last executing test programs:

1.869599561s ago: executing program 0 (id=756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000025000000010000001800000000000000000f00000000000095184faada000000a7030000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82)
close(r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r8, @ANYBLOB="004100000000000014002b800800010013dd00b161fdb34c", @ANYRES32=r9, @ANYBLOB="0800030008000000"], 0x34}}, 0x4008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x2a, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="11b1f4fffcffffff8520000001000000328106702bd531aa"], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

1.816350493s ago: executing program 2 (id=759):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002d000100000800000000000804000080350011808115c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844ef484d72b0d6488f955454ed2f0000009081d3366301b16414877e12cf418003bf0e82e577"], 0x4c}], 0x1, 0x0, 0x0, 0x300}, 0x300)

1.571773784s ago: executing program 2 (id=760):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.461596081s ago: executing program 2 (id=762):
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x80000000, 0xd, 0x1, 0x6a3, 0x3, 0x0, [{0x52a, 0x7fff, 0x2, '\x00', 0x111}, {0x1964, 0x7, 0xcf, '\x00', 0x1804}, {0xb, 0x3, 0x8000000000000000, '\x00', 0x1200}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa4, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close(0x4)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000580)="6181", 0x2}], 0x1)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r5, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0)
accept4$phonet_pipe(r6, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0)

1.39961212s ago: executing program 0 (id=764):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x3, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@local, 0x0, 0x0, 0xfffd, 0x6, 0xa, 0x0, 0x80}, {0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x200}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3502, 0xc5eea1c0500f3eb9, 0x1, 0x7, 0x5, 0x3, 0x5}]}]}, 0xfc}}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x0, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x18, 0x20000000000001, 0x5, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0x2002, 0x0, 0x2, 0x8, 0x101, 0x5}, 0x1c)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300))
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0)

630.866755ms ago: executing program 1 (id=770):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)
getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'macsec0\x00', 0xdca7})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010700000c1100fc01100000001c000000000000000020ff02000000000000000000000000000100000e22000c9078"], 0x0)

624.30051ms ago: executing program 2 (id=771):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400000000000000ffffffa100", @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

558.467103ms ago: executing program 1 (id=772):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}}, 0x20008015)
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x1810) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x1403, 0x400, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8041}, 0x4048000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000c48}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x25}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) (async)
r6 = socket$packet(0x11, 0x1, 0x300)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r7=>0x0, &(0x7f0000000540)=0x4)
bind$packet(r6, &(0x7f0000000580)={0x11, 0x7, r7, 0x1, 0x3, 0x6, @broadcast}, 0x14)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000005c0)={0x25, 0x3ff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}}, 0x32) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r9, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0xc103, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010) (async)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000008c0)) (async)
bind$packet(r10, &(0x7f0000000900)={0x11, 0x4, r7, 0x1, 0x80}, 0x14) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, &(0x7f0000000940)="86a07b419d6fbd6adf67451ee66d55e5d124ef0969c42d3e2ff873af965576bef51ff27303d84bf0daa84c05485514ca3f131477fec611ea126a5aaa242767c31ed30c4b361a6c181fb05b01fe7a92f220629d444f0c50e153eae6831e810f2497f92dfabbfe4669e5ebefda6e6e02a76f505ffebcde33b7676281b1be4ace53617595a5d22739d1b976a5ac396d5a61f12ff6cdade591b74719dbcb9f42c33c9a0c6418b6ddfb7cf85e41326dafbc6b44d5fb62db6656f6392d", 0xba, 0x80001, &(0x7f0000000a00)={0xa, 0x4e24, 0xfffffc01, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, 0x1c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a40), 0x8) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r12, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c010)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000bc0)={0x2, 'batadv0\x00', {0x4}, 0x1})

557.304651ms ago: executing program 0 (id=773):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x54)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280340001800a0001006c694b6974000000240002800c00024000000000000010000c000140ffffffffffffffff08000340000100000800034000000110140000001000010000000000000000000084000adb9cbc26e526a54b1bfb51cc7e2f241e68aa6702392a222430eefa2fc7a1bc17954c32a375502adbd600949f6ff7ec093cb5818b4ed4356ef6ff2f43975502b055bb5d13cb5882575b7ad94c106022ee0e45166725a21b6bee13c7017c01eab721e62370d5370852503e2ce89ad8d00fb65b574640ce8501ae90fe7251b7cda3b47d6c0f31cd9c5860e52ca7f57820c69238a3bb1dbba897201580d63329"], 0xc4}}, 0x20050800)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0x25, 0x148, 0x130, 0x60, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@set3={{}, {{0x3, 0x5, 0x1}, {0x4, 0x3}, {0x5, 0x400}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@inet=@dccp={{}, {[0x4e23, 0x4e22], [0x4e20, 0x4e22], 0xf, 0x8, 0x9}}, @inet=@rpfilter={{}, {0x3}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x7f, 0x9}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x31f)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001040)={0x672, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x18)
pipe(&(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff89c108fc7b2feabeb703000000000000850000003900000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

308.425753ms ago: executing program 0 (id=774):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4804012"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14}}], 0x18}, 0x4004000)
close(r1)

307.861704ms ago: executing program 1 (id=775):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002d000100000800000000000804000080350011808115c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844ef484d72b0d6488f955454ed2f0000009081d3366301b16414877e12cf418003bf0e82e577"], 0x4c}], 0x1, 0x0, 0x0, 0x500}, 0x300)

251.931373ms ago: executing program 2 (id=776):
r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$key(0xf, 0x3, 0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40)
recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={<r9=>0x0, 0x76, "66ff697e7de08adf542fe5baaf6fbded09794ef48ec08f1b4054c48b245c0692f6fbd4af09a9f913488d0a0ae5172763e223cc2ccdb50d99b566c43d45f87d91efe14b937a05edfc5da818ec35a7bd5ae58b71dab031f1bc607ba89ec1829bc557932dd752965049e50f36130652994249d4e8281429"}, &(0x7f0000000000)=0x7e)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r9, 0xf7, 0x3, [0x4, 0x3, 0x5]}, 0xe)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f)

250.982707ms ago: executing program 1 (id=777):
r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0xd01}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async, rerun: 64)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xcc, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffee2)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) (async, rerun: 64)
sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14) (rerun: 64)

201.369105ms ago: executing program 0 (id=778):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308f144000028006500000006907800000000e000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780006"], 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c)

142.193253ms ago: executing program 0 (id=779):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10da)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r2=>0x0})
socket$inet(0x2, 0x80809, 0x2)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x13)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100003052abd70000400000000000000", @ANYRESDEC=r7, @ANYBLOB="00000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x54}}, 0x800)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000a80), 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)

60.008353ms ago: executing program 1 (id=780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x100007, 0xff, 0x28, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0)

56.874367ms ago: executing program 2 (id=781):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x54)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000003800048034000180090001006861736800000000070000000000000000000000080004400000000008000740000000010800064000010001faff000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0d0000004b7b1a27cd8a8aff797272a52b082df11db157211b0b2322a94d4d1e0915c8408356a9f7de03951dee1bc13db8b1a67bd60b7eb1f6521cb0e656e41869913763d135db982e1405ad35a82938ed9eedbcf243958d642f78da64e41190bf1c294a586d36e137a425b780", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf251b0000000600210062000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40045)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf258800000008000300", @ANYRES32, @ANYBLOB="1a0006"], 0x44}, 0x1, 0x0, 0x0, 0x8099}, 0x440)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, 0x0, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28)
r8 = socket$netlink(0x10, 0x3, 0xb4387af52cde8032)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})

0s ago: executing program 1 (id=782):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) (async)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
r3 = socket$inet(0x2, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r4 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r5, r4, 0x0, 0x9c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0x8}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x0, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r10, 0x19465, 0x1a704}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r10, 0x19465, 0x1a704}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

kernel console output (not intermixed with test programs):

