type 1 has an invalid length.
[  282.577863][T14372] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2220'.
[  282.648884][T14378] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2223'.
[  282.799642][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'.
[  283.038160][T14396] netlink: 'syz.1.2228': attribute type 1 has an invalid length.
[  283.058009][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'.
[  283.138185][T14412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.297928][T14422] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  283.377893][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'.
[  283.385203][T14422] batadv_slave_0: entered promiscuous mode
[  284.149875][T14451] __nla_validate_parse: 1 callbacks suppressed
[  284.149890][T14451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2240'.
[  285.390402][T14497] netlink: 'syz.1.2252': attribute type 5 has an invalid length.
[  285.399130][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'.
[  285.442686][T14499] IPVS: Scheduler module ip_vs_sip not found
[  302.061533][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.908087][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'.
[  306.911930][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'.
[  306.924056][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2255'.
[  306.927938][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2255'.
[  307.078320][T14536] IPVS: stopping backup sync thread 14538 ...
[  307.078415][T14538] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  307.233060][T14552] tun3: tun_chr_ioctl cmd 1074025675
[  307.235630][T14552] tun3: persist enabled
[  307.237684][T14552] tun3: tun_chr_ioctl cmd 1074025675
[  307.239958][T14552] tun3: persist enabled
[  307.289432][T14556] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  307.294198][T14555] IPVS: stopping backup sync thread 14556 ...
[  307.861774][T14573] block nbd2: server does not support multiple connections per device.
[  307.865549][T14573] block nbd2: shutting down sockets
[  308.375661][T14587] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  308.424584][T14591] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  308.449119][T14595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'.
[  308.470093][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'.
[  308.474751][T14598] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2281'.
[  308.490929][T14595] bond4: entered promiscuous mode
[  308.493743][T14595] bond4: entered allmulticast mode
[  308.496317][T14595] 8021q: adding VLAN 0 to HW filter on device bond4
[  308.917399][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'.
[  309.040400][T14619] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2286'.
[  309.342799][T14621] : renamed from macvlan0 (while UP)
[  309.347225][T14622] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  309.350122][T14623] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  309.457697][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'.
[  316.787783][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  329.924359][T14669] __nla_validate_parse: 1 callbacks suppressed
[  329.924373][T14669] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2301'.
[  330.128679][T14682] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  330.161157][T14687] netlink: 'syz.2.2307': attribute type 11 has an invalid length.
[  330.166043][T14687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2307'.
[  330.323096][   T13] IPVS: stopping backup sync thread 14682 ...
[  330.404213][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'.
[  330.647851][T14710] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  330.655149][T14709] IPVS: stopping backup sync thread 14710 ...
[  330.663117][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'.
[  330.667049][T14706] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  330.673020][T14706] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  330.676861][T14706] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  330.683417][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'.
[  331.042176][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2316'.
[  331.614109][T14720] block nbd2: server does not support multiple connections per device.
[  331.617975][T14720] block nbd2: shutting down sockets
[  331.823572][T14744] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2324'.
[  331.877123][T14744] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2324'.
[  332.415102][T14762] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2328'.
[  332.695976][T14774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2332'.
[  332.750066][T14776] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  332.753997][T14776] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  332.803402][T14779] netlink: 'syz.1.2334': attribute type 21 has an invalid length.
[  332.807082][T14779] netlink: 'syz.1.2334': attribute type 30 has an invalid length.
[  332.886589][T14784] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  332.886661][T14783] IPVS: stopping backup sync thread 14784 ...
[  332.925568][T14786] netlink: 'syz.1.2336': attribute type 11 has an invalid length.
[  333.086297][T14803] nbd: illegal input index -1
[  333.614964][T14825] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  333.617937][T14825] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  334.104107][T14833] xt_HMARK: spi-set and port-set can't be combined
[  334.967153][T14890] __nla_validate_parse: 6 callbacks suppressed
[  334.967162][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'.
[  335.087943][T14908] IPVS: Scheduler module ip_vs_sip not found
[  335.344990][T14929] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  335.351109][T14928] IPVS: stopping backup sync thread 14929 ...
[  335.569685][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'.
[  335.880608][T14953] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  336.390835][T14981] syzkaller0: entered promiscuous mode
[  336.403530][T14981] syzkaller0: entered allmulticast mode
[  336.768550][T14997] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2378'.
[  337.002053][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'.
[  337.940875][T15010] sctp: [Deprecated]: syz.2.2380 (pid 15010) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.940875][T15010] Use struct sctp_sack_info instead
[  337.955423][T15012] IPVS: persistence engine module ip_vs_pe_ not found
[  337.956312][T15016] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.965134][T15015] IPVS: stopping backup sync thread 15016 ...
[  338.037115][T15019] netlink: 'syz.2.2380': attribute type 4 has an invalid length.
[  338.179986][T15027] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  338.288847][ T5904] syz1: Port: 1 Link DOWN
[  338.308546][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.318527][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.348404][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.353690][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.368481][T15029] syzkaller1: entered allmulticast mode
[  338.380513][T15029] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  338.472992][T15031] delete_channel: no stack
[  338.509508][T15035] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2387'.
[  338.526261][T15037] syzkaller0: entered promiscuous mode
[  338.528679][T15037] syzkaller0: entered allmulticast mode
[  338.548770][T15039] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  338.554199][T15039] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  338.562847][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'.
[  338.594760][T15040] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2387'.
[  338.678275][T15042] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2390'.
[  338.682575][T15042] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  338.685318][T15042] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  338.768931][T15050] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  338.775309][T15047] IPVS: stopping backup sync thread 15050 ...
[  338.802449][T15055] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2394'.
[  338.859047][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'.
[  338.918578][T15063] syzkaller1: tun_chr_ioctl cmd 2147767520
[  339.058815][T15066] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  339.139715][T15078] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 512, id = 0
[  339.200329][T15080] bond3: entered promiscuous mode
[  339.280087][T15087] team0: Device ipip0 is up. Set it down before adding it as a team port
[  339.478978][T15106] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  340.436648][T15160] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  340.440222][T15159] IPVS: stopping backup sync thread 15160 ...
[  340.521545][T15164] block nbd2: server does not support multiple connections per device.
[  340.524771][T15164] block nbd2: shutting down sockets
[  340.622347][T15156] block nbd2: server does not support multiple connections per device.
[  340.630435][T15156] block nbd2: shutting down sockets
[  340.789573][T15193] openvswitch: netlink: Missing key (keys=40, expected=80)
[  340.866881][T15207] __nla_validate_parse: 6 callbacks suppressed
[  340.866891][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2434'.
[  340.874895][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2434'.
[  341.065470][T15213] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:24096
[  341.757755][T15246] netlink: 'syz.2.2444': attribute type 1 has an invalid length.
[  341.767898][T15246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2444'.
[  341.822843][T15251] IPVS: stopping backup sync thread 15078 ...
[  341.900443][T15260] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  342.020229][T15271] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2452'.
[  342.026904][T15271] ..0: renamed from hsr0 (while UP)
[  342.034452][T15271] ..0: entered allmulticast mode
[  342.036799][T15271] hsr_slave_0: entered allmulticast mode
[  342.039800][T15271] hsr_slave_1: entered allmulticast mode
[  342.045254][T15271] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  342.095662][T15273] netlink: 'syz.0.2453': attribute type 4 has an invalid length.
[  342.249862][T15282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.250597][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'.
[  342.320833][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'.
[  342.561120][T15301] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  342.565479][T15301] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  342.927002][T15309] block nbd2: server does not support multiple connections per device.
[  342.931759][T15309] block nbd2: shutting down sockets
[  342.950549][T15317] syzkaller0: entered promiscuous mode
[  342.954155][T15317] syzkaller0: entered allmulticast mode
[  343.273575][T15338] netlink: 'syz.0.2467': attribute type 10 has an invalid length.
[  343.970911][T15338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.978950][T15338] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  344.137573][T15355] IPVS: length: 18 != 8
[  344.139085][T15356] IPVS: length: 18 != 8
[  344.177247][T15353] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  344.180620][T15353] CPU: 1 UID: 0 PID: 15353 Comm: syz.1.2473 Not tainted syzkaller #0 PREEMPT(full) 
[  344.180636][T15353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  344.180645][T15353] Call Trace:
[  344.180651][T15353]  <TASK>
[  344.180657][T15353]  dump_stack_lvl+0x189/0x250
[  344.180680][T15353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.180695][T15353]  ? __pfx__printk+0x10/0x10
[  344.180726][T15353]  ? kernfs_path_from_node+0x2f/0x290
[  344.180741][T15353]  ? kernfs_path_from_node+0x250/0x290
[  344.180755][T15353]  ? kernfs_path_from_node+0x2f/0x290
[  344.180772][T15353]  sysfs_warn_dup+0x8e/0xa0
[  344.180786][T15353]  sysfs_do_create_link_sd+0xc0/0x110
[  344.180803][T15353]  device_add_class_symlinks+0x1cf/0x240
[  344.180823][T15353]  device_add+0x475/0xb50
[  344.180841][T15353]  wiphy_register+0x1ba6/0x28d0
[  344.180869][T15353]  ? __pfx_wiphy_register+0x10/0x10
[  344.180882][T15353]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  344.180906][T15353]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  344.180927][T15353]  ieee80211_register_hw+0x3484/0x4100
[  344.180957][T15353]  ? ieee80211_register_hw+0x13f1/0x4100
[  344.180983][T15353]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  344.181005][T15353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  344.181030][T15353]  ? __hrtimer_setup+0x187/0x210
[  344.181043][T15353]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  344.181059][T15353]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  344.181101][T15353]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  344.181119][T15353]  ? trace_kmalloc+0x1f/0xd0
[  344.181135][T15353]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  344.181152][T15353]  ? kstrndup+0xbf/0x160
[  344.181174][T15353]  hwsim_new_radio_nl+0xea4/0x1b10
[  344.181195][T15353]  ? __pfx___nla_validate_parse+0x10/0x10
[  344.181221][T15353]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  344.181250][T15353]  ? __nla_parse+0x40/0x60
[  344.181267][T15353]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  344.181315][T15353]  genl_family_rcv_msg_doit+0x215/0x300
[  344.181341][T15353]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  344.181396][T15353]  ? bpf_lsm_capable+0x9/0x20
[  344.181415][T15353]  ? security_capable+0x7e/0x2e0
[  344.181440][T15353]  genl_rcv_msg+0x60e/0x790
[  344.181463][T15353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  344.181478][T15353]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  344.181509][T15353]  netlink_rcv_skb+0x208/0x470
[  344.181521][T15353]  ? __lock_acquire+0xab9/0xd20
[  344.181540][T15353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  344.181558][T15353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  344.181588][T15353]  ? down_read+0x1ad/0x2e0
[  344.181606][T15353]  genl_rcv+0x28/0x40
[  344.181621][T15353]  netlink_unicast+0x82f/0x9e0
[  344.181648][T15353]  ? __pfx_netlink_unicast+0x10/0x10
[  344.181669][T15353]  ? netlink_sendmsg+0x642/0xb30
[  344.181682][T15353]  ? skb_put+0x11b/0x210
[  344.181699][T15353]  netlink_sendmsg+0x805/0xb30
[  344.181730][T15353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.181747][T15353]  ? aa_sock_msg_perm+0xf1/0x1d0
[  344.181763][T15353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  344.181777][T15353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.181793][T15353]  __sock_sendmsg+0x21c/0x270
[  344.181817][T15353]  ____sys_sendmsg+0x505/0x830
[  344.181837][T15353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  344.181862][T15353]  ? import_iovec+0x74/0xa0
[  344.181882][T15353]  ___sys_sendmsg+0x21f/0x2a0
[  344.181901][T15353]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.181947][T15353]  ? __fget_files+0x2a/0x420
[  344.181958][T15353]  ? __fget_files+0x3a0/0x420
[  344.181979][T15353]  __x64_sys_sendmsg+0x19b/0x260
[  344.181997][T15353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  344.182022][T15353]  ? rcu_is_watching+0x15/0xb0
[  344.182041][T15353]  ? do_syscall_64+0xbe/0x3b0
[  344.182060][T15353]  do_syscall_64+0xfa/0x3b0
[  344.182073][T15353]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.182086][T15353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.182099][T15353]  ? exc_page_fault+0x9f/0xf0
[  344.182114][T15353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.182127][T15353] RIP: 0033:0x7f94af78ec29
[  344.182140][T15353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.182150][T15353] RSP: 002b:00007f94b05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.182165][T15353] RAX: ffffffffffffffda RBX: 00007f94af9d5fa0 RCX: 00007f94af78ec29
[  344.182174][T15353] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  344.182184][T15353] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  344.182192][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.182200][T15353] R13: 00007f94af9d6038 R14: 00007f94af9d5fa0 R15: 00007ffd90fbafc8
[  344.182223][T15353]  </TASK>
[  344.678864][T15392] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  344.689138][T15391] IPVS: stopping backup sync thread 15392 ...
