last executing test programs:

1.898922535s ago: executing program 1 (id=1578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001800000000000005000000000600150005000000180016801400010001000000000035bda9fcff00000000003f2fecafd8ed3a0876ca449764f03e14a4"], 0x3c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x110, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9c, 0x46}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x5}, {0x1, 0x2}, {0x9, 0x4}, {0xfd, 0x7}], "db01ee43a9dc5713"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1e, 0x6}, {0x70, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x9, 0x2}], "8946164c3e133930"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7, 0x7}, {0xde, 0x7}, {0x12, 0x4}], "10977a2dc81f78a2"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0xd0}, {0x7, 0x1}, {0x1}, {0xf8}, {0x30, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x74, 0x3}, {0xc, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x9}, {0x4, 0x1}], "190dcf203a0b4128"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x2}, {0x0, 0x6}, {0x40, 0x6}, {0x50, 0x4}, {0x2e, 0x3}, {0x9, 0x7}, {0x4, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x8, 0x1}, {0x6, 0x7}, {0x81, 0x6}, {0x4, 0x6}, {0x81, 0x7}, {0xff, 0x4}, {0x10, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}], "23e4ad27c38bfa1e"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3}, {0x7f}, {0x0, 0x4}, {0xdb, 0x4}, {0x58}, {0x1a, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x86, 0x5}, {0x4, 0x5}, {0x20, 0x2}, {0x5, 0x1}, {0x8, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0xe, 0x5}], "5439b3ee22584c15"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xc4, 0x2}, {0xfe, 0x2}, {0x5, 0x5}, {0x8, 0x1}, {0x8, 0x6}], "024942aeea9c83d0"}}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x45)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0xaf01, &(0x7f0000000180))
ioctl$EXT4_IOC_GETFSUUID(r9, 0x4028af11, &(0x7f0000000000))
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f00000005c0)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

1.836090196s ago: executing program 1 (id=1581):
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="df0a0000", @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000b000000"], 0x24}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000480)=""/86, 0x56}], 0x5, &(0x7f0000000580)=""/166, 0xa6}, 0x10001)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

1.754664217s ago: executing program 1 (id=1583):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000e609010128bd7000ffdbdf2501000008"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)

1.537811811s ago: executing program 1 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

1.158873026s ago: executing program 0 (id=1587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700002000026000000007a6b616c6c65723000000000000008000500020000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES8], 0x48)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
close(0x3)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.155543772s ago: executing program 1 (id=1588):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket(0x10, 0x80002, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c000300000000000000000014"], 0x114}], 0x1}, 0x80) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000680001002dbd6200ffdbdf250a0004006e88e3981c1100000000000700010000000000fefcffbd0000000007000300000000000b00"], 0x64}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async, rerun: 32)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async, rerun: 32)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r12, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r11, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r12}, 0x20)

949.655347ms ago: executing program 1 (id=1589):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00')
syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$packet(0x11, 0x2, 0x300)
unshare(0x2060200)
getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040))
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249686a289cdcc06d3d3dc082d8db8c4621a113177518601e882f2c04", 0x54}], 0x3)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r9=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002797da04457cd7402b0db624086f85ef989d62d6dfa4be3b1c42c6ab64694dd67e2a534ffae39a6a49539a92d0085144f3a5840bd2cddcbcbf90627a3772f91fa288ab51a805aadd436b86c4108be633a632c27a6bf8f811319772c24fcaea1349b45c56ef1cc54f0577970ffcdccebb95901e074664f41184b928c17d37e3b818b035f19d931d116d33018056733425fd6fcfa7dbbbe820937254552261f9d9f104cc235ea63ccd41bdd76f193424b0ec787e1fbdcc2a339659bdeb268368bafacca8c3626d43df50955", @ANYRES32=r9], 0x20, 0x2400e044}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r10, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0)
setsockopt$inet_int(r10, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)

947.834715ms ago: executing program 0 (id=1590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0xdc, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4817c589ff494540c263a00f51c48784f92fbee6072e3ad5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8cfba31ff1d5ad369baa47754d379005062a6c771c7ef4cd"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008085}, 0x24044884)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r5, &(0x7f00000005c0)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000840)=""/125, 0x7d}], 0x9, &(0x7f0000000980)=""/114, 0x72}, 0x40000103)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x50000, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
socket$kcm(0x10, 0x3, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0xdc, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4817c589ff494540c263a00f51c48784f92fbee6072e3ad5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8cfba31ff1d5ad369baa47754d379005062a6c771c7ef4cd"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008085}, 0x24044884) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
recvmsg$can_raw(r5, &(0x7f00000005c0)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000840)=""/125, 0x7d}], 0x9, &(0x7f0000000980)=""/114, 0x72}, 0x40000103) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x50000, 0x0) (async)
close(r6) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) (async)

850.034209ms ago: executing program 2 (id=1591):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r10, 0x420, 0xb02}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x54)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='objagg_obj_root_create\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1400000004000000040000002200000082340100", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000000b9766b0700"/28, @ANYRES32=r12, @ANYBLOB], 0x50)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r13, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

789.190575ms ago: executing program 0 (id=1592):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002040000400004803c0001800a0001006d617463680e0000000000000055edeb80f03b0200000000020007116b61979e090001006c367470000000e208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000008000000000000000adcef30f5b96bebaa1a83ae1b5284d5bdd69a01e805625a0ea937e8919899f16a17660553400afa8152bcbb7aefe036415dc36608de78340708e15a9267ace8fc1222301b19521eed"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0)
epoll_create1(0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c090)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r5, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)
accept4(r2, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000008000000000085000000890000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010000104000000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000002000000014000300697036746e6c30000000000000000000300012800b000100697036746e6c000020000280080014000800000014000300fc010000000000000000000000000001"], 0x64}}, 0x0)

694.85013ms ago: executing program 2 (id=1593):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x10000, 0x12)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000)=0x5eb, 0x4)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

606.820704ms ago: executing program 0 (id=1594):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r2, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x60, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x60}}, 0x0)

604.401631ms ago: executing program 2 (id=1595):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) (async)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

519.975338ms ago: executing program 0 (id=1596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) (async)
ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={<r7=>0x0, @empty, @multicast1}, &(0x7f0000000640)=0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r6, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x21}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (async)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r10, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
recvmmsg(r10, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/184, 0xb8}, 0x9}, {{&(0x7f0000000240)=@x25, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/23}], 0x0, &(0x7f0000000380)=""/130}, 0x13939393}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/4096}]}, 0x9295}], 0x400000000000016, 0x45833af92e4b399e, 0x0) (async)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="14005e80080002000000000108000100ffffffef"], 0x30}}, 0x0)

369.623727ms ago: executing program 2 (id=1597):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r11, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r10, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r11}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

363.349377ms ago: executing program 0 (id=1598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) (async)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

220.332122ms ago: executing program 2 (id=1599):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44001)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)

0s ago: executing program 2 (id=1600):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x48004)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'ip6gre0\x00', {}, 0x1})
r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)
recvfrom$inet(r0, &(0x7f0000000100)=""/92, 0x5c, 0x20, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000240)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r3, &(0x7f0000000200), 0x0, 0x2, &(0x7f0000000280)={r4, r5+10000000})
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "c63db9befb6df74aec6e9d0b47d882ec"})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x6}, 0x8)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000005)
ioctl$PPPIOCDISCONN(r2, 0x7439)
connect$rds(r3, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6gre0\x00', <r10=>0x0, 0x29, 0xf2, 0x17, 0x80, 0x28, @remote, @mcast1, 0x7, 0x10, 0xfffffe00, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', <r12=>0x0, 0x4, 0x5, 0x7, 0x7, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfca58b36503b666b, 0x7808, 0x1ff, 0x3}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', <r14=>0x0, 0x7, 0x8, 0x0, 0xeb38, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@noop]}}}}})
getpeername$packet(r2, &(0x7f0000000b00)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b80)={'team0\x00', <r16=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000bc0)={@broadcast, @remote, <r17=>0x0}, &(0x7f0000000c00)=0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r3, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r18=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001340)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000000d40)={0x5a0, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r14}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfff, 0x0, 0xe, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x95d, 0x7f, 0x64, 0x1}, {0x80, 0x1, 0x0, 0x1}, {0x1, 0xa8, 0x9, 0xe9}]}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x47}}, {0x8}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ppoll(&(0x7f0000001380)=[{r2, 0x2400}], 0x1, &(0x7f00000013c0)={0x0, 0x3938700}, &(0x7f0000001400)={[0x6]}, 0x8)

kernel console output (not intermixed with test programs):