bond_slave_0: entered allmulticast mode
[   78.378800][ T6808] veth1_to_bond: entered allmulticast mode
[   78.381742][ T6808] bond_slave_1: entered allmulticast mode
[   78.384763][ T6808] veth0_to_team: entered allmulticast mode
[   78.389420][ T6808] veth1_to_team: entered allmulticast mode
[   78.395479][ T6808] veth0_to_batadv: entered allmulticast mode
[   78.398729][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.401506][ T6808] batadv_slave_0: entered allmulticast mode
[   78.405712][ T6808] veth1_to_batadv: entered allmulticast mode
[   78.408988][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.411741][ T6808] batadv_slave_1: entered allmulticast mode
[   78.416828][ T6808] xfrm0: entered allmulticast mode
[   78.419764][ T6808] veth0_to_hsr: entered allmulticast mode
[   78.425098][ T6808] hsr_slave_0: entered allmulticast mode
[   78.428107][ T6808] veth1_to_hsr: entered allmulticast mode
[   78.431465][ T6808] hsr_slave_1: entered allmulticast mode
[   78.436156][ T6808] hsr0: entered allmulticast mode
[   78.439857][ T6808] veth1_virt_wifi: entered allmulticast mode
[   78.443538][ T6808] veth0_virt_wifi: entered allmulticast mode
[   78.447548][ T6808] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   78.450495][ T6808] veth1_vlan: entered allmulticast mode
[   78.454851][ T6808] veth0_vlan: entered allmulticast mode
[   78.462100][ T6808] vlan0: entered allmulticast mode
[   78.467045][ T6808] vlan1: entered allmulticast mode
[   78.469948][ T6808] macvlan0: entered allmulticast mode
[   78.474728][ T6808] macvlan1: entered allmulticast mode
[   78.478045][ T6808] ipvlan0: entered allmulticast mode
[   78.480035][ T6808] ipvlan1: entered allmulticast mode
[   78.482060][ T6808] veth1_macvtap: entered allmulticast mode
[   78.485889][ T6808] veth0_macvtap: entered allmulticast mode
[   78.490735][ T6808] macvtap0: entered allmulticast mode
[   78.495370][ T6808] macsec0: entered allmulticast mode
[   78.499026][ T6808] geneve0: entered allmulticast mode
[   78.504125][ T6808] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.506856][ T6808] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.509860][ T6808] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.513319][ T6808] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.516377][ T6808] geneve1: entered allmulticast mode
[   78.520069][ T6808] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   78.524014][ T6808] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   78.528530][ T6808] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   78.532906][ T6808] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[   78.541494][ T6808] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   78.548159][ T6808] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   78.551358][ T6808] pim6reg: entered allmulticast mode
[   78.556175][ T6808] erspan0.4094: entered allmulticast mode
[   78.558713][ T6808] bridge1: entered allmulticast mode
[   78.561658][ T6808] syztnl1: entered allmulticast mode
[   78.564725][ T6808] syztnl0: entered allmulticast mode
[   78.566923][ T6808] sit1: entered allmulticast mode
[   78.581111][ T6808] gretap1: left promiscuous mode
[   78.583466][ T6808] bridge2: entered allmulticast mode
[   78.586556][ T6808] bridge3: entered allmulticast mode
[   78.589746][ T6808] gretap2: left promiscuous mode
[   78.592395][ T6808] ip6erspan0: entered allmulticast mode
[   78.594837][ T6808] bond0: entered allmulticast mode
[   78.596914][ T6808] vxcan2: entered allmulticast mode
[   78.598822][ T6808] vxcan3: entered allmulticast mode
[   78.600617][ T6808] veth2: entered allmulticast mode
[   78.605581][ T6808] veth3: left promiscuous mode
[   78.607204][ T6808] veth3: entered allmulticast mode
[   78.745633][ T6832] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   78.783881][ T6832] bond1: (slave gretap1): making interface the new active one
[   78.789353][ T6832] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   78.961022][ T6844] __nla_validate_parse: 16 callbacks suppressed
[   78.961040][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[   79.019692][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   79.034580][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'.
[   79.211131][ T6858] lo speed is unknown, defaulting to 1000
[   79.366014][ T6869] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   79.381091][ T6869] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   79.414964][ T6871] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   79.449256][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'.
[   79.507069][ T6877] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[   79.573960][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'.
[   79.590920][ T6871] bond1: (slave gretap1): Releasing active interface
[   79.688572][ T6877] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   79.694196][ T6877] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.867871][ T6884] syzkaller1: tun_chr_ioctl cmd 35111
[   79.873190][ T6885] sctp: [Deprecated]: syz.1.271 (pid 6885) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.873190][ T6885] Use struct sctp_sack_info instead
[   79.967859][   T10] IPVS: starting estimator thread 0...
[   80.006348][ T6895] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   80.029097][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.031745][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[   80.062318][ T6892] IPVS: using max 80 ests per chain, 192000 per kthread
[   80.151656][ T6895] bond1: (slave erspan0): making interface the new active one
[   80.156965][ T6895] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   80.176460][ T6895] syz.1.273 (6895) used greatest stack depth: 19928 bytes left
[   80.220068][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'.
[   80.232557][ T6905] netlink: 'syz.1.275': attribute type 9 has an invalid length.
[   80.254227][ T6905] macvlan0: entered allmulticast mode
[   80.294212][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[   80.368728][ T6915] 8021q: VLANs not supported on bond0
[   80.487985][ T6924] ieee802154 phy0 wpan0: encryption failed: -22
[   80.493169][ T6918] netlink: 104 bytes leftover after parsing attributes in process `syz.0.280'.
[   80.826890][ T6931] sit0: entered promiscuous mode
[   80.833177][ T6931] netlink: 9 bytes leftover after parsing attributes in process `syz.0.283'.
[   81.118767][ T6939] ip6erspan0: entered promiscuous mode
[   81.216014][   T47] cfg80211: failed to load regulatory.db
[   81.433704][ T6954] C: renamed from team_slave_0
[   81.438159][ T6954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   81.448295][ T6954] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   81.450861][ T6954] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   82.386563][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.391090][ T6972] syzkaller0: entered promiscuous mode
[   82.393958][ T6972] syzkaller0: entered allmulticast mode
[   82.401501][ T6980] tipc: Resetting bearer <eth:syzkaller0>
[   82.407024][ T6965] tipc: Resetting bearer <eth:syzkaller0>
[   82.418794][ T6965] tipc: Disabling bearer <eth:syzkaller0>
[   82.470165][ T6984] gretap0: left allmulticast mode
[   82.614901][ T6991] lo: entered promiscuous mode
[   82.618462][ T6991] tunl0: entered promiscuous mode
[   82.620742][ T6991] gre0: entered promiscuous mode
[   82.626115][ T6991] gretap0: entered promiscuous mode
[   82.627949][ T6991] erspan0: entered promiscuous mode
[   82.629830][ T6991] ip_vti0: entered promiscuous mode
[   82.632015][ T6991] ip6_vti0: entered promiscuous mode
[   82.638470][ T6991] sit0: entered promiscuous mode
[   82.640800][ T6991] ip6tnl0: entered promiscuous mode
[   82.646116][ T6991] ip6gre0: entered promiscuous mode
[   82.648229][ T6991] syz_tun: entered promiscuous mode
[   82.650089][ T6991] ip6gretap0: entered promiscuous mode
[   82.653573][ T6991] bridge0: entered promiscuous mode
[   82.656343][ T6991] vcan0: entered promiscuous mode
[   82.658876][ T6991] bond0: entered promiscuous mode
[   82.661359][ T6991] team0: entered promiscuous mode
[   82.678180][ T6991] dummy0: entered promiscuous mode
[   82.680867][ T6991] nlmon0: entered promiscuous mode
[   82.718121][ T6991] caif0: entered promiscuous mode
[   82.728142][ T6991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.771688][ T6997] bond0: (slave wlan1): Releasing backup interface
[   82.776190][ T6997] bond0: Destroying bond
[   82.913546][ T6997] bond0 (unregistering): Released all slaves
[   83.151221][ T7006] netlink: zone id is out of range
[   83.153843][ T7006] netlink: zone id is out of range
[   83.155577][ T7006] netlink: zone id is out of range
[   83.157285][ T7006] netlink: zone id is out of range
[   83.159038][ T7006] netlink: zone id is out of range
[   83.160814][ T7006] netlink: zone id is out of range
[   83.163136][ T7006] netlink: zone id is out of range
[   83.164882][ T7006] netlink: zone id is out of range
[   83.166689][ T7006] netlink: zone id is out of range
[   83.169058][ T7006] validate_nla: 4 callbacks suppressed
[   83.169065][ T7006] netlink: 'syz.1.306': attribute type 5 has an invalid length.
[   84.257116][ T7051] __nla_validate_parse: 14 callbacks suppressed
[   84.257129][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'.
[   84.264984][ T7051] bond0: left allmulticast mode
[   84.331923][ T7053] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.334932][ T7053] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.338135][ T7053] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.341141][ T7053] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.452744][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'.
[   84.932682][ T7058] syzkaller1: entered promiscuous mode
[   84.938235][ T7058] syzkaller1: entered allmulticast mode
[   85.124625][ T7066] lo speed is unknown, defaulting to 1000
[   85.202931][   T55] Bluetooth: hci2: command tx timeout
[   85.465875][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'.
[   85.468911][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'.
[   85.472266][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'.
[   85.488439][ T7092] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   85.491249][ T7097] netlink: 'syz.1.330': attribute type 11 has an invalid length.
[   85.525218][ T7099] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[   85.534171][ T7099] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[   85.585947][ T7107] lo speed is unknown, defaulting to 1000
[   85.597291][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[   85.625464][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'.
[   85.875814][ T7122] ip6_vti0: left allmulticast mode
[   85.878551][ T7122] netlink: 136 bytes leftover after parsing attributes in process `syz.1.336'.
[   86.003350][ T7127] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[   86.065091][ T7135] sctp: [Deprecated]: syz.1.340 (pid 7135) Use of int in max_burst socket option.
[   86.065091][ T7135] Use struct sctp_assoc_value instead
[   86.181349][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'.
[   86.299114][ T7141] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.369699][ T7150] netlink: 'syz.1.346': attribute type 4 has an invalid length.
[   86.380117][ T7150] netlink: 'syz.1.346': attribute type 4 has an invalid length.
[   86.407511][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'.
[   86.678220][ T7167] bridge4: entered promiscuous mode
[   86.679995][ T7167] bridge4: entered allmulticast mode
[   86.743267][ T7169] vlan0: entered allmulticast mode
[   86.745580][ T7169] veth1: entered allmulticast mode
[   86.939528][ T7164] team0 (unregistering): Port device C removed
[   86.948786][ T7164] team0 (unregistering): Port device team_slave_1 removed
[   87.096605][ T7186] : entered promiscuous mode
[   87.310461][ T7205] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   87.349796][ T7205] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.353884][ T7205] bond3: (slave bond4): making interface the new active one
[   87.357049][ T7205] bond3: (slave bond4): Enslaving as an active interface with an up link
[   87.371113][ T7205] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[   87.620813][ T7221] netlink: 'syz.0.368': attribute type 1 has an invalid length.
[   87.655059][ T7221] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   87.664700][ T7221] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.678273][ T7221] veth3: entered promiscuous mode
[   87.683290][ T7221] bond5: (slave veth3): Enslaving as a backup interface with a down link
[   87.778892][   T13] net_ratelimit: 340 callbacks suppressed
[   87.778915][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.792626][ T7225] mac80211_hwsim hwsim3 ": renamed from wlan0
[   88.135891][ T7233] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   88.147690][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.151275][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.286667][ T7234] syzkaller1: entered promiscuous mode
[   88.294547][ T7234] syzkaller1: entered allmulticast mode
[   88.596375][ T7255] bridge9: entered promiscuous mode
[   88.598089][ T7255] bridge9: entered allmulticast mode
[   88.607595][ T7255] team0: Port device bridge9 added
[   88.774998][ T7255] team0 (unregistering): Port device bridge9 removed
[   88.816193][ T7262] geneve2: entered allmulticast mode
[   88.900589][ T7268] bridge10: entered promiscuous mode
[   88.912012][ T7266] netlink: 'syz.2.380': attribute type 1 has an invalid length.
[   88.927123][ T7264] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.008951][ T7266] veth5: entered promiscuous mode
[   89.019468][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.025845][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.122386][ T7283] sit0: left promiscuous mode
[   89.131888][ T7285] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   89.310511][ T7303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.406845][ T7309] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   89.410743][ T7311] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   89.428628][ T7306] __nla_validate_parse: 18 callbacks suppressed
[   89.428648][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.435096][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.438269][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.552988][ T7321] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[   89.579725][ T7323] netlink: 52 bytes leftover after parsing attributes in process `syz.2.399'.
[   89.592991][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   89.596502][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'.
[   89.650544][ T7333] netlink: 'syz.1.403': attribute type 83 has an invalid length.
[   90.770941][ T7359] netlink: 'syz.2.411': attribute type 1 has an invalid length.
[   90.811141][ T7359] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.814246][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[   90.814393][ T7362] netlink: 108 bytes leftover after parsing attributes in process `syz.1.412'.
[   90.824214][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   90.827919][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'.
[   90.829099][ T7362] vlan0: entered allmulticast mode
[   90.868910][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.908858][ T7366] lo speed is unknown, defaulting to 1000
[   91.146879][ T7371] !: renamed from dummy0
[   91.687221][ T7445] xt_hashlimit: size too large, truncated to 1048576
[   91.739777][ T7447] : renamed from bridge_slave_0 (while UP)
[   91.784945][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.018189][ T7463] netlink: 'syz.0.422': attribute type 11 has an invalid length.
[   92.139778][ T7466] netlink: 'syz.0.423': attribute type 10 has an invalid length.
[   92.147371][ T7466] batman_adv: batadv0: Adding interface: virt_wifi0
[   92.150089][ T7466] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.162061][ T7466] batman_adv: batadv0: Interface activated: virt_wifi0
[   92.765213][ T7475] syzkaller1: entered promiscuous mode
[   92.767424][ T7475] syzkaller1: entered allmulticast mode
[   92.980352][ T7485] lo: left allmulticast mode
[   92.983345][ T7485] tunl0: left allmulticast mode
[   92.985492][ T7485] gre0: left allmulticast mode
[   92.995508][ T7485] ip_vti0: left allmulticast mode
[   92.997991][ T7485] sit0: left allmulticast mode
[   93.000188][ T7485] ip6tnl0: left allmulticast mode
[   93.002843][ T7485] ip6gre0: left allmulticast mode
[   93.005072][ T7485] ip6gretap0: left allmulticast mode
[   93.007368][ T7485] bridge0: left allmulticast mode
[   93.009549][ T7485] !: left allmulticast mode
[   93.011814][ T7485] nlmon0: left allmulticast mode
[   93.014860][ T7485] caif0: left allmulticast mode
[   93.017086][ T7485] batadv0: left allmulticast mode
[   93.019413][ T7485] vxcan0: left allmulticast mode
[   93.022017][ T7485] vxcan1: left allmulticast mode
[   93.025539][ T7485] veth0: left allmulticast mode
[   93.027917][ T7485] wg0: left allmulticast mode
[   93.030089][ T7485] wg1: left allmulticast mode
[   93.033567][ T7485] wg2: left allmulticast mode
[   93.035672][ T7485] veth0_to_bridge: left allmulticast mode
[   93.038257][ T7485] veth1_to_bridge: left allmulticast mode
[   93.040820][ T7485] veth0_to_bond: left allmulticast mode
[   93.043270][ T7485] bond_slave_0: left allmulticast mode
[   93.045731][ T7485] veth1_to_bond: left allmulticast mode
[   93.047758][ T7485] bond_slave_1: left allmulticast mode
[   93.050053][ T7485] veth0_to_team: left allmulticast mode
[   93.053389][ T7485] C: left allmulticast mode
[   93.055169][ T7485] veth1_to_team: left allmulticast mode
[   93.057575][ T7485] team_slave_1: left allmulticast mode
[   93.059937][ T7485] veth0_to_batadv: left allmulticast mode
[   93.062642][ T7485] batadv_slave_0: left allmulticast mode
[   93.065168][ T7485] xfrm0: left allmulticast mode
[   93.067701][ T7485] veth0_to_hsr: left allmulticast mode
[   93.070116][ T7485] veth1_to_hsr: left allmulticast mode
[   93.073003][ T7485] hsr0: left allmulticast mode
[   93.075000][ T7485] hsr_slave_0: left allmulticast mode
[   93.077139][ T7485] hsr_slave_1: left allmulticast mode
[   93.079592][ T7485] veth1_virt_wifi: left allmulticast mode
[   93.082036][ T7485] veth0_virt_wifi: left allmulticast mode
