last executing test programs:

1.456499486s ago: executing program 1 (id=11107):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r2=>0x0}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
r3 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r5, r5, 0x0, 0x1) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc) (async)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r9, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0) (async)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x8) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x50)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async, rerun: 32)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) (rerun: 32)
write(r10, &(0x7f0000000440)="7d79b2fe1671370dfed8eeb59eea8b6a261804d87b03", 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

1.316656666s ago: executing program 1 (id=11108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100f5ffffff000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a030000000000000000000100000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)

1.255718492s ago: executing program 1 (id=11110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000001c0)={0x28, r1, 0xf21, 0x3, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
close(r8)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

1.255270821s ago: executing program 0 (id=11111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100766c616e000000001000028006000100000000000400038008000510", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20008851}, 0x8000002)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x17, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @local, @local, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0x6558}, {@rand_addr=0x64010100, 0x4041}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x12, "073b4c1e45bb5cc1c8081dcf1435dd97"}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}]}}}}}, 0x86)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r9=>0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r9, 0x8, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100}}}})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'vlan1\x00', @broadcast})
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000100))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r10, 0x0, 0x100d76}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0xffffffffffffff57, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x190}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_TARGET_NETNSID={0x0, 0x2e, 0x1}, @IFLA_VFINFO_LIST={0x1c}]}, 0x58}}, 0x9001)

1.055478369s ago: executing program 0 (id=11112):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045cdf7a5acfc30e6a30000280000000000e952c8c197069078640101011a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket(0x10, 0x80003, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000200000000000000100"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000050000000000c8890000010404009f37bb73e3243b74d60862adbda82f023ec7418d026e301f629bc69b7e99ed78d7c4d51114ed83439f8f6e7573e1e59a22dee09a58e6a85242093ef09f906df6019ce4538527713c153ee74589ccdae4c3718be0cbcc1e70b70f1de32debeff47bbaaf8ccf00f0ae602e000014a33dd8227a3c0c02d54365d818337d212f4ef0aa1368f59fa707bb31acc7924a00efc2d82562431de947774b3feb7a3f146755de8a1cd30c5fc904aeaa4cfd4cc507", @ANYRES32=r3, @ANYBLOB="7f00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0400000000000000030000000200"/28], 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1.053283008s ago: executing program 1 (id=11113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
close(0x3)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0xffffc000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040), 0x4)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000480)="dec4c6e62c21647f24924a708deaff0b00006b6d8357287b2f60a93e6efb020086528f4ea0e52554599960dd8176dc2028392eb2dc9818c2527134ee38fa3189cc29838dc3b4d5af5a1c11b71ab2e6e3ee3e605d1cee28b2f750cbc459d91f61dd47c20bb7ffb0c38c5fa8480c32d00882d3c7a3a4fbd3af3d9c8915e644601926a5cbd4cd30686af9a3071f108b0213567dd1c1aa9886068a79e5b73553a6f7f8f22d48cf2e52a75dafe3f6719f2031ca75aafa2a03194cb020f5f269470da48c00"/205, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a40fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="b4000600", @ANYRES16=r8, @ANYBLOB="00032bbd7000fedbdf252800000098002a001001e93e01012689020802711de6c798b0ea22b20b78245c7ec4dcfe79c6e013179650e15f75bbf69e3604bf00c9346fd6b262d074fb45630b0224771191fbbbb74579298be5e3d6923b289ad010e7c620551c5a59d067c637d97cb53c299a1d9d0d8f9bc5f2beae1cb58d0b0ee493655b065ab188fae738766c691f14b44dbde3bf653c581d384cd2716ef615c5e62d6d0301b70600360007000000"], 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00070008000300", @ANYRES32=r9, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket(0x15, 0x5, 0x0)
getsockopt(r12, 0x200000000114, 0x2710, 0x0, &(0x7f00000000c0))
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
r13 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r13, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)

862.224361ms ago: executing program 1 (id=11115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae1e020000000000826de93c7eec9859f6e04533b7ff4c986c21be746dcc311554ff05cdadb74ac5155a7b3900178a8990af332fa0ad9acc92d6b24e0700bbb45d2f4d6e030deeb7f045f9429ba4c4770d009109821008861619eafd5d89fd92fa0800c3d7b3"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
syz_emit_ethernet(0xae, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x1, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

801.118361ms ago: executing program 0 (id=11117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000010a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a030000000000000000000100000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)

662.131926ms ago: executing program 0 (id=11119):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808006cbfd90f0df72fe95f540e30e98a7af102fa220674c6e08ecff485959d7e8c85dc6138f0910731449e76b51a18b0860b58b209c7d05e7dea7c12ffcfc0f4131e9f0b90d4064c03a57f61eb0598f3cb702da54665f408a2dd40706ca3d77672e67b89602a6076bbc0ea8d991317e70d7be3bebe147c63cc847632d8e5681da2aa709464cadf8b8c2cb2b9ed7a68ce143e15365afbb13cc9e42ee61ab541262ec16f2c9a0071abce3f679281d2b326a36a3c29fa46ea2550c8bc6cf79ae2a96b5f76d585436bc6ea6790cefe210dafd7bbd5e30c1a7f1672437019658a4e3396f5ee3173227318031d487ecfda5a161b3de422", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000aac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', <r3=>0x0, 0x20, 0x8, 0x6, 0x1, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x65, 0x0, 0xf4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, {[@generic={0x44, 0xf, "a113412acc7285211d1712a96d"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x2f, 0x2, 0x5, 0x0, 0xf, @local, @mcast2, 0x40, 0x20, 0xb2a, 0x80000001}})

500.415244ms ago: executing program 0 (id=11121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="2ae0d5b3974e"}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x56}}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @multicast}]}]}}}, @IFLA_LINK={0x8}]}, 0x90}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004)

436.565946ms ago: executing program 2 (id=11122):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14)
bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r9 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1)
r10 = accept4(r3, 0x0, &(0x7f0000000300), 0x800)
accept$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)={0x33, 0x12, 0x2, 0x2, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x98)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x1}, 0xfffffffffffffdcc)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r11)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})

336.592222ms ago: executing program 2 (id=11123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0xfffe, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x115, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

335.669474ms ago: executing program 0 (id=11124):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0xfffff000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18)
sendmmsg$inet(r4, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002640)="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", 0x1c7}, {0x0}], 0x2}}], 0x1, 0x48004)
socket(0xa, 0x3, 0x3a)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

106.220931ms ago: executing program 2 (id=11125):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="ad80c701a520bfae43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, 0x0, 0x0, 0x4000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800)
shutdown(r2, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00'})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}})
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000001c0))

103.506911ms ago: executing program 2 (id=11126):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x400000000000012, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x980, 0x15, &(0x7f0000000500)=""/21, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0xfff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[r5, r0, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x5, 0xd, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x4, 0x2, 0x4, 0x7}, {0x5, 0x1, 0x10, 0x7}, {0x2, 0x5, 0x1, 0x3}, {0x1, 0x1, 0x8, 0x7}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x240448e0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100929054ae0000000a0000070900010073797a31002c76ee0000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

4.219359ms ago: executing program 2 (id=11127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0xb, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44051}, 0x4) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) (async)
vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2e7}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r12 = accept4(r11, 0x0, 0x0, 0x800) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc090001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) (async)
sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES8=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

487.013µs ago: executing program 1 (id=11128):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x7, 0x61)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@multicast2, 0x9}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4)
recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f0000000380)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x1, 'syz1\x00', @default, 0x10001, 0x8, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
ioctl$SIOCNRDECOBS(r8, 0x89e2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000400)={0x28, 0x33, 0x400, 0x70bd27, 0x25dfdbfc, "", [@typed={0x16, 0x13f, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}]}, 0x28}, {&(0x7f0000000540)={0x19c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbff, "", [@nested={0x189, 0xcd, 0x0, 0x1, [@generic, @generic="9c886a6c26c8139e2ec78ea718f6e63a635ddfa55ed742b110d8b0353b0fd42e11fba8aaf803394884b412436a847d8e1b786f0d0a6f88970fef22e363007d2fbee7309250f0bf3630e93bcc76e055d7e7acfcaf6dd95578f5b34f5dce34b03134d7d3056ae1f2d4254269bf5caaf3a7d3a3e29628d1b835386395385b01ccb5faf639aacc064b43e638afa8ba0c9218bc56f3f98d449de54d05caafefde2c5b1173e3f6d94957ea08543535a871f8cc", @generic="57f97fd3d8ad6d6cb1d2845de7b1eba1aae9c80be571af19966188e1dd2dded952238d9074002b1078e3785061e37e20795cf0e427731d61e746bd095631cfdb92839460fc1eb406be514efbdc707f47d4f11c03b8d94b92f717bbd84f36ceb6392da5c6154538a7c888c0ba49c4c53239d99b3a2e499de4e51c3d05d6075c1b503caadbe0797d6020cbac2fbf88efd618ed2ea91360d7c3dbc727d517d7b73e0963c231bfba4d92168bcb85d8dce5ff1bb47dfd0de4add5dcf1587a1f", @nested={0x4, 0xc5}, @generic="288db6714156e5e4", @typed={0x8, 0x131, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x30}]}]}, 0x19c}, {&(0x7f0000003080)=ANY=[@ANYBLOB="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"]}, {&(0x7f0000000700)={0x344, 0x7b, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x334, 0x27, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @fd}, @generic="506b7ab8aa8f500d1ac49a44244cce447412d653e17939f586a7ade6fe9aad244d23ad3715b108416095ccd0e86d873b0128e737015067939ded5fb8ae92f879138d0a126608b7168ebebe3182037fd48bdb7c7272a05f5622838f96774322bd5ad76ad1e5db91fc544aae74e5b22945391e66d3a1bc3d1fe688d445f19d66ffcf56fe6d7cfcce432dc0", @generic="268ea044cec536fa4345c7217c713e31156b879c29419adaf812fb52ef5b84ac408b5f5afa382982a34867c0e8c76ba6e750013db3cb7fe7f6bb14eb9ab4adfafe572a37fdd40b2b959fab6ba3c73bb2f155b49a90b302e6b1548ad58184f8553f1261cba35bc6", @nested={0x12d, 0x90, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64=0x3}, @nested={0x1c, 0x36, 0x0, 0x1, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x137}]}, @typed={0x9, 0x58, 0x0, 0x0, @str='syz1\x00'}, @generic="6c856fb3c2205a9999020b565a20edc24731aad1f39af2cd7d2457da3f", @typed={0xd6, 0x39, 0x0, 0x0, @binary="ca63c6618da4345dd36a3d711295864537e34fd005e8529d6c26ecc80d8474ac36288046ffaebcc6b574224041ec5d6591cc4b782074a34cede0101ab004582fbc977bc46ed48e814e844f91d200dd1d6d328f070c4fe468d4a3822794919764109bc6b5e3fdc49c7e72e6dd8e9f2ad1c7ed822d46d94b7d2ed8edc118dd91052b9dc09d89f676736d83da9ea357c86ad86559712bfab23408d5719c30637550e809e49b4d368535718ef8d6e7a41f6d39c758078437c24945a9bdbce31a6b980f03885e067a48c39139910246e2a6e6eadd"}]}, @generic="6db84825ba9aa3a81c9d6ced9241bc6d1166349c365e1a4b17a9e0014f4e4ac661fc52309bba7b4dfd33ae6d18ce385b2b4eb59a7d2c8a0adbe820a0e3cf01bca8950271f10769a94441799920d796999d17296e14f4277cf4bfc9087c4e3bdd54b8e2324fcf9c56d610b67781ffcb37c8242d40a9fdeafd848ee66ee9e0a0b7fd6ecc9cb502d187f87c11e72706130b2664", @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@empty}, @generic="f66ae023ea58c5f651ea42d3cf3afedba3bc8a6fcfd8cd9622b8e3e0beda9593c630a5ba2ff549ee670a0dc975c21dad51bff663b386b8f7daa4d9d317f4fd6320d30c09997d45f886bbba89fc277ed042216dd10f241f81a43d024cd3c992cc0680ee64d412e63490598affa8"]}]}, 0x344}, {&(0x7f0000000440)=ANY=[@ANYBLOB="0000bd7000fedbdf2500001a00", @ANYRES32=0x0, @ANYBLOB]}, {&(0x7f0000002b80)=ANY=[@ANYBLOB="000000003700000225bd7000fcdbdf250000cf0047504c006392052497c0264723b34d587e486125a0438c645af8175ec7ea5248980b5bc0cb5a8acad5981a171ef31bb8f3d40d8c0ad3bdd644e134547e20dd8c19c4056930a99939b8f96bf2b94f61173d8a3ec7217da5e8ac81acecd9c90aad200e4f7ef6f5336d942fc4dc23a805dc056170b901704f624796e6618fd0b79dcadd88720c6a1ca3f1bba73d345be6d4b0021cd5f123c9aa3c5691e7ad40f7eff42e87147870933f0268949f4044b5f410fd31c04d1a8d520e70893c8fadfc81a30d95b5b1c2e5f9a3d6185fcdb66153e2dfff048bacca823d3fe284e8070e914f00003900247859d7e6fd99c93d502d2b472fc4b98e01c28bb4add052120bc197a9603b67404f07f628b68489904ac0dc07db7ae75f4938acc3994c033bcc7886f6ecef15ad88e81ceb95e1a6e70e26062f9849282ff9a0f17236bde17f35cbbad87478c2eded4c336f1b273de1b13b56a9f0f0e22401e89b1a0d81c7c32f307667522f465b6ec25ea33923ad16f2f7aadb8d5cb05717f83d80b77df354ff9414aeea19eddded966dbf54506442114b254019258a574efaba67ad7c3b5f0621a4f9a85bf16350d3ab2a595f5ba93af11547c7f69f6d935a37ce6f2499247dea8a302ca8ff6bae861fc43a9ea0b5c097110fd1a089984034815f780000000000"]}, {&(0x7f0000002d80)={0x14, 0x19, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0xb8}]}, 0x14}, {&(0x7f0000002e80)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="d38941900c1e758a3493bc4aff6f055e7ba89e531bd7c0d9aac9c16d04a074b75fee69173705d84e411a626fa66807bc95d160698d0d46c10af7af94e379717dc28073a773cf4a32b03155c509fd27bc6b598f1f6e6bfdcb22878459b994ecaa84de39851743a6b011f7f1ebb836ef5f000000dcac0a517b5547cb2c5a80cb38a8de529e6d5eaa778cd3c31699363c2fdfdd9a94cc4cd2c712098e3c6524e9a1c311ad20dd3b03ca78ddbdf327083262944757145dccc109d1e250bcf9d12c8f296a45c586e418ec4cd857de9e1d24b8101172abba888b7320299083c33e7658c34d17b4f721218e8308aaf5e5dd3513b9f4b9f05c024efb1e0ee0003fe1640f5c0a309d07dce306936bdeb701604e4afe095934f73b685176813d8412da6765aa73e08eb282c1761616f663aca0d8557cf29f78ac5bc99cd76c6f3ca5e6ee36443ec8e195dfd1520d5bb7303a3daec23b6bd0425475cf1ba9182c42ca1f78b9af728e53135c80c2b0b68e8bfeb9efe6bfd1494948ec0727e3eabc531aedb92333dd2ea87b37ebb4f0f725aa257839060522f8461e552854cf2bb7ae8eb6ae9ef34d79b857751cfa34322368242b8cebd2a536dbcdab0f8cba6cb1166d8c4951344037a2e4231ef1"]}], 0x8, 0x0, 0x0, 0x400048c0}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x0, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 2 (id=11129):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82187201, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0xe4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf4657c33b8dfea5e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008800}, 0x4800)
r9 = socket$inet6(0xa, 0x3, 0x3a)
sendmmsg$inet6(r9, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) (async)
bind$bt_hci(r8, &(0x7f0000000280), 0x6) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

