last executing test programs:

672.978558ms ago: executing program 1 (id=6615):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="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", 0x101}], 0x1}}], 0x1, 0x81)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000002c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0xb, &(0x7f0000000f80)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x105}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}, 0xa}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="820000000301010346e99d83c0d996170a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000070a010200fff90000060000010000b1"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r6, 0xffffd000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r7, 0x0, 0x31, 0x0, &(0x7f0000001840))

611.853321ms ago: executing program 1 (id=6618):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03316844268cb89ee62b5101", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000feffffff0000000e030000000000000000008bfeede622121004f4b81ed0fc86294e041d2be59fc422a9d5ca4065ad297a9338f669fd191dad518cb83bf5bb3cbd591edb2fd99f8286bc1cae76d74ee7f3"], 0x0, 0x2a}, 0x28)

591.21222ms ago: executing program 1 (id=6620):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000a2000000000000001d0071107c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x28011, r1, 0x1000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x39610b2c, 0x0, 0xf34, 0x61128, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xb}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@struct={0x3, 0x4, 0x0, 0x4, 0x0, 0x1, [{0x7, 0x3, 0x4}, {0xc, 0x4, 0xffff}, {0x2, 0x5, 0x53d8}, {0xe, 0x2, 0x6993}]}, @ptr={0x7}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000002c0), 0x70, 0x0, 0x0, 0x800, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x20, &(0x7f0000001640)={&(0x7f0000000580)=""/4096, 0x1000, <r5=>0x0, &(0x7f0000001580)=""/160, 0xa0}}, 0x10)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@o_path={&(0x7f00000016c0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1a89}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x2, 0x0, 0x3, 0x9, 0x1, 0xffffffffffffffe0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @ldst={0x2, 0x3, 0x2, 0x6, 0x8, 0xffffffffffffffb0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000200), 0x40f00, 0x40, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xe, 0xf, 0x3}, 0x10, r5, 0x0, 0x7, &(0x7f0000001740)=[r6], &(0x7f0000001780)=[{0x3, 0x2, 0xb, 0x6}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x5, 0xc, 0x5}, {0x2, 0x1, 0x3, 0x8}, {0x5, 0x2, 0xe, 0xb}, {0x2, 0x5, 0x5}, {0x1, 0xa, 0x2, 0xc}], 0x10, 0x7f4d}, 0x94)

515.680304ms ago: executing program 1 (id=6621):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x12)
close(0x4)
socket$kcm(0x29, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendfile(r1, r2, 0x0, 0xf03a0005)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b626c6b696f2000b85a185e7a657220"], 0x10)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xffff, 0x6, 0x800, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r12}, 0x18)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

455.427742ms ago: executing program 2 (id=6623):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

454.97754ms ago: executing program 2 (id=6624):
r0 = socket$inet6(0xa, 0x805, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (rerun: 32)
getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x24, 0x0, 0xdf, 0xe8}, 0x10) (async)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4067, &(0x7f0000000040)=0xfe3)

370.549161ms ago: executing program 2 (id=6626):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000180)=""/54, 0x36}], 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000180)=""/54, 0x36}], 0x4}, 0x20) (async)

369.771195ms ago: executing program 1 (id=6628):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000002d000100000010000000000004ffe480350011809e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f000000"], 0x4c}], 0x1}, 0x300)

276.082499ms ago: executing program 0 (id=6630):
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1000, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

275.13012ms ago: executing program 1 (id=6631):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x31)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xe, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x440, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_MATCHALL_ACT={0x3e0, 0x2, [@m_tunnel_key={0x10c, 0x9f, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffe}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x66, 0x6, "a88ebc91cdfe762a0b4e14087af8da00beb7679109902e96a44b2561ed72837b93117f268af89c25b9562b7c74a7d9184aab147f65585edbd97925661dc1a87a1427f6b8af28625bd9c195e087e0bda31e83bccd1a0d5b01852540ad2697a4f50b9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1f8, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x20000002, 0xc00000, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe5, 0x62ffe7f1, 0xffffffffffffffff, 0x2, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x5, 0x30000002, 0x400, 0x3c}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0x1, 0x287}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff0000, 0xd6d, 0x20000000, 0x1a84, 0xc35}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe, 0x9, 0xfffffffffffffff4, 0xf4c, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xc000000, 0x20000000, 0x0, 0x6}, 0x183c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x46e, 0x3, 0xb, 0x7, 0x40}, 0xcfd}}]}, {0xe5, 0x6, "49531c2c257a8ef6ffe8f0561ef4e56e8ad26f7a53e9ce288f5af30e831b95a45e7b9d4fe6186a68ed7bc8cc59904fafe458500eafbcf0a80d813edb6b92e8cd7c34a12de30597bd5299111b6f3bf22fb89a06d1a69b4c517d7764af8ef79769a5c9c9c1888957d41b392716f9c0e4b3b406c1ab84dc5e1507f20973d79efaf9eb6cb6eece1bec6d621cdeb0c6cca9d1dba5125aece55b4b82cde5452e36a92f5029abb03cad29a603f7fd400ccad09c0659d80581f21cc5ca1bf7b8016bd9e8d5f0e42935ea0578826b5fb3d5c4e1ef907fcf2518b13db08899306d46ecfa89e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xd8, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0xffffffff, 0x1, 0x8}, 0xd}}]}, {0x85, 0x6, "e9081537cd7e47acdd99e1f3c7ae034666d57286346d4c101bb57387ad2a53ad589cdd1a32114f7189002a538c6f487721c8d3da95b10433390725b5e7a4ca5c0d079316d5a88c57e126076fbd671e61ea7b601050fa2cc7453cb5f566137784e19fa439145290f35501f7a24fcdafcbb46ec96331e44d895e45d46e0ff4b29f4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c804)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r9)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"})
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt(r10, 0x6, 0x0, 0x0, &(0x7f0000000000))

275.025941ms ago: executing program 2 (id=6632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0xc004)
unshare(0x24020400)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x78, &(0x7f0000000100)}, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0x10000000})
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48000)

115.796574ms ago: executing program 2 (id=6633):
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x7ffffffe, 0x0, 0x0, 0x4800}, 0x44050)

115.552921ms ago: executing program 0 (id=6634):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async)
getsockopt(r4, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) (async)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0x9, 0x4) (async)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @dev}, 0x10) (async)
syz_emit_ethernet(0x25, &(0x7f00000005c0)={@multicast, @empty, @void, {@generic={0x88e5, "e6ffd343a1d4b0b3dec73b4b5aa04e53ac12966a9ebb83"}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000000000061d0f157c7f0ebd9884407020c0210500000e3ffff9400000000000000"], &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) (async)
sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000001c0)={@multicast1, @multicast2, 0x1, "be2326f7df4ee26e083c2d10cde39b4481cb2af1f0c67854c9cb53bcb0fa5ad7", 0x9, 0x7fff, 0x400, 0xfffffffc}, 0x3c)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)

115.210362ms ago: executing program 2 (id=6635):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @broadcast, {[@lsrr={0x83, 0x3, 0x74}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ac10ef31176d1af88e863d588661a0756365388ef6f2d7b69fb82dc9e7de475e5aad52fa5b61fb1730a4f8ba342b81d86460c5cc35df8bdc3e55e1e92140c9ed10cfd396d4fb331e1901da8dfd47cd7431fd6cb967f7d84f0ba6de4a73b26c286edc3684534e70f60b30b7aefec9309c13a29b35e134d47c3579870d43bcc2babd71412ade39c68b036b5e7a6e90c25efe7a5b3ff3fae0fe7459e71cb431cb8f6a45a9a21d938cbd1de67fde856f05154095c3d86b9f4bac02987d8a06aae5f8d3da56748f1f6b1e9de4d1afaea08c70a943b080bf77494e5dcc17fe38bb0a0b36a008f7805cfdbe5a89e2e12e013b6ff42e3f9e825f3d604768f87273edad56c12c8a5eacd9b63ea6fa1ecf16139cb19c579c4f0a125a755439e6dc9c1637c0d23c1c281af2982cca306b2d3dbaede299bfe4f2ebd822abfabafef3f159049cc24f01a412fafe3d43841a6a4dbed78566e34544a074d4c01cedbb22527e955e8f93ef5a927fdec293a3c78693cae45de7481fdf0f65a43b50d26904594676b7af375752c99e2ba3e00286ab9d438af7b8834c0e71d245c0428ecc5a59f29ab0bca9b1913b9bb5373a94e1daae374d0ed7e7ffd0a1188c83e61e8ee28625483a96a246b9e1cdc8da085de61834a15afd5e7726d711c5ecc008914b9b9f35603330113e548e4509516bac6bc1150b2ace667a540ec84d22c0d0200056918fa3ac596cddd501f7b34f3b97c12c3c10e4b0c67ef01059c2feed93f9169498278daabd27d8537882a87b2edd4b2e6789b90d065ba7a064b2b4ecc1622c8662b3145844c12491ee85dd2acbe057479db9d24e500d9f1af37745f39e7fc7d4e513fa839556155db1ba6d62465a464184f2f4f9c4c822e64c6a357d7bc06caf64db283f0a3a427b400b7dd4df488c9e30db1fdb1774038d32557b69f9c1eba7ec66309bc68c19200aa5f05ec21c1cc9a12667cbae2863198913eac1de18df558c1b5fbceb0e6b521e120e98b39ecc8cabb6c25cdc31d827eeb549fe548f6b29d4f65b176ea0a20411d750f02c660cba2c62935fad8c51324f6f437daa53c81ff2e19b94140f1d72a2540b3fa74ffe85c696a4e4411d4449744ca4b5e8b921c7d62208b88a1df38030c4e09cd264a9c534259737ed6ea798cbc2d0054845dc84e97295efad0f5228fc61710e75a4445a889e230887845fa7f02be62593c352cb344a0f947bdb6c4cf3aab5ecedbd4fdde781c496db32a51f700b2fc19b2c36e257bbb2c735e0f03cd9e49700aee6edaa6952bdc2feef2d2e5463b6778fde3c7ef73477e22a181816883192beee132b3866c4ec977e0cd0b995de650c4c7d3e6e483685f75f9d82f69868d67e64a59e7320707847040bed7bb8c24d5e6a1da326d3226e71933484a2c619592a00db3b086d5fee139abaae14d65698937ef8c066acc7134f085e1e8ccd04a67e128c2d775740f0727c14dfbf8a2ed7f25d353285ab0fd03a8788d725163d27ac13ced25669301f672fb1f404451d85e92e1d0049fa9558c8492cc336ddd5133cb1b307f2901341fb6a021e1b751f22412e76fad6ea2b4a7d756559619fa47b22bc55ef8fdc19fbd6136becc60ff19748e60452e704752c82beb4861ea118875e9fe75a9e6c10c8b922dd8054ef8dd15963db6d505e7eab028322801bb4328d8257e726d937ca83c8efca320c8ecd24313eb5e8114c604781ed936a82740340ac6692bfc3613d2f49bf8284cf60cee6513fd154034e49af838146872e8735962da7f7bbd301f2fd85e597c1b6f8418352ebec83286f9dfab4a0b4dbb8b9c7b55aaf9ac1628d1493c1786c78a8a0b8c58596f1e1ba92b7fcdb80e867fdd299c78b902ac2de3c6d6bad6c5fb0c5db603b7c3c7ff8a64dc4488e07d2b506db960db1503ad72dab8ef405549a5f12a62052be8f7ad3fad32ba8560a8874c06f815ec9912dfcc16d8e0f8c9ab9afceae435a63dcdd1dc6b1e4d186f306ec1c8af08e69ad8fc9860c9bad1af0654c51e0711ecfa47c6b4411010076c975057db6609b47fda736f6ef81863387e3c971479a572145aab35a24475ffea35c1626b644ba12ef8d92cf9310f722b493b2da8ea4c5dcd99d75167e1404642aafbf5db3f8ce95382d7bbd550c0bae73af75dc913ead260ce475b30879d4279efeae49e88b0071661725e9ec5b3579c1716d70971fd301d8ee090a98120bf35ffa62101077362a2a3564022b0bff01e76e641fc01ff731a834509600aadeffe2f00276de348a3c57778865063bd8e348b6e68b5c74298ba911a184f5bfdefd6473272c174c9e644abdf22b3ac39e246ae947ffef4773bcfec3b2a8d03dc8971471dfc50cd5ef6d32ae3486f7d14b0137e80a313910d9bc87aed8c41c6563f646b39c2a26f4add083ab6efb5753fc6b78e7907b9cd8a2cabdf87e202239fffc99e0446915c3bc147635398f73201d7369902225184d8da01641759645bf92b5d73ab153f2150264c3333ce12747ce2642aa04aeeb85513170a67dd93b010e8fd0f3cb290e1fc0040d32bdad7d8b41c4f2d10a3c170dbc3e264e29714a34dd220c2bf3e273d7cb3a9397b16a47c85cca75e4cac2def7c976fb7f38b24bdb8f80486e9cec55574d9f2864085289fd2fc497a3a7fab762877629db9ff70201f07897246f9f5211ced9266b732e9988805669dc1bc8e4ddd235562c7785e2379f1f0dd1e71a98b6d204e6c1a1ee163ceb35f6c436bb2547522bed2a55814a3f5f53d3eceee6c847c12af75fdc8452116ab891a5c6424a79b33c4b56a5412700a907f3eca800fcfba133f8bab9ebae32c699b548aff3ac702699f293fceb7445a7107956adad16a6b73a2fe0c88232f2d9831b238b92c511e4a6e02f784ee328bd979c4728ba0f86cc4ed9a69c6d5bc23496729a6512c4664006afc08de2f4dd89e52108f7c081d11facccb91ebc82415691b6bf05818638b3a4d809ae307f4b2d867a34417dbaad8c01a3773d8ebe56890230bd4a2e2a027d59839e1710cb5d25cec245ed8f86b7d4ed8e4ec48c53387ab1ea059406bf2612a6c730750b41a47bdf51cbec2c3f1b07fd6aba2ea390e138868d71f0a73990e87b383757a199f53bcd25f93b15efaf84a9a3758f5cbc2223a809ba784a5af2d36a3b99e3d143310ecf2bb9d2dd8fe9defdfa3d82e005c52514f13beb97476fb7a0f7ab62892977c9da0b950dbbc89bdd58472619f3bdbf46def88488e7bdf0633ee908a4e4e795e92037b74db18672e168514e2ad0a2df94357f2dc2c593b251894657c6bea65abfcd76b7037bd5817ab73be94f00031150f375442e0f0d0e7236ed4150637c14f62ecb6713f897889d77d814ead5774d726f307fe32c020cdefda72151798fcde65af6fbe6594eeb078a8c414b949c0c2217a0cc82049c43f6fb3cb7c00fc0305b86dddde708dd8a61a63e799abdd49d6ff1c41b8ecb230891037ca36d7a7e1f6280f52a5d45ff872f11df408ae09fc9b9d371ccf4f2777626ad84426d925dac9bbacc785acb5c29cbf9d6aec77d5ac48778ab4682b7bb611f342a72c26417a5e432e5d956844e19739e61999a78c615acc09f415032031ac6cb839da764331d131acbe66b502e7f1a5b9dc68df7f5524e7bc6fdfa982b39af2cbff69052d04be78821282dbfc034e64943004375f16cf4741526aaafebfc1a6d4a38d4c345aa22c94922f145b6c449a216b6c382565598125156fad8097c2e7ea65063cdfe34e50fb75939f3b3cf5ab8a3448ead3cc36358f45b0eaabf8ff2b64a1923407226f24420978d03d6bcefc2b45a74425017c11146e25f6d41912f39afecaa19090123ea2605994978b00a347aba322cd10822933e3f5988477ce1b2aff651553ec4977b185e5c7aaa4c64b4fb49cfc0cad75e85c0617e19f26fd0932a4bba0821d5a4d9449773c2d3c25e8aee59155346502b72a4d6818f143695acd5b83a336d02e2d1b9da5740e287c4694012f9648656c51cd44431c54301ea55f48197d1280421793598db89820937aa6a41d69618f55fd9c40dc0742e77d4ddf4a68a6cecba47ff0a22e2734bc9556193642b92838c891b4ed109af35190332aabb9aab184076cfc99f08814bebe47fccd12005ad926a643c791ecda50458a1106a033408fb90da10f8d6e42b3a462e9f9a1a2752c21967884ea79a1148f3dd0304bef05747458c7859dbf7f6df08074e9ac221677b70546909329c5557adb255cc33c1f9b762188e2498a7744f066df3fb8bee6261db37489b63f9bda047a06cbc588ff1255e3b63a86a5ca353160e0dc4088ea691c768f5d36397cb64c6db2d5bd39473a9d1209d021b8017434874ed5f99d9fc27d5549eaecdcfb7093549acaea45610221192942e108def0efbc004bbfef195af7dcdc0b75097eba13d621c2ca5ee3bfd2845b21a910e8ea21536768e1e5081997ae7415a55e58e1294d8ff3bc95faf96a65501b922382f4f75a0f938b290fd66bb3ccdc33734bafa18a3765d23f151951b8c8c6939de018c4e9ca253dff4a1fc70a601bba8c2e146a79166745e5fd1748c638a7a945e5f5aea0a93c7861446ef5996e37231e573245dae58b168c0564c8b27ada3fde66bb00f51f7e47970855d1057739ccf583666055187173bfd1454a5fbcfd59f39b6ad63fbfbe0fea9a6b336a41ec316acedd38cc6fab7de1190c97bed6e8f1cdb47d59941955f87a59d953c0f60f68a63fcf8f6f76b3eb5d79d94a2eeb3fb28781b1bbd31937c6f6e2d6fa7d2f4134702fdc0a2250bbec420c73a89c1643379235a492c2cbb3280ec3e676fcc1b33aaa645234eebefb1c28c52646a33c1989a386d537cd5ebf89f50b575b37b9a337f653919a569229009"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @broadcast, {[@lsrr={0x83, 0x3, 0x74}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce) (async)

