last executing test programs:

1.856719872s ago: executing program 2 (id=2781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700002dcdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r2, @ANYBLOB="61b7fc222f80826194da0eec0f0977daa9ffae8aef54fd578d95a24323da2e510300000000000000b9386f858de486a2686f0894c0dbc73c746f8414ca443303820471b911b22bf0011a45ce4d0700000079160d76a8f4e47e1e40df66bb295856bff3d7e5312159c9a554a7e3f5e8b0de98736b4d4d48b6324055c7ce96233651f867156939fe51a4b984e0236e7a0c"], 0x60}, 0x1, 0x0, 0x0, 0x4481}, 0x240400a4)
r6 = socket$kcm(0x10, 0x1, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f0000000700), 0x0}, 0x20)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
socket$kcm(0x10, 0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r9, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
listen(r9, 0x1)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000000c0)="e26248d8fe31981b0d1ab3a603429c03f70980d501b54a2b5d1df119cd40f8d4020fe8be0a13deb687619f4760435b2f8ed04ef82e5cb1a2327dc188188bc9f3da3d4934514c3b7d209003eba0177596ca2b02c26dc3e7546c6add3837890637000000000000000000", 0x69}], 0x2}, 0x200400d0)

1.747085942s ago: executing program 2 (id=2785):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c)
bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)

1.657108138s ago: executing program 2 (id=2787):
r0 = socket$kcm(0x10, 0x0, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b635a80648c2494012100", 0x24}, {&(0x7f0000000000)="000000d317d3bc9406ff80", 0xb}], 0x2}, 0x40040)

1.655902817s ago: executing program 2 (id=2789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x2}, 0x40050) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async)
r9 = socket(0x11, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r11=>0x0})
bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x68, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10010004}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc4, r8, 0x506, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)

1.558168564s ago: executing program 2 (id=2793):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f00000009c0)="1600", 0x9, 0x1, 0x15c2, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'})
socket$kcm(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="000085000000110000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4010, r8}, 0x18)

1.411273537s ago: executing program 0 (id=2796):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000640), 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0004000020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(r5, r6, 0x0, 0xffffffff000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="00dc0000", @ANYRES32=r4, @ANYBLOB="000000d6d320baebfd4124a1840b2401f602dc652d92cdb5f5f5f65d6c158283a8ef1a9d039c6e75e589f1c77a70db9c9ee8a467069d4548f1b83c36f95fa2dcb10919435ed9cf22fe7cdba88bc966381c731e1ae4802f325b62dcf3e47723416d27161631917dc513bfd24476db8c97c545ef857718a70b09026e800400488008008100", @ANYRES32, @ANYBLOB="fa9ca2a85360935aebccf2c255f7de70b33afcbd8e218d2e505e1b7a1e71140174c8fc1a468ccb8c4103888c3d1c8118f17b8a2891a1921b72bd09ac1c48af2303da92156d3b5f3444dadb4151a4b47cd19ddfdd540261f5c1152729de9f99df5c94d3a86acf97329d864f6c7e4bf44defa683fc673ac259fadd0400038008003e00", @ANYRES32, @ANYBLOB="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"], 0x200c}, 0x1, 0x0, 0x0, 0x4048814}, 0xc000)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'hsr0\x00'})
connect$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24)

1.200876417s ago: executing program 1 (id=2800):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x18, "4372070000000000476fb2940acfbe4c3f9725f03e1b0400"}}) (async)
recvmsg(r0, 0x0, 0x40002160)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000a00)=ANY=[], 0x18c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000140)="44c991447e7fdd8dad4d1433e8067c5eb0ef126433fe8b100414bc5b51e604c113ef78fe15b57a629559a32c3c505187dcaa9231894c10b0b183cb6056319c950947c7bc98e72c01ed184c983d3aebdaba"}, 0x20) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2e4060003006970"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000010) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbc8df251700000008000300", @ANYRES32=r9, @ANYBLOB="0a000600"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x4044004) (async)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffffb, 0x28}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5b}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xdf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfffc}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x14, 0xac, "be178666d19828c3c502c0e0726ff1bf"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2a4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000180)="1412b5ea4d3fd656c3dcbabb6d8ed922ccaaa6784e6acf5eb88ef4f23d5686f98935648b1dbfdd9907b1081c54bd92c49f8c85e62e3924beb50f3fe24b2e34da99b616e37b3d0954ae04688dbe38f05c5b157c19173b9c2820451401b4ec1803d70e70edbf837e4fe7478834baf99f46146e256c5ebf8294c560ce2a501bf0d7a97fbe123ce8605d85cbc12002d74b44a81226c6c8e8e1a826f18fdf0eea92f4084c9dcce41da13ec13fb2e89ccdd3f990c3ce29a0ea7bd3b031084cb5c1a58e1c8ea49cd31350d3d202970ca646183f33df7b21da37") (async)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r10, @ANYBLOB="8a6acc001af7f935dd70e023694929cc94c8161480a3dee5648df66541ddb9350c7bd3f292de44a27e2fd6ee5671f6d4d3c53495288a2dd12dff74e248d1635e0a5b1eb457ff2f46001cc5ffa7179d0a237738f2cf86510d6aa7d51b010775fc8c09c678fc64e45017ca11e79537afe7b2fc02c05368cf37c6a9f453447185ec88d88b6060462e0741f21b42b371d16cb539890010000000000000b4850c258b9ba9de7720db05b8730208ab02de3c0272a9e678f9d16caa7ace5ebda0b96681c9ab3f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0xfa, 0x4)

1.199588856s ago: executing program 0 (id=2801):
socket$kcm(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32], 0x38}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)

1.195956898s ago: executing program 1 (id=2802):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

1.128477439s ago: executing program 1 (id=2803):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x7c, 0x70, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80000000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0x8, 0x1, 0x3, 0x1}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x581c21, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'bond0\x00', 0x1})
select(0x40, &(0x7f0000000280)={0x4, 0x0, 0xe47, 0x9, 0x9, 0x6, 0x1, 0x49}, &(0x7f00000002c0)={0x8, 0x8001, 0x3, 0x23, 0x8, 0x1000, 0x8, 0x27}, &(0x7f0000000300)={0x9, 0x6, 0x6, 0x6, 0x6, 0x5, 0xe0c, 0x5}, &(0x7f0000000340)={0x77359400})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=<r5=>0x0)
syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/pid_for_children\x00')
sendmsg$sock(r4, &(0x7f0000000840)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, 0x4}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="2eb11d450fb9d0e853bac2741251af915f0b4719e30ac974172c8fd1e069790e4b34cdde92e62e2ff464f5783ff7a759a999e61bc19ef5118586db5c4b19b2c4afa95378fd0b50689f5208fa3bcd69cc5f94bb1d973cf39ade", 0x59}, {&(0x7f0000000500)="06cef6c12131a9688c0de2077815259b31fcdf3c5b306a9b2f8a6077b6034517492e7ec314d5418b43f196ed6391f4f074831a32c426e3280e4553c31ed712870622afbb550b27ff3ddb73faa3f488d0ef", 0x51}, {&(0x7f0000000580)="4aa719b6c45977d157b57951180190ecb04aa9aa42c61f3d9b6844f7b2411f69b63946aae49d6a46b6e34e962450229058b733a85c1dfe8cfa141cbdeb3ea98c879c5fdba207a11de095098323f10dd5b8c9691f8af26e5e7b681f2b24c3a53d32", 0x61}, {&(0x7f0000000600)="601ee44aede931bb7d5e22e166e9e5dc987538c6bf86bbee88903562f8cf5c2ba27ac5f91e25300996430ea1e2ade91704e9903acf325b7be97e653d94f5822cff1eb367ca23ae5c3c639da64bf669eea617f4fac827f4d7349d2c77e0e1d4e07a1f37c49e6cb32ffe41741ae8fff25e71974d3dfb214bf2a880b795b76332d42c55eb4571cb5522", 0x88}, {&(0x7f00000006c0)="a33285362f74e97e5fd72494de2f8952b8d6528f5bb5f43b8c35a8daf3588082b1652fd474ffe39e44bd", 0x2a}], 0x5, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x6e3}}, @txtime={{0x18, 0x1, 0x3d, 0x85e}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3e5}}], 0x90}, 0x4000094)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000900)={'filter\x00', 0x0, 0x0, 0x0, [0x40, 0x6, 0xffffffff, 0xbb74, 0xf4c, 0x3], 0x7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8)
pipe(&(0x7f0000000a00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x294, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdea}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa6ce}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x291}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe524}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e8c000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0)
sendfile(r6, r4, 0x0, 0x6)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r7)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000e80)={'gretap0\x00', <r10=>0x0, 0x10, 0x1, 0x8001000, 0x6, {{0x1f, 0x4, 0x3, 0x2a, 0x7c, 0x66, 0x0, 0xfa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x11, "0284ec71f5cfe41207ccb955cd9e6a"}, @ssrr={0x89, 0x1f, 0x7f, [@multicast1, @remote, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @private=0xa010101]}, @generic={0x86, 0xc, "f61078e324c08e194e0b"}, @ssrr={0x89, 0x1f, 0x77, [@rand_addr=0x64010101, @loopback, @broadcast, @local, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000f80)={'wg0\x00', <r11=>0x0})
getsockname$packet(r6, &(0x7f0000000fc0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', <r13=>0x0, 0x29, 0x6, 0x0, 0x4, 0x0, @loopback, @private1, 0x8000, 0x8000, 0x70000, 0x746b}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000001200)={'tunl0\x00', &(0x7f0000001100)={'syztnl0\x00', <r14=>0x0, 0x7, 0x10, 0x5, 0x6, {{0x37, 0x4, 0x0, 0x26, 0xdc, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x7, 0xf, "8a00652f57e35aaff0f2083351"}]}, @ssrr={0x89, 0x17, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xb, [@broadcast, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0x9, [{@empty, 0x200}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x4d, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x26}, 0xc34}]}, @cipso={0x86, 0x54, 0x3, [{0x2, 0x4, "4603"}, {0x1, 0x12, "9e1c41a524a0ad50c857d1d7f746e372"}, {0x5, 0xb, "0cc08d6bc902143a1f"}, {0x2, 0x6, "448e0b52"}, {0x7, 0x6, "f689ce78"}, {0x1, 0x11, "dacc7b668571675569a0f6050ab619"}, {0x2, 0x10, "4d5aff82a903d1a856a6929d5ea5"}]}, @ssrr={0x89, 0xf, 0x59, [@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, @private=0xa010100]}, @noop, @ra={0x94, 0x4}]}}}}})
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001240)={@multicast1, @private, <r15=>0x0}, &(0x7f0000001280)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000013c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x9c, r9, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200080c8}, 0x4800)
r16 = socket$nl_route(0x10, 0x3, 0x0)
accept4(r2, &(0x7f0000001400)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000001480)=0x80, 0x0)
r17 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$FIDEDUPERANGE(r16, 0xc0189436, &(0x7f00000014c0)={0x3, 0x4, 0x3, 0x0, 0x0, [{{r16}, 0x81}, {{r17}, 0xffffffffffffffff}, {{}, 0x8}]})

1.127093264s ago: executing program 1 (id=2804):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x40050)

1.070602875s ago: executing program 0 (id=2805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$isdn_base(0x22, 0x3, 0x0)
bind$rds(r5, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x7ffffffe, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
r11 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
setsockopt$inet6_buf(r11, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14)
sendto$inet6(r10, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000380), 0x8)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf25080003000100000008004a0001000000080011"], 0x28}, 0x1, 0x0, 0x0, 0x2404c836}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

1.068904714s ago: executing program 1 (id=2806):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @private1, 0x3ff}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x7}, 0x48)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
unshare(0x1a060000)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4048910)

1.011744867s ago: executing program 0 (id=2807):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @empty, 0x401}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @empty, 0x8001}}, 0x6, 0x1c0}, 0x90)
sendmmsg$inet6(r1, &(0x7f0000002d00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @loopback, 0x80}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000980)="11", 0x1}], 0x1}}], 0x1, 0x8001)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x11, 0x7, "76ec617613e9a74dcba4d16825e915b1"}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x10000080)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x880)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x10000, 0x10}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_NAN(r6, 0x0, 0x1)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2b, 0xc6, 0xf1, 0x1, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8, 0x1, 0x6, 0x2}})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4)

661.157675ms ago: executing program 2 (id=2808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r3, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0)
sendfile(r1, r8, 0x0, 0xffffffff000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfe00}]}}}]}, 0x38}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r15 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

160.775387ms ago: executing program 1 (id=2809):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r3}, 0x38)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0xa)
r4 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa0000000000007110110e000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="ef3d071e376508ea180300d4a8ed0e6c42d7ec47012284af5a8d4960f608706b7c9f18c290085daaa2018fc960c7f8dcef0f5b7a8f80c209664f4dccb2a3"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8, 0x6, 0x7}, &(0x7f0000000140)=0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

160.11167ms ago: executing program 0 (id=2810):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d40100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a1990000df9e190a587bed507002e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000004900010026bd7000fbdbdf250a008000", @ANYRES32, @ANYBLOB="df530000140001"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)
close(r0)

0s ago: executing program 0 (id=2811):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x7fffffff, {{0xa, 0x4e23, 0x8, @mcast1, 0x5}}, {{0xa, 0x4e24, 0x3, @local, 0x3f6}}}, 0x108)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x60, {0x2, 0x4e22, @empty}, 'veth0_virt_wifi\x00'})
r2 = accept4(r1, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x7c, 0x2c, 0x95a00b9a6bc4018, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffec, 0x3}, {0xfff2, 0xa}, {0x2, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xf7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xe, 0x2}}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_POLICE={0x28, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x400, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x540, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000680)={'vxcan1\x00', @link_local})
ioctl(r4, 0x5, &(0x7f00000006c0))
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000700)={@mcast1, @rand_addr=' \x01\x00', @private1, 0x800, 0x1, 0xe81, 0x400, 0x8, 0x10, r3})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write$bt_hci(r2, &(0x7f0000000a80)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "b4f9392f4703"}}}, 0xb)
r8 = socket(0x15, 0x6, 0x8)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000ac0)="a1e5b0fefd65648ae5517e7ddcbc0b9ade338e1560e6057a4db06d0ba68ceb77d02fbdcbf52ec7dcda1225095bf67b33d0ada64aac60ae0d34de78e46e0c8b4b15428528cdc8ddf422c1fed1633643e50af18446bc8a51f31f39955815196bd988d3144bb6833521c2fea879d2af248a371f401f4a6cdd6723eca87e4c0c7452c5cbd2baf6f3ac5d0e033a921ade5a9a7802da75280e9934ff9c38d32c041e11eb75e2ae12aaf0bf1112105afefbb2f9cfa3886eed839eb517c628537cc9013b6cc15251fac44f5424418b07ea23")
setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000000bc0)=0x55dd, 0x4)
syz_emit_ethernet(0x78, &(0x7f0000000c00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x2b, 0x6a, 0x66, 0x0, 0x6, 0x11, 0x0, @broadcast, @remote, {[@generic={0x82, 0x3, '7'}]}}, {0x4e24, 0x4e24, 0x52, 0x0, @wg=@data={0x4, 0x2, 0x7, "edcdb4e1694b423e876fcc63191dfaed5a5e0bb2de61a272aed69d8a7fab65b262ad12d529c043429d844ffadc84352a84a8b3420cf88718f13f"}}}}}}, &(0x7f0000000c80)={0x0, 0x3, [0x1fe, 0x1e4, 0xb84, 0x62e]})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000cc0)={<r9=>r4, 0x5, 0x7bcf6831, 0x3})
write$cgroup_type(r9, &(0x7f0000000d00), 0x9)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000d40)={0x0, 0x8, 0x81, 0x193, 0x6, 0x540, 0x8, 0x2, {<r10=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x1, 0x3, 0x7, 0x99c3, 0xbc7}}, &(0x7f0000000e00)=0xb0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000e40)={r10, @in={{0x2, 0x4e20, @multicast1}}}, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000f00)={'lo\x00'})
close(r6)

kernel console output (not intermixed with test programs):