6tnl5: entered allmulticast mode
[  675.178139][T10386] team0: Refused to change device type
[  675.225256][T10381] netlink: 'syz.0.9682': attribute type 10 has an invalid length.
[  676.178621][T10417] batadv_slave_1: entered promiscuous mode
[  676.221276][T10408] batadv_slave_1: left promiscuous mode
[  676.358312][T10438] netlink: 'syz.0.9698': attribute type 1 has an invalid length.
[  676.617602][T10451] netlink: 'syz.2.9702': attribute type 1 has an invalid length.
[  677.220924][T10472] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  678.031065][T10534] __nla_validate_parse: 10 callbacks suppressed
[  678.031113][T10534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9722'.
[  678.250008][T10553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  678.254767][T10553] syzkaller0: entered promiscuous mode
[  678.256650][T10553] syzkaller0: entered allmulticast mode
[  678.265347][T10553] tipc: Resetting bearer <eth:syzkaller0>
[  678.271139][T10552] tipc: Resetting bearer <eth:syzkaller0>
[  678.276526][T10538] netlink: 'syz.0.9724': attribute type 101 has an invalid length.
[  678.290608][T10552] tipc: Disabling bearer <eth:syzkaller0>
[  678.368702][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9730'.
[  678.583115][T10574] netlink: 'syz.2.9731': attribute type 10 has an invalid length.
[  678.654811][T10588] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9738'.
[  678.750550][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9739'.
[  678.793088][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9741'.
[  679.478698][T10640] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9750'.
[  679.494445][T10640] netlink: 'syz.1.9750': attribute type 1 has an invalid length.
[  679.523514][T10612] lo speed is unknown, defaulting to 1000
[  679.530338][T10640] 8021q: adding VLAN 0 to HW filter on device bond23
[  679.554812][T10640] veth37: entered promiscuous mode
[  679.562834][T10640] bond23: (slave veth37): Enslaving as a backup interface with a down link
[  679.580774][T10640] bond23: (slave veth37): Releasing backup interface
[  679.703169][T10654] mac80211_hwsim hwsim665 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  679.703288][T10653] netlink: 'syz.1.9753': attribute type 1 has an invalid length.
[  679.709475][T10653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.955792][T10670] IPVS: length: 59 != 24
[  680.134428][T10676] netlink: 'syz.1.9762': attribute type 13 has an invalid length.
[  680.137147][T10676] netlink: 'syz.1.9762': attribute type 17 has an invalid length.
[  680.283542][T10676] 8021q: adding VLAN 0 to HW filter on device team0
[  680.295376][T10676] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  680.373906][T10689] netlink: 'syz.2.9764': attribute type 12 has an invalid length.
[  680.378067][T10689] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.9764'.
[  680.575051][T10700] netlink: 136 bytes leftover after parsing attributes in process `syz.1.9768'.
[  680.578338][T10700] netlink: 'syz.1.9768': attribute type 1 has an invalid length.
[  680.699591][T10703] netlink: 'syz.2.9769': attribute type 12 has an invalid length.
[  680.929754][T10697] lo speed is unknown, defaulting to 1000
[  680.972045][T10710] netlink: 'syz.2.9771': attribute type 10 has an invalid length.
[  680.995639][T10714] openvswitch: netlink: Multiple metadata blocks provided
[  681.113415][T10722] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  681.116952][T10722] CPU: 1 UID: 0 PID: 10722 Comm: syz.1.9776 Not tainted syzkaller #0 PREEMPT(full) 
[  681.116965][T10722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  681.116971][T10722] Call Trace:
[  681.116976][T10722]  <TASK>
[  681.116981][T10722]  dump_stack_lvl+0x189/0x250
[  681.117012][T10722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.117022][T10722]  ? __pfx__printk+0x10/0x10
[  681.117037][T10722]  ? kernfs_path_from_node+0x2f/0x290
[  681.117046][T10722]  ? kernfs_path_from_node+0x250/0x290
[  681.117054][T10722]  ? kernfs_path_from_node+0x2f/0x290
[  681.117064][T10722]  sysfs_warn_dup+0x8e/0xa0
[  681.117073][T10722]  sysfs_do_create_link_sd+0xc0/0x110
[  681.117083][T10722]  device_add_class_symlinks+0x1cf/0x240
[  681.117094][T10722]  device_add+0x475/0xb50
[  681.117104][T10722]  wiphy_register+0x1ba6/0x28d0
[  681.117124][T10722]  ? __pfx_wiphy_register+0x10/0x10
[  681.117134][T10722]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  681.117147][T10722]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  681.117158][T10722]  ieee80211_register_hw+0x3425/0x4080
[  681.117176][T10722]  ? ieee80211_register_hw+0x1471/0x4080
[  681.117188][T10722]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  681.117199][T10722]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  681.117213][T10722]  ? __hrtimer_setup+0x187/0x210
[  681.117221][T10722]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  681.117235][T10722]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  681.117260][T10722]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  681.117269][T10722]  ? trace_kmalloc+0x1f/0xd0
[  681.117279][T10722]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  681.117290][T10722]  ? kstrndup+0xbf/0x160
[  681.117303][T10722]  hwsim_new_radio_nl+0xea4/0x1b10
[  681.117315][T10722]  ? __pfx___nla_validate_parse+0x10/0x10
[  681.117336][T10722]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  681.117352][T10722]  ? __nla_parse+0x40/0x60
[  681.117366][T10722]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  681.117380][T10722]  genl_family_rcv_msg_doit+0x215/0x300
[  681.117393][T10722]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  681.117409][T10722]  ? bpf_lsm_capable+0x9/0x20
[  681.117420][T10722]  ? security_capable+0x7e/0x2e0
[  681.117436][T10722]  genl_rcv_msg+0x60e/0x790
[  681.117448][T10722]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.117457][T10722]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  681.117474][T10722]  netlink_rcv_skb+0x208/0x470
[  681.117485][T10722]  ? __lock_acquire+0xab9/0xd20
[  681.117497][T10722]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.117507][T10722]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.117528][T10722]  ? down_read+0x1ad/0x2e0
[  681.117537][T10722]  genl_rcv+0x28/0x40
[  681.117545][T10722]  netlink_unicast+0x82f/0x9e0
[  681.117561][T10722]  ? __pfx_netlink_unicast+0x10/0x10
[  681.117573][T10722]  ? netlink_sendmsg+0x642/0xb30
[  681.117583][T10722]  ? skb_put+0x11b/0x210
[  681.117593][T10722]  netlink_sendmsg+0x805/0xb30
[  681.117610][T10722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.117623][T10722]  ? aa_sock_msg_perm+0xf1/0x1d0
[  681.117632][T10722]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.117640][T10722]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.117653][T10722]  __sock_sendmsg+0x21c/0x270
[  681.117666][T10722]  ____sys_sendmsg+0x505/0x830
[  681.117678][T10722]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.117694][T10722]  ? import_iovec+0x74/0xa0
[  681.117710][T10722]  ___sys_sendmsg+0x21f/0x2a0
[  681.117726][T10722]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.117762][T10722]  ? __fget_files+0x2a/0x420
[  681.117777][T10722]  ? __fget_files+0x3a0/0x420
[  681.117799][T10722]  __x64_sys_sendmsg+0x19b/0x260
[  681.117812][T10722]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  681.117834][T10722]  ? rcu_is_watching+0x15/0xb0
[  681.117883][T10722]  ? do_syscall_64+0xbe/0x3b0
[  681.117904][T10722]  do_syscall_64+0xfa/0x3b0
[  681.117922][T10722]  ? lockdep_hardirqs_on+0x9c/0x150
[  681.117938][T10722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.117947][T10722]  ? exc_page_fault+0x9f/0xf0
[  681.117959][T10722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.117967][T10722] RIP: 0033:0x7f7d1c58ebe9
[  681.117976][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  681.117983][T10722] RSP: 002b:00007f7d1d312038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.117993][T10722] RAX: ffffffffffffffda RBX: 00007f7d1c7b5fa0 RCX: 00007f7d1c58ebe9
[  681.117999][T10722] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  681.118005][T10722] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  681.118010][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  681.118014][T10722] R13: 00007f7d1c7b6038 R14: 00007f7d1c7b5fa0 R15: 00007fff8b9ade48
[  681.118029][T10722]  </TASK>
[  681.370590][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9779'.
[  682.016660][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9790'.
[  682.634213][T10798] netlink: 'syz.1.9797': attribute type 9 has an invalid length.
[  683.120587][T10825] __nla_validate_parse: 2 callbacks suppressed
[  683.120605][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9805'.
[  683.215347][T10851] netlink: 'syz.0.9808': attribute type 10 has an invalid length.
[  683.287899][T10838] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  683.302009][T10838] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  683.311561][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  683.586857][T10870] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9815'.
[  683.595469][T10860] lo speed is unknown, defaulting to 1000
[  684.363656][T10900] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9822'.
[  684.386031][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9819'.
[  684.462106][T10908] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9819'.
[  684.548371][T10910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9825'.
[  684.560525][T10910] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  684.563415][T10910] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  684.603731][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9826'.
[  684.657339][T10914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  685.118742][T10941] netlink: 'syz.0.9836': attribute type 10 has an invalid length.
[  685.123782][T10941] macvlan0: entered promiscuous mode
[  685.323524][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9838'.
[  685.351964][T10961] syzkaller1: entered promiscuous mode
[  685.354098][T10961] syzkaller1: entered allmulticast mode
[  685.357776][T10961] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  685.363116][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9840'.
[  685.441055][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9842'.
[  685.558970][T10969] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  685.569954][T10972] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  685.577151][T10969] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  685.580064][T10972] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  685.582834][T10969] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  685.593745][T10972] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  685.597662][T10969] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  686.118765][T11003] netlink: 'syz.1.9853': attribute type 10 has an invalid length.
[  686.177911][T11006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  686.181537][T11006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  686.655908][T11041] netlink: 'syz.2.9862': attribute type 10 has an invalid length.
[  686.750020][T11048] sctp: [Deprecated]: syz.0.9864 (pid 11048) Use of int in max_burst socket option.
[  686.750020][T11048] Use struct sctp_assoc_value instead
[  686.756212][T11047] sctp: [Deprecated]: syz.0.9864 (pid 11047) Use of int in max_burst socket option.
[  686.756212][T11047] Use struct sctp_assoc_value instead
[  686.866622][T11066] netlink: 'syz.1.9866': attribute type 13 has an invalid length.
[  686.870151][T11066] netlink: 'syz.1.9866': attribute type 17 has an invalid length.
[  686.883510][T11066] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  687.422897][T11094] netlink: 'syz.0.9874': attribute type 10 has an invalid length.
[  687.664953][T11122] netlink: 'syz.2.9879': attribute type 10 has an invalid length.
[  687.729028][T11129] netlink: 'syz.2.9882': attribute type 12 has an invalid length.
[  687.886159][T11135] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  687.890468][T11135] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  688.143537][T11170] __nla_validate_parse: 11 callbacks suppressed
[  688.143549][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9889'.
[  688.291622][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9890'.
[  688.586162][T11195] mac80211_hwsim hwsim675 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  688.679664][T11206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9899'.
[  688.930023][   T33] audit: type=1800 audit(1756390978.240:3): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9905" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=16818 res=0 errno=0
[  688.953556][   T33] audit: type=1804 audit(1756390978.250:4): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9905" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=16818 res=1 errno=0
[  689.150217][T11242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9908'.
[  689.509936][T11275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9914'.
[  689.620665][T11276] netlink: 'syz.1.9913': attribute type 10 has an invalid length.
[  690.110639][T11298] xt_HMARK: proto mask must be zero with L3 mode
[  690.334908][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9923'.
[  690.461241][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9926'.
[  690.569404][T11330] netlink: 'syz.0.9926': attribute type 10 has an invalid length.
[  690.737331][T11351] veth0_vlan: left allmulticast mode
[  690.739590][T11351] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  690.749306][T11351] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  690.769651][T11351] sit3: left promiscuous mode
[  690.909525][T11355] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  691.399657][T11382] lo speed is unknown, defaulting to 1000
[  691.515388][T11386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9939'.
[  691.526206][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9939'.
[  692.293857][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9953'.
[  692.604211][T11477] netlink: 'syz.2.9958': attribute type 1 has an invalid length.
[  692.656696][T11465] bridge19: entered promiscuous mode
[  692.658758][T11465] bridge19: entered allmulticast mode
[  693.024447][T11481] lo speed is unknown, defaulting to 1000
[  693.187072][T11521] netlink: 'syz.0.9968': attribute type 12 has an invalid length.
[  693.190434][T11521] __nla_validate_parse: 5 callbacks suppressed
[  693.190449][T11521] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.9968'.
[  693.388937][T11536] netlink: 'syz.2.9972': attribute type 23 has an invalid length.
[  693.758745][T11552] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9977'.
[  693.866143][T11552] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9977'.
[  693.869885][T11552] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  694.105756][T11577] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  694.110310][T11577] CPU: 1 UID: 0 PID: 11577 Comm: syz.0.9984 Not tainted syzkaller #0 PREEMPT(full) 
[  694.110334][T11577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  694.110344][T11577] Call Trace:
[  694.110353][T11577]  <TASK>
[  694.110363][T11577]  dump_stack_lvl+0x189/0x250
[  694.110386][T11577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  694.110402][T11577]  ? __pfx__printk+0x10/0x10
[  694.110425][T11577]  ? kernfs_path_from_node+0x2f/0x290
[  694.110440][T11577]  ? kernfs_path_from_node+0x250/0x290
[  694.110452][T11577]  ? kernfs_path_from_node+0x2f/0x290
[  694.110469][T11577]  sysfs_warn_dup+0x8e/0xa0
[  694.110486][T11577]  sysfs_do_create_link_sd+0xc0/0x110
[  694.110502][T11577]  device_add_class_symlinks+0x1cf/0x240
[  694.110523][T11577]  device_add+0x475/0xb50
[  694.110543][T11577]  wiphy_register+0x1ba6/0x28d0
[  694.110577][T11577]  ? __pfx_wiphy_register+0x10/0x10
[  694.110597][T11577]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  694.110618][T11577]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  694.110637][T11577]  ieee80211_register_hw+0x3425/0x4080
[  694.110666][T11577]  ? ieee80211_register_hw+0x1471/0x4080
[  694.110688][T11577]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  694.110707][T11577]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  694.110740][T11577]  ? __hrtimer_setup+0x187/0x210
[  694.110755][T11577]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  694.110777][T11577]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  694.110819][T11577]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  694.110836][T11577]  ? trace_kmalloc+0x1f/0xd0
[  694.110853][T11577]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  694.110873][T11577]  ? kstrndup+0xbf/0x160
[  694.110896][T11577]  hwsim_new_radio_nl+0xea4/0x1b10
[  694.110917][T11577]  ? __pfx___nla_validate_parse+0x10/0x10
[  694.110982][T11577]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  694.111014][T11577]  ? __nla_parse+0x40/0x60
[  694.111040][T11577]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  694.111061][T11577]  genl_family_rcv_msg_doit+0x215/0x300
[  694.111080][T11577]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  694.111107][T11577]  ? bpf_lsm_capable+0x9/0x20
[  694.111124][T11577]  ? security_capable+0x7e/0x2e0
[  694.111152][T11577]  genl_rcv_msg+0x60e/0x790
[  694.111174][T11577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  694.111190][T11577]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  694.111220][T11577]  netlink_rcv_skb+0x208/0x470
[  694.111237][T11577]  ? __lock_acquire+0xab9/0xd20
[  694.111257][T11577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  694.111295][T11577]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  694.111333][T11577]  ? down_read+0x1ad/0x2e0
[  694.111350][T11577]  genl_rcv+0x28/0x40
[  694.111364][T11577]  netlink_unicast+0x82f/0x9e0
[  694.111393][T11577]  ? __pfx_netlink_unicast+0x10/0x10
[  694.111415][T11577]  ? netlink_sendmsg+0x642/0xb30
[  694.111434][T11577]  ? skb_put+0x11b/0x210
[  694.111452][T11577]  netlink_sendmsg+0x805/0xb30