ing attributes in process `syz.1.285'.
[   93.316938][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.319768][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.322566][ T7077] netlink: 540 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.348767][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.351576][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.354535][ T7079] netlink: 540 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.357911][ T7077] netlink: 'syz.1.285': attribute type 10 has an invalid length.
[   93.402555][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'.
[   93.756274][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'.
[   93.772412][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'.
[   93.834410][ T7126] netlink: 'syz.0.295': attribute type 10 has an invalid length.
[   93.868044][ T7134] mac80211_hwsim hwsim18 wlan1: left allmulticast mode
[   93.880175][ T7134] netlink: 'syz.0.298': attribute type 10 has an invalid length.
[   93.975592][ T7145] netlink: 'syz.0.300': attribute type 16 has an invalid length.
[   93.978567][ T7145] netlink: 'syz.0.300': attribute type 17 has an invalid length.
[   93.997603][ T7145] IPv6: NLM_F_REPLACE set, but no existing node found!
[   94.173358][ T7157] netlink: 'syz.1.305': attribute type 10 has an invalid length.
[   94.181715][ T7157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.186306][ T7157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.948078][ T7176] dvmrp1: tun_chr_ioctl cmd 1074025673
[   94.950522][ T7177] dvmrp1: tun_chr_ioctl cmd 1074025677
[   94.952992][ T7177] dvmrp1: linktype set to 768
[   95.815134][ T7201] netlink: 'syz.2.316': attribute type 10 has an invalid length.
[   96.303930][ T7241] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   96.403159][ T7248] netlink: 'syz.1.324': attribute type 10 has an invalid length.
[   97.272382][ T7285] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.391716][ T7298] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.394037][ T7296] IPVS: stopping backup sync thread 7298 ...
[   98.376066][ T7331] validate_nla: 3 callbacks suppressed
[   98.376080][ T7331] netlink: 'syz.0.348': attribute type 23 has an invalid length.
[   98.409738][ T7330] __nla_validate_parse: 20 callbacks suppressed
[   98.409757][ T7330] netlink: 112 bytes leftover after parsing attributes in process `syz.1.349'.
[   98.579051][ T7338] netlink: 'syz.1.352': attribute type 16 has an invalid length.
[   98.582428][ T7338] netlink: 'syz.1.352': attribute type 17 has an invalid length.
[   98.586074][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[   98.591059][ T7338] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.593384][ T7340] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.709721][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[   98.722757][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'.
[   99.303312][ T5897] IPVS: starting estimator thread 0...
[   99.309215][ T7353] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[   99.404018][ T7354] IPVS: using max 63 ests per chain, 151200 per kthread
[   99.586402][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   99.594012][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'.
[   99.749604][ T7411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.369'.
[   99.807486][  T147] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   99.819241][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'.
[   99.886576][ T7426] netlink: 'syz.2.368': attribute type 4 has an invalid length.
[   99.907838][ T7426] netlink: 'syz.2.368': attribute type 4 has an invalid length.
[  100.408336][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'.
[  100.799952][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[  101.008941][ T7512] netlink: 'syz.2.389': attribute type 10 has an invalid length.
[  101.227614][ T7536] netlink: 'syz.0.393': attribute type 9 has an invalid length.
[  101.230822][ T7536] netlink: 'syz.0.393': attribute type 7 has an invalid length.
[  101.233310][ T7536] netlink: 'syz.0.393': attribute type 8 has an invalid length.
[  101.289160][ T7547] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.607432][ T7561] bond0: (slave dummy0): Releasing backup interface
[  101.670347][ T7570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.680000][ T7570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.503033][ T7636] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  102.507564][ T7636] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  102.692403][ T7658] batadv1: entered promiscuous mode
[  102.713834][ T7658] batadv1: entered allmulticast mode
[  103.056209][ T7692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.059155][ T7692] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.950228][ T7742] __nla_validate_parse: 14 callbacks suppressed
[  103.950241][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'.
[  103.967504][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'.
[  104.002354][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[  104.212193][ T7765] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.217355][ T7765] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.251233][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.439'.
[  104.940957][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'.
[  104.946620][ T7775] validate_nla: 12 callbacks suppressed
[  104.946631][ T7775] netlink: 'syz.1.442': attribute type 10 has an invalid length.
[  104.989865][ T7775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.442'.
[  105.312601][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'.
[  105.318004][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'.
[  105.900443][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'.
[  106.082026][ T7850] netlink: 'syz.1.455': attribute type 12 has an invalid length.
[  106.233421][ T7853] netlink: 'syz.1.456': attribute type 16 has an invalid length.
[  106.236194][ T7853] netlink: 'syz.1.456': attribute type 17 has an invalid length.
[  106.239689][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[  106.245161][ T7853] IPv6: NLM_F_REPLACE set, but no existing node found!
[  106.928110][ T7865] net veth1_virt_wifi : renamed from virt_wifi0
[  106.937426][ T7866] netlink: 'syz.0.460': attribute type 10 has an invalid length.
[  106.990876][ T7869] netlink: 'syz.0.461': attribute type 10 has an invalid length.
[  106.997884][ T7869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.000839][ T7869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.043990][ T7871] netlink: 'syz.1.462': attribute type 11 has an invalid length.
[  107.095286][ T7874] netlink: 'syz.2.463': attribute type 10 has an invalid length.
[  107.183865][ T7879] netlink: 'syz.1.464': attribute type 10 has an invalid length.
[  107.187844][ T7879] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  107.247127][ T7874] netlink: 'syz.2.463': attribute type 2 has an invalid length.
[  107.441195][ T7905] netlink: 'syz.1.471': attribute type 10 has an invalid length.
[  107.444684][ T7905] veth0_vlan: left promiscuous mode
[  107.447169][ T7905] veth0_vlan: entered promiscuous mode
[  107.450170][ T7905] team0: Device veth0_vlan failed to register rx_handler
[  107.943320][ T7940] IPv6: NLM_F_REPLACE set, but no existing node found!
[  107.956330][ T7942] : renamed from pimreg
[  108.820816][ T8005] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.911893][ T8010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.920916][ T8010] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  108.925762][ T8010] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  109.771277][ T8016] __nla_validate_parse: 10 callbacks suppressed
[  109.771288][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'.
[  109.792490][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.499'.
[  109.797508][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'.
[  109.803843][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'.
[  109.825877][ T8016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.828913][ T8016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.843204][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'.
[  110.023575][ T5916] tipc: Node number set to 1039561708
[  110.589401][ T8045] netlink: 3 bytes leftover after parsing attributes in process `syz.0.501'.
[  110.597235][ T8045] batadv1: entered promiscuous mode
[  110.599123][ T8045] batadv1: entered allmulticast mode
[  110.678783][ T8047] validate_nla: 6 callbacks suppressed
[  110.678797][ T8047] netlink: 'syz.2.502': attribute type 10 has an invalid length.
[  110.693616][ T8047] team0: Device ipvlan1 failed to register rx_handler
[  110.884037][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[  110.911086][ T8076] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  110.914868][ T8076] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  110.917952][ T8076] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  110.933952][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'.
[  110.945026][ T8083] netlink: 'syz.0.509': attribute type 16 has an invalid length.
[  110.947977][ T8083] netlink: 'syz.0.509': attribute type 17 has an invalid length.
[  110.968604][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[  110.987890][ T8083] IPv6: NLM_F_REPLACE set, but no existing node found!
[  111.000889][ T8090] netlink: 200 bytes leftover after parsing attributes in process `syz.1.511'.
[  111.058355][ T8093] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  111.760736][   T33] audit: type=1804 audit(1758174909.610:2): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.515" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=916 res=1 errno=0
[  111.771793][   T33] audit: type=1800 audit(1758174909.610:3): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.515" name="cgroup.controllers" dev="tmpfs" ino=916 res=0 errno=0
[  111.784034][   T33] audit: type=1800 audit(1758174909.610:4): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.515" name="cgroup.controllers" dev="tmpfs" ino=916 res=0 errno=0
[  111.798607][ T8102] netlink: 'syz.0.515': attribute type 16 has an invalid length.
[  111.801127][ T8102] netlink: 'syz.0.515': attribute type 17 has an invalid length.
[  111.806527][ T8102] IPv6: NLM_F_REPLACE set, but no existing node found!
[  111.809495][ T8103] IPv6: NLM_F_REPLACE set, but no existing node found!
[  111.905124][ T8107] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  111.911306][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT(full) 
[  111.911323][ T8107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.911331][ T8107] Call Trace:
[  111.911337][ T8107]  <TASK>
[  111.911344][ T8107]  dump_stack_lvl+0x189/0x250
[  111.911377][ T8107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.911393][ T8107]  ? __pfx__printk+0x10/0x10
[  111.911413][ T8107]  ? kernfs_path_from_node+0x2f/0x290
[  111.911430][ T8107]  ? kernfs_path_from_node+0x250/0x290
[  111.911480][ T8107]  ? kernfs_path_from_node+0x2f/0x290
[  111.911499][ T8107]  sysfs_warn_dup+0x8e/0xa0
[  111.911516][ T8107]  sysfs_do_create_link_sd+0xc0/0x110
[  111.911534][ T8107]  device_add_class_symlinks+0x1cf/0x240
[  111.911554][ T8107]  device_add+0x475/0xb50
[  111.911573][ T8107]  wiphy_register+0x1c81/0x2aa0
[  111.911606][ T8107]  ? __pfx_wiphy_register+0x10/0x10
[  111.911623][ T8107]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  111.911644][ T8107]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  111.911666][ T8107]  ieee80211_register_hw+0x3442/0x40a0
[  111.911691][ T8107]  ? ieee80211_register_hw+0x1411/0x40a0
[  111.911712][ T8107]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  111.911730][ T8107]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.911754][ T8107]  ? __hrtimer_setup+0x187/0x210
[  111.911772][ T8107]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  111.911789][ T8107]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  111.911833][ T8107]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  111.911850][ T8107]  ? trace_kmalloc+0x1f/0xd0
[  111.911864][ T8107]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  111.911881][ T8107]  ? __x64_sys_sendmsg+0x19b/0x260
[  111.911893][ T8107]  ? kstrndup+0xbf/0x160
[  111.911953][ T8107]  hwsim_new_radio_nl+0xea4/0x1b10
[  111.911976][ T8107]  ? __pfx___nla_validate_parse+0x10/0x10
[  111.912006][ T8107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.912031][ T8107]  ? rcu_is_watching+0x15/0xb0
[  111.912053][ T8107]  ? __nla_parse+0x40/0x60
[  111.912074][ T8107]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  111.912091][ T8107]  genl_family_rcv_msg_doit+0x215/0x300
[  111.912108][ T8107]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  111.912129][ T8107]  ? bpf_lsm_capable+0x9/0x20
[  111.912144][ T8107]  ? security_capable+0x7e/0x2e0
[  111.912163][ T8107]  genl_rcv_msg+0x60e/0x790
[  111.912226][ T8107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.912241][ T8107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.912279][ T8107]  netlink_rcv_skb+0x208/0x470
[  111.912295][ T8107]  ? __lock_acquire+0xab9/0xd20
[  111.912310][ T8107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.912325][ T8107]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.912355][ T8107]  ? down_read+0x1ad/0x2e0
[  111.912369][ T8107]  genl_rcv+0x28/0x40
[  111.912379][ T8107]  netlink_unicast+0x82f/0x9e0
[  111.912400][ T8107]  ? __pfx_netlink_unicast+0x10/0x10
[  111.912414][ T8107]  ? netlink_sendmsg+0x642/0xb30
[  111.912427][ T8107]  ? skb_put+0x11b/0x210
[  111.912454][ T8107]  netlink_sendmsg+0x805/0xb30
[  111.912477][ T8107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.912496][ T8107]  ? aa_sock_msg_perm+0xf1/0x1d0
[  111.912514][ T8107]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  111.912526][ T8107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.912542][ T8107]  __sock_sendmsg+0x21c/0x270
[  111.912559][ T8107]  ____sys_sendmsg+0x505/0x830
[  111.912577][ T8107]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.912596][ T8107]  ? import_iovec+0x74/0xa0
[  111.912611][ T8107]  ___sys_sendmsg+0x21f/0x2a0
[  111.912626][ T8107]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.912669][ T8107]  ? __fget_files+0x2a/0x420
[  111.912681][ T8107]  ? __fget_files+0x3a0/0x420
[  111.912702][ T8107]  __x64_sys_sendmsg+0x19b/0x260
[  111.912717][ T8107]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.912743][ T8107]  ? do_syscall_64+0xbe/0xfa0
[  111.912765][ T8107]  do_syscall_64+0xfa/0xfa0
[  111.912781][ T8107]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.912796][ T8107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.912808][ T8107]  ? exc_page_fault+0xab/0x100
[  111.912827][ T8107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.912839][ T8107] RIP: 0033:0x7fe37cb8eba9
[  111.912852][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.912862][ T8107] RSP: 002b:00007fe37da53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.912876][ T8107] RAX: ffffffffffffffda RBX: 00007fe37cdd5fa0 RCX: 00007fe37cb8eba9
[  111.912885][ T8107] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  111.912893][ T8107] RBP: 00007fe37cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  111.912900][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.912907][ T8107] R13: 00007fe37cdd6038 R14: 00007fe37cdd5fa0 R15: 00007ffd4d6bdaa8
[  111.912932][ T8107]  </TASK>
[  112.207502][ T8116] sctp: [Deprecated]: syz.2.519 (pid 8116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.207502][ T8116] Use struct sctp_sack_info instead
[  112.447844][ T8139] sctp: [Deprecated]: syz.1.523 (pid 8139) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.447844][ T8139] Use struct sctp_sack_info instead
[  112.640034][ T8158] netlink: 'syz.0.528': attribute type 12 has an invalid length.
[  112.841236][ T8174] tipc: Invalid UDP bearer configuration
[  112.841267][ T8174] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.961088][ T8180] netlink: 'syz.0.533': attribute type 10 has an invalid length.
[  112.968245][ T8180] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  113.729509][ T8220] netlink: 'syz.1.537': attribute type 10 has an invalid length.
[  114.077296][ T8241] netlink: 'syz.2.541': attribute type 16 has an invalid length.
[  114.079844][ T8241] netlink: 'syz.2.541': attribute type 17 has an invalid length.
[  114.084291][ T8241] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.117442][ T8266] __nla_validate_parse: 21 callbacks suppressed
[  115.117454][ T8266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.547'.
[  115.563231][ T8283] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  115.911716][ T8298] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  115.917119][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'.
[  115.922123][ T8298] validate_nla: 2 callbacks suppressed
[  115.922132][ T8298] netlink: 'syz.1.555': attribute type 10 has an invalid length.
[  115.935947][ T8298] batadv_slave_0: entered allmulticast mode
[  115.956490][ T8302] netlink: 'syz.0.554': attribute type 10 has an invalid length.
[  115.961707][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'.
[  116.153207][ T8316] netlink: 'syz.2.560': attribute type 10 has an invalid length.
[  116.165231][ T8316] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.168708][ T8316] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.218180][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  116.221544][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  116.236977][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  116.322043][ T8326] netlink: 'syz.1.563': attribute type 10 has an invalid length.