[  344.893566][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'.
[  344.923834][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2482'.
[  345.073306][T15416] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2485'.
[  345.341004][T15423] IPVS: set_ctl: invalid protocol: 34213 172.20.20.187:20003
[  345.412741][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'.
[  345.527670][T15433] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  345.727036][T15444] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  345.730627][T15442] IPVS: stopping backup sync thread 15444 ...
[  345.878112][T15453] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  345.884377][T15453] CPU: 1 UID: 0 PID: 15453 Comm: syz.1.2494 Not tainted syzkaller #0 PREEMPT(full) 
[  345.884414][T15453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.884422][T15453] Call Trace:
[  345.884428][T15453]  <TASK>
[  345.884434][T15453]  dump_stack_lvl+0x189/0x250
[  345.884475][T15453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.884492][T15453]  ? __pfx__printk+0x10/0x10
[  345.884513][T15453]  ? kernfs_path_from_node+0x2f/0x290
[  345.884528][T15453]  ? kernfs_path_from_node+0x250/0x290
[  345.884541][T15453]  ? kernfs_path_from_node+0x2f/0x290
[  345.884558][T15453]  sysfs_warn_dup+0x8e/0xa0
[  345.884572][T15453]  sysfs_do_create_link_sd+0xc0/0x110
[  345.884588][T15453]  device_add_class_symlinks+0x1cf/0x240
[  345.884608][T15453]  device_add+0x475/0xb50
[  345.884626][T15453]  wiphy_register+0x1ba6/0x28d0
[  345.884653][T15453]  ? __pfx_wiphy_register+0x10/0x10
[  345.884664][T15453]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  345.884688][T15453]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  345.884707][T15453]  ieee80211_register_hw+0x3484/0x4100
[  345.884725][T15453]  ? ieee80211_register_hw+0x13f1/0x4100
[  345.884740][T15453]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  345.884751][T15453]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  345.884766][T15453]  ? __hrtimer_setup+0x187/0x210
[  345.884773][T15453]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  345.884782][T15453]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  345.884806][T15453]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  345.884816][T15453]  ? trace_kmalloc+0x1f/0xd0
[  345.884825][T15453]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  345.884835][T15453]  ? kstrndup+0xbf/0x160
[  345.884847][T15453]  hwsim_new_radio_nl+0xea4/0x1b10
[  345.884859][T15453]  ? __pfx___nla_validate_parse+0x10/0x10
[  345.884874][T15453]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  345.884890][T15453]  ? __nla_parse+0x40/0x60
[  345.884900][T15453]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  345.884914][T15453]  genl_family_rcv_msg_doit+0x215/0x300
[  345.884927][T15453]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  345.884943][T15453]  ? bpf_lsm_capable+0x9/0x20
[  345.884953][T15453]  ? security_capable+0x7e/0x2e0
[  345.884968][T15453]  genl_rcv_msg+0x60e/0x790
[  345.884981][T15453]  ? __pfx_genl_rcv_msg+0x10/0x10
[  345.884991][T15453]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  345.885008][T15453]  netlink_rcv_skb+0x208/0x470
[  345.885015][T15453]  ? __lock_acquire+0xab9/0xd20
[  345.885026][T15453]  ? __pfx_genl_rcv_msg+0x10/0x10
[  345.885037][T15453]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  345.885053][T15453]  ? down_read+0x1ad/0x2e0
[  345.885062][T15453]  genl_rcv+0x28/0x40
[  345.885071][T15453]  netlink_unicast+0x82f/0x9e0
[  345.885086][T15453]  ? __pfx_netlink_unicast+0x10/0x10
[  345.885099][T15453]  ? netlink_sendmsg+0x642/0xb30
[  345.885105][T15453]  ? skb_put+0x11b/0x210
[  345.885116][T15453]  netlink_sendmsg+0x805/0xb30
[  345.885127][T15453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.885137][T15453]  ? aa_sock_msg_perm+0xf1/0x1d0
[  345.885146][T15453]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  345.885154][T15453]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.885162][T15453]  __sock_sendmsg+0x21c/0x270
[  345.885175][T15453]  ____sys_sendmsg+0x505/0x830
[  345.885187][T15453]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.885200][T15453]  ? import_iovec+0x74/0xa0
[  345.885212][T15453]  ___sys_sendmsg+0x21f/0x2a0
[  345.885222][T15453]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.885247][T15453]  ? __fget_files+0x2a/0x420
[  345.885254][T15453]  ? __fget_files+0x3a0/0x420
[  345.885265][T15453]  __x64_sys_sendmsg+0x19b/0x260
[  345.885276][T15453]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  345.885289][T15453]  ? rcu_is_watching+0x15/0xb0
[  345.885299][T15453]  ? do_syscall_64+0xbe/0x3b0
[  345.885309][T15453]  do_syscall_64+0xfa/0x3b0
[  345.885318][T15453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.885325][T15453]  ? asm_sysvec_call_function_single+0x1a/0x20
[  345.885362][T15453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.885370][T15453] RIP: 0033:0x7f94af78ec29
[  345.885378][T15453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.885384][T15453] RSP: 002b:00007f94b05d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.885394][T15453] RAX: ffffffffffffffda RBX: 00007f94af9d6090 RCX: 00007f94af78ec29
[  345.885406][T15453] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  345.885412][T15453] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  345.885416][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.885421][T15453] R13: 00007f94af9d6128 R14: 00007f94af9d6090 R15: 00007ffd90fbafc8
[  345.885434][T15453]  </TASK>
[  346.136470][T15460] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  346.140547][T15459] IPVS: stopping backup sync thread 15460 ...
[  346.149322][T15459] __nla_validate_parse: 2 callbacks suppressed
[  346.149364][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2496'.
[  346.187548][T15462] netlink: 'syz.0.2497': attribute type 4 has an invalid length.
[  346.190697][T15462] netlink: 'syz.0.2497': attribute type 9 has an invalid length.
[  346.661914][T15481] rdma_op ffff8880272ba1f0 conn xmit_rdma 0000000000000000
[  346.723251][T15486] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  346.723363][T15485] IPVS: stopping backup sync thread 15486 ...
[  346.774807][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'.
[  347.143088][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2512'.
[  347.644560][T15548] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 4, id = 0
[  347.701856][T15550] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2519'.
[  347.710213][T15550] tun4: tun_chr_ioctl cmd 1074025675
[  347.712414][T15550] tun4: persist disabled
[  347.714057][T15550] tun4: tun_chr_ioctl cmd 1074025675
[  347.715959][T15550] tun4: persist enabled
[  347.922478][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'.
[  347.936160][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'.
[  348.038637][T15563] syz.1.2522 (15563) used obsolete PPPIOCDETACH ioctl
[  348.169781][T15568] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  348.172080][T15567] IPVS: stopping backup sync thread 15568 ...
[  348.345458][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2528'.
[  348.410510][T15579] openvswitch: netlink: IPv4 tun info is not correct
[  348.529013][T15588] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  348.534959][T15587] IPVS: stopping backup sync thread 15588 ...