[  694.111481][T11577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.111506][T11577]  ? aa_sock_msg_perm+0xf1/0x1d0
[  694.111522][T11577]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  694.111538][T11577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  694.111560][T11577]  __sock_sendmsg+0x21c/0x270
[  694.111582][T11577]  ____sys_sendmsg+0x505/0x830
[  694.111602][T11577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  694.111626][T11577]  ? import_iovec+0x74/0xa0
[  694.111668][T11577]  ___sys_sendmsg+0x21f/0x2a0
[  694.111688][T11577]  ? __pfx____sys_sendmsg+0x10/0x10
[  694.111744][T11577]  ? __fget_files+0x2a/0x420
[  694.111768][T11577]  ? __fget_files+0x3a0/0x420
[  694.111798][T11577]  __x64_sys_sendmsg+0x19b/0x260
[  694.111818][T11577]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  694.111857][T11577]  ? rcu_is_watching+0x15/0xb0
[  694.111877][T11577]  ? do_syscall_64+0xbe/0x3b0
[  694.111921][T11577]  do_syscall_64+0xfa/0x3b0
[  694.111967][T11577]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.111987][T11577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.112002][T11577]  ? exc_page_fault+0x9f/0xf0
[  694.112023][T11577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.112037][T11577] RIP: 0033:0x7f31cbb8ebe9
[  694.112052][T11577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  694.112067][T11577] RSP: 002b:00007f31cc94d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  694.112083][T11577] RAX: ffffffffffffffda RBX: 00007f31cbdb5fa0 RCX: 00007f31cbb8ebe9
[  694.112095][T11577] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  694.112104][T11577] RBP: 00007f31cbc11e19 R08: 0000000000000000 R09: 0000000000000000
[  694.112115][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  694.112124][T11577] R13: 00007f31cbdb6038 R14: 00007f31cbdb5fa0 R15: 00007ffe56a4b7c8
[  694.112149][T11577]  </TASK>
[  694.424026][T11580] ip6tnl4: left promiscuous mode
[  694.426071][T11580] veth35: left promiscuous mode
[  694.430387][T11580] veth37: left promiscuous mode
[  694.690716][T11598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9990'.
[  694.713879][T11584] lo speed is unknown, defaulting to 1000
[  694.892807][T11606] netlink: 'syz.0.9992': attribute type 13 has an invalid length.
[  694.903553][T11606] netlink: 'syz.0.9992': attribute type 17 has an invalid length.
[  694.950165][T11606] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  695.016249][T11616] netlink: 'syz.2.9993': attribute type 10 has an invalid length.
[  695.783222][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9998'.
[  695.847428][T11606] lo speed is unknown, defaulting to 1000
[  696.364330][T11665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10009'.
[  696.368426][T11665] netlink: 'syz.2.10009': attribute type 1 has an invalid length.
[  696.515929][T11669] 8021q: adding VLAN 0 to HW filter on device bond25
[  696.690594][T11680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10012'.
[  696.758983][T11689] netlink: 'syz.0.10013': attribute type 10 has an invalid length.
[  697.205900][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10022'.
[  697.213001][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10022'.
[  697.488504][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10026'.
[  698.433316][T11809] netlink: 'syz.0.10046': attribute type 83 has an invalid length.
[  698.732498][T11805] netlink: 'syz.1.10043': attribute type 4 has an invalid length.
[  698.755652][T11823] __nla_validate_parse: 7 callbacks suppressed
[  698.755665][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10049'.
[  698.896142][T11800] lo speed is unknown, defaulting to 1000
[  699.153948][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10052'.
[  699.233532][T11857] netlink: 'syz.2.10054': attribute type 10 has an invalid length.
[  699.580345][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10060'.
[  699.706431][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10061'.
[  699.723197][T11879] bridge20: entered promiscuous mode
[  699.725464][T11879] bridge20: entered allmulticast mode
[  700.146956][T11881] lo speed is unknown, defaulting to 1000
[  700.231133][T11894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10065'.
[  700.289784][T11896] netlink: 'syz.1.10066': attribute type 9 has an invalid length.
[  700.311987][T11896] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10066'.
[  700.606857][T11885] lo speed is unknown, defaulting to 1000
[  701.362784][T11934] netlink: 'syz.2.10076': attribute type 12 has an invalid length.
[  701.366150][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10075'.
[  701.369692][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10075'.
[  701.493772][T11923] lo speed is unknown, defaulting to 1000
[  701.763429][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10079'.
[  702.083397][T11966] block nbd6: shutting down sockets
[  702.224283][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10088'.
[  702.329918][T11966] netlink: 'syz.0.10085': attribute type 12 has an invalid length.
[  702.586964][T11982] netlink: 'syz.2.10090': attribute type 10 has an invalid length.
[  702.640386][T11990] mac80211_hwsim hwsim687 wlan0: entered promiscuous mode
[  702.644127][T11990] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  703.129090][T12030] mac80211_hwsim hwsim686 wlan1: entered allmulticast mode
[  703.147430][T12030] netlink: 'syz.2.10103': attribute type 10 has an invalid length.
[  703.159059][T12030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  703.164505][T12030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  704.135758][T12066] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  704.250472][T12072] netlink: 'syz.2.10115': attribute type 10 has an invalid length.
[  704.257737][T12072] netlink: 'syz.2.10115': attribute type 10 has an invalid length.
[  704.347586][T12076] __nla_validate_parse: 7 callbacks suppressed
[  704.347602][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10117'.
[  704.420640][T12077] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10117'.
[  704.624011][T12082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10119'.
[  704.670774][T12084] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10120'.
[  705.231094][T12096] netlink: 'syz.0.10125': attribute type 10 has an invalid length.
[  705.296654][T12100] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  705.307895][T12100] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  705.593524][T12101] lo speed is unknown, defaulting to 1000
[  706.245475][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10136'.
[  706.513867][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10141'.
[  706.945298][T12169] netlink: 'syz.2.10148': attribute type 1 has an invalid length.
[  706.995871][T12169] veth21: entered promiscuous mode
[  707.000524][T12169] bond26: (slave veth21): Enslaving as a backup interface with a down link
[  707.004037][T12153] lo speed is unknown, defaulting to 1000
[  707.007361][T12169] bond26: (slave veth21): Releasing backup interface
[  707.061471][T12172] mac80211_hwsim hwsim685 wlan0: entered promiscuous mode
[  707.064944][T12172] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  707.171027][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10150'.
[  707.174670][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10150'.
[  707.236359][T12178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10151'.
[  707.406349][T12183] netlink: 'syz.0.10153': attribute type 10 has an invalid length.
[  707.714515][T12203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10157'.
[  709.575022][T12311] __nla_validate_parse: 6 callbacks suppressed
[  709.575040][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10184'.
[  709.680389][T12338] netlink: 'syz.2.10191': attribute type 11 has an invalid length.
[  709.912257][T12340] netlink: 'syz.1.10188': attribute type 10 has an invalid length.
[  710.184368][T12367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10196'.
[  710.521226][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10202'.
[  710.990639][T12391] lo speed is unknown, defaulting to 1000
[  712.054934][T12459] lo speed is unknown, defaulting to 1000
[  712.094545][T12474] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10219'.
[  712.266568][T12489] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  712.465277][T12491] syzkaller1: entered promiscuous mode
[  712.467768][T12491] syzkaller1: entered allmulticast mode
[  712.675853][T12509] mac80211_hwsim hwsim686 wlan1: left allmulticast mode
[  712.681205][T12509] veth21: left promiscuous mode
[  712.684883][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10230'.
[  712.697232][T12511] netlink: 'syz.1.10230': attribute type 11 has an invalid length.
[  712.986300][T12521] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  713.037724][T12535] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10238'.
[  713.125864][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10239'.
[  713.241200][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10242'.
[  713.371276][T12556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10244'.
[  713.457836][T12561] netlink: 136 bytes leftover after parsing attributes in process `syz.0.10245'.
[  713.461379][T12561] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  714.046105][T12611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  714.050108][T12611] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  714.053436][T12611] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  714.059426][T12615] netlink: 'syz.0.10259': attribute type 10 has an invalid length.
[  714.238026][T12622] netlink: 'syz.0.10261': attribute type 6 has an invalid length.
[  714.241628][T12622] netlink: 'syz.0.10261': attribute type 5 has an invalid length.
[  714.247462][T12623] netlink: 'syz.0.10261': attribute type 6 has an invalid length.
[  714.253277][T12623] netlink: 'syz.0.10261': attribute type 5 has an invalid length.
[  714.507390][T12621] lo speed is unknown, defaulting to 1000
[  715.022018][T12665] __nla_validate_parse: 10 callbacks suppressed
[  715.022035][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'.
[  715.149601][T12655] netlink: 'syz.0.10267': attribute type 10 has an invalid length.
[  715.298066][T12677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10269'.
[  715.449130][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10271'.
[  715.575716][T12699] mac80211_hwsim hwsim686 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  715.618233][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10275'.
[  715.678794][T12705] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  715.694666][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.2.10276 Not tainted syzkaller #0 PREEMPT(full) 
[  715.694691][T12705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  715.694700][T12705] Call Trace:
[  715.694707][T12705]  <TASK>
[  715.694715][T12705]  dump_stack_lvl+0x189/0x250
[  715.694738][T12705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.694754][T12705]  ? __pfx__printk+0x10/0x10
[  715.694775][T12705]  ? kernfs_path_from_node+0x2f/0x290
[  715.694790][T12705]  ? kernfs_path_from_node+0x250/0x290
[  715.694805][T12705]  ? kernfs_path_from_node+0x2f/0x290
[  715.694824][T12705]  sysfs_warn_dup+0x8e/0xa0
[  715.694838][T12705]  sysfs_do_create_link_sd+0xc0/0x110
[  715.694854][T12705]  device_add_class_symlinks+0x1cf/0x240
[  715.694875][T12705]  device_add+0x475/0xb50
[  715.694891][T12705]  wiphy_register+0x1ba6/0x28d0
[  715.694925][T12705]  ? __pfx_wiphy_register+0x10/0x10
[  715.694944][T12705]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  715.694966][T12705]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  715.694986][T12705]  ieee80211_register_hw+0x3425/0x4080
[  715.695016][T12705]  ? ieee80211_register_hw+0x1471/0x4080
[  715.695037][T12705]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  715.695053][T12705]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  715.695078][T12705]  ? __hrtimer_setup+0x187/0x210
[  715.695092][T12705]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  715.695116][T12705]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  715.695158][T12705]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  715.695175][T12705]  ? trace_kmalloc+0x1f/0xd0
[  715.695192][T12705]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  715.695210][T12705]  ? kstrndup+0xbf/0x160
[  715.695233][T12705]  hwsim_new_radio_nl+0xea4/0x1b10
[  715.695254][T12705]  ? __pfx___nla_validate_parse+0x10/0x10
[  715.695283][T12705]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  715.695310][T12705]  ? __nla_parse+0x40/0x60
[  715.695333][T12705]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  715.695359][T12705]  genl_family_rcv_msg_doit+0x215/0x300
[  715.695425][T12705]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  715.695455][T12705]  ? bpf_lsm_capable+0x9/0x20
[  715.695474][T12705]  ? security_capable+0x7e/0x2e0
[  715.695500][T12705]  genl_rcv_msg+0x60e/0x790
[  715.695521][T12705]  ? __pfx_genl_rcv_msg+0x10/0x10
[  715.695538][T12705]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  715.695567][T12705]  netlink_rcv_skb+0x208/0x470
[  715.695586][T12705]  ? __lock_acquire+0xab9/0xd20
[  715.695607][T12705]  ? __pfx_genl_rcv_msg+0x10/0x10
[  715.695625][T12705]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  715.695658][T12705]  ? down_read+0x1ad/0x2e0
[  715.695673][T12705]  genl_rcv+0x28/0x40
[  715.695688][T12705]  netlink_unicast+0x82f/0x9e0
[  715.695713][T12705]  ? __pfx_netlink_unicast+0x10/0x10
[  715.695734][T12705]  ? netlink_sendmsg+0x642/0xb30
[  715.695753][T12705]  ? skb_put+0x11b/0x210
[  715.695770][T12705]  netlink_sendmsg+0x805/0xb30
[  715.695801][T12705]  ? __pfx_netlink_sendmsg+0x10/0x10
[  715.695825][T12705]  ? aa_sock_msg_perm+0xf1/0x1d0
[  715.695841][T12705]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  715.695856][T12705]  ? __pfx_netlink_sendmsg+0x10/0x10
[  715.695879][T12705]  __sock_sendmsg+0x21c/0x270
[  715.695901][T12705]  ____sys_sendmsg+0x505/0x830
[  715.695922][T12705]  ? __pfx_____sys_sendmsg+0x10/0x10
[  715.695946][T12705]  ? import_iovec+0x74/0xa0
[  715.695967][T12705]  ___sys_sendmsg+0x21f/0x2a0
[  715.695997][T12705]  ? __pfx____sys_sendmsg+0x10/0x10
[  715.696041][T12705]  ? __fget_files+0x2a/0x420
[  715.696062][T12705]  ? __fget_files+0x3a0/0x420
[  715.696107][T12705]  __x64_sys_sendmsg+0x19b/0x260
[  715.696127][T12705]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  715.696153][T12705]  ? rcu_is_watching+0x15/0xb0
[  715.696174][T12705]  ? do_syscall_64+0xbe/0x3b0
[  715.696199][T12705]  do_syscall_64+0xfa/0x3b0
[  715.696219][T12705]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.696239][T12705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.696253][T12705]  ? exc_page_fault+0x9f/0xf0
[  715.696273][T12705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.696286][T12705] RIP: 0033:0x7f600798ebe9
[  715.696301][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  715.696314][T12705] RSP: 002b:00007f60087b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  715.696330][T12705] RAX: ffffffffffffffda RBX: 00007f6007bb5fa0 RCX: 00007f600798ebe9
[  715.696342][T12705] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  715.696352][T12705] RBP: 00007f6007a11e19 R08: 0000000000000000 R09: 0000000000000000
[  715.696361][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  715.696406][T12705] R13: 00007f6007bb6038 R14: 00007f6007bb5fa0 R15: 00007ffc45deaee8
[  715.696434][T12705]  </TASK>
[  715.878711][T12700] netlink: 'syz.0.10273': attribute type 10 has an invalid length.
[  716.086538][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10280'.
[  716.142834][T12725] batadv_slave_0: entered promiscuous mode
[  716.579739][T12754] netlink: 'syz.1.10287': attribute type 10 has an invalid length.
[  716.903591][T12751] lo speed is unknown, defaulting to 1000
[  717.164970][T12784] netlink: 'syz.1.10293': attribute type 23 has an invalid length.
[  717.176051][T12785] wlan0: renamed from bridge0
[  717.187249][T12785] wlan0: entered promiscuous mode
[  717.205530][T12785] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  717.642157][T12807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10301'.
[  717.954421][T12813] netlink: 'syz.2.10304': attribute type 9 has an invalid length.
[  717.957165][T12813] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10304'.
[  718.144003][T12842] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10309'.
[  719.070406][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10315'.
[  719.078274][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10315'.
[  719.085191][T12867] siw: device registration error -23
[  719.209666][T12885] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  719.214686][T12885] CPU: 0 UID: 0 PID: 12885 Comm: syz.0.10320 Not tainted syzkaller #0 PREEMPT(full) 
[  719.214709][T12885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  719.214719][T12885] Call Trace:
[  719.214726][T12885]  <TASK>
[  719.214734][T12885]  dump_stack_lvl+0x189/0x250
[  719.214761][T12885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  719.214779][T12885]  ? __pfx__printk+0x10/0x10
[  719.214805][T12885]  ? kernfs_path_from_node+0x2f/0x290
[  719.214821][T12885]  ? kernfs_path_from_node+0x250/0x290
[  719.214835][T12885]  ? kernfs_path_from_node+0x2f/0x290
[  719.214854][T12885]  sysfs_warn_dup+0x8e/0xa0
[  719.214870][T12885]  sysfs_do_create_link_sd+0xc0/0x110
[  719.214888][T12885]  device_add_class_symlinks+0x1cf/0x240
[  719.214908][T12885]  device_add+0x475/0xb50
[  719.214927][T12885]  wiphy_register+0x1ba6/0x28d0
[  719.214962][T12885]  ? __pfx_wiphy_register+0x10/0x10
[  719.214982][T12885]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  719.215005][T12885]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  719.215025][T12885]  ieee80211_register_hw+0x3425/0x4080
[  719.215055][T12885]  ? ieee80211_register_hw+0x1471/0x4080
[  719.215078][T12885]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  719.215097][T12885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  719.215163][T12885]  ? __hrtimer_setup+0x187/0x210