15.172054ms ago: executing program 0 (id=6636):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r3 = accept4(r2, &(0x7f0000000080)=@sco, &(0x7f0000000180)=0x80, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000001300)={0x10c8, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "c183caba9c89ba94331258f12335deb90c4faa72dd087be13eafe2989a1c5f14c744e506f834e3f884274f8d5f0359bd620dcc9898e3472591fd73f09f4dae966a1293c0d634a88310ac2cc20891f9a3586f395c25f823bf3eb57525c01b60b9c06c58f92633788bf010d0508feb431f6cf58c1d04b3964123445091f2cf9bc08c3864dff6eeffd56a92172bd0ef8cf8d50e27f8303411a44d7a4660b775bc9f3a14b3"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x2004c090}, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0d6099986a4cb1ca3eaf19e16923620d5348f3c86fe308aac916ce44136b9de01c5a186b11d7b5b87c74191549ed06fa50100e19d4f7c8e4eec9556317ccee182f0efa26a52", @ANYRES16=r7, @ANYBLOB="57cf29bd7000fddbdf25490000000c0099000800000048000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044c44}, 0x840) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x1, 0xfffffffffffffffe})

15.056632ms ago: executing program 0 (id=6637):
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050)

13.956463ms ago: executing program 0 (id=6638):
r0 = socket(0x1000000000000010, 0x80802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c0008000800113f080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)

0s ago: executing program 0 (id=6639):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040094}, 0x8800)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

kernel console output (not intermixed with test programs):