[  348.644528][T15598] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  348.647872][T15598] CPU: 1 UID: 0 PID: 15598 Comm: syz.0.2532 Not tainted syzkaller #0 PREEMPT(full) 
[  348.647886][T15598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.647895][T15598] Call Trace:
[  348.647900][T15598]  <TASK>
[  348.647905][T15598]  dump_stack_lvl+0x189/0x250
[  348.647930][T15598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.647946][T15598]  ? __pfx__printk+0x10/0x10
[  348.647969][T15598]  ? kernfs_path_from_node+0x2f/0x290
[  348.647984][T15598]  ? kernfs_path_from_node+0x250/0x290
[  348.647997][T15598]  ? kernfs_path_from_node+0x2f/0x290
[  348.648013][T15598]  sysfs_warn_dup+0x8e/0xa0
[  348.648026][T15598]  sysfs_do_create_link_sd+0xc0/0x110
[  348.648042][T15598]  device_add_class_symlinks+0x1cf/0x240
[  348.648062][T15598]  device_add+0x475/0xb50
[  348.648080][T15598]  wiphy_register+0x1ba6/0x28d0
[  348.648108][T15598]  ? __pfx_wiphy_register+0x10/0x10
[  348.648122][T15598]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  348.648143][T15598]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  348.648163][T15598]  ieee80211_register_hw+0x3484/0x4100
[  348.648193][T15598]  ? ieee80211_register_hw+0x13f1/0x4100
[  348.648217][T15598]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  348.648238][T15598]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.648262][T15598]  ? __hrtimer_setup+0x187/0x210
[  348.648274][T15598]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  348.648290][T15598]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  348.648358][T15598]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  348.648377][T15598]  ? trace_kmalloc+0x1f/0xd0
[  348.648392][T15598]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  348.648409][T15598]  ? kstrndup+0xbf/0x160
[  348.648428][T15598]  hwsim_new_radio_nl+0xea4/0x1b10
[  348.648449][T15598]  ? __pfx___nla_validate_parse+0x10/0x10
[  348.648474][T15598]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  348.648504][T15598]  ? __nla_parse+0x40/0x60
[  348.648521][T15598]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  348.648547][T15598]  genl_family_rcv_msg_doit+0x215/0x300
[  348.648570][T15598]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  348.648599][T15598]  ? bpf_lsm_capable+0x9/0x20
[  348.648615][T15598]  ? security_capable+0x7e/0x2e0
[  348.648641][T15598]  genl_rcv_msg+0x60e/0x790
[  348.648670][T15598]  ? __pfx_genl_rcv_msg+0x10/0x10
[  348.648687][T15598]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  348.648716][T15598]  netlink_rcv_skb+0x208/0x470
[  348.648728][T15598]  ? __lock_acquire+0xab9/0xd20
[  348.648747][T15598]  ? __pfx_genl_rcv_msg+0x10/0x10
[  348.648787][T15598]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  348.648817][T15598]  ? down_read+0x1ad/0x2e0
[  348.648834][T15598]  genl_rcv+0x28/0x40
[  348.648850][T15598]  netlink_unicast+0x82f/0x9e0
[  348.648878][T15598]  ? __pfx_netlink_unicast+0x10/0x10
[  348.648900][T15598]  ? netlink_sendmsg+0x642/0xb30
[  348.648913][T15598]  ? skb_put+0x11b/0x210
[  348.648931][T15598]  netlink_sendmsg+0x805/0xb30
[  348.648954][T15598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.648970][T15598]  ? aa_sock_msg_perm+0xf1/0x1d0
[  348.648985][T15598]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  348.648998][T15598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.649013][T15598]  __sock_sendmsg+0x21c/0x270
[  348.649033][T15598]  ____sys_sendmsg+0x505/0x830
[  348.649054][T15598]  ? __pfx_____sys_sendmsg+0x10/0x10
[  348.649077][T15598]  ? import_iovec+0x74/0xa0
[  348.649096][T15598]  ___sys_sendmsg+0x21f/0x2a0
[  348.649113][T15598]  ? __pfx____sys_sendmsg+0x10/0x10
[  348.649156][T15598]  ? __fget_files+0x2a/0x420
[  348.649167][T15598]  ? __fget_files+0x3a0/0x420
[  348.649187][T15598]  __x64_sys_sendmsg+0x19b/0x260
[  348.649205][T15598]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  348.649228][T15598]  ? rcu_is_watching+0x15/0xb0
[  348.649246][T15598]  ? do_syscall_64+0xbe/0x3b0
[  348.649263][T15598]  do_syscall_64+0xfa/0x3b0
[  348.649277][T15598]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.649288][T15598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.649325][T15598]  ? exc_page_fault+0x9f/0xf0
[  348.649341][T15598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.649353][T15598] RIP: 0033:0x7f4329d8ec29
[  348.649366][T15598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.649376][T15598] RSP: 002b:00007f432ab77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  348.649390][T15598] RAX: ffffffffffffffda RBX: 00007f4329fd6090 RCX: 00007f4329d8ec29
[  348.649400][T15598] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  348.649408][T15598] RBP: 00007f4329e11e41 R08: 0000000000000000 R09: 0000000000000000
[  348.649415][T15598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.649424][T15598] R13: 00007f4329fd6128 R14: 00007f4329fd6090 R15: 00007ffee770c858
[  348.649445][T15598]  </TASK>
[  348.997745][T15614] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2537'.
[  349.518058][T15632] netlink: 'syz.2.2540': attribute type 4 has an invalid length.
[  349.810524][T15645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2545'.
[  349.818433][T15647] tunl0: Caught tx_queue_len zero misconfig
[  350.335307][T15665] syzkaller1: entered promiscuous mode
[  350.341798][T15665] syzkaller1: entered allmulticast mode
[  350.447676][T15676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2553'.
[  350.450660][T15676] nbd: illegal input index 65508
[  350.803269][T15708] IPVS: stopping backup sync thread 15548 ...
[  350.915810][T15711] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  350.918479][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.2.2562 Not tainted syzkaller #0 PREEMPT(full) 
[  350.918494][T15711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.918502][T15711] Call Trace:
[  350.918507][T15711]  <TASK>
[  350.918512][T15711]  dump_stack_lvl+0x189/0x250
[  350.918531][T15711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.918541][T15711]  ? __pfx__printk+0x10/0x10
[  350.918554][T15711]  ? kernfs_path_from_node+0x2f/0x290
[  350.918564][T15711]  ? kernfs_path_from_node+0x250/0x290
[  350.918573][T15711]  ? kernfs_path_from_node+0x2f/0x290
[  350.918583][T15711]  sysfs_warn_dup+0x8e/0xa0
[  350.918597][T15711]  sysfs_do_create_link_sd+0xc0/0x110
[  350.918606][T15711]  device_add_class_symlinks+0x1cf/0x240
[  350.918619][T15711]  device_add+0x475/0xb50
[  350.918636][T15711]  wiphy_register+0x1ba6/0x28d0
[  350.918662][T15711]  ? __pfx_wiphy_register+0x10/0x10
[  350.918674][T15711]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  350.918695][T15711]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  350.918711][T15711]  ieee80211_register_hw+0x3484/0x4100
[  350.918729][T15711]  ? ieee80211_register_hw+0x13f1/0x4100
[  350.918744][T15711]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  350.918757][T15711]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  350.918781][T15711]  ? __hrtimer_setup+0x187/0x210
[  350.918792][T15711]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  350.918806][T15711]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  350.918841][T15711]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  350.918852][T15711]  ? trace_kmalloc+0x1f/0xd0
[  350.918861][T15711]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  350.918873][T15711]  ? kstrndup+0xbf/0x160
[  350.918885][T15711]  hwsim_new_radio_nl+0xea4/0x1b10
[  350.918898][T15711]  ? __pfx___nla_validate_parse+0x10/0x10
[  350.918912][T15711]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.918928][T15711]  ? __nla_parse+0x40/0x60
[  350.918937][T15711]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  350.918952][T15711]  genl_family_rcv_msg_doit+0x215/0x300
[  350.918966][T15711]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  350.918981][T15711]  ? bpf_lsm_capable+0x9/0x20
[  350.918991][T15711]  ? security_capable+0x7e/0x2e0
[  350.919005][T15711]  genl_rcv_msg+0x60e/0x790
[  350.919018][T15711]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.919028][T15711]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.919045][T15711]  netlink_rcv_skb+0x208/0x470
[  350.919052][T15711]  ? __lock_acquire+0xab9/0xd20
[  350.919064][T15711]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.919074][T15711]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.919090][T15711]  ? down_read+0x1ad/0x2e0
[  350.919099][T15711]  genl_rcv+0x28/0x40
[  350.919108][T15711]  netlink_unicast+0x82f/0x9e0
[  350.919123][T15711]  ? __pfx_netlink_unicast+0x10/0x10
[  350.919136][T15711]  ? netlink_sendmsg+0x642/0xb30
[  350.919142][T15711]  ? skb_put+0x11b/0x210
[  350.919153][T15711]  netlink_sendmsg+0x805/0xb30
[  350.919165][T15711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.919174][T15711]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.919183][T15711]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.919191][T15711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.919199][T15711]  __sock_sendmsg+0x21c/0x270
[  350.919212][T15711]  ____sys_sendmsg+0x505/0x830
[  350.919224][T15711]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.919237][T15711]  ? import_iovec+0x74/0xa0
[  350.919249][T15711]  ___sys_sendmsg+0x21f/0x2a0
[  350.919259][T15711]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.919316][T15711]  ? __fget_files+0x2a/0x420
[  350.919325][T15711]  ? __fget_files+0x3a0/0x420
[  350.919338][T15711]  __x64_sys_sendmsg+0x19b/0x260
[  350.919350][T15711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.919364][T15711]  ? rcu_is_watching+0x15/0xb0
[  350.919375][T15711]  ? do_syscall_64+0xbe/0x3b0
[  350.919385][T15711]  do_syscall_64+0xfa/0x3b0
[  350.919393][T15711]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.919401][T15711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.919409][T15711]  ? exc_page_fault+0x9f/0xf0
[  350.919417][T15711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.919424][T15711] RIP: 0033:0x7f9bec78ec29
[  350.919432][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.919438][T15711] RSP: 002b:00007f9bed570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.919447][T15711] RAX: ffffffffffffffda RBX: 00007f9bec9d6090 RCX: 00007f9bec78ec29
[  350.919452][T15711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  350.919457][T15711] RBP: 00007f9bec811e41 R08: 0000000000000000 R09: 0000000000000000
[  350.919462][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.919466][T15711] R13: 00007f9bec9d6128 R14: 00007f9bec9d6090 R15: 00007fff6f0f7298
[  350.919479][T15711]  </TASK>
[  351.235471][T15713] netlink: 'syz.1.2563': attribute type 1 has an invalid length.
[  351.238758][T15713] netlink: 'syz.1.2563': attribute type 11 has an invalid length.
[  351.245584][T15713] __nla_validate_parse: 1 callbacks suppressed
[  351.245592][T15713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2563'.
[  351.620197][T15747] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.2571'.
[  351.625906][T15747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2571'.
[  351.770944][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2574'.
[  352.069209][T15769] batman_adv: batadv0: Interface deactivated: macsec0
[  352.081127][ T5716] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.091619][ T5716] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.101425][ T5716] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.104893][ T5716] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.125652][ T5716] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.128605][ T5716] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.135730][ T5716] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.138765][ T5716] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.144198][T15781] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2582'.
[  352.190497][T15781] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  352.193913][T15781] netlink: 'syz.2.2582': attribute type 2 has an invalid length.