[  719.215178][T12885]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  719.215204][T12885]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  719.215249][T12885]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  719.215267][T12885]  ? trace_kmalloc+0x1f/0xd0
[  719.215284][T12885]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  719.215304][T12885]  ? kstrndup+0xbf/0x160
[  719.215327][T12885]  hwsim_new_radio_nl+0xea4/0x1b10
[  719.215348][T12885]  ? __pfx___nla_validate_parse+0x10/0x10
[  719.215382][T12885]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  719.215412][T12885]  ? __nla_parse+0x40/0x60
[  719.215438][T12885]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  719.215464][T12885]  genl_family_rcv_msg_doit+0x215/0x300
[  719.215487][T12885]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  719.215515][T12885]  ? bpf_lsm_capable+0x9/0x20
[  719.215534][T12885]  ? security_capable+0x7e/0x2e0
[  719.215560][T12885]  genl_rcv_msg+0x60e/0x790
[  719.215584][T12885]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.215600][T12885]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  719.215631][T12885]  netlink_rcv_skb+0x208/0x470
[  719.215651][T12885]  ? __lock_acquire+0xab9/0xd20
[  719.215672][T12885]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.215704][T12885]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  719.215742][T12885]  ? down_read+0x1ad/0x2e0
[  719.215760][T12885]  genl_rcv+0x28/0x40
[  719.215776][T12885]  netlink_unicast+0x82f/0x9e0
[  719.215803][T12885]  ? __pfx_netlink_unicast+0x10/0x10
[  719.215839][T12885]  ? netlink_sendmsg+0x642/0xb30
[  719.215860][T12885]  ? skb_put+0x11b/0x210
[  719.215879][T12885]  netlink_sendmsg+0x805/0xb30
[  719.215907][T12885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.215931][T12885]  ? aa_sock_msg_perm+0xf1/0x1d0
[  719.215947][T12885]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  719.215962][T12885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.215989][T12885]  __sock_sendmsg+0x21c/0x270
[  719.216012][T12885]  ____sys_sendmsg+0x505/0x830
[  719.216033][T12885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  719.216057][T12885]  ? import_iovec+0x74/0xa0
[  719.216077][T12885]  ___sys_sendmsg+0x21f/0x2a0
[  719.216095][T12885]  ? __pfx____sys_sendmsg+0x10/0x10
[  719.216186][T12885]  ? __fget_files+0x2a/0x420
[  719.216209][T12885]  ? __fget_files+0x3a0/0x420
[  719.216240][T12885]  __x64_sys_sendmsg+0x19b/0x260
[  719.216259][T12885]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  719.216284][T12885]  ? rcu_is_watching+0x15/0xb0
[  719.216303][T12885]  ? do_syscall_64+0xbe/0x3b0
[  719.216329][T12885]  do_syscall_64+0xfa/0x3b0
[  719.216350][T12885]  ? lockdep_hardirqs_on+0x9c/0x150
[  719.216369][T12885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.216383][T12885]  ? exc_page_fault+0x9f/0xf0
[  719.216405][T12885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.216419][T12885] RIP: 0033:0x7f31cbb8ebe9
[  719.216434][T12885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  719.216446][T12885] RSP: 002b:00007f31cc94d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.216463][T12885] RAX: ffffffffffffffda RBX: 00007f31cbdb5fa0 RCX: 00007f31cbb8ebe9
[  719.216474][T12885] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  719.216485][T12885] RBP: 00007f31cbc11e19 R08: 0000000000000000 R09: 0000000000000000
[  719.216495][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.216503][T12885] R13: 00007f31cbdb6038 R14: 00007f31cbdb5fa0 R15: 00007ffe56a4b7c8
[  719.216528][T12885]  </TASK>
[  719.455889][T12891] netlink: 'syz.0.10322': attribute type 1 has an invalid length.
[  719.461382][T12891] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  719.744342][T12905] netlink: 'syz.0.10324': attribute type 10 has an invalid length.
[  719.988960][T12888] lo speed is unknown, defaulting to 1000
[  720.443664][T12956] netlink: 'syz.0.10335': attribute type 1 has an invalid length.
[  720.672205][T12959] netlink: 'syz.1.10334': attribute type 10 has an invalid length.
[  720.813495][T12964] netlink: 'syz.0.10336': attribute type 10 has an invalid length.
[  720.924466][T12993] __nla_validate_parse: 3 callbacks suppressed
[  720.924480][T12993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10341'.
[  720.932688][T12985] block nbd6: server does not support multiple connections per device.
[  720.935396][T12985] block nbd6: shutting down sockets
[  720.940913][T12991] netlink: 'syz.0.10339': attribute type 11 has an invalid length.
[  721.300424][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10350'.
[  721.313444][T12999] lo speed is unknown, defaulting to 1000
[  721.729886][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10357'.
[  721.740754][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10357'.
[  721.806295][T13043] netlink: 'syz.1.10359': attribute type 23 has an invalid length.
[  721.819727][T13044] netlink: 'syz.1.10359': attribute type 23 has an invalid length.
[  721.966470][T13051] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  721.978770][T13052] netlink: 'syz.1.10360': attribute type 13 has an invalid length.
[  721.982154][T13052] netlink: 'syz.1.10360': attribute type 17 has an invalid length.
[  722.000332][T13052] 8021q: adding VLAN 0 to HW filter on device team0
[  722.008602][T13052] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  722.099281][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10364'.
[  722.109958][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10364'.
[  722.118156][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10364'.
[  722.121135][T13056] netlink: 34 bytes leftover after parsing attributes in process `syz.2.10364'.
[  722.492221][T13052] lo speed is unknown, defaulting to 1000
[  722.866983][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10369'.
[  722.870584][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10369'.
[  722.977998][T13083] netlink: 'syz.2.10370': attribute type 13 has an invalid length.
[  723.017147][T13083] wlan0: left promiscuous mode
[  723.023701][T13083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  723.030219][   T24] lo speed is unknown, defaulting to 1000
[  723.035196][   T24] syz2: Port: 1 Link ACTIVE
[  723.417413][T13097] ksmbd: Unknown IPC event: 10, ignore.
[  723.451468][T13082] lo speed is unknown, defaulting to 1000
[  725.091101][T13158] lo speed is unknown, defaulting to 1000
[  725.335578][T13196] validate_nla: 1 callbacks suppressed
[  725.335590][T13196] netlink: 'syz.0.10399': attribute type 9 has an invalid length.
[  725.769408][T13217] netlink: 'syz.0.10401': attribute type 10 has an invalid length.
[  725.845502][T13220] netlink: 'syz.2.10402': attribute type 1 has an invalid length.
[  725.859538][T13222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  726.044826][T13199] lo speed is unknown, defaulting to 1000
[  726.358645][T13253] __nla_validate_parse: 11 callbacks suppressed
[  726.358662][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10406'.
[  726.372171][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10406'.
[  726.567876][T13235] lo speed is unknown, defaulting to 1000
[  726.692223][T13267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10411'.
[  727.080465][T13267] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  727.197331][T13293] netlink: 'syz.2.10414': attribute type 10 has an invalid length.
[  727.214766][T13293] netlink: 'syz.2.10414': attribute type 10 has an invalid length.
[  727.221492][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10414'.
[  727.614138][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10418'.
[  727.907136][T13290] lo speed is unknown, defaulting to 1000
[  728.207786][T13292] lo speed is unknown, defaulting to 1000
[  729.139052][T13357] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  729.184924][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10428'.
[  729.304596][T13371] pimreg: entered allmulticast mode
[  729.323535][T13371] pimreg: left allmulticast mode
[  730.079911][T13401] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10435'.
[  730.143001][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10435'.
[  730.205192][T13406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  730.208099][T13406] IPv6: NLM_F_CREATE should be set when creating new route
[  730.225399][T13406] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10436'.
[  730.557919][T13423] tipc: Resetting bearer <ib:ip6gre0>
[  730.578198][T13423] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  730.581338][T13423] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  730.585911][ T5910] lo speed is unknown, defaulting to 1000
[  730.587960][ T5910] syz2: Port: 1 Link DOWN
[  730.967573][T13457] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  730.971642][T13457] CPU: 0 UID: 0 PID: 13457 Comm: syz.1.10449 Not tainted syzkaller #0 PREEMPT(full) 
[  730.971670][T13457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  730.971677][T13457] Call Trace:
[  730.971682][T13457]  <TASK>
[  730.971687][T13457]  dump_stack_lvl+0x189/0x250
[  730.971705][T13457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  730.971715][T13457]  ? __pfx__printk+0x10/0x10
[  730.971730][T13457]  ? kernfs_path_from_node+0x2f/0x290
[  730.971740][T13457]  ? kernfs_path_from_node+0x250/0x290
[  730.971748][T13457]  ? kernfs_path_from_node+0x2f/0x290
[  730.971758][T13457]  sysfs_warn_dup+0x8e/0xa0
[  730.971772][T13457]  sysfs_do_create_link_sd+0xc0/0x110
[  730.971784][T13457]  device_add_class_symlinks+0x1cf/0x240
[  730.971797][T13457]  device_add+0x475/0xb50
[  730.971807][T13457]  wiphy_register+0x1ba6/0x28d0
[  730.971828][T13457]  ? __pfx_wiphy_register+0x10/0x10
[  730.971839][T13457]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  730.971852][T13457]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  730.971864][T13457]  ieee80211_register_hw+0x3425/0x4080
[  730.971881][T13457]  ? ieee80211_register_hw+0x1471/0x4080
[  730.971894][T13457]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  730.971904][T13457]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  730.971919][T13457]  ? __hrtimer_setup+0x187/0x210
[  730.971927][T13457]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  730.971940][T13457]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  730.971966][T13457]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  730.971977][T13457]  ? trace_kmalloc+0x1f/0xd0
[  730.971986][T13457]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  730.971997][T13457]  ? kstrndup+0xbf/0x160
[  730.972010][T13457]  hwsim_new_radio_nl+0xea4/0x1b10
[  730.972022][T13457]  ? __pfx___nla_validate_parse+0x10/0x10
[  730.972041][T13457]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  730.972058][T13457]  ? __nla_parse+0x40/0x60
[  730.972071][T13457]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  730.972085][T13457]  genl_family_rcv_msg_doit+0x215/0x300
[  730.972099][T13457]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  730.972115][T13457]  ? bpf_lsm_capable+0x9/0x20
[  730.972126][T13457]  ? security_capable+0x7e/0x2e0
[  730.972141][T13457]  genl_rcv_msg+0x60e/0x790
[  730.972153][T13457]  ? __pfx_genl_rcv_msg+0x10/0x10
[  730.972162][T13457]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  730.972179][T13457]  netlink_rcv_skb+0x208/0x470
[  730.972190][T13457]  ? __lock_acquire+0xab9/0xd20
[  730.972202][T13457]  ? __pfx_genl_rcv_msg+0x10/0x10
[  730.972212][T13457]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  730.972233][T13457]  ? down_read+0x1ad/0x2e0
[  730.972242][T13457]  genl_rcv+0x28/0x40
[  730.972250][T13457]  netlink_unicast+0x82f/0x9e0
[  730.972266][T13457]  ? __pfx_netlink_unicast+0x10/0x10
[  730.972303][T13457]  ? netlink_sendmsg+0x642/0xb30
[  730.972316][T13457]  ? skb_put+0x11b/0x210
[  730.972333][T13457]  netlink_sendmsg+0x805/0xb30
[  730.972351][T13457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  730.972365][T13457]  ? aa_sock_msg_perm+0xf1/0x1d0
[  730.972375][T13457]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  730.972385][T13457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  730.972397][T13457]  __sock_sendmsg+0x21c/0x270
[  730.972410][T13457]  ____sys_sendmsg+0x505/0x830
[  730.972422][T13457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  730.972435][T13457]  ? import_iovec+0x74/0xa0
[  730.972447][T13457]  ___sys_sendmsg+0x21f/0x2a0
[  730.972457][T13457]  ? __pfx____sys_sendmsg+0x10/0x10
[  730.972484][T13457]  ? __fget_files+0x2a/0x420
[  730.972495][T13457]  ? __fget_files+0x3a0/0x420
[  730.972512][T13457]  __x64_sys_sendmsg+0x19b/0x260
[  730.972522][T13457]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  730.972540][T13457]  ? do_syscall_64+0xbe/0x3b0
[  730.972554][T13457]  do_syscall_64+0xfa/0x3b0
[  730.972565][T13457]  ? lockdep_hardirqs_on+0x9c/0x150
[  730.972576][T13457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.972583][T13457]  ? exc_page_fault+0x9f/0xf0
[  730.972596][T13457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.972603][T13457] RIP: 0033:0x7f7d1c58ebe9
[  730.972612][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.972620][T13457] RSP: 002b:00007f7d1d312038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  730.972630][T13457] RAX: ffffffffffffffda RBX: 00007f7d1c7b5fa0 RCX: 00007f7d1c58ebe9
[  730.972636][T13457] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  730.972642][T13457] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  730.972647][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  730.972652][T13457] R13: 00007f7d1c7b6038 R14: 00007f7d1c7b5fa0 R15: 00007fff8b9ade48
[  730.972667][T13457]  </TASK>
[  731.491458][T13447] lo speed is unknown, defaulting to 1000
[  731.617089][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10455'.
[  731.624060][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10455'.
[  731.752646][T13446] lo speed is unknown, defaulting to 1000
[  732.406639][T13490] lo speed is unknown, defaulting to 1000
[  732.698572][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10461'.
[  732.985098][T13532] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  733.444404][T13528] lo speed is unknown, defaulting to 1000
[  733.601379][T13557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10469'.
[  733.606544][T13557] netlink: 'syz.1.10469': attribute type 1 has an invalid length.
[  733.648498][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10469'.
[  733.666216][T13557] 8021q: adding VLAN 0 to HW filter on device bond25
[  734.087613][T13582] netlink: 'syz.1.10475': attribute type 21 has an invalid length.
[  734.090735][T13582] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10475'.
[  734.113915][T13582] netlink: 'syz.1.10475': attribute type 4 has an invalid length.
[  734.119439][T13582] netlink: 'syz.1.10475': attribute type 5 has an invalid length.
[  734.123330][T13582] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10475'.
[  734.467097][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10481'.
[  734.471492][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10481'.
[  734.704529][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10485'.
[  734.998314][T13650] netlink: 'syz.0.10490': attribute type 1 has an invalid length.
[  735.036229][T13650] 8021q: adding VLAN 0 to HW filter on device bond19
[  735.059192][T13650] veth21: entered promiscuous mode
[  735.068811][T13650] bond19: (slave veth21): Enslaving as a backup interface with a down link
[  735.080579][T13650] bond19: (slave veth21): Releasing backup interface
[  735.207042][T13654] netlink: 'syz.2.10491': attribute type 12 has an invalid length.
[  736.015226][T13687] netlink: 'syz.2.10498': attribute type 13 has an invalid length.
[  736.018803][T13687] netlink: 'syz.2.10498': attribute type 17 has an invalid length.
[  736.065497][T13687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  736.073434][   T24] lo speed is unknown, defaulting to 1000
[  736.079214][   T24] syz2: Port: 1 Link ACTIVE
[  736.186945][T13689] netlink: 'syz.0.10499': attribute type 10 has an invalid length.
[  736.347369][T13697] batadv_slave_0: left promiscuous mode
[  736.350219][T13697] macvlan0: left promiscuous mode
[  736.353176][T13697] macsec0: left allmulticast mode
[  736.370081][T13697] bridge19: left promiscuous mode
[  736.373190][T13697] bridge19: left allmulticast mode
[  736.375602][T13697] bridge20: left promiscuous mode
[  736.378193][T13697] bridge20: left allmulticast mode
[  736.387790][T13697] veth21: left promiscuous mode
[  736.427262][T13687] lo speed is unknown, defaulting to 1000
[  737.292505][T13687] syz.2.10498 (13687) used greatest stack depth: 18848 bytes left
[  737.539229][T13727] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20000
[  737.591507][T13727] netlink: 'syz.0.10509': attribute type 1 has an invalid length.
[  737.816852][T13742] __nla_validate_parse: 3 callbacks suppressed
[  737.816869][T13742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10512'.
[  737.898698][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10514'.
[  738.172526][T13769] mac80211_hwsim hwsim707 wlan1: entered allmulticast mode
[  738.184156][T13756] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.10516'.
[  738.311546][T13773] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  738.316186][T13773] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  738.830163][T13797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10524'.
[  738.990169][T13796] lo speed is unknown, defaulting to 1000
[  739.148445][T13806] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10525'.
[  739.387599][T13811] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10528'.
[  739.946381][T13802] lo speed is unknown, defaulting to 1000
[  740.119133][T13848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10537'.
[  740.636998][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10545'.
[  740.705697][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10547'.
[  740.711353][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10547'.
[  741.376632][T13891] lo speed is unknown, defaulting to 1000