[  116.331794][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'.
[  116.497366][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'.
[  116.642192][ T8342] netlink: 'syz.1.566': attribute type 16 has an invalid length.
[  116.646309][ T8342] netlink: 'syz.1.566': attribute type 17 has an invalid length.
[  116.649554][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[  116.654102][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[  117.324756][ T8399] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[  117.327884][ T8399] NCSI netlink: No device for ifindex 813332851
[  117.368695][ T8401] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  117.525499][ T8409] batadv_slave_0: left allmulticast mode
[  117.672035][ T8425] netlink: 'syz.2.585': attribute type 1 has an invalid length.
[  117.806780][ T8432] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  117.876101][ T8439] netlink: 'syz.2.589': attribute type 10 has an invalid length.
[  118.992978][ T8459] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  119.093004][ T8462] netlink: 'syz.2.595': attribute type 16 has an invalid length.
[  119.098427][ T8462] IPv6: NLM_F_REPLACE set, but no existing node found!
[  119.473486][ T8476] tipc: Resetting bearer <eth:syzkaller0>
[  120.255787][ T8525] tipc: Resetting bearer <eth:syzkaller0>
[  120.682190][ T8537] __nla_validate_parse: 17 callbacks suppressed
[  120.682207][ T8537] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.614'.
[  120.768012][ T8543] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  120.844517][ T8545] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  121.332905][ T8564] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  121.459548][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  121.478684][ T8585] validate_nla: 5 callbacks suppressed
[  121.478701][ T8585] netlink: 'syz.0.626': attribute type 7 has an invalid length.
[  121.484997][ T8577] netlink: 'syz.2.625': attribute type 10 has an invalid length.
[  121.587415][ T8585] netlink: 'syz.0.626': attribute type 12 has an invalid length.
[  121.656737][ T8593] netlink: 72 bytes leftover after parsing attributes in process `syz.1.629'.
[  121.735515][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'.
[  121.780447][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'.
[  121.802675][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'.
[  121.809258][ T8614] netlink: 200 bytes leftover after parsing attributes in process `syz.1.633'.
[  121.812900][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'.
[  121.819993][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'.
[  121.823246][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  121.861264][ T8617] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  121.870273][ T8617] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  121.903289][ T8621] netlink: 'syz.1.636': attribute type 10 has an invalid length.
[  122.031403][ T8630] netlink: 'syz.0.639': attribute type 12 has an invalid length.
[  122.143839][ T8640] vlan2: entered allmulticast mode
[  122.145953][ T8640] veth1: entered allmulticast mode
[  122.212084][ T8644] netlink: 'syz.0.643': attribute type 12 has an invalid length.
[  122.536619][ T8661] netlink: 'syz.1.648': attribute type 10 has an invalid length.
[  122.541469][ T8661] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.544621][ T8661] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.657270][ T8667] netlink: 'syz.2.650': attribute type 11 has an invalid length.
[  123.309312][ T8704] mac80211_hwsim hwsim51 wlan1: left allmulticast mode
[  123.510179][ T8721] netlink: 'syz.1.655': attribute type 10 has an invalid length.
[  123.678613][ T8734] netlink: 'syz.2.656': attribute type 16 has an invalid length.
[  123.683368][ T8734] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.151651][ T8753] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.158111][ T8753] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  124.160778][ T8753] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  124.394655][ T8762] batadv1: entered promiscuous mode
[  124.396831][ T8762] batadv1: entered allmulticast mode
[  124.459671][ T8766] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  124.462520][ T8766] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  124.645607][ T8785] syzkaller1: entered promiscuous mode
[  124.647688][ T8785] syzkaller1: entered allmulticast mode
[  124.699392][ T8783] vlan2: left allmulticast mode
[  124.700979][ T8783] veth1: left allmulticast mode
[  124.750517][ T8791] bond0: (slave netdevsim0): Releasing backup interface
[  126.135718][ T8877] __nla_validate_parse: 88 callbacks suppressed
[  126.135729][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  126.368060][ T8884] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  126.539344][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  127.002985][ T8902] 8021q: adding VLAN 0 to HW filter on device team0
[  127.010202][ T8902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.137057][ T8908] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  127.197682][ T8910] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  127.256729][ T8917] netlink: 248 bytes leftover after parsing attributes in process `syz.1.704'.
[  127.332899][ T8914] validate_nla: 1 callbacks suppressed
[  127.332940][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.339737][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.342982][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.369210][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.372395][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.372660][ T8919] netlink: 'syz.0.705': attribute type 10 has an invalid length.
[  127.391262][ T8919] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  127.404291][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.407604][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.410799][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.415567][ T8914] netlink: 'syz.2.703': attribute type 10 has an invalid length.
[  127.533139][ T8931] bridge_slave_0: entered promiscuous mode
[  127.536191][ T8931] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  127.665123][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  127.669308][ T8936] mac80211_hwsim hwsim51 wlan1: left allmulticast mode
[  127.710932][ T8944] netlink: 200 bytes leftover after parsing attributes in process `syz.1.712'.
[  127.717686][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'.
[  127.812297][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  127.818133][ T8955] IPv6: NLM_F_REPLACE set, but no existing node found!
[  127.986446][ T8960] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  128.091474][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'.
[  128.126875][ T8972] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  128.153269][ T8974] netlink: 200 bytes leftover after parsing attributes in process `syz.0.723'.
[  128.160417][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'.
[  128.202084][ T8977] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.205226][ T8977] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.619165][ T8980] team0: Port device dummy0 added
[  128.627024][ T8980] team0: Port device dummy0 removed
[  128.826482][ T8992] tap0: tun_chr_ioctl cmd 1074025676
[  128.828597][ T8992] tap0: owner set to 0
[  128.836032][ T8992] tap0: tun_chr_ioctl cmd 1074025673
[  128.838534][ T8994] tap0: tun_chr_ioctl cmd 1074025676
[  128.840747][ T8994] tap0: owner set to 0
[  128.969867][ T9001] netem: change failed
[  129.043291][ T9007] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  129.137395][ T9013] mac80211_hwsim hwsim51 wlan1: left allmulticast mode
[  129.477203][ T9039] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  129.485165][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.0.742 Not tainted syzkaller #0 PREEMPT(full) 
[  129.485176][ T9039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.485181][ T9039] Call Trace:
[  129.485185][ T9039]  <TASK>
[  129.485189][ T9039]  dump_stack_lvl+0x189/0x250
[  129.485204][ T9039]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.485213][ T9039]  ? __pfx__printk+0x10/0x10
[  129.485227][ T9039]  ? kernfs_path_from_node+0x2f/0x290
[  129.485237][ T9039]  ? kernfs_path_from_node+0x250/0x290
[  129.485245][ T9039]  ? kernfs_path_from_node+0x2f/0x290
[  129.485256][ T9039]  sysfs_warn_dup+0x8e/0xa0
[  129.485271][ T9039]  sysfs_do_create_link_sd+0xc0/0x110
[  129.485282][ T9039]  device_add_class_symlinks+0x1cf/0x240
[  129.485293][ T9039]  device_add+0x475/0xb50
[  129.485304][ T9039]  wiphy_register+0x1c81/0x2aa0
[  129.485324][ T9039]  ? __pfx_wiphy_register+0x10/0x10
[  129.485334][ T9039]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  129.485346][ T9039]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  129.485356][ T9039]  ieee80211_register_hw+0x3442/0x40a0
[  129.485372][ T9039]  ? ieee80211_register_hw+0x1411/0x40a0
[  129.485384][ T9039]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.485394][ T9039]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.485407][ T9039]  ? __hrtimer_setup+0x187/0x210
[  129.485418][ T9039]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  129.485428][ T9039]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  129.485453][ T9039]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.485463][ T9039]  ? trace_kmalloc+0x1f/0xd0
[  129.485472][ T9039]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  129.485482][ T9039]  ? __x64_sys_sendmsg+0x19b/0x260
[  129.485490][ T9039]  ? kstrndup+0xbf/0x160
[  129.485503][ T9039]  hwsim_new_radio_nl+0xea4/0x1b10
[  129.485516][ T9039]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.485533][ T9039]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.485548][ T9039]  ? rcu_is_watching+0x15/0xb0
[  129.485561][ T9039]  ? __nla_parse+0x40/0x60
[  129.485572][ T9039]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  129.485585][ T9039]  genl_family_rcv_msg_doit+0x215/0x300
[  129.485597][ T9039]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  129.485612][ T9039]  ? bpf_lsm_capable+0x9/0x20
[  129.485621][ T9039]  ? security_capable+0x7e/0x2e0
[  129.485634][ T9039]  genl_rcv_msg+0x60e/0x790
[  129.485645][ T9039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.485653][ T9039]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.485670][ T9039]  netlink_rcv_skb+0x208/0x470
[  129.485680][ T9039]  ? __lock_acquire+0xab9/0xd20
[  129.485690][ T9039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.485698][ T9039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.485718][ T9039]  ? down_read+0x1ad/0x2e0
[  129.485746][ T9039]  genl_rcv+0x28/0x40
[  129.485755][ T9039]  netlink_unicast+0x82f/0x9e0
[  129.485769][ T9039]  ? __pfx_netlink_unicast+0x10/0x10
[  129.485779][ T9039]  ? netlink_sendmsg+0x642/0xb30
[  129.485789][ T9039]  ? skb_put+0x11b/0x210
[  129.485802][ T9039]  netlink_sendmsg+0x805/0xb30
[  129.485817][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.485829][ T9039]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.485840][ T9039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.485847][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.485858][ T9039]  __sock_sendmsg+0x21c/0x270
[  129.485869][ T9039]  ____sys_sendmsg+0x505/0x830
[  129.485879][ T9039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.485890][ T9039]  ? import_iovec+0x74/0xa0
[  129.485900][ T9039]  ___sys_sendmsg+0x21f/0x2a0
[  129.485908][ T9039]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.485934][ T9039]  ? __fget_files+0x2a/0x420
[  129.485941][ T9039]  ? __fget_files+0x3a0/0x420
[  129.485953][ T9039]  __x64_sys_sendmsg+0x19b/0x260
[  129.485962][ T9039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.485978][ T9039]  ? do_syscall_64+0xbe/0xfa0
[  129.485990][ T9039]  do_syscall_64+0xfa/0xfa0
[  129.486000][ T9039]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.486009][ T9039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.486017][ T9039]  ? exc_page_fault+0xab/0x100
[  129.486028][ T9039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.486035][ T9039] RIP: 0033:0x7f3dd1b8eba9
[  129.486042][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.486048][ T9039] RSP: 002b:00007f3dcfdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.486057][ T9039] RAX: ffffffffffffffda RBX: 00007f3dd1dd5fa0 RCX: 00007f3dd1b8eba9
[  129.486062][ T9039] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  129.486066][ T9039] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  129.486070][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.486074][ T9039] R13: 00007f3dd1dd6038 R14: 00007f3dd1dd5fa0 R15: 00007fff6a927798
[  129.486088][ T9039]  </TASK>
[  129.652888][ T9040] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  129.657619][ T9040] CPU: 0 UID: 0 PID: 9040 Comm: syz.0.742 Not tainted syzkaller #0 PREEMPT(full) 
[  129.657635][ T9040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.657644][ T9040] Call Trace:
[  129.657649][ T9040]  <TASK>
[  129.657656][ T9040]  dump_stack_lvl+0x189/0x250
[  129.657680][ T9040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.657695][ T9040]  ? __pfx__printk+0x10/0x10
[  129.657740][ T9040]  ? kernfs_path_from_node+0x2f/0x290
[  129.657757][ T9040]  ? kernfs_path_from_node+0x250/0x290
[  129.657772][ T9040]  ? kernfs_path_from_node+0x2f/0x290
[  129.657790][ T9040]  sysfs_warn_dup+0x8e/0xa0
[  129.657807][ T9040]  sysfs_do_create_link_sd+0xc0/0x110
[  129.657825][ T9040]  device_add_class_symlinks+0x1cf/0x240
[  129.657845][ T9040]  device_add+0x475/0xb50
[  129.657864][ T9040]  wiphy_register+0x1c81/0x2aa0
[  129.657897][ T9040]  ? __pfx_wiphy_register+0x10/0x10
[  129.657914][ T9040]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  129.657934][ T9040]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  129.657951][ T9040]  ieee80211_register_hw+0x3442/0x40a0
[  129.657979][ T9040]  ? ieee80211_register_hw+0x1411/0x40a0
[  129.657999][ T9040]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.658016][ T9040]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.658041][ T9040]  ? __hrtimer_setup+0x187/0x210
[  129.658058][ T9040]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  129.658075][ T9040]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  129.658119][ T9040]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.658136][ T9040]  ? trace_kmalloc+0x1f/0xd0
[  129.658151][ T9040]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  129.658168][ T9040]  ? __x64_sys_sendmsg+0x19b/0x260
[  129.658180][ T9040]  ? kstrndup+0xbf/0x160
[  129.658203][ T9040]  hwsim_new_radio_nl+0xea4/0x1b10
[  129.658225][ T9040]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.658260][ T9040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.658284][ T9040]  ? rcu_is_watching+0x15/0xb0
[  129.658307][ T9040]  ? __nla_parse+0x40/0x60
[  129.658327][ T9040]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  129.658349][ T9040]  genl_family_rcv_msg_doit+0x215/0x300
[  129.658371][ T9040]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  129.658397][ T9040]  ? bpf_lsm_capable+0x9/0x20
[  129.658412][ T9040]  ? security_capable+0x7e/0x2e0
[  129.658432][ T9040]  genl_rcv_msg+0x60e/0x790
[  129.658450][ T9040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.658460][ T9040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.658488][ T9040]  netlink_rcv_skb+0x208/0x470
[  129.658503][ T9040]  ? __lock_acquire+0xab9/0xd20
[  129.658520][ T9040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.658534][ T9040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.658567][ T9040]  ? down_read+0x1ad/0x2e0
[  129.658583][ T9040]  genl_rcv+0x28/0x40
[  129.658596][ T9040]  netlink_unicast+0x82f/0x9e0
[  129.658619][ T9040]  ? __pfx_netlink_unicast+0x10/0x10
[  129.658637][ T9040]  ? netlink_sendmsg+0x642/0xb30
[  129.658653][ T9040]  ? skb_put+0x11b/0x210
[  129.658674][ T9040]  netlink_sendmsg+0x805/0xb30
[  129.658700][ T9040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.658746][ T9040]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.658764][ T9040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.658777][ T9040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.658796][ T9040]  __sock_sendmsg+0x21c/0x270
[  129.658815][ T9040]  ____sys_sendmsg+0x505/0x830
[  129.658834][ T9040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.658854][ T9040]  ? import_iovec+0x74/0xa0
[  129.658871][ T9040]  ___sys_sendmsg+0x21f/0x2a0
[  129.658887][ T9040]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.658931][ T9040]  ? __fget_files+0x2a/0x420
[  129.658944][ T9040]  ? __fget_files+0x3a0/0x420
[  129.658966][ T9040]  __x64_sys_sendmsg+0x19b/0x260
[  129.658983][ T9040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.659008][ T9040]  ? do_syscall_64+0xbe/0xfa0
[  129.659031][ T9040]  do_syscall_64+0xfa/0xfa0
[  129.659047][ T9040]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.659065][ T9040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.659077][ T9040]  ? exc_page_fault+0xab/0x100
[  129.659097][ T9040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.659109][ T9040] RIP: 0033:0x7f3dd1b8eba9
[  129.659121][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.659132][ T9040] RSP: 002b:00007f3dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.659146][ T9040] RAX: ffffffffffffffda RBX: 00007f3dd1dd6090 RCX: 00007f3dd1b8eba9
[  129.659154][ T9040] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  129.659161][ T9040] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  129.659168][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.659173][ T9040] R13: 00007f3dd1dd6128 R14: 00007f3dd1dd6090 R15: 00007fff6a927798