9915]  ? bpf_lsm_capable+0x9/0x20
[  131.557167][ T9915]  ? security_capable+0x7e/0x2e0
[  131.557185][ T9915]  genl_rcv_msg+0x60e/0x790
[  131.557210][ T9915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.557225][ T9915]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  131.557254][ T9915]  netlink_rcv_skb+0x208/0x470
[  131.557274][ T9915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.557286][ T9915]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.557319][ T9915]  ? down_read+0x1ad/0x2e0
[  131.557337][ T9915]  genl_rcv+0x28/0x40
[  131.557349][ T9915]  netlink_unicast+0x75c/0x8e0
[  131.557390][ T9915]  netlink_sendmsg+0x805/0xb30
[  131.557418][ T9915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.557444][ T9915]  ? aa_sock_msg_perm+0x94/0x160
[  131.557464][ T9915]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.557482][ T9915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.557507][ T9915]  __sock_sendmsg+0x21c/0x270
[  131.557565][ T9915]  ____sys_sendmsg+0x505/0x830
[  131.557597][ T9915]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.557632][ T9915]  ? import_iovec+0x74/0xa0
[  131.557658][ T9915]  ___sys_sendmsg+0x21f/0x2a0
[  131.557684][ T9915]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.557743][ T9915]  ? __fget_files+0x2a/0x420
[  131.557758][ T9915]  ? __fget_files+0x3a0/0x420
[  131.557783][ T9915]  __x64_sys_sendmsg+0x19b/0x260
[  131.557809][ T9915]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.557841][ T9915]  ? rcu_is_watching+0x15/0xb0
[  131.557870][ T9915]  ? do_syscall_64+0xbe/0x3b0
[  131.557896][ T9915]  do_syscall_64+0xfa/0x3b0
[  131.557914][ T9915]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.557932][ T9915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.557951][ T9915]  ? exc_page_fault+0x9f/0xf0
[  131.557970][ T9915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.557986][ T9915] RIP: 0033:0x7f41a738e9a9
[  131.558004][ T9915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.558019][ T9915] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.558038][ T9915] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  131.558052][ T9915] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  131.558063][ T9915] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  131.558074][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.558085][ T9915] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  131.558113][ T9915]  </TASK>
[  131.824446][ T9920] xt_HMARK: spi-set and port-set can't be combined
[  132.132904][ T9939] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  132.135589][ T9939] CPU: 0 UID: 0 PID: 9939 Comm: syz.1.1360 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  132.135604][ T9939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.135612][ T9939] Call Trace:
[  132.135618][ T9939]  <TASK>
[  132.135624][ T9939]  dump_stack_lvl+0x189/0x250
[  132.135646][ T9939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.135658][ T9939]  ? __pfx__printk+0x10/0x10
[  132.135673][ T9939]  ? kernfs_path_from_node+0x2c/0x260
[  132.135683][ T9939]  ? kernfs_path_from_node+0x2c/0x260
[  132.135695][ T9939]  ? kernfs_path_from_node+0x2c/0x260
[  132.135711][ T9939]  ? kernfs_path_from_node+0x22c/0x260
[  132.135725][ T9939]  ? kernfs_path_from_node+0x2c/0x260
[  132.135742][ T9939]  sysfs_warn_dup+0x8e/0xa0
[  132.135765][ T9939]  sysfs_do_create_link_sd+0xc0/0x110
[  132.135779][ T9939]  device_add_class_symlinks+0x1cf/0x240
[  132.135805][ T9939]  device_add+0x475/0xb50
[  132.135831][ T9939]  wiphy_register+0x199a/0x26b0
[  132.135861][ T9939]  ? __pfx_wiphy_register+0x10/0x10
[  132.135871][ T9939]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  132.135887][ T9939]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  132.135901][ T9939]  ieee80211_register_hw+0x33e1/0x4120
[  132.135923][ T9939]  ? ieee80211_register_hw+0x1441/0x4120
[  132.135939][ T9939]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  132.135954][ T9939]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.135972][ T9939]  ? __hrtimer_setup+0x187/0x210
[  132.135981][ T9939]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  132.135997][ T9939]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  132.136026][ T9939]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  132.136041][ T9939]  ? trace_kmalloc+0x1f/0xd0
[  132.136066][ T9939]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  132.136089][ T9939]  ? kstrndup+0xbf/0x160
[  132.136114][ T9939]  hwsim_new_radio_nl+0xea4/0x1b10
[  132.136138][ T9939]  ? __pfx___nla_validate_parse+0x10/0x10
[  132.136171][ T9939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.136186][ T9939]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  132.136203][ T9939]  ? __nla_parse+0x40/0x60
[  132.136216][ T9939]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  132.136230][ T9939]  genl_family_rcv_msg_doit+0x215/0x300
[  132.136243][ T9939]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  132.136259][ T9939]  ? bpf_lsm_capable+0x9/0x20
[  132.136271][ T9939]  ? security_capable+0x7e/0x2e0
[  132.136284][ T9939]  genl_rcv_msg+0x60e/0x790
[  132.136296][ T9939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.136305][ T9939]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.136326][ T9939]  netlink_rcv_skb+0x208/0x470
[  132.136341][ T9939]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.136350][ T9939]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.136370][ T9939]  ? down_read+0x1ad/0x2e0
[  132.136382][ T9939]  genl_rcv+0x28/0x40
[  132.136390][ T9939]  netlink_unicast+0x75c/0x8e0
[  132.136406][ T9939]  netlink_sendmsg+0x805/0xb30
[  132.136423][ T9939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.136437][ T9939]  ? aa_sock_msg_perm+0x94/0x160
[  132.136447][ T9939]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.136456][ T9939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.136497][ T9939]  __sock_sendmsg+0x21c/0x270
[  132.136511][ T9939]  ____sys_sendmsg+0x505/0x830
[  132.136529][ T9939]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.136549][ T9939]  ? import_iovec+0x74/0xa0
[  132.136563][ T9939]  ___sys_sendmsg+0x21f/0x2a0
[  132.136577][ T9939]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.136616][ T9939]  ? __fget_files+0x2a/0x420
[  132.136629][ T9939]  ? __fget_files+0x3a0/0x420
[  132.136653][ T9939]  __x64_sys_sendmsg+0x19b/0x260
[  132.136681][ T9939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.136711][ T9939]  ? rcu_is_watching+0x15/0xb0
[  132.136732][ T9939]  ? do_syscall_64+0xbe/0x3b0
[  132.136747][ T9939]  do_syscall_64+0xfa/0x3b0
[  132.136757][ T9939]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.136766][ T9939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.136776][ T9939]  ? exc_page_fault+0x9f/0xf0
[  132.136785][ T9939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.136794][ T9939] RIP: 0033:0x7ff0e638e9a9
[  132.136805][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.136815][ T9939] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.136826][ T9939] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  132.136833][ T9939] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  132.136840][ T9939] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  132.136846][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.136852][ T9939] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  132.136867][ T9939]  </TASK>
[  132.451072][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.596040][ T9959] netlink: 'syz.1.1366': attribute type 4 has an invalid length.
[  132.988935][ T9985] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  132.994586][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.1.1377 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  132.994616][ T9985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.994629][ T9985] Call Trace:
[  132.994638][ T9985]  <TASK>
[  132.994648][ T9985]  dump_stack_lvl+0x189/0x250
[  132.994682][ T9985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.994705][ T9985]  ? __pfx__printk+0x10/0x10
[  132.994731][ T9985]  ? kernfs_path_from_node+0x2c/0x260
[  132.994760][ T9985]  ? kernfs_path_from_node+0x2c/0x260
[  132.994776][ T9985]  ? kernfs_path_from_node+0x2c/0x260
[  132.994796][ T9985]  ? kernfs_path_from_node+0x22c/0x260
[  132.994812][ T9985]  ? kernfs_path_from_node+0x2c/0x260
[  132.994834][ T9985]  sysfs_warn_dup+0x8e/0xa0
[  132.994863][ T9985]  sysfs_do_create_link_sd+0xc0/0x110
[  132.994883][ T9985]  device_add_class_symlinks+0x1cf/0x240
[  132.994914][ T9985]  device_add+0x475/0xb50
[  132.994945][ T9985]  wiphy_register+0x199a/0x26b0
[  132.994987][ T9985]  ? __pfx_wiphy_register+0x10/0x10
[  132.995006][ T9985]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  132.995059][ T9985]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  132.995093][ T9985]  ieee80211_register_hw+0x33e1/0x4120
[  132.995140][ T9985]  ? ieee80211_register_hw+0x1441/0x4120
[  132.995176][ T9985]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  132.995206][ T9985]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.995241][ T9985]  ? __hrtimer_setup+0x187/0x210
[  132.995262][ T9985]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  132.995293][ T9985]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  132.995347][ T9985]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  132.995369][ T9985]  ? trace_kmalloc+0x1f/0xd0
[  132.995390][ T9985]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  132.995443][ T9985]  ? kstrndup+0xbf/0x160
[  132.995474][ T9985]  hwsim_new_radio_nl+0xea4/0x1b10
[  132.995503][ T9985]  ? __pfx___nla_validate_parse+0x10/0x10
[  132.995541][ T9985]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.995580][ T9985]  ? __nla_parse+0x40/0x60
[  132.995604][ T9985]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  132.995635][ T9985]  genl_family_rcv_msg_doit+0x215/0x300
[  132.995662][ T9985]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  132.995694][ T9985]  ? bpf_lsm_capable+0x9/0x20
[  132.995719][ T9985]  ? security_capable+0x7e/0x2e0
[  132.995751][ T9985]  genl_rcv_msg+0x60e/0x790
[  132.995778][ T9985]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.995797][ T9985]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  132.995838][ T9985]  netlink_rcv_skb+0x208/0x470
[  132.995865][ T9985]  ? __pfx_genl_rcv_msg+0x10/0x10
[  132.995885][ T9985]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.995943][ T9985]  ? down_read+0x1ad/0x2e0
[  132.995967][ T9985]  genl_rcv+0x28/0x40
[  132.995984][ T9985]  netlink_unicast+0x75c/0x8e0
[  132.996015][ T9985]  netlink_sendmsg+0x805/0xb30
[  132.996048][ T9985]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.996075][ T9985]  ? aa_sock_msg_perm+0x94/0x160
[  132.996095][ T9985]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.996113][ T9985]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.996137][ T9985]  __sock_sendmsg+0x21c/0x270
[  132.996162][ T9985]  ____sys_sendmsg+0x505/0x830
[  132.996193][ T9985]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.996228][ T9985]  ? import_iovec+0x74/0xa0
[  132.996255][ T9985]  ___sys_sendmsg+0x21f/0x2a0
[  132.996282][ T9985]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.996344][ T9985]  ? __fget_files+0x2a/0x420
[  132.996359][ T9985]  ? __fget_files+0x3a0/0x420
[  132.996380][ T9985]  __x64_sys_sendmsg+0x19b/0x260
[  132.996409][ T9985]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.996480][ T9985]  ? rcu_is_watching+0x15/0xb0
[  132.996507][ T9985]  ? do_syscall_64+0xbe/0x3b0
[  132.996532][ T9985]  do_syscall_64+0xfa/0x3b0
[  132.996548][ T9985]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.996565][ T9985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.996584][ T9985]  ? exc_page_fault+0x9f/0xf0
[  132.996603][ T9985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.996622][ T9985] RIP: 0033:0x7ff0e638e9a9
[  132.996640][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.996655][ T9985] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.996676][ T9985] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  132.996690][ T9985] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  132.996702][ T9985] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  132.996713][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.996725][ T9985] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  132.996762][ T9985]  </TASK>
[  133.280726][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1380'.
[  133.361540][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  133.368862][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.375962][T10005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.416592][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  133.463534][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.476429][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'.
[  133.514640][T10017] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  133.522147][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.1.1387 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  133.522178][T10017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.522190][T10017] Call Trace:
[  133.522199][T10017]  <TASK>
[  133.522209][T10017]  dump_stack_lvl+0x189/0x250
[  133.522243][T10017]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.522264][T10017]  ? __pfx__printk+0x10/0x10
[  133.522287][T10017]  ? kernfs_path_from_node+0x2c/0x260
[  133.522304][T10017]  ? kernfs_path_from_node+0x2c/0x260
[  133.522317][T10017]  ? kernfs_path_from_node+0x2c/0x260
[  133.522334][T10017]  ? kernfs_path_from_node+0x22c/0x260
[  133.522349][T10017]  ? kernfs_path_from_node+0x2c/0x260
[  133.522362][T10017]  sysfs_warn_dup+0x8e/0xa0
[  133.522418][T10017]  sysfs_do_create_link_sd+0xc0/0x110
[  133.522436][T10017]  device_add_class_symlinks+0x1cf/0x240
[  133.522462][T10017]  device_add+0x475/0xb50
[  133.522486][T10017]  wiphy_register+0x199a/0x26b0
[  133.522522][T10017]  ? __pfx_wiphy_register+0x10/0x10
[  133.522543][T10017]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  133.522570][T10017]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  133.522594][T10017]  ieee80211_register_hw+0x33e1/0x4120
[  133.522631][T10017]  ? ieee80211_register_hw+0x1441/0x4120
[  133.522661][T10017]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  133.522687][T10017]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.522721][T10017]  ? __hrtimer_setup+0x187/0x210
[  133.522741][T10017]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  133.522769][T10017]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  133.522835][T10017]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  133.522858][T10017]  ? trace_kmalloc+0x1f/0xd0
[  133.522878][T10017]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  133.522898][T10017]  ? kstrndup+0xbf/0x160
[  133.522920][T10017]  hwsim_new_radio_nl+0xea4/0x1b10
[  133.522939][T10017]  ? __pfx___nla_validate_parse+0x10/0x10
[  133.522994][T10017]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  133.523028][T10017]  ? __nla_parse+0x40/0x60
[  133.523060][T10017]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  133.523086][T10017]  genl_family_rcv_msg_doit+0x215/0x300
[  133.523111][T10017]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  133.523138][T10017]  ? bpf_lsm_capable+0x9/0x20
[  133.523157][T10017]  ? security_capable+0x7e/0x2e0
[  133.523194][T10017]  genl_rcv_msg+0x60e/0x790
[  133.523217][T10017]  ? __pfx_genl_rcv_msg+0x10/0x10
[  133.523233][T10017]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  133.523271][T10017]  netlink_rcv_skb+0x208/0x470
[  133.523296][T10017]  ? __pfx_genl_rcv_msg+0x10/0x10
[  133.523315][T10017]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  133.523351][T10017]  ? down_read+0x1ad/0x2e0
[  133.523371][T10017]  genl_rcv+0x28/0x40
[  133.523416][T10017]  netlink_unicast+0x75c/0x8e0
[  133.523448][T10017]  netlink_sendmsg+0x805/0xb30
[  133.523495][T10017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.523521][T10017]  ? aa_sock_msg_perm+0x94/0x160
[  133.523542][T10017]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  133.523560][T10017]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.523580][T10017]  __sock_sendmsg+0x21c/0x270
[  133.523601][T10017]  ____sys_sendmsg+0x505/0x830
[  133.523628][T10017]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.523658][T10017]  ? import_iovec+0x74/0xa0
[  133.523686][T10017]  ___sys_sendmsg+0x21f/0x2a0
[  133.523712][T10017]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.523769][T10017]  ? __fget_files+0x2a/0x420
[  133.523787][T10017]  ? __fget_files+0x3a0/0x420
[  133.523810][T10017]  __x64_sys_sendmsg+0x19b/0x260
[  133.523837][T10017]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  133.523867][T10017]  ? rcu_is_watching+0x15/0xb0
[  133.523890][T10017]  ? do_syscall_64+0xbe/0x3b0
[  133.523914][T10017]  do_syscall_64+0xfa/0x3b0
[  133.523930][T10017]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.523948][T10017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.523964][T10017]  ? exc_page_fault+0x9f/0xf0
[  133.523981][T10017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.523996][T10017] RIP: 0033:0x7ff0e638e9a9
[  133.524012][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.524027][T10017] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.524052][T10017] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  133.524063][T10017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  133.524073][T10017] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  133.524083][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.524093][T10017] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  133.524122][T10017]  </TASK>
[  133.811292][T10024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.873248][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'.
[  133.876312][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'.
[  133.903214][T10024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.001115][T10024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.119442][T10024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.208345][T10024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.222040][T10024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.231497][T10024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.241477][T10024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.296272][T10043] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  134.303978][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.0.1395 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  134.304012][T10043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.304026][T10043] Call Trace:
[  134.304035][T10043]  <TASK>
[  134.304044][T10043]  dump_stack_lvl+0x189/0x250
[  134.304078][T10043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.304099][T10043]  ? __pfx__printk+0x10/0x10
[  134.304122][T10043]  ? kernfs_path_from_node+0x2c/0x260
[  134.304141][T10043]  ? kernfs_path_from_node+0x2c/0x260
[  134.304156][T10043]  ? kernfs_path_from_node+0x2c/0x260
[  134.304177][T10043]  ? kernfs_path_from_node+0x22c/0x260
[  134.304193][T10043]  ? kernfs_path_from_node+0x2c/0x260
[  134.304214][T10043]  sysfs_warn_dup+0x8e/0xa0
[  134.304242][T10043]  sysfs_do_create_link_sd+0xc0/0x110
[  134.304263][T10043]  device_add_class_symlinks+0x1cf/0x240
[  134.304292][T10043]  device_add+0x475/0xb50
[  134.304317][T10043]  wiphy_register+0x199a/0x26b0
[  134.304405][T10043]  ? __pfx_wiphy_register+0x10/0x10
[  134.304428][T10043]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  134.304460][T10043]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  134.304489][T10043]  ieee80211_register_hw+0x33e1/0x4120
[  134.304527][T10043]  ? ieee80211_register_hw+0x1441/0x4120
[  134.304558][T10043]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  134.304586][T10043]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.304620][T10043]  ? __hrtimer_setup+0x187/0x210
[  134.304642][T10043]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  134.304671][T10043]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  134.304747][T10043]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  134.304772][T10043]  ? trace_kmalloc+0x1f/0xd0
[  134.304793][T10043]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  134.304818][T10043]  ? kstrndup+0xbf/0x160
[  134.304842][T10043]  hwsim_new_radio_nl+0xea4/0x1b10
[  134.304869][T10043]  ? __pfx___nla_validate_parse+0x10/0x10
[  134.304903][T10043]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  134.304939][T10043]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  134.304969][T10043]  ? __nla_parse+0x40/0x60
[  134.304995][T10043]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  134.305022][T10043]  genl_family_rcv_msg_doit+0x215/0x300
[  134.305050][T10043]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  134.305078][T10043]  ? bpf_lsm_capable+0x9/0x20
[  134.305102][T10043]  ? security_capable+0x7e/0x2e0
[  134.305126][T10043]  genl_rcv_msg+0x60e/0x790
[  134.305149][T10043]  ? __pfx_genl_rcv_msg+0x10/0x10
[  134.305164][T10043]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  134.305199][T10043]  netlink_rcv_skb+0x208/0x470
[  134.305221][T10043]  ? __pfx_genl_rcv_msg+0x10/0x10
[  134.305241][T10043]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.305278][T10043]  ? down_read+0x1ad/0x2e0
[  134.305300][T10043]  genl_rcv+0x28/0x40
[  134.305314][T10043]  netlink_unicast+0x75c/0x8e0
[  134.305383][T10043]  netlink_sendmsg+0x805/0xb30
[  134.305420][T10043]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.305448][T10043]  ? aa_sock_msg_perm+0x94/0x160
[  134.305471][T10043]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.305491][T10043]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.305514][T10043]  __sock_sendmsg+0x21c/0x270
[  134.305537][T10043]  ____sys_sendmsg+0x505/0x830
[  134.305567][T10043]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.305598][T10043]  ? import_iovec+0x74/0xa0
[  134.305642][T10043]  ___sys_sendmsg+0x21f/0x2a0
[  134.305669][T10043]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.305725][T10043]  ? __fget_files+0x2a/0x420
[  134.305740][T10043]  ? __fget_files+0x3a0/0x420
[  134.305765][T10043]  __x64_sys_sendmsg+0x19b/0x260
[  134.305791][T10043]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.305830][T10043]  ? do_syscall_64+0xbe/0x3b0
[  134.305853][T10043]  do_syscall_64+0xfa/0x3b0
[  134.305868][T10043]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.305884][T10043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.305900][T10043]  ? exc_page_fault+0x9f/0xf0
[  134.305924][T10043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.305942][T10043] RIP: 0033:0x7f751c78e9a9
[  134.305961][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.305979][T10043] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.306000][T10043] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  134.306014][T10043] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  134.306025][T10043] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  134.306034][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.306044][T10043] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  134.306069][T10043]  </TASK>
[  134.607376][T10057] netlink: 'syz.1.1399': attribute type 29 has an invalid length.
[  134.662805][ T5846] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  135.514915][T10078] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  135.519247][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.2.1405 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  135.519310][T10078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.519322][T10078] Call Trace:
[  135.519331][T10078]  <TASK>
[  135.519338][T10078]  dump_stack_lvl+0x189/0x250
[  135.519373][T10078]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.519394][T10078]  ? __pfx__printk+0x10/0x10
[  135.519417][T10078]  ? kernfs_path_from_node+0x2c/0x260
[  135.519436][T10078]  ? kernfs_path_from_node+0x2c/0x260
[  135.519450][T10078]  ? kernfs_path_from_node+0x2c/0x260
[  135.519465][T10078]  ? kernfs_path_from_node+0x22c/0x260
[  135.519479][T10078]  ? kernfs_path_from_node+0x2c/0x260
[  135.519495][T10078]  sysfs_warn_dup+0x8e/0xa0
[  135.519515][T10078]  sysfs_do_create_link_sd+0xc0/0x110
[  135.519529][T10078]  device_add_class_symlinks+0x1cf/0x240
[  135.519562][T10078]  device_add+0x475/0xb50
[  135.519601][T10078]  wiphy_register+0x199a/0x26b0
[  135.519639][T10078]  ? __pfx_wiphy_register+0x10/0x10
[  135.519660][T10078]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  135.519689][T10078]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  135.519717][T10078]  ieee80211_register_hw+0x33e1/0x4120
[  135.519754][T10078]  ? ieee80211_register_hw+0x1441/0x4120
[  135.519785][T10078]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  135.519812][T10078]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.519843][T10078]  ? __hrtimer_setup+0x187/0x210
[  135.519859][T10078]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  135.519893][T10078]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  135.519940][T10078]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  135.519961][T10078]  ? trace_kmalloc+0x1f/0xd0
[  135.519978][T10078]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  135.519998][T10078]  ? kstrndup+0xbf/0x160
[  135.520019][T10078]  hwsim_new_radio_nl+0xea4/0x1b10
[  135.520040][T10078]  ? __pfx___nla_validate_parse+0x10/0x10
[  135.520073][T10078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  135.520109][T10078]  ? __nla_parse+0x40/0x60
[  135.520131][T10078]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  135.520159][T10078]  genl_family_rcv_msg_doit+0x215/0x300
[  135.520185][T10078]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  135.520216][T10078]  ? bpf_lsm_capable+0x9/0x20
[  135.520236][T10078]  ? security_capable+0x7e/0x2e0
[  135.520299][T10078]  genl_rcv_msg+0x60e/0x790
[  135.520327][T10078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  135.520345][T10078]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  135.520385][T10078]  netlink_rcv_skb+0x208/0x470
[  135.520409][T10078]  ? __pfx_genl_rcv_msg+0x10/0x10
[  135.520426][T10078]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.520461][T10078]  ? down_read+0x1ad/0x2e0
[  135.520485][T10078]  genl_rcv+0x28/0x40
[  135.520501][T10078]  netlink_unicast+0x75c/0x8e0
[  135.520530][T10078]  netlink_sendmsg+0x805/0xb30
[  135.520565][T10078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.520605][T10078]  ? aa_sock_msg_perm+0x94/0x160
[  135.520626][T10078]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.520659][T10078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.520681][T10078]  __sock_sendmsg+0x21c/0x270
[  135.520700][T10078]  ____sys_sendmsg+0x505/0x830
[  135.520731][T10078]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.520761][T10078]  ? import_iovec+0x74/0xa0
[  135.520787][T10078]  ___sys_sendmsg+0x21f/0x2a0
[  135.520809][T10078]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.520856][T10078]  ? __fget_files+0x2a/0x420
[  135.520872][T10078]  ? __fget_files+0x3a0/0x420
[  135.520896][T10078]  __x64_sys_sendmsg+0x19b/0x260
[  135.520934][T10078]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.520962][T10078]  ? rcu_is_watching+0x15/0xb0
[  135.520987][T10078]  ? do_syscall_64+0xbe/0x3b0
[  135.521010][T10078]  do_syscall_64+0xfa/0x3b0
[  135.521025][T10078]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.521040][T10078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.521054][T10078]  ? exc_page_fault+0x9f/0xf0
[  135.521070][T10078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.521089][T10078] RIP: 0033:0x7f41a738e9a9
[  135.521110][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.521127][T10078] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.521146][T10078] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  135.521157][T10078] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  135.521165][T10078] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  135.521176][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.521186][T10078] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  135.521212][T10078]  </TASK>
[  135.868183][T10105] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  135.870894][T10105] CPU: 0 UID: 0 PID: 10105 Comm: syz.1.1414 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  135.870913][T10105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.870921][T10105] Call Trace:
[  135.870926][T10105]  <TASK>
[  135.870933][T10105]  dump_stack_lvl+0x189/0x250
[  135.870954][T10105]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.870966][T10105]  ? __pfx__printk+0x10/0x10
[  135.870984][T10105]  ? kernfs_path_from_node+0x2c/0x260
[  135.871000][T10105]  ? kernfs_path_from_node+0x2c/0x260
[  135.871013][T10105]  ? kernfs_path_from_node+0x2c/0x260
[  135.871031][T10105]  ? kernfs_path_from_node+0x22c/0x260
[  135.871046][T10105]  ? kernfs_path_from_node+0x2c/0x260
[  135.871063][T10105]  sysfs_warn_dup+0x8e/0xa0
[  135.871085][T10105]  sysfs_do_create_link_sd+0xc0/0x110
[  135.871100][T10105]  device_add_class_symlinks+0x1cf/0x240
[  135.871129][T10105]  device_add+0x475/0xb50
[  135.871156][T10105]  wiphy_register+0x199a/0x26b0
[  135.871190][T10105]  ? __pfx_wiphy_register+0x10/0x10
[  135.871203][T10105]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  135.871221][T10105]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  135.871238][T10105]  ieee80211_register_hw+0x33e1/0x4120
[  135.871290][T10105]  ? ieee80211_register_hw+0x1441/0x4120
[  135.871308][T10105]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  135.871323][T10105]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.871344][T10105]  ? __hrtimer_setup+0x187/0x210
[  135.871355][T10105]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  135.871372][T10105]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  135.871402][T10105]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  135.871415][T10105]  ? trace_kmalloc+0x1f/0xd0
[  135.871426][T10105]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  135.871438][T10105]  ? kstrndup+0xbf/0x160
[  135.871452][T10105]  hwsim_new_radio_nl+0xea4/0x1b10
[  135.871466][T10105]  ? __pfx___nla_validate_parse+0x10/0x10
[  135.871483][T10105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  135.871502][T10105]  ? __nla_parse+0x40/0x60
[  135.871513][T10105]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  135.871528][T10105]  genl_family_rcv_msg_doit+0x215/0x300
[  135.871546][T10105]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  135.871562][T10105]  ? bpf_lsm_capable+0x9/0x20
[  135.871577][T10105]  ? security_capable+0x7e/0x2e0
[  135.871593][T10105]  genl_rcv_msg+0x60e/0x790
[  135.871605][T10105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  135.871615][T10105]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  135.871634][T10105]  netlink_rcv_skb+0x208/0x470
[  135.871648][T10105]  ? __pfx_genl_rcv_msg+0x10/0x10
[  135.871657][T10105]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.871677][T10105]  ? down_read+0x1ad/0x2e0
[  135.871691][T10105]  genl_rcv+0x28/0x40
[  135.871699][T10105]  netlink_unicast+0x75c/0x8e0
[  135.871715][T10105]  netlink_sendmsg+0x805/0xb30
[  135.871732][T10105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.871745][T10105]  ? aa_sock_msg_perm+0x94/0x160
[  135.871755][T10105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.871764][T10105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.871776][T10105]  __sock_sendmsg+0x21c/0x270
[  135.871789][T10105]  ____sys_sendmsg+0x505/0x830
[  135.871806][T10105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.871824][T10105]  ? import_iovec+0x74/0xa0
[  135.871837][T10105]  ___sys_sendmsg+0x21f/0x2a0
[  135.871851][T10105]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.871882][T10105]  ? __fget_files+0x2a/0x420
[  135.871890][T10105]  ? __fget_files+0x3a0/0x420
[  135.871902][T10105]  __x64_sys_sendmsg+0x19b/0x260
[  135.871916][T10105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.871934][T10105]  ? rcu_is_watching+0x15/0xb0
[  135.871948][T10105]  ? do_syscall_64+0xbe/0x3b0
[  135.871968][T10105]  do_syscall_64+0xfa/0x3b0
[  135.871976][T10105]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.871985][T10105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.871993][T10105]  ? exc_page_fault+0x9f/0xf0
[  135.872002][T10105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.872010][T10105] RIP: 0033:0x7ff0e638e9a9