64_after_hwframe+0x77/0x7f
[  292.774815][T23198]  ? exc_page_fault+0x9f/0xf0
[  292.774826][T23198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.774833][T23198] RIP: 0033:0x7f090758ebe9
[  292.774841][T23198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.774848][T23198] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.774857][T23198] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  292.774863][T23198] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  292.774868][T23198] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  292.774872][T23198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.774877][T23198] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  292.774889][T23198]  </TASK>
[  293.188481][T23232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5843'.
[  293.468567][T23244] bond0: option arp_validate: invalid value (8449)
[  293.640521][T23259] bond1: option mode: unable to set because the bond device has slaves
[  293.647434][T23259] bond1: (slave macvlan15): Error -98 calling set_mac_address
[  293.720148][T23261] syzkaller1: entered promiscuous mode
[  293.722026][T23261] syzkaller1: entered allmulticast mode
[  293.868131][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5856'.
[  293.886638][T23269] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  293.890558][T23269] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  294.000081][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5857'.
[  294.052097][T23278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5859'.
[  294.073207][T23279] bond0: (slave macvlan1): Releasing backup interface
[  294.078613][T23279] macvlan1: left promiscuous mode
[  294.080321][T23279] macvlan1: left allmulticast mode
[  294.082180][T23279] batman_adv: batadv0: Removing interface: ipvlan19
[  294.084686][T23279] batman_adv: batadv0: Removing interface: ipvlan20
[  294.088659][T23279] bond1: (slave macvlan8): Releasing backup interface
[  294.091319][T23279] batman_adv: batadv0: Removing interface: ipvlan21
[  294.093736][T23279] batman_adv: batadv0: Removing interface: ipvlan22
[  294.096361][T23279] batman_adv: batadv0: Removing interface: ipvlan23
[  294.151525][T23293] netlink: 'syz.0.5863': attribute type 3 has an invalid length.
[  294.154021][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5863'.
[  294.158409][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5862'.
[  294.188624][T23298] netlink: 'syz.0.5864': attribute type 1 has an invalid length.
[  294.191072][T23298] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5864'.
[  294.219605][T23301] netlink: 'syz.0.5865': attribute type 11 has an invalid length.
[  294.222144][T23301] netlink: 'syz.0.5865': attribute type 4 has an invalid length.
[  294.256017][T23304] netlink: 'syz.0.5867': attribute type 21 has an invalid length.
[  294.280838][T23309] netlink: 'syz.1.5869': attribute type 41 has an invalid length.
[  294.293880][T23309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.376611][T23321] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  294.380553][T23321] CPU: 1 UID: 0 PID: 23321 Comm: syz.1.5872 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  294.380568][T23321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.380574][T23321] Call Trace:
[  294.380579][T23321]  <TASK>
[  294.380585][T23321]  dump_stack_lvl+0x189/0x250
[  294.380600][T23321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.380609][T23321]  ? __pfx__printk+0x10/0x10
[  294.380619][T23321]  ? kernfs_path_from_node+0x2c/0x260
[  294.380630][T23321]  ? kernfs_path_from_node+0x2c/0x260
[  294.380644][T23321]  ? kernfs_path_from_node+0x2c/0x260
[  294.380654][T23321]  ? kernfs_path_from_node+0x22c/0x260
[  294.380663][T23321]  ? kernfs_path_from_node+0x2c/0x260
[  294.380673][T23321]  sysfs_warn_dup+0x8e/0xa0
[  294.380682][T23321]  sysfs_do_create_link_sd+0xc0/0x110
[  294.380691][T23321]  device_add_class_symlinks+0x1cf/0x240
[  294.380705][T23321]  device_add+0x475/0xb50
[  294.380717][T23321]  wiphy_register+0x1ba6/0x28d0
[  294.380736][T23321]  ? __pfx_wiphy_register+0x10/0x10
[  294.380747][T23321]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  294.380759][T23321]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  294.380771][T23321]  ieee80211_register_hw+0x3425/0x4080
[  294.380787][T23321]  ? ieee80211_register_hw+0x1491/0x4080
[  294.380799][T23321]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  294.380809][T23321]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.380824][T23321]  ? __hrtimer_setup+0x187/0x210
[  294.380836][T23321]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  294.380849][T23321]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  294.380873][T23321]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  294.380882][T23321]  ? trace_kmalloc+0x1f/0xd0
[  294.380892][T23321]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  294.380904][T23321]  ? kstrndup+0xbf/0x160
[  294.380918][T23321]  hwsim_new_radio_nl+0xea4/0x1b10
[  294.380930][T23321]  ? __pfx___nla_validate_parse+0x10/0x10
[  294.380945][T23321]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.380961][T23321]  ? __nla_parse+0x40/0x60
[  294.380971][T23321]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  294.380984][T23321]  genl_family_rcv_msg_doit+0x215/0x300
[  294.380996][T23321]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.381010][T23321]  ? bpf_lsm_capable+0x9/0x20
[  294.381020][T23321]  ? security_capable+0x7e/0x2e0
[  294.381033][T23321]  genl_rcv_msg+0x60e/0x790
[  294.381045][T23321]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.381054][T23321]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.381070][T23321]  netlink_rcv_skb+0x208/0x470
[  294.381080][T23321]  ? __lock_acquire+0xab9/0xd20
[  294.381091][T23321]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.381100][T23321]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.381119][T23321]  ? down_read+0x1ad/0x2e0
[  294.381127][T23321]  genl_rcv+0x28/0x40
[  294.381135][T23321]  netlink_unicast+0x82f/0x9e0
[  294.381149][T23321]  ? __pfx_netlink_unicast+0x10/0x10
[  294.381160][T23321]  ? netlink_sendmsg+0x642/0xb30
[  294.381169][T23321]  ? skb_put+0x11b/0x210
[  294.381179][T23321]  netlink_sendmsg+0x805/0xb30
[  294.381194][T23321]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.381206][T23321]  ? aa_sock_msg_perm+0x94/0x160
[  294.381217][T23321]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.381250][T23321]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.381262][T23321]  __sock_sendmsg+0x21c/0x270
[  294.381275][T23321]  ____sys_sendmsg+0x505/0x830
[  294.381286][T23321]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.381299][T23321]  ? import_iovec+0x74/0xa0
[  294.381313][T23321]  ___sys_sendmsg+0x21f/0x2a0
[  294.381323][T23321]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.381349][T23321]  ? __fget_files+0x2a/0x420
[  294.381357][T23321]  ? __fget_files+0x3a0/0x420
[  294.381370][T23321]  __x64_sys_sendmsg+0x19b/0x260
[  294.381380][T23321]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.381396][T23321]  ? do_syscall_64+0xbe/0x3b0
[  294.381409][T23321]  do_syscall_64+0xfa/0x3b0
[  294.381420][T23321]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.381431][T23321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.381438][T23321]  ? exc_page_fault+0x9f/0xf0
[  294.381450][T23321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.381458][T23321] RIP: 0033:0x7f493378ebe9
[  294.381466][T23321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.381473][T23321] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.381482][T23321] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  294.381487][T23321] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  294.381492][T23321] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  294.381497][T23321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.381501][T23321] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  294.381514][T23321]  </TASK>
[  294.582711][T23324] netlink: 'syz.1.5873': attribute type 10 has an invalid length.
[  294.752258][T23345] bond0: option arp_validate: invalid value (2162689)
[  294.856163][T23355] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  294.860137][T23355] CPU: 1 UID: 0 PID: 23355 Comm: syz.2.5883 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  294.860149][T23355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.860154][T23355] Call Trace:
[  294.860158][T23355]  <TASK>
[  294.860163][T23355]  dump_stack_lvl+0x189/0x250
[  294.860177][T23355]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.860185][T23355]  ? __pfx__printk+0x10/0x10
[  294.860196][T23355]  ? kernfs_path_from_node+0x2c/0x260
[  294.860206][T23355]  ? kernfs_path_from_node+0x2c/0x260
[  294.860215][T23355]  ? kernfs_path_from_node+0x2c/0x260
[  294.860246][T23355]  ? kernfs_path_from_node+0x22c/0x260
[  294.860254][T23355]  ? kernfs_path_from_node+0x2c/0x260
[  294.860266][T23355]  sysfs_warn_dup+0x8e/0xa0
[  294.860275][T23355]  sysfs_do_create_link_sd+0xc0/0x110
[  294.860286][T23355]  device_add_class_symlinks+0x1cf/0x240
[  294.860298][T23355]  device_add+0x475/0xb50
[  294.860309][T23355]  wiphy_register+0x1ba6/0x28d0
[  294.860329][T23355]  ? __pfx_wiphy_register+0x10/0x10
[  294.860339][T23355]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  294.860350][T23355]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  294.860361][T23355]  ieee80211_register_hw+0x3425/0x4080
[  294.860377][T23355]  ? ieee80211_register_hw+0x1491/0x4080
[  294.860389][T23355]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  294.860399][T23355]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.860413][T23355]  ? __hrtimer_setup+0x187/0x210
[  294.860424][T23355]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  294.860437][T23355]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  294.860460][T23355]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  294.860470][T23355]  ? trace_kmalloc+0x1f/0xd0
[  294.860480][T23355]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  294.860491][T23355]  ? kstrndup+0xbf/0x160
[  294.860504][T23355]  hwsim_new_radio_nl+0xea4/0x1b10
[  294.860516][T23355]  ? __pfx___nla_validate_parse+0x10/0x10
[  294.860531][T23355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.860547][T23355]  ? __nla_parse+0x40/0x60
[  294.860559][T23355]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  294.860572][T23355]  genl_family_rcv_msg_doit+0x215/0x300
[  294.860584][T23355]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.860598][T23355]  ? bpf_lsm_capable+0x9/0x20
[  294.860608][T23355]  ? security_capable+0x7e/0x2e0
[  294.860621][T23355]  genl_rcv_msg+0x60e/0x790
[  294.860638][T23355]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.860646][T23355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.860663][T23355]  netlink_rcv_skb+0x208/0x470
[  294.860673][T23355]  ? __lock_acquire+0xab9/0xd20
[  294.860685][T23355]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.860695][T23355]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.860715][T23355]  ? down_read+0x1ad/0x2e0
[  294.860723][T23355]  genl_rcv+0x28/0x40
[  294.860731][T23355]  netlink_unicast+0x82f/0x9e0
[  294.860746][T23355]  ? __pfx_netlink_unicast+0x10/0x10
[  294.860773][T23355]  ? netlink_sendmsg+0x642/0xb30
[  294.860785][T23355]  ? skb_put+0x11b/0x210
[  294.860794][T23355]  netlink_sendmsg+0x805/0xb30
[  294.860809][T23355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.860822][T23355]  ? aa_sock_msg_perm+0x94/0x160
[  294.860833][T23355]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.860841][T23355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.860854][T23355]  __sock_sendmsg+0x21c/0x270
[  294.860865][T23355]  ____sys_sendmsg+0x505/0x830
[  294.860877][T23355]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.860890][T23355]  ? import_iovec+0x74/0xa0
[  294.860902][T23355]  ___sys_sendmsg+0x21f/0x2a0
[  294.860911][T23355]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.860935][T23355]  ? __fget_files+0x2a/0x420
[  294.860943][T23355]  ? __fget_files+0x3a0/0x420
[  294.860955][T23355]  __x64_sys_sendmsg+0x19b/0x260
[  294.860964][T23355]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.860976][T23355]  ? rcu_is_watching+0x15/0xb0
[  294.860990][T23355]  ? do_syscall_64+0xbe/0x3b0
[  294.861003][T23355]  do_syscall_64+0xfa/0x3b0
[  294.861013][T23355]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.861023][T23355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.861030][T23355]  ? exc_page_fault+0x9f/0xf0
[  294.861041][T23355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.861049][T23355] RIP: 0033:0x7f090758ebe9
[  294.861057][T23355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.861063][T23355] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.861073][T23355] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  294.861078][T23355] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  294.861083][T23355] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  294.861088][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.861092][T23355] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  294.861105][T23355]  </TASK>
[  294.894068][T23359] bond0: option arp_validate: invalid value (50331649)
[  295.472679][T23395] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  295.497847][T23396] macvlan8: entered promiscuous mode
[  295.499856][T23396] bond0: entered promiscuous mode
[  295.502086][T23396] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  295.973567][T23429] netlink: 'syz.0.5908': attribute type 1 has an invalid length.
[  296.016271][T23427] bond14: (slave gretap2): making interface the new active one
[  296.018890][T23427] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  296.112317][T23441] dvmrp0: entered allmulticast mode
[  296.283009][T23457] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  296.323600][T23460] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  296.328932][T23460] CPU: 1 UID: 0 PID: 23460 Comm: syz.2.5917 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  296.328944][T23460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.328950][T23460] Call Trace:
[  296.328954][T23460]  <TASK>
[  296.328958][T23460]  dump_stack_lvl+0x189/0x250
[  296.328972][T23460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.328981][T23460]  ? __pfx__printk+0x10/0x10
[  296.328991][T23460]  ? kernfs_path_from_node+0x2c/0x260
[  296.329001][T23460]  ? kernfs_path_from_node+0x2c/0x260
[  296.329010][T23460]  ? kernfs_path_from_node+0x2c/0x260
[  296.329019][T23460]  ? kernfs_path_from_node+0x22c/0x260
[  296.329028][T23460]  ? kernfs_path_from_node+0x2c/0x260
[  296.329038][T23460]  sysfs_warn_dup+0x8e/0xa0
[  296.329047][T23460]  sysfs_do_create_link_sd+0xc0/0x110
[  296.329056][T23460]  device_add_class_symlinks+0x1cf/0x240
[  296.329069][T23460]  device_add+0x475/0xb50
[  296.329080][T23460]  wiphy_register+0x1ba6/0x28d0
[  296.329099][T23460]  ? __pfx_wiphy_register+0x10/0x10
[  296.329110][T23460]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  296.329123][T23460]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  296.329134][T23460]  ieee80211_register_hw+0x3425/0x4080
[  296.329150][T23460]  ? ieee80211_register_hw+0x1491/0x4080
[  296.329161][T23460]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  296.329171][T23460]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.329186][T23460]  ? __hrtimer_setup+0x187/0x210
[  296.329229][T23460]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  296.329247][T23460]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  296.329273][T23460]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  296.329282][T23460]  ? trace_kmalloc+0x1f/0xd0
[  296.329293][T23460]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  296.329305][T23460]  ? kstrndup+0xbf/0x160
[  296.329319][T23460]  hwsim_new_radio_nl+0xea4/0x1b10
[  296.329331][T23460]  ? __pfx___nla_validate_parse+0x10/0x10
[  296.329347][T23460]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.329363][T23460]  ? __nla_parse+0x40/0x60
[  296.329373][T23460]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  296.329386][T23460]  genl_family_rcv_msg_doit+0x215/0x300
[  296.329398][T23460]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  296.329413][T23460]  ? bpf_lsm_capable+0x9/0x20
[  296.329423][T23460]  ? security_capable+0x7e/0x2e0
[  296.329435][T23460]  genl_rcv_msg+0x60e/0x790
[  296.329447][T23460]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.329456][T23460]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  296.329472][T23460]  netlink_rcv_skb+0x208/0x470
[  296.329483][T23460]  ? __lock_acquire+0xab9/0xd20
[  296.329493][T23460]  ? __pfx_genl_rcv_msg+0x10/0x10
[  296.329502][T23460]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  296.329522][T23460]  ? down_read+0x1ad/0x2e0
[  296.329530][T23460]  genl_rcv+0x28/0x40
[  296.329537][T23460]  netlink_unicast+0x82f/0x9e0
[  296.329551][T23460]  ? __pfx_netlink_unicast+0x10/0x10
[  296.329562][T23460]  ? netlink_sendmsg+0x642/0xb30
[  296.329572][T23460]  ? skb_put+0x11b/0x210
[  296.329582][T23460]  netlink_sendmsg+0x805/0xb30
[  296.329597][T23460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.329609][T23460]  ? aa_sock_msg_perm+0x94/0x160
[  296.329626][T23460]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.329635][T23460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.329646][T23460]  __sock_sendmsg+0x21c/0x270
[  296.329658][T23460]  ____sys_sendmsg+0x505/0x830
[  296.329670][T23460]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.329683][T23460]  ? import_iovec+0x74/0xa0
[  296.329696][T23460]  ___sys_sendmsg+0x21f/0x2a0
[  296.329705][T23460]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.329731][T23460]  ? __fget_files+0x2a/0x420
[  296.329739][T23460]  ? __fget_files+0x3a0/0x420
[  296.329751][T23460]  __x64_sys_sendmsg+0x19b/0x260
[  296.329761][T23460]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  296.329775][T23460]  ? rcu_is_watching+0x15/0xb0
[  296.329790][T23460]  ? do_syscall_64+0xbe/0x3b0
[  296.329803][T23460]  do_syscall_64+0xfa/0x3b0
[  296.329813][T23460]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.329824][T23460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.329832][T23460]  ? exc_page_fault+0x9f/0xf0
[  296.329843][T23460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.329850][T23460] RIP: 0033:0x7f090758ebe9
[  296.329858][T23460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.329864][T23460] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.329873][T23460] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  296.329879][T23460] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  296.329884][T23460] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  296.329888][T23460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.329893][T23460] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  296.329906][T23460]  </TASK>
[  296.809283][T23474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.968606][T23487] bond0: left allmulticast mode
[  296.970604][T23487] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.265433][T23526] netlink: 'syz.1.5937': attribute type 1 has an invalid length.
[  297.594414][T23577] bond20: entered promiscuous mode
[  297.784614][T23606] __nla_validate_parse: 54 callbacks suppressed
[  297.784625][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'.
[  297.888948][T23615] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  297.908492][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5964'.
[  297.935173][T23620] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5966'.
[  297.965134][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'.
[  298.619967][T23647] netlink: 'syz.0.5974': attribute type 1 has an invalid length.
[  298.632164][T23647] bond15: entered promiscuous mode
[  298.634131][T23647] 8021q: adding VLAN 0 to HW filter on device bond15
[  298.644881][T23647] 8021q: adding VLAN 0 to HW filter on device bond15
[  298.648647][T23647] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address
[  298.652447][T23647] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  298.660223][T23647] bond15: (slave wireguard0): making interface the new active one
[  298.662969][T23647] wireguard0: entered promiscuous mode
[  298.665486][T23647] bond15: (slave wireguard0): Enslaving as an active interface with an up link
[  298.669859][T23647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.672221][T23647] IPv6: NLM_F_CREATE should be set when creating new route
[  298.674864][T23647] IPv6: NLM_F_CREATE should be set when creating new route
[  298.677600][T23647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.683398][T23647] bond15: (slave wireguard1): The slave device specified does not support setting the MAC address
[  298.688506][T23647] bond15: (slave wireguard1): Enslaving as a backup interface with an up link
[  298.789310][T23662] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.796871][T23662] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  298.800124][T23662] bond1: (slave macvlan9): Enslaving as a backup interface with a down link
[  298.829375][T23664] syzkaller1: entered promiscuous mode
[  298.831235][T23664] syzkaller1: entered allmulticast mode
[  299.002436][T23673] 8021q: adding VLAN 0 to HW filter on device bond16
[  299.005263][T23673] bond16: entered promiscuous mode