[   93.084654][ T7485] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[   93.087685][ T7485] veth1_macvtap: left allmulticast mode
[   93.089600][ T7485] veth0_macvtap: left allmulticast mode
[   93.091997][ T7485] macvtap0: left allmulticast mode
[   93.094677][ T7485] macsec0: left allmulticast mode
[   93.097011][ T7485] geneve0: left allmulticast mode
[   93.099155][ T7485] geneve1: left allmulticast mode
[   93.101489][ T7485] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   93.104404][ T7485] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   93.107649][ T7485] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[   93.110672][ T7485] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[   93.115905][ T7485] netdevsim netdevsim1 netdevsim3: left allmulticast mode
[   93.125222][ T7485] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   93.128260][ T7485] pim6reg: left allmulticast mode
[   93.130165][ T7485] erspan0.4094: left allmulticast mode
[   93.132774][ T7485] erspan0: left allmulticast mode
[   93.134935][ T7485] bridge1: left allmulticast mode
[   93.137088][ T7485] syztnl1: left allmulticast mode
[   93.139487][ T7485] syztnl0: left allmulticast mode
[   93.141753][ T7485] sit1: left allmulticast mode
[   93.144886][ T7485] gretap1: left allmulticast mode
[   93.147031][ T7485] bridge2: left allmulticast mode
[   93.149197][ T7485] bridge3: left allmulticast mode
[   93.151499][ T7485] gretap2: left allmulticast mode
[   93.153879][ T7485] ip6erspan0: left allmulticast mode
[   93.156377][ T7485] vxcan2: left allmulticast mode
[   93.158472][ T7485] vxcan3: left allmulticast mode
[   93.160406][ T7485] veth2: left allmulticast mode
[   93.163340][ T7485] veth3: left allmulticast mode
[   93.168856][ T7485] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   93.171205][ T7485] macvlan0: left allmulticast mode
[   93.175428][ T7485] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.178777][ T7485] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.181881][ T7485] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.185072][ T7485] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.190121][ T7485] vlan0: left allmulticast mode
[   93.191750][ T7485] veth1: left allmulticast mode
[   93.232512][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.245848][ T5681] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   93.250793][ T5681] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   93.280708][ T5860] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   93.832551][ T7510] lo: left promiscuous mode
[   93.835570][ T7510] lo: entered allmulticast mode
[   93.840974][ T7510] tunl0: left promiscuous mode
[   93.846133][ T7510] tunl0: entered allmulticast mode
[   93.850124][ T7510] gre0: left promiscuous mode
[   93.852074][ T7510] gre0: entered allmulticast mode
[   93.855893][ T7510] gretap0: left promiscuous mode
[   93.857705][ T7510] gretap0: entered allmulticast mode
[   93.860811][ T7510] erspan0: left promiscuous mode
[   93.864327][ T7510] erspan0: entered allmulticast mode
[   93.867729][ T7510] ip_vti0: left promiscuous mode
[   93.870020][ T7510] ip_vti0: entered allmulticast mode
[   93.872946][ T7510] ip6_vti0: left promiscuous mode
[   93.874784][ T7510] ip6_vti0: entered allmulticast mode
[   93.877530][ T7510] sit0: entered allmulticast mode
[   93.886145][ T7510] ip6tnl0: left promiscuous mode
[   93.888180][ T7510] ip6tnl0: entered allmulticast mode
[   93.891977][ T7510] ip6gre0: left promiscuous mode
[   93.894199][ T7510] ip6gre0: entered allmulticast mode
[   93.898139][ T7510] syz_tun: left promiscuous mode
[   93.900035][ T7510] syz_tun: entered allmulticast mode
[   93.904587][ T7510] ip6gretap0: left promiscuous mode
[   93.906403][ T7510] ip6gretap0: entered allmulticast mode
[   93.910391][ T7510] bridge0: left promiscuous mode
[   93.912489][ T7510] bridge0: entered allmulticast mode
[   93.917144][ T7510] vcan0: left promiscuous mode
[   93.918883][ T7510] vcan0: entered allmulticast mode
[   93.926335][ T7510] bond0: left promiscuous mode
[   93.927893][ T7510] bond0: entered allmulticast mode
[   93.931411][ T7510] team0: left promiscuous mode
[   93.933386][ T7510] team0: entered allmulticast mode
[   93.937108][ T7510] dummy0: left promiscuous mode
[   93.938676][ T7510] dummy0: entered allmulticast mode
[   93.946657][ T7510] nlmon0: left promiscuous mode
[   93.948273][ T7510] nlmon0: entered allmulticast mode
[   93.951451][ T7510] caif0: left promiscuous mode
[   93.953379][ T7510] caif0: entered allmulticast mode
[   93.955590][ T7510] batadv0: entered allmulticast mode
[   93.959373][ T7510] vxcan0: entered allmulticast mode
[   93.961738][ T7510] vxcan1: entered allmulticast mode
[   93.966160][ T7510] veth0: entered allmulticast mode
[   93.973759][ T7510] wg0: entered allmulticast mode
[   93.977489][ T7510] wg1: entered allmulticast mode
[   93.980855][ T7510] wg2: entered allmulticast mode
[   93.986102][ T7510] veth0_to_bridge: entered allmulticast mode
[   93.989665][ T7510] : entered allmulticast mode
[   93.993289][ T7510] veth1_to_bridge: entered allmulticast mode
[   93.997505][ T7510] bridge_slave_1: entered allmulticast mode
[   94.001959][ T7510] veth0_to_bond: entered allmulticast mode
[   94.007053][ T7510] bond_slave_0: entered allmulticast mode
[   94.020413][ T7510] veth1_to_bond: entered allmulticast mode
[   94.030116][ T7510] bond_slave_1: entered allmulticast mode
[   94.035795][ T7510] veth0_to_team: entered allmulticast mode
[   94.039342][ T7510] team_slave_0: entered allmulticast mode
[   94.041588][ T7510] veth1_to_team: entered allmulticast mode
[   94.046869][ T7510] team_slave_1: entered allmulticast mode
[   94.049405][ T7510] veth0_to_batadv: entered allmulticast mode
[   94.054394][ T7510] batadv_slave_0: entered allmulticast mode
[   94.058824][ T7510] veth1_to_batadv: entered allmulticast mode
[   94.064596][ T7510] batadv_slave_1: entered allmulticast mode
[   94.068468][ T7510] veth0_to_hsr: entered allmulticast mode
[   94.076020][  T789] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   94.079023][ T7510] hsr_slave_0: entered allmulticast mode
[   94.081850][ T7520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.085180][ T7510] veth1_to_hsr: entered allmulticast mode
[   94.086805][ T7510] hsr_slave_1: entered allmulticast mode
[   94.091253][ T7510] hsr0: entered allmulticast mode
[   94.095445][ T7510] veth1_virt_wifi: entered allmulticast mode
[   94.099523][ T7510] veth0_virt_wifi: entered allmulticast mode
[   94.104401][ T7510] veth1_macvtap: entered allmulticast mode
[   94.108427][ T7510] veth0_macvtap: entered allmulticast mode
[   94.121165][ T7510] macvtap0: entered allmulticast mode
[   94.126932][ T7510] macsec0: entered allmulticast mode
[   94.131165][ T7510] geneve0: entered allmulticast mode
[   94.138161][ T7510] geneve1: entered allmulticast mode
[   94.142024][ T7510] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   94.145191][ T7510] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   94.148604][ T7510] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[   94.154826][ T7510] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   94.161940][ T7510] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[   94.170511][ T7510] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   94.173413][ T7510] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   94.177185][ T7510] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[   94.180796][ T7510] ipip0: entered allmulticast mode
[   94.183947][ T7510] bond1: entered allmulticast mode
[   94.203589][ T7510] gre1: entered allmulticast mode
[   94.212990][ T7510] bridge1: entered allmulticast mode
[   94.216263][ T7510] pim6reg: entered allmulticast mode
[   94.219715][ T7510] bridge2: entered allmulticast mode
[   94.226086][ T7510] bridge3: entered allmulticast mode
[   94.230288][ T7510] bridge4: entered allmulticast mode
[   94.233081][  T789] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   94.239283][ T7510] erspan1: entered allmulticast mode
[   94.243427][ T7510] bond2: entered allmulticast mode
[   94.246246][ T7510] batadv1: entered allmulticast mode
[   94.249692][ T7510] bond3: entered allmulticast mode
[   94.253278][ T7510] bridge5: entered allmulticast mode
[   94.257917][ T7510] macsec1: entered allmulticast mode
[   94.260800][ T7510] syztnl1: entered allmulticast mode
[   94.264281][ T7510] bridge6: entered allmulticast mode
[   94.268151][ T7510] syztnl0: entered allmulticast mode
[   94.270111][ T7510] veth2: entered allmulticast mode
[   94.272042][ T7510] veth3: entered allmulticast mode
[   94.274766][ T7510] batadv2: entered allmulticast mode
[   94.277644][ T7510] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.281568][ T7510] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.285968][ T7510] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.289923][ T7510] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.297047][ T7510] veth4: entered allmulticast mode
[   94.299413][ T7510] veth5: left promiscuous mode
[   94.301562][ T7510] veth5: entered allmulticast mode
[   94.305261][ T7510] bond4: entered allmulticast mode
[   94.308410][ T7510] ieee802154 phy0 wpan0: entered allmulticast mode
[   94.553885][ T7549] __nla_validate_parse: 73 callbacks suppressed
[   94.553898][ T7549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.446'.
[   94.570290][ T7549] lo speed is unknown, defaulting to 1000
[   94.628563][ T7560] netlink: 'syz.1.449': attribute type 4 has an invalid length.
[   94.634754][ T7560] netlink: 'syz.1.449': attribute type 4 has an invalid length.
[   94.677945][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[   94.752919][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[   94.757088][ T7573] C: renamed from team_slave_0
[   94.761422][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[   94.797365][ T7573] netlink: 'syz.2.448': attribute type 4 has an invalid length.
[   94.800795][ T7573] netlink: 116 bytes leftover after parsing attributes in process `syz.2.448'.
[   94.805908][ T7573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   94.809548][ T7576] netlink: 'syz.1.452': attribute type 4 has an invalid length.
[   94.815476][ T7576] netlink: 15 bytes leftover after parsing attributes in process `syz.1.452'.
[   94.897087][ T7578] netlink: 'syz.2.453': attribute type 4 has an invalid length.
[   94.900386][ T7578] netlink: 152 bytes leftover after parsing attributes in process `syz.2.453'.
[   94.905509][ T7578] : renamed from bond0
[   94.942027][ T7580] netlink: 'syz.1.454': attribute type 9 has an invalid length.
[   94.966592][ T7582] gretap3: entered allmulticast mode
[   95.293253][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'.
[   95.331489][ T7612] bridge4: port 1(vlan1) entered blocking state
[   95.336378][ T7612] bridge4: port 1(vlan1) entered disabled state
[   95.339505][ T7612] vlan1: entered allmulticast mode
[   95.341932][ T7612] bridge4: entered allmulticast mode
[   95.349051][ T7612] vlan1: left allmulticast mode
[   95.351341][ T7612] bridge4: left allmulticast mode
[   95.524442][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'.
[   95.536931][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[   95.642063][ T7621] SET target dimension over the limit!
[   96.384602][ T7653] bridge7: port 1(vlan1) entered blocking state
[   96.386977][ T7653] bridge7: port 1(vlan1) entered disabled state
[   96.389537][ T7653] vlan1: entered allmulticast mode
[   96.391492][ T7653] bridge7: entered allmulticast mode
[   96.403734][ T7653] vlan1: left allmulticast mode
[   96.405383][ T7653] bridge7: left allmulticast mode
[   96.498126][ T7658] can: request_module (can-proto-0) failed.
[   96.747148][ T7673] bridge8: port 1(vlan1) entered blocking state
[   96.749492][ T7673] bridge8: port 1(vlan1) entered disabled state
[   96.751676][ T7673] vlan1: entered allmulticast mode
[   96.753510][ T7673] bridge8: entered allmulticast mode
[   96.758111][ T7673] vlan1: left allmulticast mode
[   96.759944][ T7673] bridge8: left allmulticast mode
[   96.985565][ T7677] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[   97.512560][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   97.591720][ T7702] Bluetooth: MGMT ver 1.23
[   97.616333][ T7704] bridge12: port 1(vlan0) entered blocking state
[   97.618654][ T7704] bridge12: port 1(vlan0) entered disabled state
[   97.620919][ T7704] vlan0: entered allmulticast mode
[   97.623229][ T7704] bridge12: entered allmulticast mode
[   97.627303][ T7704] vlan0: left allmulticast mode
[   97.629010][ T7704] bridge12: left allmulticast mode
[   97.749817][ T7708] tipc: Cannot configure node identity twice
[   97.896285][ T7720] xt_CT: No such helper "pptp"
[   97.999800][ T7728] netlink: 'syz.0.497': attribute type 10 has an invalid length.
[   98.080034][ T7733] bridge13: port 1(vlan0) entered blocking state
[   98.082646][ T7733] bridge13: port 1(vlan0) entered disabled state
[   98.084790][ T7733] vlan0: entered allmulticast mode
[   98.086462][ T7733] bridge13: entered allmulticast mode
[   98.089464][ T7733] vlan0: left allmulticast mode
[   98.091110][ T7733] bridge13: left allmulticast mode
[   98.177444][ T7736] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[   98.205888][ T7736] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.211828][ T7736] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[   98.234997][ T7736] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   98.258502][ T7736] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address
[   98.265701][ T7736] bond2: (slave ipvlan0): Error -95 calling set_mac_address
[   98.284143][ T7750] bond2: (slave gretap3): making interface the new active one
[   98.289542][ T7750] bond2: (slave gretap3): Enslaving as an active interface with an up link
[   98.367739][ T7759] Cannot find del_set index 2 as target
[   98.371146][ T7760] Cannot find del_set index 2 as target
[   98.437425][ T7768] bridge14: port 1(vlan0) entered blocking state
[   98.439779][ T7768] bridge14: port 1(vlan0) entered disabled state
[   98.443938][ T7768] vlan0: entered allmulticast mode
[   98.445683][ T7768] bridge14: entered allmulticast mode
[   98.448732][ T7768] vlan0: left allmulticast mode
[   98.450387][ T7768] bridge14: left allmulticast mode
[   98.800437][ T7792] bridge15: port 1(vlan0) entered blocking state
[   98.802912][ T7792] bridge15: port 1(vlan0) entered disabled state
[   98.805393][ T7792] vlan0: entered allmulticast mode
[   98.807221][ T7792] bridge15: entered allmulticast mode
[   98.810296][ T7792] vlan0: left allmulticast mode
[   98.811909][ T7792] bridge15: left allmulticast mode
[   99.077731][ T7802] bond7: (slave vti1): The slave device specified does not support setting the MAC address
[   99.081586][ T7802] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode
[   99.088112][ T7802] bond7: (slave vti1): making interface the new active one
[   99.091920][ T7802] bond7: (slave vti1): Enslaving as an active interface with an up link
[   99.143706][ T7805] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  100.235473][ T7818] __nla_validate_parse: 21 callbacks suppressed
[  100.235487][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[  100.541278][ T7819] bridge16: port 1(vlan0) entered blocking state
[  100.545023][ T7819] bridge16: port 1(vlan0) entered disabled state
[  100.553028][ T7819] vlan0: entered allmulticast mode
[  100.555773][ T7819] bridge16: entered allmulticast mode
[  100.573046][ T7819] vlan0: left allmulticast mode
[  100.575215][ T7819] bridge16: left allmulticast mode
[  100.874548][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  100.903695][ T7842] netlink: 52 bytes leftover after parsing attributes in process `syz.2.536'.
[  100.938387][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'.
[  100.955746][ T7850] validate_nla: 4 callbacks suppressed
[  100.955762][ T7850] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[  100.981182][ T7833] hsr_slave_1 (unregistering): left promiscuous mode
[  101.020143][ T7850] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  101.113158][ T7856] syz.2.538: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.127995][ T7856] CPU: 0 UID: 0 PID: 7856 Comm: syz.2.538 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  101.128008][ T7856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.128014][ T7856] Call Trace:
[  101.128019][ T7856]  <TASK>
[  101.128024][ T7856]  dump_stack_lvl+0x189/0x250
[  101.128045][ T7856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.128058][ T7856]  ? __pfx__printk+0x10/0x10
[  101.128068][ T7856]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.128079][ T7856]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.128089][ T7856]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.128099][ T7856]  warn_alloc+0x214/0x310
[  101.128109][ T7856]  ? stack_depot_save_flags+0x40/0x900
[  101.128144][ T7856]  ? __pfx_warn_alloc+0x10/0x10
[  101.128154][ T7856]  ? kasan_save_track+0x4f/0x80
[  101.128165][ T7856]  ? xskq_create+0x56/0x170
[  101.128178][ T7856]  ? xsk_init_queue+0xb0/0x110
[  101.128187][ T7856]  ? xsk_setsockopt+0x43f/0x710
[  101.128197][ T7856]  ? do_sock_setsockopt+0x25a/0x3e0
[  101.128208][ T7856]  ? __x64_sys_setsockopt+0x18b/0x220
[  101.128216][ T7856]  ? do_syscall_64+0xfa/0x3b0
[  101.128222][ T7856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.128232][ T7856]  __vmalloc_node_range_noprof+0x125/0x12f0
[  101.128252][ T7856]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.128262][ T7856]  ? __kasan_kmalloc+0x93/0xb0
[  101.128271][ T7856]  vmalloc_user_noprof+0xad/0xf0
[  101.128280][ T7856]  ? xskq_create+0xbf/0x170
[  101.128291][ T7856]  xskq_create+0xbf/0x170
[  101.128304][ T7856]  xsk_init_queue+0xb0/0x110
[  101.128315][ T7856]  xsk_setsockopt+0x43f/0x710
[  101.128326][ T7856]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.128334][ T7856]  ? __lock_acquire+0xab9/0xd20
[  101.128348][ T7856]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  101.128357][ T7856]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.128367][ T7856]  do_sock_setsockopt+0x25a/0x3e0
[  101.128376][ T7856]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  101.128386][ T7856]  ? __fget_files+0x2a/0x420
[  101.128398][ T7856]  __x64_sys_setsockopt+0x18b/0x220