[  129.659195][ T9040]  </TASK>
[  130.129838][ T9057] bridge3: entered allmulticast mode
[  130.178040][ T9063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  130.236609][ T9069] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  130.247918][ T9070] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  130.386829][ T9078] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  131.195438][ T9101] __nla_validate_parse: 36 callbacks suppressed
[  131.195448][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[  131.251889][ T9103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.258182][ T9103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.496091][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  131.499594][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  131.503012][ T9122] netlink: 124 bytes leftover after parsing attributes in process `syz.0.764'.
[  131.730862][ T9129] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  131.786264][ T9131] veth3: entered promiscuous mode
[  131.982550][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  131.987806][ T9139] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.011754][ T9141] netlink: 11188 bytes leftover after parsing attributes in process `syz.1.772'.
[  132.178715][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'.
[  132.218654][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'.
[  132.222164][ T9153] tipc: Invalid UDP bearer configuration
[  132.222217][ T9153] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  132.266796][ T9157] netlink: 224 bytes leftover after parsing attributes in process `syz.1.777'.
[  132.319963][ T9160] 8021q: adding VLAN 0 to HW filter on device team0
[  132.324731][ T9160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.456589][ T9166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.781'.
[  132.477229][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.858362][ T9184] Bluetooth: MGMT ver 1.23
[  132.900413][ T9181] validate_nla: 84 callbacks suppressed
[  132.900430][ T9181] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  132.962521][ T9196] netlink: 'syz.0.789': attribute type 10 has an invalid length.
[  132.967183][ T9196] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  133.074633][ T9193] netlink: 'syz.1.788': attribute type 10 has an invalid length.
[  133.182638][ T9209] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  133.192895][ T9209] netlink: 'syz.0.794': attribute type 10 has an invalid length.
[  133.199278][ T9209] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  133.317808][ T9228] netlink: 'syz.0.799': attribute type 10 has an invalid length.
[  133.321696][ T9228] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.333558][ T9228] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.106084][ T9256] netlink: 'syz.2.806': attribute type 10 has an invalid length.
[  134.110863][ T9257] netlink: 'syz.2.806': attribute type 1 has an invalid length.
[  134.282047][ T9278] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  134.294518][ T9278] netlink: 'syz.0.813': attribute type 10 has an invalid length.
[  134.298896][ T9279] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  134.477522][ T9296] netlink: 'syz.0.817': attribute type 10 has an invalid length.
[  134.752878][ T9305] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  134.831411][ T9309] sctp: [Deprecated]: syz.0.823 (pid 9309) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.831411][ T9309] Use struct sctp_sack_info instead
[  134.837493][ T9309] sctp: [Deprecated]: syz.0.823 (pid 9309) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.837493][ T9309] Use struct sctp_sack_info instead
[  134.886537][ T9311] batadv1: entered promiscuous mode
[  134.888270][ T9311] batadv1: entered allmulticast mode
[  135.025999][ T9314] netlink: 'syz.0.825': attribute type 10 has an invalid length.
[  135.031789][ T9314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.036840][ T9314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.149035][ T9319] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  135.282300][ T9323] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  135.320766][ T9329] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  135.459745][    C0] vcan0: j1939_tp_txtimer: 0xffff88801f37fc00: tx aborted with unknown reason: -2
[  135.464287][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f37ec00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  135.471331][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f37fc00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  135.588424][ T9340] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  135.906256][ T9365] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.910561][ T9365] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.203739][ T9399] __nla_validate_parse: 34 callbacks suppressed
[  136.203751][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'.
[  136.586963][ T9412] netlink: 248 bytes leftover after parsing attributes in process `syz.1.852'.
[  136.682899][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  136.722909][ T9421] netlink: 72 bytes leftover after parsing attributes in process `syz.1.855'.
[  136.788097][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'.
[  136.910091][ T9429] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  137.038857][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'.
[  137.045784][ T9437] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.049617][ T9437] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  137.937952][ T9461] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  138.157415][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[  138.160803][ T9478] 8021q: VLANs not supported on ip6_vti0
[  138.184043][ T9483] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.188413][ T9483] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  138.191513][ T9483] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  138.199958][ T9483] tipc: Resetting bearer <eth:syzkaller0>
[  138.220783][ T9483] tipc: Resetting bearer <eth:syzkaller0>
[  138.337634][ T9491] validate_nla: 14 callbacks suppressed
[  138.337649][ T9491] netlink: 'syz.1.875': attribute type 16 has an invalid length.
[  138.340578][ T9495] netlink: 'syz.2.876': attribute type 3 has an invalid length.
[  138.342143][ T9491] netlink: 'syz.1.875': attribute type 17 has an invalid length.
[  138.353319][ T9493] netlink: 'syz.0.874': attribute type 10 has an invalid length.
[  138.356414][ T9495] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[  138.410090][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'.
[  138.421663][ T9493] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  138.424327][ T9493] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  138.434921][ T9491] IPv6: NLM_F_REPLACE set, but no existing node found!
[  138.472243][ T9498] netlink: 'syz.2.878': attribute type 23 has an invalid length.
[  138.574812][ T9509] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  138.578669][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) 
[  138.578688][ T9509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.578697][ T9509] Call Trace:
[  138.578705][ T9509]  <TASK>
[  138.578712][ T9509]  dump_stack_lvl+0x189/0x250
[  138.578740][ T9509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.578757][ T9509]  ? __pfx__printk+0x10/0x10
[  138.578782][ T9509]  ? kernfs_path_from_node+0x2f/0x290
[  138.578800][ T9509]  ? kernfs_path_from_node+0x250/0x290
[  138.578816][ T9509]  ? kernfs_path_from_node+0x2f/0x290
[  138.578838][ T9509]  sysfs_warn_dup+0x8e/0xa0
[  138.578858][ T9509]  sysfs_do_create_link_sd+0xc0/0x110
[  138.578877][ T9509]  device_add_class_symlinks+0x1cf/0x240
[  138.578901][ T9509]  device_add+0x475/0xb50
[  138.578922][ T9509]  wiphy_register+0x1c81/0x2aa0
[  138.578959][ T9509]  ? __pfx_wiphy_register+0x10/0x10
[  138.579009][ T9509]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  138.579033][ T9509]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  138.579052][ T9509]  ieee80211_register_hw+0x3442/0x40a0
[  138.579080][ T9509]  ? ieee80211_register_hw+0x1411/0x40a0
[  138.579104][ T9509]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  138.579122][ T9509]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.579148][ T9509]  ? __hrtimer_setup+0x187/0x210
[  138.579167][ T9509]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  138.579185][ T9509]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  138.579232][ T9509]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  138.579259][ T9509]  ? trace_kmalloc+0x1f/0xd0
[  138.579277][ T9509]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  138.579298][ T9509]  ? __x64_sys_sendmsg+0x19b/0x260
[  138.579311][ T9509]  ? kstrndup+0xbf/0x160
[  138.579334][ T9509]  hwsim_new_radio_nl+0xea4/0x1b10
[  138.579358][ T9509]  ? __pfx___nla_validate_parse+0x10/0x10
[  138.579391][ T9509]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.579418][ T9509]  ? rcu_is_watching+0x15/0xb0
[  138.579440][ T9509]  ? __nla_parse+0x40/0x60
[  138.579454][ T9509]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  138.579471][ T9509]  genl_family_rcv_msg_doit+0x215/0x300
[  138.579489][ T9509]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.579513][ T9509]  ? bpf_lsm_capable+0x9/0x20
[  138.579532][ T9509]  ? security_capable+0x7e/0x2e0
[  138.579555][ T9509]  genl_rcv_msg+0x60e/0x790
[  138.579576][ T9509]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.579592][ T9509]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.579625][ T9509]  netlink_rcv_skb+0x208/0x470
[  138.579643][ T9509]  ? __lock_acquire+0xab9/0xd20
[  138.579662][ T9509]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.579679][ T9509]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.579715][ T9509]  ? down_read+0x1ad/0x2e0
[  138.579732][ T9509]  genl_rcv+0x28/0x40
[  138.579745][ T9509]  netlink_unicast+0x82f/0x9e0
[  138.579770][ T9509]  ? __pfx_netlink_unicast+0x10/0x10
[  138.579790][ T9509]  ? netlink_sendmsg+0x642/0xb30
[  138.579808][ T9509]  ? skb_put+0x11b/0x210
[  138.579831][ T9509]  netlink_sendmsg+0x805/0xb30
[  138.579864][ T9509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.579888][ T9509]  ? aa_sock_msg_perm+0xf1/0x1d0
[  138.579910][ T9509]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.579925][ T9509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.579946][ T9509]  __sock_sendmsg+0x21c/0x270
[  138.579966][ T9509]  ____sys_sendmsg+0x505/0x830
[  138.580015][ T9509]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.580041][ T9509]  ? import_iovec+0x74/0xa0
[  138.580059][ T9509]  ___sys_sendmsg+0x21f/0x2a0
[  138.580075][ T9509]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.580120][ T9509]  ? __fget_files+0x2a/0x420
[  138.580134][ T9509]  ? __fget_files+0x3a0/0x420
[  138.580178][ T9509]  __x64_sys_sendmsg+0x19b/0x260
[  138.580196][ T9509]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.580213][ T9509]  ? do_syscall_64+0xbe/0xfa0
[  138.580228][ T9509]  do_syscall_64+0xfa/0xfa0
[  138.580239][ T9509]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.580257][ T9509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.580266][ T9509]  ? exc_page_fault+0xab/0x100
[  138.580279][ T9509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.580286][ T9509] RIP: 0033:0x7f2360f8eba9
[  138.580295][ T9509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.580302][ T9509] RSP: 002b:00007f2361d90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.580311][ T9509] RAX: ffffffffffffffda RBX: 00007f23611d5fa0 RCX: 00007f2360f8eba9
[  138.580317][ T9509] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  138.580323][ T9509] RBP: 00007f2361011e19 R08: 0000000000000000 R09: 0000000000000000
[  138.580327][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.580332][ T9509] R13: 00007f23611d6038 R14: 00007f23611d5fa0 R15: 00007ffefd8fc508
[  138.580348][ T9509]  </TASK>
[  138.761207][ T9506] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.881'.
[  138.777465][ T9506] netlink: 'syz.2.881': attribute type 10 has an invalid length.
[  138.887455][ T9522] netlink: 248 bytes leftover after parsing attributes in process `syz.2.884'.
[  138.935529][ T9514] netlink: 'syz.1.883': attribute type 12 has an invalid length.
[  139.037461][ T9532] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.042017][ T9534] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  139.056457][ T9534] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  139.061559][ T9534] tipc: Resetting bearer <eth:syzkaller0>
[  139.078846][ T9532] tipc: Resetting bearer <eth:syzkaller0>
[  139.111650][ T9538] sctp: [Deprecated]: syz.1.888 (pid 9538) Use of int in max_burst socket option.
[  139.111650][ T9538] Use struct sctp_assoc_value instead
[  139.117387][ T9538] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  139.156281][ T9542] netlink: 'syz.1.889': attribute type 10 has an invalid length.
[  139.160800][ T9542] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode
[  139.341362][ T9551] 8021q: adding VLAN 0 to HW filter on device team0
[  139.351286][ T9551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.396706][ T9559] netlink: 'syz.1.894': attribute type 9 has an invalid length.
[  139.405852][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.409143][ T9557] 8021q: adding VLAN 0 to HW filter on device team0
[  139.414420][ T9557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.640243][ T9572] tipc: Resetting bearer <eth:syzkaller0>
[  139.648761][ T9572] bridge3: left allmulticast mode
[  139.650563][ T9572] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  139.703974][ T9575] bridge_slave_0: left promiscuous mode
[  139.709666][ T9575] tipc: Resetting bearer <eth:syzkaller0>
[  139.718293][ T9575] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  139.720553][ T9575] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  139.725116][ T9575] mac80211_hwsim hwsim96 wlan1: left allmulticast mode
[  141.037251][ T9635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.041032][ T9635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.468371][ T9659] __nla_validate_parse: 10 callbacks suppressed
[  141.468385][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'.
[  141.474130][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'.
[  141.489790][ T9659] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  141.495716][ T9659] batadv_slave_0: entered promiscuous mode
[  141.499428][ T9659] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  141.504770][ T9659] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.509274][ T9659] hsr0: entered promiscuous mode
[  141.515774][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.919'.
[  141.592100][ T9666] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  141.699300][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'.
[  141.730074][ T9675] tipc: Started in network mode
[  141.732101][ T9675] tipc: Node identity 080211000001, cluster identity 4711
[  141.736424][ T9675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.739734][ T9675] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  141.742748][ T9675] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  141.866668][ T9677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.869682][ T9677] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  141.872084][ T9677] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  141.876287][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  142.045474][ T9685] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  142.141661][ T9689] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  142.148803][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'.
[  142.325334][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'.
[  142.339383][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  142.438749][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'.
[  142.443577][ T9702] IPv6: NLM_F_REPLACE set, but no existing node found!
[  142.853665][ T6020] tipc: Node number set to 134418688
[  143.349832][ T9724] validate_nla: 6 callbacks suppressed
[  143.349845][ T9724] netlink: 'syz.0.935': attribute type 10 has an invalid length.
[  143.357796][ T9724] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  143.799481][ T9739] netlink: 824 bytes leftover after parsing attributes in process `syz.2.940'.
[  143.852816][ T9744] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  144.347275][ T9754] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  144.410433][ T9756] netlink: 'syz.1.945': attribute type 10 has an invalid length.
[  144.417115][ T9756] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.420136][ T9756] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.740525][ T9764] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  145.256124][ T6020] IPVS: starting estimator thread 0...
[  145.307638][ T9793] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  145.353730][ T9781] IPVS: using max 63 ests per chain, 151200 per kthread
[  145.382516][ T9799] delete_channel: no stack
[  145.478777][ T9809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.505294][ T9811] netlink: 'syz.2.960': attribute type 10 has an invalid length.
[  145.566238][ T9814] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  145.568982][ T9814] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  145.576853][ T9813] batadv1: entered promiscuous mode
[  145.578580][ T9813] batadv1: entered allmulticast mode
[  145.804191][ T9821] nbd0: detected capacity change from 0 to 127
[  145.814503][   T56] block nbd0: Receive control failed (result -104)