[  299.007364][T23673] bond0: (slave bond16): Enslaving as an active interface with a down link
[  299.117546][T23683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5986'.
[  299.189996][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5988'.
[  299.240822][T23692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5990'.
[  299.243739][T23692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5990'.
[  299.279320][T23694] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  299.284228][T23694] CPU: 0 UID: 0 PID: 23694 Comm: syz.0.5991 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  299.284248][T23694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.284257][T23694] Call Trace:
[  299.284263][T23694]  <TASK>
[  299.284270][T23694]  dump_stack_lvl+0x189/0x250
[  299.284292][T23694]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.284308][T23694]  ? __pfx__printk+0x10/0x10
[  299.284325][T23694]  ? kernfs_path_from_node+0x2c/0x260
[  299.284343][T23694]  ? kernfs_path_from_node+0x2c/0x260
[  299.284357][T23694]  ? kernfs_path_from_node+0x2c/0x260
[  299.284374][T23694]  ? kernfs_path_from_node+0x22c/0x260
[  299.284389][T23694]  ? kernfs_path_from_node+0x2c/0x260
[  299.284407][T23694]  sysfs_warn_dup+0x8e/0xa0
[  299.284423][T23694]  sysfs_do_create_link_sd+0xc0/0x110
[  299.284441][T23694]  device_add_class_symlinks+0x1cf/0x240
[  299.284483][T23694]  device_add+0x475/0xb50
[  299.284503][T23694]  wiphy_register+0x1ba6/0x28d0
[  299.284538][T23694]  ? __pfx_wiphy_register+0x10/0x10
[  299.284556][T23694]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  299.284577][T23694]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  299.284595][T23694]  ieee80211_register_hw+0x3425/0x4080
[  299.284623][T23694]  ? ieee80211_register_hw+0x1491/0x4080
[  299.284643][T23694]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  299.284660][T23694]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.284682][T23694]  ? __hrtimer_setup+0x187/0x210
[  299.284701][T23694]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  299.284723][T23694]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  299.284766][T23694]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  299.284783][T23694]  ? trace_kmalloc+0x1f/0xd0
[  299.284800][T23694]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  299.284827][T23694]  ? kstrndup+0xbf/0x160
[  299.284852][T23694]  hwsim_new_radio_nl+0xea4/0x1b10
[  299.284873][T23694]  ? __pfx___nla_validate_parse+0x10/0x10
[  299.284902][T23694]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.284932][T23694]  ? __nla_parse+0x40/0x60
[  299.284950][T23694]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  299.284974][T23694]  genl_family_rcv_msg_doit+0x215/0x300
[  299.284995][T23694]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  299.285020][T23694]  ? bpf_lsm_capable+0x9/0x20
[  299.285037][T23694]  ? security_capable+0x7e/0x2e0
[  299.285058][T23694]  genl_rcv_msg+0x60e/0x790
[  299.285078][T23694]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.285091][T23694]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.285118][T23694]  netlink_rcv_skb+0x208/0x470
[  299.285132][T23694]  ? __lock_acquire+0xab9/0xd20
[  299.285151][T23694]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.285195][T23694]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.285226][T23694]  ? down_read+0x1ad/0x2e0
[  299.285241][T23694]  genl_rcv+0x28/0x40
[  299.285253][T23694]  netlink_unicast+0x82f/0x9e0
[  299.285277][T23694]  ? __pfx_netlink_unicast+0x10/0x10
[  299.285295][T23694]  ? netlink_sendmsg+0x642/0xb30
[  299.285311][T23694]  ? skb_put+0x11b/0x210
[  299.285327][T23694]  netlink_sendmsg+0x805/0xb30
[  299.285350][T23694]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.285371][T23694]  ? aa_sock_msg_perm+0x94/0x160
[  299.285389][T23694]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.285402][T23694]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.285420][T23694]  __sock_sendmsg+0x21c/0x270
[  299.285440][T23694]  ____sys_sendmsg+0x505/0x830
[  299.285459][T23694]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.285481][T23694]  ? import_iovec+0x74/0xa0
[  299.285502][T23694]  ___sys_sendmsg+0x21f/0x2a0
[  299.285519][T23694]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.285564][T23694]  ? __fget_files+0x2a/0x420
[  299.285576][T23694]  ? __fget_files+0x3a0/0x420
[  299.285597][T23694]  __x64_sys_sendmsg+0x19b/0x260
[  299.285614][T23694]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.285638][T23694]  ? rcu_is_watching+0x15/0xb0
[  299.285662][T23694]  ? do_syscall_64+0xbe/0x3b0
[  299.285685][T23694]  do_syscall_64+0xfa/0x3b0
[  299.285703][T23694]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.285721][T23694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.285734][T23694]  ? exc_page_fault+0x9f/0xf0
[  299.285753][T23694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.285766][T23694] RIP: 0033:0x7fa69d38ebe9
[  299.285779][T23694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.285790][T23694] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.285806][T23694] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  299.285822][T23694] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  299.285831][T23694] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  299.285839][T23694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.285847][T23694] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  299.285871][T23694]  </TASK>
[  299.595654][T23707] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5996'.
[  299.600722][T23707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5996'.
[  299.665492][T23715] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  299.669590][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.0.5999 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  299.669603][T23715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.669608][T23715] Call Trace:
[  299.669612][T23715]  <TASK>
[  299.669616][T23715]  dump_stack_lvl+0x189/0x250
[  299.669631][T23715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.669640][T23715]  ? __pfx__printk+0x10/0x10
[  299.669649][T23715]  ? kernfs_path_from_node+0x2c/0x260
[  299.669659][T23715]  ? kernfs_path_from_node+0x2c/0x260
[  299.669668][T23715]  ? kernfs_path_from_node+0x2c/0x260
[  299.669677][T23715]  ? kernfs_path_from_node+0x22c/0x260
[  299.669686][T23715]  ? kernfs_path_from_node+0x2c/0x260
[  299.669695][T23715]  sysfs_warn_dup+0x8e/0xa0
[  299.669704][T23715]  sysfs_do_create_link_sd+0xc0/0x110
[  299.669714][T23715]  device_add_class_symlinks+0x1cf/0x240
[  299.669727][T23715]  device_add+0x475/0xb50
[  299.669737][T23715]  wiphy_register+0x1ba6/0x28d0
[  299.669755][T23715]  ? __pfx_wiphy_register+0x10/0x10
[  299.669765][T23715]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  299.669777][T23715]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  299.669787][T23715]  ieee80211_register_hw+0x3425/0x4080
[  299.669803][T23715]  ? ieee80211_register_hw+0x1491/0x4080
[  299.669816][T23715]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  299.669827][T23715]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  299.669840][T23715]  ? __hrtimer_setup+0x187/0x210
[  299.669852][T23715]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  299.669865][T23715]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  299.669887][T23715]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  299.669897][T23715]  ? trace_kmalloc+0x1f/0xd0
[  299.669907][T23715]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  299.669917][T23715]  ? kstrndup+0xbf/0x160
[  299.669930][T23715]  hwsim_new_radio_nl+0xea4/0x1b10
[  299.669941][T23715]  ? __pfx___nla_validate_parse+0x10/0x10
[  299.669956][T23715]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.669968][T23715]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  299.669981][T23715]  ? __nla_parse+0x40/0x60
[  299.669992][T23715]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  299.670004][T23715]  genl_family_rcv_msg_doit+0x215/0x300
[  299.670015][T23715]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  299.670030][T23715]  ? bpf_lsm_capable+0x9/0x20
[  299.670040][T23715]  ? security_capable+0x7e/0x2e0
[  299.670052][T23715]  genl_rcv_msg+0x60e/0x790
[  299.670064][T23715]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.670072][T23715]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  299.670088][T23715]  netlink_rcv_skb+0x208/0x470
[  299.670098][T23715]  ? __lock_acquire+0xab9/0xd20
[  299.670109][T23715]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.670118][T23715]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.670136][T23715]  ? down_read+0x1ad/0x2e0
[  299.670144][T23715]  genl_rcv+0x28/0x40
[  299.670183][T23715]  netlink_unicast+0x82f/0x9e0
[  299.670200][T23715]  ? __pfx_netlink_unicast+0x10/0x10
[  299.670211][T23715]  ? netlink_sendmsg+0x642/0xb30
[  299.670222][T23715]  ? skb_put+0x11b/0x210
[  299.670233][T23715]  netlink_sendmsg+0x805/0xb30
[  299.670249][T23715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.670262][T23715]  ? aa_sock_msg_perm+0x94/0x160
[  299.670274][T23715]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.670283][T23715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.670295][T23715]  __sock_sendmsg+0x21c/0x270
[  299.670307][T23715]  ____sys_sendmsg+0x505/0x830
[  299.670319][T23715]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.670332][T23715]  ? import_iovec+0x74/0xa0
[  299.670345][T23715]  ___sys_sendmsg+0x21f/0x2a0
[  299.670354][T23715]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.670377][T23715]  ? __fget_files+0x2a/0x420
[  299.670385][T23715]  ? __fget_files+0x3a0/0x420
[  299.670397][T23715]  __x64_sys_sendmsg+0x19b/0x260
[  299.670406][T23715]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.670422][T23715]  ? do_syscall_64+0xbe/0x3b0
[  299.670435][T23715]  do_syscall_64+0xfa/0x3b0
[  299.670444][T23715]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.670454][T23715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.670462][T23715]  ? exc_page_fault+0x9f/0xf0
[  299.670473][T23715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.670480][T23715] RIP: 0033:0x7fa69d38ebe9
[  299.670488][T23715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.670495][T23715] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.670505][T23715] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  299.670510][T23715] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  299.670515][T23715] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  299.670520][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.670525][T23715] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  299.670538][T23715]  </TASK>
[  299.856826][T23719] netlink: 'syz.1.6001': attribute type 2 has an invalid length.
[  299.867488][T23719] : entered promiscuous mode
[  299.913858][T23724] syz_tun: entered allmulticast mode
[  300.811257][T23740] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  300.815039][T23740] CPU: 1 UID: 0 PID: 23740 Comm: syz.1.6007 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  300.815051][T23740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.815057][T23740] Call Trace:
[  300.815061][T23740]  <TASK>
[  300.815065][T23740]  dump_stack_lvl+0x189/0x250
[  300.815080][T23740]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.815088][T23740]  ? __pfx__printk+0x10/0x10
[  300.815098][T23740]  ? kernfs_path_from_node+0x2c/0x260
[  300.815108][T23740]  ? kernfs_path_from_node+0x2c/0x260
[  300.815117][T23740]  ? kernfs_path_from_node+0x2c/0x260
[  300.815126][T23740]  ? kernfs_path_from_node+0x22c/0x260
[  300.815135][T23740]  ? kernfs_path_from_node+0x2c/0x260
[  300.815166][T23740]  sysfs_warn_dup+0x8e/0xa0
[  300.815176][T23740]  sysfs_do_create_link_sd+0xc0/0x110
[  300.815185][T23740]  device_add_class_symlinks+0x1cf/0x240
[  300.815197][T23740]  device_add+0x475/0xb50
[  300.815210][T23740]  wiphy_register+0x1ba6/0x28d0
[  300.815228][T23740]  ? __pfx_wiphy_register+0x10/0x10
[  300.815239][T23740]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  300.815251][T23740]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  300.815263][T23740]  ieee80211_register_hw+0x3425/0x4080
[  300.815279][T23740]  ? ieee80211_register_hw+0x1491/0x4080
[  300.815291][T23740]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  300.815301][T23740]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.815314][T23740]  ? __hrtimer_setup+0x187/0x210
[  300.815326][T23740]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  300.815339][T23740]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  300.815361][T23740]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  300.815371][T23740]  ? trace_kmalloc+0x1f/0xd0
[  300.815381][T23740]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  300.815392][T23740]  ? kstrndup+0xbf/0x160
[  300.815405][T23740]  hwsim_new_radio_nl+0xea4/0x1b10
[  300.815416][T23740]  ? __pfx___nla_validate_parse+0x10/0x10
[  300.815431][T23740]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.815443][T23740]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  300.815458][T23740]  ? __nla_parse+0x40/0x60
[  300.815468][T23740]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  300.815480][T23740]  genl_family_rcv_msg_doit+0x215/0x300
[  300.815492][T23740]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  300.815506][T23740]  ? bpf_lsm_capable+0x9/0x20
[  300.815516][T23740]  ? security_capable+0x7e/0x2e0
[  300.815548][T23740]  genl_rcv_msg+0x60e/0x790
[  300.815561][T23740]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.815569][T23740]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  300.815585][T23740]  netlink_rcv_skb+0x208/0x470
[  300.815613][T23740]  ? __lock_acquire+0xab9/0xd20
[  300.815625][T23740]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.815635][T23740]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.815655][T23740]  ? down_read+0x1ad/0x2e0
[  300.815663][T23740]  genl_rcv+0x28/0x40
[  300.815670][T23740]  netlink_unicast+0x82f/0x9e0
[  300.815685][T23740]  ? __pfx_netlink_unicast+0x10/0x10
[  300.815695][T23740]  ? netlink_sendmsg+0x642/0xb30
[  300.815712][T23740]  ? skb_put+0x11b/0x210
[  300.815721][T23740]  netlink_sendmsg+0x805/0xb30
[  300.815737][T23740]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.815749][T23740]  ? aa_sock_msg_perm+0x94/0x160
[  300.815760][T23740]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.815771][T23740]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.815783][T23740]  __sock_sendmsg+0x21c/0x270
[  300.815795][T23740]  ____sys_sendmsg+0x505/0x830
[  300.815807][T23740]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.815820][T23740]  ? import_iovec+0x74/0xa0
[  300.815833][T23740]  ___sys_sendmsg+0x21f/0x2a0
[  300.815843][T23740]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.815869][T23740]  ? __fget_files+0x2a/0x420
[  300.815876][T23740]  ? __fget_files+0x3a0/0x420
[  300.815888][T23740]  __x64_sys_sendmsg+0x19b/0x260
[  300.815897][T23740]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.815913][T23740]  ? do_syscall_64+0xbe/0x3b0
[  300.815926][T23740]  do_syscall_64+0xfa/0x3b0
[  300.815937][T23740]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.815947][T23740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.815955][T23740]  ? exc_page_fault+0x9f/0xf0
[  300.815966][T23740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.815973][T23740] RIP: 0033:0x7f493378ebe9
[  300.815981][T23740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.815988][T23740] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.815998][T23740] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  300.816003][T23740] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  300.816008][T23740] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  300.816013][T23740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.816018][T23740] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  300.816031][T23740]  </TASK>
[  301.128001][ T5884] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  301.130900][ T5884] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  301.134309][ T5884] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  301.137702][ T5884] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  301.164494][T23758] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.172493][T23758] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  301.177395][T23758] bond1: (slave macvlan9): Enslaving as a backup interface with a down link
[  301.272029][T23770] syzkaller0: entered promiscuous mode
[  301.273773][T23770] syzkaller0: entered allmulticast mode
[  303.228987][T23805] __nla_validate_parse: 13 callbacks suppressed
[  303.228997][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6029'.
[  303.289350][T23818] policy can only be matched on NF_INET_PRE_ROUTING
[  303.289362][T23818] unable to load match
[  303.354914][T23825] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  303.476599][T23843] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6037'.
[  303.479779][T23834] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6037'.
[  303.491024][T23841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6039'.
[  303.494203][T23841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6039'.
[  303.655070][T23849] netlink: 'syz.1.6040': attribute type 10 has an invalid length.
[  303.747784][T23871] delete_channel: no stack
[  303.790396][T23876] bond1: option mode: unable to set because the bond device has slaves
[  303.811403][T23876] bond1: (slave macvlan15): Error -98 calling set_mac_address
[  303.820533][T23879] netlink: 'syz.1.6047': attribute type 2 has an invalid length.
[  303.852487][T23884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6048'.
[  303.891667][T23888] netlink: 'syz.2.6049': attribute type 23 has an invalid length.
[  303.900753][T23887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6049'.
[  303.931495][T23887] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  303.935427][T23887] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  303.947383][T23888] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  303.951708][T23888] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  304.104326][T23911] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  304.108494][T23911] CPU: 0 UID: 0 PID: 23911 Comm: syz.1.6053 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  304.108508][T23911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.108514][T23911] Call Trace:
[  304.108519][T23911]  <TASK>
[  304.108523][T23911]  dump_stack_lvl+0x189/0x250
[  304.108537][T23911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.108547][T23911]  ? __pfx__printk+0x10/0x10
[  304.108557][T23911]  ? kernfs_path_from_node+0x2c/0x260
[  304.108568][T23911]  ? kernfs_path_from_node+0x2c/0x260
[  304.108575][T23911]  ? kernfs_path_from_node+0x2c/0x260
[  304.108585][T23911]  ? kernfs_path_from_node+0x22c/0x260
[  304.108594][T23911]  ? kernfs_path_from_node+0x2c/0x260
[  304.108605][T23911]  sysfs_warn_dup+0x8e/0xa0
[  304.108613][T23911]  sysfs_do_create_link_sd+0xc0/0x110
[  304.108623][T23911]  device_add_class_symlinks+0x1cf/0x240
[  304.108635][T23911]  device_add+0x475/0xb50
[  304.108646][T23911]  wiphy_register+0x1ba6/0x28d0
[  304.108665][T23911]  ? __pfx_wiphy_register+0x10/0x10
[  304.108676][T23911]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  304.108688][T23911]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  304.108699][T23911]  ieee80211_register_hw+0x3425/0x4080
[  304.108715][T23911]  ? ieee80211_register_hw+0x1491/0x4080
[  304.108727][T23911]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  304.108754][T23911]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.108770][T23911]  ? __hrtimer_setup+0x187/0x210
[  304.108782][T23911]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.108797][T23911]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  304.108822][T23911]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  304.108832][T23911]  ? trace_kmalloc+0x1f/0xd0
[  304.108842][T23911]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  304.108853][T23911]  ? kstrndup+0xbf/0x160
[  304.108866][T23911]  hwsim_new_radio_nl+0xea4/0x1b10
[  304.108879][T23911]  ? __pfx___nla_validate_parse+0x10/0x10
[  304.108894][T23911]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.108906][T23911]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  304.108919][T23911]  ? __nla_parse+0x40/0x60
[  304.108929][T23911]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  304.108942][T23911]  genl_family_rcv_msg_doit+0x215/0x300
[  304.108954][T23911]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  304.108969][T23911]  ? bpf_lsm_capable+0x9/0x20
[  304.108979][T23911]  ? security_capable+0x7e/0x2e0
[  304.108992][T23911]  genl_rcv_msg+0x60e/0x790
[  304.109004][T23911]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.109012][T23911]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.109028][T23911]  netlink_rcv_skb+0x208/0x470
[  304.109039][T23911]  ? __lock_acquire+0xab9/0xd20
[  304.109049][T23911]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.109058][T23911]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.109077][T23911]  ? down_read+0x1ad/0x2e0
[  304.109085][T23911]  genl_rcv+0x28/0x40
[  304.109115][T23911]  netlink_unicast+0x82f/0x9e0