[  352.204154][T15779] netlink: 'syz.0.2581': attribute type 4 has an invalid length.
[  352.282893][T15785] pim6reg1: entered promiscuous mode
[  352.284684][T15785] pim6reg1: entered allmulticast mode
[  352.372323][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2587'.
[  352.464298][T15807] veth0_to_bridge: entered promiscuous mode
[  352.550205][T15809] IPVS: persistence engine module ip_vs_pe_ not found
[  352.555213][T15806] veth0_to_bridge: left promiscuous mode
[  353.377392][T15829] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  353.500545][T15845] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  353.527237][T15847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.530036][T15847] syzkaller0: entered promiscuous mode
[  353.534061][T15847] syzkaller0: entered allmulticast mode
[  353.542021][T15847] tipc: Resetting bearer <eth:syzkaller0>
[  353.566409][T15851] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  353.566610][T15852] IPVS: stopping backup sync thread 15845 ...
[  353.569568][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.0.2597 Not tainted syzkaller #0 PREEMPT(full) 
[  353.569580][T15851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.569585][T15851] Call Trace:
[  353.569589][T15851]  <TASK>
[  353.569593][T15851]  dump_stack_lvl+0x189/0x250
[  353.569608][T15851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.569618][T15851]  ? __pfx__printk+0x10/0x10
[  353.569635][T15851]  ? kernfs_path_from_node+0x2f/0x290
[  353.569649][T15851]  ? kernfs_path_from_node+0x250/0x290
[  353.569661][T15851]  ? kernfs_path_from_node+0x2f/0x290
[  353.569676][T15851]  sysfs_warn_dup+0x8e/0xa0
[  353.569689][T15851]  sysfs_do_create_link_sd+0xc0/0x110
[  353.569704][T15851]  device_add_class_symlinks+0x1cf/0x240
[  353.569718][T15851]  device_add+0x475/0xb50
[  353.569736][T15851]  wiphy_register+0x1ba6/0x28d0
[  353.569763][T15851]  ? __pfx_wiphy_register+0x10/0x10
[  353.569775][T15851]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  353.569797][T15851]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  353.569815][T15851]  ieee80211_register_hw+0x3484/0x4100
[  353.569837][T15851]  ? ieee80211_register_hw+0x13f1/0x4100
[  353.569861][T15851]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  353.569881][T15851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.569905][T15851]  ? __hrtimer_setup+0x187/0x210
[  353.569916][T15851]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  353.569929][T15851]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  353.569964][T15851]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  353.569980][T15851]  ? trace_kmalloc+0x1f/0xd0
[  353.569995][T15851]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  353.570011][T15851]  ? kstrndup+0xbf/0x160
[  353.570030][T15851]  hwsim_new_radio_nl+0xea4/0x1b10
[  353.570045][T15851]  ? __pfx___nla_validate_parse+0x10/0x10
[  353.570068][T15851]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.570095][T15851]  ? __nla_parse+0x40/0x60
[  353.570110][T15851]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  353.570133][T15851]  genl_family_rcv_msg_doit+0x215/0x300
[  353.570150][T15851]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  353.570176][T15851]  ? bpf_lsm_capable+0x9/0x20
[  353.570213][T15851]  ? security_capable+0x7e/0x2e0
[  353.570261][T15851]  genl_rcv_msg+0x60e/0x790
[  353.570283][T15851]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.570299][T15851]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  353.570328][T15851]  netlink_rcv_skb+0x208/0x470
[  353.570340][T15851]  ? __lock_acquire+0xab9/0xd20
[  353.570360][T15851]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.570377][T15851]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.570404][T15851]  ? down_read+0x1ad/0x2e0
[  353.570420][T15851]  genl_rcv+0x28/0x40
[  353.570435][T15851]  netlink_unicast+0x82f/0x9e0
[  353.570455][T15851]  ? __pfx_netlink_unicast+0x10/0x10
[  353.570475][T15851]  ? netlink_sendmsg+0x642/0xb30
[  353.570487][T15851]  ? skb_put+0x11b/0x210
[  353.570503][T15851]  netlink_sendmsg+0x805/0xb30
[  353.570523][T15851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.570539][T15851]  ? aa_sock_msg_perm+0xf1/0x1d0
[  353.570549][T15851]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.570560][T15851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.570574][T15851]  __sock_sendmsg+0x21c/0x270
[  353.570594][T15851]  ____sys_sendmsg+0x505/0x830
[  353.570614][T15851]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.570636][T15851]  ? import_iovec+0x74/0xa0
[  353.570651][T15851]  ___sys_sendmsg+0x21f/0x2a0
[  353.570665][T15851]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.570708][T15851]  ? __fget_files+0x2a/0x420
[  353.570718][T15851]  ? __fget_files+0x3a0/0x420
[  353.570737][T15851]  __x64_sys_sendmsg+0x19b/0x260
[  353.570751][T15851]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.570771][T15851]  ? rcu_is_watching+0x15/0xb0
[  353.570787][T15851]  ? do_syscall_64+0xbe/0x3b0
[  353.570804][T15851]  do_syscall_64+0xfa/0x3b0
[  353.570816][T15851]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.570828][T15851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.570840][T15851]  ? exc_page_fault+0x9f/0xf0
[  353.570850][T15851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.570859][T15851] RIP: 0033:0x7f4329d8ec29
[  353.570871][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.570881][T15851] RSP: 002b:00007f432ab77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.570895][T15851] RAX: ffffffffffffffda RBX: 00007f4329fd6090 RCX: 00007f4329d8ec29
[  353.570904][T15851] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  353.570911][T15851] RBP: 00007f4329e11e41 R08: 0000000000000000 R09: 0000000000000000
[  353.570918][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.570925][T15851] R13: 00007f4329fd6128 R14: 00007f4329fd6090 R15: 00007ffee770c858
[  353.570944][T15851]  </TASK>
[  353.629332][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'.
[  353.840259][T15857] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2602'.
[  354.025341][T15861] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2603'.
[  354.185841][T15865] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  354.295057][T15835] tipc: Resetting bearer <eth:syzkaller0>
[  354.313598][T15835] tipc: Disabling bearer <eth:syzkaller0>
[  354.344319][T15871] netlink: 'syz.0.2608': attribute type 4 has an invalid length.
[  354.396790][T15877] netlink: 'syz.1.2609': attribute type 4 has an invalid length.
[  354.439088][T15880] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2610'.
[  354.486120][T15884] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  354.489186][T15884] CPU: 1 UID: 0 PID: 15884 Comm: syz.1.2611 Not tainted syzkaller #0 PREEMPT(full) 
[  354.489197][T15884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.489202][T15884] Call Trace:
[  354.489206][T15884]  <TASK>
[  354.489210][T15884]  dump_stack_lvl+0x189/0x250
[  354.489247][T15884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.489265][T15884]  ? __pfx__printk+0x10/0x10
[  354.489278][T15884]  ? kernfs_path_from_node+0x2f/0x290
[  354.489288][T15884]  ? kernfs_path_from_node+0x250/0x290
[  354.489296][T15884]  ? kernfs_path_from_node+0x2f/0x290
[  354.489307][T15884]  sysfs_warn_dup+0x8e/0xa0
[  354.489316][T15884]  sysfs_do_create_link_sd+0xc0/0x110
[  354.489325][T15884]  device_add_class_symlinks+0x1cf/0x240
[  354.489337][T15884]  device_add+0x475/0xb50
[  354.489348][T15884]  wiphy_register+0x1ba6/0x28d0
[  354.489369][T15884]  ? __pfx_wiphy_register+0x10/0x10
[  354.489376][T15884]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  354.489390][T15884]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  354.489402][T15884]  ieee80211_register_hw+0x3484/0x4100
[  354.489419][T15884]  ? ieee80211_register_hw+0x13f1/0x4100
[  354.489434][T15884]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  354.489446][T15884]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.489462][T15884]  ? __hrtimer_setup+0x187/0x210
[  354.489470][T15884]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  354.489479][T15884]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  354.489503][T15884]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  354.489513][T15884]  ? trace_kmalloc+0x1f/0xd0
[  354.489522][T15884]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  354.489532][T15884]  ? kstrndup+0xbf/0x160
[  354.489546][T15884]  hwsim_new_radio_nl+0xea4/0x1b10
[  354.489558][T15884]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.489573][T15884]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.489590][T15884]  ? __nla_parse+0x40/0x60
[  354.489599][T15884]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  354.489616][T15884]  genl_family_rcv_msg_doit+0x215/0x300
[  354.489630][T15884]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.489645][T15884]  ? bpf_lsm_capable+0x9/0x20
[  354.489656][T15884]  ? security_capable+0x7e/0x2e0
[  354.489670][T15884]  genl_rcv_msg+0x60e/0x790
[  354.489683][T15884]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.489693][T15884]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.489710][T15884]  netlink_rcv_skb+0x208/0x470
[  354.489717][T15884]  ? __lock_acquire+0xab9/0xd20
[  354.489729][T15884]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.489739][T15884]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.489755][T15884]  ? down_read+0x1ad/0x2e0
[  354.489765][T15884]  genl_rcv+0x28/0x40
[  354.489774][T15884]  netlink_unicast+0x82f/0x9e0
[  354.489789][T15884]  ? __pfx_netlink_unicast+0x10/0x10
[  354.489801][T15884]  ? netlink_sendmsg+0x642/0xb30
[  354.489808][T15884]  ? skb_put+0x11b/0x210
[  354.489818][T15884]  netlink_sendmsg+0x805/0xb30
[  354.489830][T15884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.489840][T15884]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.489848][T15884]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.489856][T15884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.489864][T15884]  __sock_sendmsg+0x21c/0x270
[  354.489877][T15884]  ____sys_sendmsg+0x505/0x830
[  354.489889][T15884]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.489903][T15884]  ? import_iovec+0x74/0xa0
[  354.489914][T15884]  ___sys_sendmsg+0x21f/0x2a0
[  354.489925][T15884]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.489967][T15884]  ? __fget_files+0x2a/0x420
[  354.489976][T15884]  ? __fget_files+0x3a0/0x420
[  354.489988][T15884]  __x64_sys_sendmsg+0x19b/0x260
[  354.489999][T15884]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.490013][T15884]  ? rcu_is_watching+0x15/0xb0
[  354.490025][T15884]  ? do_syscall_64+0xbe/0x3b0
[  354.490036][T15884]  do_syscall_64+0xfa/0x3b0
[  354.490044][T15884]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.490052][T15884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.490059][T15884]  ? exc_page_fault+0x9f/0xf0
[  354.490068][T15884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.490076][T15884] RIP: 0033:0x7f94af78ec29
[  354.490084][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.490090][T15884] RSP: 002b:00007f94b05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.490099][T15884] RAX: ffffffffffffffda RBX: 00007f94af9d5fa0 RCX: 00007f94af78ec29
[  354.490105][T15884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  354.490110][T15884] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  354.490115][T15884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.490120][T15884] R13: 00007f94af9d6038 R14: 00007f94af9d5fa0 R15: 00007ffd90fbafc8
[  354.490133][T15884]  </TASK>
[  354.726155][T15893] geneve3: entered promiscuous mode
[  354.739045][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.743092][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.752437][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.756101][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.891820][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.957845][T15909] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  354.963133][T15907] IPVS: stopping backup sync thread 15909 ...