[  135.872022][T10105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.872031][T10105] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.872041][T10105] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  135.872050][T10105] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  135.872056][T10105] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  135.872062][T10105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.872067][T10105] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  135.872082][T10105]  </TASK>
[  136.050219][T10107] tipc: Started in network mode
[  136.051932][T10107] tipc: Node identity a6ba095611, cluster identity 4711
[  136.054281][T10107] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  136.083361][T10107] tipc: Resetting bearer <eth:syzkaller0>
[  136.090931][T10106] tipc: Resetting bearer <eth:syzkaller0>
[  136.183014][T10113] __nla_validate_parse: 2 callbacks suppressed
[  136.183037][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'.
[  136.235767][T10117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  137.091271][  T792] tipc: Node number set to 3082422614
[  137.724118][T10106] tipc: Disabling bearer <eth:syzkaller0>
[  137.731917][T10113] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  137.803881][T10123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.854744][T10123] ieee802154 phy0 wpan0: encryption failed: -22
[  137.960862][T10134] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.965779][T10134] bond0: (slave bond2): Enslaving as an active interface with an up link
[  137.970896][T10135] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  137.973441][T10135] CPU: 1 UID: 0 PID: 10135 Comm: syz.0.1424 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  137.973457][T10135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.973464][T10135] Call Trace:
[  137.973471][T10135]  <TASK>
[  137.973477][T10135]  dump_stack_lvl+0x189/0x250
[  137.973499][T10135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.973511][T10135]  ? __pfx__printk+0x10/0x10
[  137.973526][T10135]  ? kernfs_path_from_node+0x2c/0x260
[  137.973540][T10135]  ? kernfs_path_from_node+0x2c/0x260
[  137.973548][T10135]  ? kernfs_path_from_node+0x2c/0x260
[  137.973557][T10135]  ? kernfs_path_from_node+0x22c/0x260
[  137.973565][T10135]  ? kernfs_path_from_node+0x2c/0x260
[  137.973575][T10135]  sysfs_warn_dup+0x8e/0xa0
[  137.973589][T10135]  sysfs_do_create_link_sd+0xc0/0x110
[  137.973601][T10135]  device_add_class_symlinks+0x1cf/0x240
[  137.973618][T10135]  device_add+0x475/0xb50
[  137.973635][T10135]  wiphy_register+0x199a/0x26b0
[  137.973656][T10135]  ? __pfx_wiphy_register+0x10/0x10
[  137.973666][T10135]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  137.973685][T10135]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  137.973703][T10135]  ieee80211_register_hw+0x33e1/0x4120
[  137.973737][T10135]  ? ieee80211_register_hw+0x1441/0x4120
[  137.973756][T10135]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  137.973773][T10135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.973795][T10135]  ? __hrtimer_setup+0x187/0x210
[  137.973806][T10135]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  137.973822][T10135]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  137.973851][T10135]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  137.973862][T10135]  ? trace_kmalloc+0x1f/0xd0
[  137.973875][T10135]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  137.973889][T10135]  ? kstrndup+0xbf/0x160
[  137.973904][T10135]  hwsim_new_radio_nl+0xea4/0x1b10
[  137.973919][T10135]  ? __pfx___nla_validate_parse+0x10/0x10
[  137.973939][T10135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  137.973958][T10135]  ? __nla_parse+0x40/0x60
[  137.973971][T10135]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  137.973985][T10135]  genl_family_rcv_msg_doit+0x215/0x300
[  137.973999][T10135]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  137.974016][T10135]  ? bpf_lsm_capable+0x9/0x20
[  137.974028][T10135]  ? security_capable+0x7e/0x2e0
[  137.974044][T10135]  genl_rcv_msg+0x60e/0x790
[  137.974058][T10135]  ? __pfx_genl_rcv_msg+0x10/0x10
[  137.974068][T10135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  137.974088][T10135]  netlink_rcv_skb+0x208/0x470
[  137.974107][T10135]  ? __pfx_genl_rcv_msg+0x10/0x10
[  137.974156][T10135]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.974194][T10135]  ? down_read+0x1ad/0x2e0
[  137.974219][T10135]  genl_rcv+0x28/0x40
[  137.974233][T10135]  netlink_unicast+0x75c/0x8e0
[  137.974263][T10135]  netlink_sendmsg+0x805/0xb30
[  137.974292][T10135]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.974316][T10135]  ? aa_sock_msg_perm+0x94/0x160
[  137.974335][T10135]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.974352][T10135]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.974373][T10135]  __sock_sendmsg+0x21c/0x270
[  137.974396][T10135]  ____sys_sendmsg+0x505/0x830
[  137.974445][T10135]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.974479][T10135]  ? import_iovec+0x74/0xa0
[  137.974509][T10135]  ___sys_sendmsg+0x21f/0x2a0
[  137.974532][T10135]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.974581][T10135]  ? __fget_files+0x2a/0x420
[  137.974591][T10135]  ? __fget_files+0x3a0/0x420
[  137.974605][T10135]  __x64_sys_sendmsg+0x19b/0x260
[  137.974621][T10135]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.974641][T10135]  ? rcu_is_watching+0x15/0xb0
[  137.974657][T10135]  ? do_syscall_64+0xbe/0x3b0
[  137.974670][T10135]  do_syscall_64+0xfa/0x3b0
[  137.974680][T10135]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.974689][T10135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.974699][T10135]  ? exc_page_fault+0x9f/0xf0
[  137.974710][T10135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.974727][T10135] RIP: 0033:0x7f751c78e9a9
[  137.974740][T10135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.974750][T10135] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.974762][T10135] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  137.974769][T10135] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  137.974776][T10135] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  137.974782][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.974788][T10135] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  137.974805][T10135]  </TASK>
[  138.147667][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.150053][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.152290][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.154478][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.156688][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.167201][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.173798][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.176260][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.179290][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.181592][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.183818][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.186062][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.188453][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.192559][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.195798][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.199424][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.199465][T10137] netlink: 'syz.2.1423': attribute type 13 has an invalid length.
[  138.202390][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.211749][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.214363][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.217083][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.220072][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.223000][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.225620][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.228462][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.230987][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.233748][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.236771][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.240027][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.242643][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.245271][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.248682][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.251714][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.255209][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.258433][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.261638][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.278252][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.280511][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.282694][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.285544][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.288762][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.291383][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.293860][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.296598][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.299576][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.302520][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.305578][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.308770][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.311832][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.314486][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.317148][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.320383][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.324959][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.327992][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.330515][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.333606][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.336704][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.339271][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.341606][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.343802][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.346031][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.348550][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.350922][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.353350][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.355702][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.358500][T10144] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.445869][T10151] pim6reg: entered allmulticast mode
[  138.449645][T10151] pim6reg: left allmulticast mode
[  138.536236][T10156] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  138.540748][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.0.1432 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  138.540776][T10156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.540788][T10156] Call Trace:
[  138.540797][T10156]  <TASK>
[  138.540807][T10156]  dump_stack_lvl+0x189/0x250
[  138.540839][T10156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.540862][T10156]  ? __pfx__printk+0x10/0x10
[  138.540885][T10156]  ? kernfs_path_from_node+0x2c/0x260
[  138.540901][T10156]  ? kernfs_path_from_node+0x2c/0x260
[  138.540914][T10156]  ? kernfs_path_from_node+0x2c/0x260
[  138.540930][T10156]  ? kernfs_path_from_node+0x22c/0x260
[  138.540944][T10156]  ? kernfs_path_from_node+0x2c/0x260
[  138.540962][T10156]  sysfs_warn_dup+0x8e/0xa0
[  138.540988][T10156]  sysfs_do_create_link_sd+0xc0/0x110
[  138.541007][T10156]  device_add_class_symlinks+0x1cf/0x240
[  138.541035][T10156]  device_add+0x475/0xb50
[  138.541061][T10156]  wiphy_register+0x199a/0x26b0
[  138.541128][T10156]  ? __pfx_wiphy_register+0x10/0x10
[  138.541150][T10156]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  138.541179][T10156]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  138.541205][T10156]  ieee80211_register_hw+0x33e1/0x4120
[  138.541243][T10156]  ? ieee80211_register_hw+0x1441/0x4120
[  138.541269][T10156]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  138.541294][T10156]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.541322][T10156]  ? __hrtimer_setup+0x187/0x210
[  138.541338][T10156]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  138.541367][T10156]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  138.541410][T10156]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  138.541443][T10156]  ? trace_kmalloc+0x1f/0xd0
[  138.541464][T10156]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  138.541488][T10156]  ? kstrndup+0xbf/0x160
[  138.541510][T10156]  hwsim_new_radio_nl+0xea4/0x1b10
[  138.541533][T10156]  ? __pfx___nla_validate_parse+0x10/0x10
[  138.541563][T10156]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.541598][T10156]  ? __nla_parse+0x40/0x60
[  138.541620][T10156]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  138.541646][T10156]  genl_family_rcv_msg_doit+0x215/0x300
[  138.541668][T10156]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.541693][T10156]  ? bpf_lsm_capable+0x9/0x20
[  138.541714][T10156]  ? security_capable+0x7e/0x2e0
[  138.541738][T10156]  genl_rcv_msg+0x60e/0x790
[  138.541757][T10156]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.541774][T10156]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.541808][T10156]  netlink_rcv_skb+0x208/0x470
[  138.541830][T10156]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.541848][T10156]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.541880][T10156]  ? down_read+0x1ad/0x2e0
[  138.541900][T10156]  genl_rcv+0x28/0x40
[  138.541913][T10156]  netlink_unicast+0x75c/0x8e0
[  138.541943][T10156]  netlink_sendmsg+0x805/0xb30
[  138.541973][T10156]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.541996][T10156]  ? aa_sock_msg_perm+0x94/0x160
[  138.542014][T10156]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.542030][T10156]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.542050][T10156]  __sock_sendmsg+0x21c/0x270
[  138.542069][T10156]  ____sys_sendmsg+0x505/0x830
[  138.542132][T10156]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.542163][T10156]  ? import_iovec+0x74/0xa0
[  138.542190][T10156]  ___sys_sendmsg+0x21f/0x2a0
[  138.542215][T10156]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.542270][T10156]  ? __fget_files+0x2a/0x420
[  138.542284][T10156]  ? __fget_files+0x3a0/0x420
[  138.542308][T10156]  __x64_sys_sendmsg+0x19b/0x260
[  138.542335][T10156]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.542374][T10156]  ? do_syscall_64+0xbe/0x3b0
[  138.542394][T10156]  do_syscall_64+0xfa/0x3b0
[  138.542410][T10156]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.542434][T10156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.542451][T10156]  ? exc_page_fault+0x9f/0xf0
[  138.542468][T10156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.542483][T10156] RIP: 0033:0x7f751c78e9a9
[  138.542499][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.542515][T10156] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.542534][T10156] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  138.542546][T10156] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  138.542554][T10156] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  138.542562][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.542569][T10156] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  138.542587][T10156]  </TASK>
[  138.783899][T10162] syzkaller1: entered promiscuous mode
[  138.785884][T10162] syzkaller1: entered allmulticast mode
[  138.872016][T10178] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  138.875177][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.1.1439 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  138.875195][T10178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.875203][T10178] Call Trace:
[  138.875208][T10178]  <TASK>
[  138.875213][T10178]  dump_stack_lvl+0x189/0x250
[  138.875251][T10178]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.875264][T10178]  ? __pfx__printk+0x10/0x10
[  138.875279][T10178]  ? kernfs_path_from_node+0x2c/0x260
[  138.875290][T10178]  ? kernfs_path_from_node+0x2c/0x260
[  138.875314][T10178]  ? kernfs_path_from_node+0x2c/0x260
[  138.875325][T10178]  ? kernfs_path_from_node+0x22c/0x260
[  138.875333][T10178]  ? kernfs_path_from_node+0x2c/0x260
[  138.875345][T10178]  sysfs_warn_dup+0x8e/0xa0
[  138.875362][T10178]  sysfs_do_create_link_sd+0xc0/0x110
[  138.875374][T10178]  device_add_class_symlinks+0x1cf/0x240
[  138.875400][T10178]  device_add+0x475/0xb50
[  138.875416][T10178]  wiphy_register+0x199a/0x26b0
[  138.875439][T10178]  ? __pfx_wiphy_register+0x10/0x10
[  138.875451][T10178]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  138.875470][T10178]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  138.875487][T10178]  ieee80211_register_hw+0x33e1/0x4120
[  138.875509][T10178]  ? ieee80211_register_hw+0x1441/0x4120
[  138.875527][T10178]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  138.875542][T10178]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.875561][T10178]  ? __hrtimer_setup+0x187/0x210
[  138.875572][T10178]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  138.875589][T10178]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  138.875618][T10178]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  138.875630][T10178]  ? trace_kmalloc+0x1f/0xd0
[  138.875645][T10178]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  138.875658][T10178]  ? kstrndup+0xbf/0x160
[  138.875672][T10178]  hwsim_new_radio_nl+0xea4/0x1b10
[  138.875687][T10178]  ? __pfx___nla_validate_parse+0x10/0x10
[  138.875705][T10178]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.875723][T10178]  ? __nla_parse+0x40/0x60
[  138.875735][T10178]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  138.875750][T10178]  genl_family_rcv_msg_doit+0x215/0x300
[  138.875764][T10178]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.875780][T10178]  ? bpf_lsm_capable+0x9/0x20
[  138.875792][T10178]  ? security_capable+0x7e/0x2e0
[  138.875805][T10178]  genl_rcv_msg+0x60e/0x790
[  138.875818][T10178]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.875826][T10178]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  138.875845][T10178]  netlink_rcv_skb+0x208/0x470
[  138.875859][T10178]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.875869][T10178]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.875890][T10178]  ? down_read+0x1ad/0x2e0
[  138.875901][T10178]  genl_rcv+0x28/0x40
[  138.875909][T10178]  netlink_unicast+0x75c/0x8e0
[  138.875925][T10178]  netlink_sendmsg+0x805/0xb30
[  138.875943][T10178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.875957][T10178]  ? aa_sock_msg_perm+0x94/0x160
[  138.875967][T10178]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.875977][T10178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.875989][T10178]  __sock_sendmsg+0x21c/0x270
[  138.876003][T10178]  ____sys_sendmsg+0x505/0x830
[  138.876019][T10178]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.876037][T10178]  ? import_iovec+0x74/0xa0
[  138.876051][T10178]  ___sys_sendmsg+0x21f/0x2a0
[  138.876092][T10178]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.876128][T10178]  ? __fget_files+0x2a/0x420
[  138.876137][T10178]  ? __fget_files+0x3a0/0x420
[  138.876153][T10178]  __x64_sys_sendmsg+0x19b/0x260
[  138.876169][T10178]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.876190][T10178]  ? rcu_is_watching+0x15/0xb0
[  138.876205][T10178]  ? do_syscall_64+0xbe/0x3b0
[  138.876218][T10178]  do_syscall_64+0xfa/0x3b0
[  138.876226][T10178]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.876235][T10178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.876244][T10178]  ? exc_page_fault+0x9f/0xf0
[  138.876253][T10178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.876262][T10178] RIP: 0033:0x7ff0e638e9a9
[  138.876274][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.876282][T10178] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.876293][T10178] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  138.876299][T10178] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  138.876305][T10178] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  138.876310][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.876314][T10178] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  138.876329][T10178]  </TASK>
[  139.243288][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'.
[  139.266712][T10191] netlink: del zone limit has 4 unknown bytes
[  139.365882][T10195] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  139.568780][   T33] audit: type=1804 audit(1752935275.210:4): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1452" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2548 res=1 errno=0
[  139.576836][   T33] audit: type=1800 audit(1752935275.220:5): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1452" name="cgroup.controllers" dev="tmpfs" ino=2548 res=0 errno=0
[  139.586608][   T33] audit: type=1804 audit(1752935275.230:6): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1452" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2548 res=1 errno=0
[  139.691407][T10223] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  139.693834][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.2.1455 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  139.693850][T10223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.693858][T10223] Call Trace:
[  139.693863][T10223]  <TASK>
[  139.693869][T10223]  dump_stack_lvl+0x189/0x250
[  139.693891][T10223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.693903][T10223]  ? __pfx__printk+0x10/0x10
[  139.693918][T10223]  ? kernfs_path_from_node+0x2c/0x260
[  139.693929][T10223]  ? kernfs_path_from_node+0x2c/0x260
[  139.693936][T10223]  ? kernfs_path_from_node+0x2c/0x260
[  139.693945][T10223]  ? kernfs_path_from_node+0x22c/0x260
[  139.693952][T10223]  ? kernfs_path_from_node+0x2c/0x260
[  139.693962][T10223]  sysfs_warn_dup+0x8e/0xa0
[  139.693975][T10223]  sysfs_do_create_link_sd+0xc0/0x110
[  139.693986][T10223]  device_add_class_symlinks+0x1cf/0x240
[  139.694002][T10223]  device_add+0x475/0xb50
[  139.694037][T10223]  wiphy_register+0x199a/0x26b0
[  139.694066][T10223]  ? __pfx_wiphy_register+0x10/0x10
[  139.694078][T10223]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  139.694097][T10223]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  139.694114][T10223]  ieee80211_register_hw+0x33e1/0x4120
[  139.694139][T10223]  ? ieee80211_register_hw+0x1441/0x4120
[  139.694156][T10223]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  139.694170][T10223]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.694189][T10223]  ? __hrtimer_setup+0x187/0x210
[  139.694199][T10223]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  139.694215][T10223]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  139.694242][T10223]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  139.694254][T10223]  ? trace_kmalloc+0x1f/0xd0
[  139.694268][T10223]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  139.694282][T10223]  ? kstrndup+0xbf/0x160
[  139.694298][T10223]  hwsim_new_radio_nl+0xea4/0x1b10
[  139.694312][T10223]  ? __pfx___nla_validate_parse+0x10/0x10
[  139.694331][T10223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  139.694349][T10223]  ? __nla_parse+0x40/0x60
[  139.694370][T10223]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  139.694387][T10223]  genl_family_rcv_msg_doit+0x215/0x300
[  139.694401][T10223]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  139.694418][T10223]  ? bpf_lsm_capable+0x9/0x20
[  139.694431][T10223]  ? security_capable+0x7e/0x2e0
[  139.694446][T10223]  genl_rcv_msg+0x60e/0x790
[  139.694458][T10223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.694484][T10223]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  139.694507][T10223]  netlink_rcv_skb+0x208/0x470
[  139.694521][T10223]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.694532][T10223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  139.694554][T10223]  ? down_read+0x1ad/0x2e0
[  139.694567][T10223]  genl_rcv+0x28/0x40
[  139.694576][T10223]  netlink_unicast+0x75c/0x8e0
[  139.694593][T10223]  netlink_sendmsg+0x805/0xb30
[  139.694610][T10223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.694624][T10223]  ? aa_sock_msg_perm+0x94/0x160
[  139.694634][T10223]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  139.694644][T10223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.694656][T10223]  __sock_sendmsg+0x21c/0x270
[  139.694668][T10223]  ____sys_sendmsg+0x505/0x830
[  139.694684][T10223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.694701][T10223]  ? import_iovec+0x74/0xa0
[  139.694715][T10223]  ___sys_sendmsg+0x21f/0x2a0
[  139.694729][T10223]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.694761][T10223]  ? __fget_files+0x2a/0x420
[  139.694769][T10223]  ? __fget_files+0x3a0/0x420
[  139.694782][T10223]  __x64_sys_sendmsg+0x19b/0x260
[  139.694796][T10223]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.694814][T10223]  ? rcu_is_watching+0x15/0xb0
[  139.694827][T10223]  ? do_syscall_64+0xbe/0x3b0
[  139.694840][T10223]  do_syscall_64+0xfa/0x3b0
[  139.694848][T10223]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.694857][T10223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.694866][T10223]  ? exc_page_fault+0x9f/0xf0
[  139.694875][T10223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.694883][T10223] RIP: 0033:0x7f41a738e9a9
[  139.694895][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.694903][T10223] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.694914][T10223] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  139.694920][T10223] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  139.694927][T10223] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  139.694934][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.694940][T10223] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  139.694955][T10223]  </TASK>
[  140.107917][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'.
[  140.904819][T10249] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  140.908241][T10249] CPU: 1 UID: 0 PID: 10249 Comm: syz.0.1464 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  140.908268][T10249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.908279][T10249] Call Trace:
[  140.908286][T10249]  <TASK>
[  140.908295][T10249]  dump_stack_lvl+0x189/0x250
[  140.908327][T10249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.908348][T10249]  ? __pfx__printk+0x10/0x10
[  140.908371][T10249]  ? kernfs_path_from_node+0x2c/0x260
[  140.908391][T10249]  ? kernfs_path_from_node+0x2c/0x260
[  140.908404][T10249]  ? kernfs_path_from_node+0x2c/0x260
[  140.908422][T10249]  ? kernfs_path_from_node+0x22c/0x260
[  140.908436][T10249]  ? kernfs_path_from_node+0x2c/0x260
[  140.908456][T10249]  sysfs_warn_dup+0x8e/0xa0
[  140.908486][T10249]  sysfs_do_create_link_sd+0xc0/0x110
[  140.908512][T10249]  device_add_class_symlinks+0x1cf/0x240
[  140.908543][T10249]  device_add+0x475/0xb50
[  140.908571][T10249]  wiphy_register+0x199a/0x26b0
[  140.908609][T10249]  ? __pfx_wiphy_register+0x10/0x10
[  140.908628][T10249]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  140.908655][T10249]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  140.908680][T10249]  ieee80211_register_hw+0x33e1/0x4120
[  140.908719][T10249]  ? ieee80211_register_hw+0x1441/0x4120
[  140.908749][T10249]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  140.908776][T10249]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.908808][T10249]  ? __hrtimer_setup+0x187/0x210
[  140.908823][T10249]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  140.908853][T10249]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  140.908902][T10249]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  140.908923][T10249]  ? trace_kmalloc+0x1f/0xd0
[  140.908974][T10249]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  140.908998][T10249]  ? kstrndup+0xbf/0x160
[  140.909024][T10249]  hwsim_new_radio_nl+0xea4/0x1b10
[  140.909050][T10249]  ? __pfx___nla_validate_parse+0x10/0x10
[  140.909085][T10249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  140.909122][T10249]  ? __nla_parse+0x40/0x60
[  140.909145][T10249]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  140.909171][T10249]  genl_family_rcv_msg_doit+0x215/0x300
[  140.909194][T10249]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  140.909225][T10249]  ? bpf_lsm_capable+0x9/0x20
[  140.909245][T10249]  ? security_capable+0x7e/0x2e0
[  140.909287][T10249]  genl_rcv_msg+0x60e/0x790
[  140.909313][T10249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  140.909330][T10249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  140.909367][T10249]  netlink_rcv_skb+0x208/0x470
[  140.909393][T10249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  140.909412][T10249]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  140.909451][T10249]  ? down_read+0x1ad/0x2e0
[  140.909472][T10249]  genl_rcv+0x28/0x40
[  140.909486][T10249]  netlink_unicast+0x75c/0x8e0
[  140.909523][T10249]  netlink_sendmsg+0x805/0xb30
[  140.909555][T10249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.909583][T10249]  ? aa_sock_msg_perm+0x94/0x160
[  140.909604][T10249]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  140.909620][T10249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.909642][T10249]  __sock_sendmsg+0x21c/0x270
[  140.909665][T10249]  ____sys_sendmsg+0x505/0x830
[  140.909693][T10249]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.909726][T10249]  ? import_iovec+0x74/0xa0
[  140.909751][T10249]  ___sys_sendmsg+0x21f/0x2a0
[  140.909775][T10249]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.909834][T10249]  ? __fget_files+0x2a/0x420
[  140.909847][T10249]  ? __fget_files+0x3a0/0x420
[  140.909871][T10249]  __x64_sys_sendmsg+0x19b/0x260
[  140.909897][T10249]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  140.909931][T10249]  ? rcu_is_watching+0x15/0xb0
[  140.909991][T10249]  ? do_syscall_64+0xbe/0x3b0
[  140.910016][T10249]  do_syscall_64+0xfa/0x3b0
[  140.910033][T10249]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.910050][T10249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.910066][T10249]  ? exc_page_fault+0x9f/0xf0
[  140.910084][T10249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.910099][T10249] RIP: 0033:0x7f751c78e9a9
[  140.910116][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.910130][T10249] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.910149][T10249] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  140.910161][T10249] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  140.910173][T10249] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  140.910183][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.910193][T10249] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  140.910221][T10249]  </TASK>
[  141.204975][T10260] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1468'.
[  141.604312][T10294] xt_hashlimit: invalid interval
[  141.656718][T10296] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1481'.
[  141.664792][T10296] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1481'.
[  141.842449][T10316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.882627][T10318] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1488'.
[  141.910474][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'.
[  142.016698][T10326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'.
[  142.040063][T10331] netlink: 'syz.0.1493': attribute type 2 has an invalid length.
[  142.042742][T10331] netlink: 'syz.0.1493': attribute type 1 has an invalid length.
[  142.083320][T10336] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1494'.
[  142.087377][T10336] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1494'.
[  142.090445][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1495'.
[  142.093688][T10335] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1495'.
[  142.298963][T10349] macsec0: entered promiscuous mode
[  142.301885][T10349] macsec2: entered allmulticast mode
[  142.303916][T10349] macsec0: entered allmulticast mode
[  142.305697][T10349] veth1_macvtap: entered allmulticast mode
[  142.558303][T10361] sock: sock_timestamping_bind_phc: sock not bind to device
[  143.290331][T10389] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  144.196856][T10410] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  144.201937][T10410] CPU: 1 UID: 0 PID: 10410 Comm: syz.2.1523 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  144.201963][T10410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.201995][T10410] Call Trace:
[  144.202005][T10410]  <TASK>