[  101.128409][ T7856]  do_syscall_64+0xfa/0x3b0
[  101.128414][ T7856]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.128425][ T7856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.128431][ T7856]  ? exc_page_fault+0x9f/0xf0
[  101.128448][ T7856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.128455][ T7856] RIP: 0033:0x7fd68318e929
[  101.128464][ T7856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.128471][ T7856] RSP: 002b:00007fd684080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.128481][ T7856] RAX: ffffffffffffffda RBX: 00007fd6833b5fa0 RCX: 00007fd68318e929
[  101.128488][ T7856] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  101.128493][ T7856] RBP: 00007fd683210b39 R08: 0000000000000004 R09: 0000000000000000
[  101.128498][ T7856] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.128503][ T7856] R13: 0000000000000000 R14: 00007fd6833b5fa0 R15: 00007fff57851128
[  101.128517][ T7856]  </TASK>
[  101.128520][ T7856] Mem-Info:
[  101.241710][ T7856] active_anon:5723 inactive_anon:0 isolated_anon:0
[  101.241710][ T7856]  active_file:1040 inactive_file:38221 isolated_file:0
[  101.241710][ T7856]  unevictable:1768 dirty:47 writeback:0
[  101.241710][ T7856]  slab_reclaimable:9590 slab_unreclaimable:66207
[  101.241710][ T7856]  mapped:18390 shmem:2429 pagetables:978
[  101.241710][ T7856]  sec_pagetables:0 bounce:0
[  101.241710][ T7856]  kernel_misc_reclaimable:0
[  101.241710][ T7856]  free:289360 free_pcp:20058 free_cma:0
[  101.266198][ T7856] Node 0 active_anon:10996kB inactive_anon:0kB active_file:3160kB inactive_file:20876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45236kB dirty:140kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5320kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.281794][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'.
[  101.292537][ T7856] Node 1 active_anon:12100kB inactive_anon:0kB active_file:1000kB inactive_file:132008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28392kB dirty:48kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7068kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.308457][ T7856] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.323616][ T7856] lowmem_reserve[]: 0 815 815 815 815
[  101.325582][ T7856] Node 0 DMA32 free:366944kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10996kB inactive_anon:0kB active_file:3160kB inactive_file:20876kB unevictable:3536kB writepending:140kB present:1556484kB managed:834736kB mlocked:0kB bounce:0kB free_pcp:43716kB local_pcp:23456kB free_cma:0kB
[  101.342364][ T7856] lowmem_reserve[]: 0 0 0 0 0
[  101.344484][ T7856] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  101.364487][ T7856] lowmem_reserve[]: 0 0 854 854 854
[  101.367990][ T7856] Node 1 Normal free:324268kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12100kB inactive_anon:0kB active_file:1000kB inactive_file:132008kB unevictable:3536kB writepending:48kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:28808kB local_pcp:14020kB free_cma:0kB
[  101.369273][ T7861] bridge5: port 1(vlan1) entered blocking state
[  101.383594][ T7861] bridge5: port 1(vlan1) entered disabled state
[  101.385817][ T7861] vlan1: entered allmulticast mode
[  101.387622][ T7861] bridge5: entered allmulticast mode
[  101.389045][ T7856] lowmem_reserve[]: 0 0 0 0 0
[  101.395439][ T7856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.395964][ T7861] vlan1: left allmulticast mode
[  101.401033][ T7856] Node 0 DMA32: 
[  101.414042][ T7861] bridge5: left allmulticast mode
[  101.417189][ T7856] 1360*4kB (UM) 579*8kB (UM) 395*16kB (UM) 280*32kB (UM) 115*64kB (UME) 48*128kB (UME) 22*256kB (UME) 10*512kB (UM) 4*1024kB (UE) 7*2048kB (UME) 73*4096kB (UM) = 367048kB
[  101.440706][ T7856] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  101.446563][ T7856] Node 1 Normal: 1197*4kB (UME) 931*8kB (UME) 424*16kB (UME) 77*32kB (UM) 55*64kB (UME) 36*128kB (UM) 15*256kB (M) 12*512kB (UM) 10*1024kB (UME) 8*2048kB (UM) 63*4096kB (M) = 324268kB
[  101.452773][ T7856] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.456702][ T7856] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.459912][ T7856] 41697 total pagecache pages
[  101.461664][ T7856] 0 pages in swap cache
[  101.466358][ T7856] Free swap  = 124996kB
[  101.468150][ T7856] Total swap = 124996kB
[  101.471837][ T7856] 786301 pages RAM
[  101.479440][ T7856] 0 pages HighMem/MovableOnly
[  101.483832][ T7856] 240369 pages reserved
[  101.485304][ T7856] 0 pages cma reserved
[  101.650999][ T7892] netlink: 100 bytes leftover after parsing attributes in process `syz.0.544'.
[  101.757223][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[  101.796598][   T55] Bluetooth: hci2: link tx timeout
[  101.799477][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.916156][ T7863] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  102.030465][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'.
[  102.057480][ T7910] bridge9: port 1(vlan1) entered blocking state
[  102.059757][ T7910] bridge9: port 1(vlan1) entered disabled state
[  102.061999][ T7910] vlan1: entered allmulticast mode
[  102.063780][ T7910] bridge9: entered allmulticast mode
[  102.066753][ T7910] vlan1: left allmulticast mode
[  102.068462][ T7910] bridge9: left allmulticast mode
[  102.146482][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'.
[  102.149744][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'.
[  102.591717][   T55] Bluetooth: hci2: link tx timeout
[  102.594611][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.612989][ T7931] netlink: 'syz.2.558': attribute type 3 has an invalid length.
[  102.643821][   T33] audit: type=1800 audit(1751930104.313:2): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.557" name="memory.events" dev="tmpfs" ino=986 res=0 errno=0
[  102.690123][ T7935] bridge6: port 1(vlan1) entered blocking state
[  102.697543][ T7935] bridge6: port 1(vlan1) entered disabled state
[  102.699888][ T7935] vlan1: entered allmulticast mode
[  102.701533][ T7935] bridge6: entered allmulticast mode
[  102.708890][ T7935] vlan1: left allmulticast mode
[  102.710622][ T7935] bridge6: left allmulticast mode
[  102.989714][ T7955] gretap1: entered promiscuous mode
[  102.992481][ T7955] gretap1: entered allmulticast mode
[  103.119938][ T7961] bridge7: port 1(vlan1) entered blocking state
[  103.123880][ T7961] bridge7: port 1(vlan1) entered disabled state
[  103.127813][ T7961] vlan1: entered allmulticast mode
[  103.130259][ T7961] bridge7: entered allmulticast mode
[  103.136264][ T7961] vlan1: left allmulticast mode
[  103.138717][ T7961] bridge7: left allmulticast mode
[  103.157140][ T7959] lo speed is unknown, defaulting to 1000
[  103.325358][ T7974] bond1: (slave erspan0): Releasing active interface
[  103.328503][ T7974] bridge_slave_0: left allmulticast mode
[  103.330386][ T7974] bridge_slave_0: left promiscuous mode
[  103.352530][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.365809][ T7974] bridge_slave_1: left allmulticast mode
[  103.367675][ T7974] bridge_slave_1: left promiscuous mode
[  103.369728][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.375071][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.379934][ T7974] bond2: (slave gretap3): Releasing active interface
[  103.548147][ T7983] bridge10: port 1(vlan1) entered blocking state
[  103.551258][ T7983] bridge10: port 1(vlan1) entered disabled state
[  103.555239][ T7983] vlan1: entered allmulticast mode
[  103.557379][ T7983] bridge10: entered allmulticast mode
[  103.562631][ T7983] vlan1: left allmulticast mode
[  103.565686][ T7983] bridge10: left allmulticast mode
[  103.667064][ T7992] macvtap1: entered promiscuous mode
[  103.669356][ T7992] erspan0: entered promiscuous mode
[  103.671664][ T7992] macvtap1: entered allmulticast mode
[  103.691549][ T7994] ipvlan0: entered promiscuous mode
[  103.701714][ T7994] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  103.723783][ T7994] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.846214][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  103.920143][ T8010] bridge11: port 1(vlan1) entered blocking state
[  103.923264][ T8010] bridge11: port 1(vlan1) entered disabled state
[  103.925518][ T8010] vlan1: entered allmulticast mode
[  103.927200][ T8010] bridge11: entered allmulticast mode
[  103.931543][ T8010] vlan1: left allmulticast mode
[  103.934930][ T8010] bridge11: left allmulticast mode
[  104.178301][ T8032] netlink: 'syz.0.596': attribute type 33 has an invalid length.
[  104.351717][ T8047] lo speed is unknown, defaulting to 1000
[  104.426430][ T8047] can: request_module (can-proto-4) failed.
[  104.627327][ T8060] bridge8: port 1(vlan1) entered blocking state
[  104.630350][ T8060] bridge8: port 1(vlan1) entered disabled state
[  104.642855][ T8060] vlan1: entered allmulticast mode
[  104.645544][ T8060] bridge8: entered allmulticast mode
[  104.650591][ T8060] vlan1: left allmulticast mode
[  104.653308][ T8060] bridge8: left allmulticast mode
[  104.664505][ T8064] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  104.894460][ T8077] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  104.917821][ T8077] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.971299][ T8086] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  104.980165][ T8086] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  105.001359][ T8086] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  105.095830][ T8090] bridge9: port 1(vlan1) entered blocking state
[  105.097322][ T8094] netlink: 'syz.0.608': attribute type 10 has an invalid length.
[  105.102934][ T8093] netlink: 'syz.0.608': attribute type 10 has an invalid length.
[  105.113465][ T8090] bridge9: port 1(vlan1) entered disabled state
[  105.123234][ T8090] vlan1: entered allmulticast mode
[  105.127977][ T8090] bridge9: entered allmulticast mode
[  105.134569][ T8090] vlan1: left allmulticast mode
[  105.136312][ T8090] bridge9: left allmulticast mode
[  105.182007][ T8097] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[  105.188026][ T8097] bond0: (slave vcan1): Error -95 calling set_mac_address
[  105.266201][ T8105] __nla_validate_parse: 23 callbacks suppressed
[  105.266222][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'.
[  105.306587][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'.
[  105.426018][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'.
[  105.496714][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'.
[  105.546164][ T8126] bridge12: port 1(vlan1) entered blocking state
[  105.554761][ T8126] bridge12: port 1(vlan1) entered disabled state
[  105.560169][ T8126] vlan1: entered allmulticast mode
[  105.564359][ T8126] bridge12: entered allmulticast mode
[  105.575824][ T8126] vlan1: left allmulticast mode
[  105.579528][ T8126] bridge12: left allmulticast mode
[  105.727571][ T8152] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.626'.
[  105.860468][ T8166] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[  105.863933][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'.
[  105.870427][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.896168][ T8168] bridge13: port 1(vlan1) entered blocking state
[  105.898797][ T8168] bridge13: port 1(vlan1) entered disabled state
[  105.904352][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.907576][ T8168] vlan1: entered allmulticast mode
[  105.912382][ T8168] bridge13: entered allmulticast mode
[  105.918501][ T8168] vlan1: left allmulticast mode
[  105.920094][ T8168] bridge13: left allmulticast mode
[  106.000236][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[  106.007042][ T8173] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  106.013928][ T8173] tipc: Enabled bearer <udp:syz1>, priority 6
[  106.035251][ T8177] lo speed is unknown, defaulting to 1000
[  106.097174][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'.
[  106.119511][ T8183] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.126622][ T8183] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.130122][ T8183] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.135265][ T8183] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.138460][ T8183] geneve3: entered allmulticast mode
[  106.191145][ T8183] lo speed is unknown, defaulting to 1000
[  106.377416][ T8199] netlink: 'syz.1.639': attribute type 12 has an invalid length.
[  106.454014][ T8203] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  106.456272][ T8203] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  106.617679][ T8210] bridge14: port 1(vlan1) entered blocking state
[  106.620597][ T8210] bridge14: port 1(vlan1) entered disabled state
[  106.627035][ T8210] vlan1: entered allmulticast mode
[  106.629347][ T8210] bridge14: entered allmulticast mode
[  106.640759][ T8210] vlan1: left allmulticast mode
[  106.643632][ T8210] bridge14: left allmulticast mode
[  106.729336][ T8219] netlink: 'syz.0.644': attribute type 1 has an invalid length.
[  106.965463][ T8244] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  106.968147][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.013971][  T789] tipc: Node number set to 3598600274
[  107.225159][ T8250] bridge15: port 1(vlan1) entered blocking state
[  107.233945][ T8250] bridge15: port 1(vlan1) entered disabled state
[  107.236191][ T8250] vlan1: entered allmulticast mode
[  107.240346][ T8250] bridge15: entered allmulticast mode
[  107.244539][ T8250] vlan1: left allmulticast mode
[  107.246187][ T8250] bridge15: left allmulticast mode
[  107.467058][ T8265] netlink: 'syz.2.660': attribute type 13 has an invalid length.
[  107.469836][ T8265] netlink: 'syz.2.660': attribute type 17 has an invalid length.
[  107.477390][ T8265] lo: left allmulticast mode
[  107.484608][ T8265] tunl0: left allmulticast mode
[  107.487087][ T8265] gre0: left allmulticast mode
[  107.489676][ T8265] gretap0: left allmulticast mode
[  107.503524][ T8265] ip_vti0: left allmulticast mode
[  107.506616][ T8265] ip6_vti0: left allmulticast mode
[  107.510610][ T8265] sit0: left allmulticast mode
[  107.516516][ T8265] ip6tnl0: left allmulticast mode
[  107.520195][ T8265] ip6gre0: left allmulticast mode
[  107.523911][ T8265] syz_tun: left allmulticast mode
[  107.535718][ T8265] ip6gretap0: left allmulticast mode
[  107.544903][ T8265] bridge0: left allmulticast mode
[  107.547414][ T8265] vcan0: left allmulticast mode
[  107.549510][ T8265] : left allmulticast mode
[  107.551765][ T8265] 8021q: adding VLAN 0 to HW filter on device 
[  107.560422][ T8265] team0: left allmulticast mode
[  107.562995][ T8265] 8021q: adding VLAN 0 to HW filter on device team0
[  107.565747][ T8265] dummy0: left allmulticast mode
[  107.568724][ T8265] nlmon0: left allmulticast mode
[  107.571488][ T8265] caif0: left allmulticast mode
[  107.575409][ T8265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.600081][ T8268] lo speed is unknown, defaulting to 1000
[  107.645196][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.701281][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.757362][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.239287][ T8279] netlink: 'syz.1.662': attribute type 21 has an invalid length.
[  108.338800][ T8281] bridge12: port 1(vlan1) entered blocking state
[  108.341371][ T8281] bridge12: port 1(vlan1) entered disabled state
[  108.344516][ T8281] vlan1: entered allmulticast mode
[  108.346362][ T8281] bridge12: entered allmulticast mode
[  108.351920][ T8281] vlan1: left allmulticast mode
[  108.354097][ T8281] bridge12: left allmulticast mode
[  108.367282][ T8284] veth0_to_team: left allmulticast mode
[  108.371205][ T8284] netlink: 'syz.2.664': attribute type 16 has an invalid length.
[  108.374981][ T8284] netlink: 'syz.2.664': attribute type 17 has an invalid length.
[  108.389157][ T8284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.658550][ T8292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.731562][ T8301] : entered promiscuous mode
[  108.744632][ T8292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.799804][ T8292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.848460][ T8306] bridge13: port 1(vlan1) entered blocking state
[  108.851468][ T8306] bridge13: port 1(vlan1) entered disabled state
[  108.855554][ T8306] vlan1: entered allmulticast mode
[  108.857290][ T8306] bridge13: entered allmulticast mode
[  108.862724][ T8306] vlan1: left allmulticast mode
[  108.864747][ T8306] bridge13: left allmulticast mode
[  108.877335][ T8292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.961518][ T8292] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.993266][ T8292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.003628][ T8292] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.013689][ T8292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.340620][ T8337] bridge16: port 1(vlan1) entered blocking state
[  109.352690][ T8337] bridge16: port 1(vlan1) entered disabled state
[  109.355360][ T8337] vlan1: entered allmulticast mode
[  109.357156][ T8337] bridge16: entered allmulticast mode
[  109.360413][ T8337] vlan1: left allmulticast mode
[  109.365405][ T8337] bridge16: left allmulticast mode
[  109.484499][ T8344] netlink: 'syz.0.681': attribute type 16 has an invalid length.
[  109.488219][ T8344] netlink: 'syz.0.681': attribute type 17 has an invalid length.
[  109.522262][ T8344] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.525675][ T8344] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.528986][ T8344] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.532719][ T8344] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.609658][ T8353] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  109.618294][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.0.685 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  109.618319][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.618329][ T8353] Call Trace:
[  109.618335][ T8353]  <TASK>
[  109.618342][ T8353]  dump_stack_lvl+0x189/0x250
[  109.618373][ T8353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.618396][ T8353]  ? __pfx__printk+0x10/0x10
[  109.618412][ T8353]  ? kernfs_path_from_node+0x2c/0x260
[  109.618429][ T8353]  ? kernfs_path_from_node+0x2c/0x260
[  109.618441][ T8353]  ? kernfs_path_from_node+0x2c/0x260
[  109.618455][ T8353]  ? kernfs_path_from_node+0x22c/0x260
[  109.618468][ T8353]  ? kernfs_path_from_node+0x2c/0x260