[  145.882310][ T9830] netlink: 'syz.1.965': attribute type 10 has an invalid length.
[  145.891238][ T9830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.895547][ T9830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.061984][ T9847] netlink: 'syz.0.969': attribute type 10 has an invalid length.
[  146.066406][ T9847] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  146.112114][ T9849] netlink: 'syz.0.970': attribute type 10 has an invalid length.
[  146.467419][ T9852] netlink: 'syz.2.971': attribute type 10 has an invalid length.
[  146.780062][ T9858] syzkaller1: entered promiscuous mode
[  146.782388][ T9858] syzkaller1: entered allmulticast mode
[  146.854943][ T9862] netlink: 'syz.1.973': attribute type 16 has an invalid length.
[  146.857465][ T9862] netlink: 'syz.1.973': attribute type 17 has an invalid length.
[  146.863771][ T9862] __nla_validate_parse: 12 callbacks suppressed
[  146.863781][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  146.908669][ T9864] netlink: 'syz.0.975': attribute type 10 has an invalid length.
[  146.961021][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'.
[  147.517571][ T9870] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  147.567573][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'.
[  147.573202][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'.
[  147.695898][ T9881] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.706706][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'.
[  147.801184][   T10] IPVS: starting estimator thread 0...
[  147.883917][ T9886] IPVS: using max 63 ests per chain, 151200 per kthread
[  147.912122][ T9897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.987'.
[  147.962951][ T9900] mac80211_hwsim hwsim78 wlan1: left allmulticast mode
[  147.980849][ T9902] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  148.020411][ T9905] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  148.074164][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  148.077006][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[  148.079829][ T9909] netlink: 38 bytes leftover after parsing attributes in process `syz.2.992'.
[  148.105768][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'.
[  148.252080][ T9921] IPv6: NLM_F_REPLACE set, but no existing node found!
[  148.265370][ T9928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.268572][ T9928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.401943][ T9937] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  148.405604][ T9937] hsr0: left promiscuous mode
[  148.417118][ T9937] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  148.419845][ T9937] batadv_slave_0: left promiscuous mode
[  149.045632][ T9940] validate_nla: 7 callbacks suppressed
[  149.045715][ T9940] netlink: 'syz.0.999': attribute type 10 has an invalid length.
[  149.053646][ T9940] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  149.325530][ T9956] netlink: 'syz.0.1003': attribute type 10 has an invalid length.
[  149.381481][ T9961] netlink: 'syz.0.1005': attribute type 10 has an invalid length.
[  149.473296][ T9970] netlink: 'syz.1.1008': attribute type 10 has an invalid length.
[  149.477446][ T9970] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode
[  149.563719][ T9977] netlink: 'syz.1.1011': attribute type 10 has an invalid length.
[  149.569180][ T9977] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  149.571861][ T9977] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  149.579987][ T9979] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  149.641555][ T9991] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  149.768730][T10001] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  149.781817][T10001] netlink: 'syz.2.1015': attribute type 10 has an invalid length.
[  149.792935][T10001] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  150.030441][T10016] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  150.246152][T10030] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  150.249159][T10030] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  150.484842][T10038] netlink: 'syz.0.1026': attribute type 16 has an invalid length.
[  150.488095][T10038] netlink: 'syz.0.1026': attribute type 17 has an invalid length.
[  150.491263][T10038] netlink: 'syz.0.1026': attribute type 27 has an invalid length.
[  150.497274][T10038] IPv6: NLM_F_REPLACE set, but no existing node found!
[  150.500138][T10039] IPv6: NLM_F_REPLACE set, but no existing node found!
[  150.586788][T10042] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.590490][T10042] 8021q: adding VLAN 0 to HW filter on device team0
[  150.596289][T10042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.649936][T10044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.736804][T10051] mac80211_hwsim hwsim96 wlan1: left allmulticast mode
[  150.843040][T10055] tipc: Resetting bearer <eth:syzkaller0>
[  150.866733][T10055] IPv6: NLM_F_REPLACE set, but no existing node found!
[  151.026882][T10070] netlink: 'syz.1.1035': attribute type 11 has an invalid length.
[  151.416610][T10103] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  151.419579][T10103] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  151.732742][T10143] 8021q: adding VLAN 0 to HW filter on device team0
[  151.739242][T10143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.025277][T10169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.029041][T10169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.271998][T10172] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  152.278067][T10172] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  152.373485][T10179] __nla_validate_parse: 23 callbacks suppressed
[  152.373502][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  152.381163][T10179] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  152.476452][T10186] block nbd1: Unsupported socket: should be TCP or UNIX.
[  152.629199][T10201] bond0: (slave dummy0): Releasing backup interface
[  152.638795][T10197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1068'.
[  152.802177][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'.
[  152.806423][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'.
[  152.939913][T10224] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1076'.
[  152.948209][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'.
[  153.240409][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  153.289469][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  153.757323][T10246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.760305][T10246] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  153.762693][T10246] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  153.767077][T10246] netem: change failed
[  153.769916][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1082'.
[  153.886893][T10253] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1085'.
[  154.110998][T10264] validate_nla: 10 callbacks suppressed
[  154.111008][T10264] netlink: 'syz.1.1088': attribute type 10 has an invalid length.
[  154.118833][T10264] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode
[  154.182350][T10272] netlink: 'syz.1.1091': attribute type 10 has an invalid length.
[  154.191907][T10272] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.197314][T10272] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.200892][T10273] bond0: default FDB implementation only supports local addresses
[  154.267526][T10276] netlink: 'syz.2.1092': attribute type 10 has an invalid length.
[  154.312092][T10279] netlink: 'syz.2.1093': attribute type 10 has an invalid length.
[  154.312665][T10280] netlink: 'syz.2.1093': attribute type 10 has an invalid length.
[  154.318668][T10278] tc_dump_action: action bad kind
[  154.322783][T10279] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  154.733284][T10294] tipc: Invalid UDP bearer configuration
[  154.733327][T10294] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  155.359670][T10316] netlink: 'syz.0.1103': attribute type 10 has an invalid length.
[  155.367043][T10316] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  155.407401][T10320] netlink: 'syz.0.1105': attribute type 9 has an invalid length.
[  155.448567][T10322] netlink: 'syz.1.1104': attribute type 16 has an invalid length.
[  155.451098][T10322] netlink: 'syz.1.1104': attribute type 17 has an invalid length.
[  155.502665][T10324] netlink: 'syz.0.1106': attribute type 11 has an invalid length.
[  155.618070][T10334] netlink: 'syz.0.1108': attribute type 10 has an invalid length.
[  155.712176][T10340] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  157.385274][T10384] __nla_validate_parse: 16 callbacks suppressed
[  157.385284][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  157.494364][T10386] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  157.497614][T10386] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  157.518469][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'.
[  157.789730][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'.
[  157.889505][T10417] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  157.899466][T10417] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  158.194643][T10427] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  158.199588][T10427] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  158.207150][T10427] tipc: Resetting bearer <eth:syzkaller0>
[  158.214676][T10427] Driver unsupported XDP return value 0 on prog  (id 322) dev N/A, expect packet loss!
[  158.257242][T10427] netlink: 11188 bytes leftover after parsing attributes in process `syz.1.1133'.
[  158.361109][T10436] mac80211_hwsim hwsim96 wlan1: left allmulticast mode
[  158.381877][T10440] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1136'.
[  158.535795][T10449] mac80211_hwsim hwsim78 wlan1: entered allmulticast mode
[  158.539593][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'.
[  158.710713][T10466] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1142'.
[  158.771991][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'.
[  158.775516][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'.
[  158.781630][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'.
[  158.790343][T10474] IPv6: NLM_F_REPLACE set, but no existing node found!
[  159.060345][T10486] tipc: Resetting bearer <eth:syzkaller0>
[  159.533948][T10496] validate_nla: 8 callbacks suppressed
[  159.533960][T10496] netlink: 'syz.0.1152': attribute type 10 has an invalid length.
[  159.589870][T10498] netlink: 'syz.1.1153': attribute type 10 has an invalid length.
[  159.625980][T10500] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.629447][T10500] 8021q: adding VLAN 0 to HW filter on device team0
[  159.636134][T10500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.677849][T10504] netlink: 'syz.1.1156': attribute type 10 has an invalid length.
[  159.716723][T10508] sctp: [Deprecated]: syz.0.1157 (pid 10508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.716723][T10508] Use struct sctp_sack_info instead
[  159.734403][T10508] sctp: [Deprecated]: syz.0.1157 (pid 10508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.734403][T10508] Use struct sctp_sack_info instead
[  159.739223][T10510] netlink: 'syz.1.1158': attribute type 23 has an invalid length.
[  159.785936][T10512] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  159.798700][T10512] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  159.951797][T10528] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  159.954288][T10528] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  160.060348][T10524] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  160.063355][T10524] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  160.599510][T10568] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  160.602418][T10568] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  160.698601][T10575] netlink: 'syz.0.1174': attribute type 4 has an invalid length.
[  161.467210][T10596] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  161.799819][T10620] netlink: 'syz.2.1186': attribute type 10 has an invalid length.
[  161.808867][T10620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.809349][T10614] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  161.812469][T10620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.854289][T10622] netlink: 'syz.1.1187': attribute type 10 has an invalid length.
[  161.859278][T10622] netlink: 'syz.1.1187': attribute type 10 has an invalid length.
[  162.806140][T10655] 8021q: adding VLAN 0 to HW filter on device team0
[  162.811295][T10655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.230186][T10676] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  163.301405][T10687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.306159][T10687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.341029][T10689] __nla_validate_parse: 17 callbacks suppressed
[  163.341046][T10689] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1207'.
[  163.490658][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  163.811679][T10700] wg2: entered promiscuous mode
[  163.817153][T10700] wg2: entered allmulticast mode
[  163.896168][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  163.978233][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'.
[  164.141008][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'.
[  164.256037][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  164.341710][T10723] bond0: (slave netdevsim0): Releasing backup interface
[  164.387938][T10739] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  164.405982][T10730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.412056][T10730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.577687][T10759] validate_nla: 11 callbacks suppressed
[  164.578234][T10759] netlink: 'syz.2.1224': attribute type 10 has an invalid length.
[  164.615641][T10763] netlink: 'syz.2.1225': attribute type 10 has an invalid length.
[  164.668672][T10767] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1227'.
[  164.682273][T10767] batadv1: entered promiscuous mode
[  164.684491][T10767] batadv1: entered allmulticast mode
[  164.745990][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  164.759955][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  164.819910][T10777] 8021q: adding VLAN 0 to HW filter on device team0
[  164.825126][T10777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.230916][T10811] netlink: 'syz.0.1234': attribute type 16 has an invalid length.
[  165.237880][T10811] netlink: 'syz.0.1234': attribute type 17 has an invalid length.
[  166.737556][T10846] netlink: 'syz.2.1240': attribute type 10 has an invalid length.
[  166.754040][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'.
[  166.989115][T10856] wg2: left promiscuous mode
[  166.993623][T10856] wg2: left allmulticast mode
[  167.027452][T10862] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  167.379354][T10880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.440800][T10882] netlink: 'syz.1.1251': attribute type 10 has an invalid length.
[  167.581509][T10894] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.587915][T10894] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.740170][T10898] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  167.750082][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.0.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  167.750101][T10898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.750109][T10898] Call Trace:
[  167.750115][T10898]  <TASK>
[  167.750121][T10898]  dump_stack_lvl+0x189/0x250
[  167.750146][T10898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.750161][T10898]  ? __pfx__printk+0x10/0x10
[  167.750183][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  167.750200][T10898]  ? kernfs_path_from_node+0x250/0x290
[  167.750214][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  167.750234][T10898]  sysfs_warn_dup+0x8e/0xa0
[  167.750250][T10898]  sysfs_do_create_link_sd+0xc0/0x110
[  167.750268][T10898]  device_add_class_symlinks+0x1cf/0x240
[  167.750288][T10898]  device_add+0x475/0xb50
[  167.750307][T10898]  wiphy_register+0x1c81/0x2aa0
[  167.750342][T10898]  ? __pfx_wiphy_register+0x10/0x10
[  167.750359][T10898]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  167.750380][T10898]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  167.750398][T10898]  ieee80211_register_hw+0x3442/0x40a0
[  167.750426][T10898]  ? ieee80211_register_hw+0x1411/0x40a0
[  167.750448][T10898]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  167.750466][T10898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.750489][T10898]  ? __hrtimer_setup+0x187/0x210
[  167.750507][T10898]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  167.750524][T10898]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  167.750602][T10898]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  167.750620][T10898]  ? trace_kmalloc+0x1f/0xd0
[  167.750636][T10898]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  167.750653][T10898]  ? __x64_sys_sendmsg+0x19b/0x260
[  167.750666][T10898]  ? kstrndup+0xbf/0x160
[  167.750689][T10898]  hwsim_new_radio_nl+0xea4/0x1b10
[  167.750711][T10898]  ? __pfx___nla_validate_parse+0x10/0x10
[  167.750742][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.750768][T10898]  ? rcu_is_watching+0x15/0xb0
[  167.750790][T10898]  ? __nla_parse+0x40/0x60
[  167.750811][T10898]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  167.750833][T10898]  genl_family_rcv_msg_doit+0x215/0x300
[  167.750854][T10898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  167.750879][T10898]  ? bpf_lsm_capable+0x9/0x20
[  167.750893][T10898]  ? security_capable+0x7e/0x2e0