[  144.202013][T10410]  dump_stack_lvl+0x189/0x250
[  144.202041][T10410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.202074][T10410]  ? __pfx__printk+0x10/0x10
[  144.202089][T10410]  ? kernfs_path_from_node+0x2c/0x260
[  144.202107][T10410]  ? kernfs_path_from_node+0x2c/0x260
[  144.202116][T10410]  ? kernfs_path_from_node+0x2c/0x260
[  144.202126][T10410]  ? kernfs_path_from_node+0x22c/0x260
[  144.202135][T10410]  ? kernfs_path_from_node+0x2c/0x260
[  144.202146][T10410]  sysfs_warn_dup+0x8e/0xa0
[  144.202163][T10410]  sysfs_do_create_link_sd+0xc0/0x110
[  144.202174][T10410]  device_add_class_symlinks+0x1cf/0x240
[  144.202190][T10410]  device_add+0x475/0xb50
[  144.202206][T10410]  wiphy_register+0x199a/0x26b0
[  144.202229][T10410]  ? __pfx_wiphy_register+0x10/0x10
[  144.202239][T10410]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  144.202258][T10410]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  144.202273][T10410]  ieee80211_register_hw+0x33e1/0x4120
[  144.202295][T10410]  ? ieee80211_register_hw+0x1441/0x4120
[  144.202314][T10410]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  144.202330][T10410]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.202352][T10410]  ? __hrtimer_setup+0x187/0x210
[  144.202367][T10410]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  144.202383][T10410]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  144.202411][T10410]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  144.202422][T10410]  ? trace_kmalloc+0x1f/0xd0
[  144.202437][T10410]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  144.202463][T10410]  ? kstrndup+0xbf/0x160
[  144.202480][T10410]  hwsim_new_radio_nl+0xea4/0x1b10
[  144.202496][T10410]  ? __pfx___nla_validate_parse+0x10/0x10
[  144.202517][T10410]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.202538][T10410]  ? __nla_parse+0x40/0x60
[  144.202552][T10410]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  144.202568][T10410]  genl_family_rcv_msg_doit+0x215/0x300
[  144.202582][T10410]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  144.202600][T10410]  ? bpf_lsm_capable+0x9/0x20
[  144.202613][T10410]  ? security_capable+0x7e/0x2e0
[  144.202627][T10410]  genl_rcv_msg+0x60e/0x790
[  144.202639][T10410]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.202648][T10410]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.202667][T10410]  netlink_rcv_skb+0x208/0x470
[  144.202681][T10410]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.202691][T10410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.202711][T10410]  ? down_read+0x1ad/0x2e0
[  144.202723][T10410]  genl_rcv+0x28/0x40
[  144.202730][T10410]  netlink_unicast+0x75c/0x8e0
[  144.202775][T10410]  netlink_sendmsg+0x805/0xb30
[  144.202796][T10410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.202811][T10410]  ? aa_sock_msg_perm+0x94/0x160
[  144.202824][T10410]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.202836][T10410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.202850][T10410]  __sock_sendmsg+0x21c/0x270
[  144.202863][T10410]  ____sys_sendmsg+0x505/0x830
[  144.202879][T10410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.202897][T10410]  ? import_iovec+0x74/0xa0
[  144.202911][T10410]  ___sys_sendmsg+0x21f/0x2a0
[  144.202925][T10410]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.202957][T10410]  ? __fget_files+0x2a/0x420
[  144.202965][T10410]  ? __fget_files+0x3a0/0x420
[  144.202978][T10410]  __x64_sys_sendmsg+0x19b/0x260
[  144.202992][T10410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.203011][T10410]  ? rcu_is_watching+0x15/0xb0
[  144.203024][T10410]  ? do_syscall_64+0xbe/0x3b0
[  144.203036][T10410]  do_syscall_64+0xfa/0x3b0
[  144.203045][T10410]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.203054][T10410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.203062][T10410]  ? exc_page_fault+0x9f/0xf0
[  144.203072][T10410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.203081][T10410] RIP: 0033:0x7f41a738e9a9
[  144.203092][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.203108][T10410] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.203120][T10410] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  144.203128][T10410] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  144.203135][T10410] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  144.203141][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.203148][T10410] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  144.203165][T10410]  </TASK>
[  145.010060][T10443] x_tables: duplicate underflow at hook 2
[  145.258952][T10471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.936055][T10491] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  145.938746][T10491] CPU: 1 UID: 0 PID: 10491 Comm: syz.0.1550 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  145.938770][T10491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.938781][T10491] Call Trace:
[  145.938789][T10491]  <TASK>
[  145.938798][T10491]  dump_stack_lvl+0x189/0x250
[  145.938818][T10491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.938830][T10491]  ? __pfx__printk+0x10/0x10
[  145.938845][T10491]  ? kernfs_path_from_node+0x2c/0x260
[  145.938857][T10491]  ? kernfs_path_from_node+0x2c/0x260
[  145.938864][T10491]  ? kernfs_path_from_node+0x2c/0x260
[  145.938875][T10491]  ? kernfs_path_from_node+0x22c/0x260
[  145.938883][T10491]  ? kernfs_path_from_node+0x2c/0x260
[  145.938893][T10491]  sysfs_warn_dup+0x8e/0xa0
[  145.938907][T10491]  sysfs_do_create_link_sd+0xc0/0x110
[  145.938918][T10491]  device_add_class_symlinks+0x1cf/0x240
[  145.938941][T10491]  device_add+0x475/0xb50
[  145.938957][T10491]  wiphy_register+0x199a/0x26b0
[  145.938980][T10491]  ? __pfx_wiphy_register+0x10/0x10
[  145.938992][T10491]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  145.939010][T10491]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  145.939027][T10491]  ieee80211_register_hw+0x33e1/0x4120
[  145.939051][T10491]  ? ieee80211_register_hw+0x1441/0x4120
[  145.939067][T10491]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  145.939082][T10491]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.939100][T10491]  ? __hrtimer_setup+0x187/0x210
[  145.939111][T10491]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  145.939127][T10491]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  145.939156][T10491]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  145.939168][T10491]  ? trace_kmalloc+0x1f/0xd0
[  145.939181][T10491]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  145.939194][T10491]  ? kstrndup+0xbf/0x160
[  145.939207][T10491]  hwsim_new_radio_nl+0xea4/0x1b10
[  145.939221][T10491]  ? __pfx___nla_validate_parse+0x10/0x10
[  145.939239][T10491]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.939252][T10491]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  145.939266][T10491]  ? __nla_parse+0x40/0x60
[  145.939279][T10491]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  145.939293][T10491]  genl_family_rcv_msg_doit+0x215/0x300
[  145.939307][T10491]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.939322][T10491]  ? bpf_lsm_capable+0x9/0x20
[  145.939334][T10491]  ? security_capable+0x7e/0x2e0
[  145.939347][T10491]  genl_rcv_msg+0x60e/0x790
[  145.939359][T10491]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.939367][T10491]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  145.939385][T10491]  netlink_rcv_skb+0x208/0x470
[  145.939398][T10491]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.939407][T10491]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.939427][T10491]  ? down_read+0x1ad/0x2e0
[  145.939438][T10491]  genl_rcv+0x28/0x40
[  145.939445][T10491]  netlink_unicast+0x75c/0x8e0
[  145.939461][T10491]  netlink_sendmsg+0x805/0xb30
[  145.939478][T10491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.939491][T10491]  ? aa_sock_msg_perm+0x94/0x160
[  145.939502][T10491]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.939511][T10491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.939523][T10491]  __sock_sendmsg+0x21c/0x270
[  145.939535][T10491]  ____sys_sendmsg+0x505/0x830
[  145.939551][T10491]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.939568][T10491]  ? import_iovec+0x74/0xa0
[  145.939581][T10491]  ___sys_sendmsg+0x21f/0x2a0
[  145.939594][T10491]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.939625][T10491]  ? __fget_files+0x2a/0x420
[  145.939633][T10491]  ? __fget_files+0x3a0/0x420
[  145.939681][T10491]  __x64_sys_sendmsg+0x19b/0x260
[  145.939708][T10491]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.939758][T10491]  ? rcu_is_watching+0x15/0xb0
[  145.939781][T10491]  ? do_syscall_64+0xbe/0x3b0
[  145.939796][T10491]  do_syscall_64+0xfa/0x3b0
[  145.939806][T10491]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.939815][T10491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.939826][T10491]  ? exc_page_fault+0x9f/0xf0
[  145.939835][T10491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.939845][T10491] RIP: 0033:0x7f751c78e9a9
[  145.939856][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.939864][T10491] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.939875][T10491] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  145.939882][T10491] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  145.939888][T10491] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  145.939895][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.939901][T10491] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  145.939915][T10491]  </TASK>
[  146.184547][T10500] x_tables: duplicate underflow at hook 1
[  146.342433][T10516] x_tables: duplicate underflow at hook 2
[  146.385926][T10522] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  146.389432][T10522] CPU: 1 UID: 0 PID: 10522 Comm: syz.1.1559 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  146.389449][T10522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.389456][T10522] Call Trace:
[  146.389462][T10522]  <TASK>
[  146.389467][T10522]  dump_stack_lvl+0x189/0x250
[  146.389488][T10522]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.389500][T10522]  ? __pfx__printk+0x10/0x10
[  146.389515][T10522]  ? kernfs_path_from_node+0x2c/0x260
[  146.389527][T10522]  ? kernfs_path_from_node+0x2c/0x260
[  146.389535][T10522]  ? kernfs_path_from_node+0x2c/0x260
[  146.389546][T10522]  ? kernfs_path_from_node+0x22c/0x260
[  146.389554][T10522]  ? kernfs_path_from_node+0x2c/0x260
[  146.389564][T10522]  sysfs_warn_dup+0x8e/0xa0
[  146.389579][T10522]  sysfs_do_create_link_sd+0xc0/0x110
[  146.389589][T10522]  device_add_class_symlinks+0x1cf/0x240
[  146.389606][T10522]  device_add+0x475/0xb50
[  146.389620][T10522]  wiphy_register+0x199a/0x26b0
[  146.389689][T10522]  ? __pfx_wiphy_register+0x10/0x10
[  146.389709][T10522]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  146.389736][T10522]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  146.389761][T10522]  ieee80211_register_hw+0x33e1/0x4120
[  146.389785][T10522]  ? ieee80211_register_hw+0x1441/0x4120
[  146.389803][T10522]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  146.389818][T10522]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.389837][T10522]  ? __hrtimer_setup+0x187/0x210
[  146.389847][T10522]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  146.389866][T10522]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  146.389896][T10522]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  146.389915][T10522]  ? trace_kmalloc+0x1f/0xd0
[  146.389929][T10522]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  146.389945][T10522]  ? kstrndup+0xbf/0x160
[  146.389961][T10522]  hwsim_new_radio_nl+0xea4/0x1b10
[  146.389977][T10522]  ? __pfx___nla_validate_parse+0x10/0x10
[  146.389996][T10522]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.390015][T10522]  ? __nla_parse+0x40/0x60
[  146.390027][T10522]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  146.390044][T10522]  genl_family_rcv_msg_doit+0x215/0x300
[  146.390058][T10522]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.390074][T10522]  ? bpf_lsm_capable+0x9/0x20
[  146.390088][T10522]  ? security_capable+0x7e/0x2e0
[  146.390102][T10522]  genl_rcv_msg+0x60e/0x790
[  146.390114][T10522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.390123][T10522]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.390143][T10522]  netlink_rcv_skb+0x208/0x470
[  146.390155][T10522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.390165][T10522]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.390185][T10522]  ? down_read+0x1ad/0x2e0
[  146.390197][T10522]  genl_rcv+0x28/0x40
[  146.390205][T10522]  netlink_unicast+0x75c/0x8e0
[  146.390221][T10522]  netlink_sendmsg+0x805/0xb30
[  146.390237][T10522]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.390251][T10522]  ? aa_sock_msg_perm+0x94/0x160
[  146.390261][T10522]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  146.390271][T10522]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.390283][T10522]  __sock_sendmsg+0x21c/0x270
[  146.390296][T10522]  ____sys_sendmsg+0x505/0x830
[  146.390312][T10522]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.390330][T10522]  ? import_iovec+0x74/0xa0
[  146.390344][T10522]  ___sys_sendmsg+0x21f/0x2a0
[  146.390358][T10522]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.390405][T10522]  ? __fget_files+0x2a/0x420
[  146.390413][T10522]  ? __fget_files+0x3a0/0x420
[  146.390427][T10522]  __x64_sys_sendmsg+0x19b/0x260
[  146.390442][T10522]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.390461][T10522]  ? rcu_is_watching+0x15/0xb0
[  146.390475][T10522]  ? do_syscall_64+0xbe/0x3b0
[  146.390488][T10522]  do_syscall_64+0xfa/0x3b0
[  146.390497][T10522]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.390506][T10522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.390516][T10522]  ? exc_page_fault+0x9f/0xf0
[  146.390527][T10522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.390537][T10522] RIP: 0033:0x7ff0e638e9a9
[  146.390548][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.390556][T10522] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.390567][T10522] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  146.390575][T10522] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  146.390582][T10522] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  146.390588][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.390594][T10522] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  146.390618][T10522]  </TASK>
[  146.400805][T10516] __nla_validate_parse: 72 callbacks suppressed
[  146.400818][T10516] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1557'.
[  146.802033][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'.
[  146.824993][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'.
[  146.832080][T10571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1567'.
[  146.835025][T10571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1567'.
[  147.023062][T10588] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1575'.
[  147.308718][T10602] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  147.312471][T10602] CPU: 1 UID: 0 PID: 10602 Comm: syz.0.1580 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  147.312489][T10602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.312496][T10602] Call Trace:
[  147.312501][T10602]  <TASK>
[  147.312506][T10602]  dump_stack_lvl+0x189/0x250
[  147.312526][T10602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.312538][T10602]  ? __pfx__printk+0x10/0x10
[  147.312553][T10602]  ? kernfs_path_from_node+0x2c/0x260
[  147.312587][T10602]  ? kernfs_path_from_node+0x2c/0x260
[  147.312594][T10602]  ? kernfs_path_from_node+0x2c/0x260
[  147.312604][T10602]  ? kernfs_path_from_node+0x22c/0x260
[  147.312613][T10602]  ? kernfs_path_from_node+0x2c/0x260
[  147.312639][T10602]  sysfs_warn_dup+0x8e/0xa0
[  147.312653][T10602]  sysfs_do_create_link_sd+0xc0/0x110
[  147.312663][T10602]  device_add_class_symlinks+0x1cf/0x240
[  147.312680][T10602]  device_add+0x475/0xb50
[  147.312696][T10602]  wiphy_register+0x199a/0x26b0
[  147.312718][T10602]  ? __pfx_wiphy_register+0x10/0x10
[  147.312728][T10602]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  147.312744][T10602]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  147.312761][T10602]  ieee80211_register_hw+0x33e1/0x4120
[  147.312786][T10602]  ? ieee80211_register_hw+0x1441/0x4120
[  147.312803][T10602]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  147.312817][T10602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.312835][T10602]  ? __hrtimer_setup+0x187/0x210
[  147.312862][T10602]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  147.312880][T10602]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  147.312909][T10602]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  147.312927][T10602]  ? trace_kmalloc+0x1f/0xd0
[  147.312941][T10602]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  147.312955][T10602]  ? kstrndup+0xbf/0x160
[  147.312971][T10602]  hwsim_new_radio_nl+0xea4/0x1b10
[  147.312986][T10602]  ? __pfx___nla_validate_parse+0x10/0x10
[  147.313006][T10602]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.313026][T10602]  ? __nla_parse+0x40/0x60
[  147.313041][T10602]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  147.313055][T10602]  genl_family_rcv_msg_doit+0x215/0x300
[  147.313068][T10602]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  147.313084][T10602]  ? bpf_lsm_capable+0x9/0x20
[  147.313096][T10602]  ? security_capable+0x7e/0x2e0
[  147.313111][T10602]  genl_rcv_msg+0x60e/0x790
[  147.313123][T10602]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.313131][T10602]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.313150][T10602]  netlink_rcv_skb+0x208/0x470
[  147.313162][T10602]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.313172][T10602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.313191][T10602]  ? down_read+0x1ad/0x2e0
[  147.313203][T10602]  genl_rcv+0x28/0x40
[  147.313210][T10602]  netlink_unicast+0x75c/0x8e0
[  147.313226][T10602]  netlink_sendmsg+0x805/0xb30
[  147.313243][T10602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.313256][T10602]  ? aa_sock_msg_perm+0x94/0x160
[  147.313266][T10602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.313275][T10602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.313287][T10602]  __sock_sendmsg+0x21c/0x270
[  147.313300][T10602]  ____sys_sendmsg+0x505/0x830
[  147.313315][T10602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.313333][T10602]  ? import_iovec+0x74/0xa0
[  147.313346][T10602]  ___sys_sendmsg+0x21f/0x2a0
[  147.313360][T10602]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.313391][T10602]  ? __fget_files+0x2a/0x420
[  147.313400][T10602]  ? __fget_files+0x3a0/0x420
[  147.313412][T10602]  __x64_sys_sendmsg+0x19b/0x260
[  147.313426][T10602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.313444][T10602]  ? rcu_is_watching+0x15/0xb0
[  147.313457][T10602]  ? do_syscall_64+0xbe/0x3b0
[  147.313469][T10602]  do_syscall_64+0xfa/0x3b0
[  147.313492][T10602]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.313504][T10602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.313514][T10602]  ? exc_page_fault+0x9f/0xf0
[  147.313524][T10602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.313533][T10602] RIP: 0033:0x7f751c78e9a9
[  147.313545][T10602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.313553][T10602] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.313596][T10602] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  147.313609][T10602] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  147.313621][T10602] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  147.313629][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.313637][T10602] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  147.313664][T10602]  </TASK>
[  147.612362][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'.
[  147.765396][T10623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1587'.
[  147.773133][T10623] sock: sock_timestamping_bind_phc: sock not bind to device
[  147.850364][T10628] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  147.853593][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.0.1588 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  147.853610][T10628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.853617][T10628] Call Trace:
[  147.853622][T10628]  <TASK>
[  147.853630][T10628]  dump_stack_lvl+0x189/0x250
[  147.853671][T10628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.853683][T10628]  ? __pfx__printk+0x10/0x10
[  147.853708][T10628]  ? kernfs_path_from_node+0x2c/0x260
[  147.853727][T10628]  ? kernfs_path_from_node+0x2c/0x260
[  147.853741][T10628]  ? kernfs_path_from_node+0x2c/0x260
[  147.853760][T10628]  ? kernfs_path_from_node+0x22c/0x260
[  147.853775][T10628]  ? kernfs_path_from_node+0x2c/0x260
[  147.853793][T10628]  sysfs_warn_dup+0x8e/0xa0
[  147.853820][T10628]  sysfs_do_create_link_sd+0xc0/0x110
[  147.853856][T10628]  device_add_class_symlinks+0x1cf/0x240
[  147.853888][T10628]  device_add+0x475/0xb50
[  147.853904][T10628]  wiphy_register+0x199a/0x26b0
[  147.853926][T10628]  ? __pfx_wiphy_register+0x10/0x10
[  147.853936][T10628]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  147.853952][T10628]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  147.853969][T10628]  ieee80211_register_hw+0x33e1/0x4120
[  147.853996][T10628]  ? ieee80211_register_hw+0x1441/0x4120
[  147.854012][T10628]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  147.854026][T10628]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.854047][T10628]  ? __hrtimer_setup+0x187/0x210
[  147.854059][T10628]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  147.854075][T10628]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  147.854104][T10628]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  147.854115][T10628]  ? trace_kmalloc+0x1f/0xd0
[  147.854126][T10628]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  147.854137][T10628]  ? kstrndup+0xbf/0x160
[  147.854151][T10628]  hwsim_new_radio_nl+0xea4/0x1b10
[  147.854165][T10628]  ? __pfx___nla_validate_parse+0x10/0x10
[  147.854182][T10628]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.854200][T10628]  ? __nla_parse+0x40/0x60
[  147.854212][T10628]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  147.854227][T10628]  genl_family_rcv_msg_doit+0x215/0x300
[  147.854240][T10628]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  147.854257][T10628]  ? bpf_lsm_capable+0x9/0x20
[  147.854268][T10628]  ? security_capable+0x7e/0x2e0
[  147.854281][T10628]  genl_rcv_msg+0x60e/0x790
[  147.854293][T10628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.854302][T10628]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  147.854323][T10628]  netlink_rcv_skb+0x208/0x470
[  147.854339][T10628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.854348][T10628]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.854368][T10628]  ? down_read+0x1ad/0x2e0
[  147.854380][T10628]  genl_rcv+0x28/0x40
[  147.854387][T10628]  netlink_unicast+0x75c/0x8e0
[  147.854403][T10628]  netlink_sendmsg+0x805/0xb30
[  147.854420][T10628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.854433][T10628]  ? aa_sock_msg_perm+0x94/0x160
[  147.854444][T10628]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.854453][T10628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.854465][T10628]  __sock_sendmsg+0x21c/0x270
[  147.854477][T10628]  ____sys_sendmsg+0x505/0x830
[  147.854493][T10628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.854510][T10628]  ? import_iovec+0x74/0xa0
[  147.854524][T10628]  ___sys_sendmsg+0x21f/0x2a0
[  147.854569][T10628]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.854602][T10628]  ? __fget_files+0x2a/0x420
[  147.854611][T10628]  ? __fget_files+0x3a0/0x420
[  147.854626][T10628]  __x64_sys_sendmsg+0x19b/0x260
[  147.854640][T10628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.854658][T10628]  ? rcu_is_watching+0x15/0xb0
[  147.854672][T10628]  ? do_syscall_64+0xbe/0x3b0
[  147.854685][T10628]  do_syscall_64+0xfa/0x3b0
[  147.854693][T10628]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.854702][T10628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.854712][T10628]  ? exc_page_fault+0x9f/0xf0
[  147.854723][T10628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.854732][T10628] RIP: 0033:0x7f751c78e9a9
[  147.854744][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.854752][T10628] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.854764][T10628] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  147.854771][T10628] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  147.854777][T10628] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  147.854784][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.854790][T10628] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  147.854806][T10628]  </TASK>
[  148.080632][T10633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1591'.
[  148.179678][T10637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.182919][T10637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  148.293545][T10637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.296948][T10637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  148.347813][T10637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.351088][T10637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  148.405559][T10637] vlan2 (unregistering): left allmulticast mode
[  148.407938][T10637] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  148.411262][T10637] vlan2 (unregistering): left promiscuous mode
[  148.414801][T10637] bridge0: port 1(vlan2) entered disabled state
[  148.430058][T10637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.433609][T10637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  148.531533][T10637] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  148.534246][T10637] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  148.555794][T10637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  148.559267][T10637] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  148.573781][T10637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  148.579524][T10637] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  148.592408][T10637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  148.595624][T10637] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  148.652950][T10660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1596'.
[  148.668015][T10660] sock: sock_timestamping_bind_phc: sock not bind to device
[  149.194545][T10689] sock: sock_timestamping_bind_phc: sock not bind to device
[  149.237230][T10690] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  149.237780][T10686] IPVS: stopping backup sync thread 10690 ...
[  149.279340][T10694] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  149.281707][T10694] CPU: 0 UID: 0 PID: 10694 Comm: syz.1.1607 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  149.281723][T10694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.281730][T10694] Call Trace:
[  149.281736][T10694]  <TASK>
[  149.281743][T10694]  dump_stack_lvl+0x189/0x250
[  149.281766][T10694]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.281778][T10694]  ? __pfx__printk+0x10/0x10
[  149.281794][T10694]  ? kernfs_path_from_node+0x2c/0x260
[  149.281804][T10694]  ? kernfs_path_from_node+0x2c/0x260
[  149.281812][T10694]  ? kernfs_path_from_node+0x2c/0x260
[  149.281821][T10694]  ? kernfs_path_from_node+0x22c/0x260
[  149.281837][T10694]  ? kernfs_path_from_node+0x2c/0x260
[  149.281848][T10694]  sysfs_warn_dup+0x8e/0xa0
[  149.281864][T10694]  sysfs_do_create_link_sd+0xc0/0x110
[  149.281874][T10694]  device_add_class_symlinks+0x1cf/0x240
[  149.281891][T10694]  device_add+0x475/0xb50
[  149.281905][T10694]  wiphy_register+0x199a/0x26b0
[  149.281928][T10694]  ? __pfx_wiphy_register+0x10/0x10
[  149.281938][T10694]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  149.281955][T10694]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  149.281972][T10694]  ieee80211_register_hw+0x33e1/0x4120
[  149.281996][T10694]  ? ieee80211_register_hw+0x1441/0x4120
[  149.282013][T10694]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  149.282027][T10694]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.282045][T10694]  ? __hrtimer_setup+0x187/0x210
[  149.282056][T10694]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  149.282071][T10694]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  149.282098][T10694]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  149.282108][T10694]  ? trace_kmalloc+0x1f/0xd0
[  149.282119][T10694]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  149.282131][T10694]  ? kstrndup+0xbf/0x160
[  149.282144][T10694]  hwsim_new_radio_nl+0xea4/0x1b10
[  149.282157][T10694]  ? __pfx___nla_validate_parse+0x10/0x10
[  149.282176][T10694]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.282194][T10694]  ? __nla_parse+0x40/0x60
[  149.282205][T10694]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  149.282220][T10694]  genl_family_rcv_msg_doit+0x215/0x300
[  149.282233][T10694]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  149.282248][T10694]  ? bpf_lsm_capable+0x9/0x20
[  149.282261][T10694]  ? security_capable+0x7e/0x2e0
[  149.282276][T10694]  genl_rcv_msg+0x60e/0x790
[  149.282288][T10694]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.282297][T10694]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.282316][T10694]  netlink_rcv_skb+0x208/0x470
[  149.282329][T10694]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.282338][T10694]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  149.282358][T10694]  ? down_read+0x1ad/0x2e0
[  149.282369][T10694]  genl_rcv+0x28/0x40
[  149.282376][T10694]  netlink_unicast+0x75c/0x8e0
[  149.282393][T10694]  netlink_sendmsg+0x805/0xb30
[  149.282409][T10694]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.282422][T10694]  ? aa_sock_msg_perm+0x94/0x160
[  149.282432][T10694]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.282466][T10694]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.282482][T10694]  __sock_sendmsg+0x21c/0x270
[  149.282496][T10694]  ____sys_sendmsg+0x505/0x830
[  149.282513][T10694]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.282533][T10694]  ? import_iovec+0x74/0xa0
[  149.282547][T10694]  ___sys_sendmsg+0x21f/0x2a0
[  149.282560][T10694]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.282591][T10694]  ? __fget_files+0x2a/0x420
[  149.282599][T10694]  ? __fget_files+0x3a0/0x420
[  149.282612][T10694]  __x64_sys_sendmsg+0x19b/0x260
[  149.282626][T10694]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.282644][T10694]  ? rcu_is_watching+0x15/0xb0
[  149.282657][T10694]  ? do_syscall_64+0xbe/0x3b0
[  149.282670][T10694]  do_syscall_64+0xfa/0x3b0
[  149.282678][T10694]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.282687][T10694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.282695][T10694]  ? exc_page_fault+0x9f/0xf0
[  149.282704][T10694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.282713][T10694] RIP: 0033:0x7ff0e638e9a9
[  149.282725][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.282734][T10694] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.282745][T10694] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  149.282752][T10694] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  149.282758][T10694] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  149.282764][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.282770][T10694] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  149.282786][T10694]  </TASK>
[  149.768580][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.841008][T10726] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  149.843558][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.2.1618 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  149.843575][T10726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.843582][T10726] Call Trace:
[  149.843588][T10726]  <TASK>
[  149.843595][T10726]  dump_stack_lvl+0x189/0x250
[  149.843618][T10726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.843630][T10726]  ? __pfx__printk+0x10/0x10
[  149.843644][T10726]  ? kernfs_path_from_node+0x2c/0x260
[  149.843655][T10726]  ? kernfs_path_from_node+0x2c/0x260
[  149.843663][T10726]  ? kernfs_path_from_node+0x2c/0x260
[  149.843673][T10726]  ? kernfs_path_from_node+0x22c/0x260
[  149.843690][T10726]  ? kernfs_path_from_node+0x2c/0x260
[  149.843699][T10726]  sysfs_warn_dup+0x8e/0xa0
[  149.843713][T10726]  sysfs_do_create_link_sd+0xc0/0x110