[  741.507244][T13920] validate_nla: 5 callbacks suppressed
[  741.507262][T13920] netlink: 'syz.0.10558': attribute type 9 has an invalid length.
[  741.786750][T13926] mac80211_hwsim hwsim706 wlan0: entered promiscuous mode
[  741.789864][T13926] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  742.418795][T13956] syz.2.10568: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  742.426420][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.2.10568 Not tainted syzkaller #0 PREEMPT(full) 
[  742.426443][T13956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  742.426452][T13956] Call Trace:
[  742.426489][T13956]  <TASK>
[  742.426498][T13956]  dump_stack_lvl+0x189/0x250
[  742.426524][T13956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  742.426544][T13956]  ? __pfx__printk+0x10/0x10
[  742.426576][T13956]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  742.426596][T13956]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  742.426615][T13956]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  742.426633][T13956]  warn_alloc+0x214/0x310
[  742.426657][T13956]  ? stack_depot_save_flags+0x40/0x860
[  742.426679][T13956]  ? __pfx_warn_alloc+0x10/0x10
[  742.426703][T13956]  ? kasan_save_track+0x4f/0x80
[  742.426722][T13956]  ? xskq_create+0x56/0x170
[  742.426739][T13956]  ? xsk_init_queue+0xb0/0x110
[  742.426754][T13956]  ? xsk_setsockopt+0x4dc/0x8d0
[  742.426768][T13956]  ? do_sock_setsockopt+0x17c/0x1b0
[  742.426782][T13956]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  742.426794][T13956]  ? do_syscall_64+0xfa/0x3b0
[  742.426811][T13956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.426832][T13956]  __vmalloc_node_range_noprof+0x125/0x12f0
[  742.426874][T13956]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  742.426895][T13956]  ? xskq_create+0x56/0x170
[  742.426913][T13956]  ? __kasan_kmalloc+0x93/0xb0
[  742.426933][T13956]  vmalloc_user_noprof+0xad/0xf0
[  742.426951][T13956]  ? xskq_create+0xbf/0x170
[  742.426969][T13956]  xskq_create+0xbf/0x170
[  742.426989][T13956]  xsk_init_queue+0xb0/0x110
[  742.427007][T13956]  xsk_setsockopt+0x4dc/0x8d0
[  742.427028][T13956]  ? __pfx_xsk_setsockopt+0x10/0x10
[  742.427045][T13956]  ? __pfx_aa_sk_perm+0x10/0x10
[  742.427064][T13956]  ? aa_sock_opt_perm+0xff/0x1b0
[  742.427080][T13956]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  742.427094][T13956]  ? __pfx_xsk_setsockopt+0x10/0x10
[  742.427112][T13956]  do_sock_setsockopt+0x17c/0x1b0
[  742.427132][T13956]  __x64_sys_setsockopt+0x13f/0x1b0
[  742.427151][T13956]  do_syscall_64+0xfa/0x3b0
[  742.427170][T13956]  ? lockdep_hardirqs_on+0x9c/0x150
[  742.427189][T13956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.427213][T13956]  ? exc_page_fault+0x9f/0xf0
[  742.427234][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.427248][T13956] RIP: 0033:0x7f600798ebe9
[  742.427265][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.427278][T13956] RSP: 002b:00007f6008790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  742.427296][T13956] RAX: ffffffffffffffda RBX: 00007f6007bb6090 RCX: 00007f600798ebe9
[  742.427308][T13956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  742.427317][T13956] RBP: 00007f6007a11e19 R08: 0000000000000004 R09: 0000000000000000
[  742.427326][T13956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.427336][T13956] R13: 00007f6007bb6128 R14: 00007f6007bb6090 R15: 00007ffc45deaee8
[  742.427359][T13956]  </TASK>
[  742.427367][T13956] Mem-Info:
[  742.437829][T13957] netlink: 'syz.1.10567': attribute type 7 has an invalid length.
[  742.441817][T13956] active_anon:4069 inactive_anon:0 isolated_anon:0
[  742.441817][T13956]  active_file:1801 inactive_file:38478 isolated_file:0
[  742.441817][T13956]  unevictable:1819 dirty:147 writeback:0
[  742.441817][T13956]  slab_reclaimable:23277 slab_unreclaimable:190842
[  742.441817][T13956]  mapped:18450 shmem:2538 pagetables:879
[  742.441817][T13956]  sec_pagetables:0 bounce:0
[  742.441817][T13956]  kernel_misc_reclaimable:0
[  742.441817][T13956]  free:143073 free_pcp:20331 free_cma:0
[  742.442391][T13957] netlink: 'syz.1.10567': attribute type 8 has an invalid length.
[  742.444116][T13956] Node 0 active_anon:10508kB inactive_anon:0kB active_file:3848kB inactive_file:20416kB unevictable:3604kB isolated(anon):0kB isolated(file):0kB mapped:33988kB dirty:240kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6584kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  742.452323][T13957] syz_tun: entered promiscuous mode
[  742.602032][T13956] Node 1 active_anon:5780kB inactive_anon:0kB active_file:3360kB inactive_file:133496kB unevictable:3600kB isolated(anon):0kB isolated(file):0kB mapped:42196kB dirty:352kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6864kB pagetables:1480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  742.617748][T13956] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:124kB free_cma:0kB
[  742.635952][T13956] lowmem_reserve[]: 0 811 811 811 811
[  742.638286][T13956] Node 0 DMA32 free:105380kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10528kB inactive_anon:0kB active_file:3844kB inactive_file:20416kB unevictable:3536kB writepending:240kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:26988kB local_pcp:12484kB free_cma:0kB
[  742.650557][T13957] syz_tun: left promiscuous mode
[  742.652865][T13956] lowmem_reserve[]: 0 0 0 0 0
[  742.654792][T13956] Node 1 DMA32 free:389736kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16764kB local_pcp:4772kB free_cma:0kB
[  742.668735][T13956] lowmem_reserve[]: 0 0 854 854 854
[  742.671023][T13956] Node 1 Normal free:61120kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5768kB inactive_anon:0kB active_file:3360kB inactive_file:133488kB unevictable:3600kB writepending:352kB present:1048576kB managed:874952kB mlocked:64kB bounce:0kB free_pcp:37756kB local_pcp:18152kB free_cma:0kB
[  742.685812][T13956] lowmem_reserve[]: 0 0 0 0 0
[  742.687991][T13956] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  742.694297][T13956] Node 0 DMA32: 811*4kB (ME) 1131*8kB (UME) 334*16kB (UME) 518*32kB (UM) 162*64kB (UME) 43*128kB (UM) 26*256kB (UME) 9*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 9*4096kB (UM) = 105380kB
[  742.704790][T13956] Node 1 DMA32: 138*4kB (UME) 126*8kB (UM) 117*16kB (UME) 124*32kB (UME) 76*64kB (UM) 39*128kB (UME) 29*256kB (UM) 11*512kB (UME) 5*1024kB (ME) 5*2048kB (UME) 84*4096kB (UM) = 389736kB
[  742.712194][T13956] Node 1 Normal: 320*4kB (UM) 466*8kB (UM) 33*16kB (UME) 241*32kB (UM) 114*64kB (UME) 31*128kB (UM) 33*256kB (UME) 3*512kB (M) 6*1024kB (ME) 8*2048kB (UME) 1*4096kB (M) = 61120kB
[  742.769676][T13956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  742.776243][T13956] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  742.780529][T13956] 42817 total pagecache pages
[  742.785613][T13956] 0 pages in swap cache
[  742.787486][T13956] Free swap  = 124996kB
[  742.789277][T13956] Total swap = 124996kB
[  742.791478][T13956] 786301 pages RAM
[  742.793667][T13956] 0 pages HighMem/MovableOnly
[  742.796143][T13956] 241337 pages reserved
[  742.797955][T13956] 0 pages cma reserved
[  743.006471][T13979] netlink: 'syz.1.10573': attribute type 1 has an invalid length.
[  743.008897][T13979] __nla_validate_parse: 8 callbacks suppressed
[  743.008906][T13979] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10573'.
[  743.018548][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10573'.
[  743.022136][T13979] nbd: couldn't find a device at index 65546
[  743.074013][T13950] lo speed is unknown, defaulting to 1000
[  743.637731][T14006] IPVS: set_ctl: invalid protocol: 123 172.20.20.170:20003
[  743.711885][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10578'.
[  743.732331][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10578'.
[  743.789570][T14016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10580'.
[  743.914576][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10583'.
[  743.917813][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10583'.
[  744.335251][T14030] lo speed is unknown, defaulting to 1000
[  744.511412][T14041] syzkaller1: entered promiscuous mode
[  744.515660][T14041] syzkaller1: entered allmulticast mode
[  744.648805][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10586'.
[  744.662186][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10586'.
[  744.719878][T14055] wlan0: entered promiscuous mode
[  744.724707][T14055] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  744.826522][T14035] lo speed is unknown, defaulting to 1000
[  745.390043][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10598'.
[  746.078717][T14141] tipc: Resetting bearer <ib:ip6gre0>
[  746.097929][T14141] wlan0: left promiscuous mode
[  746.108179][T14141] mac80211_hwsim hwsim707 wlan1: left allmulticast mode
[  746.119012][ T5910] lo speed is unknown, defaulting to 1000
[  746.121337][ T5910] syz2: Port: 1 Link DOWN
[  746.485614][T14170] mac80211_hwsim hwsim707 wlan1: entered allmulticast mode
[  746.498368][T14170] netlink: 'syz.2.10621': attribute type 10 has an invalid length.
[  746.514310][T14170] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  746.518031][T14170] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  746.530825][T14172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  747.210823][T14174] netlink: 'syz.1.10623': attribute type 7 has an invalid length.
[  747.213910][T14174] netlink: 'syz.1.10623': attribute type 8 has an invalid length.
[  747.216452][T14174] netlink: 'syz.1.10623': attribute type 15 has an invalid length.
[  747.785912][T14193] lo speed is unknown, defaulting to 1000
[  748.025778][T14200] netlink: 'syz.0.10630': attribute type 11 has an invalid length.
[  748.240879][T14206] __nla_validate_parse: 1 callbacks suppressed
[  748.240891][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10634'.
[  748.648056][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10640'.
[  748.679100][T14233] mac80211_hwsim hwsim708 wlan1: entered promiscuous mode
[  748.743640][T14240] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10643'.
[  748.843262][T14242] wlan0: entered promiscuous mode
[  748.845618][T14242] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  748.851168][T14243] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  748.936847][T14246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10645'.
[  748.940676][T14248] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  748.946238][T14248] CPU: 1 UID: 0 PID: 14248 Comm: syz.2.10646 Not tainted syzkaller #0 PREEMPT(full) 
[  748.946258][T14248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  748.946267][T14248] Call Trace:
[  748.946274][T14248]  <TASK>
[  748.946281][T14248]  dump_stack_lvl+0x189/0x250
[  748.946305][T14248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  748.946322][T14248]  ? __pfx__printk+0x10/0x10
[  748.946345][T14248]  ? kernfs_path_from_node+0x2f/0x290
[  748.946360][T14248]  ? kernfs_path_from_node+0x250/0x290
[  748.946381][T14248]  ? kernfs_path_from_node+0x2f/0x290
[  748.946400][T14248]  sysfs_warn_dup+0x8e/0xa0
[  748.946415][T14248]  sysfs_do_create_link_sd+0xc0/0x110
[  748.946431][T14248]  device_add_class_symlinks+0x1cf/0x240
[  748.946445][T14248]  device_add+0x475/0xb50
[  748.946464][T14248]  wiphy_register+0x1ba6/0x28d0
[  748.946494][T14248]  ? __pfx_wiphy_register+0x10/0x10
[  748.946510][T14248]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  748.946531][T14248]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  748.946550][T14248]  ieee80211_register_hw+0x3425/0x4080
[  748.946579][T14248]  ? ieee80211_register_hw+0x1471/0x4080
[  748.946597][T14248]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  748.946612][T14248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  748.946635][T14248]  ? __hrtimer_setup+0x187/0x210
[  748.946647][T14248]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  748.946670][T14248]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  748.946718][T14248]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  748.946733][T14248]  ? trace_kmalloc+0x1f/0xd0
[  748.946748][T14248]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  748.946767][T14248]  ? kstrndup+0xbf/0x160
[  748.946790][T14248]  hwsim_new_radio_nl+0xea4/0x1b10
[  748.946810][T14248]  ? __pfx___nla_validate_parse+0x10/0x10
[  748.946843][T14248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  748.946871][T14248]  ? __nla_parse+0x40/0x60
[  748.946894][T14248]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  748.946919][T14248]  genl_family_rcv_msg_doit+0x215/0x300
[  748.946940][T14248]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  748.946966][T14248]  ? bpf_lsm_capable+0x9/0x20
[  748.947019][T14248]  ? security_capable+0x7e/0x2e0
[  748.947045][T14248]  genl_rcv_msg+0x60e/0x790
[  748.947067][T14248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  748.947082][T14248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  748.947112][T14248]  netlink_rcv_skb+0x208/0x470
[  748.947135][T14248]  ? __lock_acquire+0xab9/0xd20
[  748.947155][T14248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  748.947172][T14248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  748.947222][T14248]  ? down_read+0x1ad/0x2e0
[  748.947237][T14248]  genl_rcv+0x28/0x40
[  748.947250][T14248]  netlink_unicast+0x82f/0x9e0
[  748.947275][T14248]  ? __pfx_netlink_unicast+0x10/0x10
[  748.947295][T14248]  ? netlink_sendmsg+0x642/0xb30
[  748.947313][T14248]  ? skb_put+0x11b/0x210
[  748.947330][T14248]  netlink_sendmsg+0x805/0xb30
[  748.947358][T14248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  748.947381][T14248]  ? aa_sock_msg_perm+0xf1/0x1d0
[  748.947395][T14248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  748.947410][T14248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  748.947430][T14248]  __sock_sendmsg+0x21c/0x270
[  748.947452][T14248]  ____sys_sendmsg+0x505/0x830
[  748.947473][T14248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  748.947496][T14248]  ? import_iovec+0x74/0xa0
[  748.947515][T14248]  ___sys_sendmsg+0x21f/0x2a0
[  748.947532][T14248]  ? __pfx____sys_sendmsg+0x10/0x10
[  748.947577][T14248]  ? __fget_files+0x2a/0x420
[  748.947598][T14248]  ? __fget_files+0x3a0/0x420
[  748.947626][T14248]  __x64_sys_sendmsg+0x19b/0x260
[  748.947644][T14248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  748.947673][T14248]  ? rcu_is_watching+0x15/0xb0
[  748.947693][T14248]  ? do_syscall_64+0xbe/0x3b0
[  748.947717][T14248]  do_syscall_64+0xfa/0x3b0
[  748.947752][T14248]  ? lockdep_hardirqs_on+0x9c/0x150
[  748.947771][T14248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.947785][T14248]  ? exc_page_fault+0x9f/0xf0
[  748.947805][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.947817][T14248] RIP: 0033:0x7f600798ebe9
[  748.947832][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  748.947844][T14248] RSP: 002b:00007f60087b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  748.947860][T14248] RAX: ffffffffffffffda RBX: 00007f6007bb5fa0 RCX: 00007f600798ebe9
[  748.947870][T14248] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  748.947879][T14248] RBP: 00007f6007a11e19 R08: 0000000000000000 R09: 0000000000000000
[  748.947887][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  748.947895][T14248] R13: 00007f6007bb6038 R14: 00007f6007bb5fa0 R15: 00007ffc45deaee8
[  748.947919][T14248]  </TASK>
[  749.305128][T14263] syz_tun: entered allmulticast mode
[  749.315619][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10652'.
[  749.318327][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10652'.
[  749.336624][T14262] syz_tun: left allmulticast mode
[  749.366297][T14266] netlink: 'syz.1.10648': attribute type 10 has an invalid length.
[  749.416662][T14275] netlink: 'syz.2.10655': attribute type 23 has an invalid length.
[  749.608451][T14290] netlink: 'syz.0.10659': attribute type 1 has an invalid length.
[  749.630133][T14297] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  749.643549][T14297] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  749.650148][T14297] netlink: 'syz.2.10661': attribute type 10 has an invalid length.
[  749.657616][T14299] netlink: 'syz.0.10662': attribute type 1 has an invalid length.
[  749.699828][T14299] 8021q: adding VLAN 0 to HW filter on device bond20
[  749.920262][T14321] netlink: 'syz.1.10669': attribute type 20 has an invalid length.
[  749.927106][T14322] netlink: 'syz.0.10668': attribute type 1 has an invalid length.
[  749.968131][T14322] 8021q: adding VLAN 0 to HW filter on device bond21
[  749.992774][T14306] lo speed is unknown, defaulting to 1000
[  750.053011][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10670'.
[  750.060938][T14329] mac80211_hwsim hwsim715 wlan0: entered promiscuous mode
[  750.064026][T14329] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  750.312550][T14340] netlink: 'syz.0.10674': attribute type 11 has an invalid length.
[  750.600112][T14352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10676'.
[  750.777428][T14332] lo speed is unknown, defaulting to 1000
[  750.889514][T14374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  751.084698][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10681'.
[  751.087719][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10681'.
[  751.110001][T14357] lo speed is unknown, defaulting to 1000
[  752.008052][T14412] mac80211_hwsim hwsim706 wlan0: left promiscuous mode
[  752.010835][T14412] mac80211_hwsim hwsim708 wlan1: left promiscuous mode
[  752.704535][T14442] veth23: entered promiscuous mode
[  752.748189][T14441] veth23: entered promiscuous mode
[  752.763383][T14420] lo speed is unknown, defaulting to 1000
[  752.940839][T14460] IPVS: stopping backup sync thread 31558 ...
[  753.276261][T14480] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  753.290623][T14480] CPU: 0 UID: 0 PID: 14480 Comm: syz.1.10713 Not tainted syzkaller #0 PREEMPT(full) 
[  753.290644][T14480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  753.290650][T14480] Call Trace:
[  753.290655][T14480]  <TASK>
[  753.290660][T14480]  dump_stack_lvl+0x189/0x250