[  355.063056][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.681822][T15961] block nbd2: server does not support multiple connections per device.
[  355.685616][T15961] block nbd2: shutting down sockets
[  356.390336][T15978] __nla_validate_parse: 6 callbacks suppressed
[  356.390346][T15978] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2641'.
[  356.537744][T15987] pimreg: entered allmulticast mode
[  356.563114][T15987] pimreg: left allmulticast mode
[  356.753648][T16000] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2646'.
[  356.807294][T16002] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2647'.
[  357.223377][T16034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2654'.
[  357.545888][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2658'.
[  357.612885][T16051] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  357.613000][T16050] IPVS: stopping backup sync thread 16051 ...
[  357.631255][T16050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.634759][T16050] syzkaller0: entered promiscuous mode
[  357.636976][T16050] syzkaller0: entered allmulticast mode
[  357.645121][T16049] tipc: Resetting bearer <eth:syzkaller0>
[  357.655415][T16049] tipc: Disabling bearer <eth:syzkaller0>
[  357.825038][T16058] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  357.892734][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2663'.
[  358.149714][T16077] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  358.153546][T16076] IPVS: stopping backup sync thread 16077 ...
[  358.257613][T16086] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2670'.
[  358.797547][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'.
[  358.800601][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  358.803858][T16091] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  358.806565][T16091] netlink: 'syz.2.2671': attribute type 14 has an invalid length.
[  358.809589][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'.
[  358.814043][T16091] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  358.816727][T16091] netlink: 'syz.2.2671': attribute type 14 has an invalid length.
[  358.819652][T16091] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  358.823531][T16091] netlink: 'syz.2.2671': attribute type 14 has an invalid length.
[  358.827650][T16091] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  358.831027][T16091] netlink: 'syz.2.2671': attribute type 14 has an invalid length.
[  358.835471][T16091] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  358.838976][T16091] netlink: 'syz.2.2671': attribute type 14 has an invalid length.
[  360.165272][T16145] pim6reg1: entered promiscuous mode
[  360.167619][T16145] pim6reg1: entered allmulticast mode
[  360.273091][T16145] IPVS: persistence engine module ip_vs_pe_ not found
[  360.282016][T16150] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  360.379365][T16161] !: entered promiscuous mode
[  360.387818][T16161] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  360.584869][T16184] nbd: must specify a size in bytes for the device
[  360.723100][T16212] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  360.723109][T16210] IPVS: stopping backup sync thread 16212 ...
[  361.077308][T16237] IPv6: sit3: Disabled Multicast RS
[  361.124940][T16247] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  361.576396][T16281] __nla_validate_parse: 169 callbacks suppressed
[  361.576413][T16281] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2723'.
[  361.812494][T16286] block nbd2: server does not support multiple connections per device.
[  361.816180][T16286] block nbd2: shutting down sockets
[  362.114689][T16309] IPVS: length: 139 != 8
[  362.130105][T16313] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000
[  362.134219][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  362.143707][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  362.154038][T16316] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20000
[  362.234984][T16321] tun6: tun_chr_ioctl cmd 1074025675
[  362.237696][T16321] tun6: persist enabled
[  362.274685][T16322] tun6: tun_chr_ioctl cmd 1074025675
[  362.277041][T16322] tun6: persist enabled
[  362.278898][T16321] tun6: tun_chr_ioctl cmd 1074025675
[  362.281225][T16321] tun6: persist enabled
[  362.305217][T16324] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2736'.
[  362.484478][T16339] IPVS: stopping backup sync thread 16341 ...
[  363.098806][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2752'.
[  363.101793][T16400] nbd: must specify at least one socket
[  363.175360][T16404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2753'.
[  363.189095][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'.
[  363.731939][T16428] block nbd2: server does not support multiple connections per device.
[  363.735761][T16428] block nbd2: shutting down sockets
[  364.112689][T16471] validate_nla: 122 callbacks suppressed
[  364.112704][T16471] netlink: 'syz.0.2767': attribute type 1 has an invalid length.
[  364.118599][T16471] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2767'.
[  364.125885][T16471] netlink: 'syz.0.2767': attribute type 1 has an invalid length.
[  364.129263][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'.
[  364.209257][T16484] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  364.212738][T16484] CPU: 0 UID: 0 PID: 16484 Comm: syz.0.2772 Not tainted syzkaller #0 PREEMPT(full) 
[  364.212748][T16484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.212753][T16484] Call Trace:
[  364.212756][T16484]  <TASK>
[  364.212760][T16484]  dump_stack_lvl+0x189/0x250
[  364.212775][T16484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.212785][T16484]  ? __pfx__printk+0x10/0x10
[  364.212798][T16484]  ? kernfs_path_from_node+0x2f/0x290
[  364.212807][T16484]  ? kernfs_path_from_node+0x250/0x290
[  364.212815][T16484]  ? kernfs_path_from_node+0x2f/0x290
[  364.212826][T16484]  sysfs_warn_dup+0x8e/0xa0
[  364.212833][T16484]  sysfs_do_create_link_sd+0xc0/0x110
[  364.212843][T16484]  device_add_class_symlinks+0x1cf/0x240
[  364.212855][T16484]  device_add+0x475/0xb50
[  364.212866][T16484]  wiphy_register+0x1ba6/0x28d0
[  364.212881][T16484]  ? __pfx_wiphy_register+0x10/0x10
[  364.212888][T16484]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  364.212901][T16484]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  364.212913][T16484]  ieee80211_register_hw+0x3484/0x4100
[  364.212930][T16484]  ? ieee80211_register_hw+0x13f1/0x4100
[  364.212944][T16484]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  364.212961][T16484]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.212982][T16484]  ? __hrtimer_setup+0x187/0x210
[  364.212992][T16484]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  364.213008][T16484]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  364.213047][T16484]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  364.213080][T16484]  ? trace_kmalloc+0x1f/0xd0
[  364.213094][T16484]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  364.213105][T16484]  ? kstrndup+0xbf/0x160
[  364.213149][T16484]  hwsim_new_radio_nl+0xea4/0x1b10
[  364.213161][T16484]  ? __pfx___nla_validate_parse+0x10/0x10
[  364.213177][T16484]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  364.213194][T16484]  ? __nla_parse+0x40/0x60
[  364.213203][T16484]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  364.213223][T16484]  genl_family_rcv_msg_doit+0x215/0x300
[  364.213236][T16484]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  364.213252][T16484]  ? bpf_lsm_capable+0x9/0x20
[  364.213262][T16484]  ? security_capable+0x7e/0x2e0
[  364.213277][T16484]  genl_rcv_msg+0x60e/0x790
[  364.213297][T16484]  ? __pfx_genl_rcv_msg+0x10/0x10
[  364.213311][T16484]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  364.213340][T16484]  netlink_rcv_skb+0x208/0x470
[  364.213351][T16484]  ? __lock_acquire+0xab9/0xd20
[  364.213368][T16484]  ? __pfx_genl_rcv_msg+0x10/0x10
[  364.213386][T16484]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  364.213412][T16484]  ? down_read+0x1ad/0x2e0
[  364.213430][T16484]  genl_rcv+0x28/0x40
[  364.213444][T16484]  netlink_unicast+0x82f/0x9e0
[  364.213468][T16484]  ? __pfx_netlink_unicast+0x10/0x10
[  364.213481][T16484]  ? netlink_sendmsg+0x642/0xb30
[  364.213488][T16484]  ? skb_put+0x11b/0x210
[  364.213499][T16484]  netlink_sendmsg+0x805/0xb30
[  364.213510][T16484]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.213520][T16484]  ? aa_sock_msg_perm+0xf1/0x1d0
[  364.213528][T16484]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  364.213536][T16484]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.213544][T16484]  __sock_sendmsg+0x21c/0x270
[  364.213557][T16484]  ____sys_sendmsg+0x505/0x830
[  364.213568][T16484]  ? __pfx_____sys_sendmsg+0x10/0x10
[  364.213582][T16484]  ? import_iovec+0x74/0xa0
[  364.213593][T16484]  ___sys_sendmsg+0x21f/0x2a0
[  364.213603][T16484]  ? __pfx____sys_sendmsg+0x10/0x10
[  364.213628][T16484]  ? __fget_files+0x2a/0x420
[  364.213635][T16484]  ? __fget_files+0x3a0/0x420
[  364.213645][T16484]  __x64_sys_sendmsg+0x19b/0x260
[  364.213656][T16484]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  364.213670][T16484]  ? rcu_is_watching+0x15/0xb0
[  364.213680][T16484]  ? do_syscall_64+0xbe/0x3b0
[  364.213690][T16484]  do_syscall_64+0xfa/0x3b0
[  364.213697][T16484]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.213705][T16484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.213712][T16484]  ? exc_page_fault+0x9f/0xf0
[  364.213720][T16484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.213728][T16484] RIP: 0033:0x7f4329d8ec29
[  364.213735][T16484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.213742][T16484] RSP: 002b:00007f432ab98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.213751][T16484] RAX: ffffffffffffffda RBX: 00007f4329fd5fa0 RCX: 00007f4329d8ec29
[  364.213757][T16484] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  364.213761][T16484] RBP: 00007f4329e11e41 R08: 0000000000000000 R09: 0000000000000000
[  364.213766][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.213770][T16484] R13: 00007f4329fd6038 R14: 00007f4329fd5fa0 R15: 00007ffee770c858
[  364.213782][T16484]  </TASK>
[  364.216278][T16486] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2773'.
[  364.335964][T16489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2773'.