[  304.109132][T23911]  ? __pfx_netlink_unicast+0x10/0x10
[  304.109143][T23911]  ? netlink_sendmsg+0x642/0xb30
[  304.109153][T23911]  ? skb_put+0x11b/0x210
[  304.109163][T23911]  netlink_sendmsg+0x805/0xb30
[  304.109180][T23911]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.109193][T23911]  ? aa_sock_msg_perm+0x94/0x160
[  304.109204][T23911]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.109213][T23911]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.109225][T23911]  __sock_sendmsg+0x21c/0x270
[  304.109237][T23911]  ____sys_sendmsg+0x505/0x830
[  304.109248][T23911]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.109260][T23911]  ? import_iovec+0x74/0xa0
[  304.109272][T23911]  ___sys_sendmsg+0x21f/0x2a0
[  304.109281][T23911]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.109305][T23911]  ? __fget_files+0x2a/0x420
[  304.109313][T23911]  ? __fget_files+0x3a0/0x420
[  304.109325][T23911]  __x64_sys_sendmsg+0x19b/0x260
[  304.109334][T23911]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.109347][T23911]  ? rcu_is_watching+0x15/0xb0
[  304.109361][T23911]  ? do_syscall_64+0xbe/0x3b0
[  304.109374][T23911]  do_syscall_64+0xfa/0x3b0
[  304.109384][T23911]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.109394][T23911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.109401][T23911]  ? exc_page_fault+0x9f/0xf0
[  304.109412][T23911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.109420][T23911] RIP: 0033:0x7f493378ebe9
[  304.109428][T23911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.109435][T23911] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.109444][T23911] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  304.109450][T23911] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  304.109455][T23911] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  304.109460][T23911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.109464][T23911] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  304.109478][T23911]  </TASK>
[  304.289790][T23914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6056'.
[  304.299482][T23916] bond1: option mode: unable to set because the bond device has slaves
[  304.304977][T23917] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6056'.
[  304.305701][T23916] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  304.309308][T23914] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6056'.
[  304.375259][T23922] netlink: 'syz.0.6058': attribute type 9 has an invalid length.
[  304.438080][T23929] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  304.683076][T23958] netlink: 'syz.0.6073': attribute type 1 has an invalid length.
[  304.842898][T23974] sctp: [Deprecated]: syz.0.6079 (pid 23974) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.842898][T23974] Use struct sctp_sack_info instead
[  304.889745][T23979] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  304.893772][T23979] CPU: 0 UID: 0 PID: 23979 Comm: syz.1.6080 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  304.893785][T23979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.893790][T23979] Call Trace:
[  304.893794][T23979]  <TASK>
[  304.893798][T23979]  dump_stack_lvl+0x189/0x250
[  304.893818][T23979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.893827][T23979]  ? __pfx__printk+0x10/0x10
[  304.893837][T23979]  ? kernfs_path_from_node+0x2c/0x260
[  304.893849][T23979]  ? kernfs_path_from_node+0x2c/0x260
[  304.893857][T23979]  ? kernfs_path_from_node+0x2c/0x260
[  304.893867][T23979]  ? kernfs_path_from_node+0x22c/0x260
[  304.893875][T23979]  ? kernfs_path_from_node+0x2c/0x260
[  304.893885][T23979]  sysfs_warn_dup+0x8e/0xa0
[  304.893895][T23979]  sysfs_do_create_link_sd+0xc0/0x110
[  304.893905][T23979]  device_add_class_symlinks+0x1cf/0x240
[  304.893916][T23979]  device_add+0x475/0xb50
[  304.893928][T23979]  wiphy_register+0x1ba6/0x28d0
[  304.893947][T23979]  ? __pfx_wiphy_register+0x10/0x10
[  304.893957][T23979]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  304.893969][T23979]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  304.893980][T23979]  ieee80211_register_hw+0x3425/0x4080
[  304.893996][T23979]  ? ieee80211_register_hw+0x1491/0x4080
[  304.894009][T23979]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  304.894020][T23979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.894034][T23979]  ? __hrtimer_setup+0x187/0x210
[  304.894045][T23979]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  304.894058][T23979]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  304.894103][T23979]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  304.894115][T23979]  ? trace_kmalloc+0x1f/0xd0
[  304.894126][T23979]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  304.894137][T23979]  ? kstrndup+0xbf/0x160
[  304.894152][T23979]  hwsim_new_radio_nl+0xea4/0x1b10
[  304.894165][T23979]  ? __pfx___nla_validate_parse+0x10/0x10
[  304.894181][T23979]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.894198][T23979]  ? __nla_parse+0x40/0x60
[  304.894209][T23979]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  304.894223][T23979]  genl_family_rcv_msg_doit+0x215/0x300
[  304.894235][T23979]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  304.894249][T23979]  ? bpf_lsm_capable+0x9/0x20
[  304.894260][T23979]  ? security_capable+0x7e/0x2e0
[  304.894272][T23979]  genl_rcv_msg+0x60e/0x790
[  304.894283][T23979]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.894291][T23979]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.894308][T23979]  netlink_rcv_skb+0x208/0x470
[  304.894318][T23979]  ? __lock_acquire+0xab9/0xd20
[  304.894329][T23979]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.894338][T23979]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.894357][T23979]  ? down_read+0x1ad/0x2e0
[  304.894365][T23979]  genl_rcv+0x28/0x40
[  304.894373][T23979]  netlink_unicast+0x82f/0x9e0
[  304.894386][T23979]  ? __pfx_netlink_unicast+0x10/0x10
[  304.894397][T23979]  ? netlink_sendmsg+0x642/0xb30
[  304.894413][T23979]  ? skb_put+0x11b/0x210
[  304.894423][T23979]  netlink_sendmsg+0x805/0xb30
[  304.894440][T23979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.894453][T23979]  ? aa_sock_msg_perm+0x94/0x160
[  304.894465][T23979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.894474][T23979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.894504][T23979]  __sock_sendmsg+0x21c/0x270
[  304.894516][T23979]  ____sys_sendmsg+0x505/0x830
[  304.894527][T23979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.894540][T23979]  ? import_iovec+0x74/0xa0
[  304.894552][T23979]  ___sys_sendmsg+0x21f/0x2a0
[  304.894562][T23979]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.894586][T23979]  ? __fget_files+0x2a/0x420
[  304.894594][T23979]  ? __fget_files+0x3a0/0x420
[  304.894606][T23979]  __x64_sys_sendmsg+0x19b/0x260
[  304.894615][T23979]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.894628][T23979]  ? rcu_is_watching+0x15/0xb0
[  304.894643][T23979]  ? do_syscall_64+0xbe/0x3b0
[  304.894656][T23979]  do_syscall_64+0xfa/0x3b0
[  304.894666][T23979]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.894676][T23979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.894683][T23979]  ? exc_page_fault+0x9f/0xf0
[  304.894694][T23979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.894701][T23979] RIP: 0033:0x7f493378ebe9
[  304.894709][T23979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.894716][T23979] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.894725][T23979] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  304.894731][T23979] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  304.894735][T23979] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  304.894740][T23979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.894745][T23979] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  304.894758][T23979]  </TASK>
[  305.067708][T23983] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  305.096544][T23989] bond1: option mode: unable to set because the bond device has slaves
[  305.113984][T23989] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  305.122429][T23998] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  305.129034][T23997] netlink: 'syz.0.6087': attribute type 2 has an invalid length.
[  305.131612][T23997] netlink: 'syz.0.6087': attribute type 1 has an invalid length.
[  305.157895][T24000] netlink: 'syz.0.6089': attribute type 21 has an invalid length.
[  305.165453][T24002] netlink: 'syz.0.6089': attribute type 21 has an invalid length.
[  305.219659][T24015] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  305.290989][T24027] bond1: option mode: unable to set because the bond device has slaves
[  305.304965][T24027] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  305.393875][T24041] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  306.183092][T24068] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  306.353775][T24088] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  306.491520][T24107] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  306.496039][T24107] CPU: 1 UID: 0 PID: 24107 Comm: syz.0.6125 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  306.496052][T24107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.496078][T24107] Call Trace:
[  306.496083][T24107]  <TASK>
[  306.496088][T24107]  dump_stack_lvl+0x189/0x250
[  306.496102][T24107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.496110][T24107]  ? __pfx__printk+0x10/0x10
[  306.496120][T24107]  ? kernfs_path_from_node+0x2c/0x260
[  306.496131][T24107]  ? kernfs_path_from_node+0x2c/0x260
[  306.496139][T24107]  ? kernfs_path_from_node+0x2c/0x260
[  306.496149][T24107]  ? kernfs_path_from_node+0x22c/0x260
[  306.496157][T24107]  ? kernfs_path_from_node+0x2c/0x260
[  306.496168][T24107]  sysfs_warn_dup+0x8e/0xa0
[  306.496177][T24107]  sysfs_do_create_link_sd+0xc0/0x110
[  306.496187][T24107]  device_add_class_symlinks+0x1cf/0x240
[  306.496199][T24107]  device_add+0x475/0xb50
[  306.496210][T24107]  wiphy_register+0x1ba6/0x28d0
[  306.496229][T24107]  ? __pfx_wiphy_register+0x10/0x10
[  306.496239][T24107]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  306.496252][T24107]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  306.496263][T24107]  ieee80211_register_hw+0x3425/0x4080
[  306.496278][T24107]  ? ieee80211_register_hw+0x1491/0x4080
[  306.496290][T24107]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  306.496300][T24107]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.496314][T24107]  ? __hrtimer_setup+0x187/0x210
[  306.496325][T24107]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  306.496338][T24107]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  306.496361][T24107]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  306.496370][T24107]  ? trace_kmalloc+0x1f/0xd0
[  306.496380][T24107]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  306.496391][T24107]  ? kstrndup+0xbf/0x160
[  306.496406][T24107]  hwsim_new_radio_nl+0xea4/0x1b10
[  306.496419][T24107]  ? __pfx___nla_validate_parse+0x10/0x10
[  306.496433][T24107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  306.496449][T24107]  ? __nla_parse+0x40/0x60
[  306.496459][T24107]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  306.496472][T24107]  genl_family_rcv_msg_doit+0x215/0x300
[  306.496484][T24107]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  306.496498][T24107]  ? bpf_lsm_capable+0x9/0x20
[  306.496508][T24107]  ? security_capable+0x7e/0x2e0
[  306.496521][T24107]  genl_rcv_msg+0x60e/0x790
[  306.496533][T24107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.496541][T24107]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  306.496558][T24107]  netlink_rcv_skb+0x208/0x470
[  306.496567][T24107]  ? __lock_acquire+0xab9/0xd20
[  306.496579][T24107]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.496590][T24107]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  306.496609][T24107]  ? down_read+0x1ad/0x2e0
[  306.496618][T24107]  genl_rcv+0x28/0x40
[  306.496627][T24107]  netlink_unicast+0x82f/0x9e0
[  306.496641][T24107]  ? __pfx_netlink_unicast+0x10/0x10
[  306.496659][T24107]  ? netlink_sendmsg+0x642/0xb30
[  306.496669][T24107]  ? skb_put+0x11b/0x210
[  306.496679][T24107]  netlink_sendmsg+0x805/0xb30
[  306.496694][T24107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.496707][T24107]  ? aa_sock_msg_perm+0x94/0x160
[  306.496720][T24107]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.496728][T24107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.496740][T24107]  __sock_sendmsg+0x21c/0x270
[  306.496753][T24107]  ____sys_sendmsg+0x505/0x830
[  306.496764][T24107]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.496778][T24107]  ? import_iovec+0x74/0xa0
[  306.496790][T24107]  ___sys_sendmsg+0x21f/0x2a0
[  306.496799][T24107]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.496823][T24107]  ? __fget_files+0x2a/0x420
[  306.496830][T24107]  ? __fget_files+0x3a0/0x420
[  306.496842][T24107]  __x64_sys_sendmsg+0x19b/0x260
[  306.496851][T24107]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.496864][T24107]  ? rcu_is_watching+0x15/0xb0
[  306.496877][T24107]  ? do_syscall_64+0xbe/0x3b0
[  306.496890][T24107]  do_syscall_64+0xfa/0x3b0
[  306.496900][T24107]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.496910][T24107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.496917][T24107]  ? exc_page_fault+0x9f/0xf0
[  306.496928][T24107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.496936][T24107] RIP: 0033:0x7fa69d38ebe9
[  306.496945][T24107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.496952][T24107] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.496962][T24107] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  306.496967][T24107] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  306.496991][T24107] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  306.496997][T24107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.497002][T24107] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  306.497016][T24107]  </TASK>
[  306.712566][T24120] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  306.719550][T24122] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  306.754149][T24123] lo speed is unknown, defaulting to 1000
[  306.757553][T24123] wg1 speed is unknown, defaulting to 1000
[  306.786222][T24126] netlink: 'syz.0.6131': attribute type 1 has an invalid length.
[  306.813854][T24126] 8021q: adding VLAN 0 to HW filter on device bond19
[  306.830353][T24126] bond19: (slave geneve5): making interface the new active one
[  306.834919][T24126] bond19: (slave geneve5): Enslaving as an active interface with an up link
[  306.838830][ T5850] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.846681][ T5850] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.849538][ T5850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.855784][ T5850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.149849][T24142] netlink: 'syz.0.6135': attribute type 35 has an invalid length.
[  307.286778][T24159] netlink: 'syz.0.6138': attribute type 1 has an invalid length.
[  307.358817][T24168] IPVS: Error connecting to the multicast addr
[  307.364184][T24168] netlink: 'syz.2.6141': attribute type 16 has an invalid length.
[  307.369401][T24168] netlink: 'syz.2.6141': attribute type 17 has an invalid length.
[  307.388261][T24173] netlink: 'syz.0.6143': attribute type 3 has an invalid length.
[  307.467096][T24183] IPv6: NLM_F_REPLACE set, but no existing node found!
[  307.471905][T24168] bond0: left promiscuous mode
[  307.487341][ T5833] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  307.490120][ T5833] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  307.492766][ T5833] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  307.495478][ T5833] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  307.499945][ T5833] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  307.502577][ T5833] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  307.505182][ T5833] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  307.508286][ T5833] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  307.542530][T24187] lo speed is unknown, defaulting to 1000
[  307.545145][T24187] wg1 speed is unknown, defaulting to 1000
[  307.639716][T24200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.648198][T24200] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  307.660824][T24200] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  307.685893][T24200] tipc: Resetting bearer <eth:syzkaller0>
[  307.918885][ T5833] bond0 (unregistering): Released all slaves
[  308.088802][T24214] gre0: mtu less than device minimum
[  308.134711][T24217] bond1: option mode: unable to set because the bond device has slaves
[  308.147688][T24217] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  308.242784][T24221] __nla_validate_parse: 27 callbacks suppressed
[  308.242795][T24221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6158'.
[  308.617162][T24249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6167'.
[  308.627425][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6167'.
[  308.662007][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6169'.
[  308.828690][T24259] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6171'.
[  308.868997][T24265] bond1: option mode: unable to set because the bond device has slaves
[  308.880497][T24265] bond1: (slave macvlan15): Enslaving as a backup interface with a down link
[  309.182560][T24282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6178'.
[  309.276757][T24286] bond1: option mode: unable to set because the bond device has slaves
[  309.283445][T24286] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  309.457801][T24298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6184'.
[  309.651267][T24312] bond1: option mode: unable to set because the bond device has slaves
[  309.657935][T24312] bond1: (slave macvlan10): Error -98 calling set_mac_address
[  309.730338][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6192'.
[  309.775470][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'.
[  309.820861][T24336] openvswitch: netlink: Tunnel attr 210 out of range max 16
[  309.823369][T24340] openvswitch: netlink: Tunnel attr 210 out of range max 16
[  309.840773][T24342] bond1: option mode: unable to set because the bond device has slaves
[  309.850298][T24342] bond1: (slave macvlan16): Error -98 calling set_mac_address
[  309.900877][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6202'.
[  310.423416][T24423] validate_nla: 3 callbacks suppressed
[  310.423425][T24423] netlink: 'syz.1.6230': attribute type 12 has an invalid length.
[  310.440777][T24423] netlink: 'syz.1.6230': attribute type 11 has an invalid length.
[  310.441749][T24419] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  310.494553][T24431] netlink: 'syz.0.6232': attribute type 1 has an invalid length.
[  310.539103][T24431] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  310.541465][T24431] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  310.543843][T24431] tipc: Resetting bearer <eth:syzkaller0>
[  310.730988][T24467] netlink: 'syz.1.6241': attribute type 9 has an invalid length.
[  310.736899][T24467] macvlan10: entered promiscuous mode
[  310.739018][T24467] hsr0: entered promiscuous mode
[  310.740900][T24467] macvlan10: entered allmulticast mode
[  310.742667][T24467] hsr0: entered allmulticast mode
[  310.744251][T24467] hsr_slave_0: entered allmulticast mode
[  310.747186][T24467] hsr_slave_1: entered allmulticast mode
[  310.785285][T24470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.812144][T24472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.818952][T24475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.894074][T24484] bond1: option mode: unable to set because the bond device has slaves
[  310.909621][T24484] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  310.958615][T24487] netlink: 'syz.0.6247': attribute type 1 has an invalid length.
[  310.961164][T24487] netlink: 'syz.0.6247': attribute type 1 has an invalid length.
[  311.209816][T24530] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  311.295162][T24544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.283511][T24577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.288552][   T24] lo speed is unknown, defaulting to 1000
[  312.290531][   T24] syz2: Port: 1 Link ACTIVE
[  312.415295][T24596] netlink: 'syz.1.6279': attribute type 10 has an invalid length.
[  312.421743][T24596] netlink: 'syz.1.6279': attribute type 10 has an invalid length.
[  312.425796][ T9481] bond0: (slave dummy0): interface is now down
[  312.426146][T24596] dummy0: entered promiscuous mode
[  312.431722][T24596] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  312.445676][ T9481] bond0: (slave dummy0): interface is now down
[  312.449442][ T9481] bond0: now running without any active interface!
[  313.393232][T24664] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  313.395951][T24664] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  313.399713][T24664] macsec0: left promiscuous mode
[  313.401384][T24664] macsec0: left allmulticast mode
[  313.403673][T24664] veth15: left allmulticast mode
[  313.405380][T24664] geneve1: left promiscuous mode
[  313.407236][T24664] geneve1: left allmulticast mode