[  753.290695][T14480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.290708][T14480]  ? __pfx__printk+0x10/0x10
[  753.290723][T14480]  ? kernfs_path_from_node+0x2f/0x290
[  753.290733][T14480]  ? kernfs_path_from_node+0x250/0x290
[  753.290741][T14480]  ? kernfs_path_from_node+0x2f/0x290
[  753.290754][T14480]  sysfs_warn_dup+0x8e/0xa0
[  753.290763][T14480]  sysfs_do_create_link_sd+0xc0/0x110
[  753.290773][T14480]  device_add_class_symlinks+0x1cf/0x240
[  753.290785][T14480]  device_add+0x475/0xb50
[  753.290798][T14480]  wiphy_register+0x1ba6/0x28d0
[  753.290819][T14480]  ? __pfx_wiphy_register+0x10/0x10
[  753.290830][T14480]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  753.290845][T14480]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  753.290856][T14480]  ieee80211_register_hw+0x3425/0x4080
[  753.290874][T14480]  ? ieee80211_register_hw+0x1471/0x4080
[  753.290887][T14480]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  753.290898][T14480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  753.290913][T14480]  ? __hrtimer_setup+0x187/0x210
[  753.290921][T14480]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  753.290934][T14480]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  753.290960][T14480]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  753.290970][T14480]  ? trace_kmalloc+0x1f/0xd0
[  753.290980][T14480]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  753.290992][T14480]  ? kstrndup+0xbf/0x160
[  753.291007][T14480]  hwsim_new_radio_nl+0xea4/0x1b10
[  753.291019][T14480]  ? __pfx___nla_validate_parse+0x10/0x10
[  753.291039][T14480]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  753.291056][T14480]  ? __nla_parse+0x40/0x60
[  753.291069][T14480]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  753.291084][T14480]  genl_family_rcv_msg_doit+0x215/0x300
[  753.291098][T14480]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  753.291114][T14480]  ? bpf_lsm_capable+0x9/0x20
[  753.291125][T14480]  ? security_capable+0x7e/0x2e0
[  753.291140][T14480]  genl_rcv_msg+0x60e/0x790
[  753.291153][T14480]  ? __pfx_genl_rcv_msg+0x10/0x10
[  753.291162][T14480]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  753.291179][T14480]  netlink_rcv_skb+0x208/0x470
[  753.291191][T14480]  ? __lock_acquire+0xab9/0xd20
[  753.291203][T14480]  ? __pfx_genl_rcv_msg+0x10/0x10
[  753.291212][T14480]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  753.291234][T14480]  ? down_read+0x1ad/0x2e0
[  753.291243][T14480]  genl_rcv+0x28/0x40
[  753.291252][T14480]  netlink_unicast+0x82f/0x9e0
[  753.291268][T14480]  ? __pfx_netlink_unicast+0x10/0x10
[  753.291280][T14480]  ? netlink_sendmsg+0x642/0xb30
[  753.291291][T14480]  ? skb_put+0x11b/0x210
[  753.291300][T14480]  netlink_sendmsg+0x805/0xb30
[  753.291317][T14480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.291331][T14480]  ? aa_sock_msg_perm+0xf1/0x1d0
[  753.291340][T14480]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  753.291348][T14480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.291361][T14480]  __sock_sendmsg+0x21c/0x270
[  753.291373][T14480]  ____sys_sendmsg+0x505/0x830
[  753.291385][T14480]  ? __pfx_____sys_sendmsg+0x10/0x10
[  753.291399][T14480]  ? import_iovec+0x74/0xa0
[  753.291410][T14480]  ___sys_sendmsg+0x21f/0x2a0
[  753.291420][T14480]  ? __pfx____sys_sendmsg+0x10/0x10
[  753.291432][T14480]  ? futex_wake+0x4b2/0x560
[  753.291449][T14480]  ? finish_task_switch+0x266/0x950
[  753.291473][T14480]  __x64_sys_sendmsg+0x19b/0x260
[  753.291483][T14480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  753.291517][T14480]  ? rcu_is_watching+0x15/0xb0
[  753.291530][T14480]  ? do_syscall_64+0xbe/0x3b0
[  753.291544][T14480]  do_syscall_64+0xfa/0x3b0
[  753.291558][T14480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.291566][T14480]  ? asm_sysvec_call_function_single+0x1a/0x20
[  753.291578][T14480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.291587][T14480] RIP: 0033:0x7f7d1c58ebe9
[  753.291596][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.291603][T14480] RSP: 002b:00007f7d1d312038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  753.291613][T14480] RAX: ffffffffffffffda RBX: 00007f7d1c7b5fa0 RCX: 00007f7d1c58ebe9
[  753.291620][T14480] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  753.291626][T14480] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  753.291631][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.291642][T14480] R13: 00007f7d1c7b6038 R14: 00007f7d1c7b5fa0 R15: 00007fff8b9ade48
[  753.291657][T14480]  </TASK>
[  753.455945][T14479] ksmbd: Unknown IPC event: 6, ignore.
[  753.633247][T14474] lo speed is unknown, defaulting to 1000
[  753.682470][T14505] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  753.861819][T14513] __nla_validate_parse: 15 callbacks suppressed
[  753.861831][T14513] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10722'.
[  754.060355][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10725'.
[  754.103299][T14507] lo speed is unknown, defaulting to 1000
[  754.309008][T14539] validate_nla: 1 callbacks suppressed
[  754.309021][T14539] netlink: 'syz.1.10729': attribute type 12 has an invalid length.
[  754.313385][T14539] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.10729'.
[  754.381998][T14500] lo speed is unknown, defaulting to 1000
[  754.547466][T14544] netlink: 'syz.0.10728': attribute type 10 has an invalid length.
[  755.253930][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10736'.
[  755.257243][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10736'.
[  755.261314][T14562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10735'.
[  755.266520][T14563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10737'.
[  755.272194][T14562] netlink: 'syz.0.10735': attribute type 10 has an invalid length.
[  755.306958][T14565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10738'.
[  755.679012][T14586] netlink: 'syz.1.10744': attribute type 13 has an invalid length.
[  755.682360][T14586] netlink: 'syz.1.10744': attribute type 17 has an invalid length.
[  755.695026][T14586] 8021q: adding VLAN 0 to HW filter on device team0
[  755.699976][T14586] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  756.703240][T14615] mac80211_hwsim hwsim715 wlan0: left promiscuous mode
[  756.860302][T14630] netlink: 'syz.0.10757': attribute type 13 has an invalid length.
[  756.864023][T14630] netlink: 'syz.0.10757': attribute type 17 has an invalid length.
[  756.866761][T14626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10758'.
[  756.886100][T14630] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  757.295475][T14624] lo speed is unknown, defaulting to 1000
[  757.496680][T14632] lo speed is unknown, defaulting to 1000
[  757.619701][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10759'.
[  757.699028][T14640] mac80211_hwsim hwsim707 wlan1: left allmulticast mode
[  758.460859][T14693] netlink: 'syz.2.10776': attribute type 10 has an invalid length.
[  758.556501][T14698] netlink: 'syz.2.10777': attribute type 10 has an invalid length.
[  758.595899][T14681] lo speed is unknown, defaulting to 1000
[  758.986745][T14725] __nla_validate_parse: 11 callbacks suppressed
[  758.986756][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10786'.
[  758.994571][T14725] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  759.060029][T14728] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  759.090788][T14728] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10787'.
[  759.173500][T14731] netlink: 'syz.0.10788': attribute type 1 has an invalid length.
[  759.447618][T14721] lo speed is unknown, defaulting to 1000
[  759.509653][T14743] netlink: 'syz.0.10793': attribute type 9 has an invalid length.
[  759.521834][T14743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10793'.
[  759.729437][T14744] netlink: 'syz.0.10793': attribute type 9 has an invalid length.
[  759.732956][T14744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10793'.
[  759.763572][T14749] netlink: 'syz.1.10792': attribute type 10 has an invalid length.
[  760.001261][T14764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10798'.
[  760.030981][T14758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  760.034334][T14758] syzkaller0: entered promiscuous mode
[  760.055942][T14758] syzkaller0: entered allmulticast mode
[  760.124935][T14756] tipc: Resetting bearer <eth:syzkaller0>
[  760.159250][T14756] tipc: Disabling bearer <eth:syzkaller0>
[  760.198616][T14773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10801'.
[  760.304240][T14782] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10803'.
[  760.359059][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10805'.
[  760.591516][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10808'.
[  760.673096][T14803] netlink: 'syz.0.10806': attribute type 10 has an invalid length.
[  760.848438][T14811] siw: device registration error -23
[  760.858608][T14811] smc: removing ib device syz0
[  760.908419][T14812] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  760.911587][T14812] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  761.087302][T14816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10814'.
[  761.316825][T14821] netlink: 'syz.1.10816': attribute type 10 has an invalid length.
[  761.721952][T14838] netlink: 'syz.2.10818': attribute type 11 has an invalid length.
[  762.689947][T14857] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  762.702417][T14857] netlink: 'syz.2.10826': attribute type 2 has an invalid length.
[  762.705081][T14857] netlink: 'syz.2.10826': attribute type 1 has an invalid length.
[  762.932802][T14871] netlink: 'syz.0.10829': attribute type 10 has an invalid length.
[  762.954119][T14872] netlink: 'syz.2.10830': attribute type 13 has an invalid length.
[  762.957366][T14872] netlink: 'syz.2.10830': attribute type 17 has an invalid length.
[  763.018872][T14872] wlan0: left promiscuous mode
[  763.025803][T14872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  763.032690][  T793] lo speed is unknown, defaulting to 1000
[  763.035456][  T793] syz2: Port: 1 Link ACTIVE
[  763.936075][T14826] Set syz1 is full, maxelem 65536 reached
[  764.095355][T14896] mac80211_hwsim hwsim715 wlan0: entered promiscuous mode
[  764.098326][T14896] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  764.260853][T14903] __nla_validate_parse: 4 callbacks suppressed
[  764.260873][T14903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10840'.
[  764.546763][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10844'.
[  764.550566][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10844'.
[  764.874695][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10849'.
[  765.481550][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10858'.
[  765.525182][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10861'.
[  765.584945][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10864'.
[  765.590360][T14995] validate_nla: 2 callbacks suppressed
[  765.590372][T14995] netlink: 'syz.0.10864': attribute type 12 has an invalid length.
[  765.596692][T14995] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.10864'.
[  765.668344][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10865'.
[  765.672122][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10865'.
[  765.749300][T15004] openvswitch: netlink: Key type 16144 is out of range max 32
[  766.157830][T15018] mac80211_hwsim hwsim706 wlan0: entered promiscuous mode
[  766.160865][T15018] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  766.280734][T15023] sock: sock_timestamping_bind_phc: sock not bind to device
[  766.284025][T15023] netlink: 'syz.1.10871': attribute type 10 has an invalid length.
[  766.471614][T15025] lo speed is unknown, defaulting to 1000
[  766.617897][T15029] netlink: 'syz.2.10873': attribute type 10 has an invalid length.
[  766.626609][T15029] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  766.630425][T15029] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  767.317613][T15046] batadv_slave_1: entered promiscuous mode
[  767.337224][T15044] batadv_slave_1: left promiscuous mode
[  767.689604][T15063] netlink: 'syz.2.10885': attribute type 10 has an invalid length.
[  767.768313][T15070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  767.816784][T15074] mac80211_hwsim hwsim725 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  767.949710][T15081] netlink: 'syz.1.10891': attribute type 10 has an invalid length.
[  768.090255][T15079] lo speed is unknown, defaulting to 1000
[  768.120066][T15091] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  768.125245][T15091] CPU: 1 UID: 0 PID: 15091 Comm: syz.1.10893 Not tainted syzkaller #0 PREEMPT(full) 
[  768.125266][T15091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  768.125276][T15091] Call Trace:
[  768.125285][T15091]  <TASK>
[  768.125293][T15091]  dump_stack_lvl+0x189/0x250
[  768.125319][T15091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  768.125344][T15091]  ? __pfx__printk+0x10/0x10
[  768.125371][T15091]  ? kernfs_path_from_node+0x2f/0x290
[  768.125388][T15091]  ? kernfs_path_from_node+0x250/0x290
[  768.125403][T15091]  ? kernfs_path_from_node+0x2f/0x290
[  768.125423][T15091]  sysfs_warn_dup+0x8e/0xa0
[  768.125438][T15091]  sysfs_do_create_link_sd+0xc0/0x110
[  768.125456][T15091]  device_add_class_symlinks+0x1cf/0x240
[  768.125476][T15091]  device_add+0x475/0xb50
[  768.125495][T15091]  wiphy_register+0x1ba6/0x28d0
[  768.125532][T15091]  ? __pfx_wiphy_register+0x10/0x10
[  768.125552][T15091]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  768.125574][T15091]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  768.125594][T15091]  ieee80211_register_hw+0x3425/0x4080
[  768.125652][T15091]  ? ieee80211_register_hw+0x1471/0x4080
[  768.125677][T15091]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  768.125697][T15091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  768.125724][T15091]  ? __hrtimer_setup+0x187/0x210
[  768.125737][T15091]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  768.125761][T15091]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  768.125806][T15091]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  768.125823][T15091]  ? trace_kmalloc+0x1f/0xd0
[  768.125842][T15091]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  768.125861][T15091]  ? kstrndup+0xbf/0x160
[  768.125885][T15091]  hwsim_new_radio_nl+0xea4/0x1b10
[  768.125906][T15091]  ? __pfx___nla_validate_parse+0x10/0x10
[  768.125940][T15091]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  768.125971][T15091]  ? __nla_parse+0x40/0x60
[  768.125995][T15091]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  768.126037][T15091]  genl_family_rcv_msg_doit+0x215/0x300
[  768.126063][T15091]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  768.126092][T15091]  ? bpf_lsm_capable+0x9/0x20
[  768.126112][T15091]  ? security_capable+0x7e/0x2e0
[  768.126140][T15091]  genl_rcv_msg+0x60e/0x790
[  768.126163][T15091]  ? __pfx_genl_rcv_msg+0x10/0x10
[  768.126179][T15091]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  768.126210][T15091]  netlink_rcv_skb+0x208/0x470
[  768.126230][T15091]  ? __lock_acquire+0xab9/0xd20
[  768.126251][T15091]  ? __pfx_genl_rcv_msg+0x10/0x10
[  768.126269][T15091]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  768.126307][T15091]  ? down_read+0x1ad/0x2e0
[  768.126328][T15091]  genl_rcv+0x28/0x40
[  768.126342][T15091]  netlink_unicast+0x82f/0x9e0
[  768.126370][T15091]  ? __pfx_netlink_unicast+0x10/0x10
[  768.126392][T15091]  ? netlink_sendmsg+0x642/0xb30
[  768.126411][T15091]  ? skb_put+0x11b/0x210
[  768.126430][T15091]  netlink_sendmsg+0x805/0xb30
[  768.126461][T15091]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.126486][T15091]  ? aa_sock_msg_perm+0xf1/0x1d0
[  768.126502][T15091]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  768.126517][T15091]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.126539][T15091]  __sock_sendmsg+0x21c/0x270
[  768.126562][T15091]  ____sys_sendmsg+0x505/0x830
[  768.126580][T15091]  ? __pfx_____sys_sendmsg+0x10/0x10
[  768.126605][T15091]  ? import_iovec+0x74/0xa0
[  768.126652][T15091]  ___sys_sendmsg+0x21f/0x2a0
[  768.126670][T15091]  ? __pfx____sys_sendmsg+0x10/0x10
[  768.126720][T15091]  ? __fget_files+0x2a/0x420
[  768.126741][T15091]  ? __fget_files+0x3a0/0x420
[  768.126773][T15091]  __x64_sys_sendmsg+0x19b/0x260
[  768.126791][T15091]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  768.126817][T15091]  ? rcu_is_watching+0x15/0xb0
[  768.126837][T15091]  ? do_syscall_64+0xbe/0x3b0
[  768.126861][T15091]  do_syscall_64+0xfa/0x3b0
[  768.126881][T15091]  ? lockdep_hardirqs_on+0x9c/0x150
[  768.126901][T15091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.126915][T15091]  ? exc_page_fault+0x9f/0xf0
[  768.126937][T15091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.126951][T15091] RIP: 0033:0x7f7d1c58ebe9
[  768.126966][T15091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  768.126979][T15091] RSP: 002b:00007f7d1d312038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  768.126996][T15091] RAX: ffffffffffffffda RBX: 00007f7d1c7b5fa0 RCX: 00007f7d1c58ebe9
[  768.127007][T15091] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  768.127017][T15091] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  768.127027][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  768.127036][T15091] R13: 00007f7d1c7b6038 R14: 00007f7d1c7b5fa0 R15: 00007fff8b9ade48
[  768.127062][T15091]  </TASK>
[  768.563096][T15099] lo speed is unknown, defaulting to 1000
[  768.947077][T15117] wlan0: entered promiscuous mode
[  768.961439][T15117] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  769.402440][T15127] __nla_validate_parse: 6 callbacks suppressed
[  769.402457][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10903'.
[  769.407359][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10903'.
[  769.653039][T15155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10909'.
[  769.977425][T15179] netlink: 204 bytes leftover after parsing attributes in process `syz.1.10916'.