[  364.394911][T16488] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  364.401752][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.1.2770 Not tainted syzkaller #0 PREEMPT(full) 
[  364.401765][T16488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.401771][T16488] Call Trace:
[  364.401775][T16488]  <TASK>
[  364.401779][T16488]  dump_stack_lvl+0x189/0x250
[  364.401794][T16488]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.401804][T16488]  ? __pfx__printk+0x10/0x10
[  364.401818][T16488]  ? kernfs_path_from_node+0x2f/0x290
[  364.401828][T16488]  ? kernfs_path_from_node+0x250/0x290
[  364.401836][T16488]  ? kernfs_path_from_node+0x2f/0x290
[  364.401846][T16488]  sysfs_warn_dup+0x8e/0xa0
[  364.401855][T16488]  sysfs_do_create_link_sd+0xc0/0x110
[  364.401865][T16488]  device_add_class_symlinks+0x1cf/0x240
[  364.401877][T16488]  device_add+0x475/0xb50
[  364.401888][T16488]  wiphy_register+0x1ba6/0x28d0
[  364.401904][T16488]  ? __pfx_wiphy_register+0x10/0x10
[  364.401911][T16488]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  364.401925][T16488]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  364.401937][T16488]  ieee80211_register_hw+0x3484/0x4100
[  364.401955][T16488]  ? ieee80211_register_hw+0x13f1/0x4100
[  364.401969][T16488]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  364.401980][T16488]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.401996][T16488]  ? __hrtimer_setup+0x187/0x210
[  364.402003][T16488]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  364.402012][T16488]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  364.402035][T16488]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  364.402046][T16488]  ? trace_kmalloc+0x1f/0xd0
[  364.402055][T16488]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  364.402065][T16488]  ? kstrndup+0xbf/0x160
[  364.402078][T16488]  hwsim_new_radio_nl+0xea4/0x1b10
[  364.402091][T16488]  ? __pfx___nla_validate_parse+0x10/0x10
[  364.402130][T16488]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  364.402150][T16488]  ? __nla_parse+0x40/0x60
[  364.402160][T16488]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  364.402175][T16488]  genl_family_rcv_msg_doit+0x215/0x300
[  364.402190][T16488]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  364.402207][T16488]  ? bpf_lsm_capable+0x9/0x20
[  364.402218][T16488]  ? security_capable+0x7e/0x2e0
[  364.402233][T16488]  genl_rcv_msg+0x60e/0x790
[  364.402246][T16488]  ? __pfx_genl_rcv_msg+0x10/0x10
[  364.402256][T16488]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  364.402273][T16488]  netlink_rcv_skb+0x208/0x470
[  364.402280][T16488]  ? __lock_acquire+0xab9/0xd20
[  364.402291][T16488]  ? __pfx_genl_rcv_msg+0x10/0x10
[  364.402319][T16488]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  364.402336][T16488]  ? down_read+0x1ad/0x2e0
[  364.402346][T16488]  genl_rcv+0x28/0x40
[  364.402355][T16488]  netlink_unicast+0x82f/0x9e0
[  364.402370][T16488]  ? __pfx_netlink_unicast+0x10/0x10
[  364.402382][T16488]  ? netlink_sendmsg+0x642/0xb30
[  364.402389][T16488]  ? skb_put+0x11b/0x210
[  364.402400][T16488]  netlink_sendmsg+0x805/0xb30
[  364.402412][T16488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.402422][T16488]  ? aa_sock_msg_perm+0xf1/0x1d0
[  364.402437][T16488]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  364.402446][T16488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.402458][T16488]  __sock_sendmsg+0x21c/0x270
[  364.402477][T16488]  ____sys_sendmsg+0x505/0x830
[  364.402499][T16488]  ? __pfx_____sys_sendmsg+0x10/0x10
[  364.402535][T16488]  ? import_iovec+0x74/0xa0
[  364.402555][T16488]  ___sys_sendmsg+0x21f/0x2a0
[  364.402573][T16488]  ? __pfx____sys_sendmsg+0x10/0x10
[  364.402609][T16488]  ? __fget_files+0x2a/0x420
[  364.402616][T16488]  ? __fget_files+0x3a0/0x420
[  364.402627][T16488]  __x64_sys_sendmsg+0x19b/0x260
[  364.402638][T16488]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  364.402652][T16488]  ? rcu_is_watching+0x15/0xb0
[  364.402662][T16488]  ? do_syscall_64+0xbe/0x3b0
[  364.402672][T16488]  do_syscall_64+0xfa/0x3b0
[  364.402680][T16488]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.402687][T16488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.402695][T16488]  ? exc_page_fault+0x9f/0xf0
[  364.402705][T16488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.402712][T16488] RIP: 0033:0x7f94af78ec29
[  364.402719][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.402726][T16488] RSP: 002b:00007f94b05b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.402735][T16488] RAX: ffffffffffffffda RBX: 00007f94af9d6180 RCX: 00007f94af78ec29
[  364.402740][T16488] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  364.402745][T16488] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  364.402750][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.402754][T16488] R13: 00007f94af9d6218 R14: 00007f94af9d6180 R15: 00007ffd90fbafc8
[  364.402768][T16488]  </TASK>
[  364.668412][T16502] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  364.671253][T16502] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  364.851576][T16516] netlink: 'syz.2.2780': attribute type 1 has an invalid length.
[  365.026186][T16524] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2782'.
[  365.140553][T16531] syzkaller1: entered promiscuous mode
[  365.143967][T16531] syzkaller1: entered allmulticast mode
[  365.556596][T16534] IPVS: persistence engine module ip_vs_pe_ not found
[  365.859307][T16550] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  366.054638][T16555] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001
[  366.057154][T16556] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001
[  366.663464][T16601] __nla_validate_parse: 1 callbacks suppressed
[  366.663478][T16601] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2800'.
[  366.975356][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'.
[  366.979567][T16613] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2802'.
[  366.988048][T16613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'.
[  367.183206][T16622] tun8: tun_chr_ioctl cmd 1074025675
[  367.185567][T16622] tun8: persist enabled
[  367.234390][T16628] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  367.411490][T16641] netlink: 'syz.0.2810': attribute type 4 has an invalid length.
[  367.414120][T16642] netlink: 'syz.0.2810': attribute type 4 has an invalid length.
[  367.543389][T16650] IPVS: stopping backup sync thread 16628 ...
[  367.613201][T16652] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  367.622100][T16652] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  367.754667][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'.
[  368.275134][T16681] syzkaller0: entered promiscuous mode
[  368.277636][T16681] syzkaller0: entered allmulticast mode
[  368.502713][T16693] IPVS: persistence engine module ip_vs_pe_ not found
[  368.514947][T16693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  368.612539][T16695] block nbd2: server does not support multiple connections per device.
[  368.616139][T16695] block nbd2: shutting down sockets
[  369.450473][T16707] netlink: 'syz.0.2822': attribute type 1 has an invalid length.
[  369.475867][T16707] bond4: entered promiscuous mode
[  369.480594][T16707] 8021q: adding VLAN 0 to HW filter on device bond4
[  369.486338][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2823'.
[  369.490864][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2823'.
[  369.508382][T16707] bond4: (slave bridge5): making interface the new active one
[  369.512102][T16707] bridge5: entered promiscuous mode
[  369.515557][T16707] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  369.639636][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'.
[  369.644419][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'.
[  369.647355][T16729] netlink: 'syz.0.2829': attribute type 6 has an invalid length.
[  370.880196][T16763] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2838'.
[  371.459127][T16799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.462468][T16799] syzkaller0: entered promiscuous mode
[  371.464383][T16799] syzkaller0: entered allmulticast mode
[  371.706886][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2850'.
[  371.725672][T16810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  371.729163][T16810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  371.774732][T16810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  371.778006][T16810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  371.815637][T16810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  371.819188][T16810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  371.857446][T16810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  371.862128][T16810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  371.916295][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  371.919765][ T5882] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  371.933330][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  371.936591][ T5882] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  371.944193][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  371.947603][ T5882] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  371.958537][ T5882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  371.962305][ T5882] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  372.005279][T16814] syzkaller1: entered promiscuous mode
[  372.007683][T16814] syzkaller1: entered allmulticast mode
[  372.286498][T16797] tipc: Resetting bearer <eth:syzkaller0>
[  372.303283][T16797] tipc: Disabling bearer <eth:syzkaller0>
[  372.418982][T16828] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2854'.
[  372.602986][T16843] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.653055][T16844] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.658739][T16843] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.673678][T16843] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.681779][T16847] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.713318][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2858'.
[  372.769203][T16857] IPVS: length: 4096 != 24
[  372.826980][T16860] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2862'.
[  373.619943][T16871] netlink: 'syz.2.2866': attribute type 11 has an invalid length.
[  373.623731][T16871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2866'.
[  373.686979][T16872] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096
[  375.475320][T16894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.496861][T16894] tipc: Disabling bearer <eth:syzkaller0>
[  375.628510][ T5882] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  375.629036][T16897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.636854][T16898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.754549][T16920] __nla_validate_parse: 3 callbacks suppressed
[  376.754564][T16920] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2879'.
[  376.903603][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'.
[  376.910093][T16932] veth0: entered promiscuous mode
[  376.913553][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'.
[  376.919272][T16934] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2884'.
[  376.930103][T16932] veth0 (unregistering): left promiscuous mode
[  377.027309][T16940] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  377.053232][T16940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2886'.
[  377.558780][T16995] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2896'.
[  378.050140][T17015] IPVS: stopping backup sync thread 16247 ...
[  378.219855][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.401754][T17024] block nbd2: server does not support multiple connections per device.
[  378.405624][T17024] block nbd2: shutting down sockets
[  379.071494][T17064] block nbd2: server does not support multiple connections per device.
[  379.075456][T17064] block nbd2: shutting down sockets
[  379.151744][T17063] block nbd2: server does not support multiple connections per device.
[  379.155528][T17063] block nbd2: shutting down sockets
[  379.207613][T17066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2915'.
[  379.320570][T17068] IPVS: Scheduler module ip_vs_sip not found
[  379.707398][T17094] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2923'.
[  380.493287][T17105] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  380.867519][T17121] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  380.871469][T17121] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  381.173001][T17123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.344255][T17127] IPVS: Unknown mcast interface: team0
[  381.423054][T17132] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003
[  381.554138][T17135] IPVS: Scheduler module ip_vs_sip not found
[  381.559487][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'.
[  381.618230][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'.
[  382.162129][T17171] block nbd2: server does not support multiple connections per device.
[  382.166095][T17171] block nbd2: shutting down sockets
[  382.298397][T17186] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2948'.
[  383.222874][T17197] IPVS: Scheduler module ip_vs_sip not found
[  383.276379][T17202] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2953'.
[  383.551820][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'.
[  383.760661][T17226] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  383.765753][T17227] IPVS: stopping backup sync thread 17226 ...