[  109.618485][ T8353]  sysfs_warn_dup+0x8e/0xa0
[  109.618500][ T8353]  sysfs_do_create_link_sd+0xc0/0x110
[  109.618516][ T8353]  device_add_class_symlinks+0x1cf/0x240
[  109.618534][ T8353]  device_add+0x475/0xb50
[  109.618550][ T8353]  wiphy_register+0x199a/0x26b0
[  109.618576][ T8353]  ? __pfx_wiphy_register+0x10/0x10
[  109.618591][ T8353]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  109.618613][ T8353]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  109.618633][ T8353]  ieee80211_register_hw+0x33e1/0x4120
[  109.618665][ T8353]  ? ieee80211_register_hw+0x13f1/0x4120
[  109.618687][ T8353]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  109.618706][ T8353]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.618729][ T8353]  ? __hrtimer_setup+0x187/0x210
[  109.618747][ T8353]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  109.618764][ T8353]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  109.618806][ T8353]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  109.618826][ T8353]  ? trace_kmalloc+0x1f/0xd0
[  109.618838][ T8353]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  109.618848][ T8353]  ? kstrndup+0xbf/0x160
[  109.618872][ T8353]  hwsim_new_radio_nl+0xea4/0x1b10
[  109.618888][ T8353]  ? __pfx___nla_validate_parse+0x10/0x10
[  109.618917][ T8353]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.618941][ T8353]  ? __nla_parse+0x40/0x60
[  109.618961][ T8353]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  109.618987][ T8353]  genl_family_rcv_msg_doit+0x215/0x300
[  109.619039][ T8353]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  109.619071][ T8353]  ? bpf_lsm_capable+0x9/0x20
[  109.619084][ T8353]  ? security_capable+0x7e/0x2e0
[  109.619107][ T8353]  genl_rcv_msg+0x60e/0x790
[  109.619132][ T8353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.619150][ T8353]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.619175][ T8353]  netlink_rcv_skb+0x208/0x470
[  109.619192][ T8353]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.619211][ T8353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.619237][ T8353]  ? down_read+0x1ad/0x2e0
[  109.619253][ T8353]  genl_rcv+0x28/0x40
[  109.619268][ T8353]  netlink_unicast+0x75b/0x8d0
[  109.619296][ T8353]  netlink_sendmsg+0x805/0xb30
[  109.619316][ T8353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.619332][ T8353]  ? aa_sock_msg_perm+0x94/0x160
[  109.619351][ T8353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.619367][ T8353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.619381][ T8353]  __sock_sendmsg+0x21c/0x270
[  109.619405][ T8353]  ____sys_sendmsg+0x505/0x830
[  109.619425][ T8353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.619448][ T8353]  ? import_iovec+0x74/0xa0
[  109.619463][ T8353]  ___sys_sendmsg+0x21f/0x2a0
[  109.619479][ T8353]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.619522][ T8353]  ? __fget_files+0x2a/0x420
[  109.619535][ T8353]  ? __fget_files+0x3a0/0x420
[  109.619558][ T8353]  __x64_sys_sendmsg+0x19b/0x260
[  109.619575][ T8353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.619600][ T8353]  ? rcu_is_watching+0x15/0xb0
[  109.619623][ T8353]  ? do_syscall_64+0xbe/0x3b0
[  109.619639][ T8353]  do_syscall_64+0xfa/0x3b0
[  109.619647][ T8353]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.619661][ T8353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.619672][ T8353]  ? exc_page_fault+0x9f/0xf0
[  109.619691][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.619702][ T8353] RIP: 0033:0x7f4b0118e929
[  109.619713][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.619724][ T8353] RSP: 002b:00007f4b01fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.619738][ T8353] RAX: ffffffffffffffda RBX: 00007f4b013b5fa0 RCX: 00007f4b0118e929
[  109.619748][ T8353] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  109.619755][ T8353] RBP: 00007f4b01210b39 R08: 0000000000000000 R09: 0000000000000000
[  109.619762][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.619770][ T8353] R13: 0000000000000000 R14: 00007f4b013b5fa0 R15: 00007ffc11612438
[  109.619792][ T8353]  </TASK>
[  109.915858][ T8363] bridge18: port 1(vlan0) entered blocking state
[  109.918849][ T8363] bridge18: port 1(vlan0) entered disabled state
[  109.924380][ T8363] vlan0: entered allmulticast mode
[  109.927051][ T8363] bridge18: entered allmulticast mode
[  109.973770][ T8363] vlan0: left allmulticast mode
[  109.975628][ T8363] bridge18: left allmulticast mode
[  110.212672][ T8385] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  110.217530][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.1.695 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  110.217552][ T8385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.217560][ T8385] Call Trace:
[  110.217585][ T8385]  <TASK>
[  110.217591][ T8385]  dump_stack_lvl+0x189/0x250
[  110.217620][ T8385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.217638][ T8385]  ? __pfx__printk+0x10/0x10
[  110.217652][ T8385]  ? kernfs_path_from_node+0x2c/0x260
[  110.217667][ T8385]  ? kernfs_path_from_node+0x2c/0x260
[  110.217678][ T8385]  ? kernfs_path_from_node+0x2c/0x260
[  110.217692][ T8385]  ? kernfs_path_from_node+0x22c/0x260
[  110.217703][ T8385]  ? kernfs_path_from_node+0x2c/0x260
[  110.217713][ T8385]  sysfs_warn_dup+0x8e/0xa0
[  110.217722][ T8385]  sysfs_do_create_link_sd+0xc0/0x110
[  110.217731][ T8385]  device_add_class_symlinks+0x1cf/0x240
[  110.217742][ T8385]  device_add+0x475/0xb50
[  110.217752][ T8385]  wiphy_register+0x199a/0x26b0
[  110.217772][ T8385]  ? __pfx_wiphy_register+0x10/0x10
[  110.217780][ T8385]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  110.217794][ T8385]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  110.217805][ T8385]  ieee80211_register_hw+0x33e1/0x4120
[  110.217823][ T8385]  ? ieee80211_register_hw+0x13f1/0x4120
[  110.217837][ T8385]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  110.217850][ T8385]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.217866][ T8385]  ? __hrtimer_setup+0x187/0x210
[  110.217877][ T8385]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  110.217887][ T8385]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  110.217912][ T8385]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  110.217922][ T8385]  ? trace_kmalloc+0x1f/0xd0
[  110.217929][ T8385]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  110.217936][ T8385]  ? kstrndup+0xbf/0x160
[  110.217949][ T8385]  hwsim_new_radio_nl+0xea4/0x1b10
[  110.217959][ T8385]  ? __pfx___nla_validate_parse+0x10/0x10
[  110.217978][ T8385]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.217990][ T8385]  ? __nla_parse+0x40/0x60
[  110.218027][ T8385]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  110.218044][ T8385]  genl_family_rcv_msg_doit+0x215/0x300
[  110.218061][ T8385]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  110.218079][ T8385]  ? bpf_lsm_capable+0x9/0x20
[  110.218087][ T8385]  ? security_capable+0x7e/0x2e0
[  110.218112][ T8385]  genl_rcv_msg+0x60e/0x790
[  110.218127][ T8385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.218138][ T8385]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.218153][ T8385]  netlink_rcv_skb+0x208/0x470
[  110.218163][ T8385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.218175][ T8385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.218192][ T8385]  ? down_read+0x1ad/0x2e0
[  110.218203][ T8385]  genl_rcv+0x28/0x40
[  110.218213][ T8385]  netlink_unicast+0x75b/0x8d0
[  110.218226][ T8385]  netlink_sendmsg+0x805/0xb30
[  110.218240][ T8385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.218251][ T8385]  ? aa_sock_msg_perm+0x94/0x160
[  110.218264][ T8385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.218276][ T8385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.218284][ T8385]  __sock_sendmsg+0x21c/0x270
[  110.218298][ T8385]  ____sys_sendmsg+0x505/0x830
[  110.218309][ T8385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.218322][ T8385]  ? import_iovec+0x74/0xa0
[  110.218331][ T8385]  ___sys_sendmsg+0x21f/0x2a0
[  110.218341][ T8385]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.218368][ T8385]  ? __fget_files+0x2a/0x420
[  110.218376][ T8385]  ? __fget_files+0x3a0/0x420
[  110.218388][ T8385]  __x64_sys_sendmsg+0x19b/0x260
[  110.218398][ T8385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.218411][ T8385]  ? rcu_is_watching+0x15/0xb0
[  110.218426][ T8385]  ? do_syscall_64+0xbe/0x3b0
[  110.218435][ T8385]  do_syscall_64+0xfa/0x3b0
[  110.218441][ T8385]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.218450][ T8385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.218458][ T8385]  ? exc_page_fault+0x9f/0xf0
[  110.218469][ T8385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.218476][ T8385] RIP: 0033:0x7ffb9ab8e929
[  110.218485][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.218491][ T8385] RSP: 002b:00007ffb9ba4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.218501][ T8385] RAX: ffffffffffffffda RBX: 00007ffb9adb5fa0 RCX: 00007ffb9ab8e929
[  110.218506][ T8385] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  110.218511][ T8385] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  110.218515][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.218519][ T8385] R13: 0000000000000000 R14: 00007ffb9adb5fa0 R15: 00007ffd3a3f6838
[  110.218532][ T8385]  </TASK>
[  110.275691][ T8379] __nla_validate_parse: 18 callbacks suppressed
[  110.275702][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  110.379917][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  110.394497][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.474668][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[  110.494478][ T8390] bridge14: port 1(vlan1) entered blocking state
[  110.497027][ T8390] bridge14: port 1(vlan1) entered disabled state
[  110.499473][ T8390] vlan1: entered allmulticast mode
[  110.501567][ T8390] bridge14: entered allmulticast mode
[  110.508889][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.698'.
[  110.508891][ T8393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.698'.
[  110.518269][ T8390] vlan1: left allmulticast mode
[  110.520259][ T8390] bridge14: left allmulticast mode
[  110.603748][ T8399] netlink: 2 bytes leftover after parsing attributes in process `syz.1.699'.
[  110.864305][ T8447] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  110.904424][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.0.703 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  110.904442][ T8447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.904448][ T8447] Call Trace:
[  110.904453][ T8447]  <TASK>
[  110.904458][ T8447]  dump_stack_lvl+0x189/0x250
[  110.904479][ T8447]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.904492][ T8447]  ? __pfx__printk+0x10/0x10
[  110.904504][ T8447]  ? kernfs_path_from_node+0x2c/0x260
[  110.904516][ T8447]  ? kernfs_path_from_node+0x2c/0x260
[  110.904525][ T8447]  ? kernfs_path_from_node+0x2c/0x260
[  110.904536][ T8447]  ? kernfs_path_from_node+0x22c/0x260
[  110.904544][ T8447]  ? kernfs_path_from_node+0x2c/0x260
[  110.904555][ T8447]  sysfs_warn_dup+0x8e/0xa0
[  110.904566][ T8447]  sysfs_do_create_link_sd+0xc0/0x110
[  110.904576][ T8447]  device_add_class_symlinks+0x1cf/0x240
[  110.904586][ T8447]  device_add+0x475/0xb50
[  110.904596][ T8447]  wiphy_register+0x199a/0x26b0
[  110.904616][ T8447]  ? __pfx_wiphy_register+0x10/0x10
[  110.904624][ T8447]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  110.904637][ T8447]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  110.904649][ T8447]  ieee80211_register_hw+0x33e1/0x4120
[  110.904666][ T8447]  ? ieee80211_register_hw+0x13f1/0x4120
[  110.904679][ T8447]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  110.904693][ T8447]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.904710][ T8447]  ? __hrtimer_setup+0x187/0x210
[  110.904721][ T8447]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  110.904732][ T8447]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  110.904756][ T8447]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  110.904767][ T8447]  ? trace_kmalloc+0x1f/0xd0
[  110.904773][ T8447]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  110.904781][ T8447]  ? kstrndup+0xbf/0x160
[  110.904794][ T8447]  hwsim_new_radio_nl+0xea4/0x1b10
[  110.904803][ T8447]  ? __pfx___nla_validate_parse+0x10/0x10
[  110.904821][ T8447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.904835][ T8447]  ? __nla_parse+0x40/0x60
[  110.904849][ T8447]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  110.904863][ T8447]  genl_family_rcv_msg_doit+0x215/0x300
[  110.904877][ T8447]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  110.904893][ T8447]  ? bpf_lsm_capable+0x9/0x20
[  110.904899][ T8447]  ? security_capable+0x7e/0x2e0
[  110.904912][ T8447]  genl_rcv_msg+0x60e/0x790
[  110.904925][ T8447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.904934][ T8447]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  110.904948][ T8447]  netlink_rcv_skb+0x208/0x470
[  110.904957][ T8447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  110.904968][ T8447]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.905008][ T8447]  ? down_read+0x1ad/0x2e0
[  110.905021][ T8447]  genl_rcv+0x28/0x40
[  110.905031][ T8447]  netlink_unicast+0x75b/0x8d0
[  110.905045][ T8447]  netlink_sendmsg+0x805/0xb30
[  110.905065][ T8447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.905076][ T8447]  ? aa_sock_msg_perm+0x94/0x160
[  110.905093][ T8447]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.905106][ T8447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.905119][ T8447]  __sock_sendmsg+0x21c/0x270
[  110.905140][ T8447]  ____sys_sendmsg+0x505/0x830
[  110.905161][ T8447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.905182][ T8447]  ? import_iovec+0x74/0xa0
[  110.905199][ T8447]  ___sys_sendmsg+0x21f/0x2a0
[  110.905217][ T8447]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.905245][ T8447]  ? __fget_files+0x2a/0x420
[  110.905254][ T8447]  ? __fget_files+0x3a0/0x420
[  110.905266][ T8447]  __x64_sys_sendmsg+0x19b/0x260
[  110.905276][ T8447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.905290][ T8447]  ? rcu_is_watching+0x15/0xb0
[  110.905304][ T8447]  ? do_syscall_64+0xbe/0x3b0
[  110.905315][ T8447]  do_syscall_64+0xfa/0x3b0
[  110.905321][ T8447]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.905331][ T8447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.905341][ T8447]  ? exc_page_fault+0x9f/0xf0
[  110.905353][ T8447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.905361][ T8447] RIP: 0033:0x7f4b0118e929
[  110.905372][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.905383][ T8447] RSP: 002b:00007f4b01fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.905397][ T8447] RAX: ffffffffffffffda RBX: 00007f4b013b5fa0 RCX: 00007f4b0118e929
[  110.905407][ T8447] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  110.905415][ T8447] RBP: 00007f4b01210b39 R08: 0000000000000000 R09: 0000000000000000
[  110.905425][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.905432][ T8447] R13: 0000000000000000 R14: 00007f4b013b5fa0 R15: 00007ffc11612438
[  110.905454][ T8447]  </TASK>
[  111.179889][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'.
[  111.219083][ T8471] bridge15: port 1(vlan1) entered blocking state
[  111.221828][ T8471] bridge15: port 1(vlan1) entered disabled state
[  111.224678][ T8471] vlan1: entered allmulticast mode
[  111.226355][ T8471] bridge15: entered allmulticast mode
[  111.236633][ T8471] vlan1: left allmulticast mode
[  111.238340][ T8471] bridge15: left allmulticast mode
[  111.256270][ T8476] bridge19: entered allmulticast mode
[  111.297783][ T8480] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  111.331767][ T8480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  111.336573][ T8480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  111.340627][ T8483] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[  111.342385][ T8480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  111.346975][ T8480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  111.347788][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'.
[  111.354017][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'.
[  111.365432][ T8480] bond5: (slave geneve3): making interface the new active one
[  111.370262][ T8480] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  111.397843][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'.
[  111.403120][ T8480] 8021q: adding VLAN 0 to HW filter on device bond5
[  111.478807][ T8496] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  111.484562][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.0.713 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  111.484576][ T8496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.484580][ T8496] Call Trace:
[  111.484585][ T8496]  <TASK>
[  111.484591][ T8496]  dump_stack_lvl+0x189/0x250
[  111.484612][ T8496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.484626][ T8496]  ? __pfx__printk+0x10/0x10
[  111.484635][ T8496]  ? kernfs_path_from_node+0x2c/0x260
[  111.484646][ T8496]  ? kernfs_path_from_node+0x2c/0x260
[  111.484657][ T8496]  ? kernfs_path_from_node+0x2c/0x260
[  111.484667][ T8496]  ? kernfs_path_from_node+0x22c/0x260
[  111.484676][ T8496]  ? kernfs_path_from_node+0x2c/0x260
[  111.484686][ T8496]  sysfs_warn_dup+0x8e/0xa0
[  111.484696][ T8496]  sysfs_do_create_link_sd+0xc0/0x110
[  111.484707][ T8496]  device_add_class_symlinks+0x1cf/0x240
[  111.484717][ T8496]  device_add+0x475/0xb50
[  111.484726][ T8496]  wiphy_register+0x199a/0x26b0
[  111.484742][ T8496]  ? __pfx_wiphy_register+0x10/0x10
[  111.484750][ T8496]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  111.484764][ T8496]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  111.484777][ T8496]  ieee80211_register_hw+0x33e1/0x4120
[  111.484795][ T8496]  ? ieee80211_register_hw+0x13f1/0x4120
[  111.484810][ T8496]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  111.484821][ T8496]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.484837][ T8496]  ? __hrtimer_setup+0x187/0x210