[  167.750919][T10898]  genl_rcv_msg+0x60e/0x790
[  167.750935][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.750947][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.750976][T10898]  netlink_rcv_skb+0x208/0x470
[  167.750992][T10898]  ? __lock_acquire+0xab9/0xd20
[  167.751008][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.751022][T10898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.751052][T10898]  ? down_read+0x1ad/0x2e0
[  167.751066][T10898]  genl_rcv+0x28/0x40
[  167.751077][T10898]  netlink_unicast+0x82f/0x9e0
[  167.751100][T10898]  ? __pfx_netlink_unicast+0x10/0x10
[  167.751115][T10898]  ? netlink_sendmsg+0x642/0xb30
[  167.751129][T10898]  ? skb_put+0x11b/0x210
[  167.751149][T10898]  netlink_sendmsg+0x805/0xb30
[  167.751174][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.751193][T10898]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.751210][T10898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.751221][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.751238][T10898]  __sock_sendmsg+0x21c/0x270
[  167.751257][T10898]  ____sys_sendmsg+0x505/0x830
[  167.751272][T10898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.751291][T10898]  ? import_iovec+0x74/0xa0
[  167.751308][T10898]  ___sys_sendmsg+0x21f/0x2a0
[  167.751321][T10898]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.751362][T10898]  ? __fget_files+0x2a/0x420
[  167.751374][T10898]  ? __fget_files+0x3a0/0x420
[  167.751395][T10898]  __x64_sys_sendmsg+0x19b/0x260
[  167.751409][T10898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.751431][T10898]  ? do_user_addr_fault+0xc8a/0x1390
[  167.751451][T10898]  ? do_syscall_64+0xbe/0xfa0
[  167.751468][T10898]  do_syscall_64+0xfa/0xfa0
[  167.751482][T10898]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.751499][T10898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.751511][T10898]  ? exc_page_fault+0xab/0x100
[  167.751530][T10898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.751542][T10898] RIP: 0033:0x7f3dd1b8eba9
[  167.751553][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.751592][T10898] RSP: 002b:00007f3dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.751606][T10898] RAX: ffffffffffffffda RBX: 00007f3dd1dd6090 RCX: 00007f3dd1b8eba9
[  167.751615][T10898] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  167.751623][T10898] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  167.751630][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.751638][T10898] R13: 00007f3dd1dd6128 R14: 00007f3dd1dd6090 R15: 00007fff6a927798
[  167.751664][T10898]  </TASK>
[  167.956292][T10898] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  167.959476][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.0.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  167.959494][T10898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.959502][T10898] Call Trace:
[  167.959509][T10898]  <TASK>
[  167.959516][T10898]  dump_stack_lvl+0x189/0x250
[  167.959540][T10898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.959583][T10898]  ? __pfx__printk+0x10/0x10
[  167.959606][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  167.959623][T10898]  ? kernfs_path_from_node+0x250/0x290
[  167.959638][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  167.959657][T10898]  sysfs_warn_dup+0x8e/0xa0
[  167.959674][T10898]  sysfs_do_create_link_sd+0xc0/0x110
[  167.959692][T10898]  device_add_class_symlinks+0x1cf/0x240
[  167.959712][T10898]  device_add+0x475/0xb50
[  167.959731][T10898]  wiphy_register+0x1c81/0x2aa0
[  167.959765][T10898]  ? __pfx_wiphy_register+0x10/0x10
[  167.959783][T10898]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  167.959804][T10898]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  167.959822][T10898]  ieee80211_register_hw+0x3442/0x40a0
[  167.959856][T10898]  ? ieee80211_register_hw+0x1411/0x40a0
[  167.959881][T10898]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  167.959899][T10898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.959925][T10898]  ? __hrtimer_setup+0x187/0x210
[  167.959943][T10898]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  167.959961][T10898]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  167.960007][T10898]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  167.960024][T10898]  ? trace_kmalloc+0x1f/0xd0
[  167.960040][T10898]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  167.960058][T10898]  ? __x64_sys_sendmsg+0x19b/0x260
[  167.960070][T10898]  ? kstrndup+0xbf/0x160
[  167.960093][T10898]  hwsim_new_radio_nl+0xea4/0x1b10
[  167.960115][T10898]  ? __pfx___nla_validate_parse+0x10/0x10
[  167.960145][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.960170][T10898]  ? rcu_is_watching+0x15/0xb0
[  167.960192][T10898]  ? __nla_parse+0x40/0x60
[  167.960213][T10898]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  167.960236][T10898]  genl_family_rcv_msg_doit+0x215/0x300
[  167.960258][T10898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  167.960284][T10898]  ? bpf_lsm_capable+0x9/0x20
[  167.960300][T10898]  ? security_capable+0x7e/0x2e0
[  167.960321][T10898]  genl_rcv_msg+0x60e/0x790
[  167.960342][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.960355][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.960384][T10898]  netlink_rcv_skb+0x208/0x470
[  167.960399][T10898]  ? __lock_acquire+0xab9/0xd20
[  167.960415][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.960431][T10898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.960466][T10898]  ? down_read+0x1ad/0x2e0
[  167.960480][T10898]  genl_rcv+0x28/0x40
[  167.960493][T10898]  netlink_unicast+0x82f/0x9e0
[  167.960537][T10898]  ? __pfx_netlink_unicast+0x10/0x10
[  167.960594][T10898]  ? netlink_sendmsg+0x642/0xb30
[  167.960611][T10898]  ? skb_put+0x11b/0x210
[  167.960633][T10898]  netlink_sendmsg+0x805/0xb30
[  167.960660][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.960682][T10898]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.960700][T10898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.960713][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.960732][T10898]  __sock_sendmsg+0x21c/0x270
[  167.960752][T10898]  ____sys_sendmsg+0x505/0x830
[  167.960771][T10898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.960792][T10898]  ? import_iovec+0x74/0xa0
[  167.960809][T10898]  ___sys_sendmsg+0x21f/0x2a0
[  167.960826][T10898]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.960877][T10898]  ? __fget_files+0x2a/0x420
[  167.960890][T10898]  ? __fget_files+0x3a0/0x420
[  167.960913][T10898]  __x64_sys_sendmsg+0x19b/0x260
[  167.960926][T10898]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.960944][T10898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.960973][T10898]  ? do_syscall_64+0xbe/0xfa0
[  167.960995][T10898]  do_syscall_64+0xfa/0xfa0
[  167.961011][T10898]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.961025][T10898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.961038][T10898]  ? exc_page_fault+0xab/0x100
[  167.961055][T10898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.961064][T10898] RIP: 0033:0x7f3dd1b8eba9
[  167.961075][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.961085][T10898] RSP: 002b:00007f3dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.961097][T10898] RAX: ffffffffffffffda RBX: 00007f3dd1dd6090 RCX: 00007f3dd1b8eba9
[  167.961105][T10898] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  167.961111][T10898] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  167.961118][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.961125][T10898] R13: 00007f3dd1dd6128 R14: 00007f3dd1dd6090 R15: 00007fff6a927798
[  167.961149][T10898]  </TASK>
[  168.196137][T10898] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  168.199212][T10898] CPU: 1 UID: 0 PID: 10898 Comm: syz.0.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  168.199229][T10898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.199237][T10898] Call Trace:
[  168.199245][T10898]  <TASK>
[  168.199251][T10898]  dump_stack_lvl+0x189/0x250
[  168.199275][T10898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.199291][T10898]  ? __pfx__printk+0x10/0x10
[  168.199312][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  168.199329][T10898]  ? kernfs_path_from_node+0x250/0x290
[  168.199343][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  168.199362][T10898]  sysfs_warn_dup+0x8e/0xa0
[  168.199378][T10898]  sysfs_do_create_link_sd+0xc0/0x110
[  168.199395][T10898]  device_add_class_symlinks+0x1cf/0x240
[  168.199415][T10898]  device_add+0x475/0xb50
[  168.199432][T10898]  wiphy_register+0x1c81/0x2aa0
[  168.199461][T10898]  ? __pfx_wiphy_register+0x10/0x10
[  168.199478][T10898]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  168.199519][T10898]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  168.199563][T10898]  ieee80211_register_hw+0x3442/0x40a0
[  168.199591][T10898]  ? ieee80211_register_hw+0x1411/0x40a0
[  168.199613][T10898]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  168.199631][T10898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.199655][T10898]  ? __hrtimer_setup+0x187/0x210
[  168.199672][T10898]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  168.199688][T10898]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  168.199734][T10898]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  168.199751][T10898]  ? trace_kmalloc+0x1f/0xd0
[  168.199767][T10898]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  168.199785][T10898]  ? __x64_sys_sendmsg+0x19b/0x260
[  168.199798][T10898]  ? kstrndup+0xbf/0x160
[  168.199820][T10898]  hwsim_new_radio_nl+0xea4/0x1b10
[  168.199843][T10898]  ? __pfx___nla_validate_parse+0x10/0x10
[  168.199877][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.199902][T10898]  ? rcu_is_watching+0x15/0xb0
[  168.199925][T10898]  ? __nla_parse+0x40/0x60
[  168.199945][T10898]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  168.199968][T10898]  genl_family_rcv_msg_doit+0x215/0x300
[  168.199990][T10898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.200017][T10898]  ? bpf_lsm_capable+0x9/0x20
[  168.200033][T10898]  ? security_capable+0x7e/0x2e0
[  168.200059][T10898]  genl_rcv_msg+0x60e/0x790
[  168.200080][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.200094][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.200127][T10898]  netlink_rcv_skb+0x208/0x470
[  168.200144][T10898]  ? __lock_acquire+0xab9/0xd20
[  168.200162][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.200178][T10898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.200214][T10898]  ? down_read+0x1ad/0x2e0
[  168.200229][T10898]  genl_rcv+0x28/0x40
[  168.200243][T10898]  netlink_unicast+0x82f/0x9e0
[  168.200268][T10898]  ? __pfx_netlink_unicast+0x10/0x10
[  168.200287][T10898]  ? netlink_sendmsg+0x642/0xb30
[  168.200303][T10898]  ? skb_put+0x11b/0x210
[  168.200326][T10898]  netlink_sendmsg+0x805/0xb30
[  168.200352][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.200374][T10898]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.200392][T10898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.200406][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.200424][T10898]  __sock_sendmsg+0x21c/0x270
[  168.200444][T10898]  ____sys_sendmsg+0x505/0x830
[  168.200461][T10898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.200481][T10898]  ? import_iovec+0x74/0xa0
[  168.200498][T10898]  ___sys_sendmsg+0x21f/0x2a0
[  168.200513][T10898]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.200579][T10898]  ? __fget_files+0x2a/0x420
[  168.200593][T10898]  ? __fget_files+0x3a0/0x420
[  168.200616][T10898]  __x64_sys_sendmsg+0x19b/0x260
[  168.200629][T10898]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.200647][T10898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.200676][T10898]  ? do_syscall_64+0xbe/0xfa0
[  168.200699][T10898]  do_syscall_64+0xfa/0xfa0
[  168.200715][T10898]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.200733][T10898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.200746][T10898]  ? exc_page_fault+0xab/0x100
[  168.200766][T10898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.200778][T10898] RIP: 0033:0x7f3dd1b8eba9
[  168.200790][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.200801][T10898] RSP: 002b:00007f3dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.200817][T10898] RAX: ffffffffffffffda RBX: 00007f3dd1dd6090 RCX: 00007f3dd1b8eba9
[  168.200826][T10898] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  168.200835][T10898] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  168.200842][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.200850][T10898] R13: 00007f3dd1dd6128 R14: 00007f3dd1dd6090 R15: 00007fff6a927798
[  168.200875][T10898]  </TASK>
[  168.396163][T10898] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  168.399392][T10898] CPU: 1 UID: 0 PID: 10898 Comm: syz.0.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  168.399410][T10898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.399420][T10898] Call Trace:
[  168.399427][T10898]  <TASK>
[  168.399433][T10898]  dump_stack_lvl+0x189/0x250
[  168.399456][T10898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.399473][T10898]  ? __pfx__printk+0x10/0x10
[  168.399494][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  168.399538][T10898]  ? kernfs_path_from_node+0x250/0x290
[  168.399554][T10898]  ? kernfs_path_from_node+0x2f/0x290
[  168.399572][T10898]  sysfs_warn_dup+0x8e/0xa0
[  168.399589][T10898]  sysfs_do_create_link_sd+0xc0/0x110
[  168.399608][T10898]  device_add_class_symlinks+0x1cf/0x240
[  168.399627][T10898]  device_add+0x475/0xb50
[  168.399647][T10898]  wiphy_register+0x1c81/0x2aa0
[  168.399681][T10898]  ? __pfx_wiphy_register+0x10/0x10
[  168.399698][T10898]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  168.399719][T10898]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  168.399735][T10898]  ieee80211_register_hw+0x3442/0x40a0
[  168.399761][T10898]  ? ieee80211_register_hw+0x1411/0x40a0
[  168.399784][T10898]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  168.399800][T10898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.399825][T10898]  ? __hrtimer_setup+0x187/0x210
[  168.399842][T10898]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  168.399860][T10898]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  168.399904][T10898]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  168.399918][T10898]  ? trace_kmalloc+0x1f/0xd0
[  168.399932][T10898]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  168.399946][T10898]  ? __x64_sys_sendmsg+0x19b/0x260
[  168.399957][T10898]  ? kstrndup+0xbf/0x160
[  168.399976][T10898]  hwsim_new_radio_nl+0xea4/0x1b10
[  168.399993][T10898]  ? __pfx___nla_validate_parse+0x10/0x10
[  168.400019][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.400049][T10898]  ? rcu_is_watching+0x15/0xb0
[  168.400070][T10898]  ? __nla_parse+0x40/0x60
[  168.400089][T10898]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  168.400108][T10898]  genl_family_rcv_msg_doit+0x215/0x300
[  168.400127][T10898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.400151][T10898]  ? bpf_lsm_capable+0x9/0x20
[  168.400163][T10898]  ? security_capable+0x7e/0x2e0
[  168.400184][T10898]  genl_rcv_msg+0x60e/0x790
[  168.400202][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.400214][T10898]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.400239][T10898]  netlink_rcv_skb+0x208/0x470
[  168.400254][T10898]  ? __lock_acquire+0xab9/0xd20
[  168.400270][T10898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.400285][T10898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.400320][T10898]  ? down_read+0x1ad/0x2e0
[  168.400332][T10898]  genl_rcv+0x28/0x40
[  168.400343][T10898]  netlink_unicast+0x82f/0x9e0
[  168.400366][T10898]  ? __pfx_netlink_unicast+0x10/0x10
[  168.400384][T10898]  ? netlink_sendmsg+0x642/0xb30
[  168.400397][T10898]  ? skb_put+0x11b/0x210
[  168.400415][T10898]  netlink_sendmsg+0x805/0xb30
[  168.400463][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.400484][T10898]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.400501][T10898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.400543][T10898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.400562][T10898]  __sock_sendmsg+0x21c/0x270
[  168.400579][T10898]  ____sys_sendmsg+0x505/0x830
[  168.400593][T10898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.400613][T10898]  ? import_iovec+0x74/0xa0
[  168.400627][T10898]  ___sys_sendmsg+0x21f/0x2a0
[  168.400641][T10898]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.400680][T10898]  ? __fget_files+0x2a/0x420
[  168.400692][T10898]  ? __fget_files+0x3a0/0x420
[  168.400710][T10898]  __x64_sys_sendmsg+0x19b/0x260
[  168.400722][T10898]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.400741][T10898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.400769][T10898]  ? do_syscall_64+0xbe/0xfa0
[  168.400791][T10898]  do_syscall_64+0xfa/0xfa0
[  168.400807][T10898]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.400824][T10898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.400837][T10898]  ? exc_page_fault+0xab/0x100
[  168.400854][T10898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.400863][T10898] RIP: 0033:0x7f3dd1b8eba9
[  168.400875][T10898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.400887][T10898] RSP: 002b:00007f3dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.400901][T10898] RAX: ffffffffffffffda RBX: 00007f3dd1dd6090 RCX: 00007f3dd1b8eba9
[  168.400909][T10898] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  168.400918][T10898] RBP: 00007f3dd1c11e19 R08: 0000000000000000 R09: 0000000000000000