[  383.908989][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'.
[  384.184555][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'.
[  384.935671][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'.
[  385.059959][T17295] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2980'.
[  385.438134][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2984'.
[  385.583135][T17319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2987'.
[  385.595018][T17319] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  385.598516][T17319] CPU: 0 UID: 0 PID: 17319 Comm: syz.2.2987 Not tainted syzkaller #0 PREEMPT(full) 
[  385.598533][T17319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.598541][T17319] Call Trace:
[  385.598547][T17319]  <TASK>
[  385.598553][T17319]  dump_stack_lvl+0x189/0x250
[  385.598577][T17319]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.598593][T17319]  ? __pfx__printk+0x10/0x10
[  385.598616][T17319]  ? kernfs_path_from_node+0x2f/0x290
[  385.598631][T17319]  ? kernfs_path_from_node+0x250/0x290
[  385.598644][T17319]  ? kernfs_path_from_node+0x2f/0x290
[  385.598661][T17319]  sysfs_warn_dup+0x8e/0xa0
[  385.598675][T17319]  sysfs_do_create_link_sd+0xc0/0x110
[  385.598691][T17319]  device_add_class_symlinks+0x1cf/0x240
[  385.598711][T17319]  device_add+0x475/0xb50
[  385.598731][T17319]  wiphy_register+0x1ba6/0x28d0
[  385.598758][T17319]  ? __pfx_wiphy_register+0x10/0x10
[  385.598771][T17319]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  385.598794][T17319]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  385.598814][T17319]  ieee80211_register_hw+0x3484/0x4100
[  385.598844][T17319]  ? ieee80211_register_hw+0x13f1/0x4100
[  385.598900][T17319]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  385.598922][T17319]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  385.598957][T17319]  ? __hrtimer_setup+0x187/0x210
[  385.598969][T17319]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  385.598985][T17319]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  385.599030][T17319]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  385.599048][T17319]  ? trace_kmalloc+0x1f/0xd0
[  385.599064][T17319]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  385.599083][T17319]  ? kstrndup+0xbf/0x160
[  385.599105][T17319]  hwsim_new_radio_nl+0xea4/0x1b10
[  385.599128][T17319]  ? __pfx___nla_validate_parse+0x10/0x10
[  385.599154][T17319]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  385.599184][T17319]  ? __nla_parse+0x40/0x60
[  385.599199][T17319]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  385.599225][T17319]  genl_family_rcv_msg_doit+0x215/0x300
[  385.599248][T17319]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  385.599277][T17319]  ? bpf_lsm_capable+0x9/0x20
[  385.599294][T17319]  ? security_capable+0x7e/0x2e0
[  385.599319][T17319]  genl_rcv_msg+0x60e/0x790
[  385.599343][T17319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  385.599359][T17319]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  385.599385][T17319]  netlink_rcv_skb+0x208/0x470
[  385.599397][T17319]  ? __lock_acquire+0xab9/0xd20
[  385.599415][T17319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  385.599431][T17319]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  385.599459][T17319]  ? down_read+0x1ad/0x2e0
[  385.599478][T17319]  genl_rcv+0x28/0x40
[  385.599493][T17319]  netlink_unicast+0x82f/0x9e0
[  385.599520][T17319]  ? __pfx_netlink_unicast+0x10/0x10
[  385.599541][T17319]  ? netlink_sendmsg+0x642/0xb30
[  385.599553][T17319]  ? skb_put+0x11b/0x210
[  385.599572][T17319]  netlink_sendmsg+0x805/0xb30
[  385.599594][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  385.599611][T17319]  ? aa_sock_msg_perm+0xf1/0x1d0
[  385.599627][T17319]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  385.599640][T17319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  385.599655][T17319]  __sock_sendmsg+0x21c/0x270
[  385.599677][T17319]  ____sys_sendmsg+0x505/0x830
[  385.599699][T17319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  385.599723][T17319]  ? import_iovec+0x74/0xa0
[  385.599743][T17319]  ___sys_sendmsg+0x21f/0x2a0
[  385.599761][T17319]  ? __pfx____sys_sendmsg+0x10/0x10
[  385.599807][T17319]  ? __fget_files+0x2a/0x420
[  385.599819][T17319]  ? __fget_files+0x3a0/0x420
[  385.599840][T17319]  __x64_sys_sendmsg+0x19b/0x260
[  385.599888][T17319]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  385.599921][T17319]  ? do_syscall_64+0xbe/0x3b0
[  385.599946][T17319]  do_syscall_64+0xfa/0x3b0
[  385.599959][T17319]  ? lockdep_hardirqs_on+0x9c/0x150
[  385.599972][T17319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.599985][T17319]  ? exc_page_fault+0x9f/0xf0
[  385.600000][T17319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.600012][T17319] RIP: 0033:0x7f9bec78ec29
[  385.600025][T17319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.600037][T17319] RSP: 002b:00007f9bed591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  385.600052][T17319] RAX: ffffffffffffffda RBX: 00007f9bec9d5fa0 RCX: 00007f9bec78ec29
[  385.600062][T17319] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  385.600070][T17319] RBP: 00007f9bec811e41 R08: 0000000000000000 R09: 0000000000000000
[  385.600078][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.600086][T17319] R13: 00007f9bec9d6038 R14: 00007f9bec9d5fa0 R15: 00007fff6f0f7298
[  385.600109][T17319]  </TASK>
[  385.835297][T17330] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2989'.
[  386.047140][T17346] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  386.119466][T17350] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  386.124274][T17349] IPVS: stopping backup sync thread 17350 ...
[  386.703406][T17359] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  386.703416][T17358] IPVS: stopping backup sync thread 17359 ...
[  386.713632][T17360] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  386.714301][T17358] IPVS: stopping backup sync thread 17360 ...
[  386.958779][   T13] syzkaller0: tun_net_xmit 76
[  386.960932][   T13] syzkaller0: tun_net_xmit 48
[  386.982441][ T5904] syzkaller0: tun_net_xmit 76
[  387.728114][T17384] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  388.206635][T17416] IPVS: Scheduler module ip_vs_sip not found
[  388.261109][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'.
[  388.306429][T17426] openvswitch: netlink: Missing key (keys=40, expected=80)
[  388.774452][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'.
[  389.227093][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'.
[  389.278724][T17473] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  389.291847][T17473] netlink: 'syz.2.3031': attribute type 29 has an invalid length.
[  389.295249][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'.
[  389.305664][T17476] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.3032'.
[  389.331849][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3025'.
[  389.562730][T17489] netlink: 'syz.1.3034': attribute type 1 has an invalid length.
[  389.566026][T17489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3034'.
[  390.337728][T17514] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  390.345905][T17513] IPVS: stopping backup sync thread 17514 ...
[  390.382250][T17518] Bluetooth: MGMT ver 1.23
[  390.632394][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3045'.
[  390.644937][T17525] netlink: 'syz.1.3045': attribute type 1 has an invalid length.
[  390.693954][T17527] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  390.699204][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'.
[  390.702439][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3046'.
[  390.864007][T17537] 8021q: adding VLAN 0 to HW filter on device bond6
[  390.868364][T17537] bond0: (slave bond6): Enslaving as an active interface with an up link
[  391.449515][T17587] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  391.455545][T17586] IPVS: stopping backup sync thread 17587 ...
[  391.586507][T17605] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  391.590504][T17604] IPVS: stopping backup sync thread 17605 ...
[  392.339277][T17656] openvswitch: netlink: Duplicate or invalid key (type 0).
[  392.342298][T17656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.014477][T17695] netlink: 'syz.1.3087': attribute type 2 has an invalid length.
[  393.376675][T17708] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  393.380368][T17707] IPVS: stopping backup sync thread 17708 ...
[  393.384246][T17707] __nla_validate_parse: 6 callbacks suppressed
[  393.384253][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  393.389482][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  393.394076][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'.
[  393.548726][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'.
[  393.585846][T17718] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3095'.
[  393.608337][T17720] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  393.619842][T17720] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  393.680575][T17724] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  393.712525][T17726] bridge_slave_1: mtu less than device minimum
[  393.765478][T17728] IPVS: Scheduler module ip_vs_sip not found
[  393.902286][T17735] block nbd2: server does not support multiple connections per device.
[  393.905520][T17735] block nbd2: shutting down sockets
[  393.943235][T17754] IPVS: stopping backup sync thread 17724 ...
[  393.976438][T17756] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  393.980387][T17756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.057045][T17767] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  394.148529][T17784] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  394.153368][T17783] IPVS: stopping backup sync thread 17784 ...
[  394.159179][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'.
[  394.303463][T17800] tun7: tun_chr_ioctl cmd 1074025675
[  394.305353][T17800] tun7: persist enabled
[  394.307115][T17800] tun7: tun_chr_ioctl cmd 1074025675
[  394.308941][T17800] tun7: persist enabled
[  394.310544][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3120'.
[  394.389846][T17808] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3123'.
[  394.428292][T17810] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  395.036448][T17827] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3129'.
[  395.444948][T17843] syzkaller0: entered promiscuous mode
[  395.447635][T17843] syzkaller0: entered allmulticast mode
[  395.633312][T17850] netlink: 'syz.1.3135': attribute type 1 has an invalid length.
[  414.989599][T17874] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3143'.
[  415.046241][T17876] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3144'.
[  415.913298][T17932] tun3: tun_chr_ioctl cmd 1074025675
[  415.916064][T17932] tun3: persist enabled
[  415.919697][T17932] tun3: tun_chr_ioctl cmd 1074025675
[  415.921712][T17932] tun3: persist enabled
[  415.925641][T17932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3153'.
[  415.973462][T17939] bridge0: port 1(vlan3) entered blocking state
[  415.975782][T17939] bridge0: port 1(vlan3) entered disabled state
[  415.979184][T17939] vlan3: entered allmulticast mode
[  415.982744][T17939] bridge0: entered allmulticast mode
[  415.996554][T17939] vlan3: left allmulticast mode
[  415.998189][T17939] bridge0: left allmulticast mode
[  416.023104][T17943] netlink: 'syz.2.3155': attribute type 16 has an invalid length.
[  416.108076][T17949] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  416.111186][T17949] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  416.218963][T17966] ieee802154 phy1 wpan1: encryption failed: -22
[  416.285621][T17977] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3164'.
[  416.623995][T17995] syzkaller0: entered promiscuous mode
[  416.626028][T17995] syzkaller0: entered allmulticast mode
[  416.639988][T17995] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  416.643343][T17995] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  417.047612][T18002] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3171'.
[  417.200268][T18009] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3173'.