[  313.409545][T24664] bond15: left promiscuous mode
[  313.411191][T24664] bond15: left allmulticast mode
[  313.412990][T24664] bond17: left promiscuous mode
[  313.414624][T24664] batadv0: left promiscuous mode
[  313.416282][T24664] batadv0: left allmulticast mode
[  313.418416][T24664] vlan0: left promiscuous mode
[  313.420360][T24664] xfrm2: left promiscuous mode
[  313.421944][T24664] xfrm2: left allmulticast mode
[  313.423626][T24664] bond19: left promiscuous mode
[  313.425196][T24664] bond19: left allmulticast mode
[  313.428362][T24664] bond20: left promiscuous mode
[  313.435041][T24664] hsr0: left allmulticast mode
[  313.436855][T24664] hsr_slave_0: left allmulticast mode
[  313.438720][T24664] hsr_slave_1: left allmulticast mode
[  313.440501][T24664] hsr0: left promiscuous mode
[  313.442171][T24664] macvlan10: left promiscuous mode
[  313.443835][T24664] macvlan10: left allmulticast mode
[  313.446643][   T24] lo speed is unknown, defaulting to 1000
[  313.447263][ T9481] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.448499][   T24] syz2: Port: 1 Link DOWN
[  313.451310][ T9481] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.473147][ T9481] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.476316][ T9481] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  313.487701][T24670] __nla_validate_parse: 27 callbacks suppressed
[  313.487710][T24670] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6305'.
[  313.493694][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6305'.
[  313.554138][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6307'.
[  313.558737][T24676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6307'.
[  313.601142][T24686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.619627][T24686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6310'.
[  313.798569][T24699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6314'.
[  313.880509][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6316'.
[  313.929054][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6317'.
[  313.979422][T24719] netlink: 'syz.2.6322': attribute type 2 has an invalid length.
[  314.026698][T24732] bond1: option mode: unable to set because the bond device has slaves
[  314.035043][T24732] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  314.072914][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'.
[  314.091024][ T5884] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  314.150427][T24747] macsec0: entered promiscuous mode
[  314.152666][T24747] erspan0: entered promiscuous mode
[  314.155443][T24747] macsec0: left promiscuous mode
[  314.157249][T24747] erspan0: left promiscuous mode
[  314.163316][T24747] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  314.166727][T24747] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  314.227209][T24749] netlink: 'syz.1.6330': attribute type 1 has an invalid length.
[  314.241347][T24749] 8021q: adding VLAN 0 to HW filter on device bond21
[  314.254275][T24749] bond21: (slave veth25): Enslaving as an active interface with a down link
[  314.852043][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6331'.
[  314.913092][T24768] bond1: option mode: unable to set because the bond device has slaves
[  314.924236][T24768] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  315.045661][ T5822] Bluetooth: hci2: command 0x0419 tx timeout
[  315.213402][T24799] sctp: [Deprecated]: syz.2.6346 (pid 24799) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.213402][T24799] Use struct sctp_sack_info instead
[  315.557738][T24828] lo speed is unknown, defaulting to 1000
[  315.560456][T24828] wg1 speed is unknown, defaulting to 1000
[  315.709917][T24828] nbd: nbd1 already in use
[  316.074325][T24851] dvmrp8: entered allmulticast mode
[  316.077002][T24850] dvmrp8: left allmulticast mode
[  316.256990][T24857] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  316.261778][T24857] validate_nla: 4 callbacks suppressed
[  316.261787][T24857] netlink: 'syz.0.6366': attribute type 18 has an invalid length.
[  316.266850][T24857] netlink: 'syz.0.6366': attribute type 18 has an invalid length.
[  316.384646][T24871] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  316.390069][T24871] CPU: 1 UID: 0 PID: 24871 Comm: syz.0.6372 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  316.390081][T24871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.390087][T24871] Call Trace:
[  316.390090][T24871]  <TASK>
[  316.390095][T24871]  dump_stack_lvl+0x189/0x250
[  316.390109][T24871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.390118][T24871]  ? __pfx__printk+0x10/0x10
[  316.390128][T24871]  ? kernfs_path_from_node+0x2c/0x260
[  316.390138][T24871]  ? kernfs_path_from_node+0x2c/0x260
[  316.390147][T24871]  ? kernfs_path_from_node+0x2c/0x260
[  316.390156][T24871]  ? kernfs_path_from_node+0x22c/0x260
[  316.390164][T24871]  ? kernfs_path_from_node+0x2c/0x260
[  316.390175][T24871]  sysfs_warn_dup+0x8e/0xa0
[  316.390184][T24871]  sysfs_do_create_link_sd+0xc0/0x110
[  316.390194][T24871]  device_add_class_symlinks+0x1cf/0x240
[  316.390205][T24871]  device_add+0x475/0xb50
[  316.390217][T24871]  wiphy_register+0x1ba6/0x28d0
[  316.390236][T24871]  ? __pfx_wiphy_register+0x10/0x10
[  316.390246][T24871]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  316.390259][T24871]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  316.390269][T24871]  ieee80211_register_hw+0x3425/0x4080
[  316.390286][T24871]  ? ieee80211_register_hw+0x1491/0x4080
[  316.390299][T24871]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  316.390310][T24871]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.390330][T24871]  ? __hrtimer_setup+0x187/0x210
[  316.390341][T24871]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  316.390356][T24871]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  316.390380][T24871]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  316.390390][T24871]  ? trace_kmalloc+0x1f/0xd0
[  316.390401][T24871]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  316.390412][T24871]  ? kstrndup+0xbf/0x160
[  316.390425][T24871]  hwsim_new_radio_nl+0xea4/0x1b10
[  316.390437][T24871]  ? __pfx___nla_validate_parse+0x10/0x10
[  316.390453][T24871]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  316.390469][T24871]  ? __nla_parse+0x40/0x60
[  316.390480][T24871]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  316.390493][T24871]  genl_family_rcv_msg_doit+0x215/0x300
[  316.390505][T24871]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  316.390519][T24871]  ? bpf_lsm_capable+0x9/0x20
[  316.390529][T24871]  ? security_capable+0x7e/0x2e0
[  316.390542][T24871]  genl_rcv_msg+0x60e/0x790
[  316.390553][T24871]  ? __pfx_genl_rcv_msg+0x10/0x10
[  316.390561][T24871]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  316.390578][T24871]  netlink_rcv_skb+0x208/0x470
[  316.390588][T24871]  ? __lock_acquire+0xab9/0xd20
[  316.390599][T24871]  ? __pfx_genl_rcv_msg+0x10/0x10
[  316.390608][T24871]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  316.390626][T24871]  ? down_read+0x1ad/0x2e0
[  316.390635][T24871]  genl_rcv+0x28/0x40
[  316.390642][T24871]  netlink_unicast+0x82f/0x9e0
[  316.390656][T24871]  ? __pfx_netlink_unicast+0x10/0x10
[  316.390667][T24871]  ? netlink_sendmsg+0x642/0xb30
[  316.390677][T24871]  ? skb_put+0x11b/0x210
[  316.390686][T24871]  netlink_sendmsg+0x805/0xb30
[  316.390701][T24871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.390713][T24871]  ? aa_sock_msg_perm+0x94/0x160
[  316.390724][T24871]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  316.390733][T24871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  316.390744][T24871]  __sock_sendmsg+0x21c/0x270
[  316.390756][T24871]  ____sys_sendmsg+0x505/0x830
[  316.390766][T24871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  316.390778][T24871]  ? import_iovec+0x74/0xa0
[  316.390790][T24871]  ___sys_sendmsg+0x21f/0x2a0
[  316.390799][T24871]  ? __pfx____sys_sendmsg+0x10/0x10
[  316.390823][T24871]  ? __fget_files+0x2a/0x420
[  316.390830][T24871]  ? __fget_files+0x3a0/0x420
[  316.390842][T24871]  __x64_sys_sendmsg+0x19b/0x260
[  316.390851][T24871]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  316.390863][T24871]  ? rcu_is_watching+0x15/0xb0
[  316.390877][T24871]  ? do_syscall_64+0xbe/0x3b0
[  316.390890][T24871]  do_syscall_64+0xfa/0x3b0
[  316.390900][T24871]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.390910][T24871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.390918][T24871]  ? exc_page_fault+0x9f/0xf0
[  316.390956][T24871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.390964][T24871] RIP: 0033:0x7fa69d38ebe9
[  316.390972][T24871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.390980][T24871] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.390990][T24871] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  316.390996][T24871] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  316.391002][T24871] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  316.391007][T24871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.391012][T24871] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  316.391025][T24871]  </TASK>
[  316.809765][T24907] netlink: 'syz.2.6383': attribute type 3 has an invalid length.
[  316.903551][T24931] gtp1: entered promiscuous mode
[  316.951762][T24940] bond1: option mode: unable to set because the bond device has slaves
[  316.958214][T24940] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  334.169352][T24950] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  334.183162][T24950] CPU: 1 UID: 0 PID: 24950 Comm: syz.2.6395 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  334.183177][T24950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.183182][T24950] Call Trace:
[  334.183186][T24950]  <TASK>
[  334.183191][T24950]  dump_stack_lvl+0x189/0x250
[  334.183205][T24950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.183213][T24950]  ? __pfx__printk+0x10/0x10
[  334.183224][T24950]  ? kernfs_path_from_node+0x2c/0x260
[  334.183235][T24950]  ? kernfs_path_from_node+0x2c/0x260
[  334.183243][T24950]  ? kernfs_path_from_node+0x2c/0x260
[  334.183253][T24950]  ? kernfs_path_from_node+0x22c/0x260
[  334.183261][T24950]  ? kernfs_path_from_node+0x2c/0x260
[  334.183271][T24950]  sysfs_warn_dup+0x8e/0xa0
[  334.183281][T24950]  sysfs_do_create_link_sd+0xc0/0x110
[  334.183291][T24950]  device_add_class_symlinks+0x1cf/0x240
[  334.183303][T24950]  device_add+0x475/0xb50
[  334.183315][T24950]  wiphy_register+0x1ba6/0x28d0
[  334.183334][T24950]  ? __pfx_wiphy_register+0x10/0x10
[  334.183344][T24950]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  334.183357][T24950]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  334.183368][T24950]  ieee80211_register_hw+0x3425/0x4080
[  334.183384][T24950]  ? ieee80211_register_hw+0x1491/0x4080
[  334.183397][T24950]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  334.183408][T24950]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.183422][T24950]  ? __hrtimer_setup+0x187/0x210
[  334.183434][T24950]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  334.183447][T24950]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  334.183471][T24950]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  334.183480][T24950]  ? trace_kmalloc+0x1f/0xd0
[  334.183491][T24950]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  334.183503][T24950]  ? kstrndup+0xbf/0x160
[  334.183515][T24950]  hwsim_new_radio_nl+0xea4/0x1b10
[  334.183527][T24950]  ? __pfx___nla_validate_parse+0x10/0x10
[  334.183542][T24950]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  334.183558][T24950]  ? __nla_parse+0x40/0x60
[  334.183568][T24950]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  334.183581][T24950]  genl_family_rcv_msg_doit+0x215/0x300
[  334.183593][T24950]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  334.183608][T24950]  ? bpf_lsm_capable+0x9/0x20
[  334.183618][T24950]  ? security_capable+0x7e/0x2e0
[  334.183631][T24950]  genl_rcv_msg+0x60e/0x790
[  334.183642][T24950]  ? __pfx_genl_rcv_msg+0x10/0x10
[  334.183650][T24950]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  334.183666][T24950]  netlink_rcv_skb+0x208/0x470
[  334.183677][T24950]  ? __lock_acquire+0xab9/0xd20
[  334.183716][T24950]  ? __pfx_genl_rcv_msg+0x10/0x10
[  334.183727][T24950]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  334.183746][T24950]  ? down_read+0x1ad/0x2e0
[  334.183755][T24950]  genl_rcv+0x28/0x40
[  334.183763][T24950]  netlink_unicast+0x82f/0x9e0
[  334.183794][T24950]  ? __pfx_netlink_unicast+0x10/0x10
[  334.183807][T24950]  ? netlink_sendmsg+0x642/0xb30
[  334.183817][T24950]  ? skb_put+0x11b/0x210
[  334.183826][T24950]  netlink_sendmsg+0x805/0xb30
[  334.183842][T24950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.183854][T24950]  ? aa_sock_msg_perm+0x94/0x160
[  334.183865][T24950]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  334.183874][T24950]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.183885][T24950]  __sock_sendmsg+0x21c/0x270
[  334.183897][T24950]  ____sys_sendmsg+0x505/0x830
[  334.183908][T24950]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.183922][T24950]  ? import_iovec+0x74/0xa0
[  334.183934][T24950]  ___sys_sendmsg+0x21f/0x2a0
[  334.183943][T24950]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.183968][T24950]  ? __fget_files+0x2a/0x420
[  334.183975][T24950]  ? __fget_files+0x3a0/0x420
[  334.183987][T24950]  __x64_sys_sendmsg+0x19b/0x260
[  334.183996][T24950]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.184009][T24950]  ? rcu_is_watching+0x15/0xb0
[  334.184023][T24950]  ? do_syscall_64+0xbe/0x3b0
[  334.184035][T24950]  do_syscall_64+0xfa/0x3b0
[  334.184045][T24950]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.184055][T24950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.184063][T24950]  ? exc_page_fault+0x9f/0xf0
[  334.184079][T24950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.184086][T24950] RIP: 0033:0x7f090758ebe9
[  334.184095][T24950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.184103][T24950] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.184113][T24950] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  334.184119][T24950] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  334.184125][T24950] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  334.184130][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.184134][T24950] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  334.184149][T24950]  </TASK>
[  334.316127][T24954] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  334.352279][T24957] lo speed is unknown, defaulting to 1000
[  334.354811][T24957] wg1 speed is unknown, defaulting to 1000
[  334.559481][T24972] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  334.584773][T24974] bond1: option mode: unable to set because the bond device has slaves
[  334.594083][T24976] __nla_validate_parse: 17 callbacks suppressed
[  334.594092][T24976] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6402'.
[  334.599963][T24976] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6402'.
[  334.613926][T24974] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  334.804723][T24995] siw: device registration error -23
[  334.811770][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6407'.
[  334.907608][T25007] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6414'.
[  334.937891][T25009] veth23: entered allmulticast mode
[  334.948451][T25011] lo speed is unknown, defaulting to 1000
[  334.951215][T25011] wg1 speed is unknown, defaulting to 1000
[  335.020307][T25017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6417'.
[  335.325401][T25040] bond1: option mode: unable to set because the bond device has slaves
[  335.339128][T25040] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  335.342561][T25040] bond1: (slave macvlan11): Enslaving as a backup interface with a down link
[  335.465387][T25053] delete_channel: no stack
[  335.528625][T25064] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6434'.
[  335.698272][T25070] sctp: [Deprecated]: syz.1.6437 (pid 25070) Use of int in maxseg socket option.
[  335.698272][T25070] Use struct sctp_assoc_value instead
[  335.731269][T25071] delete_channel: no stack
[  335.757152][T25074] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  335.785449][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'.
[  335.857154][T25080] netlink: 'syz.1.6442': attribute type 4 has an invalid length.
[  335.956982][T25091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6445'.
[  335.992693][T25093] bond1: option mode: unable to set because the bond device has slaves
[  336.000633][T25093] bond1: (slave macvlan12): Error -98 calling set_mac_address
[  336.488186][T25154] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6463'.
[  336.514283][T25158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6464'.
[  336.657430][T25179] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  336.661407][T25179] CPU: 1 UID: 0 PID: 25179 Comm: syz.0.6470 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  336.661419][T25179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.661424][T25179] Call Trace:
[  336.661428][T25179]  <TASK>
[  336.661432][T25179]  dump_stack_lvl+0x189/0x250
[  336.661445][T25179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.661454][T25179]  ? __pfx__printk+0x10/0x10
[  336.661464][T25179]  ? kernfs_path_from_node+0x2c/0x260
[  336.661476][T25179]  ? kernfs_path_from_node+0x2c/0x260
[  336.661484][T25179]  ? kernfs_path_from_node+0x2c/0x260
[  336.661494][T25179]  ? kernfs_path_from_node+0x22c/0x260
[  336.661502][T25179]  ? kernfs_path_from_node+0x2c/0x260
[  336.661512][T25179]  sysfs_warn_dup+0x8e/0xa0
[  336.661521][T25179]  sysfs_do_create_link_sd+0xc0/0x110
[  336.661531][T25179]  device_add_class_symlinks+0x1cf/0x240
[  336.661543][T25179]  device_add+0x475/0xb50
[  336.661554][T25179]  wiphy_register+0x1ba6/0x28d0
[  336.661574][T25179]  ? __pfx_wiphy_register+0x10/0x10
[  336.661584][T25179]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  336.661596][T25179]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  336.661607][T25179]  ieee80211_register_hw+0x3425/0x4080
[  336.661623][T25179]  ? ieee80211_register_hw+0x1491/0x4080
[  336.661635][T25179]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  336.661667][T25179]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  336.661684][T25179]  ? __hrtimer_setup+0x187/0x210
[  336.661696][T25179]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  336.661711][T25179]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  336.661735][T25179]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  336.661745][T25179]  ? trace_kmalloc+0x1f/0xd0
[  336.661754][T25179]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  336.661765][T25179]  ? kstrndup+0xbf/0x160
[  336.661777][T25179]  hwsim_new_radio_nl+0xea4/0x1b10
[  336.661789][T25179]  ? __pfx___nla_validate_parse+0x10/0x10
[  336.661805][T25179]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  336.661821][T25179]  ? __nla_parse+0x40/0x60
[  336.661831][T25179]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  336.661844][T25179]  genl_family_rcv_msg_doit+0x215/0x300
[  336.661855][T25179]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  336.661870][T25179]  ? bpf_lsm_capable+0x9/0x20
[  336.661880][T25179]  ? security_capable+0x7e/0x2e0
[  336.661892][T25179]  genl_rcv_msg+0x60e/0x790
[  336.661904][T25179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.661912][T25179]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  336.661928][T25179]  netlink_rcv_skb+0x208/0x470
[  336.661938][T25179]  ? __lock_acquire+0xab9/0xd20
[  336.661949][T25179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.661958][T25179]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  336.661977][T25179]  ? down_read+0x1ad/0x2e0
[  336.661985][T25179]  genl_rcv+0x28/0x40
[  336.661992][T25179]  netlink_unicast+0x82f/0x9e0
[  336.662006][T25179]  ? __pfx_netlink_unicast+0x10/0x10
[  336.662017][T25179]  ? netlink_sendmsg+0x642/0xb30
[  336.662027][T25179]  ? skb_put+0x11b/0x210
[  336.662037][T25179]  netlink_sendmsg+0x805/0xb30
[  336.662057][T25179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.662069][T25179]  ? aa_sock_msg_perm+0x94/0x160
[  336.662080][T25179]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.662089][T25179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.662100][T25179]  __sock_sendmsg+0x21c/0x270
[  336.662113][T25179]  ____sys_sendmsg+0x505/0x830
[  336.662123][T25179]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.662135][T25179]  ? import_iovec+0x74/0xa0
[  336.662149][T25179]  ___sys_sendmsg+0x21f/0x2a0
[  336.662158][T25179]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.662183][T25179]  ? __fget_files+0x2a/0x420
[  336.662190][T25179]  ? __fget_files+0x3a0/0x420
[  336.662202][T25179]  __x64_sys_sendmsg+0x19b/0x260
[  336.662211][T25179]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.662223][T25179]  ? rcu_is_watching+0x15/0xb0
[  336.662237][T25179]  ? do_syscall_64+0xbe/0x3b0
[  336.662250][T25179]  do_syscall_64+0xfa/0x3b0
[  336.662260][T25179]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.662270][T25179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.662278][T25179]  ? exc_page_fault+0x9f/0xf0