[  111.484849][ T8496]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  111.484860][ T8496]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  111.484887][ T8496]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  111.484899][ T8496]  ? trace_kmalloc+0x1f/0xd0
[  111.484905][ T8496]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  111.484913][ T8496]  ? kstrndup+0xbf/0x160
[  111.484926][ T8496]  hwsim_new_radio_nl+0xea4/0x1b10
[  111.484934][ T8496]  ? __pfx___nla_validate_parse+0x10/0x10
[  111.484953][ T8496]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.484966][ T8496]  ? __nla_parse+0x40/0x60
[  111.485003][ T8496]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  111.485022][ T8496]  genl_family_rcv_msg_doit+0x215/0x300
[  111.485038][ T8496]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  111.485055][ T8496]  ? bpf_lsm_capable+0x9/0x20
[  111.485064][ T8496]  ? security_capable+0x7e/0x2e0
[  111.485077][ T8496]  genl_rcv_msg+0x60e/0x790
[  111.485092][ T8496]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.485103][ T8496]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.485118][ T8496]  netlink_rcv_skb+0x208/0x470
[  111.485128][ T8496]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.485140][ T8496]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.485157][ T8496]  ? down_read+0x1ad/0x2e0
[  111.485167][ T8496]  genl_rcv+0x28/0x40
[  111.485178][ T8496]  netlink_unicast+0x75b/0x8d0
[  111.485192][ T8496]  netlink_sendmsg+0x805/0xb30
[  111.485205][ T8496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.485216][ T8496]  ? aa_sock_msg_perm+0x94/0x160
[  111.485226][ T8496]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  111.485235][ T8496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.485244][ T8496]  __sock_sendmsg+0x21c/0x270
[  111.485257][ T8496]  ____sys_sendmsg+0x505/0x830
[  111.485268][ T8496]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.485281][ T8496]  ? import_iovec+0x74/0xa0
[  111.485290][ T8496]  ___sys_sendmsg+0x21f/0x2a0
[  111.485300][ T8496]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.485324][ T8496]  ? __fget_files+0x2a/0x420
[  111.485332][ T8496]  ? __fget_files+0x3a0/0x420
[  111.485344][ T8496]  __x64_sys_sendmsg+0x19b/0x260
[  111.485354][ T8496]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.485367][ T8496]  ? rcu_is_watching+0x15/0xb0
[  111.485381][ T8496]  ? do_syscall_64+0xbe/0x3b0
[  111.485390][ T8496]  do_syscall_64+0xfa/0x3b0
[  111.485395][ T8496]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.485406][ T8496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.485414][ T8496]  ? exc_page_fault+0x9f/0xf0
[  111.485425][ T8496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.485432][ T8496] RIP: 0033:0x7f4b0118e929
[  111.485441][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.485448][ T8496] RSP: 002b:00007f4b01fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.485458][ T8496] RAX: ffffffffffffffda RBX: 00007f4b013b5fa0 RCX: 00007f4b0118e929
[  111.485463][ T8496] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  111.485468][ T8496] RBP: 00007f4b01210b39 R08: 0000000000000000 R09: 0000000000000000
[  111.485473][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.485477][ T8496] R13: 0000000000000000 R14: 00007f4b013b5fa0 R15: 00007ffc11612438
[  111.485489][ T8496]  </TASK>
[  111.665724][ T8504] bridge17: port 1(vlan1) entered blocking state
[  111.668307][ T8504] bridge17: port 1(vlan1) entered disabled state
[  111.670763][ T8504] vlan1: entered allmulticast mode
[  111.672744][ T8504] bridge17: entered allmulticast mode
[  111.681563][ T8504] vlan1: left allmulticast mode
[  111.684185][ T8504] bridge17: left allmulticast mode
[  111.694013][ T8506] netlink: 'syz.0.716': attribute type 15 has an invalid length.
[  111.697509][ T8506] netlink: 'syz.0.716': attribute type 15 has an invalid length.
[  111.784786][ T8508] SET target dimension over the limit!
[  111.881168][ T8514] bridge0: entered promiscuous mode
[  111.907563][ T8514] vlan1: entered promiscuous mode
[  112.099340][ T8542] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  112.112074][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.1.723 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  112.112101][ T8542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.112109][ T8542] Call Trace:
[  112.112116][ T8542]  <TASK>
[  112.112124][ T8542]  dump_stack_lvl+0x189/0x250
[  112.112175][ T8542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.112199][ T8542]  ? __pfx__printk+0x10/0x10
[  112.112214][ T8542]  ? kernfs_path_from_node+0x2c/0x260
[  112.112229][ T8542]  ? kernfs_path_from_node+0x2c/0x260
[  112.112241][ T8542]  ? kernfs_path_from_node+0x2c/0x260
[  112.112256][ T8542]  ? kernfs_path_from_node+0x22c/0x260
[  112.112270][ T8542]  ? kernfs_path_from_node+0x2c/0x260
[  112.112285][ T8542]  sysfs_warn_dup+0x8e/0xa0
[  112.112299][ T8542]  sysfs_do_create_link_sd+0xc0/0x110
[  112.112314][ T8542]  device_add_class_symlinks+0x1cf/0x240
[  112.112333][ T8542]  device_add+0x475/0xb50
[  112.112349][ T8542]  wiphy_register+0x199a/0x26b0
[  112.112379][ T8542]  ? __pfx_wiphy_register+0x10/0x10
[  112.112394][ T8542]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  112.112416][ T8542]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  112.112435][ T8542]  ieee80211_register_hw+0x33e1/0x4120
[  112.112463][ T8542]  ? ieee80211_register_hw+0x13f1/0x4120
[  112.112487][ T8542]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  112.112506][ T8542]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.112529][ T8542]  ? __hrtimer_setup+0x187/0x210
[  112.112548][ T8542]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  112.112566][ T8542]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  112.112607][ T8542]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  112.112629][ T8542]  ? trace_kmalloc+0x1f/0xd0
[  112.112641][ T8542]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  112.112652][ T8542]  ? kstrndup+0xbf/0x160
[  112.112674][ T8542]  hwsim_new_radio_nl+0xea4/0x1b10
[  112.112689][ T8542]  ? __pfx___nla_validate_parse+0x10/0x10
[  112.112717][ T8542]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  112.112741][ T8542]  ? __nla_parse+0x40/0x60
[  112.112760][ T8542]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  112.112789][ T8542]  genl_family_rcv_msg_doit+0x215/0x300
[  112.112815][ T8542]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  112.112846][ T8542]  ? bpf_lsm_capable+0x9/0x20
[  112.112858][ T8542]  ? security_capable+0x7e/0x2e0
[  112.112879][ T8542]  genl_rcv_msg+0x60e/0x790
[  112.112901][ T8542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.112918][ T8542]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  112.112941][ T8542]  netlink_rcv_skb+0x208/0x470
[  112.112958][ T8542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.113004][ T8542]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  112.113034][ T8542]  ? down_read+0x1ad/0x2e0
[  112.113059][ T8542]  genl_rcv+0x28/0x40
[  112.113078][ T8542]  netlink_unicast+0x75b/0x8d0
[  112.113101][ T8542]  netlink_sendmsg+0x805/0xb30
[  112.113124][ T8542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.113143][ T8542]  ? aa_sock_msg_perm+0x94/0x160
[  112.113161][ T8542]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  112.113176][ T8542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.113190][ T8542]  __sock_sendmsg+0x21c/0x270
[  112.113212][ T8542]  ____sys_sendmsg+0x505/0x830
[  112.113231][ T8542]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.113255][ T8542]  ? import_iovec+0x74/0xa0
[  112.113270][ T8542]  ___sys_sendmsg+0x21f/0x2a0
[  112.113287][ T8542]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.113327][ T8542]  ? __fget_files+0x2a/0x420
[  112.113342][ T8542]  ? __fget_files+0x3a0/0x420
[  112.113364][ T8542]  __x64_sys_sendmsg+0x19b/0x260
[  112.113381][ T8542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  112.113406][ T8542]  ? rcu_is_watching+0x15/0xb0
[  112.113431][ T8542]  ? do_syscall_64+0xbe/0x3b0
[  112.113446][ T8542]  do_syscall_64+0xfa/0x3b0
[  112.113456][ T8542]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.113473][ T8542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.113485][ T8542]  ? exc_page_fault+0x9f/0xf0
[  112.113507][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.113521][ T8542] RIP: 0033:0x7ffb9ab8e929
[  112.113535][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.113549][ T8542] RSP: 002b:00007ffb9ba4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.113567][ T8542] RAX: ffffffffffffffda RBX: 00007ffb9adb5fa0 RCX: 00007ffb9ab8e929
[  112.113576][ T8542] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  112.113585][ T8542] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  112.113593][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.113600][ T8542] R13: 0000000000000000 R14: 00007ffb9adb5fa0 R15: 00007ffd3a3f6838
[  112.113622][ T8542]  </TASK>
[  112.422108][ T8552] bridge18: port 1(vlan1) entered blocking state
[  112.426428][ T8552] bridge18: port 1(vlan1) entered disabled state
[  112.429382][ T8552] vlan1: entered allmulticast mode
[  112.431192][ T8552] bridge18: entered allmulticast mode
[  112.435203][ T8552] vlan1: left allmulticast mode
[  112.437129][ T8552] bridge18: left allmulticast mode
[  112.617796][ T8563] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.774194][ T8570] netlink: 'syz.1.729': attribute type 9 has an invalid length.
[  112.961252][ T8587] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  112.974146][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.0.733 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  112.974171][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.974182][ T8587] Call Trace:
[  112.974188][ T8587]  <TASK>
[  112.974194][ T8587]  dump_stack_lvl+0x189/0x250
[  112.974233][ T8587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.974256][ T8587]  ? __pfx__printk+0x10/0x10
[  112.974274][ T8587]  ? kernfs_path_from_node+0x2c/0x260
[  112.974291][ T8587]  ? kernfs_path_from_node+0x2c/0x260
[  112.974304][ T8587]  ? kernfs_path_from_node+0x2c/0x260
[  112.974319][ T8587]  ? kernfs_path_from_node+0x22c/0x260
[  112.974333][ T8587]  ? kernfs_path_from_node+0x2c/0x260
[  112.974350][ T8587]  sysfs_warn_dup+0x8e/0xa0
[  112.974365][ T8587]  sysfs_do_create_link_sd+0xc0/0x110
[  112.974381][ T8587]  device_add_class_symlinks+0x1cf/0x240
[  112.974397][ T8587]  device_add+0x475/0xb50
[  112.974413][ T8587]  wiphy_register+0x199a/0x26b0
[  112.974441][ T8587]  ? __pfx_wiphy_register+0x10/0x10
[  112.974454][ T8587]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  112.974476][ T8587]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  112.974496][ T8587]  ieee80211_register_hw+0x33e1/0x4120
[  112.974524][ T8587]  ? ieee80211_register_hw+0x13f1/0x4120
[  112.974546][ T8587]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  112.974565][ T8587]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.974589][ T8587]  ? __hrtimer_setup+0x187/0x210
[  112.974606][ T8587]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  112.974621][ T8587]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  112.974662][ T8587]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  112.974680][ T8587]  ? trace_kmalloc+0x1f/0xd0
[  112.974691][ T8587]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  112.974702][ T8587]  ? kstrndup+0xbf/0x160
[  112.974720][ T8587]  hwsim_new_radio_nl+0xea4/0x1b10
[  112.974735][ T8587]  ? __pfx___nla_validate_parse+0x10/0x10
[  112.974762][ T8587]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  112.974786][ T8587]  ? __nla_parse+0x40/0x60
[  112.974806][ T8587]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  112.974831][ T8587]  genl_family_rcv_msg_doit+0x215/0x300
[  112.974853][ T8587]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  112.974880][ T8587]  ? bpf_lsm_capable+0x9/0x20
[  112.974891][ T8587]  ? security_capable+0x7e/0x2e0
[  112.974911][ T8587]  genl_rcv_msg+0x60e/0x790
[  112.974934][ T8587]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.974951][ T8587]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  112.975005][ T8587]  netlink_rcv_skb+0x208/0x470
[  112.975021][ T8587]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.975042][ T8587]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  112.975069][ T8587]  ? down_read+0x1ad/0x2e0
[  112.975084][ T8587]  genl_rcv+0x28/0x40
[  112.975101][ T8587]  netlink_unicast+0x75b/0x8d0
[  112.975142][ T8587]  netlink_sendmsg+0x805/0xb30
[  112.975165][ T8587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.975183][ T8587]  ? aa_sock_msg_perm+0x94/0x160
[  112.975206][ T8587]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  112.975229][ T8587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.975244][ T8587]  __sock_sendmsg+0x21c/0x270
[  112.975267][ T8587]  ____sys_sendmsg+0x505/0x830
[  112.975290][ T8587]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.975314][ T8587]  ? import_iovec+0x74/0xa0
[  112.975332][ T8587]  ___sys_sendmsg+0x21f/0x2a0
[  112.975348][ T8587]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.975389][ T8587]  ? __fget_files+0x2a/0x420
[  112.975404][ T8587]  ? __fget_files+0x3a0/0x420
[  112.975423][ T8587]  __x64_sys_sendmsg+0x19b/0x260
[  112.975440][ T8587]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  112.975464][ T8587]  ? rcu_is_watching+0x15/0xb0
[  112.975487][ T8587]  ? do_syscall_64+0xbe/0x3b0
[  112.975503][ T8587]  do_syscall_64+0xfa/0x3b0
[  112.975512][ T8587]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.975528][ T8587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.975540][ T8587]  ? exc_page_fault+0x9f/0xf0
[  112.975559][ T8587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.975570][ T8587] RIP: 0033:0x7f4b0118e929
[  112.975586][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.975598][ T8587] RSP: 002b:00007f4b01fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.975612][ T8587] RAX: ffffffffffffffda RBX: 00007f4b013b5fa0 RCX: 00007f4b0118e929
[  112.975623][ T8587] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  112.975631][ T8587] RBP: 00007f4b01210b39 R08: 0000000000000000 R09: 0000000000000000
[  112.975640][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.975648][ T8587] R13: 0000000000000000 R14: 00007f4b013b5fa0 R15: 00007ffc11612438
[  112.975670][ T8587]  </TASK>
[  113.022778][ T8593] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  113.127591][ T8595] bridge20: port 1(vlan0) entered blocking state
[  113.166773][ T8595] bridge20: port 1(vlan0) entered disabled state
[  113.169672][ T8595] vlan0: entered allmulticast mode
[  113.171427][ T8595] bridge20: entered allmulticast mode
[  113.175714][ T8595] vlan0: left allmulticast mode
[  113.177380][ T8595] bridge20: left allmulticast mode
[  113.186861][ T8593] bridge0: port 1(team0) entered blocking state
[  113.189368][ T8593] bridge0: port 1(team0) entered disabled state
[  113.200699][ T8593] team0: entered allmulticast mode
[  113.204414][ T8593] team0: entered promiscuous mode
[  113.208611][ T8598] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  113.269976][ T8603] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  113.279728][ T8603] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  113.290069][ T8603] bond6: (slave vti0): making interface the new active one
[  113.293941][ T8603] bond6: (slave vti0): Enslaving as an active interface with an up link
[  113.349592][ T8608] netlink: 'syz.2.737': attribute type 8 has an invalid length.
[  113.354340][ T8614] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  113.359096][ T8614] bridge0: port 1(erspan0) entered blocking state
[  113.368807][ T8614] bridge0: port 1(erspan0) entered disabled state
[  113.371026][ T8614] erspan0: entered allmulticast mode
[  113.386017][ T8614] erspan0: entered promiscuous mode
[  113.394292][ T8601] netlink: 'syz.0.738': attribute type 11 has an invalid length.
[  113.398534][ T8614] erspan0: left allmulticast mode
[  113.400147][ T8614] erspan0: left promiscuous mode
[  113.403513][ T8614] bridge0: port 1(erspan0) entered disabled state
[  113.484179][ T8617] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  113.498539][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.1.741 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  113.498565][ T8617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.498574][ T8617] Call Trace:
[  113.498581][ T8617]  <TASK>
[  113.498587][ T8617]  dump_stack_lvl+0x189/0x250
[  113.498621][ T8617]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.498643][ T8617]  ? __pfx__printk+0x10/0x10
[  113.498657][ T8617]  ? kernfs_path_from_node+0x2c/0x260
[  113.498672][ T8617]  ? kernfs_path_from_node+0x2c/0x260
[  113.498686][ T8617]  ? kernfs_path_from_node+0x2c/0x260
[  113.498702][ T8617]  ? kernfs_path_from_node+0x22c/0x260
[  113.498716][ T8617]  ? kernfs_path_from_node+0x2c/0x260
[  113.498735][ T8617]  sysfs_warn_dup+0x8e/0xa0
[  113.498752][ T8617]  sysfs_do_create_link_sd+0xc0/0x110
[  113.498768][ T8617]  device_add_class_symlinks+0x1cf/0x240
[  113.498784][ T8617]  device_add+0x475/0xb50
[  113.498802][ T8617]  wiphy_register+0x199a/0x26b0
[  113.498833][ T8617]  ? __pfx_wiphy_register+0x10/0x10
[  113.498847][ T8617]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  113.498867][ T8617]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  113.498887][ T8617]  ieee80211_register_hw+0x33e1/0x4120
[  113.498917][ T8617]  ? ieee80211_register_hw+0x13f1/0x4120
[  113.498939][ T8617]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  113.498985][ T8617]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.499012][ T8617]  ? __hrtimer_setup+0x187/0x210
[  113.499034][ T8617]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  113.499053][ T8617]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  113.499095][ T8617]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  113.499117][ T8617]  ? trace_kmalloc+0x1f/0xd0
[  113.499128][ T8617]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  113.499141][ T8617]  ? kstrndup+0xbf/0x160
[  113.499163][ T8617]  hwsim_new_radio_nl+0xea4/0x1b10
[  113.499179][ T8617]  ? __pfx___nla_validate_parse+0x10/0x10
[  113.499209][ T8617]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  113.499231][ T8617]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  113.499257][ T8617]  ? __nla_parse+0x40/0x60