[  149.843724][T10726]  device_add_class_symlinks+0x1cf/0x240
[  149.843740][T10726]  device_add+0x475/0xb50
[  149.843756][T10726]  wiphy_register+0x199a/0x26b0
[  149.843778][T10726]  ? __pfx_wiphy_register+0x10/0x10
[  149.843790][T10726]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  149.843805][T10726]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  149.843820][T10726]  ieee80211_register_hw+0x33e1/0x4120
[  149.843841][T10726]  ? ieee80211_register_hw+0x1441/0x4120
[  149.843857][T10726]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  149.843872][T10726]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.843889][T10726]  ? __hrtimer_setup+0x187/0x210
[  149.843899][T10726]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  149.843915][T10726]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  149.843942][T10726]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  149.843955][T10726]  ? trace_kmalloc+0x1f/0xd0
[  149.843968][T10726]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  149.843980][T10726]  ? kstrndup+0xbf/0x160
[  149.843994][T10726]  hwsim_new_radio_nl+0xea4/0x1b10
[  149.844008][T10726]  ? __pfx___nla_validate_parse+0x10/0x10
[  149.844026][T10726]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.844052][T10726]  ? __nla_parse+0x40/0x60
[  149.844065][T10726]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  149.844083][T10726]  genl_family_rcv_msg_doit+0x215/0x300
[  149.844098][T10726]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  149.844116][T10726]  ? bpf_lsm_capable+0x9/0x20
[  149.844128][T10726]  ? security_capable+0x7e/0x2e0
[  149.844141][T10726]  genl_rcv_msg+0x60e/0x790
[  149.844155][T10726]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.844165][T10726]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.844186][T10726]  netlink_rcv_skb+0x208/0x470
[  149.844205][T10726]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.844220][T10726]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  149.844256][T10726]  ? down_read+0x1ad/0x2e0
[  149.844277][T10726]  genl_rcv+0x28/0x40
[  149.844292][T10726]  netlink_unicast+0x75c/0x8e0
[  149.844317][T10726]  netlink_sendmsg+0x805/0xb30
[  149.844343][T10726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.844362][T10726]  ? aa_sock_msg_perm+0x94/0x160
[  149.844381][T10726]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.844397][T10726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.844448][T10726]  __sock_sendmsg+0x21c/0x270
[  149.844472][T10726]  ____sys_sendmsg+0x505/0x830
[  149.844502][T10726]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.844531][T10726]  ? import_iovec+0x74/0xa0
[  149.844554][T10726]  ___sys_sendmsg+0x21f/0x2a0
[  149.844580][T10726]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.844638][T10726]  ? __fget_files+0x2a/0x420
[  149.844653][T10726]  ? __fget_files+0x3a0/0x420
[  149.844676][T10726]  __x64_sys_sendmsg+0x19b/0x260
[  149.844716][T10726]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.844755][T10726]  ? do_syscall_64+0xbe/0x3b0
[  149.844776][T10726]  do_syscall_64+0xfa/0x3b0
[  149.844791][T10726]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.844807][T10726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.844824][T10726]  ? exc_page_fault+0x9f/0xf0
[  149.844838][T10726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.844853][T10726] RIP: 0033:0x7f41a738e9a9
[  149.844869][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.844884][T10726] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.844902][T10726] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  149.844914][T10726] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  149.844924][T10726] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  149.844933][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.844942][T10726] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  149.844964][T10726]  </TASK>
[  150.808763][T10789] netlink: 'syz.0.1641': attribute type 2 has an invalid length.
[  150.953651][T10800] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  150.956110][T10800] CPU: 1 UID: 0 PID: 10800 Comm: syz.0.1644 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  150.956125][T10800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.956132][T10800] Call Trace:
[  150.956138][T10800]  <TASK>
[  150.956143][T10800]  dump_stack_lvl+0x189/0x250
[  150.956165][T10800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.956177][T10800]  ? __pfx__printk+0x10/0x10
[  150.956191][T10800]  ? kernfs_path_from_node+0x2c/0x260
[  150.956202][T10800]  ? kernfs_path_from_node+0x2c/0x260
[  150.956210][T10800]  ? kernfs_path_from_node+0x2c/0x260
[  150.956219][T10800]  ? kernfs_path_from_node+0x22c/0x260
[  150.956226][T10800]  ? kernfs_path_from_node+0x2c/0x260
[  150.956236][T10800]  sysfs_warn_dup+0x8e/0xa0
[  150.956249][T10800]  sysfs_do_create_link_sd+0xc0/0x110
[  150.956259][T10800]  device_add_class_symlinks+0x1cf/0x240
[  150.956274][T10800]  device_add+0x475/0xb50
[  150.956290][T10800]  wiphy_register+0x199a/0x26b0
[  150.956313][T10800]  ? __pfx_wiphy_register+0x10/0x10
[  150.956322][T10800]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  150.956337][T10800]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  150.956377][T10800]  ieee80211_register_hw+0x33e1/0x4120
[  150.956403][T10800]  ? ieee80211_register_hw+0x1441/0x4120
[  150.956420][T10800]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  150.956436][T10800]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.956454][T10800]  ? __hrtimer_setup+0x187/0x210
[  150.956465][T10800]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  150.956481][T10800]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  150.956511][T10800]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  150.956523][T10800]  ? trace_kmalloc+0x1f/0xd0
[  150.956535][T10800]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  150.956546][T10800]  ? kstrndup+0xbf/0x160
[  150.956561][T10800]  hwsim_new_radio_nl+0xea4/0x1b10
[  150.956575][T10800]  ? __pfx___nla_validate_parse+0x10/0x10
[  150.956593][T10800]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.956611][T10800]  ? __nla_parse+0x40/0x60
[  150.956624][T10800]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  150.956639][T10800]  genl_family_rcv_msg_doit+0x215/0x300
[  150.956652][T10800]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.956668][T10800]  ? bpf_lsm_capable+0x9/0x20
[  150.956679][T10800]  ? security_capable+0x7e/0x2e0
[  150.956692][T10800]  genl_rcv_msg+0x60e/0x790
[  150.956704][T10800]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.956713][T10800]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.956738][T10800]  netlink_rcv_skb+0x208/0x470
[  150.956761][T10800]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.956772][T10800]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.956793][T10800]  ? down_read+0x1ad/0x2e0
[  150.956806][T10800]  genl_rcv+0x28/0x40
[  150.956816][T10800]  netlink_unicast+0x75c/0x8e0
[  150.956833][T10800]  netlink_sendmsg+0x805/0xb30
[  150.956852][T10800]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.956868][T10800]  ? aa_sock_msg_perm+0x94/0x160
[  150.956878][T10800]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.956888][T10800]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.956900][T10800]  __sock_sendmsg+0x21c/0x270
[  150.956913][T10800]  ____sys_sendmsg+0x505/0x830
[  150.956929][T10800]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.956947][T10800]  ? import_iovec+0x74/0xa0
[  150.956978][T10800]  ___sys_sendmsg+0x21f/0x2a0
[  150.956994][T10800]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.957028][T10800]  ? __fget_files+0x2a/0x420
[  150.957037][T10800]  ? __fget_files+0x3a0/0x420
[  150.957052][T10800]  __x64_sys_sendmsg+0x19b/0x260
[  150.957068][T10800]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.957086][T10800]  ? rcu_is_watching+0x15/0xb0
[  150.957100][T10800]  ? do_syscall_64+0xbe/0x3b0
[  150.957113][T10800]  do_syscall_64+0xfa/0x3b0
[  150.957121][T10800]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.957130][T10800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.957140][T10800]  ? exc_page_fault+0x9f/0xf0
[  150.957150][T10800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.957158][T10800] RIP: 0033:0x7f751c78e9a9
[  150.957169][T10800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.957178][T10800] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.957189][T10800] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  150.957196][T10800] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004
[  150.957203][T10800] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  150.957209][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.957215][T10800] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  150.957230][T10800]  </TASK>
[  151.104415][T10788] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  151.152226][T10803] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  151.155625][T10803] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  151.391662][T10817] netlink: 'syz.0.1650': attribute type 1 has an invalid length.
[  151.457769][T10818] xt_CT: No such helper "snmp"
[  151.635652][T10828] __nla_validate_parse: 10 callbacks suppressed
[  151.635670][T10828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1652'.
[  151.680810][T10830] netlink: 'syz.1.1653': attribute type 21 has an invalid length.
[  151.825679][ T5835] Bluetooth: hci2: link tx timeout
[  151.828023][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.831566][ T5835] Bluetooth: hci2: link tx timeout
[  151.833341][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.932934][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1661'.
[  152.139761][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'.
[  152.148565][T10869] openvswitch: netlink: Missing key (keys=40, expected=80)
[  152.178729][T10875] xt_socket: unknown flags 0xfc
[  152.235435][T10881] syzkaller1: entered promiscuous mode
[  152.238258][T10881] syzkaller1: entered allmulticast mode
[  152.238848][T10880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1669'.
[  152.340311][T10886] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  152.342926][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.0.1672 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  152.342943][T10886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.342951][T10886] Call Trace:
[  152.342957][T10886]  <TASK>
[  152.342965][T10886]  dump_stack_lvl+0x189/0x250
[  152.342988][T10886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.343000][T10886]  ? __pfx__printk+0x10/0x10
[  152.343015][T10886]  ? kernfs_path_from_node+0x2c/0x260
[  152.343027][T10886]  ? kernfs_path_from_node+0x2c/0x260
[  152.343036][T10886]  ? kernfs_path_from_node+0x2c/0x260
[  152.343045][T10886]  ? kernfs_path_from_node+0x22c/0x260
[  152.343052][T10886]  ? kernfs_path_from_node+0x2c/0x260
[  152.343062][T10886]  sysfs_warn_dup+0x8e/0xa0
[  152.343076][T10886]  sysfs_do_create_link_sd+0xc0/0x110
[  152.343087][T10886]  device_add_class_symlinks+0x1cf/0x240
[  152.343103][T10886]  device_add+0x475/0xb50
[  152.343119][T10886]  wiphy_register+0x199a/0x26b0
[  152.343141][T10886]  ? __pfx_wiphy_register+0x10/0x10
[  152.343152][T10886]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  152.343170][T10886]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  152.343188][T10886]  ieee80211_register_hw+0x33e1/0x4120
[  152.343212][T10886]  ? ieee80211_register_hw+0x1441/0x4120
[  152.343235][T10886]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  152.343283][T10886]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.343318][T10886]  ? __hrtimer_setup+0x187/0x210
[  152.343340][T10886]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  152.343373][T10886]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  152.343415][T10886]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  152.343429][T10886]  ? trace_kmalloc+0x1f/0xd0
[  152.343444][T10886]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  152.343457][T10886]  ? kstrndup+0xbf/0x160
[  152.343473][T10886]  hwsim_new_radio_nl+0xea4/0x1b10
[  152.343488][T10886]  ? __pfx___nla_validate_parse+0x10/0x10
[  152.343506][T10886]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.343525][T10886]  ? __nla_parse+0x40/0x60
[  152.343537][T10886]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  152.343556][T10886]  genl_family_rcv_msg_doit+0x215/0x300
[  152.343577][T10886]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  152.343613][T10886]  ? bpf_lsm_capable+0x9/0x20
[  152.343632][T10886]  ? security_capable+0x7e/0x2e0
[  152.343648][T10886]  genl_rcv_msg+0x60e/0x790
[  152.343664][T10886]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.343679][T10886]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.343704][T10886]  netlink_rcv_skb+0x208/0x470
[  152.343721][T10886]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.343734][T10886]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  152.343762][T10886]  ? down_read+0x1ad/0x2e0
[  152.343777][T10886]  genl_rcv+0x28/0x40
[  152.343788][T10886]  netlink_unicast+0x75c/0x8e0
[  152.343810][T10886]  netlink_sendmsg+0x805/0xb30
[  152.343837][T10886]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.343861][T10886]  ? aa_sock_msg_perm+0x94/0x160
[  152.343876][T10886]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.343888][T10886]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.343902][T10886]  __sock_sendmsg+0x21c/0x270
[  152.343915][T10886]  ____sys_sendmsg+0x505/0x830
[  152.343933][T10886]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.343952][T10886]  ? import_iovec+0x74/0xa0
[  152.343966][T10886]  ___sys_sendmsg+0x21f/0x2a0
[  152.343980][T10886]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.344011][T10886]  ? __fget_files+0x2a/0x420
[  152.344019][T10886]  ? __fget_files+0x3a0/0x420
[  152.344033][T10886]  __x64_sys_sendmsg+0x19b/0x260
[  152.344047][T10886]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.344065][T10886]  ? rcu_is_watching+0x15/0xb0
[  152.344079][T10886]  ? do_syscall_64+0xbe/0x3b0
[  152.344092][T10886]  do_syscall_64+0xfa/0x3b0
[  152.344101][T10886]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.344110][T10886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.344119][T10886]  ? exc_page_fault+0x9f/0xf0
[  152.344137][T10886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.344146][T10886] RIP: 0033:0x7f751c78e9a9
[  152.344158][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.344166][T10886] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.344177][T10886] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  152.344184][T10886] RDX: 00000000000000e4 RSI: 0000200000000040 RDI: 0000000000000004
[  152.344191][T10886] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  152.344197][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.344203][T10886] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  152.344220][T10886]  </TASK>
[  152.713736][T10904] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  152.716158][T10904] CPU: 0 UID: 0 PID: 10904 Comm: syz.1.1680 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  152.716174][T10904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.716195][T10904] Call Trace:
[  152.716202][T10904]  <TASK>
[  152.716208][T10904]  dump_stack_lvl+0x189/0x250
[  152.716231][T10904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.716266][T10904]  ? __pfx__printk+0x10/0x10
[  152.716282][T10904]  ? kernfs_path_from_node+0x2c/0x260
[  152.716293][T10904]  ? kernfs_path_from_node+0x2c/0x260
[  152.716301][T10904]  ? kernfs_path_from_node+0x2c/0x260
[  152.716310][T10904]  ? kernfs_path_from_node+0x22c/0x260
[  152.716318][T10904]  ? kernfs_path_from_node+0x2c/0x260
[  152.716328][T10904]  sysfs_warn_dup+0x8e/0xa0
[  152.716344][T10904]  sysfs_do_create_link_sd+0xc0/0x110
[  152.716356][T10904]  device_add_class_symlinks+0x1cf/0x240
[  152.716372][T10904]  device_add+0x475/0xb50
[  152.716387][T10904]  wiphy_register+0x199a/0x26b0
[  152.716409][T10904]  ? __pfx_wiphy_register+0x10/0x10
[  152.716419][T10904]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  152.716435][T10904]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  152.716450][T10904]  ieee80211_register_hw+0x33e1/0x4120
[  152.716472][T10904]  ? ieee80211_register_hw+0x1441/0x4120
[  152.716489][T10904]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  152.716503][T10904]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.716521][T10904]  ? __hrtimer_setup+0x187/0x210
[  152.716532][T10904]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  152.716548][T10904]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  152.716575][T10904]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  152.716592][T10904]  ? trace_kmalloc+0x1f/0xd0
[  152.716606][T10904]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  152.716621][T10904]  ? kstrndup+0xbf/0x160
[  152.716637][T10904]  hwsim_new_radio_nl+0xea4/0x1b10
[  152.716653][T10904]  ? __pfx___nla_validate_parse+0x10/0x10
[  152.716672][T10904]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.716691][T10904]  ? __nla_parse+0x40/0x60
[  152.716704][T10904]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  152.716719][T10904]  genl_family_rcv_msg_doit+0x215/0x300
[  152.716732][T10904]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  152.716748][T10904]  ? bpf_lsm_capable+0x9/0x20
[  152.716761][T10904]  ? security_capable+0x7e/0x2e0
[  152.716777][T10904]  genl_rcv_msg+0x60e/0x790
[  152.716792][T10904]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.716800][T10904]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.716819][T10904]  netlink_rcv_skb+0x208/0x470
[  152.716832][T10904]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.716842][T10904]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  152.716862][T10904]  ? down_read+0x1ad/0x2e0
[  152.716874][T10904]  genl_rcv+0x28/0x40
[  152.716881][T10904]  netlink_unicast+0x75c/0x8e0
[  152.716898][T10904]  netlink_sendmsg+0x805/0xb30
[  152.716917][T10904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.716931][T10904]  ? aa_sock_msg_perm+0x94/0x160
[  152.716941][T10904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.716950][T10904]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.716962][T10904]  __sock_sendmsg+0x21c/0x270
[  152.716975][T10904]  ____sys_sendmsg+0x505/0x830
[  152.716992][T10904]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.717010][T10904]  ? import_iovec+0x74/0xa0
[  152.717023][T10904]  ___sys_sendmsg+0x21f/0x2a0
[  152.717046][T10904]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.717077][T10904]  ? __fget_files+0x2a/0x420
[  152.717085][T10904]  ? __fget_files+0x3a0/0x420
[  152.717098][T10904]  __x64_sys_sendmsg+0x19b/0x260
[  152.717113][T10904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.717130][T10904]  ? rcu_is_watching+0x15/0xb0
[  152.717144][T10904]  ? do_syscall_64+0xbe/0x3b0
[  152.717156][T10904]  do_syscall_64+0xfa/0x3b0
[  152.717165][T10904]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.717174][T10904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.717183][T10904]  ? exc_page_fault+0x9f/0xf0
[  152.717192][T10904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.717201][T10904] RIP: 0033:0x7ff0e638e9a9
[  152.717214][T10904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.717224][T10904] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.717260][T10904] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  152.717270][T10904] RDX: 0000000000000108 RSI: 0000200000000040 RDI: 0000000000000004
[  152.717277][T10904] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  152.717284][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.717290][T10904] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  152.717306][T10904]  </TASK>
[  152.922140][T10912] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1683'.
[  152.964296][T10910] netlink: 'syz.0.1682': attribute type 11 has an invalid length.
[  152.968974][T10910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1682'.
[  153.000133][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'.
[  153.235330][T10932] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1685'.
[  153.365955][T10947] syz.0.1694 uses old SIOCAX25GETINFO
[  153.371899][T10947] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1694'.
[  153.426659][T10953] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1696'.
[  153.651567][T10958] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  153.684090][T10966] netlink: 'syz.0.1701': attribute type 30 has an invalid length.
[  153.887320][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  154.537353][   T34] wlan0: Trigger new scan to find an IBSS to join
[  155.967572][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  156.077484][T10996] Cannot find del_set index 286 as target
[  156.361844][T11031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.698790][T11059] __nla_validate_parse: 14 callbacks suppressed
[  156.698808][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'.
[  156.736666][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1734'.
[  156.792356][T11069] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  156.794699][T11069] CPU: 1 UID: 0 PID: 11069 Comm: syz.2.1736 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  156.794724][T11069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.794737][T11069] Call Trace:
[  156.794746][T11069]  <TASK>
[  156.794754][T11069]  dump_stack_lvl+0x189/0x250
[  156.794778][T11069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.794789][T11069]  ? __pfx__printk+0x10/0x10
[  156.794805][T11069]  ? kernfs_path_from_node+0x2c/0x260
[  156.794817][T11069]  ? kernfs_path_from_node+0x2c/0x260
[  156.794826][T11069]  ? kernfs_path_from_node+0x2c/0x260
[  156.794835][T11069]  ? kernfs_path_from_node+0x22c/0x260
[  156.794842][T11069]  ? kernfs_path_from_node+0x2c/0x260
[  156.794852][T11069]  sysfs_warn_dup+0x8e/0xa0
[  156.794866][T11069]  sysfs_do_create_link_sd+0xc0/0x110
[  156.794876][T11069]  device_add_class_symlinks+0x1cf/0x240
[  156.794892][T11069]  device_add+0x475/0xb50
[  156.794909][T11069]  wiphy_register+0x199a/0x26b0
[  156.794933][T11069]  ? __pfx_wiphy_register+0x10/0x10
[  156.794944][T11069]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.794960][T11069]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.794974][T11069]  ieee80211_register_hw+0x33e1/0x4120
[  156.795016][T11069]  ? ieee80211_register_hw+0x1441/0x4120
[  156.795037][T11069]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.795053][T11069]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.795076][T11069]  ? __hrtimer_setup+0x187/0x210
[  156.795087][T11069]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.795104][T11069]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.795133][T11069]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.795146][T11069]  ? trace_kmalloc+0x1f/0xd0
[  156.795160][T11069]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.795172][T11069]  ? kstrndup+0xbf/0x160
[  156.795186][T11069]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.795200][T11069]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.795218][T11069]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.795255][T11069]  ? __nla_parse+0x40/0x60
[  156.795267][T11069]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.795282][T11069]  genl_family_rcv_msg_doit+0x215/0x300
[  156.795296][T11069]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.795315][T11069]  ? bpf_lsm_capable+0x9/0x20
[  156.795334][T11069]  ? security_capable+0x7e/0x2e0
[  156.795350][T11069]  genl_rcv_msg+0x60e/0x790
[  156.795365][T11069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.795375][T11069]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.795399][T11069]  netlink_rcv_skb+0x208/0x470
[  156.795415][T11069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.795426][T11069]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.795449][T11069]  ? down_read+0x1ad/0x2e0
[  156.795461][T11069]  genl_rcv+0x28/0x40
[  156.795469][T11069]  netlink_unicast+0x75c/0x8e0
[  156.795485][T11069]  netlink_sendmsg+0x805/0xb30
[  156.795502][T11069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.795516][T11069]  ? aa_sock_msg_perm+0x94/0x160
[  156.795528][T11069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.795537][T11069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.795550][T11069]  __sock_sendmsg+0x21c/0x270
[  156.795562][T11069]  ____sys_sendmsg+0x505/0x830
[  156.795578][T11069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.795596][T11069]  ? import_iovec+0x74/0xa0
[  156.795610][T11069]  ___sys_sendmsg+0x21f/0x2a0
[  156.795625][T11069]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.795657][T11069]  ? __fget_files+0x2a/0x420
[  156.795666][T11069]  ? __fget_files+0x3a0/0x420
[  156.795679][T11069]  __x64_sys_sendmsg+0x19b/0x260
[  156.795694][T11069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.795712][T11069]  ? rcu_is_watching+0x15/0xb0
[  156.795727][T11069]  ? do_syscall_64+0xbe/0x3b0
[  156.795740][T11069]  do_syscall_64+0xfa/0x3b0
[  156.795749][T11069]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.795757][T11069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.795767][T11069]  ? exc_page_fault+0x9f/0xf0
[  156.795777][T11069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.795786][T11069] RIP: 0033:0x7f41a738e9a9
[  156.795799][T11069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.795809][T11069] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.795821][T11069] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  156.795829][T11069] RDX: 0000000000000500 RSI: 0000200000000040 RDI: 0000000000000004
[  156.795836][T11069] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  156.795843][T11069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.795850][T11069] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  156.795867][T11069]  </TASK>
[  157.006332][T11075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.028454][T11075] syzkaller0: entered promiscuous mode
[  157.030307][T11075] syzkaller0: entered allmulticast mode
[  157.034682][T11077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1740'.
[  157.049021][T11075] tipc: Resetting bearer <eth:syzkaller0>
[  157.050910][T11075] syzkaller0: tun_net_xmit 90
[  157.072717][T11070] tipc: Resetting bearer <eth:syzkaller0>
[  157.112031][T11070] tipc: Disabling bearer <eth:syzkaller0>
[  157.226686][T11093] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  157.230403][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.2.1745 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  157.230428][T11093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.230439][T11093] Call Trace:
[  157.230447][T11093]  <TASK>
[  157.230456][T11093]  dump_stack_lvl+0x189/0x250
[  157.230496][T11093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.230511][T11093]  ? __pfx__printk+0x10/0x10
[  157.230527][T11093]  ? kernfs_path_from_node+0x2c/0x260
[  157.230540][T11093]  ? kernfs_path_from_node+0x2c/0x260
[  157.230548][T11093]  ? kernfs_path_from_node+0x2c/0x260
[  157.230559][T11093]  ? kernfs_path_from_node+0x22c/0x260
[  157.230568][T11093]  ? kernfs_path_from_node+0x2c/0x260
[  157.230584][T11093]  sysfs_warn_dup+0x8e/0xa0
[  157.230604][T11093]  sysfs_do_create_link_sd+0xc0/0x110
[  157.230622][T11093]  device_add_class_symlinks+0x1cf/0x240
[  157.230653][T11093]  device_add+0x475/0xb50
[  157.230674][T11093]  wiphy_register+0x199a/0x26b0
[  157.230698][T11093]  ? __pfx_wiphy_register+0x10/0x10
[  157.230710][T11093]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  157.230727][T11093]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  157.230745][T11093]  ieee80211_register_hw+0x33e1/0x4120
[  157.230769][T11093]  ? ieee80211_register_hw+0x1441/0x4120
[  157.230786][T11093]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  157.230800][T11093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.230820][T11093]  ? __hrtimer_setup+0x187/0x210
[  157.230831][T11093]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  157.230851][T11093]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  157.230881][T11093]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  157.230895][T11093]  ? trace_kmalloc+0x1f/0xd0
[  157.230909][T11093]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  157.230923][T11093]  ? kstrndup+0xbf/0x160
[  157.230937][T11093]  hwsim_new_radio_nl+0xea4/0x1b10
[  157.230951][T11093]  ? __pfx___nla_validate_parse+0x10/0x10
[  157.231003][T11093]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.231026][T11093]  ? __nla_parse+0x40/0x60
[  157.231040][T11093]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  157.231057][T11093]  genl_family_rcv_msg_doit+0x215/0x300
[  157.231071][T11093]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  157.231087][T11093]  ? bpf_lsm_capable+0x9/0x20
[  157.231101][T11093]  ? security_capable+0x7e/0x2e0
[  157.231116][T11093]  genl_rcv_msg+0x60e/0x790
[  157.231129][T11093]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.231137][T11093]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.231160][T11093]  netlink_rcv_skb+0x208/0x470
[  157.231173][T11093]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.231184][T11093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.231206][T11093]  ? down_read+0x1ad/0x2e0
[  157.231219][T11093]  genl_rcv+0x28/0x40
[  157.231228][T11093]  netlink_unicast+0x75c/0x8e0
[  157.231245][T11093]  netlink_sendmsg+0x805/0xb30
[  157.231262][T11093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.231277][T11093]  ? aa_sock_msg_perm+0x94/0x160
[  157.231290][T11093]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  157.231300][T11093]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.231312][T11093]  __sock_sendmsg+0x21c/0x270
[  157.231325][T11093]  ____sys_sendmsg+0x505/0x830
[  157.231341][T11093]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.231359][T11093]  ? import_iovec+0x74/0xa0
[  157.231373][T11093]  ___sys_sendmsg+0x21f/0x2a0
[  157.231388][T11093]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.231420][T11093]  ? __fget_files+0x2a/0x420
[  157.231429][T11093]  ? __fget_files+0x3a0/0x420
[  157.231442][T11093]  __x64_sys_sendmsg+0x19b/0x260
[  157.231457][T11093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  157.231475][T11093]  ? rcu_is_watching+0x15/0xb0
[  157.231495][T11093]  ? do_syscall_64+0xbe/0x3b0
[  157.231510][T11093]  do_syscall_64+0xfa/0x3b0
[  157.231519][T11093]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.231529][T11093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.231540][T11093]  ? exc_page_fault+0x9f/0xf0
[  157.231549][T11093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.231558][T11093] RIP: 0033:0x7f41a738e9a9
[  157.231570][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.231578][T11093] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.231590][T11093] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  157.231596][T11093] RDX: 0000000000000700 RSI: 0000200000000040 RDI: 0000000000000004
[  157.231603][T11093] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  157.231609][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.231615][T11093] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  157.231631][T11093]  </TASK>
[  157.422750][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  157.487169][   T34] wlan0: Trigger new scan to find an IBSS to join
[  157.755899][T11120] xt_time: invalid argument - start or stop time greater than 23:59:59
[  157.810065][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1755'.
[  157.871603][T11124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1756'.
[  158.073953][T11136] IPv6: sit2: Disabled Multicast RS
[  158.088862][T11138] tipc: Cannot configure node identity twice
[  158.305331][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'.
[  158.312505][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'.
[  158.578158][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  158.739369][T11174] can: request_module (can-proto-0) failed.
[  158.892432][T11188] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  158.895355][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.1.1778 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  158.895373][T11188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.895380][T11188] Call Trace:
[  158.895386][T11188]  <TASK>
[  158.895393][T11188]  dump_stack_lvl+0x189/0x250
[  158.895415][T11188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.895427][T11188]  ? __pfx__printk+0x10/0x10