[  417.378996][T18019] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3177'.
[  417.507734][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  418.232083][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'.
[  418.495043][T18044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  418.506487][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3184'.
[  418.518168][T18039] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  418.521353][T18039] CPU: 1 UID: 0 PID: 18039 Comm: syz.1.3182 Not tainted syzkaller #0 PREEMPT(full) 
[  418.521365][T18039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.521371][T18039] Call Trace:
[  418.521374][T18039]  <TASK>
[  418.521378][T18039]  dump_stack_lvl+0x189/0x250
[  418.521391][T18039]  ? irqentry_exit+0x74/0x90
[  418.521402][T18039]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.521419][T18039]  sysfs_warn_dup+0x8e/0xa0
[  418.521427][T18039]  sysfs_do_create_link_sd+0xc0/0x110
[  418.521437][T18039]  device_add_class_symlinks+0x1cf/0x240
[  418.521478][T18039]  device_add+0x475/0xb50
[  418.521497][T18039]  wiphy_register+0x1ba6/0x28d0
[  418.521523][T18039]  ? __pfx_wiphy_register+0x10/0x10
[  418.521532][T18039]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  418.521555][T18039]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  418.521568][T18039]  ieee80211_register_hw+0x3484/0x4100
[  418.521586][T18039]  ? ieee80211_register_hw+0x13f1/0x4100
[  418.521602][T18039]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  418.521619][T18039]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  418.521642][T18039]  ? __hrtimer_setup+0x187/0x210
[  418.521653][T18039]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  418.521668][T18039]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  418.521705][T18039]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  418.521721][T18039]  ? trace_kmalloc+0x1f/0xd0
[  418.521735][T18039]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  418.521751][T18039]  ? kstrndup+0xbf/0x160
[  418.521768][T18039]  hwsim_new_radio_nl+0xea4/0x1b10
[  418.521781][T18039]  ? __pfx___nla_validate_parse+0x10/0x10
[  418.521798][T18039]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  418.521814][T18039]  ? __nla_parse+0x40/0x60
[  418.521828][T18039]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  418.521849][T18039]  genl_family_rcv_msg_doit+0x215/0x300
[  418.521871][T18039]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  418.521896][T18039]  ? bpf_lsm_capable+0x9/0x20
[  418.521912][T18039]  ? security_capable+0x7e/0x2e0
[  418.521932][T18039]  genl_rcv_msg+0x60e/0x790
[  418.521951][T18039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.521965][T18039]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  418.521990][T18039]  netlink_rcv_skb+0x208/0x470
[  418.522000][T18039]  ? __lock_acquire+0xab9/0xd20
[  418.522017][T18039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.522035][T18039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.522059][T18039]  ? down_read+0x1ad/0x2e0
[  418.522075][T18039]  genl_rcv+0x28/0x40
[  418.522089][T18039]  netlink_unicast+0x82f/0x9e0
[  418.522114][T18039]  ? __pfx_netlink_unicast+0x10/0x10
[  418.522134][T18039]  ? netlink_sendmsg+0x642/0xb30
[  418.522145][T18039]  ? skb_put+0x11b/0x210
[  418.522162][T18039]  netlink_sendmsg+0x805/0xb30
[  418.522182][T18039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.522197][T18039]  ? aa_sock_msg_perm+0xf1/0x1d0
[  418.522210][T18039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  418.522224][T18039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.522237][T18039]  __sock_sendmsg+0x21c/0x270
[  418.522258][T18039]  ____sys_sendmsg+0x505/0x830
[  418.522277][T18039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.522298][T18039]  ? import_iovec+0x74/0xa0
[  418.522317][T18039]  ___sys_sendmsg+0x21f/0x2a0
[  418.522334][T18039]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.522375][T18039]  ? __fget_files+0x2a/0x420
[  418.522386][T18039]  ? __fget_files+0x3a0/0x420
[  418.522405][T18039]  __x64_sys_sendmsg+0x19b/0x260
[  418.522422][T18039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.522478][T18039]  ? rcu_is_watching+0x15/0xb0
[  418.522497][T18039]  ? do_syscall_64+0xbe/0x3b0
[  418.522514][T18039]  do_syscall_64+0xfa/0x3b0
[  418.522525][T18039]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.522536][T18039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.522557][T18039]  ? exc_page_fault+0x9f/0xf0
[  418.522571][T18039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.522582][T18039] RIP: 0033:0x7f94af78ec29
[  418.522594][T18039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.522603][T18039] RSP: 002b:00007f94b05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.522613][T18039] RAX: ffffffffffffffda RBX: 00007f94af9d5fa0 RCX: 00007f94af78ec29
[  418.522619][T18039] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  418.522624][T18039] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  418.522628][T18039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  418.522633][T18039] R13: 00007f94af9d6038 R14: 00007f94af9d5fa0 R15: 00007ffd90fbafc8
[  418.522651][T18039]  </TASK>
[  418.898089][T18060] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  418.908176][T18060] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  419.036131][T18067] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  419.041066][T18067] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  419.045335][T18067] CPU: 0 UID: 0 PID: 18067 Comm: syz.1.3190 Not tainted syzkaller #0 PREEMPT(full) 
[  419.049235][T18067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.053380][T18067] RIP: 0010:rose_transmit_link+0x32/0x740
[  419.055784][T18067] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 49 94 52 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  419.063682][T18067] RSP: 0018:ffffc9000675f770 EFLAGS: 00010207
[  419.066178][T18067] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802fec0000
[  419.069517][T18067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033a7a480
[  419.072812][T18067] RBP: 0000000000000000 R08: ffff88802fec0000 R09: 0000000000000008
[  419.076115][T18067] R10: 000000000000000f R11: 0000000000000000 R12: ffff888033a7a480
[  419.079432][T18067] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036
[  419.082810][T18067] FS:  00007f94b05f36c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  419.086555][T18067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.089301][T18067] CR2: 0000000000000000 CR3: 000000003b232000 CR4: 00000000000006f0
[  419.092692][T18067] Call Trace:
[  419.094155][T18067]  <TASK>
[  419.095428][T18067]  ? skb_put+0x11b/0x210
[  419.097244][T18067]  rose_write_internal+0x11dc/0x1ac0
[  419.099483][T18067]  ? __pfx_rose_write_internal+0x10/0x10
[  419.101882][T18067]  ? __timer_delete+0x5d/0x390
[  419.103921][T18067]  rose_release+0x25b/0x510
[  419.105961][T18067]  sock_close+0xc3/0x240
[  419.107867][T18067]  ? __pfx_sock_close+0x10/0x10
[  419.110037][T18067]  __fput+0x44c/0xa70
[  419.111831][T18067]  task_work_run+0x1d4/0x260
[  419.113922][T18067]  ? __pfx_task_work_run+0x10/0x10
[  419.116206][T18067]  do_exit+0x6b5/0x2300
[  419.118076][T18067]  ? do_raw_spin_lock+0x121/0x290
[  419.120317][T18067]  ? __pfx_do_exit+0x10/0x10
[  419.122395][T18067]  do_group_exit+0x21c/0x2d0
[  419.124420][T18067]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.126766][T18067]  get_signal+0x1286/0x1340
[  419.128788][T18067]  arch_do_signal_or_restart+0x9a/0x750
[  419.131158][T18067]  ? __pfx___sys_connect+0x10/0x10
[  419.133275][T18067]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  419.135868][T18067]  ? exit_to_user_mode_loop+0x40/0x110
[  419.138165][T18067]  exit_to_user_mode_loop+0x75/0x110
[  419.140418][T18067]  do_syscall_64+0x2bd/0x3b0
[  419.142384][T18067]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.144616][T18067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.147167][T18067]  ? exc_page_fault+0x9f/0xf0
[  419.149164][T18067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.151666][T18067] RIP: 0033:0x7f94af78ec29
[  419.153584][T18067] Code: Unable to access opcode bytes at 0x7f94af78ebff.
[  419.156487][T18067] RSP: 002b:00007f94b05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  419.159986][T18067] RAX: 0000000000000000 RBX: 00007f94af9d5fa0 RCX: 00007f94af78ec29
[  419.163224][T18067] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008
[  419.166584][T18067] RBP: 00007f94af811e41 R08: 0000000000000000 R09: 0000000000000000
[  419.169869][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.173122][T18067] R13: 00007f94af9d6038 R14: 00007f94af9d5fa0 R15: 00007ffd90fbafc8
[  419.176300][T18067]  </TASK>
[  419.177608][T18067] Modules linked in:
[  419.180148][T18067] ---[ end trace 0000000000000000 ]---
[  419.185281][T18067] RIP: 0010:rose_transmit_link+0x32/0x740
[  419.187645][T18067] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 49 94 52 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  419.195403][T18067] RSP: 0018:ffffc9000675f770 EFLAGS: 00010207
[  419.197894][T18067] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802fec0000
[  419.201080][T18067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033a7a480
[  419.204977][T18067] RBP: 0000000000000000 R08: ffff88802fec0000 R09: 0000000000000008
[  419.208152][T18067] R10: 000000000000000f R11: 0000000000000000 R12: ffff888033a7a480
[  419.211733][T18067] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036
[  419.214930][T18067] FS:  00007f94b05f36c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  419.218619][T18067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.223129][T18067] CR2: 0000000000000000 CR3: 000000003b232000 CR4: 00000000000006f0
[  419.226469][T18067] Kernel panic - not syncing: Fatal exception
[  419.229923][T18067] Kernel Offset: disabled
[  419.231782][T18067] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:22:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000675efb0
R8 =ffff8881071f8237 R9 =1ffff11020e3f046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b0090b R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f94b05f36c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003b232000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4329e12e7b
XMM06=0000000000000000 00007f4329e12e75 XMM07=0000000000000000 00007f4329e12e89
XMM08=0000000000000000 00007f4329e12f0f XMM09=0000000000000000 00007f4329e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b8a5a7a4f93f3900 RBX=ffffffff819693f8 RCX=b8a5a7a4f93f3900 RDX=0000000000000001
RSI=ffffffff8be33be0 RDI=ffffffff819693f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003b232000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4329fa7498 00007f4329fa7470 XMM03=00007f4329fa74a8 00007f4329fa74a0
XMM04=00007f432ab0d100 00007f4329fa7460 XMM05=00007f4329fa7478 00007f4329fa74c0
XMM06=00007f4329fa74b8 00007f4329fa74b0 XMM07=00007f4329fa74a8 00007f4329fa74a0
XMM08=7b20202000000000 0025702020000001 XMM09=0000000000000000 00007f4329e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