[  168.400925][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.400932][T10898] R13: 00007f3dd1dd6128 R14: 00007f3dd1dd6090 R15: 00007fff6a927798
[  168.400952][T10898]  </TASK>
[  168.663227][T10900] netlink: 'syz.2.1256': attribute type 10 has an invalid length.
[  168.684031][T10900] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  168.744139][T10908] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  168.747437][T10908] CPU: 0 UID: 0 PID: 10908 Comm: syz.2.1259 Not tainted syzkaller #0 PREEMPT(full) 
[  168.747450][T10908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.747456][T10908] Call Trace:
[  168.747459][T10908]  <TASK>
[  168.747464][T10908]  dump_stack_lvl+0x189/0x250
[  168.747506][T10908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.747518][T10908]  ? __pfx__printk+0x10/0x10
[  168.747534][T10908]  ? kernfs_path_from_node+0x2f/0x290
[  168.747545][T10908]  ? kernfs_path_from_node+0x250/0x290
[  168.747554][T10908]  ? kernfs_path_from_node+0x2f/0x290
[  168.747565][T10908]  sysfs_warn_dup+0x8e/0xa0
[  168.747575][T10908]  sysfs_do_create_link_sd+0xc0/0x110
[  168.747586][T10908]  device_add_class_symlinks+0x1cf/0x240
[  168.747598][T10908]  device_add+0x475/0xb50
[  168.747609][T10908]  wiphy_register+0x1c81/0x2aa0
[  168.747629][T10908]  ? __pfx_wiphy_register+0x10/0x10
[  168.747640][T10908]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  168.747654][T10908]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  168.747665][T10908]  ieee80211_register_hw+0x3442/0x40a0
[  168.747681][T10908]  ? ieee80211_register_hw+0x1411/0x40a0
[  168.747694][T10908]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  168.747704][T10908]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.747718][T10908]  ? __hrtimer_setup+0x187/0x210
[  168.747729][T10908]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  168.747746][T10908]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  168.747775][T10908]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  168.747785][T10908]  ? trace_kmalloc+0x1f/0xd0
[  168.747796][T10908]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  168.747808][T10908]  ? __x64_sys_sendmsg+0x19b/0x260
[  168.747816][T10908]  ? kstrndup+0xbf/0x160
[  168.747830][T10908]  hwsim_new_radio_nl+0xea4/0x1b10
[  168.747842][T10908]  ? __pfx___nla_validate_parse+0x10/0x10
[  168.747860][T10908]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.747875][T10908]  ? rcu_is_watching+0x15/0xb0
[  168.747888][T10908]  ? __nla_parse+0x40/0x60
[  168.747901][T10908]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  168.747915][T10908]  genl_family_rcv_msg_doit+0x215/0x300
[  168.747927][T10908]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.747943][T10908]  ? bpf_lsm_capable+0x9/0x20
[  168.747953][T10908]  ? security_capable+0x7e/0x2e0
[  168.747964][T10908]  genl_rcv_msg+0x60e/0x790
[  168.747976][T10908]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.747984][T10908]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.748021][T10908]  netlink_rcv_skb+0x208/0x470
[  168.748032][T10908]  ? __lock_acquire+0xab9/0xd20
[  168.748044][T10908]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.748053][T10908]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.748074][T10908]  ? down_read+0x1ad/0x2e0
[  168.748083][T10908]  genl_rcv+0x28/0x40
[  168.748091][T10908]  netlink_unicast+0x82f/0x9e0
[  168.748105][T10908]  ? __pfx_netlink_unicast+0x10/0x10
[  168.748116][T10908]  ? netlink_sendmsg+0x642/0xb30
[  168.748125][T10908]  ? skb_put+0x11b/0x210
[  168.748139][T10908]  netlink_sendmsg+0x805/0xb30
[  168.748154][T10908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.748166][T10908]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.748177][T10908]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.748185][T10908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.748196][T10908]  __sock_sendmsg+0x21c/0x270
[  168.748207][T10908]  ____sys_sendmsg+0x505/0x830
[  168.748217][T10908]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.748229][T10908]  ? import_iovec+0x74/0xa0
[  168.748239][T10908]  ___sys_sendmsg+0x21f/0x2a0
[  168.748248][T10908]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.748274][T10908]  ? __fget_files+0x2a/0x420
[  168.748282][T10908]  ? __fget_files+0x3a0/0x420
[  168.748294][T10908]  __x64_sys_sendmsg+0x19b/0x260
[  168.748304][T10908]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.748320][T10908]  ? do_syscall_64+0xbe/0xfa0
[  168.748333][T10908]  do_syscall_64+0xfa/0xfa0
[  168.748343][T10908]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.748353][T10908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.748361][T10908]  ? exc_page_fault+0xab/0x100
[  168.748372][T10908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.748379][T10908] RIP: 0033:0x7fe37cb8eba9
[  168.748388][T10908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.748394][T10908] RSP: 002b:00007fe37da53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.748404][T10908] RAX: ffffffffffffffda RBX: 00007fe37cdd5fa0 RCX: 00007fe37cb8eba9
[  168.748410][T10908] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  168.748415][T10908] RBP: 00007fe37cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  168.748420][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.748425][T10908] R13: 00007fe37cdd6038 R14: 00007fe37cdd5fa0 R15: 00007ffd4d6bdaa8
[  168.748439][T10908]  </TASK>
[  169.075062][T10921] netlink: 'syz.2.1263': attribute type 10 has an invalid length.
[  169.255512][T10926] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  169.265142][T10929] __nla_validate_parse: 7 callbacks suppressed
[  169.265158][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'.
[  169.300713][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'.
[  169.306428][T10934] ieee802154 phy0 wpan0: encryption failed: -90
[  169.460381][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[  169.464075][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[  169.469544][T10940] netlink: 'syz.2.1268': attribute type 1 has an invalid length.
[  169.472675][T10940] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1268'.
[  169.552005][T10944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.557010][T10944] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  169.559910][T10944] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  169.891596][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'.
[  170.005021][T10976] netlink: 'syz.0.1278': attribute type 10 has an invalid length.
[  170.062924][T10979] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  170.066293][T10979] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  170.165940][T10988] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1281'.
[  170.169770][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'.
[  170.299090][T11004] netlink: 'syz.2.1284': attribute type 10 has an invalid length.
[  170.365267][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'.
[  170.371984][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'.
[  170.707718][T11028] netlink: 'syz.0.1291': attribute type 10 has an invalid length.
[  170.957385][T11039] netlink: 'syz.0.1292': attribute type 10 has an invalid length.
[  171.514949][T11079] netlink: 'syz.2.1301': attribute type 16 has an invalid length.
[  171.517931][T11079] netlink: 'syz.2.1301': attribute type 17 has an invalid length.
[  171.522753][T11079] IPv6: NLM_F_REPLACE set, but no existing node found!
[  171.585426][T11090] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  171.593898][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.1.1304 Not tainted syzkaller #0 PREEMPT(full) 
[  171.593910][T11090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.593915][T11090] Call Trace:
[  171.593919][T11090]  <TASK>
[  171.593923][T11090]  dump_stack_lvl+0x189/0x250
[  171.593939][T11090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.593948][T11090]  ? __pfx__printk+0x10/0x10
[  171.593961][T11090]  ? kernfs_path_from_node+0x2f/0x290
[  171.593972][T11090]  ? kernfs_path_from_node+0x250/0x290
[  171.593981][T11090]  ? kernfs_path_from_node+0x2f/0x290
[  171.593992][T11090]  sysfs_warn_dup+0x8e/0xa0
[  171.594001][T11090]  sysfs_do_create_link_sd+0xc0/0x110
[  171.594012][T11090]  device_add_class_symlinks+0x1cf/0x240
[  171.594024][T11090]  device_add+0x475/0xb50
[  171.594035][T11090]  wiphy_register+0x1c81/0x2aa0
[  171.594055][T11090]  ? __pfx_wiphy_register+0x10/0x10
[  171.594065][T11090]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  171.594078][T11090]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  171.594088][T11090]  ieee80211_register_hw+0x3442/0x40a0
[  171.594104][T11090]  ? ieee80211_register_hw+0x1411/0x40a0
[  171.594117][T11090]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  171.594126][T11090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.594141][T11090]  ? __hrtimer_setup+0x187/0x210
[  171.594152][T11090]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.594162][T11090]  mac80211_hwsim_new_radio+0x2f0e/0x5350
[  171.594188][T11090]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.594198][T11090]  ? trace_kmalloc+0x1f/0xd0
[  171.594209][T11090]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  171.594219][T11090]  ? __x64_sys_sendmsg+0x19b/0x260
[  171.594227][T11090]  ? kstrndup+0xbf/0x160
[  171.594240][T11090]  hwsim_new_radio_nl+0xea4/0x1b10
[  171.594285][T11090]  ? __pfx___nla_validate_parse+0x10/0x10
[  171.594303][T11090]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.594317][T11090]  ? rcu_is_watching+0x15/0xb0
[  171.594330][T11090]  ? __nla_parse+0x40/0x60
[  171.594342][T11090]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  171.594356][T11090]  genl_family_rcv_msg_doit+0x215/0x300
[  171.594368][T11090]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.594383][T11090]  ? bpf_lsm_capable+0x9/0x20
[  171.594392][T11090]  ? security_capable+0x7e/0x2e0
[  171.594405][T11090]  genl_rcv_msg+0x60e/0x790
[  171.594417][T11090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.594425][T11090]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.594442][T11090]  netlink_rcv_skb+0x208/0x470
[  171.594452][T11090]  ? __lock_acquire+0xab9/0xd20
[  171.594462][T11090]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.594472][T11090]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.594522][T11090]  ? down_read+0x1ad/0x2e0
[  171.594538][T11090]  genl_rcv+0x28/0x40
[  171.594551][T11090]  netlink_unicast+0x82f/0x9e0
[  171.594572][T11090]  ? __pfx_netlink_unicast+0x10/0x10
[  171.594589][T11090]  ? netlink_sendmsg+0x642/0xb30
[  171.594605][T11090]  ? skb_put+0x11b/0x210
[  171.594624][T11090]  netlink_sendmsg+0x805/0xb30
[  171.594640][T11090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.594652][T11090]  ? aa_sock_msg_perm+0xf1/0x1d0
[  171.594663][T11090]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.594671][T11090]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.594682][T11090]  __sock_sendmsg+0x21c/0x270
[  171.594693][T11090]  ____sys_sendmsg+0x505/0x830
[  171.594704][T11090]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.594716][T11090]  ? import_iovec+0x74/0xa0
[  171.594726][T11090]  ___sys_sendmsg+0x21f/0x2a0
[  171.594735][T11090]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.594760][T11090]  ? __fget_files+0x2a/0x420
[  171.594770][T11090]  ? __fget_files+0x3a0/0x420
[  171.594783][T11090]  __x64_sys_sendmsg+0x19b/0x260
[  171.594791][T11090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.594808][T11090]  ? do_syscall_64+0xbe/0xfa0
[  171.594821][T11090]  do_syscall_64+0xfa/0xfa0
[  171.594831][T11090]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.594841][T11090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.594848][T11090]  ? exc_page_fault+0xab/0x100
[  171.594859][T11090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.594867][T11090] RIP: 0033:0x7f2360f8eba9
[  171.594875][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.594882][T11090] RSP: 002b:00007f2361d90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.594891][T11090] RAX: ffffffffffffffda RBX: 00007f23611d5fa0 RCX: 00007f2360f8eba9
[  171.594896][T11090] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  171.594901][T11090] RBP: 00007f2361011e19 R08: 0000000000000000 R09: 0000000000000000
[  171.594905][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.594910][T11090] R13: 00007f23611d6038 R14: 00007f23611d5fa0 R15: 00007ffefd8fc508
[  171.594924][T11090]  </TASK>
[  171.929694][T11111] netlink: 'syz.1.1309': attribute type 10 has an invalid length.
[  171.937562][T11111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.943679][T11111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.201820][T11126] netlink: 'syz.2.1313': attribute type 9 has an invalid length.
[  172.769823][T11149] netlink: 'syz.0.1318': attribute type 1 has an invalid length.
[  172.809101][T11149] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.879628][T11149] bond2 (unregistering): Released all slaves
[  172.896882][T11156] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  172.969941][T11158] netlink: 'syz.1.1321': attribute type 10 has an invalid length.
[  172.978160][T11158] mac80211_hwsim hwsim96 wlan1: entered allmulticast mode
[  173.311974][T11183] mac80211_hwsim hwsim96 wlan1: left allmulticast mode
[  174.223840][T11247] IPv6: NLM_F_REPLACE set, but no existing node found!
[  174.767761][T11280] __nla_validate_parse: 20 callbacks suppressed
[  174.767776][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  174.925597][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'.
[  174.994213][T11301] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  175.091500][T11315] validate_nla: 9 callbacks suppressed
[  175.091518][T11315] netlink: 'syz.1.1357': attribute type 10 has an invalid length.
[  175.120137][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'.
[  175.136996][T11319] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  175.139844][T11319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  175.210691][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.514462][T11366] netlink: 'syz.1.1370': attribute type 8 has an invalid length.
[  175.518648][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'.
[  175.530477][T11366] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1370'.
[  175.692326][T11375] netlink: 'syz.0.1372': attribute type 10 has an invalid length.
[  175.997050][   T61] block nbd0: Possible stuck request ffff888021f30000: control (read@0,1024B). Runtime 30 seconds
[  176.002920][   T61] block nbd0: Possible stuck request ffff888021f30200: control (read@1024,1024B). Runtime 30 seconds
[  176.007754][   T61] block nbd0: Possible stuck request ffff888021f30400: control (read@2048,1024B). Runtime 30 seconds
[  176.012237][   T61] block nbd0: Possible stuck request ffff888021f30600: control (read@3072,1024B). Runtime 30 seconds
[  176.228708][T11423] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1381'.
[  176.231698][T11423] tipc: Resetting bearer <eth:syzkaller0>
[  176.235781][T11423] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  176.275342][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'.
[  176.337317][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1382'.
[  177.482915][T11516] netlink: 'syz.2.1394': attribute type 19 has an invalid length.
[  177.489165][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'.
[  177.510068][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.513405][T11516] netlink: 'syz.2.1394': attribute type 19 has an invalid length.
[  177.518055][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.524994][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.530338][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.672042][T11519] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  177.684482][ T5954] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.687560][ T5954] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.691795][ T5954] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.696437][ T5954] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.456153][T11564] netlink: 'syz.0.1404': attribute type 10 has an invalid length.
[  178.586257][T11572] netlink: 'syz.1.1406': attribute type 10 has an invalid length.
[  178.854705][T11618] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  178.863942][T11618] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  179.743176][T11644] netlink: 'syz.2.1422': attribute type 1 has an invalid length.
[  179.764887][T11644] bond5: entered promiscuous mode
[  179.768641][T11644] bond5: entered allmulticast mode
[  179.770626][T11644] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.789943][T11644] 8021q: adding VLAN 0 to HW filter on device bond6
[  179.793170][T11644] bond6: entered promiscuous mode
[  179.795639][T11644] bond6: entered allmulticast mode
[  179.798312][T11644] bond5: (slave bond6): Enslaving as a backup interface with a down link
[  179.860367][T11654] netlink: 'syz.2.1424': attribute type 10 has an invalid length.
[  179.866898][T11654] mac80211_hwsim hwsim130 wlan1: entered allmulticast mode
[  179.905516][T11657] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  180.066737][T11675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.072985][T11675] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  180.078371][T11675] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  180.082832][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  180.087719][T11677] netlink: 'syz.0.1429': attribute type 16 has an invalid length.
[  180.091507][T11677] __nla_validate_parse: 11 callbacks suppressed
[  180.091521][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'.