[  158.895442][T11188]  ? kernfs_path_from_node+0x2c/0x260
[  158.895453][T11188]  ? kernfs_path_from_node+0x2c/0x260
[  158.895461][T11188]  ? kernfs_path_from_node+0x2c/0x260
[  158.895470][T11188]  ? kernfs_path_from_node+0x22c/0x260
[  158.895478][T11188]  ? kernfs_path_from_node+0x2c/0x260
[  158.895487][T11188]  sysfs_warn_dup+0x8e/0xa0
[  158.895501][T11188]  sysfs_do_create_link_sd+0xc0/0x110
[  158.895513][T11188]  device_add_class_symlinks+0x1cf/0x240
[  158.895529][T11188]  device_add+0x475/0xb50
[  158.895543][T11188]  wiphy_register+0x199a/0x26b0
[  158.895567][T11188]  ? __pfx_wiphy_register+0x10/0x10
[  158.895577][T11188]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  158.895593][T11188]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  158.895608][T11188]  ieee80211_register_hw+0x33e1/0x4120
[  158.895631][T11188]  ? ieee80211_register_hw+0x1441/0x4120
[  158.895648][T11188]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  158.895662][T11188]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.895680][T11188]  ? __hrtimer_setup+0x187/0x210
[  158.895690][T11188]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  158.895709][T11188]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  158.895739][T11188]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  158.895752][T11188]  ? trace_kmalloc+0x1f/0xd0
[  158.895766][T11188]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  158.895779][T11188]  ? kstrndup+0xbf/0x160
[  158.895797][T11188]  hwsim_new_radio_nl+0xea4/0x1b10
[  158.895811][T11188]  ? __pfx___nla_validate_parse+0x10/0x10
[  158.895830][T11188]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  158.895844][T11188]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  158.895862][T11188]  ? __nla_parse+0x40/0x60
[  158.895902][T11188]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  158.895919][T11188]  genl_family_rcv_msg_doit+0x215/0x300
[  158.895934][T11188]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  158.895951][T11188]  ? bpf_lsm_capable+0x9/0x20
[  158.895963][T11188]  ? security_capable+0x7e/0x2e0
[  158.895977][T11188]  genl_rcv_msg+0x60e/0x790
[  158.895989][T11188]  ? __pfx_genl_rcv_msg+0x10/0x10
[  158.895998][T11188]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  158.896017][T11188]  netlink_rcv_skb+0x208/0x470
[  158.896030][T11188]  ? __pfx_genl_rcv_msg+0x10/0x10
[  158.896039][T11188]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.896060][T11188]  ? down_read+0x1ad/0x2e0
[  158.896071][T11188]  genl_rcv+0x28/0x40
[  158.896079][T11188]  netlink_unicast+0x75c/0x8e0
[  158.896096][T11188]  netlink_sendmsg+0x805/0xb30
[  158.896113][T11188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.896127][T11188]  ? aa_sock_msg_perm+0x94/0x160
[  158.896137][T11188]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.896147][T11188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.896159][T11188]  __sock_sendmsg+0x21c/0x270
[  158.896172][T11188]  ____sys_sendmsg+0x505/0x830
[  158.896196][T11188]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.896216][T11188]  ? import_iovec+0x74/0xa0
[  158.896233][T11188]  ___sys_sendmsg+0x21f/0x2a0
[  158.896250][T11188]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.896285][T11188]  ? __fget_files+0x2a/0x420
[  158.896294][T11188]  ? __fget_files+0x3a0/0x420
[  158.896308][T11188]  __x64_sys_sendmsg+0x19b/0x260
[  158.896322][T11188]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.896341][T11188]  ? rcu_is_watching+0x15/0xb0
[  158.896354][T11188]  ? do_syscall_64+0xbe/0x3b0
[  158.896386][T11188]  do_syscall_64+0xfa/0x3b0
[  158.896397][T11188]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.896407][T11188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.896417][T11188]  ? exc_page_fault+0x9f/0xf0
[  158.896428][T11188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.896437][T11188] RIP: 0033:0x7ff0e638e9a9
[  158.896448][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.896456][T11188] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.896469][T11188] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  158.896476][T11188] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 0000000000000004
[  158.896483][T11188] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  158.896489][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.896496][T11188] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  158.896512][T11188]  </TASK>
[  159.229012][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'.
[  159.412539][T11223] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.415390][T11223] bridge0: port 4(bond3) entered blocking state
[  159.418613][T11223] bridge0: port 4(bond3) entered disabled state
[  159.421372][T11223] bond3: entered allmulticast mode
[  159.427349][T11223] bond3: entered promiscuous mode
[  159.653082][T11239] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.660007][T11239] bond0: (slave bond1): Enslaving as an active interface with an up link
[  159.955258][T11272] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  160.122923][T11283] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.144639][T11283] netlink: 'syz.1.1808': attribute type 7 has an invalid length.
[  160.449701][ T1089] wlan0: Trigger new scan to find an IBSS to join
[  161.237275][ T5833] tipc: Node number set to 2463580077
[  161.412951][   T53] wlan0: Creating new IBSS network, BSSID 0a:7a:c4:51:9f:28
[  161.454370][T11362] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.459108][T11362] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.520270][T11362] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.523990][T11362] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.563583][T11362] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.566629][T11362] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.660538][T11362] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.664295][T11362] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.731623][T11362] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  161.734653][T11362] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  161.746244][T11362] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  161.753253][T11362] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  161.765322][T11362] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  161.771655][T11362] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  161.783825][T11378] __nla_validate_parse: 15 callbacks suppressed
[  161.783840][T11378] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1838'.
[  161.785550][T11362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  161.794505][T11362] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  161.929649][T11385] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  161.930437][T11383] xt_SECMARK: invalid mode: 0
[  161.932130][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.2.1841 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  161.932148][T11385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.932156][T11385] Call Trace:
[  161.932163][T11385]  <TASK>
[  161.932169][T11385]  dump_stack_lvl+0x189/0x250
[  161.932193][T11385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.932205][T11385]  ? __pfx__printk+0x10/0x10
[  161.932226][T11385]  ? kernfs_path_from_node+0x2c/0x260
[  161.932239][T11385]  ? kernfs_path_from_node+0x2c/0x260
[  161.932248][T11385]  ? kernfs_path_from_node+0x2c/0x260
[  161.932258][T11385]  ? kernfs_path_from_node+0x22c/0x260
[  161.932267][T11385]  ? kernfs_path_from_node+0x2c/0x260
[  161.932278][T11385]  sysfs_warn_dup+0x8e/0xa0
[  161.932294][T11385]  sysfs_do_create_link_sd+0xc0/0x110
[  161.932309][T11385]  device_add_class_symlinks+0x1cf/0x240
[  161.932329][T11385]  device_add+0x475/0xb50
[  161.932346][T11385]  wiphy_register+0x199a/0x26b0
[  161.932369][T11385]  ? __pfx_wiphy_register+0x10/0x10
[  161.932380][T11385]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  161.932396][T11385]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  161.932411][T11385]  ieee80211_register_hw+0x33e1/0x4120
[  161.932433][T11385]  ? ieee80211_register_hw+0x1441/0x4120
[  161.932450][T11385]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  161.932464][T11385]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.932483][T11385]  ? __hrtimer_setup+0x187/0x210
[  161.932493][T11385]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  161.932509][T11385]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  161.932537][T11385]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  161.932550][T11385]  ? trace_kmalloc+0x1f/0xd0
[  161.932563][T11385]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  161.932578][T11385]  ? kstrndup+0xbf/0x160
[  161.932593][T11385]  hwsim_new_radio_nl+0xea4/0x1b10
[  161.932607][T11385]  ? __pfx___nla_validate_parse+0x10/0x10
[  161.932626][T11385]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.932645][T11385]  ? __nla_parse+0x40/0x60
[  161.932656][T11385]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  161.932671][T11385]  genl_family_rcv_msg_doit+0x215/0x300
[  161.932685][T11385]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.932725][T11385]  ? bpf_lsm_capable+0x9/0x20
[  161.932740][T11385]  ? security_capable+0x7e/0x2e0
[  161.932755][T11385]  genl_rcv_msg+0x60e/0x790
[  161.932768][T11385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.932778][T11385]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.932798][T11385]  netlink_rcv_skb+0x208/0x470
[  161.932812][T11385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.932822][T11385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.932842][T11385]  ? down_read+0x1ad/0x2e0
[  161.932855][T11385]  genl_rcv+0x28/0x40
[  161.932862][T11385]  netlink_unicast+0x75c/0x8e0
[  161.932879][T11385]  netlink_sendmsg+0x805/0xb30
[  161.932896][T11385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.932910][T11385]  ? aa_sock_msg_perm+0x94/0x160
[  161.932920][T11385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.932930][T11385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.932942][T11385]  __sock_sendmsg+0x21c/0x270
[  161.932954][T11385]  ____sys_sendmsg+0x505/0x830
[  161.932970][T11385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.932988][T11385]  ? import_iovec+0x74/0xa0
[  161.933002][T11385]  ___sys_sendmsg+0x21f/0x2a0
[  161.933016][T11385]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.933046][T11385]  ? __fget_files+0x2a/0x420
[  161.933055][T11385]  ? __fget_files+0x3a0/0x420
[  161.933074][T11385]  __x64_sys_sendmsg+0x19b/0x260
[  161.933088][T11385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.933106][T11385]  ? rcu_is_watching+0x15/0xb0
[  161.933119][T11385]  ? do_syscall_64+0xbe/0x3b0
[  161.933132][T11385]  do_syscall_64+0xfa/0x3b0
[  161.933141][T11385]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.933149][T11385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.933159][T11385]  ? exc_page_fault+0x9f/0xf0
[  161.933170][T11385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.933180][T11385] RIP: 0033:0x7f41a738e9a9
[  161.933192][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.933201][T11385] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.933212][T11385] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  161.933219][T11385] RDX: 0000000000080000 RSI: 0000200000000040 RDI: 0000000000000004
[  161.933225][T11385] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  161.933231][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.933237][T11385] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  161.933253][T11385]  </TASK>
[  162.243288][T11402] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1846'.
[  162.579181][T11415] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1849'.
[  162.589701][T11415] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1849'.
[  162.659402][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'.
[  162.664561][T11418] tc_dump_action: action bad kind
[  162.982437][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'.
[  162.989984][T11433] netlink: 'syz.0.1855': attribute type 15 has an invalid length.
[  163.275691][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  163.422913][T11452] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  163.425461][T11452] CPU: 1 UID: 0 PID: 11452 Comm: syz.0.1860 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  163.425477][T11452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.425484][T11452] Call Trace:
[  163.425491][T11452]  <TASK>
[  163.425497][T11452]  dump_stack_lvl+0x189/0x250
[  163.425518][T11452]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.425532][T11452]  ? __pfx__printk+0x10/0x10
[  163.425546][T11452]  ? kernfs_path_from_node+0x2c/0x260
[  163.425558][T11452]  ? kernfs_path_from_node+0x2c/0x260
[  163.425566][T11452]  ? kernfs_path_from_node+0x2c/0x260
[  163.425575][T11452]  ? kernfs_path_from_node+0x22c/0x260
[  163.425582][T11452]  ? kernfs_path_from_node+0x2c/0x260
[  163.425592][T11452]  sysfs_warn_dup+0x8e/0xa0
[  163.425637][T11452]  sysfs_do_create_link_sd+0xc0/0x110
[  163.425648][T11452]  device_add_class_symlinks+0x1cf/0x240
[  163.425668][T11452]  device_add+0x475/0xb50
[  163.425685][T11452]  wiphy_register+0x199a/0x26b0
[  163.425707][T11452]  ? __pfx_wiphy_register+0x10/0x10
[  163.425723][T11452]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  163.425743][T11452]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  163.425760][T11452]  ieee80211_register_hw+0x33e1/0x4120
[  163.425786][T11452]  ? ieee80211_register_hw+0x1441/0x4120
[  163.425805][T11452]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  163.425820][T11452]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.425839][T11452]  ? __hrtimer_setup+0x187/0x210
[  163.425850][T11452]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  163.425866][T11452]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  163.425895][T11452]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  163.425914][T11452]  ? trace_kmalloc+0x1f/0xd0
[  163.425929][T11452]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  163.425943][T11452]  ? kstrndup+0xbf/0x160
[  163.425960][T11452]  hwsim_new_radio_nl+0xea4/0x1b10
[  163.425975][T11452]  ? __pfx___nla_validate_parse+0x10/0x10
[  163.425994][T11452]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  163.426008][T11452]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  163.426023][T11452]  ? __nla_parse+0x40/0x60
[  163.426035][T11452]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  163.426048][T11452]  genl_family_rcv_msg_doit+0x215/0x300
[  163.426061][T11452]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  163.426077][T11452]  ? bpf_lsm_capable+0x9/0x20
[  163.426090][T11452]  ? security_capable+0x7e/0x2e0
[  163.426122][T11452]  genl_rcv_msg+0x60e/0x790
[  163.426136][T11452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.426145][T11452]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  163.426167][T11452]  netlink_rcv_skb+0x208/0x470
[  163.426181][T11452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.426192][T11452]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.426213][T11452]  ? down_read+0x1ad/0x2e0
[  163.426225][T11452]  genl_rcv+0x28/0x40
[  163.426232][T11452]  netlink_unicast+0x75c/0x8e0
[  163.426249][T11452]  netlink_sendmsg+0x805/0xb30
[  163.426265][T11452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.426279][T11452]  ? aa_sock_msg_perm+0x94/0x160
[  163.426289][T11452]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.426299][T11452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.426311][T11452]  __sock_sendmsg+0x21c/0x270
[  163.426323][T11452]  ____sys_sendmsg+0x505/0x830
[  163.426339][T11452]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.426357][T11452]  ? import_iovec+0x74/0xa0
[  163.426371][T11452]  ___sys_sendmsg+0x21f/0x2a0
[  163.426385][T11452]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.426416][T11452]  ? __fget_files+0x2a/0x420
[  163.426424][T11452]  ? __fget_files+0x3a0/0x420
[  163.426437][T11452]  __x64_sys_sendmsg+0x19b/0x260
[  163.426451][T11452]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.426469][T11452]  ? rcu_is_watching+0x15/0xb0
[  163.426482][T11452]  ? do_syscall_64+0xbe/0x3b0
[  163.426495][T11452]  do_syscall_64+0xfa/0x3b0
[  163.426504][T11452]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.426512][T11452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.426522][T11452]  ? exc_page_fault+0x9f/0xf0
[  163.426531][T11452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.426540][T11452] RIP: 0033:0x7f751c78e9a9
[  163.426551][T11452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.426559][T11452] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.426569][T11452] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  163.426576][T11452] RDX: 0000000000100000 RSI: 0000200000000040 RDI: 0000000000000004
[  163.426582][T11452] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  163.426587][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.426592][T11452] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  163.426629][T11452]  </TASK>
[  163.686294][T11457] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1862'.
[  163.714487][T11457] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1862'.
[  164.111705][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'.
[  164.473824][T11527] netlink: 'syz.0.1887': attribute type 4 has an invalid length.
[  165.416170][T11576] netlink: 'syz.1.1902': attribute type 2 has an invalid length.
[  165.495847][T11579] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.520969][T11625] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001
[  166.765828][T11643] veth1_to_bridge: mtu less than device minimum
[  166.964671][T11668] __nla_validate_parse: 16 callbacks suppressed
[  166.964689][T11668] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1931'.
[  167.060592][T11670] syzkaller0: entered promiscuous mode
[  167.062561][T11670] syzkaller0: entered allmulticast mode
[  167.377601][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881114d2400: rx timeout, send abort
[  167.382450][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881114d2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  169.039203][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  169.171676][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  169.245752][T11691] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1938'.
[  169.253342][T11691] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1938'.
[  169.366485][T11703] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  169.502979][T11720] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1948'.
[  169.506694][T11720] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1948'.
[  169.736747][T11746] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1959'.
[  169.740596][T11746] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1959'.
[  169.751423][T11749] netlink: del zone limit has 4 unknown bytes
[  169.854813][T11762] netlink: 'syz.0.1964': attribute type 6 has an invalid length.
[  170.119395][T11786] netlink: 'syz.2.1968': attribute type 25 has an invalid length.
[  170.123047][T11787] netlink: 'syz.2.1968': attribute type 25 has an invalid length.
[  170.135055][T11787] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1968'.
[  170.802591][T11837] netlink: 'syz.0.1988': attribute type 1 has an invalid length.
[  170.807697][T11837] netlink: 'syz.0.1988': attribute type 2 has an invalid length.
[  171.099289][T11857] Unsupported ieee802154 address type: 0
[  171.101695][T11857] sock: sock_timestamping_bind_phc: sock not bind to device
[  171.104666][T11857] raw_sendmsg: syz.1.1997 forgot to set AF_INET. Fix it!
[  171.123344][T11861] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  171.140423][T11861] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  171.203035][T11872] bridge0: port 1(erspan0) entered blocking state
[  171.205527][T11872] bridge0: port 1(erspan0) entered disabled state
[  171.209352][T11872] erspan0: entered allmulticast mode
[  171.212854][T11872] erspan0: entered promiscuous mode
[  171.219847][T11872] erspan0: left allmulticast mode
[  171.222196][T11872] erspan0: left promiscuous mode
[  171.231587][T11872] bridge0: port 1(erspan0) entered disabled state
[  172.291653][T11916] __nla_validate_parse: 20 callbacks suppressed
[  172.291677][T11916] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2014'.
[  172.328448][T11916] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2014'.
[  172.564797][T11943] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2023'.
[  172.571406][T11943] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2023'.
[  172.646040][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'.
[  172.717790][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'.
[  172.736809][T11950] SET target dimension over the limit!
[  172.777223][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'.
[  172.780313][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'.
[  172.786095][T11959] netlink: 'syz.0.2029': attribute type 10 has an invalid length.
[  172.809552][T11959] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  172.937479][T11958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.949348][T11970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2031'.
[  172.953974][T11970] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2031'.
[  173.370804][T11940] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  173.381162][T11980] netlink: 'syz.1.2034': attribute type 29 has an invalid length.
[  173.389862][T11980] netlink: 'syz.1.2034': attribute type 29 has an invalid length.
[  173.706705][T12004] 8021q: VLANs not supported on wg0
[  174.390240][T12038] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.394906][T12038] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.602573][T12038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.680377][T12038] veth1_macvtap: left allmulticast mode
[  174.699571][T12038] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.703021][T12038] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.705912][T12038] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.710268][T12038] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.758277][T12038] macsec0: left allmulticast mode
[  174.873711][T12048] xt_TPROXY: Can be used only with -p tcp or -p udp
[  174.940001][T12057] netlink: 'syz.0.2060': attribute type 3 has an invalid length.
[  175.470012][T12093] x_tables: unsorted underflow at hook 4
[  177.230927][T12164] sctp: [Deprecated]: syz.1.2097 (pid 12164) Use of int in maxseg socket option.
[  177.230927][T12164] Use struct sctp_assoc_value instead
[  179.362200][T12199] __nla_validate_parse: 13 callbacks suppressed
[  179.362222][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2104'.
[  179.369588][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2104'.
[  179.495631][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'.
[  179.499022][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'.
[  179.620814][T12220] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2111'.
[  179.975889][T12246] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2119'.
[  180.056203][T12253] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2121'.
[  180.108475][T12252] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2122'.
[  180.108575][T12255] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2122'.
[  180.471262][T12281] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  180.473958][T12281] CPU: 1 UID: 0 PID: 12281 Comm: syz.0.2129 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  180.473977][T12281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.473985][T12281] Call Trace:
[  180.473992][T12281]  <TASK>
[  180.474000][T12281]  dump_stack_lvl+0x189/0x250
[  180.474023][T12281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.474035][T12281]  ? __pfx__printk+0x10/0x10
[  180.474051][T12281]  ? kernfs_path_from_node+0x2c/0x260
[  180.474063][T12281]  ? kernfs_path_from_node+0x2c/0x260
[  180.474071][T12281]  ? kernfs_path_from_node+0x2c/0x260
[  180.474081][T12281]  ? kernfs_path_from_node+0x22c/0x260
[  180.474088][T12281]  ? kernfs_path_from_node+0x2c/0x260
[  180.474099][T12281]  sysfs_warn_dup+0x8e/0xa0
[  180.474113][T12281]  sysfs_do_create_link_sd+0xc0/0x110
[  180.474124][T12281]  device_add_class_symlinks+0x1cf/0x240
[  180.474140][T12281]  device_add+0x475/0xb50
[  180.474157][T12281]  wiphy_register+0x199a/0x26b0
[  180.474178][T12281]  ? __pfx_wiphy_register+0x10/0x10
[  180.474189][T12281]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  180.474206][T12281]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  180.474233][T12281]  ieee80211_register_hw+0x33e1/0x4120
[  180.474259][T12281]  ? ieee80211_register_hw+0x1441/0x4120
[  180.474279][T12281]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  180.474295][T12281]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.474315][T12281]  ? __hrtimer_setup+0x187/0x210
[  180.474326][T12281]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  180.474342][T12281]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  180.474371][T12281]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  180.474385][T12281]  ? trace_kmalloc+0x1f/0xd0
[  180.474396][T12281]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  180.474409][T12281]  ? kstrndup+0xbf/0x160
[  180.474423][T12281]  hwsim_new_radio_nl+0xea4/0x1b10
[  180.474438][T12281]  ? __pfx___nla_validate_parse+0x10/0x10
[  180.474457][T12281]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  180.474470][T12281]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  180.474485][T12281]  ? __nla_parse+0x40/0x60
[  180.474499][T12281]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  180.474521][T12281]  genl_family_rcv_msg_doit+0x215/0x300
[  180.474543][T12281]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  180.474567][T12281]  ? bpf_lsm_capable+0x9/0x20
[  180.474636][T12281]  ? security_capable+0x7e/0x2e0
[  180.474676][T12281]  genl_rcv_msg+0x60e/0x790
[  180.474704][T12281]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.474724][T12281]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  180.474753][T12281]  netlink_rcv_skb+0x208/0x470
[  180.474768][T12281]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.474780][T12281]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.474804][T12281]  ? down_read+0x1ad/0x2e0
[  180.474821][T12281]  genl_rcv+0x28/0x40
[  180.474831][T12281]  netlink_unicast+0x75c/0x8e0
[  180.474849][T12281]  netlink_sendmsg+0x805/0xb30
[  180.474868][T12281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.474884][T12281]  ? aa_sock_msg_perm+0x94/0x160
[  180.474898][T12281]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.474908][T12281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.474921][T12281]  __sock_sendmsg+0x21c/0x270
[  180.474935][T12281]  ____sys_sendmsg+0x505/0x830
[  180.474954][T12281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.474976][T12281]  ? import_iovec+0x74/0xa0
[  180.474990][T12281]  ___sys_sendmsg+0x21f/0x2a0
[  180.475005][T12281]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.475037][T12281]  ? __fget_files+0x2a/0x420
[  180.475047][T12281]  ? __fget_files+0x3a0/0x420
[  180.475060][T12281]  __x64_sys_sendmsg+0x19b/0x260
[  180.475075][T12281]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.475094][T12281]  ? rcu_is_watching+0x15/0xb0
[  180.475107][T12281]  ? do_syscall_64+0xbe/0x3b0
[  180.475121][T12281]  do_syscall_64+0xfa/0x3b0
[  180.475130][T12281]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.475139][T12281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.475150][T12281]  ? exc_page_fault+0x9f/0xf0
[  180.475162][T12281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.475172][T12281] RIP: 0033:0x7f751c78e9a9
[  180.475184][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.475194][T12281] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.475205][T12281] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  180.475213][T12281] RDX: 0000000002000000 RSI: 0000200000000040 RDI: 0000000000000004
[  180.475227][T12281] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  180.475234][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.475241][T12281] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  180.475259][T12281]  </TASK>
[  180.643615][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[  180.646205][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[  180.696265][T12286] sock: sock_timestamping_bind_phc: sock not bind to device
[  181.007945][T12298] netlink: 'syz.1.2135': attribute type 32 has an invalid length.
[  181.012059][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'.
[  181.016527][T12298] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  181.063955][T12304] batman_adv: batadv0: Adding interface: dummy0
[  181.065979][T12304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.075702][T12304] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  181.129804][T12306] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.133089][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.0.2138 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  181.133107][T12306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.133116][T12306] Call Trace:
[  181.133121][T12306]  <TASK>
[  181.133128][T12306]  dump_stack_lvl+0x189/0x250
[  181.133149][T12306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.133163][T12306]  ? __pfx__printk+0x10/0x10
[  181.133179][T12306]  ? kernfs_path_from_node+0x2c/0x260
[  181.133190][T12306]  ? kernfs_path_from_node+0x2c/0x260
[  181.133199][T12306]  ? kernfs_path_from_node+0x2c/0x260
[  181.133209][T12306]  ? kernfs_path_from_node+0x22c/0x260
[  181.133218][T12306]  ? kernfs_path_from_node+0x2c/0x260
[  181.133230][T12306]  sysfs_warn_dup+0x8e/0xa0
[  181.133247][T12306]  sysfs_do_create_link_sd+0xc0/0x110
[  181.133258][T12306]  device_add_class_symlinks+0x1cf/0x240
[  181.133275][T12306]  device_add+0x475/0xb50
[  181.133310][T12306]  wiphy_register+0x199a/0x26b0
[  181.133335][T12306]  ? __pfx_wiphy_register+0x10/0x10
[  181.133346][T12306]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.133363][T12306]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.133380][T12306]  ieee80211_register_hw+0x33e1/0x4120
[  181.133406][T12306]  ? ieee80211_register_hw+0x1441/0x4120
[  181.133425][T12306]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.133441][T12306]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.133461][T12306]  ? __hrtimer_setup+0x187/0x210
[  181.133474][T12306]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.133494][T12306]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.133540][T12306]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.133585][T12306]  ? trace_kmalloc+0x1f/0xd0
[  181.133609][T12306]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.133631][T12306]  ? kstrndup+0xbf/0x160
[  181.133656][T12306]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.133678][T12306]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.133711][T12306]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.133744][T12306]  ? __nla_parse+0x40/0x60
[  181.133763][T12306]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.133786][T12306]  genl_family_rcv_msg_doit+0x215/0x300
[  181.133807][T12306]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.133841][T12306]  ? bpf_lsm_capable+0x9/0x20
[  181.133874][T12306]  ? security_capable+0x7e/0x2e0
[  181.133896][T12306]  genl_rcv_msg+0x60e/0x790
[  181.133917][T12306]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.133933][T12306]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.133968][T12306]  netlink_rcv_skb+0x208/0x470
[  181.133991][T12306]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.134010][T12306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.134035][T12306]  ? down_read+0x1ad/0x2e0
[  181.134052][T12306]  genl_rcv+0x28/0x40
[  181.134061][T12306]  netlink_unicast+0x75c/0x8e0
[  181.134079][T12306]  netlink_sendmsg+0x805/0xb30
[  181.134098][T12306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.134115][T12306]  ? aa_sock_msg_perm+0x94/0x160
[  181.134128][T12306]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.134138][T12306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.134151][T12306]  __sock_sendmsg+0x21c/0x270
[  181.134165][T12306]  ____sys_sendmsg+0x505/0x830
[  181.134181][T12306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.134200][T12306]  ? import_iovec+0x74/0xa0
[  181.134215][T12306]  ___sys_sendmsg+0x21f/0x2a0