[  336.662289][T25179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.662296][T25179] RIP: 0033:0x7fa69d38ebe9
[  336.662304][T25179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.662311][T25179] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.662320][T25179] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  336.662326][T25179] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  336.662331][T25179] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  336.662335][T25179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.662340][T25179] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  336.662353][T25179]  </TASK>
[  336.849561][T25184] netlink: 'syz.0.6472': attribute type 8 has an invalid length.
[  336.958481][T25194] lo speed is unknown, defaulting to 1000
[  336.961094][T25194] wg1 speed is unknown, defaulting to 1000
[  337.002193][T25197] netlink: 'syz.2.6477': attribute type 13 has an invalid length.
[  337.004861][T25197] netlink: 'syz.2.6477': attribute type 17 has an invalid length.
[  337.017170][T25197] erspan0: entered promiscuous mode
[  337.039548][T25197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.099981][T25200] bond1: option mode: unable to set because the bond device has slaves
[  337.106558][T25200] bond1: (slave macvlan0): Error -98 calling set_mac_address
[  337.213093][T25204] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  337.218424][T25204] CPU: 0 UID: 0 PID: 25204 Comm: syz.2.6480 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  337.218437][T25204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.218443][T25204] Call Trace:
[  337.218448][T25204]  <TASK>
[  337.218452][T25204]  dump_stack_lvl+0x189/0x250
[  337.218466][T25204]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.218475][T25204]  ? __pfx__printk+0x10/0x10
[  337.218486][T25204]  ? kernfs_path_from_node+0x2c/0x260
[  337.218496][T25204]  ? kernfs_path_from_node+0x2c/0x260
[  337.218504][T25204]  ? kernfs_path_from_node+0x2c/0x260
[  337.218513][T25204]  ? kernfs_path_from_node+0x22c/0x260
[  337.218523][T25204]  ? kernfs_path_from_node+0x2c/0x260
[  337.218533][T25204]  sysfs_warn_dup+0x8e/0xa0
[  337.218542][T25204]  sysfs_do_create_link_sd+0xc0/0x110
[  337.218553][T25204]  device_add_class_symlinks+0x1cf/0x240
[  337.218564][T25204]  device_add+0x475/0xb50
[  337.218575][T25204]  wiphy_register+0x1ba6/0x28d0
[  337.218594][T25204]  ? __pfx_wiphy_register+0x10/0x10
[  337.218605][T25204]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  337.218617][T25204]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  337.218628][T25204]  ieee80211_register_hw+0x3425/0x4080
[  337.218663][T25204]  ? ieee80211_register_hw+0x1491/0x4080
[  337.218678][T25204]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  337.218688][T25204]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.218702][T25204]  ? __hrtimer_setup+0x187/0x210
[  337.218715][T25204]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  337.218730][T25204]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  337.218753][T25204]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  337.218763][T25204]  ? trace_kmalloc+0x1f/0xd0
[  337.218773][T25204]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  337.218784][T25204]  ? kstrndup+0xbf/0x160
[  337.218797][T25204]  hwsim_new_radio_nl+0xea4/0x1b10
[  337.218809][T25204]  ? __pfx___nla_validate_parse+0x10/0x10
[  337.218824][T25204]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.218839][T25204]  ? __nla_parse+0x40/0x60
[  337.218849][T25204]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  337.218862][T25204]  genl_family_rcv_msg_doit+0x215/0x300
[  337.218874][T25204]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  337.218888][T25204]  ? bpf_lsm_capable+0x9/0x20
[  337.218897][T25204]  ? security_capable+0x7e/0x2e0
[  337.218911][T25204]  genl_rcv_msg+0x60e/0x790
[  337.218923][T25204]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.218931][T25204]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.218947][T25204]  netlink_rcv_skb+0x208/0x470
[  337.218957][T25204]  ? __lock_acquire+0xab9/0xd20
[  337.218968][T25204]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.218977][T25204]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.219002][T25204]  ? down_read+0x1ad/0x2e0
[  337.219010][T25204]  genl_rcv+0x28/0x40
[  337.219018][T25204]  netlink_unicast+0x82f/0x9e0
[  337.219032][T25204]  ? __pfx_netlink_unicast+0x10/0x10
[  337.219043][T25204]  ? netlink_sendmsg+0x642/0xb30
[  337.219053][T25204]  ? skb_put+0x11b/0x210
[  337.219064][T25204]  netlink_sendmsg+0x805/0xb30
[  337.219079][T25204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.219093][T25204]  ? aa_sock_msg_perm+0x94/0x160
[  337.219105][T25204]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.219113][T25204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.219124][T25204]  __sock_sendmsg+0x21c/0x270
[  337.219136][T25204]  ____sys_sendmsg+0x505/0x830
[  337.219146][T25204]  ? __pfx_____sys_sendmsg+0x10/0x10
[  337.219158][T25204]  ? import_iovec+0x74/0xa0
[  337.219170][T25204]  ___sys_sendmsg+0x21f/0x2a0
[  337.219179][T25204]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.219203][T25204]  ? __fget_files+0x2a/0x420
[  337.219210][T25204]  ? __fget_files+0x3a0/0x420
[  337.219221][T25204]  __x64_sys_sendmsg+0x19b/0x260
[  337.219231][T25204]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  337.219243][T25204]  ? rcu_is_watching+0x15/0xb0
[  337.219257][T25204]  ? do_syscall_64+0xbe/0x3b0
[  337.219269][T25204]  do_syscall_64+0xfa/0x3b0
[  337.219279][T25204]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.219289][T25204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.219297][T25204]  ? exc_page_fault+0x9f/0xf0
[  337.219308][T25204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.219315][T25204] RIP: 0033:0x7f090758ebe9
[  337.219323][T25204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.219330][T25204] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.219339][T25204] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  337.219345][T25204] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  337.219350][T25204] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  337.219354][T25204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.219359][T25204] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  337.219372][T25204]  </TASK>
[  337.423564][T25208] netlink: 'syz.2.6482': attribute type 10 has an invalid length.
[  337.429539][T25208] netlink: 'syz.2.6482': attribute type 10 has an invalid length.
[  337.433709][T25208] dummy0: entered promiscuous mode
[  337.439099][T25208] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  337.450230][   T12] bond0: (slave dummy0): interface is now down
[  337.461757][   T12] bond0: now running without any active interface!
[  337.505277][T25221] bond1: option mode: unable to set because the bond device has slaves
[  337.513985][T25221] bond1: (slave macvlan12): Error -98 calling set_mac_address
[  337.531438][T25223] netlink: 'syz.2.6486': attribute type 1 has an invalid length.
[  337.721571][T25250] bond1: option mode: unable to set because the bond device has slaves
[  337.728387][T25250] bond1: (slave macvlan12): Error -98 calling set_mac_address
[  337.733731][T25249] openvswitch: netlink: Message has 4 unknown bytes.
[  337.737438][T25249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.954938][T25269] netlink: 'syz.2.6504': attribute type 1 has an invalid length.
[  337.972868][T25269] 8021q: adding VLAN 0 to HW filter on device bond16
[  337.976940][T25263] lo speed is unknown, defaulting to 1000
[  337.986297][T25263] wg1 speed is unknown, defaulting to 1000
[  338.035178][T25273] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  338.040255][T25273] CPU: 1 UID: 0 PID: 25273 Comm: syz.2.6505 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  338.040268][T25273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  338.040273][T25273] Call Trace:
[  338.040276][T25273]  <TASK>
[  338.040281][T25273]  dump_stack_lvl+0x189/0x250
[  338.040295][T25273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.040304][T25273]  ? __pfx__printk+0x10/0x10
[  338.040315][T25273]  ? kernfs_path_from_node+0x2c/0x260
[  338.040326][T25273]  ? kernfs_path_from_node+0x2c/0x260
[  338.040334][T25273]  ? kernfs_path_from_node+0x2c/0x260
[  338.040343][T25273]  ? kernfs_path_from_node+0x22c/0x260
[  338.040352][T25273]  ? kernfs_path_from_node+0x2c/0x260
[  338.040363][T25273]  sysfs_warn_dup+0x8e/0xa0
[  338.040373][T25273]  sysfs_do_create_link_sd+0xc0/0x110
[  338.040384][T25273]  device_add_class_symlinks+0x1cf/0x240
[  338.040396][T25273]  device_add+0x475/0xb50
[  338.040407][T25273]  wiphy_register+0x1ba6/0x28d0
[  338.040427][T25273]  ? __pfx_wiphy_register+0x10/0x10
[  338.040438][T25273]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  338.040450][T25273]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  338.040461][T25273]  ieee80211_register_hw+0x3425/0x4080
[  338.040477][T25273]  ? ieee80211_register_hw+0x1491/0x4080
[  338.040490][T25273]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  338.040501][T25273]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  338.040515][T25273]  ? __hrtimer_setup+0x187/0x210
[  338.040526][T25273]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  338.040539][T25273]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  338.040562][T25273]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  338.040572][T25273]  ? trace_kmalloc+0x1f/0xd0
[  338.040581][T25273]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  338.040592][T25273]  ? kstrndup+0xbf/0x160
[  338.040604][T25273]  hwsim_new_radio_nl+0xea4/0x1b10
[  338.040616][T25273]  ? __pfx___nla_validate_parse+0x10/0x10
[  338.040653][T25273]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  338.040672][T25273]  ? __nla_parse+0x40/0x60
[  338.040683][T25273]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  338.040697][T25273]  genl_family_rcv_msg_doit+0x215/0x300
[  338.040709][T25273]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  338.040725][T25273]  ? bpf_lsm_capable+0x9/0x20
[  338.040736][T25273]  ? security_capable+0x7e/0x2e0
[  338.040750][T25273]  genl_rcv_msg+0x60e/0x790
[  338.040762][T25273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.040769][T25273]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  338.040786][T25273]  netlink_rcv_skb+0x208/0x470
[  338.040796][T25273]  ? __lock_acquire+0xab9/0xd20
[  338.040806][T25273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.040815][T25273]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  338.040834][T25273]  ? down_read+0x1ad/0x2e0
[  338.040842][T25273]  genl_rcv+0x28/0x40
[  338.040849][T25273]  netlink_unicast+0x82f/0x9e0
[  338.040863][T25273]  ? __pfx_netlink_unicast+0x10/0x10
[  338.040874][T25273]  ? netlink_sendmsg+0x642/0xb30
[  338.040884][T25273]  ? skb_put+0x11b/0x210
[  338.040893][T25273]  netlink_sendmsg+0x805/0xb30
[  338.040908][T25273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.040920][T25273]  ? aa_sock_msg_perm+0x94/0x160
[  338.040930][T25273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.040939][T25273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.040950][T25273]  __sock_sendmsg+0x21c/0x270
[  338.040968][T25273]  ____sys_sendmsg+0x505/0x830
[  338.040978][T25273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  338.040991][T25273]  ? import_iovec+0x74/0xa0
[  338.041005][T25273]  ___sys_sendmsg+0x21f/0x2a0
[  338.041014][T25273]  ? __pfx____sys_sendmsg+0x10/0x10
[  338.041038][T25273]  ? __fget_files+0x2a/0x420
[  338.041046][T25273]  ? __fget_files+0x3a0/0x420
[  338.041058][T25273]  __x64_sys_sendmsg+0x19b/0x260
[  338.041067][T25273]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  338.041080][T25273]  ? rcu_is_watching+0x15/0xb0
[  338.041096][T25273]  ? do_syscall_64+0xbe/0x3b0
[  338.041109][T25273]  do_syscall_64+0xfa/0x3b0
[  338.041119][T25273]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.041129][T25273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.041137][T25273]  ? exc_page_fault+0x9f/0xf0
[  338.041148][T25273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.041155][T25273] RIP: 0033:0x7f090758ebe9
[  338.041163][T25273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.041170][T25273] RSP: 002b:00007f0908385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.041179][T25273] RAX: ffffffffffffffda RBX: 00007f09077b5fa0 RCX: 00007f090758ebe9
[  338.041185][T25273] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  338.041190][T25273] RBP: 00007f0907611e19 R08: 0000000000000000 R09: 0000000000000000
[  338.041195][T25273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.041199][T25273] R13: 00007f09077b6038 R14: 00007f09077b5fa0 R15: 00007fff3ca5a8b8
[  338.041212][T25273]  </TASK>
[  338.243159][T25283] netlink: 'syz.1.6508': attribute type 33 has an invalid length.
[  338.459139][T25313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  338.534070][T25328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.584711][T25339] netlink: 'syz.0.6522': attribute type 6 has an invalid length.
[  338.653906][T25347] tipc: Resetting bearer <eth:syzkaller0>
[  338.712465][T25353] delete_channel: no stack
[  338.878194][T25373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.892277][T25373] tipc: Resetting bearer <eth:syzkaller0>
[  338.950962][T25379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.953598][T25379] IPv6: NLM_F_CREATE should be set when creating new route
[  338.955992][T25379] IPv6: NLM_F_CREATE should be set when creating new route
[  338.958255][T25379] IPv6: NLM_F_CREATE should be set when creating new route
[  338.962091][T25379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.453308][T25422] bond1: option mode: unable to set because the bond device has slaves
[  340.038877][T25448] __nla_validate_parse: 25 callbacks suppressed
[  340.038887][T25448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6557'.
[  340.078826][T25450] dvmrp1: entered allmulticast mode
[  340.081725][T25450] dvmrp1: left allmulticast mode
[  340.460019][T25488] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6571'.
[  340.530480][T25491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6572'.
[  340.547181][T25497] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  340.552478][T25497] CPU: 0 UID: 0 PID: 25497 Comm: syz.1.6573 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  340.552491][T25497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.552496][T25497] Call Trace:
[  340.552500][T25497]  <TASK>
[  340.552504][T25497]  dump_stack_lvl+0x189/0x250
[  340.552521][T25497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.552533][T25497]  ? __pfx__printk+0x10/0x10
[  340.552549][T25497]  ? kernfs_path_from_node+0x2c/0x260
[  340.552563][T25497]  ? kernfs_path_from_node+0x2c/0x260
[  340.552574][T25497]  ? kernfs_path_from_node+0x2c/0x260
[  340.552589][T25497]  ? kernfs_path_from_node+0x22c/0x260
[  340.552622][T25497]  ? kernfs_path_from_node+0x2c/0x260
[  340.552632][T25497]  sysfs_warn_dup+0x8e/0xa0
[  340.552641][T25497]  sysfs_do_create_link_sd+0xc0/0x110
[  340.552651][T25497]  device_add_class_symlinks+0x1cf/0x240
[  340.552664][T25497]  device_add+0x475/0xb50
[  340.552675][T25497]  wiphy_register+0x1ba6/0x28d0
[  340.552694][T25497]  ? __pfx_wiphy_register+0x10/0x10
[  340.552704][T25497]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  340.552716][T25497]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  340.552727][T25497]  ieee80211_register_hw+0x3425/0x4080
[  340.552743][T25497]  ? ieee80211_register_hw+0x1491/0x4080
[  340.552755][T25497]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  340.552766][T25497]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.552780][T25497]  ? __hrtimer_setup+0x187/0x210
[  340.552791][T25497]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  340.552805][T25497]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  340.552827][T25497]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  340.552837][T25497]  ? trace_kmalloc+0x1f/0xd0
[  340.552846][T25497]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  340.552857][T25497]  ? kstrndup+0xbf/0x160
[  340.552870][T25497]  hwsim_new_radio_nl+0xea4/0x1b10
[  340.552882][T25497]  ? __pfx___nla_validate_parse+0x10/0x10
[  340.552897][T25497]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  340.552912][T25497]  ? __nla_parse+0x40/0x60
[  340.552923][T25497]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  340.552935][T25497]  genl_family_rcv_msg_doit+0x215/0x300
[  340.552952][T25497]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  340.552966][T25497]  ? bpf_lsm_capable+0x9/0x20
[  340.552977][T25497]  ? security_capable+0x7e/0x2e0
[  340.552989][T25497]  genl_rcv_msg+0x60e/0x790
[  340.553001][T25497]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.553009][T25497]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  340.553026][T25497]  netlink_rcv_skb+0x208/0x470
[  340.553036][T25497]  ? __lock_acquire+0xab9/0xd20
[  340.553048][T25497]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.553057][T25497]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  340.553077][T25497]  ? down_read+0x1ad/0x2e0
[  340.553085][T25497]  genl_rcv+0x28/0x40
[  340.553093][T25497]  netlink_unicast+0x82f/0x9e0
[  340.553107][T25497]  ? __pfx_netlink_unicast+0x10/0x10
[  340.553118][T25497]  ? netlink_sendmsg+0x642/0xb30
[  340.553127][T25497]  ? skb_put+0x11b/0x210
[  340.553136][T25497]  netlink_sendmsg+0x805/0xb30
[  340.553151][T25497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.553163][T25497]  ? aa_sock_msg_perm+0x94/0x160
[  340.553174][T25497]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  340.553183][T25497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.553194][T25497]  __sock_sendmsg+0x21c/0x270
[  340.553205][T25497]  ____sys_sendmsg+0x505/0x830
[  340.553215][T25497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  340.553227][T25497]  ? import_iovec+0x74/0xa0
[  340.553240][T25497]  ___sys_sendmsg+0x21f/0x2a0
[  340.553249][T25497]  ? __pfx____sys_sendmsg+0x10/0x10
[  340.553272][T25497]  ? __fget_files+0x2a/0x420
[  340.553279][T25497]  ? __fget_files+0x3a0/0x420
[  340.553291][T25497]  __x64_sys_sendmsg+0x19b/0x260
[  340.553300][T25497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  340.553312][T25497]  ? rcu_is_watching+0x15/0xb0
[  340.553326][T25497]  ? do_syscall_64+0xbe/0x3b0
[  340.553339][T25497]  do_syscall_64+0xfa/0x3b0
[  340.553349][T25497]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.553359][T25497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.553367][T25497]  ? exc_page_fault+0x9f/0xf0
[  340.553378][T25497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.553385][T25497] RIP: 0033:0x7f493378ebe9
[  340.553394][T25497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.553401][T25497] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.553410][T25497] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  340.553416][T25497] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  340.553421][T25497] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  340.553425][T25497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.553430][T25497] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  340.553442][T25497]  </TASK>
[  340.707579][T25500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.726209][T25502] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  340.756057][T25507] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6575'.
[  340.783780][ T5829] Bluetooth: hci2: link tx timeout
[  340.785441][ T5829] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  340.789368][T25512] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  340.898099][T25529] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  340.901910][T25529] CPU: 1 UID: 0 PID: 25529 Comm: syz.0.6582 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  340.901922][T25529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.901928][T25529] Call Trace:
[  340.901932][T25529]  <TASK>
[  340.901937][T25529]  dump_stack_lvl+0x189/0x250
[  340.901951][T25529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.901960][T25529]  ? __pfx__printk+0x10/0x10
[  340.901970][T25529]  ? kernfs_path_from_node+0x2c/0x260
[  340.901981][T25529]  ? kernfs_path_from_node+0x2c/0x260
[  340.901990][T25529]  ? kernfs_path_from_node+0x2c/0x260
[  340.902000][T25529]  ? kernfs_path_from_node+0x22c/0x260
[  340.902008][T25529]  ? kernfs_path_from_node+0x2c/0x260
[  340.902018][T25529]  sysfs_warn_dup+0x8e/0xa0
[  340.902027][T25529]  sysfs_do_create_link_sd+0xc0/0x110
[  340.902037][T25529]  device_add_class_symlinks+0x1cf/0x240
[  340.902049][T25529]  device_add+0x475/0xb50
[  340.902059][T25529]  wiphy_register+0x1ba6/0x28d0
[  340.902079][T25529]  ? __pfx_wiphy_register+0x10/0x10
[  340.902088][T25529]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  340.902100][T25529]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  340.902111][T25529]  ieee80211_register_hw+0x3425/0x4080
[  340.902128][T25529]  ? ieee80211_register_hw+0x1491/0x4080
[  340.902140][T25529]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  340.902151][T25529]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.902165][T25529]  ? __hrtimer_setup+0x187/0x210