[  770.035244][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10916'.
[  770.093766][T15172] netlink: 'syz.0.10914': attribute type 10 has an invalid length.
[  770.148210][T15172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  770.152418][T15172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  770.710948][T15199] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10921'.
[  770.719666][T15199] netlink: 'syz.1.10921': attribute type 11 has an invalid length.
[  770.723382][T15197] netlink: 'syz.2.10920': attribute type 10 has an invalid length.
[  770.792255][T15205] sctp: [Deprecated]: syz.2.10922 (pid 15205) Use of int in maxseg socket option.
[  770.792255][T15205] Use struct sctp_assoc_value instead
[  770.846990][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10923'.
[  770.855910][T15207] IPv6: sit3: Disabled Multicast RS
[  770.859164][T15207] sit3: entered allmulticast mode
[  771.023685][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10926'.
[  771.075267][T15226] sctp: [Deprecated]: syz.0.10928 (pid 15226) Use of int in max_burst socket option deprecated.
[  771.075267][T15226] Use struct sctp_assoc_value instead
[  771.155036][T15236] netlink: 'syz.0.10931': attribute type 1 has an invalid length.
[  771.297346][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10934'.
[  771.301211][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10934'.
[  771.442415][T15247] block nbd6: server does not support multiple connections per device.
[  771.445547][T15247] block nbd6: shutting down sockets
[  771.601884][T15246] block nbd6: server does not support multiple connections per device.
[  771.605193][T15246] block nbd6: shutting down sockets
[  772.074580][T15293] netlink: 'syz.0.10945': attribute type 12 has an invalid length.
[  772.205907][T15299] netlink: 'syz.1.10947': attribute type 10 has an invalid length.
[  772.305933][T15308] netlink: 'syz.0.10950': attribute type 1 has an invalid length.
[  772.309029][T15308] netlink: 'syz.0.10950': attribute type 4 has an invalid length.
[  772.399826][T15314] netlink: 'syz.1.10952': attribute type 10 has an invalid length.
[  772.880580][T15350] netlink: 'syz.1.10962': attribute type 9 has an invalid length.
[  773.099942][T15356] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  773.371644][T15384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  773.375556][T15384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  773.470557][T15376] lo speed is unknown, defaulting to 1000
[  773.496950][T15388] veth1_to_team: entered allmulticast mode
[  773.604016][T15395] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  774.231354][T15425] netlink: 'syz.2.10980': attribute type 9 has an invalid length.
[  774.478121][T15434] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  774.483990][T15434] CPU: 1 UID: 0 PID: 15434 Comm: syz.0.10982 Not tainted syzkaller #0 PREEMPT(full) 
[  774.484010][T15434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  774.484021][T15434] Call Trace:
[  774.484029][T15434]  <TASK>
[  774.484036][T15434]  dump_stack_lvl+0x189/0x250
[  774.484063][T15434]  ? __pfx_dump_stack_lvl+0x10/0x10
[  774.484080][T15434]  ? __pfx__printk+0x10/0x10
[  774.484104][T15434]  ? kernfs_path_from_node+0x2f/0x290
[  774.484120][T15434]  ? kernfs_path_from_node+0x250/0x290
[  774.484135][T15434]  ? kernfs_path_from_node+0x2f/0x290
[  774.484182][T15434]  sysfs_warn_dup+0x8e/0xa0
[  774.484200][T15434]  sysfs_do_create_link_sd+0xc0/0x110
[  774.484218][T15434]  device_add_class_symlinks+0x1cf/0x240
[  774.484236][T15434]  device_add+0x475/0xb50
[  774.484255][T15434]  wiphy_register+0x1ba6/0x28d0
[  774.484290][T15434]  ? __pfx_wiphy_register+0x10/0x10
[  774.484310][T15434]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  774.484334][T15434]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  774.484354][T15434]  ieee80211_register_hw+0x3425/0x4080
[  774.484382][T15434]  ? ieee80211_register_hw+0x1471/0x4080
[  774.484403][T15434]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  774.484422][T15434]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  774.484445][T15434]  ? __hrtimer_setup+0x187/0x210
[  774.484459][T15434]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  774.484481][T15434]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  774.484527][T15434]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  774.484544][T15434]  ? trace_kmalloc+0x1f/0xd0
[  774.484560][T15434]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  774.484580][T15434]  ? kstrndup+0xbf/0x160
[  774.484604][T15434]  hwsim_new_radio_nl+0xea4/0x1b10
[  774.484625][T15434]  ? __pfx___nla_validate_parse+0x10/0x10
[  774.484660][T15434]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  774.484688][T15434]  ? __nla_parse+0x40/0x60
[  774.484711][T15434]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  774.484737][T15434]  genl_family_rcv_msg_doit+0x215/0x300
[  774.484759][T15434]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  774.484786][T15434]  ? bpf_lsm_capable+0x9/0x20
[  774.484805][T15434]  ? security_capable+0x7e/0x2e0
[  774.484832][T15434]  genl_rcv_msg+0x60e/0x790
[  774.484855][T15434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.484871][T15434]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  774.484900][T15434]  netlink_rcv_skb+0x208/0x470
[  774.484918][T15434]  ? __lock_acquire+0xab9/0xd20
[  774.484952][T15434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.484970][T15434]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  774.485030][T15434]  ? down_read+0x1ad/0x2e0
[  774.485048][T15434]  genl_rcv+0x28/0x40
[  774.485064][T15434]  netlink_unicast+0x82f/0x9e0
[  774.485087][T15434]  ? __pfx_netlink_unicast+0x10/0x10
[  774.485109][T15434]  ? netlink_sendmsg+0x642/0xb30
[  774.485126][T15434]  ? skb_put+0x11b/0x210
[  774.485142][T15434]  netlink_sendmsg+0x805/0xb30
[  774.485198][T15434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.485221][T15434]  ? aa_sock_msg_perm+0xf1/0x1d0
[  774.485237][T15434]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  774.485252][T15434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.485275][T15434]  __sock_sendmsg+0x21c/0x270
[  774.485297][T15434]  ____sys_sendmsg+0x505/0x830
[  774.485319][T15434]  ? __pfx_____sys_sendmsg+0x10/0x10
[  774.485343][T15434]  ? import_iovec+0x74/0xa0
[  774.485365][T15434]  ___sys_sendmsg+0x21f/0x2a0
[  774.485383][T15434]  ? __pfx____sys_sendmsg+0x10/0x10
[  774.485432][T15434]  ? __fget_files+0x2a/0x420
[  774.485454][T15434]  ? __fget_files+0x3a0/0x420
[  774.485485][T15434]  __x64_sys_sendmsg+0x19b/0x260
[  774.485503][T15434]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  774.485529][T15434]  ? rcu_is_watching+0x15/0xb0
[  774.485548][T15434]  ? do_syscall_64+0xbe/0x3b0
[  774.485573][T15434]  do_syscall_64+0xfa/0x3b0
[  774.485592][T15434]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.485613][T15434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.485627][T15434]  ? exc_page_fault+0x9f/0xf0
[  774.485648][T15434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.485663][T15434] RIP: 0033:0x7f31cbb8ebe9
[  774.485677][T15434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  774.485690][T15434] RSP: 002b:00007f31cc94d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.485706][T15434] RAX: ffffffffffffffda RBX: 00007f31cbdb5fa0 RCX: 00007f31cbb8ebe9
[  774.485718][T15434] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  774.485728][T15434] RBP: 00007f31cbc11e19 R08: 0000000000000000 R09: 0000000000000000
[  774.485738][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  774.485747][T15434] R13: 00007f31cbdb6038 R14: 00007f31cbdb5fa0 R15: 00007ffe56a4b7c8
[  774.485774][T15434]  </TASK>
[  774.859807][T15455] __nla_validate_parse: 19 callbacks suppressed
[  774.859820][T15455] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10985'.
[  774.877449][T15455] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10985'.
[  774.886673][T15446] mac80211_hwsim hwsim732 wlan0: entered promiscuous mode
[  774.889579][T15446] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  775.354372][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10992'.
[  775.359300][T15480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10992'.
[  775.512356][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10994'.
[  775.548162][T15490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  775.735248][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10999'.
[  775.747865][T15495] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10996'.
[  775.863098][T15511] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  775.867569][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.2.11001 Not tainted syzkaller #0 PREEMPT(full) 
[  775.867582][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  775.867588][T15511] Call Trace:
[  775.867592][T15511]  <TASK>
[  775.867597][T15511]  dump_stack_lvl+0x189/0x250
[  775.867614][T15511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  775.867623][T15511]  ? __pfx__printk+0x10/0x10
[  775.867638][T15511]  ? kernfs_path_from_node+0x2f/0x290
[  775.867647][T15511]  ? kernfs_path_from_node+0x250/0x290
[  775.867654][T15511]  ? kernfs_path_from_node+0x2f/0x290
[  775.867665][T15511]  sysfs_warn_dup+0x8e/0xa0
[  775.867674][T15511]  sysfs_do_create_link_sd+0xc0/0x110
[  775.867684][T15511]  device_add_class_symlinks+0x1cf/0x240
[  775.867695][T15511]  device_add+0x475/0xb50
[  775.867706][T15511]  wiphy_register+0x1ba6/0x28d0
[  775.867726][T15511]  ? __pfx_wiphy_register+0x10/0x10
[  775.867741][T15511]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  775.867769][T15511]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  775.867786][T15511]  ieee80211_register_hw+0x3425/0x4080
[  775.867810][T15511]  ? ieee80211_register_hw+0x1471/0x4080
[  775.867823][T15511]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  775.867834][T15511]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  775.867850][T15511]  ? __hrtimer_setup+0x187/0x210
[  775.867857][T15511]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  775.867871][T15511]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  775.867896][T15511]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  775.867905][T15511]  ? trace_kmalloc+0x1f/0xd0
[  775.867915][T15511]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  775.867925][T15511]  ? kstrndup+0xbf/0x160
[  775.867945][T15511]  hwsim_new_radio_nl+0xea4/0x1b10
[  775.867962][T15511]  ? __pfx___nla_validate_parse+0x10/0x10
[  775.867987][T15511]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  775.868008][T15511]  ? __nla_parse+0x40/0x60
[  775.868026][T15511]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  775.868049][T15511]  genl_family_rcv_msg_doit+0x215/0x300
[  775.868098][T15511]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  775.868124][T15511]  ? bpf_lsm_capable+0x9/0x20
[  775.868140][T15511]  ? security_capable+0x7e/0x2e0
[  775.868161][T15511]  genl_rcv_msg+0x60e/0x790
[  775.868179][T15511]  ? __pfx_genl_rcv_msg+0x10/0x10
[  775.868194][T15511]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  775.868221][T15511]  netlink_rcv_skb+0x208/0x470
[  775.868233][T15511]  ? __lock_acquire+0xab9/0xd20
[  775.868246][T15511]  ? __pfx_genl_rcv_msg+0x10/0x10
[  775.868256][T15511]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  775.868277][T15511]  ? down_read+0x1ad/0x2e0
[  775.868286][T15511]  genl_rcv+0x28/0x40
[  775.868294][T15511]  netlink_unicast+0x82f/0x9e0
[  775.868309][T15511]  ? __pfx_netlink_unicast+0x10/0x10
[  775.868321][T15511]  ? netlink_sendmsg+0x642/0xb30
[  775.868332][T15511]  ? skb_put+0x11b/0x210
[  775.868341][T15511]  netlink_sendmsg+0x805/0xb30
[  775.868358][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.868372][T15511]  ? aa_sock_msg_perm+0xf1/0x1d0
[  775.868380][T15511]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  775.868388][T15511]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.868401][T15511]  __sock_sendmsg+0x21c/0x270
[  775.868414][T15511]  ____sys_sendmsg+0x505/0x830
[  775.868425][T15511]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.868438][T15511]  ? import_iovec+0x74/0xa0
[  775.868450][T15511]  ___sys_sendmsg+0x21f/0x2a0
[  775.868459][T15511]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.868486][T15511]  ? __fget_files+0x2a/0x420
[  775.868497][T15511]  ? __fget_files+0x3a0/0x420
[  775.868514][T15511]  __x64_sys_sendmsg+0x19b/0x260
[  775.868524][T15511]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.868537][T15511]  ? rcu_is_watching+0x15/0xb0
[  775.868548][T15511]  ? do_syscall_64+0xbe/0x3b0
[  775.868563][T15511]  do_syscall_64+0xfa/0x3b0
[  775.868574][T15511]  ? lockdep_hardirqs_on+0x9c/0x150
[  775.868585][T15511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.868593][T15511]  ? exc_page_fault+0x9f/0xf0
[  775.868604][T15511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.868612][T15511] RIP: 0033:0x7f600798ebe9
[  775.868620][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  775.868628][T15511] RSP: 002b:00007f60087b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.868637][T15511] RAX: ffffffffffffffda RBX: 00007f6007bb5fa0 RCX: 00007f600798ebe9
[  775.868643][T15511] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  775.868648][T15511] RBP: 00007f6007a11e19 R08: 0000000000000000 R09: 0000000000000000
[  775.868653][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  775.868658][T15511] R13: 00007f6007bb6038 R14: 00007f6007bb5fa0 R15: 00007ffc45deaee8
[  775.868672][T15511]  </TASK>
[  776.240723][T15527] validate_nla: 3 callbacks suppressed
[  776.240734][T15527] netlink: 'syz.2.11005': attribute type 10 has an invalid length.
[  776.252699][T15527] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11005'.
[  776.271003][T15525] netlink: 'syz.0.11004': attribute type 10 has an invalid length.
[  776.367075][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11007'.
[  776.370774][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11007'.
[  776.481577][T15539] netlink: 'syz.1.11009': attribute type 2 has an invalid length.
[  777.406675][T15604] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  777.776759][T15613] lo speed is unknown, defaulting to 1000
[  777.780075][T15636] netlink: 'syz.2.11034': attribute type 10 has an invalid length.
[  779.291016][T15717] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  779.300635][T15716] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  779.305051][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.0.11055 Not tainted syzkaller #0 PREEMPT(full) 
[  779.305066][T15716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  779.305072][T15716] Call Trace:
[  779.305077][T15716]  <TASK>
[  779.305082][T15716]  dump_stack_lvl+0x189/0x250
[  779.305099][T15716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  779.305110][T15716]  ? __pfx__printk+0x10/0x10
[  779.305125][T15716]  ? kernfs_path_from_node+0x2f/0x290
[  779.305135][T15716]  ? kernfs_path_from_node+0x250/0x290
[  779.305143][T15716]  ? kernfs_path_from_node+0x2f/0x290
[  779.305154][T15716]  sysfs_warn_dup+0x8e/0xa0
[  779.305163][T15716]  sysfs_do_create_link_sd+0xc0/0x110
[  779.305173][T15716]  device_add_class_symlinks+0x1cf/0x240
[  779.305184][T15716]  device_add+0x475/0xb50
[  779.305194][T15716]  wiphy_register+0x1ba6/0x28d0
[  779.305214][T15716]  ? __pfx_wiphy_register+0x10/0x10
[  779.305225][T15716]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  779.305238][T15716]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  779.305250][T15716]  ieee80211_register_hw+0x3425/0x4080
[  779.305268][T15716]  ? ieee80211_register_hw+0x1471/0x4080
[  779.305281][T15716]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  779.305293][T15716]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  779.305307][T15716]  ? __hrtimer_setup+0x187/0x210
[  779.305315][T15716]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  779.305329][T15716]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  779.305354][T15716]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  779.305364][T15716]  ? trace_kmalloc+0x1f/0xd0
[  779.305376][T15716]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  779.305388][T15716]  ? kstrndup+0xbf/0x160
[  779.305402][T15716]  hwsim_new_radio_nl+0xea4/0x1b10
[  779.305413][T15716]  ? __pfx___nla_validate_parse+0x10/0x10
[  779.305433][T15716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  779.305449][T15716]  ? __nla_parse+0x40/0x60
[  779.305463][T15716]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  779.305478][T15716]  genl_family_rcv_msg_doit+0x215/0x300
[  779.305491][T15716]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  779.305507][T15716]  ? bpf_lsm_capable+0x9/0x20
[  779.305517][T15716]  ? security_capable+0x7e/0x2e0
[  779.305534][T15716]  genl_rcv_msg+0x60e/0x790
[  779.305547][T15716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  779.305556][T15716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  779.305573][T15716]  netlink_rcv_skb+0x208/0x470
[  779.305584][T15716]  ? __lock_acquire+0xab9/0xd20
[  779.305605][T15716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  779.305615][T15716]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  779.305637][T15716]  ? down_read+0x1ad/0x2e0
[  779.305647][T15716]  genl_rcv+0x28/0x40
[  779.305656][T15716]  netlink_unicast+0x82f/0x9e0
[  779.305672][T15716]  ? __pfx_netlink_unicast+0x10/0x10
[  779.305685][T15716]  ? netlink_sendmsg+0x642/0xb30
[  779.305696][T15716]  ? skb_put+0x11b/0x210
[  779.305706][T15716]  netlink_sendmsg+0x805/0xb30
[  779.305723][T15716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  779.305736][T15716]  ? aa_sock_msg_perm+0xf1/0x1d0
[  779.305748][T15716]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  779.305759][T15716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  779.305771][T15716]  __sock_sendmsg+0x21c/0x270
[  779.305787][T15716]  ____sys_sendmsg+0x505/0x830
[  779.305799][T15716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  779.305841][T15716]  ? import_iovec+0x74/0xa0
[  779.305853][T15716]  ___sys_sendmsg+0x21f/0x2a0