[  181.134230][T12306]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.134263][T12306]  ? __fget_files+0x2a/0x420
[  181.134273][T12306]  ? __fget_files+0x3a0/0x420
[  181.134287][T12306]  __x64_sys_sendmsg+0x19b/0x260
[  181.134302][T12306]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.134321][T12306]  ? rcu_is_watching+0x15/0xb0
[  181.134335][T12306]  ? do_syscall_64+0xbe/0x3b0
[  181.134348][T12306]  do_syscall_64+0xfa/0x3b0
[  181.134357][T12306]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.134367][T12306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.134377][T12306]  ? exc_page_fault+0x9f/0xf0
[  181.134388][T12306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.134398][T12306] RIP: 0033:0x7f751c78e9a9
[  181.134410][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.134419][T12306] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.134432][T12306] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  181.134439][T12306] RDX: 0000000003000000 RSI: 0000200000000040 RDI: 0000000000000004
[  181.134446][T12306] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  181.134453][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.134459][T12306] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  181.134476][T12306]  </TASK>
[  181.487181][T12318] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  181.487268][T12320] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  181.615274][T12331] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.618490][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.0.2146 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  181.618548][T12331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.618564][T12331] Call Trace:
[  181.618573][T12331]  <TASK>
[  181.618583][T12331]  dump_stack_lvl+0x189/0x250
[  181.618606][T12331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.618619][T12331]  ? __pfx__printk+0x10/0x10
[  181.618634][T12331]  ? kernfs_path_from_node+0x2c/0x260
[  181.618646][T12331]  ? kernfs_path_from_node+0x2c/0x260
[  181.618654][T12331]  ? kernfs_path_from_node+0x2c/0x260
[  181.618670][T12331]  ? kernfs_path_from_node+0x22c/0x260
[  181.618682][T12331]  ? kernfs_path_from_node+0x2c/0x260
[  181.618696][T12331]  sysfs_warn_dup+0x8e/0xa0
[  181.618719][T12331]  sysfs_do_create_link_sd+0xc0/0x110
[  181.618729][T12331]  device_add_class_symlinks+0x1cf/0x240
[  181.618755][T12331]  device_add+0x475/0xb50
[  181.618779][T12331]  wiphy_register+0x199a/0x26b0
[  181.618819][T12331]  ? __pfx_wiphy_register+0x10/0x10
[  181.618840][T12331]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.618880][T12331]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.618901][T12331]  ieee80211_register_hw+0x33e1/0x4120
[  181.618927][T12331]  ? ieee80211_register_hw+0x1441/0x4120
[  181.618947][T12331]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.618967][T12331]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.618995][T12331]  ? __hrtimer_setup+0x187/0x210
[  181.619015][T12331]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.619068][T12331]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.619113][T12331]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.619134][T12331]  ? trace_kmalloc+0x1f/0xd0
[  181.619173][T12331]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.619198][T12331]  ? kstrndup+0xbf/0x160
[  181.619225][T12331]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.619242][T12331]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.619262][T12331]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.619278][T12331]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  181.619294][T12331]  ? __nla_parse+0x40/0x60
[  181.619307][T12331]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.619320][T12331]  genl_family_rcv_msg_doit+0x215/0x300
[  181.619333][T12331]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.619349][T12331]  ? bpf_lsm_capable+0x9/0x20
[  181.619368][T12331]  ? security_capable+0x7e/0x2e0
[  181.619387][T12331]  genl_rcv_msg+0x60e/0x790
[  181.619408][T12331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.619422][T12331]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.619456][T12331]  netlink_rcv_skb+0x208/0x470
[  181.619478][T12331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.619496][T12331]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.619543][T12331]  ? down_read+0x1ad/0x2e0
[  181.619569][T12331]  genl_rcv+0x28/0x40
[  181.619584][T12331]  netlink_unicast+0x75c/0x8e0
[  181.619612][T12331]  netlink_sendmsg+0x805/0xb30
[  181.619639][T12331]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.619681][T12331]  ? aa_sock_msg_perm+0x94/0x160
[  181.619699][T12331]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.619712][T12331]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.619735][T12331]  __sock_sendmsg+0x21c/0x270
[  181.619760][T12331]  ____sys_sendmsg+0x505/0x830
[  181.619791][T12331]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.619810][T12331]  ? import_iovec+0x74/0xa0
[  181.619825][T12331]  ___sys_sendmsg+0x21f/0x2a0
[  181.619839][T12331]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.619878][T12331]  ? __fget_files+0x2a/0x420
[  181.619889][T12331]  ? __fget_files+0x3a0/0x420
[  181.619904][T12331]  __x64_sys_sendmsg+0x19b/0x260
[  181.619921][T12331]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.619943][T12331]  ? rcu_is_watching+0x15/0xb0
[  181.619959][T12331]  ? do_syscall_64+0xbe/0x3b0
[  181.619972][T12331]  do_syscall_64+0xfa/0x3b0
[  181.619981][T12331]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.619992][T12331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.620002][T12331]  ? exc_page_fault+0x9f/0xf0
[  181.620012][T12331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.620021][T12331] RIP: 0033:0x7f751c78e9a9
[  181.620034][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.620044][T12331] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.620057][T12331] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  181.620065][T12331] RDX: 0000000005000000 RSI: 0000200000000040 RDI: 0000000000000004
[  181.620072][T12331] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  181.620078][T12331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.620084][T12331] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  181.620101][T12331]  </TASK>
[  181.962813][T12351] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.966192][T12351] CPU: 0 UID: 0 PID: 12351 Comm: syz.0.2154 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  181.966211][T12351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.966219][T12351] Call Trace:
[  181.966227][T12351]  <TASK>
[  181.966247][T12351]  dump_stack_lvl+0x189/0x250
[  181.966271][T12351]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.966284][T12351]  ? __pfx__printk+0x10/0x10
[  181.966301][T12351]  ? kernfs_path_from_node+0x2c/0x260
[  181.966316][T12351]  ? kernfs_path_from_node+0x2c/0x260
[  181.966324][T12351]  ? kernfs_path_from_node+0x2c/0x260
[  181.966336][T12351]  ? kernfs_path_from_node+0x22c/0x260
[  181.966345][T12351]  ? kernfs_path_from_node+0x2c/0x260
[  181.966357][T12351]  sysfs_warn_dup+0x8e/0xa0
[  181.966374][T12351]  sysfs_do_create_link_sd+0xc0/0x110
[  181.966385][T12351]  device_add_class_symlinks+0x1cf/0x240
[  181.966405][T12351]  device_add+0x475/0xb50
[  181.966424][T12351]  wiphy_register+0x199a/0x26b0
[  181.966450][T12351]  ? __pfx_wiphy_register+0x10/0x10
[  181.966462][T12351]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.966480][T12351]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.966497][T12351]  ieee80211_register_hw+0x33e1/0x4120
[  181.966560][T12351]  ? ieee80211_register_hw+0x1441/0x4120
[  181.966581][T12351]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.966598][T12351]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.966618][T12351]  ? __hrtimer_setup+0x187/0x210
[  181.966634][T12351]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.966655][T12351]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.966689][T12351]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.966703][T12351]  ? trace_kmalloc+0x1f/0xd0
[  181.966716][T12351]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.966729][T12351]  ? kstrndup+0xbf/0x160
[  181.966744][T12351]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.966760][T12351]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.966780][T12351]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.966794][T12351]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  181.966810][T12351]  ? __nla_parse+0x40/0x60
[  181.966823][T12351]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.966837][T12351]  genl_family_rcv_msg_doit+0x215/0x300
[  181.966852][T12351]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.966870][T12351]  ? bpf_lsm_capable+0x9/0x20
[  181.966884][T12351]  ? security_capable+0x7e/0x2e0
[  181.966899][T12351]  genl_rcv_msg+0x60e/0x790
[  181.966912][T12351]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.966921][T12351]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.966942][T12351]  netlink_rcv_skb+0x208/0x470
[  181.966956][T12351]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.966987][T12351]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.967012][T12351]  ? down_read+0x1ad/0x2e0
[  181.967027][T12351]  genl_rcv+0x28/0x40
[  181.967037][T12351]  netlink_unicast+0x75c/0x8e0
[  181.967056][T12351]  netlink_sendmsg+0x805/0xb30
[  181.967076][T12351]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.967093][T12351]  ? aa_sock_msg_perm+0x94/0x160
[  181.967106][T12351]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.967117][T12351]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.967130][T12351]  __sock_sendmsg+0x21c/0x270
[  181.967144][T12351]  ____sys_sendmsg+0x505/0x830
[  181.967161][T12351]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.967180][T12351]  ? import_iovec+0x74/0xa0
[  181.967195][T12351]  ___sys_sendmsg+0x21f/0x2a0
[  181.967210][T12351]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.967263][T12351]  ? __fget_files+0x2a/0x420
[  181.967273][T12351]  ? __fget_files+0x3a0/0x420
[  181.967298][T12351]  __x64_sys_sendmsg+0x19b/0x260
[  181.967332][T12351]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.967355][T12351]  ? rcu_is_watching+0x15/0xb0
[  181.967374][T12351]  ? do_syscall_64+0xbe/0x3b0
[  181.967392][T12351]  do_syscall_64+0xfa/0x3b0
[  181.967402][T12351]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.967412][T12351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.967422][T12351]  ? exc_page_fault+0x9f/0xf0
[  181.967432][T12351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.967442][T12351] RIP: 0033:0x7f751c78e9a9
[  181.967456][T12351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.967467][T12351] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.967481][T12351] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  181.967489][T12351] RDX: 0000000007000000 RSI: 0000200000000040 RDI: 0000000000000004
[  181.967497][T12351] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  181.967504][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.967510][T12351] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  181.967553][T12351]  </TASK>
[  182.378811][T12372] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  182.382514][T12372] CPU: 1 UID: 0 PID: 12372 Comm: syz.1.2162 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  182.382542][T12372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.382555][T12372] Call Trace:
[  182.382564][T12372]  <TASK>
[  182.382573][T12372]  dump_stack_lvl+0x189/0x250
[  182.382606][T12372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.382629][T12372]  ? __pfx__printk+0x10/0x10
[  182.382652][T12372]  ? kernfs_path_from_node+0x2c/0x260
[  182.382670][T12372]  ? kernfs_path_from_node+0x2c/0x260
[  182.382684][T12372]  ? kernfs_path_from_node+0x2c/0x260
[  182.382703][T12372]  ? kernfs_path_from_node+0x22c/0x260
[  182.382719][T12372]  ? kernfs_path_from_node+0x2c/0x260
[  182.382752][T12372]  sysfs_warn_dup+0x8e/0xa0
[  182.382797][T12372]  sysfs_do_create_link_sd+0xc0/0x110
[  182.382817][T12372]  device_add_class_symlinks+0x1cf/0x240
[  182.382846][T12372]  device_add+0x475/0xb50
[  182.382873][T12372]  wiphy_register+0x199a/0x26b0
[  182.382909][T12372]  ? __pfx_wiphy_register+0x10/0x10
[  182.382929][T12372]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  182.382960][T12372]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  182.382987][T12372]  ieee80211_register_hw+0x33e1/0x4120
[  182.383047][T12372]  ? ieee80211_register_hw+0x1441/0x4120
[  182.383082][T12372]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  182.383111][T12372]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  182.383152][T12372]  ? __hrtimer_setup+0x187/0x210
[  182.383175][T12372]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  182.383203][T12372]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  182.383249][T12372]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  182.383271][T12372]  ? trace_kmalloc+0x1f/0xd0
[  182.383293][T12372]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  182.383318][T12372]  ? kstrndup+0xbf/0x160
[  182.383345][T12372]  hwsim_new_radio_nl+0xea4/0x1b10
[  182.383371][T12372]  ? __pfx___nla_validate_parse+0x10/0x10
[  182.383404][T12372]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  182.383429][T12372]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  182.383458][T12372]  ? __nla_parse+0x40/0x60
[  182.383512][T12372]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  182.383539][T12372]  genl_family_rcv_msg_doit+0x215/0x300
[  182.383565][T12372]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  182.383597][T12372]  ? bpf_lsm_capable+0x9/0x20
[  182.383619][T12372]  ? security_capable+0x7e/0x2e0
[  182.383644][T12372]  genl_rcv_msg+0x60e/0x790
[  182.383668][T12372]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.383684][T12372]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  182.383719][T12372]  netlink_rcv_skb+0x208/0x470
[  182.383742][T12372]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.383761][T12372]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  182.383799][T12372]  ? down_read+0x1ad/0x2e0
[  182.383820][T12372]  genl_rcv+0x28/0x40
[  182.383833][T12372]  netlink_unicast+0x75c/0x8e0
[  182.383863][T12372]  netlink_sendmsg+0x805/0xb30
[  182.383893][T12372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.383919][T12372]  ? aa_sock_msg_perm+0x94/0x160
[  182.383937][T12372]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.383953][T12372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.383975][T12372]  __sock_sendmsg+0x21c/0x270
[  182.383997][T12372]  ____sys_sendmsg+0x505/0x830
[  182.384026][T12372]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.384058][T12372]  ? import_iovec+0x74/0xa0
[  182.384084][T12372]  ___sys_sendmsg+0x21f/0x2a0
[  182.384126][T12372]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.384189][T12372]  ? __fget_files+0x2a/0x420
[  182.384205][T12372]  ? __fget_files+0x3a0/0x420
[  182.384232][T12372]  __x64_sys_sendmsg+0x19b/0x260
[  182.384261][T12372]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  182.384295][T12372]  ? rcu_is_watching+0x15/0xb0
[  182.384318][T12372]  ? do_syscall_64+0xbe/0x3b0
[  182.384342][T12372]  do_syscall_64+0xfa/0x3b0
[  182.384359][T12372]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.384377][T12372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.384395][T12372]  ? exc_page_fault+0x9f/0xf0
[  182.384415][T12372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.384432][T12372] RIP: 0033:0x7ff0e638e9a9
[  182.384450][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.384467][T12372] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.384520][T12372] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  182.384534][T12372] RDX: 0000000008000000 RSI: 0000200000000040 RDI: 0000000000000004
[  182.384545][T12372] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  182.384558][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.384569][T12372] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  182.384598][T12372]  </TASK>
[  182.614086][T12379] netlink: 'syz.0.2166': attribute type 26 has an invalid length.
[  182.833821][T12398] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.838068][T12398] bond0: (slave bond2): Enslaving as an active interface with an up link
[  183.241446][T12430] sock: sock_timestamping_bind_phc: sock not bind to device
[  183.620257][T12446] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  183.929159][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.014606][T12464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.399509][T12488] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.401768][T12488] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002
[  184.655782][T12508] openvswitch: netlink: IP tunnel dst address not specified
[  184.901512][T12520] __nla_validate_parse: 74 callbacks suppressed
[  184.901526][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'.
[  185.106731][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'.
[  185.236383][T12535] sock: sock_timestamping_bind_phc: sock not bind to device
[  185.241112][T12536] sock: sock_timestamping_bind_phc: sock not bind to device
[  185.280546][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'.
[  185.295080][T12539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.300485][T12539] syzkaller0: entered promiscuous mode
[  185.302569][T12539] syzkaller0: entered allmulticast mode
[  185.314981][T12538] tipc: Resetting bearer <eth:syzkaller0>
[  185.334912][T12538] tipc: Disabling bearer <eth:syzkaller0>
[  185.443471][T12543] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2223'.
[  185.710803][T12557] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.790852][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'.
[  185.826016][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'.
[  185.841448][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'.
[  185.844718][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2230'.
[  185.916172][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2232'.
[  186.383486][T12601] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  186.426335][T12601] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2240'.
[  186.554208][T12611] gtp1: entered promiscuous mode
[  186.556099][T12611] gtp1: entered allmulticast mode
[  186.767371][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  186.851020][T12622] nftables ruleset with unbound set
[  187.773830][   T33] audit: type=1107 audit(1752935323.420:7): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''(dC΋[FJ&X"`=/{N}a'UlZF۝g̑+$651CtdX4'
[  187.828364][T12641] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  187.845054][T12641] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  188.408256][T12683] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  188.410966][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.1.2264 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  188.410984][T12683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.410991][T12683] Call Trace:
[  188.410999][T12683]  <TASK>
[  188.411006][T12683]  dump_stack_lvl+0x189/0x250
[  188.411029][T12683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.411042][T12683]  ? __pfx__printk+0x10/0x10
[  188.411057][T12683]  ? kernfs_path_from_node+0x2c/0x260
[  188.411069][T12683]  ? kernfs_path_from_node+0x2c/0x260
[  188.411078][T12683]  ? kernfs_path_from_node+0x2c/0x260
[  188.411088][T12683]  ? kernfs_path_from_node+0x22c/0x260
[  188.411097][T12683]  ? kernfs_path_from_node+0x2c/0x260
[  188.411107][T12683]  sysfs_warn_dup+0x8e/0xa0
[  188.411146][T12683]  sysfs_do_create_link_sd+0xc0/0x110
[  188.411158][T12683]  device_add_class_symlinks+0x1cf/0x240
[  188.411177][T12683]  device_add+0x475/0xb50
[  188.411194][T12683]  wiphy_register+0x199a/0x26b0
[  188.411217][T12683]  ? __pfx_wiphy_register+0x10/0x10
[  188.411229][T12683]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  188.411245][T12683]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  188.411260][T12683]  ieee80211_register_hw+0x33e1/0x4120
[  188.411282][T12683]  ? ieee80211_register_hw+0x1441/0x4120
[  188.411299][T12683]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  188.411314][T12683]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.411333][T12683]  ? __hrtimer_setup+0x187/0x210
[  188.411343][T12683]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  188.411360][T12683]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  188.411389][T12683]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  188.411402][T12683]  ? trace_kmalloc+0x1f/0xd0
[  188.411417][T12683]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  188.411429][T12683]  ? kstrndup+0xbf/0x160
[  188.411443][T12683]  hwsim_new_radio_nl+0xea4/0x1b10
[  188.411457][T12683]  ? __pfx___nla_validate_parse+0x10/0x10
[  188.411475][T12683]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.411494][T12683]  ? __nla_parse+0x40/0x60
[  188.411506][T12683]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  188.411523][T12683]  genl_family_rcv_msg_doit+0x215/0x300
[  188.411538][T12683]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.411553][T12683]  ? bpf_lsm_capable+0x9/0x20
[  188.411565][T12683]  ? security_capable+0x7e/0x2e0
[  188.411578][T12683]  genl_rcv_msg+0x60e/0x790
[  188.411590][T12683]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.411599][T12683]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.411618][T12683]  netlink_rcv_skb+0x208/0x470
[  188.411634][T12683]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.411645][T12683]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.411665][T12683]  ? down_read+0x1ad/0x2e0
[  188.411677][T12683]  genl_rcv+0x28/0x40
[  188.411684][T12683]  netlink_unicast+0x75c/0x8e0
[  188.411701][T12683]  netlink_sendmsg+0x805/0xb30
[  188.411718][T12683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.411732][T12683]  ? aa_sock_msg_perm+0x94/0x160
[  188.411743][T12683]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.411752][T12683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.411772][T12683]  __sock_sendmsg+0x21c/0x270
[  188.411789][T12683]  ____sys_sendmsg+0x505/0x830
[  188.411807][T12683]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.411826][T12683]  ? import_iovec+0x74/0xa0
[  188.411841][T12683]  ___sys_sendmsg+0x21f/0x2a0
[  188.411856][T12683]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.411886][T12683]  ? __fget_files+0x2a/0x420
[  188.411895][T12683]  ? __fget_files+0x3a0/0x420
[  188.411908][T12683]  __x64_sys_sendmsg+0x19b/0x260
[  188.411922][T12683]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.411945][T12683]  ? do_syscall_64+0xbe/0x3b0
[  188.411957][T12683]  do_syscall_64+0xfa/0x3b0
[  188.411966][T12683]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.411976][T12683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.411986][T12683]  ? exc_page_fault+0x9f/0xf0
[  188.411997][T12683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.412006][T12683] RIP: 0033:0x7ff0e638e9a9
[  188.412017][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.412025][T12683] RSP: 002b:00007ff0e7251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.412037][T12683] RAX: ffffffffffffffda RBX: 00007ff0e65b5fa0 RCX: 00007ff0e638e9a9
[  188.412045][T12683] RDX: 0000000040000000 RSI: 0000200000000040 RDI: 0000000000000004
[  188.412051][T12683] RBP: 00007ff0e6410d69 R08: 0000000000000000 R09: 0000000000000000
[  188.412059][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.412065][T12683] R13: 0000000000000000 R14: 00007ff0e65b5fa0 R15: 00007ffde3b4bac8
[  188.412080][T12683]  </TASK>
[  188.708774][T12691] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000
[  189.123996][T12719] netlink: 'syz.0.2276': attribute type 1 has an invalid length.
[  189.126469][T12719] netlink: 'syz.0.2276': attribute type 2 has an invalid length.
[  189.189487][T12723] xt_policy: neither incoming nor outgoing policy selected
[  189.390114][T12748] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  189.393107][T12748] netlink: 'syz.0.2285': attribute type 2 has an invalid length.
[  189.450311][T12744] netlink: 'syz.1.2283': attribute type 8 has an invalid length.
[  189.691153][T12767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.694216][T12767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.813282][T12770] netlink: 'syz.1.2292': attribute type 1 has an invalid length.
[  189.816157][T12770] netlink: 'syz.1.2292': attribute type 2 has an invalid length.
[  190.235301][T12796] bond0: entered promiscuous mode
[  190.242081][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.251276][T12796] bond0: left promiscuous mode
[  190.253230][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.311177][T12796] bond0: entered promiscuous mode
[  190.313703][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.324189][T12796] bond0: left promiscuous mode
[  190.325778][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.384740][T12796] bond0: entered promiscuous mode
[  190.386861][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.407190][T12796] bond0: left promiscuous mode
[  190.408780][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.449951][T12796] bond0: entered promiscuous mode
[  190.453520][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.458326][T12796] bond0: left promiscuous mode
[  190.460045][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.504070][T12796] bond0: entered promiscuous mode
[  190.507668][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.512517][T12796] bond0: left promiscuous mode
[  190.514496][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.562632][T12796] bond0: entered promiscuous mode
[  190.564365][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.579911][T12796] bond0: left promiscuous mode
[  190.581775][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.634344][T12796] bond0: entered promiscuous mode
[  190.635974][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.649851][T12796] bond0: left promiscuous mode
[  190.651676][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.695314][T12796] bond0: entered promiscuous mode
[  190.701357][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.707127][T12796] bond0: left promiscuous mode
[  190.709107][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.763517][T12796] bond0: entered promiscuous mode
[  190.765634][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.770142][T12796] bond0: left promiscuous mode
[  190.771872][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.782737][T12810] __nla_validate_parse: 10 callbacks suppressed
[  190.782758][T12810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2307'.
[  190.823866][T12796] bond0: entered promiscuous mode
[  190.825725][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.830111][T12796] bond0: left promiscuous mode
[  190.832063][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.896194][T12796] bond0: entered promiscuous mode
[  190.899472][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.907546][T12796] bond0: left promiscuous mode
[  190.913912][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  190.940003][T12814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2309'.
[  190.961036][T12796] bond0: entered promiscuous mode
[  190.963823][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  190.974679][T12796] bond0: left promiscuous mode
[  190.976791][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  191.034103][T12796] bond0: entered promiscuous mode
[  191.047203][T12796] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  191.064809][T12796] bond0: left promiscuous mode
[  191.066758][T12796] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  191.112556][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'.
[  191.118490][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2310'.
[  191.198685][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'.
[  192.507783][T12870] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2325'.
[  192.537698][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'.
[  192.541369][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'.
[  192.642789][T12879] netlink: 'syz.0.2328': attribute type 161 has an invalid length.
[  192.764446][T12881] syzkaller1: entered promiscuous mode
[  192.766909][T12881] syzkaller1: entered allmulticast mode
[  193.901070][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  194.061576][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'.
[  194.344181][T12965] netlink: 'syz.1.2353': attribute type 1 has an invalid length.
[  194.355068][T12965] netlink: 'syz.1.2353': attribute type 2 has an invalid length.
[  194.362345][T12965] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2353'.
[  194.722306][ T5826] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  194.727874][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  194.727904][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.727915][ T5826] Call Trace:
[  194.727924][ T5826]  <TASK>
[  194.727932][ T5826]  dump_stack_lvl+0x189/0x250
[  194.727961][ T5826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.727980][ T5826]  ? __pfx__printk+0x10/0x10
[  194.728014][ T5826]  dump_header+0xd3/0x480
[  194.728038][ T5826]  oom_kill_process+0x3b6/0x950
[  194.728058][ T5826]  out_of_memory+0xf09/0x12a0
[  194.728091][ T5826]  ? __pfx_out_of_memory+0x10/0x10
[  194.728122][ T5826]  mem_cgroup_out_of_memory+0x145/0x240
[  194.728141][ T5826]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  194.728167][ T5826]  ? _raw_spin_unlock+0x28/0x50
[  194.728190][ T5826]  ? memcg1_oom_prepare+0x37f/0x450
[  194.728214][ T5826]  try_charge_memcg+0xdff/0x1290
[  194.728249][ T5826]  ? __pfx_try_charge_memcg+0x10/0x10
[  194.728287][ T5826]  charge_memcg+0x9f/0x180
[  194.728308][ T5826]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  194.728329][ T5826]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  194.728360][ T5826]  __read_swap_cache_async+0x28c/0x510
[  194.728389][ T5826]  swap_cluster_readahead+0x305/0x5f0
[  194.728412][ T5826]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  194.728441][ T5826]  ? get_vma_policy+0x27c/0x3c0
[  194.728465][ T5826]  swapin_readahead+0x17d/0xb50
[  194.728482][ T5826]  ? __pfx_filemap_get_entry+0x10/0x10
[  194.728506][ T5826]  ? __pfx_swapin_readahead+0x10/0x10
[  194.728526][ T5826]  ? __filemap_get_folio+0x9a6/0xaf0
[  194.728548][ T5826]  ? swap_cache_get_folio+0xae/0x3b0
[  194.728568][ T5826]  do_swap_page+0x525/0x5ac0
[  194.728593][ T5826]  ? __lock_acquire+0xab9/0xd20
[  194.728621][ T5826]  ? do_swap_page+0x184/0x5ac0
[  194.728638][ T5826]  ? __pfx_do_swap_page+0x10/0x10
[  194.728658][ T5826]  ? __pfx_default_wake_function+0x10/0x10
[  194.728675][ T5826]  ? ___pte_offset_map+0x21f/0x2c0
[  194.728699][ T5826]  ? pte_offset_map_rw_nolock+0xea/0x160
[  194.728721][ T5826]  __handle_mm_fault+0xf3e/0x5620
[  194.728764][ T5826]  ? __lock_acquire+0xab9/0xd20
[  194.728796][ T5826]  ? __pfx___handle_mm_fault+0x10/0x10
[  194.728815][ T5826]  ? lock_vma_under_rcu+0xf8/0x710
[  194.728847][ T5826]  ? lock_vma_under_rcu+0xf8/0x710
[  194.728868][ T5826]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  194.728896][ T5826]  handle_mm_fault+0x40a/0x8e0
[  194.728925][ T5826]  do_user_addr_fault+0xa81/0x1390
[  194.728947][ T5826]  ? rcu_is_watching+0x15/0xb0
[  194.728965][ T5826]  ? trace_page_fault_user+0x84/0x1e0
[  194.728981][ T5826]  exc_page_fault+0x76/0xf0
[  194.729001][ T5826]  asm_exc_page_fault+0x26/0x30
[  194.729016][ T5826] RIP: 0033:0x7f751c7c1268
[  194.729031][ T5826] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  194.729045][ T5826] RSP: 002b:00007fff61d23b00 EFLAGS: 00010293
[  194.729061][ T5826] RAX: 0000000000000000 RBX: 00000000000008ac RCX: 00007f751c7c1265
[  194.729071][ T5826] RDX: 00007fff61d23b40 RSI: 0000000000000000 RDI: 0000000000000000
[  194.729081][ T5826] RBP: 00007fff61d23bac R08: 0000000000000000 R09: 0000000000000000
[  194.729090][ T5826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  194.729099][ T5826] R13: 00000000000927c0 R14: 000000000002f6b2 R15: 00007fff61d23c00
[  194.729125][ T5826]  </TASK>
[  194.729164][ T5826] memory: usage 307200kB, limit 307200kB, failcnt 313
[  194.873292][ T5826] memory+swap: usage 280100kB, limit 9007199254740988kB, failcnt 0
[  194.876501][ T5826] kmem: usage 279820kB, limit 9007199254740988kB, failcnt 0
[  194.879679][ T5826] Memory cgroup stats for /syz0:
[  194.880057][ T5826] cache 0
[  194.883367][ T5826] rss 0