[  113.499280][ T8617]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  113.499307][ T8617]  genl_family_rcv_msg_doit+0x215/0x300
[  113.499332][ T8617]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  113.499362][ T8617]  ? bpf_lsm_capable+0x9/0x20
[  113.499377][ T8617]  ? security_capable+0x7e/0x2e0
[  113.499399][ T8617]  genl_rcv_msg+0x60e/0x790
[  113.499422][ T8617]  ? __pfx_genl_rcv_msg+0x10/0x10
[  113.499439][ T8617]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  113.499462][ T8617]  netlink_rcv_skb+0x208/0x470
[  113.499478][ T8617]  ? __pfx_genl_rcv_msg+0x10/0x10
[  113.499496][ T8617]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  113.499523][ T8617]  ? down_read+0x1ad/0x2e0
[  113.499538][ T8617]  genl_rcv+0x28/0x40
[  113.499554][ T8617]  netlink_unicast+0x75b/0x8d0
[  113.499575][ T8617]  netlink_sendmsg+0x805/0xb30
[  113.499597][ T8617]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.499614][ T8617]  ? aa_sock_msg_perm+0x94/0x160
[  113.499632][ T8617]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  113.499648][ T8617]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.499659][ T8617]  __sock_sendmsg+0x21c/0x270
[  113.499678][ T8617]  ____sys_sendmsg+0x505/0x830
[  113.499695][ T8617]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.499716][ T8617]  ? import_iovec+0x74/0xa0
[  113.499732][ T8617]  ___sys_sendmsg+0x21f/0x2a0
[  113.499750][ T8617]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.499791][ T8617]  ? __fget_files+0x2a/0x420
[  113.499804][ T8617]  ? __fget_files+0x3a0/0x420
[  113.499825][ T8617]  __x64_sys_sendmsg+0x19b/0x260
[  113.499843][ T8617]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  113.499871][ T8617]  ? do_syscall_64+0xbe/0x3b0
[  113.499887][ T8617]  do_syscall_64+0xfa/0x3b0
[  113.499899][ T8617]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.499914][ T8617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.499925][ T8617]  ? exc_page_fault+0x9f/0xf0
[  113.499944][ T8617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.499988][ T8617] RIP: 0033:0x7ffb9ab8e929
[  113.500002][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.500016][ T8617] RSP: 002b:00007ffb9ba4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.500034][ T8617] RAX: ffffffffffffffda RBX: 00007ffb9adb5fa0 RCX: 00007ffb9ab8e929
[  113.500043][ T8617] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  113.500052][ T8617] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  113.500060][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.500067][ T8617] R13: 0000000000000000 R14: 00007ffb9adb5fa0 R15: 00007ffd3a3f6838
[  113.500090][ T8617]  </TASK>
[  113.722777][ T8623] netlink: 'syz.0.742': attribute type 1 has an invalid length.
[  113.837199][ T8623] bond9: entered promiscuous mode
[  113.839911][ T8623] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.878443][ T8627] bond9: (slave bridge21): making interface the new active one
[  113.881718][ T8627] bridge21: entered promiscuous mode
[  113.885049][ T8627] bond9: (slave bridge21): Enslaving as an active interface with an up link
[  113.911108][ T8630] lo: entered allmulticast mode
[  113.922012][ T8630] tunl0: entered allmulticast mode
[  113.926328][ T8630] gre0: entered allmulticast mode
[  113.929668][ T8630] gretap0: entered allmulticast mode
[  113.940698][ T8630] ip_vti0: entered allmulticast mode
[  113.945333][ T8630] ip6_vti0: entered allmulticast mode
[  113.949328][ T8630] sit0: entered allmulticast mode
[  113.960159][ T8630] ip6tnl0: entered allmulticast mode
[  113.965738][ T8630] ip6gre0: entered allmulticast mode
[  113.970815][ T8630] syz_tun: entered allmulticast mode
[  113.974979][ T8630] ip6gretap0: entered allmulticast mode
[  113.981217][ T8630] bridge0: entered allmulticast mode
[  113.985388][ T8630] vcan0: entered allmulticast mode
[  113.994884][ T8630] : entered allmulticast mode
[  113.999844][ T8630] dummy0: entered allmulticast mode
[  114.008836][ T8630] nlmon0: entered allmulticast mode
[  114.018704][ T8630] caif0: entered allmulticast mode
[  114.024836][ T8630] veth0_to_team: entered allmulticast mode
[  114.027722][ T8630] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  114.030514][ T8630] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  114.035200][ T8630] gre2: entered allmulticast mode
[  114.038774][ T8630] bridge7: entered allmulticast mode
[  114.048516][ T8630] bridge8: entered allmulticast mode
[  114.055793][ T8630] bridge9: entered allmulticast mode
[  114.061697][ T8630] gretap1: left promiscuous mode
[  114.069807][ T8630] bridge10: entered allmulticast mode
[  114.078658][ T8630] macvtap1: left promiscuous mode
[  114.085386][ T8630] bridge11: entered allmulticast mode
[  114.090743][ T8630] bond0: entered allmulticast mode
[  114.095043][ T8630] bridge12: entered allmulticast mode
[  114.101310][ T8630] bridge13: entered allmulticast mode
[  114.110752][ T8630] bridge14: entered allmulticast mode
[  114.117575][ T8630] bridge15: entered allmulticast mode
[  114.126496][ T8630] bridge16: entered allmulticast mode
[  114.135213][ T8630] bond5: entered allmulticast mode
[  114.137399][ T8630] geneve3: entered allmulticast mode
[  114.146247][ T8630] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.149921][ T8630] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.154835][ T8630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.158533][ T8630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.168463][ T8630] bridge17: entered allmulticast mode
[  114.175837][ T8630] bridge18: entered allmulticast mode
[  114.180908][ T8630] ip6erspan0: entered allmulticast mode
[  114.187063][ T8630] syzkaller0: entered allmulticast mode
[  114.206637][ T8637] bridge16: port 1(vlan1) entered blocking state
[  114.209563][ T8637] bridge16: port 1(vlan1) entered disabled state
[  114.216598][ T8637] vlan1: entered allmulticast mode
[  114.218735][ T8637] bridge16: entered allmulticast mode
[  114.224738][ T8637] vlan1: left allmulticast mode
[  114.226897][ T8637] bridge16: left allmulticast mode
[  114.364579][ T8642] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  114.621134][ T8655] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  114.632528][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.2.751 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  114.632548][ T8655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.632554][ T8655] Call Trace:
[  114.632559][ T8655]  <TASK>
[  114.632563][ T8655]  dump_stack_lvl+0x189/0x250
[  114.632584][ T8655]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.632597][ T8655]  ? __pfx__printk+0x10/0x10
[  114.632609][ T8655]  ? kernfs_path_from_node+0x2c/0x260
[  114.632620][ T8655]  ? kernfs_path_from_node+0x2c/0x260
[  114.632630][ T8655]  ? kernfs_path_from_node+0x2c/0x260
[  114.632640][ T8655]  ? kernfs_path_from_node+0x22c/0x260
[  114.632649][ T8655]  ? kernfs_path_from_node+0x2c/0x260
[  114.632660][ T8655]  sysfs_warn_dup+0x8e/0xa0
[  114.632670][ T8655]  sysfs_do_create_link_sd+0xc0/0x110
[  114.632681][ T8655]  device_add_class_symlinks+0x1cf/0x240
[  114.632697][ T8655]  device_add+0x475/0xb50
[  114.632716][ T8655]  wiphy_register+0x199a/0x26b0
[  114.632743][ T8655]  ? __pfx_wiphy_register+0x10/0x10
[  114.632755][ T8655]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  114.632776][ T8655]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  114.632799][ T8655]  ieee80211_register_hw+0x33e1/0x4120
[  114.632829][ T8655]  ? ieee80211_register_hw+0x13f1/0x4120
[  114.632851][ T8655]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  114.632871][ T8655]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.632893][ T8655]  ? __hrtimer_setup+0x187/0x210
[  114.632906][ T8655]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  114.632920][ T8655]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  114.632977][ T8655]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  114.632992][ T8655]  ? trace_kmalloc+0x1f/0xd0
[  114.633001][ T8655]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  114.633009][ T8655]  ? kstrndup+0xbf/0x160
[  114.633025][ T8655]  hwsim_new_radio_nl+0xea4/0x1b10
[  114.633036][ T8655]  ? __pfx___nla_validate_parse+0x10/0x10
[  114.633059][ T8655]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  114.633071][ T8655]  ? __nla_parse+0x40/0x60
[  114.633083][ T8655]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  114.633098][ T8655]  genl_family_rcv_msg_doit+0x215/0x300
[  114.633111][ T8655]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  114.633127][ T8655]  ? bpf_lsm_capable+0x9/0x20
[  114.633134][ T8655]  ? security_capable+0x7e/0x2e0
[  114.633147][ T8655]  genl_rcv_msg+0x60e/0x790
[  114.633160][ T8655]  ? __pfx_genl_rcv_msg+0x10/0x10
[  114.633170][ T8655]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  114.633183][ T8655]  netlink_rcv_skb+0x208/0x470
[  114.633192][ T8655]  ? __pfx_genl_rcv_msg+0x10/0x10
[  114.633202][ T8655]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  114.633217][ T8655]  ? down_read+0x1ad/0x2e0
[  114.633226][ T8655]  genl_rcv+0x28/0x40
[  114.633235][ T8655]  netlink_unicast+0x75b/0x8d0
[  114.633247][ T8655]  netlink_sendmsg+0x805/0xb30
[  114.633260][ T8655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.633270][ T8655]  ? aa_sock_msg_perm+0x94/0x160
[  114.633280][ T8655]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.633289][ T8655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.633305][ T8655]  __sock_sendmsg+0x21c/0x270
[  114.633320][ T8655]  ____sys_sendmsg+0x505/0x830
[  114.633334][ T8655]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.633348][ T8655]  ? import_iovec+0x74/0xa0
[  114.633359][ T8655]  ___sys_sendmsg+0x21f/0x2a0
[  114.633372][ T8655]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.633398][ T8655]  ? __fget_files+0x2a/0x420
[  114.633409][ T8655]  ? __fget_files+0x3a0/0x420
[  114.633424][ T8655]  __x64_sys_sendmsg+0x19b/0x260
[  114.633436][ T8655]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.633451][ T8655]  ? rcu_is_watching+0x15/0xb0
[  114.633468][ T8655]  ? do_syscall_64+0xbe/0x3b0
[  114.633478][ T8655]  do_syscall_64+0xfa/0x3b0
[  114.633486][ T8655]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.633496][ T8655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.633504][ T8655]  ? exc_page_fault+0x9f/0xf0
[  114.633515][ T8655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.633523][ T8655] RIP: 0033:0x7fd68318e929
[  114.633532][ T8655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.633539][ T8655] RSP: 002b:00007fd684080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.633549][ T8655] RAX: ffffffffffffffda RBX: 00007fd6833b5fa0 RCX: 00007fd68318e929
[  114.633555][ T8655] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  114.633559][ T8655] RBP: 00007fd683210b39 R08: 0000000000000000 R09: 0000000000000000
[  114.633564][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.633568][ T8655] R13: 0000000000000000 R14: 00007fd6833b5fa0 R15: 00007fff57851128
[  114.633580][ T8655]  </TASK>
[  114.860059][ T8651] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  114.946040][ T8661] bridge22: port 1(vlan0) entered blocking state
[  114.948778][ T8661] bridge22: port 1(vlan0) entered disabled state
[  114.951776][ T8661] vlan0: entered allmulticast mode
[  114.957234][ T8661] bridge22: entered allmulticast mode
[  114.960089][ T8661] vlan0: left allmulticast mode
[  114.961798][ T8661] bridge22: left allmulticast mode
[  115.066625][ T8675] gre0: left allmulticast mode
[  115.068327][ T8675] netlink: 'syz.2.758': attribute type 2 has an invalid length.
[  115.090537][ T8676] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  115.101570][ T8678] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  115.110454][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.2.759 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  115.110471][ T8678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.110477][ T8678] Call Trace:
[  115.110481][ T8678]  <TASK>
[  115.110486][ T8678]  dump_stack_lvl+0x189/0x250
[  115.110506][ T8678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.110519][ T8678]  ? __pfx__printk+0x10/0x10
[  115.110529][ T8678]  ? kernfs_path_from_node+0x2c/0x260
[  115.110560][ T8678]  ? kernfs_path_from_node+0x2c/0x260
[  115.110568][ T8678]  ? kernfs_path_from_node+0x2c/0x260
[  115.110577][ T8678]  ? kernfs_path_from_node+0x22c/0x260
[  115.110585][ T8678]  ? kernfs_path_from_node+0x2c/0x260
[  115.110594][ T8678]  sysfs_warn_dup+0x8e/0xa0
[  115.110603][ T8678]  sysfs_do_create_link_sd+0xc0/0x110
[  115.110615][ T8678]  device_add_class_symlinks+0x1cf/0x240
[  115.110628][ T8678]  device_add+0x475/0xb50
[  115.110638][ T8678]  wiphy_register+0x199a/0x26b0
[  115.110655][ T8678]  ? __pfx_wiphy_register+0x10/0x10
[  115.110662][ T8678]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  115.110676][ T8678]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  115.110689][ T8678]  ieee80211_register_hw+0x33e1/0x4120
[  115.110708][ T8678]  ? ieee80211_register_hw+0x13f1/0x4120
[  115.110725][ T8678]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  115.110741][ T8678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.110763][ T8678]  ? __hrtimer_setup+0x187/0x210
[  115.110780][ T8678]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  115.110800][ T8678]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  115.110844][ T8678]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  115.110861][ T8678]  ? trace_kmalloc+0x1f/0xd0
[  115.110871][ T8678]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  115.110884][ T8678]  ? kstrndup+0xbf/0x160
[  115.110906][ T8678]  hwsim_new_radio_nl+0xea4/0x1b10
[  115.110919][ T8678]  ? __pfx___nla_validate_parse+0x10/0x10
[  115.110976][ T8678]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  115.110999][ T8678]  ? __nla_parse+0x40/0x60
[  115.111028][ T8678]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  115.111053][ T8678]  genl_family_rcv_msg_doit+0x215/0x300
[  115.111068][ T8678]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  115.111086][ T8678]  ? bpf_lsm_capable+0x9/0x20
[  115.111094][ T8678]  ? security_capable+0x7e/0x2e0
[  115.111109][ T8678]  genl_rcv_msg+0x60e/0x790
[  115.111125][ T8678]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.111137][ T8678]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  115.111154][ T8678]  netlink_rcv_skb+0x208/0x470
[  115.111164][ T8678]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.111177][ T8678]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.111193][ T8678]  ? down_read+0x1ad/0x2e0
[  115.111202][ T8678]  genl_rcv+0x28/0x40
[  115.111212][ T8678]  netlink_unicast+0x75b/0x8d0
[  115.111224][ T8678]  netlink_sendmsg+0x805/0xb30
[  115.111237][ T8678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.111246][ T8678]  ? aa_sock_msg_perm+0x94/0x160
[  115.111257][ T8678]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  115.111269][ T8678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.111278][ T8678]  __sock_sendmsg+0x21c/0x270
[  115.111292][ T8678]  ____sys_sendmsg+0x505/0x830
[  115.111303][ T8678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.111316][ T8678]  ? import_iovec+0x74/0xa0
[  115.111326][ T8678]  ___sys_sendmsg+0x21f/0x2a0
[  115.111336][ T8678]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.111360][ T8678]  ? __fget_files+0x2a/0x420
[  115.111369][ T8678]  ? __fget_files+0x3a0/0x420
[  115.111381][ T8678]  __x64_sys_sendmsg+0x19b/0x260
[  115.111390][ T8678]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  115.111406][ T8678]  ? rcu_is_watching+0x15/0xb0
[  115.111420][ T8678]  ? do_syscall_64+0xbe/0x3b0
[  115.111429][ T8678]  do_syscall_64+0xfa/0x3b0
[  115.111435][ T8678]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.111446][ T8678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.111453][ T8678]  ? exc_page_fault+0x9f/0xf0
[  115.111464][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.111472][ T8678] RIP: 0033:0x7fd68318e929
[  115.111481][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.111489][ T8678] RSP: 002b:00007fd684080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.111498][ T8678] RAX: ffffffffffffffda RBX: 00007fd6833b5fa0 RCX: 00007fd68318e929
[  115.111503][ T8678] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  115.111508][ T8678] RBP: 00007fd683210b39 R08: 0000000000000000 R09: 0000000000000000
[  115.111513][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.111517][ T8678] R13: 0000000000000000 R14: 00007fd6833b5fa0 R15: 00007fff57851128
[  115.111530][ T8678]  </TASK>
[  115.311545][ T8684] batadv_slave_0: entered promiscuous mode
[  115.316170][ T8684] __nla_validate_parse: 22 callbacks suppressed
[  115.316181][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'.
[  115.326195][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'.
[  115.350130][ T8676] netlink: 428 bytes leftover after parsing attributes in process `syz.0.756'.
[  115.353720][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'.
[  115.477707][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'.
[  115.494435][ T8699] bridge17: port 1(vlan1) entered blocking state
[  115.496976][ T8699] bridge17: port 1(vlan1) entered disabled state
[  115.499300][ T8699] vlan1: entered allmulticast mode
[  115.500963][ T8699] bridge17: entered allmulticast mode
[  115.507416][ T8699] vlan1: left allmulticast mode
[  115.509573][ T8699] bridge17: left allmulticast mode
[  115.570306][ T8704] batman_adv: batadv0: Removing interface: virt_wifi0
[  115.576683][ T8704] bond3: (slave bond4): Releasing backup interface
[  115.580088][ T8704] bond3: (slave bond4): the permanent HWaddr of slave - 66:2c:27:79:82:91 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.586212][ T8704] bond3: (slave gretap2): making interface the new active one
[  115.596249][ T8704] bond3: (slave gretap2): Releasing backup interface
[  115.600908][ T8704] bond5: (slave ip6gretap2): Removing an active aggregator
[  115.604745][ T8704] bond5: (slave ip6gretap2): Releasing backup interface
[  115.607522][ T8704] bond5: (slave ip6gretap2): the permanent HWaddr of slave - 22:fe:03:03:46:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.624867][ T8704] bond5: (slave veth3): Releasing backup interface