[  779.305865][T15716]  ? __pfx____sys_sendmsg+0x10/0x10
[  779.305893][T15716]  ? __fget_files+0x2a/0x420
[  779.305906][T15716]  ? __fget_files+0x3a0/0x420
[  779.305923][T15716]  __x64_sys_sendmsg+0x19b/0x260
[  779.305934][T15716]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  779.305948][T15716]  ? rcu_is_watching+0x15/0xb0
[  779.305959][T15716]  ? do_syscall_64+0xbe/0x3b0
[  779.305973][T15716]  do_syscall_64+0xfa/0x3b0
[  779.305984][T15716]  ? lockdep_hardirqs_on+0x9c/0x150
[  779.305995][T15716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.306003][T15716]  ? exc_page_fault+0x9f/0xf0
[  779.306015][T15716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.306040][T15716] RIP: 0033:0x7f31cbb8ebe9
[  779.306049][T15716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  779.306056][T15716] RSP: 002b:00007f31cc94d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  779.306067][T15716] RAX: ffffffffffffffda RBX: 00007f31cbdb5fa0 RCX: 00007f31cbb8ebe9
[  779.306073][T15716] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  779.306078][T15716] RBP: 00007f31cbc11e19 R08: 0000000000000000 R09: 0000000000000000
[  779.306084][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  779.306089][T15716] R13: 00007f31cbdb6038 R14: 00007f31cbdb5fa0 R15: 00007ffe56a4b7c8
[  779.306104][T15716]  </TASK>
[  779.952656][T15751] netlink: 'syz.2.11061': attribute type 9 has an invalid length.
[  779.955364][T15751] __nla_validate_parse: 12 callbacks suppressed
[  779.955373][T15751] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11061'.
[  780.179896][T15768] sctp: [Deprecated]: syz.0.11068 (pid 15768) Use of int in max_burst socket option.
[  780.179896][T15768] Use struct sctp_assoc_value instead
[  780.219378][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11068'.
[  780.227285][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11068'.
[  780.285219][T15774] netlink: 'syz.0.11070': attribute type 1 has an invalid length.
[  780.306162][T15774] 8021q: adding VLAN 0 to HW filter on device bond23
[  780.308818][T15766] lo speed is unknown, defaulting to 1000
[  780.325180][T15774] veth23: entered promiscuous mode
[  780.329201][T15774] bond23: (slave veth23): Enslaving as a backup interface with a down link
[  780.663402][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11073'.
[  780.752522][T15802] pim6reg1: entered promiscuous mode
[  780.754271][T15802] pim6reg1: entered allmulticast mode
[  780.884481][T15812] netlink: 248 bytes leftover after parsing attributes in process `syz.1.11078'.
[  780.943153][T15813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11078'.
[  780.958726][T15797] lo speed is unknown, defaulting to 1000
[  781.165548][T15828] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003
[  781.376625][T15835] lo speed is unknown, defaulting to 1000
[  781.458310][T15854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11090'.
[  781.706923][T15866] mac80211_hwsim hwsim737 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  782.261642][T15916] netlink: 248 bytes leftover after parsing attributes in process `syz.1.11100'.
[  782.265663][T15910] netlink: 'syz.2.11099': attribute type 13 has an invalid length.
[  782.270031][T15910] netlink: 'syz.2.11099': attribute type 17 has an invalid length.
[  782.437838][T15928] netlink: 'syz.1.11100': attribute type 1 has an invalid length.
[  782.465817][T15910] wlan0: left promiscuous mode
[  782.471347][T15910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  782.503028][T15919] netlink: 'syz.1.11100': attribute type 1 has an invalid length.
[  782.505509][T15919] netlink: 'syz.1.11100': attribute type 1 has an invalid length.
[  782.512934][T15912] netlink: 'syz.0.11101': attribute type 4 has an invalid length.
[  782.558254][T15928] 8021q: adding VLAN 0 to HW filter on device bond26
[  782.790242][T15918] lo speed is unknown, defaulting to 1000
[  782.805947][T15936] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  782.811917][T15936] CPU: 1 UID: 0 PID: 15936 Comm: syz.1.11103 Not tainted syzkaller #0 PREEMPT(full) 
[  782.811940][T15936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  782.811950][T15936] Call Trace:
[  782.811958][T15936]  <TASK>
[  782.811967][T15936]  dump_stack_lvl+0x189/0x250
[  782.811992][T15936]  ? __pfx_dump_stack_lvl+0x10/0x10
[  782.812012][T15936]  ? __pfx__printk+0x10/0x10
[  782.812039][T15936]  ? kernfs_path_from_node+0x2f/0x290
[  782.812056][T15936]  ? kernfs_path_from_node+0x250/0x290
[  782.812072][T15936]  ? kernfs_path_from_node+0x2f/0x290
[  782.812091][T15936]  sysfs_warn_dup+0x8e/0xa0
[  782.812108][T15936]  sysfs_do_create_link_sd+0xc0/0x110
[  782.812126][T15936]  device_add_class_symlinks+0x1cf/0x240
[  782.812147][T15936]  device_add+0x475/0xb50
[  782.812167][T15936]  wiphy_register+0x1ba6/0x28d0
[  782.812203][T15936]  ? __pfx_wiphy_register+0x10/0x10
[  782.812223][T15936]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  782.812245][T15936]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  782.812265][T15936]  ieee80211_register_hw+0x3425/0x4080
[  782.812293][T15936]  ? ieee80211_register_hw+0x1471/0x4080
[  782.812317][T15936]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  782.812335][T15936]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  782.812362][T15936]  ? __hrtimer_setup+0x187/0x210
[  782.812377][T15936]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  782.812403][T15936]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  782.812450][T15936]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  782.812467][T15936]  ? trace_kmalloc+0x1f/0xd0
[  782.812487][T15936]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  782.812504][T15936]  ? kstrndup+0xbf/0x160
[  782.812524][T15936]  hwsim_new_radio_nl+0xea4/0x1b10
[  782.812543][T15936]  ? __pfx___nla_validate_parse+0x10/0x10
[  782.812622][T15936]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  782.812661][T15936]  ? __nla_parse+0x40/0x60
[  782.812685][T15936]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  782.812709][T15936]  genl_family_rcv_msg_doit+0x215/0x300
[  782.812731][T15936]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  782.812760][T15936]  ? bpf_lsm_capable+0x9/0x20
[  782.812779][T15936]  ? security_capable+0x7e/0x2e0
[  782.812807][T15936]  genl_rcv_msg+0x60e/0x790
[  782.812828][T15936]  ? __pfx_genl_rcv_msg+0x10/0x10
[  782.812843][T15936]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  782.812873][T15936]  netlink_rcv_skb+0x208/0x470
[  782.812893][T15936]  ? __lock_acquire+0xab9/0xd20
[  782.812913][T15936]  ? __pfx_genl_rcv_msg+0x10/0x10
[  782.812931][T15936]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  782.812968][T15936]  ? down_read+0x1ad/0x2e0
[  782.812984][T15936]  genl_rcv+0x28/0x40
[  782.813000][T15936]  netlink_unicast+0x82f/0x9e0
[  782.813025][T15936]  ? __pfx_netlink_unicast+0x10/0x10
[  782.813045][T15936]  ? netlink_sendmsg+0x642/0xb30
[  782.813065][T15936]  ? skb_put+0x11b/0x210
[  782.813083][T15936]  netlink_sendmsg+0x805/0xb30
[  782.813112][T15936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  782.813136][T15936]  ? aa_sock_msg_perm+0xf1/0x1d0
[  782.813151][T15936]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  782.813167][T15936]  ? __pfx_netlink_sendmsg+0x10/0x10
[  782.813190][T15936]  __sock_sendmsg+0x21c/0x270
[  782.813213][T15936]  ____sys_sendmsg+0x505/0x830
[  782.813235][T15936]  ? __pfx_____sys_sendmsg+0x10/0x10
[  782.813259][T15936]  ? import_iovec+0x74/0xa0
[  782.813279][T15936]  ___sys_sendmsg+0x21f/0x2a0
[  782.813297][T15936]  ? __pfx____sys_sendmsg+0x10/0x10
[  782.813346][T15936]  ? __fget_files+0x2a/0x420
[  782.813367][T15936]  ? __fget_files+0x3a0/0x420
[  782.813396][T15936]  __x64_sys_sendmsg+0x19b/0x260
[  782.813415][T15936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  782.813440][T15936]  ? rcu_is_watching+0x15/0xb0
[  782.813460][T15936]  ? do_syscall_64+0xbe/0x3b0
[  782.813498][T15936]  do_syscall_64+0xfa/0x3b0
[  782.813519][T15936]  ? lockdep_hardirqs_on+0x9c/0x150
[  782.813539][T15936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.813586][T15936]  ? exc_page_fault+0x9f/0xf0
[  782.813615][T15936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.813637][T15936] RIP: 0033:0x7f7d1c58ebe9
[  782.813653][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  782.813670][T15936] RSP: 002b:00007f7d1d312038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  782.813687][T15936] RAX: ffffffffffffffda RBX: 00007f7d1c7b5fa0 RCX: 00007f7d1c58ebe9
[  782.813703][T15936] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  782.813714][T15936] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  782.813724][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  782.813733][T15936] R13: 00007f7d1c7b6038 R14: 00007f7d1c7b5fa0 R15: 00007fff8b9ade48
[  782.813759][T15936]  </TASK>
[  783.343924][T15962] mac80211_hwsim hwsim737 wlan1: entered allmulticast mode
[  783.454229][T15971] syzkaller1: entered promiscuous mode
[  783.456676][T15971] syzkaller1: entered allmulticast mode
[  783.464429][T15971] : renamed from vlan1
[  783.909555][T15992] netlink: 'syz.1.11115': attribute type 10 has an invalid length.
[  783.971215][T16009] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11119'.
[  784.052384][T15995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  784.055520][T15995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  784.129665][T16019] netlink: 'syz.0.11121': attribute type 9 has an invalid length.
[  784.144294][T16019] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11121'.
[  784.553349][T16036] netlink: 'syz.2.11126': attribute type 13 has an invalid length.
[  784.556232][T16036] netlink: 'syz.2.11126': attribute type 17 has an invalid length.
[  784.562223][T16036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  784.690319][T16052] 
[  784.691364][T16052] ======================================================
[  784.694032][T16052] WARNING: possible circular locking dependency detected
[  784.696745][T16052] syzkaller #0 Not tainted
[  784.698569][T16052] ------------------------------------------------------
[  784.702053][T16052] syz.1.11128/16052 is trying to acquire lock:
[  784.704349][T16052] ffffffff8f68de58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  784.707775][T16052] 
[  784.707775][T16052] but task is already holding lock:
[  784.710585][T16052] ffff8881273ebd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  784.714066][T16052] 
[  784.714066][T16052] which lock already depends on the new lock.
[  784.714066][T16052] 
[  784.717974][T16052] 
[  784.717974][T16052] the existing dependency chain (in reverse order) is:
[  784.721348][T16052] 
[  784.721348][T16052] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  784.724358][T16052]        lock_acquire+0x120/0x360
[  784.726294][T16052]        _raw_spin_lock_bh+0x36/0x50
[  784.728256][T16052]        nr_rt_ioctl+0x193/0xd50
[  784.730157][T16052]        sock_do_ioctl+0xdc/0x300
[  784.732080][T16052]        sock_ioctl+0x576/0x790
[  784.733901][T16052]        __se_sys_ioctl+0xfc/0x170
[  784.735795][T16052]        do_syscall_64+0xfa/0x3b0
[  784.737784][T16052]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.740279][T16052] 
[  784.740279][T16052] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  784.743234][T16052]        lock_acquire+0x120/0x360
[  784.745167][T16052]        _raw_spin_lock_bh+0x36/0x50
[  784.747182][T16052]        nr_rt_device_down+0xa9/0x720
[  784.749195][T16052]        nr_device_event+0x137/0x150
[  784.751186][T16052]        notifier_call_chain+0x1b6/0x3e0
[  784.753292][T16052]        __dev_notify_flags+0x18d/0x2e0
[  784.755361][T16052]        netif_change_flags+0xe8/0x1a0
[  784.757486][T16052]        dev_change_flags+0x130/0x260
[  784.759507][T16052]        dev_ioctl+0x7b4/0x1150
[  784.761359][T16052]        sock_do_ioctl+0x22c/0x300
[  784.763293][T16052]        sock_ioctl+0x576/0x790
[  784.765131][T16052]        __se_sys_ioctl+0xfc/0x170
[  784.767053][T16052]        do_syscall_64+0xfa/0x3b0
[  784.768959][T16052]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.771394][T16052] 
[  784.771394][T16052] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  784.774392][T16052]        validate_chain+0xb9b/0x2140
[  784.776382][T16052]        __lock_acquire+0xab9/0xd20
[  784.778518][T16052]        lock_acquire+0x120/0x360
[  784.780491][T16052]        _raw_spin_lock_bh+0x36/0x50
[  784.782681][T16052]        nr_rt_ioctl+0x390/0xd50
[  784.784833][T16052]        sock_do_ioctl+0xdc/0x300
[  784.786755][T16052]        sock_ioctl+0x576/0x790
[  784.788608][T16052]        __se_sys_ioctl+0xfc/0x170
[  784.790520][T16052]        do_syscall_64+0xfa/0x3b0
[  784.792440][T16052]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.794777][T16052] 
[  784.794777][T16052] other info that might help us debug this:
[  784.794777][T16052] 
[  784.798521][T16052] Chain exists of:
[  784.798521][T16052]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  784.798521][T16052] 
[  784.803737][T16052]  Possible unsafe locking scenario:
[  784.803737][T16052] 
[  784.806462][T16052]        CPU0                    CPU1
[  784.808470][T16052]        ----                    ----
[  784.810468][T16052]   lock(&nr_node->node_lock);
[  784.812280][T16052]                                lock(nr_node_list_lock);
[  784.814938][T16052]                                lock(&nr_node->node_lock);
[  784.817623][T16052]   lock(nr_neigh_list_lock);
[  784.819441][T16052] 
[  784.819441][T16052]  *** DEADLOCK ***
[  784.819441][T16052] 
[  784.822437][T16052] 2 locks held by syz.1.11128/16052:
[  784.824400][T16052]  #0: ffffffff8f68deb8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  784.827981][T16052]  #1: ffff8881273ebd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  784.831590][T16052] 
[  784.831590][T16052] stack backtrace:
[  784.833799][T16052] CPU: 1 UID: 0 PID: 16052 Comm: syz.1.11128 Not tainted syzkaller #0 PREEMPT(full) 
[  784.833819][T16052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  784.833830][T16052] Call Trace:
[  784.833838][T16052]  <TASK>
[  784.833847][T16052]  dump_stack_lvl+0x189/0x250
[  784.833867][T16052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  784.833885][T16052]  ? __pfx__printk+0x10/0x10
[  784.833903][T16052]  ? stack_trace_save+0x9c/0xe0
[  784.833924][T16052]  print_circular_bug+0x2ee/0x310
[  784.833941][T16052]  check_noncircular+0x134/0x160
[  784.833957][T16052]  validate_chain+0xb9b/0x2140
[  784.833972][T16052]  ? stack_trace_save+0x9c/0xe0
[  784.833987][T16052]  ? __pfx_stack_trace_save+0x10/0x10
[  784.834003][T16052]  ? stack_depot_save_flags+0x40/0x860
[  784.834022][T16052]  ? look_up_lock_class+0x74/0x170
[  784.834041][T16052]  ? register_lock_class+0x51/0x320
[  784.834062][T16052]  __lock_acquire+0xab9/0xd20
[  784.834082][T16052]  ? nr_rt_ioctl+0x390/0xd50
[  784.834097][T16052]  lock_acquire+0x120/0x360
[  784.834123][T16052]  ? nr_rt_ioctl+0x390/0xd50
[  784.834141][T16052]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  784.834159][T16052]  ? nr_rt_ioctl+0x390/0xd50
[  784.834175][T16052]  _raw_spin_lock_bh+0x36/0x50
[  784.834193][T16052]  ? nr_rt_ioctl+0x390/0xd50
[  784.834208][T16052]  nr_rt_ioctl+0x390/0xd50
[  784.834227][T16052]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  784.834247][T16052]  ? apparmor_capable+0x137/0x1b0
[  784.834265][T16052]  ? capable+0x89/0xe0
[  784.834278][T16052]  ? nr_ioctl+0x1b1/0x3b0
[  784.834291][T16052]  sock_do_ioctl+0xdc/0x300
[  784.834309][T16052]  ? __pfx_sock_do_ioctl+0x10/0x10
[  784.834324][T16052]  ? __lock_acquire+0xab9/0xd20
[  784.834348][T16052]  sock_ioctl+0x576/0x790
[  784.834364][T16052]  ? __pfx_sock_ioctl+0x10/0x10
[  784.834379][T16052]  ? __fget_files+0x2a/0x420
[  784.834398][T16052]  ? __fget_files+0x3a0/0x420
[  784.834443][T16052]  ? __fget_files+0x2a/0x420
[  784.834464][T16052]  ? bpf_lsm_file_ioctl+0x9/0x20
[  784.834482][T16052]  ? __pfx_sock_ioctl+0x10/0x10
[  784.834499][T16052]  __se_sys_ioctl+0xfc/0x170
[  784.834516][T16052]  do_syscall_64+0xfa/0x3b0
[  784.834536][T16052]  ? lockdep_hardirqs_on+0x9c/0x150
[  784.834554][T16052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.834568][T16052]  ? exc_page_fault+0x9f/0xf0
[  784.834586][T16052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.834599][T16052] RIP: 0033:0x7f7d1c58ebe9
[  784.834614][T16052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  784.834627][T16052] RSP: 002b:00007f7d1a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  784.834642][T16052] RAX: ffffffffffffffda RBX: 00007f7d1c7b6090 RCX: 00007f7d1c58ebe9
[  784.834652][T16052] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000c
[  784.834662][T16052] RBP: 00007f7d1c611e19 R08: 0000000000000000 R09: 0000000000000000
[  784.834671][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  784.834680][T16052] R13: 00007f7d1c7b6128 R14: 00007f7d1c7b6090 R15: 00007fff8b9ade48
[  784.834696][T16052]  </TASK>

VM DIAGNOSIS:
14:24:34  Registers:
info registers vcpu 0

CPU#0
RAX=09ce432183cdb300 RBX=ffffffff819683c8 RCX=09ce432183cdb300 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc45de9fa8 CR3=0000000024c64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7d1c612e53
XMM06=0000000000000000 00007f7d1c612e4d XMM07=0000000000000000 00007f7d1c612e61
XMM08=0000000000000000 00007f7d1c612ee7 XMM09=0000000000000000 00007f7d1c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000139d RDI=000000000000139e RBP=00000000000003f8 RSP=ffffc90008f57150
R8 =ffff8881067a8237 R9 =1ffff11020cf5046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8ea R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7d1a7f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32311ff8 CR3=000000011dda6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7d1c787498 00007f7d1c787470 XMM03=00007f7d1c7874a8 00007f7d1c7874a0
XMM04=00007f7d1d2ed100 00007f7d1c787460 XMM05=00007f7d1c787478 00007f7d1c7874c0
XMM06=00007f7d1c7874b8 00007f7d1c7874b0 XMM07=00007f7d1c7874a8 00007f7d1c7874a0
XMM08=0000000000000000 00007f7d1c612ee7 XMM09=0000000000000000 00007f7d1c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