[  194.884581][ T5826] rss_huge 0
[  194.885935][ T5826] shmem 0
[  194.887353][ T5826] mapped_file 0
[  194.891423][ T5826] dirty 0
[  194.893305][ T5826] writeback 0
[  194.894761][ T5826] workingset_refault_anon 3
[  194.896832][ T5826] workingset_refault_file 32
[  194.898981][ T5826] swap 204800
[  194.900476][ T5826] swapcached 4096
[  194.902478][ T5826] pgpgin 49218
[  194.903913][ T5826] pgpgout 49217
[  194.905348][ T5826] pgfault 129545
[  194.906699][ T5826] pgmajfault 9
[  194.929931][ T5826] inactive_anon 0
[  194.937181][ T5826] active_anon 4096
[  194.939194][ T5826] inactive_file 0
[  194.941057][ T5826] active_file 0
[  194.942791][ T5826] unevictable 0
[  194.946001][ T5826] hierarchical_memory_limit 314572800
[  194.957473][ T5826] hierarchical_memsw_limit 9223372036854771712
[  194.960546][ T5826] total_cache 0
[  194.962245][ T5826] total_rss 0
[  194.963780][ T5826] total_rss_huge 0
[  194.965270][ T5826] total_shmem 0
[  194.966634][ T5826] total_mapped_file 0
[  194.977221][ T5826] total_dirty 0
[  194.978879][ T5826] total_writeback 0
[  194.980451][ T5826] total_workingset_refault_anon 3
[  194.982465][ T5826] total_workingset_refault_file 32
[  194.984535][ T5826] total_swap 204800
[  194.990975][ T5826] total_swapcached 4096
[  194.992397][ T5826] total_pgpgin 49218
[  194.993793][ T5826] total_pgpgout 49217
[  194.995084][ T5826] total_pgfault 129545
[  194.996447][ T5826] total_pgmajfault 9
[  195.004163][ T5826] total_inactive_anon 0
[  195.005498][ T5826] total_active_anon 4096
[  195.006821][ T5826] total_inactive_file 0
[  195.014333][ T5826] total_active_file 0
[  195.016023][ T5826] total_unevictable 0
[  195.018087][ T5826] anon_cost 0
[  195.021448][ T5826] file_cost 0
[  195.022612][ T5826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2345,pid=12933,uid=0
[  195.038158][ T5826] Memory cgroup out of memory: Killed process 12934 (syz.0.2345) total-vm:101884kB, anon-rss:1076kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  195.131124][T12987] netlink: 'syz.1.2360': attribute type 1 has an invalid length.
[  195.133706][T12987] netlink: 'syz.1.2360': attribute type 2 has an invalid length.
[  195.581527][T13014] netlink: 'syz.2.2368': attribute type 1 has an invalid length.
[  195.589662][T13014] netlink: 'syz.2.2368': attribute type 2 has an invalid length.
[  195.774147][T13019] netlink: 'syz.2.2370': attribute type 6 has an invalid length.
[  195.993952][T13028] __nla_validate_parse: 4 callbacks suppressed
[  195.993965][T13028] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2374'.
[  196.026708][T13026] batman_adv: batadv0: Adding interface: ip6gretap0
[  196.035847][T13026] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.048247][T13026] batman_adv: batadv0: Interface activated: ip6gretap0
[  196.184404][T13040] netlink: 'syz.0.2376': attribute type 1 has an invalid length.
[  196.224905][T13040] 8021q: adding VLAN 0 to HW filter on device bond3
[  196.235503][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'.
[  196.270752][T13040] veth5: entered promiscuous mode
[  196.276285][T13040] bond3: (slave veth5): Enslaving as an active interface with a down link
[  196.297830][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'.
[  196.326367][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'.
[  196.344437][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'.
[  196.349989][T13054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2381'.
[  196.353717][T13056] sock: sock_timestamping_bind_phc: sock not bind to device
[  196.761670][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  196.767867][T13079] netlink: 'syz.1.2391': attribute type 21 has an invalid length.
[  196.773497][T13079] netlink: 'syz.1.2391': attribute type 6 has an invalid length.
[  196.776611][T13079] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2391'.
[  196.853745][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  196.862085][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  196.960971][T13099] netdevsim netdevsim1 : renamed from netdevsim0
[  197.035058][T13103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.225750][T13120] tipc: Enabling of bearer <udp:Vyz1> rejected, failed to enable media
[  197.346580][T13127] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.561636][T13141] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  197.564905][T13141] team0: Device ipvlan2 is already an upper device of the team interface
[  197.850314][T13156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.883249][T13106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.554735][T13172] sock: sock_timestamping_bind_phc: sock not bind to device
[  198.588299][T13174] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  198.590934][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.2.2418 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  198.590949][T13174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.590956][T13174] Call Trace:
[  198.590962][T13174]  <TASK>
[  198.590968][T13174]  dump_stack_lvl+0x189/0x250
[  198.590989][T13174]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.591007][T13174]  ? __pfx__printk+0x10/0x10
[  198.591022][T13174]  ? kernfs_path_from_node+0x2c/0x260
[  198.591034][T13174]  ? kernfs_path_from_node+0x2c/0x260
[  198.591043][T13174]  ? kernfs_path_from_node+0x2c/0x260
[  198.591052][T13174]  ? kernfs_path_from_node+0x22c/0x260
[  198.591060][T13174]  ? kernfs_path_from_node+0x2c/0x260
[  198.591070][T13174]  sysfs_warn_dup+0x8e/0xa0
[  198.591083][T13174]  sysfs_do_create_link_sd+0xc0/0x110
[  198.591093][T13174]  device_add_class_symlinks+0x1cf/0x240
[  198.591111][T13174]  device_add+0x475/0xb50
[  198.591126][T13174]  wiphy_register+0x199a/0x26b0
[  198.591150][T13174]  ? __pfx_wiphy_register+0x10/0x10
[  198.591160][T13174]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  198.591176][T13174]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  198.591192][T13174]  ieee80211_register_hw+0x33e1/0x4120
[  198.591214][T13174]  ? ieee80211_register_hw+0x1441/0x4120
[  198.591231][T13174]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  198.591246][T13174]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.591266][T13174]  ? __hrtimer_setup+0x187/0x210
[  198.591277][T13174]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  198.591294][T13174]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  198.591322][T13174]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  198.591334][T13174]  ? trace_kmalloc+0x1f/0xd0
[  198.591348][T13174]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  198.591361][T13174]  ? kstrndup+0xbf/0x160
[  198.591376][T13174]  hwsim_new_radio_nl+0xea4/0x1b10
[  198.591390][T13174]  ? __pfx___nla_validate_parse+0x10/0x10
[  198.591409][T13174]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  198.591423][T13174]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  198.591439][T13174]  ? __nla_parse+0x40/0x60
[  198.591451][T13174]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  198.591465][T13174]  genl_family_rcv_msg_doit+0x215/0x300
[  198.591478][T13174]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  198.591494][T13174]  ? bpf_lsm_capable+0x9/0x20
[  198.591536][T13174]  ? security_capable+0x7e/0x2e0
[  198.591554][T13174]  genl_rcv_msg+0x60e/0x790
[  198.591567][T13174]  ? __pfx_genl_rcv_msg+0x10/0x10
[  198.591576][T13174]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  198.591597][T13174]  netlink_rcv_skb+0x208/0x470
[  198.591612][T13174]  ? __pfx_genl_rcv_msg+0x10/0x10
[  198.591622][T13174]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  198.591644][T13174]  ? down_read+0x1ad/0x2e0
[  198.591655][T13174]  genl_rcv+0x28/0x40
[  198.591663][T13174]  netlink_unicast+0x75c/0x8e0
[  198.591680][T13174]  netlink_sendmsg+0x805/0xb30
[  198.591697][T13174]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.591711][T13174]  ? aa_sock_msg_perm+0x94/0x160
[  198.591722][T13174]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  198.591732][T13174]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.591744][T13174]  __sock_sendmsg+0x21c/0x270
[  198.591757][T13174]  ____sys_sendmsg+0x505/0x830
[  198.591773][T13174]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.591791][T13174]  ? import_iovec+0x74/0xa0
[  198.591805][T13174]  ___sys_sendmsg+0x21f/0x2a0
[  198.591819][T13174]  ? __pfx____sys_sendmsg+0x10/0x10
[  198.591850][T13174]  ? __fget_files+0x2a/0x420
[  198.591859][T13174]  ? __fget_files+0x3a0/0x420
[  198.591872][T13174]  __x64_sys_sendmsg+0x19b/0x260
[  198.591886][T13174]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  198.591905][T13174]  ? rcu_is_watching+0x15/0xb0
[  198.591935][T13174]  ? do_syscall_64+0xbe/0x3b0
[  198.591953][T13174]  do_syscall_64+0xfa/0x3b0
[  198.591962][T13174]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.591972][T13174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.591983][T13174]  ? exc_page_fault+0x9f/0xf0
[  198.591993][T13174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.592006][T13174] RIP: 0033:0x7f41a738e9a9
[  198.592017][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.592026][T13174] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.592038][T13174] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  198.592045][T13174] RDX: 0700000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  198.592051][T13174] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  198.592058][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.592064][T13174] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  198.592080][T13174]  </TASK>
[  198.902622][T13189] syzkaller0: entered promiscuous mode
[  198.904676][T13189] syzkaller0: entered allmulticast mode
[  198.961671][T13193] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  198.964869][T13193] CPU: 1 UID: 0 PID: 13193 Comm: syz.2.2426 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  198.964896][T13193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.964908][T13193] Call Trace:
[  198.964918][T13193]  <TASK>
[  198.964926][T13193]  dump_stack_lvl+0x189/0x250
[  198.964958][T13193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.964991][T13193]  ? __pfx__printk+0x10/0x10
[  198.965012][T13193]  ? kernfs_path_from_node+0x2c/0x260
[  198.965027][T13193]  ? kernfs_path_from_node+0x2c/0x260
[  198.965043][T13193]  ? kernfs_path_from_node+0x2c/0x260
[  198.965062][T13193]  ? kernfs_path_from_node+0x22c/0x260
[  198.965079][T13193]  ? kernfs_path_from_node+0x2c/0x260
[  198.965100][T13193]  sysfs_warn_dup+0x8e/0xa0
[  198.965123][T13193]  sysfs_do_create_link_sd+0xc0/0x110
[  198.965153][T13193]  device_add_class_symlinks+0x1cf/0x240
[  198.965182][T13193]  device_add+0x475/0xb50
[  198.965207][T13193]  wiphy_register+0x199a/0x26b0
[  198.965244][T13193]  ? __pfx_wiphy_register+0x10/0x10
[  198.965265][T13193]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  198.965291][T13193]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  198.965314][T13193]  ieee80211_register_hw+0x33e1/0x4120
[  198.965356][T13193]  ? ieee80211_register_hw+0x1441/0x4120
[  198.965384][T13193]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  198.965410][T13193]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.965460][T13193]  ? __hrtimer_setup+0x187/0x210
[  198.965475][T13193]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  198.965499][T13193]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  198.965578][T13193]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  198.965602][T13193]  ? trace_kmalloc+0x1f/0xd0
[  198.965624][T13193]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  198.965647][T13193]  ? kstrndup+0xbf/0x160
[  198.965671][T13193]  hwsim_new_radio_nl+0xea4/0x1b10
[  198.965695][T13193]  ? __pfx___nla_validate_parse+0x10/0x10
[  198.965730][T13193]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  198.965762][T13193]  ? __nla_parse+0x40/0x60
[  198.965784][T13193]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  198.965814][T13193]  genl_family_rcv_msg_doit+0x215/0x300
[  198.965841][T13193]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  198.965865][T13193]  ? bpf_lsm_capable+0x9/0x20
[  198.965887][T13193]  ? security_capable+0x7e/0x2e0
[  198.965912][T13193]  genl_rcv_msg+0x60e/0x790
[  198.965937][T13193]  ? __pfx_genl_rcv_msg+0x10/0x10
[  198.965948][T13193]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  198.965994][T13193]  netlink_rcv_skb+0x208/0x470
[  198.966022][T13193]  ? __pfx_genl_rcv_msg+0x10/0x10
[  198.966039][T13193]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  198.966075][T13193]  ? down_read+0x1ad/0x2e0
[  198.966123][T13193]  genl_rcv+0x28/0x40
[  198.966137][T13193]  netlink_unicast+0x75c/0x8e0
[  198.966171][T13193]  netlink_sendmsg+0x805/0xb30
[  198.966205][T13193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.966228][T13193]  ? aa_sock_msg_perm+0x94/0x160
[  198.966250][T13193]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  198.966265][T13193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.966284][T13193]  __sock_sendmsg+0x21c/0x270
[  198.966308][T13193]  ____sys_sendmsg+0x505/0x830
[  198.966338][T13193]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.966371][T13193]  ? import_iovec+0x74/0xa0
[  198.966398][T13193]  ___sys_sendmsg+0x21f/0x2a0
[  198.966423][T13193]  ? __pfx____sys_sendmsg+0x10/0x10
[  198.966484][T13193]  ? __fget_files+0x2a/0x420
[  198.966534][T13193]  ? __fget_files+0x3a0/0x420
[  198.966562][T13193]  __x64_sys_sendmsg+0x19b/0x260
[  198.966591][T13193]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  198.966631][T13193]  ? do_syscall_64+0xbe/0x3b0
[  198.966656][T13193]  do_syscall_64+0xfa/0x3b0
[  198.966675][T13193]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.966691][T13193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.966702][T13193]  ? exc_page_fault+0x9f/0xf0
[  198.966720][T13193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.966738][T13193] RIP: 0033:0x7f41a738e9a9
[  198.966758][T13193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.966774][T13193] RSP: 002b:00007f41a81c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.966791][T13193] RAX: ffffffffffffffda RBX: 00007f41a75b5fa0 RCX: 00007f41a738e9a9
[  198.966803][T13193] RDX: 0800000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  198.966817][T13193] RBP: 00007f41a7410d69 R08: 0000000000000000 R09: 0000000000000000
[  198.966831][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.966840][T13193] R13: 0000000000000000 R14: 00007f41a75b5fa0 R15: 00007ffdd9631568
[  198.966878][T13193]  </TASK>
[  199.216035][T13198] sock: sock_timestamping_bind_phc: sock not bind to device
[  199.312759][T13207] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  199.432815][T13211] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) !
[  199.501493][T13220] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  199.503934][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.0.2435 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  199.503964][T13220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.503970][T13220] Call Trace:
[  199.503975][T13220]  <TASK>
[  199.503981][T13220]  dump_stack_lvl+0x189/0x250
[  199.503999][T13220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.504011][T13220]  ? __pfx__printk+0x10/0x10
[  199.504025][T13220]  ? kernfs_path_from_node+0x2c/0x260
[  199.504035][T13220]  ? kernfs_path_from_node+0x2c/0x260
[  199.504042][T13220]  ? kernfs_path_from_node+0x2c/0x260
[  199.504051][T13220]  ? kernfs_path_from_node+0x22c/0x260
[  199.504059][T13220]  ? kernfs_path_from_node+0x2c/0x260
[  199.504068][T13220]  sysfs_warn_dup+0x8e/0xa0
[  199.504083][T13220]  sysfs_do_create_link_sd+0xc0/0x110
[  199.504093][T13220]  device_add_class_symlinks+0x1cf/0x240
[  199.504108][T13220]  device_add+0x475/0xb50
[  199.504123][T13220]  wiphy_register+0x199a/0x26b0
[  199.504149][T13220]  ? __pfx_wiphy_register+0x10/0x10
[  199.504171][T13220]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  199.504196][T13220]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  199.504216][T13220]  ieee80211_register_hw+0x33e1/0x4120
[  199.504245][T13220]  ? ieee80211_register_hw+0x1441/0x4120
[  199.504285][T13220]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  199.504311][T13220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.504338][T13220]  ? __hrtimer_setup+0x187/0x210
[  199.504356][T13220]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  199.504386][T13220]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  199.504437][T13220]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  199.504459][T13220]  ? trace_kmalloc+0x1f/0xd0
[  199.504507][T13220]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  199.504531][T13220]  ? kstrndup+0xbf/0x160
[  199.504558][T13220]  hwsim_new_radio_nl+0xea4/0x1b10
[  199.504584][T13220]  ? __pfx___nla_validate_parse+0x10/0x10
[  199.504619][T13220]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  199.504661][T13220]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  199.504689][T13220]  ? __nla_parse+0x40/0x60
[  199.504712][T13220]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  199.504736][T13220]  genl_family_rcv_msg_doit+0x215/0x300
[  199.504759][T13220]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.504781][T13220]  ? bpf_lsm_capable+0x9/0x20
[  199.504800][T13220]  ? security_capable+0x7e/0x2e0
[  199.504818][T13220]  genl_rcv_msg+0x60e/0x790
[  199.504839][T13220]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.504855][T13220]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  199.504884][T13220]  netlink_rcv_skb+0x208/0x470
[  199.504902][T13220]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.504916][T13220]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.504945][T13220]  ? down_read+0x1ad/0x2e0
[  199.504966][T13220]  genl_rcv+0x28/0x40
[  199.504979][T13220]  netlink_unicast+0x75c/0x8e0
[  199.505010][T13220]  netlink_sendmsg+0x805/0xb30
[  199.505041][T13220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.505066][T13220]  ? aa_sock_msg_perm+0x94/0x160
[  199.505085][T13220]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.505102][T13220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.505124][T13220]  __sock_sendmsg+0x21c/0x270
[  199.505146][T13220]  ____sys_sendmsg+0x505/0x830
[  199.505183][T13220]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.505216][T13220]  ? import_iovec+0x74/0xa0
[  199.505243][T13220]  ___sys_sendmsg+0x21f/0x2a0
[  199.505270][T13220]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.505327][T13220]  ? __fget_files+0x2a/0x420
[  199.505341][T13220]  ? __fget_files+0x3a0/0x420
[  199.505365][T13220]  __x64_sys_sendmsg+0x19b/0x260
[  199.505391][T13220]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.505432][T13220]  ? do_syscall_64+0xbe/0x3b0
[  199.505486][T13220]  do_syscall_64+0xfa/0x3b0
[  199.505504][T13220]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.505521][T13220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.505538][T13220]  ? exc_page_fault+0x9f/0xf0
[  199.505553][T13220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.505568][T13220] RIP: 0033:0x7f751c78e9a9
[  199.505586][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.505600][T13220] RSP: 002b:00007f751d6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.505618][T13220] RAX: ffffffffffffffda RBX: 00007f751c9b5fa0 RCX: 00007f751c78e9a9
[  199.505630][T13220] RDX: 0e00000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  199.505642][T13220] RBP: 00007f751c810d69 R08: 0000000000000000 R09: 0000000000000000
[  199.505653][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.505663][T13220] R13: 0000000000000000 R14: 00007f751c9b5fa0 R15: 00007fff61d237e8
[  199.505691][T13220]  </TASK>
[  199.769334][T13227] nbd: must specify a device to reconfigure
[  200.014413][T13225] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  200.027834][T13225] bond0 (unregistering): Released all slaves
[  200.133332][T13238] validate_nla: 1 callbacks suppressed
[  200.133349][T13238] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  200.141358][T13238] netlink: 'syz.1.2441': attribute type 2 has an invalid length.
[  200.633521][T13273] sock: sock_timestamping_bind_phc: sock not bind to device
[  201.580509][T13315] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.983635][T13317] __nla_validate_parse: 19 callbacks suppressed
[  203.983648][T13317] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2466'.
[  203.983849][T13323] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2466'.
[  203.994256][T13321] sock: sock_timestamping_bind_phc: sock not bind to device
[  204.041669][T13327] xt_TPROXY: Can be used only with -p tcp or -p udp
[  204.128377][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2468'.
[  204.210735][T13342] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2472'.
[  204.219560][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2472'.
[  204.325204][T13345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2473'.
[  204.604785][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  205.148058][T13371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.291203][T13381] netlink: 'syz.1.2483': attribute type 11 has an invalid length.
[  205.428966][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'.
[  205.504931][T13402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'.
[  205.508446][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'.
[  205.888098][T13439] netlink: 'syz.1.2503': attribute type 1 has an invalid length.
[  205.892069][T13439] netlink: 'syz.1.2503': attribute type 1 has an invalid length.
[  206.095023][T13454] netlink: 'syz.1.2508': attribute type 18 has an invalid length.
[  206.901757][T13480] sock: sock_timestamping_bind_phc: sock not bind to device
[  207.082227][T13489] sock: sock_timestamping_bind_phc: sock not bind to device
[  207.150779][T13496] x_tables: duplicate underflow at hook 1
[  207.153424][T13496] x_tables: duplicate underflow at hook 1
[  207.156243][T13496] x_tables: duplicate underflow at hook 1
[  207.613402][T13534] sock: sock_timestamping_bind_phc: sock not bind to device
[  208.030175][T13575] netlink: 'syz.2.2552': attribute type 12 has an invalid length.
[  208.194083][T13586] sock: sock_timestamping_bind_phc: sock not bind to device
[  208.307371][T13598] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  208.310692][T13598] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  209.000314][T13630] __nla_validate_parse: 21 callbacks suppressed
[  209.000329][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2578'.
[  209.005583][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2578'.
[  209.181013][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'.
[  209.190095][T13643] erspan0: entered promiscuous mode
[  209.367354][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'.
[  209.473213][T13665] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2585'.
[  209.481015][T13665] Bluetooth: MGMT ver 1.23
[  209.627441][T13675] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2586'.
[  209.892693][T13694] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2593'.
[  209.903920][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2593'.
[  210.244156][T13714] IPv6: sit3: Disabled Multicast RS
[  210.248224][T13714] sit3: entered allmulticast mode
[  210.369377][T13721] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2603'.
[  210.654819][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2610'.
[  211.553279][T13767] sock: sock_timestamping_bind_phc: sock not bind to device
[  211.844103][T13785] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.864581][T13785] bond0: (slave rose0): Enslaving as an active interface with an up link
[  212.321552][   T33] audit: type=1804 audit(1752935347.970:8): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2635" name="/newroot/789/cgroup.controllers" dev="tmpfs" ino=4034 res=1 errno=0
[  212.339445][   T33] audit: type=1800 audit(1752935347.970:9): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.377157][   T33] audit: type=1800 audit(1752935347.970:10): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.407391][   T33] audit: type=1800 audit(1752935347.970:11): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.431664][   T33] audit: type=1800 audit(1752935347.970:12): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.449448][   T33] audit: type=1800 audit(1752935347.970:13): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.458225][   T33] audit: type=1800 audit(1752935347.970:14): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.466045][   T33] audit: type=1800 audit(1752935347.970:15): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.478045][   T33] audit: type=1800 audit(1752935347.970:16): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.485409][   T33] audit: type=1800 audit(1752935347.970:17): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2635" name="cgroup.controllers" dev="tmpfs" ino=4034 res=0 errno=0
[  212.785401][T13856] sock: sock_timestamping_bind_phc: sock not bind to device
[  212.789021][T13857] sock: sock_timestamping_bind_phc: sock not bind to device
[  212.898533][T13866] pim6reg1: entered promiscuous mode
[  212.900509][T13866] pim6reg1: entered allmulticast mode
[  212.925464][T13866] 8021q: adding VLAN 0 to HW filter on device bond4
[  212.929664][T13866] bond0: (slave bond4): Enslaving as an active interface with an up link
[  214.055411][T13894] __nla_validate_parse: 14 callbacks suppressed
[  214.055431][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'.
[  214.062406][T13894] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2654'.
[  214.078682][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  214.256899][T13907] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  214.264306][T13906] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  214.308945][T13910] 8021q: adding VLAN 0 to HW filter on device team0
[  214.329956][T13911] sock: sock_timestamping_bind_phc: sock not bind to device
[  214.355456][T13896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2655'.
[  214.363850][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'.
[  214.463098][T13919] netlink: 'syz.1.2661': attribute type 2 has an invalid length.
[  214.715230][T13944] netlink: 'syz.1.2669': attribute type 8 has an invalid length.
[  214.850079][T13957] sock: sock_timestamping_bind_phc: sock not bind to device
[  214.949040][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'.
[  215.158566][T13984] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.2683'.
[  215.161471][T13984] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.2683'.
[  215.186481][T13988] sock: sock_timestamping_bind_phc: sock not bind to device
[  215.222120][T13992] netlink: 'syz.1.2687': attribute type 32 has an invalid length.
[  215.264254][T13996] netlink: 'syz.0.2688': attribute type 83 has an invalid length.
[  215.353722][T14005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.409051][T14005] syzkaller0: entered promiscuous mode
[  215.410880][T14005] syzkaller0: entered allmulticast mode
[  215.422219][T14005] tipc: Resetting bearer <eth:syzkaller0>
[  215.428801][T14011] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  215.490153][T14013] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2691'.
[  215.511597][T14011] netlink: 'syz.2.2690': attribute type 10 has an invalid length.
[  215.532661][T14011] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  215.820255][T14037] sock: sock_timestamping_bind_phc: sock not bind to device
[  215.923235][T14049] xt_CT: No such helper "snmp"
[  216.022998][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'.
[  216.049151][T14057] IPVS: persistence engine module ip_vs_pe_ not found
[  216.052441][T14057] IPVS: set_ctl: invalid protocol: 34327 172.20.20.170:2
[  216.410753][T14087] sock: sock_timestamping_bind_phc: sock not bind to device
[  217.095824][T14107] bridge0: port 5(erspan0) entered blocking state
[  217.098235][T14107] bridge0: port 5(erspan0) entered disabled state
[  217.100325][T14107] erspan0: entered allmulticast mode
[  217.102977][T14107] erspan0: entered promiscuous mode
[  217.106242][T14107] erspan0: left allmulticast mode
[  217.108068][T14107] erspan0: left promiscuous mode
[  217.109948][T14107] bridge0: port 5(erspan0) entered disabled state
[  217.553899][T14111] sock: sock_timestamping_bind_phc: sock not bind to device
[  217.726146][T14131] bridge0: port 3(erspan0) entered blocking state
[  217.728978][T14131] bridge0: port 3(erspan0) entered disabled state
[  217.731717][T14131] erspan0: entered allmulticast mode
[  217.734982][T14131] erspan0: entered promiscuous mode
[  217.740224][T14131] erspan0: left allmulticast mode
[  217.742642][T14131] erspan0: left promiscuous mode
[  217.745182][T14131] bridge0: port 3(erspan0) entered disabled state
[  218.179490][T14164] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.355462][T14173] netlink: 'syz.0.2745': attribute type 1 has an invalid length.
[  218.358491][T14173] netlink: 'syz.0.2745': attribute type 1 has an invalid length.
[  218.418215][T14175] netlink: 'syz.0.2746': attribute type 9 has an invalid length.
[  219.139126][T14226] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  219.170959][T14223] __nla_validate_parse: 9 callbacks suppressed
[  219.170972][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2758'.
[  219.176184][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'.
[  219.212358][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2760'.
[  219.212375][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2760'.
[  219.407735][T14247] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  219.452669][T14247] bond4: entered promiscuous mode
[  219.454387][T14247] bond4: entered allmulticast mode
[  219.456461][T14247] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.563256][T14254] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2769'.
[  219.567496][T14254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2769'.
[  219.850805][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'.
[  219.860944][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'.
[  219.868990][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2779'.
[  219.876216][T14277] validate_nla: 3 callbacks suppressed
[  219.876234][T14277] netlink: 'syz.0.2777': attribute type 1 has an invalid length.
[  219.881902][T14277] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2777'.
[  220.091383][T14304] sock: sock_timestamping_bind_phc: sock not bind to device
[  221.406373][T14376] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  221.410035][T14376] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  221.413513][T14376] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  221.418126][T14376] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  221.444981][T14376] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  221.452055][T14376] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  221.460459][T14376] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  221.468814][T14376] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  221.682015][T14387] netlink: 'syz.0.2810': attribute type 4 has an invalid length.
[  221.852347][T14393] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  221.856098][T14393] netlink: 'syz.0.2812': attribute type 12 has an invalid length.
[  225.887464][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  257.887808][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  289.887215][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  321.889290][   T26] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  353.888801][ T1088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  385.887677][ T1088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  417.888236][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  449.887793][ T1088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  481.887321][   T27] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  513.887721][   T27] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)

VM DIAGNOSIS:
14:34:22  Registers:
info registers vcpu 0

CPU#0
RAX=73ae65944a7a3500 RBX=ffffffff81976c78 RCX=73ae65944a7a3500 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560178d1f680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000002788e8aa 0000000000000007 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=00000000348f0e9b 000000000000015e
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f971f06388395100 RBX=ffffffff81976c78 RCX=f971f06388395100 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560178d1e600 CR3=000000010e352000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