[  340.902176][T25529]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  340.902190][T25529]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  340.902212][T25529]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  340.902222][T25529]  ? trace_kmalloc+0x1f/0xd0
[  340.902238][T25529]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  340.902249][T25529]  ? kstrndup+0xbf/0x160
[  340.902263][T25529]  hwsim_new_radio_nl+0xea4/0x1b10
[  340.902275][T25529]  ? __pfx___nla_validate_parse+0x10/0x10
[  340.902290][T25529]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  340.902306][T25529]  ? __nla_parse+0x40/0x60
[  340.902316][T25529]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  340.902330][T25529]  genl_family_rcv_msg_doit+0x215/0x300
[  340.902342][T25529]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  340.902356][T25529]  ? bpf_lsm_capable+0x9/0x20
[  340.902367][T25529]  ? security_capable+0x7e/0x2e0
[  340.902379][T25529]  genl_rcv_msg+0x60e/0x790
[  340.902391][T25529]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.902399][T25529]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  340.902415][T25529]  netlink_rcv_skb+0x208/0x470
[  340.902425][T25529]  ? __lock_acquire+0xab9/0xd20
[  340.902436][T25529]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.902445][T25529]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  340.902464][T25529]  ? down_read+0x1ad/0x2e0
[  340.902472][T25529]  genl_rcv+0x28/0x40
[  340.902479][T25529]  netlink_unicast+0x82f/0x9e0
[  340.902493][T25529]  ? __pfx_netlink_unicast+0x10/0x10
[  340.902504][T25529]  ? netlink_sendmsg+0x642/0xb30
[  340.902513][T25529]  ? skb_put+0x11b/0x210
[  340.902523][T25529]  netlink_sendmsg+0x805/0xb30
[  340.902537][T25529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.902550][T25529]  ? aa_sock_msg_perm+0x94/0x160
[  340.902560][T25529]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  340.902569][T25529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.902580][T25529]  __sock_sendmsg+0x21c/0x270
[  340.902615][T25529]  ____sys_sendmsg+0x505/0x830
[  340.902627][T25529]  ? __pfx_____sys_sendmsg+0x10/0x10
[  340.902639][T25529]  ? import_iovec+0x74/0xa0
[  340.902652][T25529]  ___sys_sendmsg+0x21f/0x2a0
[  340.902662][T25529]  ? __pfx____sys_sendmsg+0x10/0x10
[  340.902686][T25529]  ? __fget_files+0x2a/0x420
[  340.902693][T25529]  ? __fget_files+0x3a0/0x420
[  340.902706][T25529]  __x64_sys_sendmsg+0x19b/0x260
[  340.902715][T25529]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  340.902728][T25529]  ? rcu_is_watching+0x15/0xb0
[  340.902742][T25529]  ? do_syscall_64+0xbe/0x3b0
[  340.902755][T25529]  do_syscall_64+0xfa/0x3b0
[  340.902765][T25529]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.902775][T25529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.902783][T25529]  ? exc_page_fault+0x9f/0xf0
[  340.902793][T25529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.902801][T25529] RIP: 0033:0x7fa69d38ebe9
[  340.902808][T25529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.902815][T25529] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.902824][T25529] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  340.902830][T25529] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  340.902835][T25529] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  340.902839][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.902844][T25529] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  340.902856][T25529]  </TASK>
[  341.118815][T25535] dvmrp0: entered allmulticast mode
[  341.162111][T25541] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6588'.
[  341.177993][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6586'.
[  341.191326][T25537] pim6reg: entered allmulticast mode
[  341.194372][T25547] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  341.198432][T25547] CPU: 1 UID: 0 PID: 25547 Comm: syz.0.6589 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  341.198444][T25547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  341.198449][T25547] Call Trace:
[  341.198454][T25547]  <TASK>
[  341.198457][T25547]  dump_stack_lvl+0x189/0x250
[  341.198472][T25547]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.198482][T25547]  ? __pfx__printk+0x10/0x10
[  341.198492][T25547]  ? kernfs_path_from_node+0x2c/0x260
[  341.198502][T25547]  ? kernfs_path_from_node+0x2c/0x260
[  341.198509][T25547]  ? kernfs_path_from_node+0x2c/0x260
[  341.198519][T25547]  ? kernfs_path_from_node+0x22c/0x260
[  341.198528][T25547]  ? kernfs_path_from_node+0x2c/0x260
[  341.198538][T25547]  sysfs_warn_dup+0x8e/0xa0
[  341.198548][T25547]  sysfs_do_create_link_sd+0xc0/0x110
[  341.198558][T25547]  device_add_class_symlinks+0x1cf/0x240
[  341.198569][T25547]  device_add+0x475/0xb50
[  341.198580][T25547]  wiphy_register+0x1ba6/0x28d0
[  341.198623][T25547]  ? __pfx_wiphy_register+0x10/0x10
[  341.198633][T25547]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  341.198646][T25547]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  341.198656][T25547]  ieee80211_register_hw+0x3425/0x4080
[  341.198673][T25547]  ? ieee80211_register_hw+0x1491/0x4080
[  341.198685][T25547]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  341.198696][T25547]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  341.198710][T25547]  ? __hrtimer_setup+0x187/0x210
[  341.198721][T25547]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  341.198734][T25547]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  341.198757][T25547]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  341.198781][T25547]  ? trace_kmalloc+0x1f/0xd0
[  341.198793][T25547]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  341.198804][T25547]  ? kstrndup+0xbf/0x160
[  341.198817][T25547]  hwsim_new_radio_nl+0xea4/0x1b10
[  341.198829][T25547]  ? __pfx___nla_validate_parse+0x10/0x10
[  341.198844][T25547]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  341.198857][T25547]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  341.198871][T25547]  ? __nla_parse+0x40/0x60
[  341.198881][T25547]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  341.198893][T25547]  genl_family_rcv_msg_doit+0x215/0x300
[  341.198907][T25547]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  341.198921][T25547]  ? bpf_lsm_capable+0x9/0x20
[  341.198931][T25547]  ? security_capable+0x7e/0x2e0
[  341.198944][T25547]  genl_rcv_msg+0x60e/0x790
[  341.198956][T25547]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.198964][T25547]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  341.198981][T25547]  netlink_rcv_skb+0x208/0x470
[  341.198991][T25547]  ? __lock_acquire+0xab9/0xd20
[  341.199002][T25547]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.199012][T25547]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  341.199031][T25547]  ? down_read+0x1ad/0x2e0
[  341.199039][T25547]  genl_rcv+0x28/0x40
[  341.199047][T25547]  netlink_unicast+0x82f/0x9e0
[  341.199061][T25547]  ? __pfx_netlink_unicast+0x10/0x10
[  341.199071][T25547]  ? netlink_sendmsg+0x642/0xb30
[  341.199081][T25547]  ? skb_put+0x11b/0x210
[  341.199090][T25547]  netlink_sendmsg+0x805/0xb30
[  341.199105][T25547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.199118][T25547]  ? aa_sock_msg_perm+0x94/0x160
[  341.199129][T25547]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  341.199138][T25547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.199150][T25547]  __sock_sendmsg+0x21c/0x270
[  341.199161][T25547]  ____sys_sendmsg+0x505/0x830
[  341.199172][T25547]  ? __pfx_____sys_sendmsg+0x10/0x10
[  341.199184][T25547]  ? import_iovec+0x74/0xa0
[  341.199196][T25547]  ___sys_sendmsg+0x21f/0x2a0
[  341.199205][T25547]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.199259][T25547]  ? __fget_files+0x2a/0x420
[  341.199268][T25547]  ? __fget_files+0x3a0/0x420
[  341.199281][T25547]  __x64_sys_sendmsg+0x19b/0x260
[  341.199291][T25547]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  341.199304][T25547]  ? rcu_is_watching+0x15/0xb0
[  341.199319][T25547]  ? do_syscall_64+0xbe/0x3b0
[  341.199332][T25547]  do_syscall_64+0xfa/0x3b0
[  341.199343][T25547]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.199354][T25547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.199363][T25547]  ? exc_page_fault+0x9f/0xf0
[  341.199375][T25547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.199383][T25547] RIP: 0033:0x7fa69d38ebe9
[  341.199390][T25547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.199397][T25547] RSP: 002b:00007fa69e195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.199407][T25547] RAX: ffffffffffffffda RBX: 00007fa69d5b5fa0 RCX: 00007fa69d38ebe9
[  341.199413][T25547] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  341.199418][T25547] RBP: 00007fa69d411e19 R08: 0000000000000000 R09: 0000000000000000
[  341.199422][T25547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.199427][T25547] R13: 00007fa69d5b6038 R14: 00007fa69d5b5fa0 R15: 00007ffccbea7bb8
[  341.199440][T25547]  </TASK>
[  341.559448][T25563] netlink: 171696 bytes leftover after parsing attributes in process `syz.0.6594'.
[  341.744603][T25574] delete_channel: no stack
[  341.771556][T25577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6600'.
[  341.828317][T25583] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  341.831669][T25583] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  341.918625][T25594] delete_channel: no stack
[  341.990331][T25610] bond1: option mode: unable to set because the bond device has slaves
[  342.028910][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6613'.
[  342.061329][T25614] validate_nla: 2 callbacks suppressed
[  342.061339][T25614] netlink: 'syz.0.6612': attribute type 1 has an invalid length.
[  342.127480][T25626] delete_channel: no stack
[  342.140991][T25630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6617'.
[  342.152883][T25630] bond22: entered promiscuous mode
[  342.154763][T25630] 8021q: adding VLAN 0 to HW filter on device bond22
[  342.161017][T25632] netlink: 'syz.1.6618': attribute type 9 has an invalid length.
[  342.250480][T25630] bond22 (unregistering): Released all slaves
[  342.261010][T25635] bond1: option mode: unable to set because the bond device has slaves
[  342.359279][T25641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.363212][T25641] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  342.368010][T25641] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  342.432730][T25668] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  342.437456][T25668] CPU: 1 UID: 0 PID: 25668 Comm: syz.1.6628 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  342.437469][T25668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.437475][T25668] Call Trace:
[  342.437478][T25668]  <TASK>
[  342.437483][T25668]  dump_stack_lvl+0x189/0x250
[  342.437496][T25668]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.437505][T25668]  ? __pfx__printk+0x10/0x10
[  342.437515][T25668]  ? kernfs_path_from_node+0x2c/0x260
[  342.437524][T25668]  ? kernfs_path_from_node+0x2c/0x260
[  342.437532][T25668]  ? kernfs_path_from_node+0x2c/0x260
[  342.437542][T25668]  ? kernfs_path_from_node+0x22c/0x260
[  342.437551][T25668]  ? kernfs_path_from_node+0x2c/0x260
[  342.437561][T25668]  sysfs_warn_dup+0x8e/0xa0
[  342.437594][T25668]  sysfs_do_create_link_sd+0xc0/0x110
[  342.437605][T25668]  device_add_class_symlinks+0x1cf/0x240
[  342.437617][T25668]  device_add+0x475/0xb50
[  342.437629][T25668]  wiphy_register+0x1ba6/0x28d0
[  342.437649][T25668]  ? __pfx_wiphy_register+0x10/0x10
[  342.437660][T25668]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  342.437672][T25668]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  342.437683][T25668]  ieee80211_register_hw+0x3425/0x4080
[  342.437699][T25668]  ? ieee80211_register_hw+0x1491/0x4080
[  342.437710][T25668]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  342.437721][T25668]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.437734][T25668]  ? __hrtimer_setup+0x187/0x210
[  342.437746][T25668]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  342.437759][T25668]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  342.437782][T25668]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  342.437791][T25668]  ? trace_kmalloc+0x1f/0xd0
[  342.437801][T25668]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  342.437812][T25668]  ? kstrndup+0xbf/0x160
[  342.437825][T25668]  hwsim_new_radio_nl+0xea4/0x1b10
[  342.437837][T25668]  ? __pfx___nla_validate_parse+0x10/0x10
[  342.437852][T25668]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  342.437868][T25668]  ? __nla_parse+0x40/0x60
[  342.437878][T25668]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  342.437891][T25668]  genl_family_rcv_msg_doit+0x215/0x300
[  342.437903][T25668]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  342.437925][T25668]  ? bpf_lsm_capable+0x9/0x20
[  342.437936][T25668]  ? security_capable+0x7e/0x2e0
[  342.437950][T25668]  genl_rcv_msg+0x60e/0x790
[  342.437962][T25668]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.437970][T25668]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  342.437987][T25668]  netlink_rcv_skb+0x208/0x470
[  342.437997][T25668]  ? __lock_acquire+0xab9/0xd20
[  342.438010][T25668]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.438020][T25668]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.438039][T25668]  ? down_read+0x1ad/0x2e0
[  342.438048][T25668]  genl_rcv+0x28/0x40
[  342.438056][T25668]  netlink_unicast+0x82f/0x9e0
[  342.438070][T25668]  ? __pfx_netlink_unicast+0x10/0x10
[  342.438081][T25668]  ? netlink_sendmsg+0x642/0xb30
[  342.438091][T25668]  ? skb_put+0x11b/0x210
[  342.438100][T25668]  netlink_sendmsg+0x805/0xb30
[  342.438115][T25668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.438128][T25668]  ? aa_sock_msg_perm+0x94/0x160
[  342.438138][T25668]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.438147][T25668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.438158][T25668]  __sock_sendmsg+0x21c/0x270
[  342.438170][T25668]  ____sys_sendmsg+0x505/0x830
[  342.438197][T25668]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.438211][T25668]  ? import_iovec+0x74/0xa0
[  342.438223][T25668]  ___sys_sendmsg+0x21f/0x2a0
[  342.438233][T25668]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.438258][T25668]  ? __fget_files+0x2a/0x420
[  342.438265][T25668]  ? __fget_files+0x3a0/0x420
[  342.438278][T25668]  __x64_sys_sendmsg+0x19b/0x260
[  342.438289][T25668]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.438302][T25668]  ? rcu_is_watching+0x15/0xb0
[  342.438317][T25668]  ? do_syscall_64+0xbe/0x3b0
[  342.438330][T25668]  do_syscall_64+0xfa/0x3b0
[  342.438340][T25668]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.438350][T25668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.438358][T25668]  ? exc_page_fault+0x9f/0xf0
[  342.438369][T25668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.438376][T25668] RIP: 0033:0x7f493378ebe9
[  342.438384][T25668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.438390][T25668] RSP: 002b:00007f4934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.438400][T25668] RAX: ffffffffffffffda RBX: 00007f49339b5fa0 RCX: 00007f493378ebe9
[  342.438405][T25668] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  342.438410][T25668] RBP: 00007f4933811e19 R08: 0000000000000000 R09: 0000000000000000
[  342.438415][T25668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.438420][T25668] R13: 00007f49339b6038 R14: 00007f49339b5fa0 R15: 00007ffd737bb4d8
[  342.438432][T25668]  </TASK>
[  342.455304][T25673] netlink: 'syz.0.6630': attribute type 21 has an invalid length.
[  342.761445][T25703] netlink: 'syz.0.6638': attribute type 15 has an invalid length.
[  342.806734][ T5822] Bluetooth: hci2: command 0x0419 tx timeout
[  342.818380][ T5829] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  342.822186][ T5829] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  342.825659][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u11:6 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  342.829606][ T5829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.832685][ T5829] Workqueue: hci2 hci_cmd_sync_work
[  342.834375][ T5829] RIP: 0010:klist_remove+0x14a/0x340
[  342.836138][ T5829] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  342.843067][ T5829] RSP: 0018:ffffc9000319f6e0 EFLAGS: 00010202
[  342.845148][ T5829] RAX: 000000000000000b RBX: ffff88810694b980 RCX: 0000000000000000
[  342.848156][ T5829] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  342.851093][ T5829] RBP: ffffc9000319f7c8 R08: ffffffff8f870403 R09: 1ffffffff1f0e080
[  342.853786][ T5829] R10: dffffc0000000000 R11: fffffbfff1f0e081 R12: 0000000000000000
[  342.856449][ T5829] R13: 1ffff11020dd9b0c R14: ffff888106ecd860 R15: dffffc0000000000
[  342.858932][ T5829] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  342.861890][ T5829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.863967][ T5829] CR2: 00007fa69d44f520 CR3: 00000001245ba000 CR4: 00000000000006f0
[  342.866523][ T5829] Call Trace:
[  342.867639][ T5829]  <TASK>
[  342.868590][ T5829]  ? __pfx_klist_remove+0x10/0x10
[  342.870208][ T5829]  ? __pfx_kobject_move+0x10/0x10
[  342.871853][ T5829]  ? get_device_parent+0x366/0x3a0
[  342.873643][ T5829]  device_move+0x193/0x700
[  342.875323][ T5829]  hci_conn_del_sysfs+0xb8/0x170
[  342.877060][ T5829]  hci_conn_del+0x949/0xcf0
[  342.878654][ T5829]  ? hci_abort_conn_sync+0x24e/0xe30
[  342.880385][ T5829]  hci_abort_conn_sync+0x658/0xe30
[  342.882241][ T5829]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  342.884236][ T5829]  ? hci_conn_valid+0x21/0x230
[  342.885935][ T5829]  ? hci_conn_valid+0x21/0x230
[  342.887497][ T5829]  ? hci_conn_valid+0x21/0x230
[  342.889005][ T5829]  ? hci_conn_valid+0x211/0x230
[  342.890551][ T5829]  ? __pfx_abort_conn_sync+0x10/0x10
[  342.892279][ T5829]  hci_cmd_sync_work+0x213/0x3a0
[  342.893883][ T5829]  ? process_scheduled_works+0x9ef/0x17b0
[  342.895691][ T5829]  process_scheduled_works+0xae1/0x17b0
[  342.897442][ T5829]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.899386][ T5829]  worker_thread+0x8a0/0xda0
[  342.900901][ T5829]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.902956][ T5829]  ? __kthread_parkme+0x7b/0x200
[  342.904536][ T5829]  kthread+0x711/0x8a0
[  342.905845][ T5829]  ? __pfx_worker_thread+0x10/0x10
[  342.907490][ T5829]  ? __pfx_kthread+0x10/0x10
[  342.908963][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.910608][ T5829]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.912290][ T5829]  ? __pfx_kthread+0x10/0x10
[  342.913811][ T5829]  ret_from_fork+0x3fc/0x770
[  342.915283][ T5829]  ? __pfx_ret_from_fork+0x10/0x10
[  342.916920][ T5829]  ? __switch_to_asm+0x39/0x70
[  342.918459][ T5829]  ? __switch_to_asm+0x33/0x70
[  342.920002][ T5829]  ? __pfx_kthread+0x10/0x10
[  342.921511][ T5829]  ret_from_fork_asm+0x1a/0x30
[  342.923107][ T5829]  </TASK>
[  342.924120][ T5829] Modules linked in:
[  342.925765][ T5829] ---[ end trace 0000000000000000 ]---
[  342.928747][ T5829] RIP: 0010:klist_remove+0x14a/0x340
[  342.930439][ T5829] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  342.937405][ T5829] RSP: 0018:ffffc9000319f6e0 EFLAGS: 00010202
[  342.939902][ T5829] RAX: 000000000000000b RBX: ffff88810694b980 RCX: 0000000000000000
[  342.943102][ T5829] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  342.946505][ T5829] RBP: ffffc9000319f7c8 R08: ffffffff8f870403 R09: 1ffffffff1f0e080
[  342.949686][ T5829] R10: dffffc0000000000 R11: fffffbfff1f0e081 R12: 0000000000000000
[  342.952926][ T5829] R13: 1ffff11020dd9b0c R14: ffff888106ecd860 R15: dffffc0000000000
[  342.956184][ T5829] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  342.959838][ T5829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.962294][ T5829] CR2: 00007fa69d44f520 CR3: 00000001245ba000 CR4: 00000000000006f0
[  342.965733][ T5829] Kernel panic - not syncing: Fatal exception
[  342.968983][ T5829] Kernel Offset: disabled
[  342.970775][ T5829] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:16:00  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000319ef10
R8 =ffff8880211d0237 R9 =1ffff1100423a046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9592a R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa69d44f520 CR3=00000001245ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=532a0089714f1132 1add9c58ad532aad XMM03=b52507393304b195 dad3c82177486f8c
XMM04=6f0726e1578ca8d5 1693070d5ccaa4e7 XMM05=4a9fb2f40f6ed445 5e894de43163c96e
XMM06=b4cbafcd4fa2f701 55f390521439a49f XMM07=e184771366f5b53c 45c72cfa5010607b
XMM08=ea611e67bd6f0726 e1578ca8d5169307 XMM09=0000000000000000 00007f4933812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000005d44 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000005d44 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81704490
R12=0000000010000a10 R13=dffffc0000000000 R14=0000000000005d44 R15=0000000000000020
RIP=ffffffff81716f29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001400 CR3=000000011033c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=000bf4030a04000b f0032002000bee03
XMM02=0301801000149003 0002000bf8031204 XMM03=100002d003001000 02c00302100002b0
XMM04=040806060168e004 8080080002e00300 XMM05=010100000a080604 8004040173c8006c
XMM06=6f6f7468746501ff ffffffffffffffef XMM07=0804800300080006 1000201000060a71
XMM08=9440808180100002 8004010000040806 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