[  180.106450][T11677] IPv6: NLM_F_REPLACE set, but no existing node found!
[  180.259046][T11685] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1431'.
[  180.356396][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1432'.
[  180.361478][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  180.410968][T11689] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1433'.
[  180.578391][T11696] validate_nla: 1 callbacks suppressed
[  180.578413][T11696] netlink: 'syz.1.1435': attribute type 10 has an invalid length.
[  180.669612][T11703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1436'.
[  180.905153][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'.
[  180.907890][T11715] vlan0: entered promiscuous mode
[  180.980798][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  181.090444][T11732] netlink: 'syz.2.1443': attribute type 39 has an invalid length.
[  181.090449][T11728] netlink: 'syz.2.1443': attribute type 39 has an invalid length.
[  181.157382][T11735] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  181.160148][T11735] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1444'.
[  181.165720][T11734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'.
[  181.207003][T11734] netlink: 'syz.1.1444': attribute type 10 has an invalid length.
[  181.382470][T11754] netlink: 'syz.1.1450': attribute type 10 has an invalid length.
[  181.394567][T11757] tipc: Resetting bearer <eth:syzkaller0>
[  181.940082][T11771] tipc: Resetting bearer <eth:syzkaller0>
[  182.174515][T11781] bond5: (slave bond6): Releasing backup interface
[  182.177249][T11781] bond6: left promiscuous mode
[  182.178980][T11781] bond6: left allmulticast mode
[  182.186296][T11781] netlink: 'syz.2.1456': attribute type 10 has an invalid length.
[  182.191095][T11781] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  182.194271][T11781] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  182.803803][T11834] netlink: 'syz.1.1458': attribute type 10 has an invalid length.
[  182.808021][T11834] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode
[  182.812298][T11834] netlink: 'syz.1.1458': attribute type 11 has an invalid length.
[  182.815515][T11834] netlink: 'syz.1.1458': attribute type 11 has an invalid length.
[  182.898057][T11841] mac80211_hwsim hwsim135 wlan1: left allmulticast mode
[  182.918066][T11842] netlink: 'syz.0.1459': attribute type 10 has an invalid length.
[  182.919943][T11841] netlink: 'syz.1.1460': attribute type 10 has an invalid length.
[  182.930294][T11841] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode
[  183.159804][T11857] "syz.0.1464" (11857) uses obsolete ecb(arc4) skcipher
[  183.207125][T11857] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  184.359011][T11882] vlan0: left promiscuous mode
[  184.378184][T11882] mac80211_hwsim hwsim135 wlan1: left allmulticast mode
[  184.676458][T11896] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  185.344387][T11928] mac80211_hwsim hwsim130 wlan1: left allmulticast mode
[  185.355526][T11928] mac80211_hwsim hwsim130 wlan1: entered allmulticast mode
[  185.819855][T11943] __nla_validate_parse: 18 callbacks suppressed
[  185.819868][T11943] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1486'.
[  186.042849][T11961] validate_nla: 3 callbacks suppressed
[  186.042869][T11961] netlink: 'syz.2.1492': attribute type 10 has an invalid length.
[  186.065900][T11961] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  186.068933][T11961] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  186.136942][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  186.225284][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'.
[  186.229102][T11976] mac80211_hwsim hwsim130 wlan1: left allmulticast mode
[  186.282842][T11986] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.289712][T11986] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  186.292833][T11986] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  186.366060][T11990] tipc: Resetting bearer <eth:syzkaller0>
[  186.435473][T11991] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  186.917194][T11995] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  187.148634][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'.
[  187.149372][T12002] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  187.165432][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'.
[  187.169126][T12003] IPv6: NLM_F_REPLACE set, but no existing node found!
[  187.260416][T12005] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  187.397938][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'.
[  187.403210][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  188.261021][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'.
[  188.268838][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'.
[  188.328466][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'.
[  188.334065][T12033] netlink: 'syz.2.1511': attribute type 9 has an invalid length.
[  188.395220][T12033] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  188.485878][T12036] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  188.953908][ T5853] Bluetooth: hci0: command tx timeout
[  189.545920][T12079] netlink: 'syz.1.1524': attribute type 10 has an invalid length.
[  189.750681][T12095] netlink: 'syz.1.1529': attribute type 10 has an invalid length.
[  189.845470][T12096] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  189.847947][T12096] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  189.850862][T12096] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  189.855274][T12096] bond5: left promiscuous mode
[  189.856888][T12096] bond5: left allmulticast mode
[  189.879973][T12096] bridge5: entered promiscuous mode
[  189.882057][T12096] bridge5: entered allmulticast mode
[  189.887218][T12096] team0: Port device bridge5 added
[  190.590734][T12130] netlink: 'syz.2.1536': attribute type 10 has an invalid length.
[  190.787385][T12149] netlink: 'syz.2.1541': attribute type 10 has an invalid length.
[  190.826451][T12158] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  190.828435][T12154] __nla_validate_parse: 19 callbacks suppressed
[  190.828454][T12154] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1542'.
[  190.830134][T12156] IPVS: stopping backup sync thread 12158 ...
[  190.841412][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'.
[  190.872025][T12160] netlink: 'syz.2.1544': attribute type 1 has an invalid length.
[  190.892457][T12160] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1544'.
[  190.897238][T12162] netlink: 'syz.1.1545': attribute type 4 has an invalid length.
[  190.900944][T12162] netlink: 'syz.1.1545': attribute type 23 has an invalid length.
[  190.907211][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'.
[  191.120697][T12176] validate_nla: 2 callbacks suppressed
[  191.120711][T12176] netlink: 'syz.1.1550': attribute type 10 has an invalid length.
[  191.133571][T12176] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode
[  191.184037][T12181] netlink: 'syz.1.1551': attribute type 10 has an invalid length.
[  191.239303][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'.
[  191.242885][T12184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1551'.
[  191.246559][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'.
[  191.250546][T12184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1551'.
[  191.276259][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  191.422737][T12196] netlink: 'syz.2.1555': attribute type 10 has an invalid length.
[  191.491533][T12204] netlink: 'syz.0.1556': attribute type 9 has an invalid length.
[  191.748933][T12228] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  191.751896][T12228] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  191.803375][T12234] team0: Port device bridge5 removed
[  191.861148][T12235] netlink: 'syz.2.1564': attribute type 10 has an invalid length.
[  192.570404][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'.
[  192.686826][T12258] mac80211_hwsim hwsim135 wlan1: left allmulticast mode
[  192.697317][T12258] netlink: 'syz.1.1569': attribute type 10 has an invalid length.
[  192.700421][T12258] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode
[  192.770070][T12261] netlink: 'syz.2.1571': attribute type 10 has an invalid length.
[  192.778457][T12266] netlink: 'syz.2.1571': attribute type 10 has an invalid length.
[  193.020596][T12283] netlink: 'syz.2.1579': attribute type 10 has an invalid length.
[  193.025047][T12283] netlink: 'syz.2.1579': attribute type 1 has an invalid length.
[  193.030561][T12283] mac80211_hwsim hwsim130 wlan1: entered allmulticast mode
[  193.037038][T12285] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  193.039934][T12285] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  193.212810][T12291] mac80211_hwsim hwsim135 wlan1: left allmulticast mode
[  193.920196][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.546679][T12375] mac80211_hwsim hwsim130 wlan1: left allmulticast mode
[  194.549024][T12375] bridge5: left promiscuous mode
[  194.550605][T12375] bridge5: left allmulticast mode
[  195.065043][T12446] ------------[ cut here ]------------
[  195.066873][T12446] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#0: syz.1.1601/12446
[  195.070189][T12446] Modules linked in:
[  195.071899][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) 
[  195.076033][T12446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.079292][T12446] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  195.081126][T12446] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 b4 f8 09 e8 94 f1 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 86 f1 31 00 90 0f 0b 90 e9 ee fd ff ff
[  195.087242][T12446] RSP: 0018:ffffc900097f7aa8 EFLAGS: 00010293
[  195.089136][T12446] RAX: ffffffff818de18c RBX: ffff88803ae0b820 RCX: ffff8880205f3a00
[  195.091654][T12446] RDX: 0000000000000000 RSI: ffff88803ae0b820 RDI: ffff88803ae0b820
[  195.094547][T12446] RBP: dffffc0000000000 R08: ffffffff8e1eff53 R09: 1ffffffff1c3dfea
[  195.097032][T12446] R10: dffffc0000000000 R11: fffffbfff1c3dfeb R12: ffff88803ae0b820
[  195.099459][T12446] R13: 1ffff110075c1703 R14: ffff88803ae0b800 R15: ffffffff8e1ea7c0
[  195.101858][T12446] FS:  00007f2361d906c0(0000) GS:ffff8880b83e0000(0000) knlGS:0000000000000000
[  195.104710][T12446] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.106768][T12446] CR2: 0000000000000000 CR3: 000000010f880000 CR4: 00000000000006f0
[  195.109231][T12446] Call Trace:
[  195.110334][T12446]  <TASK>
[  195.111251][T12446]  ? dec_ucount+0x15c/0x180
[  195.112679][T12446]  free_mnt_ns+0xd1/0x110
[  195.114166][T12446]  namespace_unlock+0x529/0x760
[  195.115705][T12446]  ? clone_mnt+0xba/0x9a0
[  195.117041][T12446]  ? __pfx_namespace_unlock+0x10/0x10
[  195.118722][T12446]  ? alloc_mnt_ns+0x2fc/0x3d0
[  195.120177][T12446]  copy_mnt_ns+0x6e0/0x870
[  195.121577][T12446]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  195.123189][T12446]  ? create_new_namespaces+0x31/0x720
[  195.124926][T12446]  create_new_namespaces+0xd1/0x720
[  195.126565][T12446]  ? bpf_lsm_capable+0x9/0x20
[  195.128124][T12446]  ? security_capable+0x7e/0x2e0
[  195.129966][T12446]  unshare_nsproxy_namespaces+0x11c/0x170
[  195.132208][T12446]  ksys_unshare+0x4c8/0x8c0
[  195.134064][T12446]  ? __pfx_ksys_unshare+0x10/0x10
[  195.135835][T12446]  __x64_sys_unshare+0x38/0x50
[  195.137424][T12446]  do_syscall_64+0xfa/0xfa0
[  195.139238][T12446]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.140926][T12446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.142808][T12446]  ? exc_page_fault+0xab/0x100
[  195.144457][T12446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.146344][T12446] RIP: 0033:0x7f2360f8eba9
[  195.147769][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.154719][T12446] RSP: 002b:00007f2361d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  195.157257][T12446] RAX: ffffffffffffffda RBX: 00007f23611d5fa0 RCX: 00007f2360f8eba9
[  195.159997][T12446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400
[  195.162581][T12446] RBP: 00007f2361011e19 R08: 0000000000000000 R09: 0000000000000000
[  195.165228][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.167749][T12446] R13: 00007f23611d6038 R14: 00007f23611d5fa0 R15: 00007ffefd8fc508
[  195.170639][T12446]  </TASK>
[  195.171891][T12446] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  195.174267][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) 
[  195.177884][T12446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.181859][T12446] Call Trace:
[  195.183202][T12446]  <TASK>
[  195.184336][T12446]  dump_stack_lvl+0x99/0x250
[  195.186145][T12446]  ? __asan_memcpy+0x40/0x70
[  195.187987][T12446]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.189919][T12446]  ? __pfx__printk+0x10/0x10
[  195.191744][T12446]  vpanic+0x237/0x6d0
[  195.192993][T12446]  ? __pfx_vpanic+0x10/0x10
[  195.194409][T12446]  ? is_bpf_text_address+0x292/0x2b0
[  195.196426][T12446]  ? is_bpf_text_address+0x26/0x2b0
[  195.198515][T12446]  panic+0xb9/0xc0
[  195.200020][T12446]  ? __pfx_panic+0x10/0x10
[  195.201756][T12446]  __warn+0x334/0x4c0
[  195.203355][T12446]  ? __ns_tree_remove+0x28d/0x330
[  195.205279][T12446]  ? __ns_tree_remove+0x28d/0x330
[  195.207275][T12446]  report_bug+0x2be/0x4f0
[  195.209033][T12446]  ? __ns_tree_remove+0x28d/0x330
[  195.211051][T12446]  ? __ns_tree_remove+0x28d/0x330
[  195.213070][T12446]  ? __ns_tree_remove+0x28f/0x330
[  195.215074][T12446]  handle_bug+0x84/0x160
[  195.216775][T12446]  exc_invalid_op+0x1a/0x50
[  195.218588][T12446]  asm_exc_invalid_op+0x1a/0x20
[  195.220518][T12446] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  195.222655][T12446] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 b4 f8 09 e8 94 f1 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 86 f1 31 00 90 0f 0b 90 e9 ee fd ff ff
[  195.230076][T12446] RSP: 0018:ffffc900097f7aa8 EFLAGS: 00010293
[  195.232504][T12446] RAX: ffffffff818de18c RBX: ffff88803ae0b820 RCX: ffff8880205f3a00
[  195.235643][T12446] RDX: 0000000000000000 RSI: ffff88803ae0b820 RDI: ffff88803ae0b820
[  195.238765][T12446] RBP: dffffc0000000000 R08: ffffffff8e1eff53 R09: 1ffffffff1c3dfea
[  195.241884][T12446] R10: dffffc0000000000 R11: fffffbfff1c3dfeb R12: ffff88803ae0b820
[  195.245024][T12446] R13: 1ffff110075c1703 R14: ffff88803ae0b800 R15: ffffffff8e1ea7c0
[  195.248170][T12446]  ? __ns_tree_remove+0x28c/0x330
[  195.249998][T12446]  ? __ns_tree_remove+0x28c/0x330
[  195.251668][T12446]  ? dec_ucount+0x15c/0x180
[  195.253130][T12446]  free_mnt_ns+0xd1/0x110
[  195.254584][T12446]  namespace_unlock+0x529/0x760
[  195.256106][T12446]  ? clone_mnt+0xba/0x9a0
[  195.257472][T12446]  ? __pfx_namespace_unlock+0x10/0x10
[  195.259194][T12446]  ? alloc_mnt_ns+0x2fc/0x3d0
[  195.261080][T12446]  copy_mnt_ns+0x6e0/0x870
[  195.262668][T12446]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  195.264405][T12446]  ? create_new_namespaces+0x31/0x720
[  195.266098][T12446]  create_new_namespaces+0xd1/0x720
[  195.267770][T12446]  ? bpf_lsm_capable+0x9/0x20
[  195.269320][T12446]  ? security_capable+0x7e/0x2e0
[  195.270951][T12446]  unshare_nsproxy_namespaces+0x11c/0x170
[  195.272839][T12446]  ksys_unshare+0x4c8/0x8c0
[  195.274321][T12446]  ? __pfx_ksys_unshare+0x10/0x10
[  195.275968][T12446]  __x64_sys_unshare+0x38/0x50
[  195.277510][T12446]  do_syscall_64+0xfa/0xfa0
[  195.278958][T12446]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.281009][T12446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.283084][T12446]  ? exc_page_fault+0xab/0x100
[  195.284572][T12446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.286653][T12446] RIP: 0033:0x7f2360f8eba9
[  195.288405][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.294534][T12446] RSP: 002b:00007f2361d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  195.297161][T12446] RAX: ffffffffffffffda RBX: 00007f23611d5fa0 RCX: 00007f2360f8eba9
[  195.299813][T12446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400
[  195.302618][T12446] RBP: 00007f2361011e19 R08: 0000000000000000 R09: 0000000000000000
[  195.305141][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.307584][T12446] R13: 00007f23611d6038 R14: 00007f23611d5fa0 R15: 00007ffefd8fc508
[  195.310112][T12446]  </TASK>
[  195.311772][T12446] Kernel Offset: disabled
[  195.313214][T12446] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:56:33  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900097f7250
R8 =ffff8880212b0237 R9 =1ffff11004256046 R10=dffffc0000000000 R11=ffffffff85548780
R12=dffffc0000000000 R13=ffffffff99d35923 R14=ffffffff9a02a180 R15=0000000000000000
RIP=ffffffff855487fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2361d906c0 ffffffff 00c00000
GS =0000 ffff8880b83e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010f880000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f3f3f304f1f1f101 RBX=ffffffffffffffff RCX=ffffffff819e164a RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888136640200 RBP=ffffc900096d76f8 RSP=ffffc900096d7628
R8 =ffff888136640203 R9 =1ffff11026cc8040 R10=dffffc0000000000 R11=ffffed1026cc8040
R12=0000000000000001 R13=1ffff920012daf38 R14=ffffed1026cc8041 R15=1ffff11026cc8040
RIP=ffffffff822464cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2361d6f6c0 ffffffff 00c00000
GS =0000 ffff8881a39e0000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d0d779b000 CR3=000000010f880000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0174080006100014 1000060170cc0fff
XMM06=ffffffffff040880 a2d3940800010800 XMM07=060128b801800200 0701dc100005bfbf
XMM08=f004010800060104 b601800200070000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