[  115.631167][ T8704] bond7: (slave vti1): Releasing backup interface
[  115.631273][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'.
[  115.642785][ T8704] bond9: (slave bridge21): Releasing backup interface
[  115.645272][ T8704] bridge21: left promiscuous mode
[  115.883576][ T8716] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  115.889012][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.1.767 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  115.889034][ T8716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.889043][ T8716] Call Trace:
[  115.889050][ T8716]  <TASK>
[  115.889055][ T8716]  dump_stack_lvl+0x189/0x250
[  115.889085][ T8716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.889104][ T8716]  ? __pfx__printk+0x10/0x10
[  115.889120][ T8716]  ? kernfs_path_from_node+0x2c/0x260
[  115.889135][ T8716]  ? kernfs_path_from_node+0x2c/0x260
[  115.889148][ T8716]  ? kernfs_path_from_node+0x2c/0x260
[  115.889163][ T8716]  ? kernfs_path_from_node+0x22c/0x260
[  115.889175][ T8716]  ? kernfs_path_from_node+0x2c/0x260
[  115.889191][ T8716]  sysfs_warn_dup+0x8e/0xa0
[  115.889204][ T8716]  sysfs_do_create_link_sd+0xc0/0x110
[  115.889220][ T8716]  device_add_class_symlinks+0x1cf/0x240
[  115.889236][ T8716]  device_add+0x475/0xb50
[  115.889251][ T8716]  wiphy_register+0x199a/0x26b0
[  115.889287][ T8716]  ? __pfx_wiphy_register+0x10/0x10
[  115.889300][ T8716]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  115.889321][ T8716]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  115.889341][ T8716]  ieee80211_register_hw+0x33e1/0x4120
[  115.889370][ T8716]  ? ieee80211_register_hw+0x13f1/0x4120
[  115.889393][ T8716]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  115.889410][ T8716]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.889435][ T8716]  ? __hrtimer_setup+0x187/0x210
[  115.889451][ T8716]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  115.889469][ T8716]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  115.889509][ T8716]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  115.889526][ T8716]  ? trace_kmalloc+0x1f/0xd0
[  115.889535][ T8716]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  115.889547][ T8716]  ? kstrndup+0xbf/0x160
[  115.889569][ T8716]  hwsim_new_radio_nl+0xea4/0x1b10
[  115.889610][ T8716]  ? __pfx___nla_validate_parse+0x10/0x10
[  115.889642][ T8716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  115.889666][ T8716]  ? __nla_parse+0x40/0x60
[  115.889688][ T8716]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  115.889715][ T8716]  genl_family_rcv_msg_doit+0x215/0x300
[  115.889736][ T8716]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  115.889763][ T8716]  ? bpf_lsm_capable+0x9/0x20
[  115.889774][ T8716]  ? security_capable+0x7e/0x2e0
[  115.889815][ T8716]  genl_rcv_msg+0x60e/0x790
[  115.889836][ T8716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.889851][ T8716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  115.889874][ T8716]  netlink_rcv_skb+0x208/0x470
[  115.889890][ T8716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.889907][ T8716]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.889965][ T8716]  ? down_read+0x1ad/0x2e0
[  115.889984][ T8716]  genl_rcv+0x28/0x40
[  115.890002][ T8716]  netlink_unicast+0x75b/0x8d0
[  115.890026][ T8716]  netlink_sendmsg+0x805/0xb30
[  115.890049][ T8716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.890066][ T8716]  ? aa_sock_msg_perm+0x94/0x160
[  115.890084][ T8716]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  115.890100][ T8716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.890114][ T8716]  __sock_sendmsg+0x21c/0x270
[  115.890137][ T8716]  ____sys_sendmsg+0x505/0x830
[  115.890157][ T8716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.890177][ T8716]  ? import_iovec+0x74/0xa0
[  115.890190][ T8716]  ___sys_sendmsg+0x21f/0x2a0
[  115.890205][ T8716]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.890242][ T8716]  ? __fget_files+0x2a/0x420
[  115.890254][ T8716]  ? __fget_files+0x3a0/0x420
[  115.890281][ T8716]  __x64_sys_sendmsg+0x19b/0x260
[  115.890297][ T8716]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  115.890320][ T8716]  ? rcu_is_watching+0x15/0xb0
[  115.890343][ T8716]  ? do_syscall_64+0xbe/0x3b0
[  115.890357][ T8716]  do_syscall_64+0xfa/0x3b0
[  115.890368][ T8716]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.890384][ T8716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.890397][ T8716]  ? exc_page_fault+0x9f/0xf0
[  115.890416][ T8716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.890427][ T8716] RIP: 0033:0x7ffb9ab8e929
[  115.890440][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.890451][ T8716] RSP: 002b:00007ffb9ba4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.890465][ T8716] RAX: ffffffffffffffda RBX: 00007ffb9adb5fa0 RCX: 00007ffb9ab8e929
[  115.890474][ T8716] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  115.890481][ T8716] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  115.890487][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.890495][ T8716] R13: 0000000000000000 R14: 00007ffb9adb5fa0 R15: 00007ffd3a3f6838
[  115.890517][ T8716]  </TASK>
[  116.210369][ T8721] openvswitch: netlink: Actions may not be safe on all matching packets
[  116.304035][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'.
[  116.346776][ T8729] bridge19: port 1(vlan1) entered blocking state
[  116.349428][ T8729] bridge19: port 1(vlan1) entered disabled state
[  116.351744][ T8729] vlan1: entered allmulticast mode
[  116.360408][ T8729] bridge19: entered allmulticast mode
[  116.367844][ T8729] vlan1: left allmulticast mode
[  116.369486][ T8729] bridge19: left allmulticast mode
[  116.415027][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'.
[  116.427643][ T8739] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDHMrHTT!'
[  116.434900][ T8739] CPU: 1 UID: 0 PID: 8739 Comm: syz.1.775 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  116.434954][ T8739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.434964][ T8739] Call Trace:
[  116.434972][ T8739]  <TASK>
[  116.434986][ T8739]  dump_stack_lvl+0x189/0x250
[  116.435011][ T8739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.435026][ T8739]  ? __pfx__printk+0x10/0x10
[  116.435036][ T8739]  ? kernfs_path_from_node+0x2c/0x260
[  116.435049][ T8739]  ? kernfs_path_from_node+0x2c/0x260
[  116.435058][ T8739]  ? kernfs_path_from_node+0x2c/0x260
[  116.435069][ T8739]  ? kernfs_path_from_node+0x22c/0x260
[  116.435078][ T8739]  ? kernfs_path_from_node+0x2c/0x260
[  116.435088][ T8739]  sysfs_warn_dup+0x8e/0xa0
[  116.435097][ T8739]  sysfs_do_create_link_sd+0xc0/0x110
[  116.435107][ T8739]  device_add_class_symlinks+0x1cf/0x240
[  116.435117][ T8739]  device_add+0x475/0xb50
[  116.435127][ T8739]  wiphy_register+0x199a/0x26b0
[  116.435152][ T8739]  ? __pfx_wiphy_register+0x10/0x10
[  116.435164][ T8739]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  116.435185][ T8739]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  116.435204][ T8739]  ieee80211_register_hw+0x33e1/0x4120
[  116.435232][ T8739]  ? ieee80211_register_hw+0x13f1/0x4120
[  116.435253][ T8739]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  116.435271][ T8739]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.435295][ T8739]  ? __hrtimer_setup+0x187/0x210
[  116.435315][ T8739]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  116.435334][ T8739]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  116.435380][ T8739]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  116.435401][ T8739]  ? trace_kmalloc+0x1f/0xd0
[  116.435411][ T8739]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  116.435422][ T8739]  ? kstrndup+0xbf/0x160
[  116.435444][ T8739]  hwsim_new_radio_nl+0xea4/0x1b10
[  116.435461][ T8739]  ? __pfx___nla_validate_parse+0x10/0x10
[  116.435488][ T8739]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  116.435501][ T8739]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  116.435524][ T8739]  ? __nla_parse+0x40/0x60
[  116.435542][ T8739]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  116.435565][ T8739]  genl_family_rcv_msg_doit+0x215/0x300
[  116.435588][ T8739]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  116.435616][ T8739]  ? bpf_lsm_capable+0x9/0x20
[  116.435627][ T8739]  ? security_capable+0x7e/0x2e0
[  116.435646][ T8739]  genl_rcv_msg+0x60e/0x790
[  116.435668][ T8739]  ? __pfx_genl_rcv_msg+0x10/0x10
[  116.435680][ T8739]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  116.435693][ T8739]  netlink_rcv_skb+0x208/0x470
[  116.435724][ T8739]  ? __pfx_genl_rcv_msg+0x10/0x10
[  116.435736][ T8739]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  116.435753][ T8739]  ? down_read+0x1ad/0x2e0
[  116.435764][ T8739]  genl_rcv+0x28/0x40
[  116.435774][ T8739]  netlink_unicast+0x75b/0x8d0
[  116.435789][ T8739]  netlink_sendmsg+0x805/0xb30
[  116.435803][ T8739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.435814][ T8739]  ? aa_sock_msg_perm+0x94/0x160
[  116.435828][ T8739]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  116.435839][ T8739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.435850][ T8739]  __sock_sendmsg+0x21c/0x270
[  116.435864][ T8739]  ____sys_sendmsg+0x505/0x830
[  116.435875][ T8739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.435888][ T8739]  ? import_iovec+0x74/0xa0
[  116.435897][ T8739]  ___sys_sendmsg+0x21f/0x2a0
[  116.435907][ T8739]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.435955][ T8739]  ? __fget_files+0x2a/0x420
[  116.435965][ T8739]  ? __fget_files+0x3a0/0x420
[  116.435986][ T8739]  __x64_sys_sendmsg+0x19b/0x260
[  116.435997][ T8739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  116.436011][ T8739]  ? rcu_is_watching+0x15/0xb0
[  116.436029][ T8739]  ? do_syscall_64+0xbe/0x3b0
[  116.436039][ T8739]  do_syscall_64+0xfa/0x3b0
[  116.436046][ T8739]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.436058][ T8739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.436066][ T8739]  ? exc_page_fault+0x9f/0xf0
[  116.436078][ T8739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.436086][ T8739] RIP: 0033:0x7ffb9ab8e929
[  116.436096][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.436103][ T8739] RSP: 002b:00007ffb9ba4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.436113][ T8739] RAX: ffffffffffffffda RBX: 00007ffb9adb5fa0 RCX: 00007ffb9ab8e929
[  116.436118][ T8739] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  116.436123][ T8739] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  116.436127][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.436132][ T8739] R13: 0000000000000000 R14: 00007ffb9adb5fa0 R15: 00007ffd3a3f6838
[  116.436144][ T8739]  </TASK>
[  116.832440][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'.
[  116.835471][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'.
[  116.882674][ T8759] netlink: 'syz.2.781': attribute type 11 has an invalid length.
[  116.955786][ T8762] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[  116.959568][ T8762] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[  116.962335][ T8762] CPU: 1 UID: 0 PID: 8762 Comm: syz.1.782 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  116.966965][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.970202][ T8762] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  116.971956][ T8762] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  116.978052][ T8762] RSP: 0018:ffffc9000478efb0 EFLAGS: 00010206
[  116.979955][ T8762] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff888021efd640
[  116.982500][ T8762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888122d54000
[  116.984986][ T8762] RBP: dffffc0000000000 R08: ffff888021efd640 R09: 0000000000000002
[  116.987458][ T8762] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  116.989977][ T8762] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888122d54000
[  116.992462][ T8762] FS:  00007ffb9ba2b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  116.995276][ T8762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.997326][ T8762] CR2: 0000001b2f35ffff CR3: 000000011227e000 CR4: 00000000000006f0
[  116.999815][ T8762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.002347][ T8762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.004803][ T8762] Call Trace:
[  117.005897][ T8762]  <TASK>
[  117.006872][ T8762]  qdisc_tree_reduce_backlog+0x29c/0x480
[  117.008631][ T8762]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  117.010430][ T8762]  fq_change+0x1519/0x1f50
[  117.011852][ T8762]  ? __pfx_fq_change+0x10/0x10
[  117.013429][ T8762]  ? __hrtimer_setup+0x187/0x210
[  117.015057][ T8762]  fq_init+0x699/0x960
[  117.016392][ T8762]  ? __pfx_fq_init+0x10/0x10
[  117.017887][ T8762]  ? lockdep_rtnl_is_held+0x26/0x40
[  117.019553][ T8762]  ? qdisc_lookup+0x36d/0x6d0
[  117.021088][ T8762]  ? __pfx_fq_init+0x10/0x10
[  117.022563][ T8762]  qdisc_create+0x7ac/0xea0
[  117.024034][ T8762]  tc_modify_qdisc+0x1426/0x2010
[  117.025631][ T8762]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  117.027323][ T8762]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  117.029052][ T8762]  rtnetlink_rcv_msg+0x77c/0xb70
[  117.030652][ T8762]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  117.032268][ T8762]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  117.034010][ T8762]  netlink_rcv_skb+0x208/0x470
[  117.035528][ T8762]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  117.037265][ T8762]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  117.038944][ T8762]  ? netlink_deliver_tap+0x2e/0x1b0
[  117.040566][ T8762]  ? netlink_deliver_tap+0x2e/0x1b0
[  117.042196][ T8762]  netlink_unicast+0x75b/0x8d0
[  117.043710][ T8762]  netlink_sendmsg+0x805/0xb30
[  117.045260][ T8762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.046900][ T8762]  ? aa_sock_msg_perm+0x94/0x160
[  117.048474][ T8762]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  117.050176][ T8762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.052141][ T8762]  __sock_sendmsg+0x21c/0x270
[  117.053809][ T8762]  ____sys_sendmsg+0x505/0x830
[  117.055390][ T8762]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.057103][ T8762]  ? import_iovec+0x74/0xa0
[  117.058570][ T8762]  ___sys_sendmsg+0x21f/0x2a0
[  117.060107][ T8762]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.061831][ T8762]  ? __fget_files+0x2a/0x420
[  117.063338][ T8762]  ? __fget_files+0x3a0/0x420
[  117.064852][ T8762]  __x64_sys_sendmsg+0x19b/0x260
[  117.066462][ T8762]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  117.068236][ T8762]  ? rcu_is_watching+0x15/0xb0
[  117.069861][ T8762]  ? do_syscall_64+0xbe/0x3b0
[  117.071440][ T8762]  do_syscall_64+0xfa/0x3b0
[  117.072929][ T8762]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.074565][ T8762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.076477][ T8762]  ? exc_page_fault+0x9f/0xf0
[  117.078000][ T8762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.079893][ T8762] RIP: 0033:0x7ffb9ab8e929
[  117.081341][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.087681][ T8762] RSP: 002b:00007ffb9ba2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.090369][ T8762] RAX: ffffffffffffffda RBX: 00007ffb9adb6080 RCX: 00007ffb9ab8e929
[  117.092828][ T8762] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 000000000000000a
[  117.095319][ T8762] RBP: 00007ffb9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  117.097827][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.100456][ T8762] R13: 0000000000000000 R14: 00007ffb9adb6080 R15: 00007ffd3a3f6838
[  117.102980][ T8762]  </TASK>
[  117.103992][ T8762] Modules linked in:
[  117.105592][ T8762] ---[ end trace 0000000000000000 ]---
[  117.107407][ T8762] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  117.109151][ T8762] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  117.115385][ T8762] RSP: 0018:ffffc9000478efb0 EFLAGS: 00010206
[  117.118439][ T8762] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff888021efd640
[  117.122341][ T8762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888122d54000
[  117.125688][ T8762] RBP: dffffc0000000000 R08: ffff888021efd640 R09: 0000000000000002
[  117.129019][ T8762] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  117.132504][ T8762] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888122d54000
[  117.136038][ T8762] FS:  00007ffb9ba2b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  117.139876][ T8762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.142681][ T8762] CR2: 0000001b2f35ffff CR3: 000000011227e000 CR4: 00000000000006f0
[  117.146024][ T8762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.149457][ T8762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.152826][ T8762] Kernel panic - not syncing: Fatal exception in interrupt
[  117.156689][ T8762] Kernel Offset: disabled
[  117.158672][ T8762] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:15:18  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=ffff88801fa29cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004d5e200 RSP=ffffc90004d5e0a0
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=ffffffff81702110
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d7ac4 CR3=000000001bbd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ffb9ad84478 00007ffb9ad84450 XMM03=00007ffb9ad84488 00007ffb9ad84480
XMM04=00007ffb9b8ed100 00007ffb9ad84440 XMM05=00007ffb9ad84458 00007ffb9ad844a0
XMM06=00007ffb9ad84498 00007ffb9ad84490 XMM07=00007ffb9ad84488 00007ffb9ad84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ffb9ac11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000478e750
R8 =ffff888108b78237 R9 =1ffff1102116f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48eb R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffb9ba2b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f35ffff CR3=000000011227e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0005000880020004 000063657363616d
XMM02=00007f4b01384478 00007f4b01384450 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f4b01384458 00007f4b013844a0
XMM06=00007f4b01384498 00007f4b01384490 XMM07=00007f4b01384488 00007f4b01384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4b01211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
